Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

msoffice v.20200518 not outputting File MRUs when using GUI (rr.exe) #43

Open
el-pako opened this issue Nov 24, 2021 · 0 comments
Open

Comments

@el-pako
Copy link

el-pako commented Nov 24, 2021

While examining an ntuser.dat hive, I noticed that the GUI (rr.exe) produces a different output than rip.exe: File MRUs are not printed when using the GUI

I traced the problem down to Line 295 in the plugin code (msoffice.pl), which seem to fail. It seems when using the GUI, method getFileTimeStr is either not found or fails for some reason. I verified that the return statement of processMRUValue is never called when using GUI. Copying getFileTimeStr from rip.pl into msoffice.pl and calling it locally made it work.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant