Difference between revisions of "Fast Thunder"

From ForensicsWiki
Jump to: navigation, search
(Example queries)
(Example queries)
 
(2 intermediate revisions by the same user not shown)
Line 25: Line 25:
  
 
The timestamp:
 
The timestamp:
* TaskBase.CreationTime is stored as BIGINT and contains a POSIX timestamp shifted 24-bits to the left, e.g.
+
* TaskBase.CreationTime and TaskBase.CompletionTime are stored as BIGINT and contains a POSIX timestamp shifted 24-bits to the left, e.g.
 
<pre>
 
<pre>
 
printf "0x%x\n" 22090158425767936
 
printf "0x%x\n" 22090158425767936
Line 39: Line 39:
 
To get an overview of the tasks:
 
To get an overview of the tasks:
 
<pre>
 
<pre>
SELECT datetime((TaskBase.CreationTime >> 24), "unixepoch"), TotalReceiveSize, TotalSendSize, Url, ReferenceUrl, Name, Description, SavePath FROM TaskBase;
+
SELECT datetime((TaskBase.CreationTime >> 24), "unixepoch"), datetime((TaskBase.CompletionTime >> 24) , "unixepoch"), TotalReceiveSize, TotalSendSize, Url, ReferenceUrl, Name, Description, SavePath FROM TaskBase;
 
</pre>
 
</pre>
  

Latest revision as of 11:56, 21 March 2012

Fast Thunder (aka Xunlei) is a download manager developed by Thunder Networking Technologies.


SuperDownload database

The SuperDownload database can be found at:

On Windows

C:\Program Files\Thunder Network\Thunder\data\SdInfoDb.dat

This file uses the SQLite database format.

The timestamp:

  • SuperDownloadInfo.ContentDownloadTime is stored as BIGINT and contains a POSIX timestamp
  • SuperDownloadResource.DownloadTime is stored as BIGINT and contains presumably a POSIX timestamp

Task database

The Task database can be found at:

On Windows

C:\Program Files\Thunder Network\Thunder\Profiles\TaskDb.dat

The timestamp:

  • TaskBase.CreationTime and TaskBase.CompletionTime are stored as BIGINT and contains a POSIX timestamp shifted 24-bits to the left, e.g.
printf "0x%x\n" 22090158425767936
0x4e7ae1ce000000

date -d @$(( 22029112998625280 >> 24 ))
Thu Aug 11 06:37:35 CEST 2011

Example queries

Some example queries:

To get an overview of the tasks:

SELECT datetime((TaskBase.CreationTime >> 24), "unixepoch"), datetime((TaskBase.CompletionTime >> 24) , "unixepoch"), TotalReceiveSize, TotalSendSize, Url, ReferenceUrl, Name, Description, SavePath FROM TaskBase;

See Also

External Links