Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

At the end of a browsing week, the content from the Daily INDEX.DAT files is archived into a single Weekly INDEX.DAT file.  The actual timestamp information within the binary file changes for this file type when compared to the other files.

...

The timestamp representation in NetAnalysis is shown in the tables below:

 

Microsoft Internet Explorer Weekly INDEX.DAT FILETIME Timestamp
0x08
Last Visited Timestamp in LOCAL time
0x10
File Created Timestamp for INDEX.DAT in UTC

 

 

NetAnalysis Representation for Weekly INDEX.DAT
Last Visited [UTC]
UTC Timestamp converted from LOCAL entry incorporating DST adjustment
Last Visited [Local]
Unaltered Last Visited Timestamp from offset 0x08
Date Index Created [UTC]
Unaltered File Created Timestamp for INDEX.DAT in UTC