time-decode1

options:

-h, --help

show this help message and exit

-g, --gui

launch the gui

--guess TIMESTAMP

guess the timestamp format and output possibilities

--timestamp [DATE]

convert date to every timestamp enter date as "YYYY-MM-DD HH:MM:SS.f" in 24h fmt Without DATE argument, will convert current date/time

--active

convert from Active Directory value

--apache

convert from an Apache Cookie hex value

--auto

convert from OLE Automation Date format

--biome64

convert from an Apple Biome 64-bit decimal

--biomehex

convert from an Apple Biome hex value

--bitdate

convert from a Samsung/LG 4-byte value

--bitdec

convert from a bitwise decimal 10-digit value

--bplist

convert from an iOS Binary Plist value

--chrome

convert from Google Chrome value

--cookie

convert from Windows Cookie Date (Low,High)

--dhcp6

convert from a DHCP6 DUID value

--discord

convert from a Discord URL value

--dotnet

convert from a .NET DateTime value

--eitime

convert from a Google EI URL value

--exfat

convert from an exFAT 4-byte value

--fat

convert from FAT Date + Time (wFat)

--ft

convert from a FILETIME value

--gbound

convert from a GMail Boundary value

--gmsgid

convert from a GMail Message ID value

--gps

convert from a GPS value

--gsm

convert from a GSM value

--hfsbe

convert from HFS(+) BE (HFS=Local, HFS+=UTC)

--hfsle

convert from HFS(+) LE (HFS=Local, HFS+=UTC)

--hfsdec

convert from a Mac OS/HFS+ Decimal value

--hotmail

convert from a Hotmail value

--iostime

convert from an iOS 11 value

--jdec

convert from a Julian Date decimal value

--jhex

convert from a Julian Date hex value

--ksdec

convert from a KSUID 9-digit value

--ksalnum

convert from a KSUID 27-character value

--leb128

convert from a LEB128 hex value

--mac

convert from Mac Absolute Time

--mastodon

convert from a Mastodon URL value

--meta

convert from a Metasploit Payload UUID

--moto

convert from Motorola's 6-byte value

--ms1904

convert from MS Excel 1904 Date format

--msdos

convert from 32-bit MS-DOS time, result is Local

--nokia

convert from a Nokia 4-byte value

--nokiale

convert from a Nokia 4-byte LE value

--ns40

convert from a Nokia S40 7-byte value

--ns40le

convert from a Nokia S40 7-byte LE value

--nsdate

convert from an Apple NSDate (iOS, BPList, Cocoa, Mac Absolute)

--oleb

convert from a Windows OLE 64-bit BE value, remove 0x & space - example from SRUM: 0x40e33f5d 0x97dfe8fb should be 40e33f5d97dfe8fb

--olel

convert from a Windows OLE 64-bit LE value

--pr

convert from Mozilla's PRTime

--s32

convert from an S32-encoded value

--semi

convert from a Semi-Octet decimal value

--sony

convert from a Sonyflake URL value

--sym

convert from Symantec's 6-byte AV value

--systime

convert from a 128-bit SYSTEMTIME value

--tiktok

convert from a TikTok URL value

--twitter

convert from a Twitter URL value

--uhbe

convert from Unix Hex 32-bit BE

--uhle

convert from Unix Hex 32-bit LE

--unix

convert from Unix Seconds

--umil

convert from Unix Milliseconds

--umilhex

convert from Unix Milliseconds 6-byte Hex value

--uu

convert from a UUID: 00000000-0000-0000-0000-000000000000

--vm

convert from a VMWare Snapshot (.vmsd) value - enter as "high value,low value"

--wh

convert from Windows 64-bit Hex BE

--whle

convert from Windows 64-bit Hex LE

--version, -v

show program's version number and exit