I have been quiet the past few months, but that does not mean I haven’t been busy. While working on a larger project I found myself getting really annoyed with timestamps. Because I was working on my Mac, I was having to run out to a website I have used for years for quick timestamp decoding, but I was annoyed with the fact that I was having to do that. Windows users have had DCode for almost two decades, and it is great. I use it when I’m on my Windows workstations, but the fact that there has been no macOS equivalent during this entire time (that I’m aware of) has been irritating. Update: someone on LinkedIn was nice enough to bring up Epoch, from the no-longer-in-existance Blackbag Technologies. I was not a Blackbag/Blacklight user, so I never had access to it.
I, like many others in the field, tend to work in both Windows and macOS depending on what we’re doing. A lot of the things we deal with are Windows-y, so it only makes sense that many of the utilities we use are Windows-only; there just aren’t as many macOS tools compared to Windows. That still doesn’t change the fact that many of us like to work in macOS. Thus, I introduce Timestamped. It is a faithful attempt at creating a macOS-native equivalent of DCode using Swift.
Again, this is a faithful attempt, so it is not exactly like DCode. Some of the obscure timestamp formats DCode can handle Timestamped cannot because I was unable to find any documentation about the formats (e.g., Motorola, Nokia). Right now it can handle:
| Unix (seconds) | Garmin FIT |
| Unix (milliseconds) | Apple HFS (local) |
| Unix (microseconds) | OLE Automation Date |
| Unix (nanoseconds) | DOS / FAT (32-bit) |
| Mac Absolute / Core Foundation (seconds) | Microsoft DTTM |
| Apple Absolute (nanoseconds) | Twitter / X Snowflake ID |
| Windows FILETIME | BCD (2-digit year) |
| Chromium (seconds) | BCD Extended (4-digit year) |
| Chromium (milliseconds) | BCD Reverse Nibble |
| Chromium (microseconds) | GSM Time |
| HFS+ | Windows SYSTEMTIME |
| APFS | UUID / GUID Timestamp (v1) |
| Microsoft .NET Ticks | Google URL “ei” parameter |
Not quite the sixty-nine formats DCode supports, but I will add to it as I find documentation to support the various formats that are missing. If you have information for a format that is not here or information on where I can find documentation, please let me know so I can add to it.
You can find Timestamped here.
MD5 (zip):
539d3ca5dec19da36347d717cfe6d3f7
SHA-1 (zip):
bd47fb8c214d22b44b94b0c4600a7e0746a4b2e5
SHA-256 (zip):
c0bccc20319ad0ecad0422ffaec105bbfe00249afc7843b013adfffb12d37ba4
MD5 (.dmg):
0a256d2b1d808589604b773bda88aa80
SHA-1 (.dmg):
f1da789d879b2f4076e81a72226c5ea22effae8c
SHA-256 (.dmg):
cef7502ff2c32274067ec88ecb1751d542fcdcd20de67d489328299a35676577