internal UserAssist(ValueKey vk, byte[] bytes) { Path = Decode(vk.Name); byte[] data = vk.GetData(bytes); RunCount = BitConverter.ToUInt32(data, 0x04); FocusTime = BitConverter.ToUInt32(data, 0x0C); LastExecutionTime = DateTime.FromFileTimeUtc(BitConverter.ToInt64(data, 0x03C)); }
private UserAssist(string user, ValueKey vk, byte[] bytes) { User = user; ImagePath = Decode(vk.Name); byte[] data = (byte[])vk.GetData(bytes); RunCount = BitConverter.ToUInt32(data, 0x04); FocusTime = BitConverter.ToUInt32(data, 0x0C); LastExecutionTimeUtc = DateTime.FromFileTimeUtc(BitConverter.ToInt64(data, 0x03C)); }
internal TrustRecord(byte[] bytes, string user, ValueKey vk) { User = user; Path = vk.Name; TrustTime = DateTime.FromFileTimeUtc(BitConverter.ToInt64((byte[])vk.GetData(bytes), 0x00)); }
internal RunKey(string location, ValueKey vk) { AutoRunLocation = location; Name = vk.Name; ImagePath = (string)vk.GetData(); }