What it can do
- Read 100-nanosecond Windows ticks
- Convert to UNIX seconds
- Render a UTC date
How the recipe works
Windows Filetime to UNIX Timestamp
Change the Windows epoch and tick scale to UNIX seconds.
From UNIX Timestamp
Format the UNIX value as a date.
Demonstration
Sample input
133485408000000000Expected result
2024When to use it
- Windows forensics
- Registry and event artifacts
- Cross-platform timelines
Adapt it
Select little-endian hexadecimal input when the value comes directly from a binary structure.
Source and verification
Adapted from mattnotmax CyberChef recipes. The explanation and sample are written for Serialize, use synthetic or documentation-safe data, and are checked against the current operation catalogue. The workflow runs locally without an external API call.