fix import

mkorman90 · Aug 13, 2024 · d973620 · d973620
1 parent 525dd0a
commit d973620
Show file tree

Hide file tree

Showing 2 changed files with 3 additions and 5 deletions.
diff --git a/regipy/plugins/ntuser/user_assist.py b/regipy/plugins/ntuser/user_assist.py
@@ -2,7 +2,7 @@
 
 import logging
 
-from construct import Bytes, Const, ConstError, Int32ul, Struct
+from construct import Bytes, Const, ConstError, Int32ul, Int64ul, Struct
 
 from regipy.exceptions import RegistryKeyNotFoundException
 from regipy.hive_types import NTUSER_HIVE_TYPE
@@ -47,7 +47,7 @@
 WIN_XP_USER_ASSIST = Struct(
     "session_id" / Int32ul,
     "run_counter" / Int32ul,
-    "last_execution_timestamp" / Int32ul,
+    "last_execution_timestamp" / Int64ul,
 )
 
 WIN7_USER_ASSIST = Struct(
@@ -56,7 +56,7 @@
     "focus_count" / Int32ul,
     "total_focus_time_ms" / Int32ul,
     "unknown" * Bytes(44),
-    "last_execution_timestamp" / Int32ul,
+    "last_execution_timestamp" / Int64ul,
     "Const" * Const(b"\x00\x00\x00\x00"),
 )
 

diff --git a/regipy_tests/plugin_tests.py b/regipy_tests/plugin_tests.py
@@ -151,8 +151,6 @@ def test_user_assist_plugin_ntuser(ntuser_hive):
     plugin_instance = UserAssistPlugin(registry_hive, as_json=True)
     plugin_instance.run()
 
-    import ipdb; ipdb.set_trace()
-
     assert len(plugin_instance.entries) == 62
     assert plugin_instance.entries[-1] == {
         "focus_count": 1,