Notifications
Clear all

Timestamp type

5 Posts
4 Users
0 Likes
1,360 Views
minime2k9
(@minime2k9)
Posts: 481
Honorable Member
Topic starter
 

I have a timestamp in the following format
568212425.116299

This date relates roughly to today (03/01/2019 Date in proper format - DD/MM/YYYY for our US friends) and has been taken from an App on an IOS device. Does anyone have any ideas what type of timestamp it is and how to convert it into a usable date?

 
Posted : 03/01/2019 2:49 pm
(@mcman)
Posts: 189
Estimable Member
 

MAC absolute time?
Dcode popped this out
Thu, 03 January 2019 124705 UTC

 
Posted : 03/01/2019 3:05 pm
(@willbarton)
Posts: 6
Active Member
 

Looks like an Apple Cocoa Core Data Timestamp. It works out to be roughly GMT Thursday, 3 January 2019 124705. Theres a couple of converters about and epochconverter has a cocoa core data convertor on it.

Hope this helps!

 
Posted : 03/01/2019 3:06 pm
jaclaz
(@jaclaz)
Posts: 5133
Illustrious Member
 

I have a timestamp in the following format
568212425.116299

This date relates roughly to today (03/01/2019 Date in proper format - DD/MM/YYYY for our US friends) and has been taken from an App on an IOS device. Does anyone have any ideas what type of timestamp it is and how to convert it into a usable date?

That is a NSdate, basically it is "epoch" with a different base
https://sandersonforensics.com/forum/content.php?253-Validating-a-timestamp

NSDate (IOS)

Records the number of seconds since 01/01/2001

You can use this converter
https://www.dcode.fr/timestamp-converter

setting the "base" date to 01/01/2001
the fractional part is (should be) fractions of seconds.

Please also note that unlike epoch, that is (should be) local time, not UTC.

jaclaz

 
Posted : 03/01/2019 3:18 pm
minime2k9
(@minime2k9)
Posts: 481
Honorable Member
Topic starter
 

Thanks for all the help, I must have an old version of Dcode as none of them worked for me!

 
Posted : 03/01/2019 4:35 pm
Share: