Link file analysis

Hi,

      I want to calculate the creation time of a file from its link file contents. What I have done so far is given below.

    The structure of link file says the creation time starts from offset 1C (up to 8bytes). The storage is in little endian format so I convert it to big endian then I converted the hex value to decimal. I thought it is a unix time stamp so I convert it into actual date and time but the result I got was wrong(it is not the actual creation time of the file). Please help me out. 



  • Edited by Kitoose Friday, May 30, 2014 11:59 AM
May 30th, 2014 11:43am

Hi,

It's confused about your issue. What's the link file? Please give us more detailed information or screenshot.

Free Windows Admin Tool Kit Click here and download it now
June 1st, 2014 10:43pm

Hi,

Thanks for your reply. Please go through this. This is what I mean

http://msdn.microsoft.com/en-us/library/dd891294.aspx

June 3rd, 2014 1:18am

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics