UNIX Timestamp to Windows Filetime

Category: Date / Time

Status: Registered and callable in the CyberChef 11.3.0 compatibility inventory.

Input / output: string → string

Background: https://msdn.microsoft.com/en-us/library/windows/desktop/ms724284(v=vs.85).aspx

What it does

Converts a UNIX timestamp to a Windows Filetime value. A Windows Filetime is a 64-bit value representing the number of 100-nanosecond intervals since January 1, 1601 UTC. A UNIX timestamp is a 32-bit value representing the number of seconds since January 1, 1970 UTC (the UNIX epoch). This operation also supports UNIX timestamps in milliseconds, microseconds and nanoseconds.

Note

Status here means the operation name is implemented and callable. It does not by itself promise byte-for-byte parity for every upstream option. See Compatibility and current status for the verified scope and known boundaries.

Arguments and options

Arguments are positional. Keep their order when using bake() or Pipeline.then().

Index

Name

UI type

PyChef default

Accepted values / format

0

Input units

option

'Seconds (s)'

'Seconds (s)', 'Milliseconds (ms)', 'Microseconds (μs)', 'Nanoseconds (ns)'

1

Output format

option

'Decimal'

'Decimal', 'Hex (big endian)', 'Hex (little endian)'

Recipe template

Important

This is a call template built from the documented defaults. Replace placeholder values such as empty keys, paths, patterns, or lookup data before running it.

from pychef import bake

input_value = "example"
args = ['Seconds (s)', 'Decimal']
result = bake(input_value, [{"op": 'UNIX Timestamp to Windows Filetime', "args": args}])
print(result)

Pipeline example

from pychef import Pipeline

args = ['Seconds (s)', 'Decimal']
transform = Pipeline().then('UNIX Timestamp to Windows Filetime', *args)
result = transform("example")

Direct call

pychef.ops.run_operation runs any registered operation as a plain function, under the active ExecutionPolicy (safe defaults, no network):

from pychef.ops import run_operation

args = ['Seconds (s)', 'Decimal']
result = run_operation('UNIX Timestamp to Windows Filetime', "example", args=args)

Common operations also have typed helpers in Direct operations.

Low-level operation module

Warning

The module below is an internal implementation detail. It applies no execution policy, resource limits, or error sanitization; prefer bake(), Pipeline, or pychef.ops for application code.

The registered entry point lives in pychef.operations.by_operation.unix_timestamp_to_windows_filetime. Direct calls receive the input value and a positional argument tuple:

from pychef.operations.by_operation.unix_timestamp_to_windows_filetime import run

result = run("example", tuple(['Seconds (s)', 'Decimal']))
pychef.operations.by_operation.unix_timestamp_to_windows_filetime.run(value, args)

Run this operation using its shared internal implementation.

Parameters:
  • value (str | bytes)

  • args (Sequence[Any])

Return type:

str | bytes