# Decipher "date\_added" numbers when Autopsy does not?

**URL:** <https://sleuthkit.discourse.group/t/decipher-date-added-numbers-when-autopsy-does-not/2666>\
**Category:** Autopsy Help\
**Created:** [June 9, 2021, 10:58am UTC](https://sleuthkit.discourse.group/t/decipher-date-added-numbers-when-autopsy-does-not/2666 "2021-06-09T10:58:37Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![jdd](https://avatars.discourse-cdn.com/v4/letter/j/db5fbb/32.png) [@jdd](https://sleuthkit.discourse.group/u/jdd)\
**Post date:** [June 9, 2021, 10:58am UTC](https://sleuthkit.discourse.group/t/decipher-date-added-numbers-when-autopsy-does-not/2666/1 "2021-06-09T10:58:37Z")

</div>

Good afternoon,

If anyone can help me out with this issue, it would be greatly appreciated. Hopefully I can explain it well enough  
.  
I am currently within the file path of …Edge/User Data/Default/Bookmarks and for some reason, certain bookmarks display Date Created details (which is what I need) underneath the Results tab, while others do not. However, in the text tab, these same Bookmarks also display “date\_added” and a subsequent long number, for example;

“date\_added”: “13218220115833135”

Is there a way to read / convert this number to a Date/Time?

Thanks for the help!

Let me know if you have further questions.

jdd

---

<div class="post-metadata">

**Author:** ![Mark\_McKinnon](https://yyz2.discourse-cdn.com/free1/user_avatar/sleuthkit.discourse.group/mark_mckinnon/32/42_2.png) [@Mark\_McKinnon](https://sleuthkit.discourse.group/u/Mark_McKinnon)\
**Post date:** [June 9, 2021, 12:42pm UTC](https://sleuthkit.discourse.group/t/decipher-date-added-numbers-when-autopsy-does-not/2666/2 "2021-06-09T12:42:43Z")

</div>

The date/time is an ldap/filetime timestamp. If you go here [LDAP, Active Directory & Filetime Timestamp Converter](https://www.epochconverter.com/ldap) you can convert the timestamp to human readable. You may have to add a zero on the end to get the timestamp to renender correctly. At least that is what I had to do when I tried it.

---

<div class="post-metadata">

**Author:** ![Ricardo\_Marques](https://yyz2.discourse-cdn.com/free1/user_avatar/sleuthkit.discourse.group/ricardo_marques/32/1304_2.png) [@Ricardo\_Marques](https://sleuthkit.discourse.group/u/Ricardo_Marques)\
**Post date:** [November 19, 2021, 11:15pm UTC](https://sleuthkit.discourse.group/t/decipher-date-added-numbers-when-autopsy-does-not/2666/3 "2021-11-19T23:15:01Z")

</div>

Hello Goodnight,

I also have this problem, how can you find a solution?