How to read Datastore.edb

xinso · Mar 3, 2016

atplsx said: ↑

hmm. your choice
Click to expand...

Yes. Thank you again atplsx. See you.

alexwilson · Mar 3, 2016

xinso, you can run ESEDatabaseView.exe /table DataStore.edb tbFiles /scomma DataStore.csv to export the tbFiles table as a csv file. You then need to take the Urls column, convert the hex data to bytes and parse it as a list of URLs. I haven't figured out the exact format that is used but for the beginning you could just look for "http" and read until the null-terminator. Or ask Nir Sofer how he implemented the "Show Binary URL As String" option.
Code:
$csv = Import-Csv .\DataStore.csv


foreach ($urlData in $csv.Urls)
{
    if ($urlData.Length -ne 0)
    {
        $bytes = $urlData.Split(" ") | foreach { [Convert]::ToByte($_, 16) }
        $url = [System.Text.Encoding]::Unicode.GetString($bytes)
        $url = $url.Substring($url.IndexOf("http"))
        $url = $url.Substring(0, $url.IndexOf("`0"))
        $url
    }
}

xinso · Mar 3, 2016

alexwilson said: ↑

xinso, you can run ESEDatabaseView.exe /table DataStore.edb tbFiles /scomma DataStore.csv to export the tbFiles table as a csv file. You then need to take the Urls column, convert the hex data to bytes and parse it as a list of URLs. I haven't figured out the exact format that is used but for the beginning you could just look for "http" and read until the null-terminator. Or ask Nir Sofer how he implemented the "Show Binary URL As String" option.
Code:
$csv = Import-Csv .\DataStore.csv


foreach ($urlData in $csv.Urls)
{
    if ($urlData.Length -ne 0)
    {
        $bytes = $urlData.Split(" ") | foreach { [Convert]::ToByte($_, 16) }
        $url = [System.Text.Encoding]::Unicode.GetString($bytes)
        $url = $url.Substring($url.IndexOf("http"))
        $url = $url.Substring(0, $url.IndexOf("`0"))
        $url
    }
}
Click to expand...

Yeah. It shows 22 lp.cab. Thanks. But it is far beyond my ability to carry on... hex data?

Code:

174,3890740,80 A5 30 50 99 15 D1 01,1,1,FF FF FF FF FF FF FF FF,0,1,F2 9D 3A CC 89 CD 92 C8 BB 0B 76 7A 43 49 62 CB 5F A6 DD 1C,SHA1,3B FA 9B 03 0A 70 19 07 37 68 F1 2C FE 22 51 7E A8 70 ED E3 A4 14 CD F6 4C 6E D7 F3 79 2E BE AD 00,SHA256,lp.cab,,B4 F4 82 94 43 E3 B6 43 B1 70 9A 65 BC 82 2C 77 68 00 74 00 74 00 70 00 3A 00 2F 00 2F 00 64 00 6F 00 77 00 6E 00 6C 00 6F 00 61 00 64 00 2E 00 77 00 69 00 6E 00 64 00 6F 00 77 00 73 00 75 00 70 00 64 00 61 00 74 00 65 00 2E 00 63 00 6F 00 6D 00 2F 00 64 00 2F 00 6D 00 73 00 64 00 6F 00 77 00 6E 00 6C 00 6F 00 61 00 64 00 2F 00 75 00 70 00 64 00 61 00 74 00 65 00 2F 00 73 00 6F 00 66 00 74 00 77 00 61 00 72 00 65 00 2F 00 75 00 70 00 64 00 74 00 2F 00 32 00 30 00 31 00 35 00 2F 00 31 00 31 00 2F 00 6C 00 70 00 5F 00 66 00 32 00 39 00 64 00 33 00 61 00 63 00 63 00 38 00 39 00 63 00 64 00 39 00 32 00 63 00 38 00 62 00 62 00 30 00 62 00 37 00 36 00 37 00 61 00 34 00 33 00 34 00 39 00 36 00 32 00 63 00 62 00 35 00 66 00 61 00 36 00 64 00 64 00 31 00 63 00 2E 00 63 00 61 00 62 00 00 00 62 00,,,,

175,21366444,00 7C D5 B9 0D 73 D1 01,1,1,FF FF FF FF FF FF FF FF,0,1,53 E5 89 04 AB CF E5 25 69 78 FF C8 31 1C 2E 18 69 39 EF 83,SHA1,EC 31 F8 12 D5 59 F8 B4 2E DF 22 74 5E 69 24 6B BD 85 66 4B 9D 1F C9 92 B3 3F EB 09 E5 31 EA 94 00,SHA256,lp.cab,,B4 F4 82 94 43 E3 B6 43 B1 70 9A 65 BC 82 2C 77 68 00 74 00 74 00 70 00 3A 00 2F 00 2F 00 64 00 6F 00 77 00 6E 00 6C 00 6F 00 61 00 64 00 2E 00 77 00 69 00 6E 00 64 00 6F 00 77 00 73 00 75 00 70 00 64 00 61 00 74 00 65 00 2E 00 63 00 6F 00 6D 00 2F 00 64 00 2F 00 6D 00 73 00 64 00 6F 00 77 00 6E 00 6C 00 6F 00 61 00 64 00 2F 00 75 00 70 00 64 00 61 00 74 00 65 00 2F 00 73 00 6F 00 66 00 74 00 77 00 61 00 72 00 65 00 2F 00 75 00 70 00 64 00 74 00 2F 00 32 00 30 00 31 00 36 00 2F 00 30 00 33 00 2F 00 6C 00 70 00 5F 00 35 00 33 00 65 00 35 00 38 00 39 00 30 00 34 00 61 00 62 00 63 00 66 00 65 00 35 00 32 00 35 00 36 00 39 00 37 00 38 00 66 00 66 00 63 00 38 00 33 00 31 00 31 00 63 00 32 00 65 00 31 00 38 00 36 00 39 00 33 00 39 00 65 00 66 00 38 00 33 00 2E 00 63 00 61 00 62 00 00 00 62 00,,,,

176,27730188,00 74 26 8A 0D 73 D1 01,1,1,FF FF FF FF FF FF FF FF,0,1,22 58 1A 22 1B E5 75 90 4A B3 7E 64 9E DA A5 0D 63 14 8E 63,SHA1,6B 5C 1C 99 61 59 C1 BB B6 47 5D 25 35 08 49 D5 07 CE 72 84 54 75 96 E8 37 C3 B0 0F 60 08 B3 DA 00,SHA256,lp.cab,,B4 F4 82 94 43 E3 B6 43 B1 70 9A 65 BC 82 2C 77 68 00 74 00 74 00 70 00 3A 00 2F 00 2F 00 64 00 6F 00 77 00 6E 00 6C 00 6F 00 61 00 64 00 2E 00 77 00 69 00 6E 00 64 00 6F 00 77 00 73 00 75 00 70 00 64 00 61 00 74 00 65 00 2E 00 63 00 6F 00 6D 00 2F 00 64 00 2F 00 6D 00 73 00 64 00 6F 00 77 00 6E 00 6C 00 6F 00 61 00 64 00 2F 00 75 00 70 00 64 00 61 00 74 00 65 00 2F 00 73 00 6F 00 66 00 74 00 77 00 61 00 72 00 65 00 2F 00 75 00 70 00 64 00 74 00 2F 00 32 00 30 00 31 00 36 00 2F 00 30 00 33 00 2F 00 6C 00 70 00 5F 00 32 00 32 00 35 00 38 00 31 00 61 00 32 00 32 00 31 00 62 00 65 00 35 00 37 00 35 00 39 00 30 00 34 00 61 00 62 00 33 00 37 00 65 00 36 00 34 00 39 00 65 00 64 00 61 00 61 00 35 00 30 00 64 00 36 00 33 00 31 00 34 00 38 00 65 00 36 00 33 00 2E 00 63 00 61 00 62 00 00 00 00 00,,,,

177,28100144,80 D2 22 6E 0D 73 D1 01,1,1,FF FF FF FF FF FF FF FF,0,1,4B F8 B5 97 87 58 45 60 A3 92 82 35 61 A6 73 EE 45 F9 E9 26,SHA1,ED F5 B1 4D E8 FC 01 E9 A6 87 C2 09 29 3E 6E C3 68 B3 7D 2E 0F 18 A0 ED F3 BF 3B F3 7C D2 A8 99 00,SHA256,lp.cab,,B4 F4 82 94 43 E3 B6 43 B1 70 9A 65 BC 82 2C 77 68 00 74 00 74 00 70 00 3A 00 2F 00 2F 00 64 00 6F 00 77 00 6E 00 6C 00 6F 00 61 00 64 00 2E 00 77 00 69 00 6E 00 64 00 6F 00 77 00 73 00 75 00 70 00 64 00 61 00 74 00 65 00 2E 00 63 00 6F 00 6D 00 2F 00 64 00 2F 00 6D 00 73 00 64 00 6F 00 77 00 6E 00 6C 00 6F 00 61 00 64 00 2F 00 75 00 70 00 64 00 61 00 74 00 65 00 2F 00 73 00 6F 00 66 00 74 00 77 00 61 00 72 00 65 00 2F 00 75 00 70 00 64 00 74 00 2F 00 32 00 30 00 31 00 36 00 2F 00 30 00 33 00 2F 00 6C 00 70 00 5F 00 34 00 62 00 66 00 38 00 62 00 35 00 39 00 37 00 38 00 37 00 35 00 38 00 34 00 35 00 36 00 30 00 61 00 33 00 39 00 32 00 38 00 32 00 33 00 35 00 36 00 31 00 61 00 36 00 37 00 33 00 65 00 65 00 34 00 35 00 66 00 39 00 65 00 39 00 32 00 36 00 2E 00 63 00 61 00 62 00 00 00 62 00,,,,

178,28070624,00 E7 1A AF 0D 73 D1 01,1,1,FF FF FF FF FF FF FF FF,0,1,66 78 85 6D B3 A8 8B 1C 55 E9 15 01 7F 71 81 78 B5 B5 33 74,SHA1,2B EC 24 44 28 BF 8A 44 6B 14 20 D0 E5 35 A6 6A CD 5B 69 BC EA 67 88 3D 6A BF 86 A8 C3 3C 92 66 00,SHA256,lp.cab,,B4 F4 82 94 43 E3 B6 43 B1 70 9A 65 BC 82 2C 77 68 00 74 00 74 00 70 00 3A 00 2F 00 2F 00 64 00 6F 00 77 00 6E 00 6C 00 6F 00 61 00 64 00 2E 00 77 00 69 00 6E 00 64 00 6F 00 77 00 73 00 75 00 70 00 64 00 61 00 74 00 65 00 2E 00 63 00 6F 00 6D 00 2F 00 64 00 2F 00 6D 00 73 00 64 00 6F 00 77 00 6E 00 6C 00 6F 00 61 00 64 00 2F 00 75 00 70 00 64 00 61 00 74 00 65 00 2F 00 73 00 6F 00 66 00 74 00 77 00 61 00 72 00 65 00 2F 00 75 00 70 00 64 00 74 00 2F 00 32 00 30 00 31 00 36 00 2F 00 30 00 33 00 2F 00 6C 00 70 00 5F 00 36 00 36 00 37 00 38 00 38 00 35 00 36 00 64 00 62 00 33 00 61 00 38 00 38 00 62 00 31 00 63 00 35 00 35 00 65 00 39 00 31 00 35 00 30 00 31 00 37 00 66 00 37 00 31 00 38 00 31 00 37 00 38 00 62 00 35 00 62 00 35 00 33 00 33 00 37 00 34 00 2E 00 63 00 61 00 62 00 00 00 00 00,,,,

179,30571812,00 D4 00 64 0D 73 D1 01,1,1,FF FF FF FF FF FF FF FF,0,1,56 29 18 6E FF DE F5 17 FE 16 A5 18 4D BD AC ED 23 BD 63 FF,SHA1,49 CC 0E A4 14 8F 94 AF 81 D9 D2 CE 6A 9A 9B E6 5B 7B 8C CD 31 E0 CA 17 16 05 1D 42 CF 46 98 FF 00,SHA256,lp.cab,,B4 F4 82 94 43 E3 B6 43 B1 70 9A 65 BC 82 2C 77 68 00 74 00 74 00 70 00 3A 00 2F 00 2F 00 64 00 6F 00 77 00 6E 00 6C 00 6F 00 61 00 64 00 2E 00 77 00 69 00 6E 00 64 00 6F 00 77 00 73 00 75 00 70 00 64 00 61 00 74 00 65 00 2E 00 63 00 6F 00 6D 00 2F 00 64 00 2F 00 6D 00 73 00 64 00 6F 00 77 00 6E 00 6C 00 6F 00 61 00 64 00 2F 00 75 00 70 00 64 00 61 00 74 00 65 00 2F 00 73 00 6F 00 66 00 74 00 77 00 61 00 72 00 65 00 2F 00 75 00 70 00 64 00 74 00 2F 00 32 00 30 00 31 00 36 00 2F 00 30 00 33 00 2F 00 6C 00 70 00 5F 00 35 00 36 00 32 00 39 00 31 00 38 00 36 00 65 00 66 00 66 00 64 00 65 00 66 00 35 00 31 00 37 00 66 00 65 00 31 00 36 00 61 00 35 00 31 00 38 00 34 00 64 00 62 00 64 00 61 00 63 00 65 00 64 00 32 00 33 00 62 00 64 00 36 00 33 00 66 00 66 00 2E 00 63 00 61 00 62 00 00 00 00 00,,,,

180,27883330,00 7D 5A 4D 0D 73 D1 01,1,1,FF FF FF FF FF FF FF FF,0,1,28 49 7C F4 8C 3A 5A 98 69 CC 17 E0 83 35 CE 20 0D B4 E5 8A,SHA1,F0 7C 0B EA C6 87 AB 84 72 63 94 E3 88 F3 A8 43 2D 81 FB 2C 1A D7 96 88 8A D5 87 2A 4E 25 ED 8E 00,SHA256,lp.cab,,B4 F4 82 94 43 E3 B6 43 B1 70 9A 65 BC 82 2C 77 68 00 74 00 74 00 70 00 3A 00 2F 00 2F 00 64 00 6F 00 77 00 6E 00 6C 00 6F 00 61 00 64 00 2E 00 77 00 69 00 6E 00 64 00 6F 00 77 00 73 00 75 00 70 00 64 00 61 00 74 00 65 00 2E 00 63 00 6F 00 6D 00 2F 00 64 00 2F 00 6D 00 73 00 64 00 6F 00 77 00 6E 00 6C 00 6F 00 61 00 64 00 2F 00 75 00 70 00 64 00 61 00 74 00 65 00 2F 00 73 00 6F 00 66 00 74 00 77 00 61 00 72 00 65 00 2F 00 75 00 70 00 64 00 74 00 2F 00 32 00 30 00 31 00 36 00 2F 00 30 00 33 00 2F 00 6C 00 70 00 5F 00 32 00 38 00 34 00 39 00 37 00 63 00 66 00 34 00 38 00 63 00 33 00 61 00 35 00 61 00 39 00 38 00 36 00 39 00 63 00 63 00 31 00 37 00 65 00 30 00 38 00 33 00 33 00 35 00 63 00 65 00 32 00 30 00 30 00 64 00 62 00 34 00 65 00 35 00 38 00 61 00 2E 00 63 00 61 00 62 00 00 00 62 00,,,,

181,28493320,00 1F B7 CB 0D 73 D1 01,1,1,FF FF FF FF FF FF FF FF,0,1,2B 71 48 A0 0C B0 AC A6 F9 B2 08 6D C0 47 7C 78 53 D8 13 43,SHA1,35 F0 02 B3 27 B3 1A 5A 96 01 C5 E5 B3 5D 32 C3 2E 4E 34 E5 40 F9 77 8C E6 EF 33 55 E3 95 54 98 00,SHA256,lp.cab,,B4 F4 82 94 43 E3 B6 43 B1 70 9A 65 BC 82 2C 77 68 00 74 00 74 00 70 00 3A 00 2F 00 2F 00 64 00 6F 00 77 00 6E 00 6C 00 6F 00 61 00 64 00 2E 00 77 00 69 00 6E 00 64 00 6F 00 77 00 73 00 75 00 70 00 64 00 61 00 74 00 65 00 2E 00 63 00 6F 00 6D 00 2F 00 64 00 2F 00 6D 00 73 00 64 00 6F 00 77 00 6E 00 6C 00 6F 00 61 00 64 00 2F 00 75 00 70 00 64 00 61 00 74 00 65 00 2F 00 73 00 6F 00 66 00 74 00 77 00 61 00 72 00 65 00 2F 00 75 00 70 00 64 00 74 00 2F 00 32 00 30 00 31 00 36 00 2F 00 30 00 33 00 2F 00 6C 00 70 00 5F 00 32 00 62 00 37 00 31 00 34 00 38 00 61 00 30 00 30 00 63 00 62 00 30 00 61 00 63 00 61 00 36 00 66 00 39 00 62 00 32 00 30 00 38 00 36 00 64 00 63 00 30 00 34 00 37 00 37 00 63 00 37 00 38 00 35 00 33 00 64 00 38 00 31 00 33 00 34 00 33 00 2E 00 63 00 61 00 62 00 00 00 62 00,,,,

182,28900301,00 F5 41 B6 0D 73 D1 01,1,1,FF FF FF FF FF FF FF FF,0,1,A9 3D AD FB C5 FE CE 8E AE D5 3F 02 F6 E4 DD 11 30 94 63 54,SHA1,62 AA 88 03 BC 0A DE D6 C8 77 40 A3 C3 26 4C 75 70 A4 2E 69 81 AE 6A D2 D3 2D B4 D8 46 B9 26 7C 00,SHA256,lp.cab,,B4 F4 82 94 43 E3 B6 43 B1 70 9A 65 BC 82 2C 77 68 00 74 00 74 00 70 00 3A 00 2F 00 2F 00 64 00 6F 00 77 00 6E 00 6C 00 6F 00 61 00 64 00 2E 00 77 00 69 00 6E 00 64 00 6F 00 77 00 73 00 75 00 70 00 64 00 61 00 74 00 65 00 2E 00 63 00 6F 00 6D 00 2F 00 64 00 2F 00 6D 00 73 00 64 00 6F 00 77 00 6E 00 6C 00 6F 00 61 00 64 00 2F 00 75 00 70 00 64 00 61 00 74 00 65 00 2F 00 73 00 6F 00 66 00 74 00 77 00 61 00 72 00 65 00 2F 00 75 00 70 00 64 00 74 00 2F 00 32 00 30 00 31 00 36 00 2F 00 30 00 33 00 2F 00 6C 00 70 00 5F 00 61 00 39 00 33 00 64 00 61 00 64 00 66 00 62 00 63 00 35 00 66 00 65 00 63 00 65 00 38 00 65 00 61 00 65 00 64 00 35 00 33 00 66 00 30 00 32 00 66 00 36 00 65 00 34 00 64 00 64 00 31 00 31 00 33 00 30 00 39 00 34 00 36 00 33 00 35 00 34 00 2E 00 63 00 61 00 62 00 00 00 00 00,,,,

183,29627397,80 89 A3 5E 0D 73 D1 01,1,1,FF FF FF FF FF FF FF FF,0,1,74 95 5B 33 AC A9 9D 4D 67 99 71 C8 2B 95 B3 EC BA B3 60 03,SHA1,52 3E 49 A9 09 36 A5 F3 04 E1 85 B7 C8 B5 0F CC 51 9D 93 5D 9C 34 EE F6 24 79 2F 28 ED BF 98 36 00,SHA256,lp.cab,,B4 F4 82 94 43 E3 B6 43 B1 70 9A 65 BC 82 2C 77 68 00 74 00 74 00 70 00 3A 00 2F 00 2F 00 64 00 6F 00 77 00 6E 00 6C 00 6F 00 61 00 64 00 2E 00 77 00 69 00 6E 00 64 00 6F 00 77 00 73 00 75 00 70 00 64 00 61 00 74 00 65 00 2E 00 63 00 6F 00 6D 00 2F 00 64 00 2F 00 6D 00 73 00 64 00 6F 00 77 00 6E 00 6C 00 6F 00 61 00 64 00 2F 00 75 00 70 00 64 00 61 00 74 00 65 00 2F 00 73 00 6F 00 66 00 74 00 77 00 61 00 72 00 65 00 2F 00 75 00 70 00 64 00 74 00 2F 00 32 00 30 00 31 00 36 00 2F 00 30 00 33 00 2F 00 6C 00 70 00 5F 00 37 00 34 00 39 00 35 00 35 00 62 00 33 00 33 00 61 00 63 00 61 00 39 00 39 00 64 00 34 00 64 00 36 00 37 00 39 00 39 00 37 00 31 00 63 00 38 00 32 00 62 00 39 00 35 00 62 00 33 00 65 00 63 00 62 00 61 00 62 00 33 00 36 00 30 00 30 00 33 00 2E 00 63 00 61 00 62 00 00 00 62 00,,,,

184,27591012,00 DC AF 93 0D 73 D1 01,1,1,FF FF FF FF FF FF FF FF,0,1,67 34 39 ED 7E 0E 84 1B EF 19 E9 34 AF 86 F9 7C 84 6F DB 4A,SHA1,56 EE C9 EB A8 87 11 16 9B 98 60 C4 C5 D8 3E 39 33 86 63 B4 A8 C8 F0 3F 0A 4A 32 C1 7D 8E E2 8A 00,SHA256,lp.cab,,B4 F4 82 94 43 E3 B6 43 B1 70 9A 65 BC 82 2C 77 68 00 74 00 74 00 70 00 3A 00 2F 00 2F 00 64 00 6F 00 77 00 6E 00 6C 00 6F 00 61 00 64 00 2E 00 77 00 69 00 6E 00 64 00 6F 00 77 00 73 00 75 00 70 00 64 00 61 00 74 00 65 00 2E 00 63 00 6F 00 6D 00 2F 00 64 00 2F 00 6D 00 73 00 64 00 6F 00 77 00 6E 00 6C 00 6F 00 61 00 64 00 2F 00 75 00 70 00 64 00 61 00 74 00 65 00 2F 00 73 00 6F 00 66 00 74 00 77 00 61 00 72 00 65 00 2F 00 75 00 70 00 64 00 74 00 2F 00 32 00 30 00 31 00 36 00 2F 00 30 00 33 00 2F 00 6C 00 70 00 5F 00 36 00 37 00 33 00 34 00 33 00 39 00 65 00 64 00 37 00 65 00 30 00 65 00 38 00 34 00 31 00 62 00 65 00 66 00 31 00 39 00 65 00 39 00 33 00 34 00 61 00 66 00 38 00 36 00 66 00 39 00 37 00 63 00 38 00 34 00 36 00 66 00 64 00 62 00 34 00 61 00 2E 00 63 00 61 00 62 00 00 00 00 00,,,,

185,28413244,00 6C 77 5A 0D 73 D1 01,1,1,FF FF FF FF FF FF FF FF,0,1,75 D1 25 6E FF 47 4D 50 A5 21 C6 FC 27 DC BD 50 00 AC 56 EF,SHA1,B1 5F 27 AD 92 F3 76 83 CC F2 54 AC 7A 1E 88 D0 B8 E9 97 75 CC 84 55 2C BA 3F FD 01 39 43 3F 60 00,SHA256,lp.cab,,B4 F4 82 94 43 E3 B6 43 B1 70 9A 65 BC 82 2C 77 68 00 74 00 74 00 70 00 3A 00 2F 00 2F 00 64 00 6F 00 77 00 6E 00 6C 00 6F 00 61 00 64 00 2E 00 77 00 69 00 6E 00 64 00 6F 00 77 00 73 00 75 00 70 00 64 00 61 00 74 00 65 00 2E 00 63 00 6F 00 6D 00 2F 00 64 00 2F 00 6D 00 73 00 64 00 6F 00 77 00 6E 00 6C 00 6F 00 61 00 64 00 2F 00 75 00 70 00 64 00 61 00 74 00 65 00 2F 00 73 00 6F 00 66 00 74 00 77 00 61 00 72 00 65 00 2F 00 75 00 70 00 64 00 74 00 2F 00 32 00 30 00 31 00 36 00 2F 00 30 00 33 00 2F 00 6C 00 70 00 5F 00 37 00 35 00 64 00 31 00 32 00 35 00 36 00 65 00 66 00 66 00 34 00 37 00 34 00 64 00 35 00 30 00 61 00 35 00 32 00 31 00 63 00 36 00 66 00 63 00 32 00 37 00 64 00 63 00 62 00 64 00 35 00 30 00 30 00 30 00 61 00 63 00 35 00 36 00 65 00 66 00 2E 00 63 00 61 00 62 00 00 00 00 00,,,,

186,28310089,80 D7 15 B2 0D 73 D1 01,1,1,FF FF FF FF FF FF FF FF,0,1,9E 67 3E C3 24 85 31 4A 19 69 B4 E0 5B 3C 7A 8F 51 A7 F0 E4,SHA1,6C C8 36 B8 B5 D6 B1 BE 34 2F 27 DE 55 B3 D7 28 05 C2 51 97 8B 8E AF 7F F1 7A 84 41 88 1C E1 B2 00,SHA256,lp.cab,,B4 F4 82 94 43 E3 B6 43 B1 70 9A 65 BC 82 2C 77 68 00 74 00 74 00 70 00 3A 00 2F 00 2F 00 64 00 6F 00 77 00 6E 00 6C 00 6F 00 61 00 64 00 2E 00 77 00 69 00 6E 00 64 00 6F 00 77 00 73 00 75 00 70 00 64 00 61 00 74 00 65 00 2E 00 63 00 6F 00 6D 00 2F 00 64 00 2F 00 6D 00 73 00 64 00 6F 00 77 00 6E 00 6C 00 6F 00 61 00 64 00 2F 00 75 00 70 00 64 00 61 00 74 00 65 00 2F 00 73 00 6F 00 66 00 74 00 77 00 61 00 72 00 65 00 2F 00 75 00 70 00 64 00 74 00 2F 00 32 00 30 00 31 00 36 00 2F 00 30 00 33 00 2F 00 6C 00 70 00 5F 00 39 00 65 00 36 00 37 00 33 00 65 00 63 00 33 00 32 00 34 00 38 00 35 00 33 00 31 00 34 00 61 00 31 00 39 00 36 00 39 00 62 00 34 00 65 00 30 00 35 00 62 00 33 00 63 00 37 00 61 00 38 00 66 00 35 00 31 00 61 00 37 00 66 00 30 00 65 00 34 00 2E 00 63 00 61 00 62 00 00 00 62 00,,,,

187,28268625,00 D1 44 78 0D 73 D1 01,1,1,FF FF FF FF FF FF FF FF,0,1,C0 F9 BD 20 AB 27 DC F7 A3 F5 29 28 66 6C 32 D4 02 D5 1C 94,SHA1,26 BF 4D F3 D7 A7 62 F5 30 D8 91 40 BE C9 83 4C BC 5F 0B 35 7D 36 8A BB 0B F6 FA 92 24 52 40 12 00,SHA256,lp.cab,,B4 F4 82 94 43 E3 B6 43 B1 70 9A 65 BC 82 2C 77 68 00 74 00 74 00 70 00 3A 00 2F 00 2F 00 64 00 6F 00 77 00 6E 00 6C 00 6F 00 61 00 64 00 2E 00 77 00 69 00 6E 00 64 00 6F 00 77 00 73 00 75 00 70 00 64 00 61 00 74 00 65 00 2E 00 63 00 6F 00 6D 00 2F 00 64 00 2F 00 6D 00 73 00 64 00 6F 00 77 00 6E 00 6C 00 6F 00 61 00 64 00 2F 00 75 00 70 00 64 00 61 00 74 00 65 00 2F 00 73 00 6F 00 66 00 74 00 77 00 61 00 72 00 65 00 2F 00 75 00 70 00 64 00 74 00 2F 00 32 00 30 00 31 00 36 00 2F 00 30 00 33 00 2F 00 6C 00 70 00 5F 00 63 00 30 00 66 00 39 00 62 00 64 00 32 00 30 00 61 00 62 00 32 00 37 00 64 00 63 00 66 00 37 00 61 00 33 00 66 00 35 00 32 00 39 00 32 00 38 00 36 00 36 00 36 00 63 00 33 00 32 00 64 00 34 00 30 00 32 00 64 00 35 00 31 00 63 00 39 00 34 00 2E 00 63 00 61 00 62 00 00 00 62 00,,,,

188,27978222,80 F9 DB 97 0D 73 D1 01,1,1,FF FF FF FF FF FF FF FF,0,1,EC 70 DE 12 B3 8F 59 40 1F BB 78 1D 73 C0 96 6D 5A 4B C5 6D,SHA1,47 B5 FB 10 10 5E F7 00 91 D6 DD A4 31 E6 3C 7F 2B 1C AC 7A 56 44 8B FC 92 41 0A 92 1E 89 F6 83 00,SHA256,lp.cab,,B4 F4 82 94 43 E3 B6 43 B1 70 9A 65 BC 82 2C 77 68 00 74 00 74 00 70 00 3A 00 2F 00 2F 00 64 00 6F 00 77 00 6E 00 6C 00 6F 00 61 00 64 00 2E 00 77 00 69 00 6E 00 64 00 6F 00 77 00 73 00 75 00 70 00 64 00 61 00 74 00 65 00 2E 00 63 00 6F 00 6D 00 2F 00 64 00 2F 00 6D 00 73 00 64 00 6F 00 77 00 6E 00 6C 00 6F 00 61 00 64 00 2F 00 75 00 70 00 64 00 61 00 74 00 65 00 2F 00 73 00 6F 00 66 00 74 00 77 00 61 00 72 00 65 00 2F 00 75 00 70 00 64 00 74 00 2F 00 32 00 30 00 31 00 36 00 2F 00 30 00 33 00 2F 00 6C 00 70 00 5F 00 65 00 63 00 37 00 30 00 64 00 65 00 31 00 32 00 62 00 33 00 38 00 66 00 35 00 39 00 34 00 30 00 31 00 66 00 62 00 62 00 37 00 38 00 31 00 64 00 37 00 33 00 63 00 30 00 39 00 36 00 36 00 64 00 35 00 61 00 34 00 62 00 63 00 35 00 36 00 64 00 2E 00 63 00 61 00 62 00 00 00 62 00,,,,

189,20577286,80 BB C7 A3 0D 73 D1 01,1,1,FF FF FF FF FF FF FF FF,0,1,8C 4E 4F 39 40 CA F2 15 37 E3 5B 2C 43 37 78 CD A8 85 EB 23,SHA1,E2 05 A8 31 35 7D 63 0D 5C D9 9C 92 5E C6 87 A4 82 EF D2 E1 87 0B FD 9E D2 DB 3C 13 D9 5F 42 59 00,SHA256,lp.cab,,B4 F4 82 94 43 E3 B6 43 B1 70 9A 65 BC 82 2C 77 68 00 74 00 74 00 70 00 3A 00 2F 00 2F 00 64 00 6F 00 77 00 6E 00 6C 00 6F 00 61 00 64 00 2E 00 77 00 69 00 6E 00 64 00 6F 00 77 00 73 00 75 00 70 00 64 00 61 00 74 00 65 00 2E 00 63 00 6F 00 6D 00 2F 00 64 00 2F 00 6D 00 73 00 64 00 6F 00 77 00 6E 00 6C 00 6F 00 61 00 64 00 2F 00 75 00 70 00 64 00 61 00 74 00 65 00 2F 00 73 00 6F 00 66 00 74 00 77 00 61 00 72 00 65 00 2F 00 75 00 70 00 64 00 74 00 2F 00 32 00 30 00 31 00 36 00 2F 00 30 00 33 00 2F 00 6C 00 70 00 5F 00 38 00 63 00 34 00 65 00 34 00 66 00 33 00 39 00 34 00 30 00 63 00 61 00 66 00 32 00 31 00 35 00 33 00 37 00 65 00 33 00 35 00 62 00 32 00 63 00 34 00 33 00 33 00 37 00 37 00 38 00 63 00 64 00 61 00 38 00 38 00 35 00 65 00 62 00 32 00 33 00 2E 00 63 00 61 00 62 00 00 00 62 00,,,,

190,20659562,80 A7 28 C5 0D 73 D1 01,1,1,FF FF FF FF FF FF FF FF,0,1,70 4D 42 3C 62 2C 28 BE 07 71 77 C0 B4 EE 11 3B 40 DF E0 00,SHA1,E2 30 8A B3 72 C4 D9 6C 60 B0 4D BD F7 45 03 2B 28 80 61 02 32 1F E6 75 19 FF 10 8C 7E EB 50 C6 00,SHA256,lp.cab,,B4 F4 82 94 43 E3 B6 43 B1 70 9A 65 BC 82 2C 77 68 00 74 00 74 00 70 00 3A 00 2F 00 2F 00 64 00 6F 00 77 00 6E 00 6C 00 6F 00 61 00 64 00 2E 00 77 00 69 00 6E 00 64 00 6F 00 77 00 73 00 75 00 70 00 64 00 61 00 74 00 65 00 2E 00 63 00 6F 00 6D 00 2F 00 64 00 2F 00 6D 00 73 00 64 00 6F 00 77 00 6E 00 6C 00 6F 00 61 00 64 00 2F 00 75 00 70 00 64 00 61 00 74 00 65 00 2F 00 73 00 6F 00 66 00 74 00 77 00 61 00 72 00 65 00 2F 00 75 00 70 00 64 00 74 00 2F 00 32 00 30 00 31 00 36 00 2F 00 30 00 33 00 2F 00 6C 00 70 00 5F 00 37 00 30 00 34 00 64 00 34 00 32 00 33 00 63 00 36 00 32 00 32 00 63 00 32 00 38 00 62 00 65 00 30 00 37 00 37 00 31 00 37 00 37 00 63 00 30 00 62 00 34 00 65 00 65 00 31 00 31 00 33 00 62 00 34 00 30 00 64 00 66 00 65 00 30 00 30 00 30 00 2E 00 63 00 61 00 62 00 00 00 00 00,,,,

191,28112596,80 AD A0 9C 0D 73 D1 01,1,1,FF FF FF FF FF FF FF FF,0,1,F2 0B 10 9E 22 37 DE 86 4D 42 FD BE 62 95 07 40 77 57 E8 CC,SHA1,66 47 88 AB 1F 7F BE 66 4D 3D 7E 02 B4 02 C7 94 80 98 63 DD BF 63 C5 67 00 91 18 FF 82 CD E2 DA 00,SHA256,lp.cab,,B4 F4 82 94 43 E3 B6 43 B1 70 9A 65 BC 82 2C 77 68 00 74 00 74 00 70 00 3A 00 2F 00 2F 00 64 00 6F 00 77 00 6E 00 6C 00 6F 00 61 00 64 00 2E 00 77 00 69 00 6E 00 64 00 6F 00 77 00 73 00 75 00 70 00 64 00 61 00 74 00 65 00 2E 00 63 00 6F 00 6D 00 2F 00 64 00 2F 00 6D 00 73 00 64 00 6F 00 77 00 6E 00 6C 00 6F 00 61 00 64 00 2F 00 75 00 70 00 64 00 61 00 74 00 65 00 2F 00 73 00 6F 00 66 00 74 00 77 00 61 00 72 00 65 00 2F 00 75 00 70 00 64 00 74 00 2F 00 32 00 30 00 31 00 36 00 2F 00 30 00 33 00 2F 00 6C 00 70 00 5F 00 66 00 32 00 30 00 62 00 31 00 30 00 39 00 65 00 32 00 32 00 33 00 37 00 64 00 65 00 38 00 36 00 34 00 64 00 34 00 32 00 66 00 64 00 62 00 65 00 36 00 32 00 39 00 35 00 30 00 37 00 34 00 30 00 37 00 37 00 35 00 37 00 65 00 38 00 63 00 63 00 2E 00 63 00 61 00 62 00 00 00 00 00,,,,

192,28280978,00 30 9A BE 0D 73 D1 01,1,1,FF FF FF FF FF FF FF FF,0,1,01 33 23 B0 36 AD 9B 8D 04 21 3F 63 D6 8F 27 FC F8 76 9B 90,SHA1,E9 41 7A AF D3 B2 7C A7 3B F2 CC 06 65 4E 55 D9 AF C1 BC 9B 5E 3F 19 E1 D1 73 A3 87 A7 D4 4A AF 00,SHA256,lp.cab,,B4 F4 82 94 43 E3 B6 43 B1 70 9A 65 BC 82 2C 77 68 00 74 00 74 00 70 00 3A 00 2F 00 2F 00 64 00 6F 00 77 00 6E 00 6C 00 6F 00 61 00 64 00 2E 00 77 00 69 00 6E 00 64 00 6F 00 77 00 73 00 75 00 70 00 64 00 61 00 74 00 65 00 2E 00 63 00 6F 00 6D 00 2F 00 64 00 2F 00 6D 00 73 00 64 00 6F 00 77 00 6E 00 6C 00 6F 00 61 00 64 00 2F 00 75 00 70 00 64 00 61 00 74 00 65 00 2F 00 73 00 6F 00 66 00 74 00 77 00 61 00 72 00 65 00 2F 00 75 00 70 00 64 00 74 00 2F 00 32 00 30 00 31 00 36 00 2F 00 30 00 33 00 2F 00 6C 00 70 00 5F 00 30 00 31 00 33 00 33 00 32 00 33 00 62 00 30 00 33 00 36 00 61 00 64 00 39 00 62 00 38 00 64 00 30 00 34 00 32 00 31 00 33 00 66 00 36 00 33 00 64 00 36 00 38 00 66 00 32 00 37 00 66 00 63 00 66 00 38 00 37 00 36 00 39 00 62 00 39 00 30 00 2E 00 63 00 61 00 62 00 00 00 62 00,,,,

193,28551026,80 0C F6 E2 0D 73 D1 01,1,1,FF FF FF FF FF FF FF FF,0,1,78 30 CC 04 3E 04 B6 E6 11 27 03 26 E8 B2 D9 C3 F6 E7 79 5E,SHA1,5E 38 9E 1B 56 89 9C EC 98 D7 E8 23 F6 B1 75 51 F9 0F BF F0 C9 EA D7 1A 2D 10 DB C2 A8 63 2D 35 00,SHA256,lp.cab,,B4 F4 82 94 43 E3 B6 43 B1 70 9A 65 BC 82 2C 77 68 00 74 00 74 00 70 00 3A 00 2F 00 2F 00 64 00 6F 00 77 00 6E 00 6C 00 6F 00 61 00 64 00 2E 00 77 00 69 00 6E 00 64 00 6F 00 77 00 73 00 75 00 70 00 64 00 61 00 74 00 65 00 2E 00 63 00 6F 00 6D 00 2F 00 64 00 2F 00 6D 00 73 00 64 00 6F 00 77 00 6E 00 6C 00 6F 00 61 00 64 00 2F 00 75 00 70 00 64 00 61 00 74 00 65 00 2F 00 73 00 6F 00 66 00 74 00 77 00 61 00 72 00 65 00 2F 00 75 00 70 00 64 00 74 00 2F 00 32 00 30 00 31 00 36 00 2F 00 30 00 33 00 2F 00 6C 00 70 00 5F 00 37 00 38 00 33 00 30 00 63 00 63 00 30 00 34 00 33 00 65 00 30 00 34 00 62 00 36 00 65 00 36 00 31 00 31 00 32 00 37 00 30 00 33 00 32 00 36 00 65 00 38 00 62 00 32 00 64 00 39 00 63 00 33 00 66 00 36 00 65 00 37 00 37 00 39 00 35 00 65 00 2E 00 63 00 61 00 62 00 00 00 62 00,,,,

194,28900040,00 8B 81 54 0D 73 D1 01,1,1,FF FF FF FF FF FF FF FF,0,1,E3 E2 F6 75 7D 6C 3F 18 57 53 23 53 03 92 1C 3E 8F 8F FF 5E,SHA1,B2 07 94 AC 6B 80 BD 08 34 3A 11 D4 9C A7 C8 F7 7F 4A 19 0E 66 F5 0C 89 86 58 D2 AA 56 73 57 BF 00,SHA256,lp.cab,,B4 F4 82 94 43 E3 B6 43 B1 70 9A 65 BC 82 2C 77 68 00 74 00 74 00 70 00 3A 00 2F 00 2F 00 64 00 6F 00 77 00 6E 00 6C 00 6F 00 61 00 64 00 2E 00 77 00 69 00 6E 00 64 00 6F 00 77 00 73 00 75 00 70 00 64 00 61 00 74 00 65 00 2E 00 63 00 6F 00 6D 00 2F 00 64 00 2F 00 6D 00 73 00 64 00 6F 00 77 00 6E 00 6C 00 6F 00 61 00 64 00 2F 00 75 00 70 00 64 00 61 00 74 00 65 00 2F 00 73 00 6F 00 66 00 74 00 77 00 61 00 72 00 65 00 2F 00 75 00 70 00 64 00 74 00 2F 00 32 00 30 00 31 00 36 00 2F 00 30 00 33 00 2F 00 6C 00 70 00 5F 00 65 00 33 00 65 00 32 00 66 00 36 00 37 00 35 00 37 00 64 00 36 00 63 00 33 00 66 00 31 00 38 00 35 00 37 00 35 00 33 00 32 00 33 00 35 00 33 00 30 00 33 00 39 00 32 00 31 00 63 00 33 00 65 00 38 00 66 00 38 00 66 00 66 00 66 00 35 00 65 00 2E 00 63 00 61 00 62 00 00 00 62 00,,,,

195,28211843,80 B3 18 74 0D 73 D1 01,1,1,FF FF FF FF FF FF FF FF,0,1,07 26 66 16 62 2D F9 62 5F 81 0E A4 8C 66 E2 C6 C2 0F AE D5,SHA1,3D 9A 5E 58 24 C5 5A E8 4B AC 52 5C A5 28 EA 4F B3 02 77 EF EA 07 08 CD 02 B5 88 D3 9B 65 3D E2 00,SHA256,lp.cab,,B4 F4 82 94 43 E3 B6 43 B1 70 9A 65 BC 82 2C 77 68 00 74 00 74 00 70 00 3A 00 2F 00 2F 00 64 00 6F 00 77 00 6E 00 6C 00 6F 00 61 00 64 00 2E 00 77 00 69 00 6E 00 64 00 6F 00 77 00 73 00 75 00 70 00 64 00 61 00 74 00 65 00 2E 00 63 00 6F 00 6D 00 2F 00 64 00 2F 00 6D 00 73 00 64 00 6F 00 77 00 6E 00 6C 00 6F 00 61 00 64 00 2F 00 75 00 70 00 64 00 61 00 74 00 65 00 2F 00 73 00 6F 00 66 00 74 00 77 00 61 00 72 00 65 00 2F 00 75 00 70 00 64 00 74 00 2F 00 32 00 30 00 31 00 36 00 2F 00 30 00 33 00 2F 00 6C 00 70 00 5F 00 30 00 37 00 32 00 36 00 36 00 36 00 31 00 36 00 36 00 32 00 32 00 64 00 66 00 39 00 36 00 32 00 35 00 66 00 38 00 31 00 30 00 65 00 61 00 34 00 38 00 63 00 36 00 36 00 65 00 32 00 63 00 36 00 63 00 32 00 30 00 66 00 61 00 65 00 64 00 35 00 2E 00 63 00 61 00 62 00 00 00 00 00,,,,

Yes, it is in tbFiles. The same as you showed me. Now, how to convert the Urls in Hex format?

Here is one:

B4 F4 82 94 43 E3 B6 43 B1 70 9A 65 BC 82 2C 77 68 00 74 00 74 00 70 00 3A 00 2F 00 2F 00 64 00 6F 00 77 00 6E 00 6C 00 6F 00 61 00 64 00 2E 00 77 00 69 00 6E 00 64 00 6F 00 77 00 73 00 75 00 70 00 64 00 61 00 74 00 65 00 2E 00 63 00 6F 00 6D 00 2F 00 64 00 2F 00 6D 00 73 00 64 00 6F 00 77 00 6E 00 6C 00 6F 00 61 00 64 00 2F 00 75 00 70 00 64 00 61 00 74 00 65 00 2F 00 73 00 6F 00 66 00 74 00 77 00 61 00 72 00 65 00 2F 00 75 00 70 00 64 00 74 00 2F 00 32 00 30 00 31 00 36 00 2F 00 30 00 33 00 2F 00 6C 00 70 00 5F 00 66 00 32 00 30 00 62 00 31 00 30 00 39 00 65 00 32 00 32 00 33 00 37 00 64 00 65 00 38 00 36 00 34 00 64 00 34 00 32 00 66 00 64 00 62 00 65 00 36 00 32 00 39 00 35 00 30 00 37 00 34 00 30 00 37 00 37 00 35 00 37 00 65 00 38 00 63 00 63 00 2E 00 63 00 61 00 62 00 00 00 00 00

mtwei · Mar 3, 2016

@xinso
ESEDatabaseView
Options-->check "Show Binary URL As String"

xinso · Mar 3, 2016

You need to login to view this posts content.

mtwei · Mar 3, 2016

You need to login to view this posts content.

xinso · Mar 3, 2016

To fetch MS Direct Download Link

Credits goes to atplsx, alexwilson and mtwei.

1. Open X:\Windows\SoftwareDistribution\DataStore\Datastore.edb with Nirsoft ESEDatabaseView
2. Select tbFiles
3. Options --> Check "Show Binary URL As String"

alexwilson · Mar 3, 2016

Note that this option will only show you the URLs in the program, they will still be exported in the raw format. The snippet of PowerShell code I posted shows one simple way how to decode the URLs from the hex data.

xinso · Mar 3, 2016

You need to login to view this posts content.

How to read Datastore.edb

xinso MDL Guru

alexwilson MDL Junior Member

xinso MDL Guru

mtwei MDL Senior Member

xinso MDL Guru

mtwei MDL Senior Member

xinso MDL Guru

alexwilson MDL Junior Member

xinso MDL Guru