While examining an ntuser.dat hive, I noticed that the GUI (rr.exe) produces a different output than rip.exe: File MRUs are not printed when using the GUI
I traced the problem down to Line 295 in the plugin code (msoffice.pl), which seem to fail. It seems when using the GUI, method getFileTimeStr is either not found or fails for some reason. I verified that the return statement of processMRUValue is never called when using GUI. Copying getFileTimeStr from rip.pl into msoffice.pl and calling it locally made it work.
While examining an ntuser.dat hive, I noticed that the GUI (rr.exe) produces a different output than rip.exe: File MRUs are not printed when using the GUI
I traced the problem down to Line 295 in the plugin code (msoffice.pl), which seem to fail. It seems when using the GUI, method getFileTimeStr is either not found or fails for some reason. I verified that the return statement of processMRUValue is never called when using GUI. Copying getFileTimeStr from rip.pl into msoffice.pl and calling it locally made it work.