Struct ExecutionRecord 

pub struct ExecutionRecord {
    pub executable: String,
    pub run_count: u32,
    pub last_run_filetimes: Vec<i64>,
    pub image_path: Option<String>,
    pub volume_serial: Option<u32>,
    pub loaded_file_count: usize,
}

The execution evidence a single prefetch file establishes.

Fields

executable: String

Executable base name (as Windows recorded it, upper-cased).

run_count: u32

Number of recorded executions.

last_run_filetimes: Vec<i64>

Up to eight most-recent run times, as raw Windows FILETIME values.

image_path: Option<String>

The executable’s own on-disk path (the loaded file whose name matches the executable), if present in the loaded-file list.

volume_serial: Option<u32>

Serial of the first referenced volume, if any.

loaded_file_count: usize

Number of files loaded during the traced runs.

Trait Implementations

impl Clone for ExecutionRecord

fn clone(&self) -> ExecutionRecord

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for ExecutionRecord

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Eq for ExecutionRecord

impl PartialEq for ExecutionRecord

fn eq(&self, other: &ExecutionRecord) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl StructuralPartialEq for ExecutionRecord