From 04c5007fbbf7f8b914b7028c859265b6766bb54e Mon Sep 17 00:00:00 2001 From: Mike Auty Date: Thu, 13 Dec 2018 21:38:20 +0000 Subject: [PATCH] Fix minor issue with the conversion change. --- volatility/plugins/windows/registry/userassist.py | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/volatility/plugins/windows/registry/userassist.py b/volatility/plugins/windows/registry/userassist.py index 0263c1125..e64095b43 100644 --- a/volatility/plugins/windows/registry/userassist.py +++ b/volatility/plugins/windows/registry/userassist.py @@ -138,8 +138,7 @@ class UserAssist(interfaces.plugins.PluginInterface): # each guid key should have a Count key in it for countkey in guidkey.get_subkeys(): countkey_path = countkey.get_key_path() - countkey_last_write_time = volatility.framework.renderers.conversion.wintime_to_datetime( - countkey.LastWriteTime.QuadPart) + countkey_last_write_time = conversion.wintime_to_datetime(countkey.LastWriteTime.QuadPart) # output the parent Count key result = (0,