Feature image for Digital Detective's DCode showing hex analysis and timestamp decoding

We are pleased to announce the release of Digital Detective’s DCode™ v5. This useful FREE application has been featured in numerous forensic books and papers over the years, and we have now had the opportunity to add some new features and bring it up to date.

The software was designed to assist forensic examiners in converting data found, when conducting analysis of desktop and mobile devices, into human-readable timestamps. It also allows the reverse process where timestamps can be encoded into a number of different formats.

Encoding and Decoding Timestamp Data

DCode™ v5 now features support for 60 different timestamp formats from various operating systems and platforms. You can decode values in the form of Little-Endian Hexadecimal, Big-Endian Hexadecimal, 64-bit Integers, 32-bit Integers, Double-precision floating-point numbers and various text formats.

 

Digital Detective DCode showing Time Encoding

Figure 1. Encoding a date/time value into Little-Endian Hexadecimal format

 

Digital Detective DCode showing Windows Filetime Decoding

Figure 2. Decoding a Windows Filetime from Little-Endian Hexadecimal format

 

DCode™ v5 also supports time zone conversion and will show UTC (Zulu) time and a converted time based on the selected time zone. If you select the “K” identifier in the timestamp pattern, DCode™ will also display the time zone designator.

Supported Timestamp Formats

DCode™ can convert the following timestamps into a number of different input and output formats such as Numeric (Int32, Int64, Double-precision floating-point), Hexadecimal (Little-Endian), Hexadecimal (Big-Endian) and Text.

 

Release Date: 2020-07-13
Build: 5.2.20195.4
File: DCode-x86-EN-5.2.20195.4.exe   Length: 22.8 MB
MD5:  90-b5-c3-a0-cd-bf-f2-d3-86-2a-2f-13-30-9d-50-35
5 replies
  1. Jacques Boucher
    Jacques Boucher says:

    Thanks for continuing to contribute to the forensic community. I’ve been a long time user of the prior version of DCode.

    I just downloaded it and installed it on my Surface Pro running W10. It launches in a rather small window so the input fields are overlapping. It does not allow me to resize the window. Are others having this issue? I tried rebooting the computer but it did not correct the issue.

    • Jacques Boucher
      Jacques Boucher says:

      Just tested on another laptop and the window size is much better. The issue seems to be when you use zoom in the display settings. The screen on the Surface Pro is smaller, but higher resolution. The recommended zoom setting is 200%. On the larger laptop the screen resolution is less, and the recommended zoom setting is 125%.

      If I reduce the zoom setting on the Surface Pro, then I can see the full window properly. But then everything is much smaller due to the high resolution.

Comments are closed.