Friday, February 8, 2013

Tools - Time Maker

This tool decodes and encodes digital times.

Download : http://dorumugs-tools.googlecode.com/files/time_maker.py

Link : http://forensicinsight.org/wp-content/uploads/2012/10/INSIGHT-Digital-Times.pdf



# python time_maker.py --help
Usage: python time_maker.py -e YYYY-MM-DD,##:##:##,GMT
       python time_maker.py -e 1980-10-10,10:10:10,9

       python time_maker.py -d list
       python time_maker.py -d Time_Format -i Input_time
       python time_maker.py -d w64 -i 129943698100000000

-- Time Format List --
        w64 - Windows 64bit Big Time                (EX:129943698100000000)
        w64_big_h - (Hex) Windows 64bit Big Time    (EX:01cda71ade0d1500)
        w64_lit_h - (Hex) Windows 64bit Little Time (EX:00150dde1aa7cd01)
        wfiletime - (Hex) Windows FILETIME Time     (EX:de0d1500:01cda71a)
        wcookie -  Windows Cookie Date Time         (EX:3725399296,30254874)
        unum - Unix Numeric Time                    (EX:1349896210)
        umilli - Unix Millisecond Time              (EX:1349896210000)
        umicro - Unix Microsecond Time              (EX:1349896210000)
        unum_big_h - (Hex) Unix Numeric Little Time (EX:5075c812)
        unum_lit_h - (Hex) Unix Numeric Big Time    (EX:12c87550)
        chrome - Google Chrome Time                 (EX:12994369810317375)
        mac_ab - Mac Absolute Time                  (EX:371589010)
        mac_ab_h - (Hex) Mac Absolute Time          (EX:1625ff92)
        ms32_big_h - (Hex) MS-DOS 32bit Big Time    (EX:414a994a)
        ms32_lit_h - (Hex) MS-DOS 32bit Little Time (EX:4a994a41)
        hfs32_big_h - (hex) HFS 32bit Big Time      (EX:cc9b7892)
        hfs32_lit_h - (hex) HFS 32bit Little Time   (EX:92789bcc)

Options:
  -h, --help            show this help message and exit
  -e ENCODER, --encoder=ENCODER
                        python time_maker.py -e YYYY-MM-DD,##:##:##,GMT
                        python time_maker.py -e 1980-10-10,10:10:10,9
  -d DECODER, --decoder=DECODER
                        python time_maker.py -d list
  -i INPUT, --Input_Time=INPUT
                        python time_maker.py -d Time_Format -i Input_Time
                        python time_maker.py -d w64 -i 129943698100000000                                                                                                                                 



Encoding Sample
# python time_maker.py -e 1980-10-10,10:10:10,9

-----------------------------------------------------------------
  1 o' clock is 3600 seconds
  1 day is 86400 seconds
  1 year is 8760 hours
  1 year is 31536000 seconds
  1 second is 1000000000 nano seconds
  1 second is 1000000 micro seconds
  1 second is 1000 milli seconds
-----------------------------------------------------------------
                User Input Time -  1980-10-10 10:10:10
          User Input Time + GMT -  1980-10-10 19:10:10
-----------------------------------------------------------------
             Windows 64bit Time -  119845266100000000
   (Hex) Windows 64bit Big Time -  1a9c6a271e71500
(Hex) Windows 64bit Little Time -  0015e771a2c6a901
    (Hex) Windows FILETIME Time -  71e71500:01a9c6a2
       Windows Cookie Date Time -  1910969600,27903650
              Unix Numeric Time -  340053010
          Unix Millisecond Time -  340053010000
          Unix Microsecond Time -  340053010000000
    (Hex) Unix Numeric Big Time -  1444cc12
 (Hex) Unix Numeric Little Time -  12cc4414
             Google Chrome Time -  11984526610317375
              Mac Absolute Time -  -638254190
        (Hex) Mac Absolute Time -  x260afc6
    (Hex) MS-DOS 32bit Big Time -  014a9945
 (Hex) MS-DOS 32bit Little Time -  45994a01
       (hex) HFS 32bit Big Time -  906a7c92
    (hex) HFS 32bit Little Time -  927c6a90                                                                                                                              



Decoding Sample
# python time_maker.py -d w64 -i 129943698100000000

-----------------------------------------------------------------
  1 o' clock is 3600 seconds
  1 day is 86400 seconds
  1 year is 8760 hours
  1 year is 31536000 seconds
  1 second is 1000000000 nano seconds
  1 second is 1000000 micro seconds
  1 second is 1000 milli seconds
-----------------------------------------------------------------
                User Input Time -  129943698100000000
         User Input Time Format -  w64
            Decode Inputed Time -  2012-10-10 19:10:10
-----------------------------------------------------------------                                                                                                                         






No comments:

Post a Comment