Date & Time
UNIX Timestamp to Windows Filetime Converter
Convert a Unix timestamp in seconds, milliseconds, microseconds, or nanoseconds to Windows FILETIME ticks as decimal or hex.
This tool runs open-source code from CyberChef by GCHQ (Apache License 2.0). See open-source credits.
FILETIME counts 100-nanosecond ticks from January 1, 1601 UTC. Conversion changes both the epoch and the unit.
The result contains decimal ticks or hexadecimal bytes in the selected byte order.
- Build a FILETIME value to search for in an NTFS timestamp, registry key, or event log export.
Sources: Microsoft FILETIME structure; Microsoft FileTimeToSystemTime range
Convert a known Unix timestamp to FILETIME
Input: 1700000000 (November 14, 2023, 22:13:20 UTC)
Settings: Input units Seconds (s), Output format Decimal
Result: 133444736000000000
(1700000000 + 11644473600) × 10000000 = 133444736000000000. Hex (little endian) returns 00006dc64717da01, the byte order stored in files.
Match timestamp units and output byte order
- Enter the numeric Unix timestamp.
- Choose Input units from the source specification.
- Choose Output format. Little-endian Hex matches stored FILETIME bytes.
- Incorrect units can produce a valid but unintended date.
- Fractions must map to whole ticks; the tool does not round them.
- The accepted unsigned range exceeds the range supported by FileTimeToSystemTime.