Skip to content

Instantly share code, notes, and snippets.

@adulau

adulau/gist:4706836

Last active December 12, 2015 03:28
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save adulau/4706836 to your computer and use it in GitHub Desktop.
Save adulau/4706836 to your computer and use it in GitHub Desktop.
Download ZIP
Convert Windows NTFS 64bit timestamp to epoch timestamp
Raw
gistfile1.txt
def ntfsts2epoch(ts):
filetime_posix=11644473600L*10000000 #from 64bit NTFS timestamp (16010101) to 64bit epoch timestamp (19700101)
return int(str((ts-filetime_posix))[:10])
print ntfsts2epoch(130042164473271112)
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment