in reply to Re: converting microsoft timestamps
in thread converting microsoft timestamps

It's the one I described - apparently it's a FILETIME struct (as BrowserUk points out), the specific place I am getting them is ActiveDirectory fields for various account control functions.