From 90ad7b1609bd6017cd44a2d11c214bbe5014d407 Mon Sep 17 00:00:00 2001
From: Jan <jan.lange97@gmx.net>
Date: Thu, 11 Mar 2021 19:05:48 +0100
Subject: [PATCH] reverts pointless createtime offset change

---
 .../framework/symbols/windows/netscan/netscan-win8-x64.json     | 2 +-
 .../framework/symbols/windows/netscan/netscan-win81-x64.json    | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/volatility3/framework/symbols/windows/netscan/netscan-win8-x64.json b/volatility3/framework/symbols/windows/netscan/netscan-win8-x64.json
index 0bcf0cc6a..24873b078 100644
--- a/volatility3/framework/symbols/windows/netscan/netscan-win8-x64.json
+++ b/volatility3/framework/symbols/windows/netscan/netscan-win8-x64.json
@@ -266,7 +266,7 @@
                 }
             },
             "CreateTime": {
-                "offset": 224,
+                "offset": 64,
                 "type": {
                     "kind": "union",
                     "name": "_LARGE_INTEGER"
diff --git a/volatility3/framework/symbols/windows/netscan/netscan-win81-x64.json b/volatility3/framework/symbols/windows/netscan/netscan-win81-x64.json
index 6a4d1aee7..d6c51d2db 100644
--- a/volatility3/framework/symbols/windows/netscan/netscan-win81-x64.json
+++ b/volatility3/framework/symbols/windows/netscan/netscan-win81-x64.json
@@ -266,7 +266,7 @@
                 }
             },
             "CreateTime": {
-                "offset": 224,
+                "offset": 64,
                 "type": {
                     "kind": "union",
                     "name": "_LARGE_INTEGER"