# Recent Documents module stuck at 18% for days

**URL:** <https://sleuthkit.discourse.group/t/recent-documents-module-stuck-at-18-for-days/5546>\
**Category:** Autopsy Help\
**Created:** [February 15, 2026, 1:51pm UTC](https://sleuthkit.discourse.group/t/recent-documents-module-stuck-at-18-for-days/5546 "2026-02-15T13:51:09Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![Vincent](https://avatars.discourse-cdn.com/v4/letter/v/e9bcb4/32.png) [@Vincent](https://sleuthkit.discourse.group/u/Vincent)\
**Post date:** [February 15, 2026, 1:51pm UTC](https://sleuthkit.discourse.group/t/recent-documents-module-stuck-at-18-for-days/5546/1 "2026-02-15T13:51:09Z")

</div>

Hello fellow autopsy community !

I’m currently facing an issue with autopsy 4.22.1 / Sleuth Kit 4.14.0 with the Recent Documents ingest module. On two different cases I’m working on; Recent Documents ingest stalls at 18% for days and doesn’t proceed further. It always stall at the files registry analysis part.

 ![image](https://global.discourse-cdn.com/free1/uploads/sleuthkit/original/2X/c/cf7bd17581dffab0cb878480435157cda97cbd40.png)

I’ve tested the issue with both a Windows 10 64 bits & Linux versions on two different cases; both have the same issue at the same point, but on different files. When this happens, the process is taking 100% CPU while not doing anything. I’ve attached the process on linux for Java & perl; and it just stall:

_xxxx@riaillebox:~/autopsy/autopsy-4.22.1/bin$ sudo strace -p 14973  
strace: Process 14973 attached  
futex(0x77feeefff990, FUTEX\_WAIT\_BITSET|FUTEX\_CLOCK\_REALTIME, 15025, NULL, FUTEX\_BITSET\_MATCH\_ANY_

Or:

_xxxx@riaillebox:~/autopsy/autopsy-4.22.1/bin$ sudo strace -p 40200  
strace: Process 40200 attached  
wait4(-1,_

Autopsy logfile just give the following:

_2026-01-20 21:28:35.373 org.sleuthkit.autopsy.coreutils.ImageUtils$ReadImageTaskBase lambda$readImage$0  
WARNING: ImageIO could not read /img\_dm-0/Users/XXXXXXX/AppData/Roaming/Microsoft/Windows/Recent/Skeppsbron 3 \_ Översikt.lnk. It may be unsupported or corrupt: javax.imageio.IIOException: Error reading PNG metadata_

And then no further progress.

So it seems the analysis of a simple file is blocking the whole process. Do you know if the process is going to timeout at some point and go through the next file or will it stall forever ? Autopsy is stuck on that file since 13h already…

Is there any workaround/solution for this ?

Thank you !

---

<div class="post-metadata">

**Author:** ![Mark\_McKinnon](https://yyz2.discourse-cdn.com/free1/user_avatar/sleuthkit.discourse.group/mark_mckinnon/32/42_2.png) [@Mark\_McKinnon](https://sleuthkit.discourse.group/u/Mark_McKinnon)\
**Post date:** [February 18, 2026, 3:14am UTC](https://sleuthkit.discourse.group/t/recent-documents-module-stuck-at-18-for-days/5546/2 "2026-02-18T03:14:51Z")

</div>

I would take a guess and say that there is a registry file that is hanging running in RegRipper. If you take the registry hives and run them thru RegRipper do any of them take a long time to run or never finish?

---

<div class="post-metadata">

**Author:** ![oscarjs](https://avatars.discourse-cdn.com/v4/letter/o/bbce88/32.png) [@oscarjs](https://sleuthkit.discourse.group/u/oscarjs)\
**Post date:** [February 22, 2026, 11:40am UTC](https://sleuthkit.discourse.group/t/recent-documents-module-stuck-at-18-for-days/5546/3 "2026-02-22T11:40:30Z")

</div>

Same problem here in most cases.

I have to run recent module on autposy 4.21 and then continue with 4.22.1.
