# Section 8 - Recent Activity. Missing "Installed Programs" **URL:** \ **Category:** Autopsy Online Training\ **Created:** [May 7, 2020, 11:30am UTC](https://sleuthkit.discourse.group/t/section-8-recent-activity-missing-installed-programs/1494 "2020-05-07T11:30:23Z")\ **Posts on this page:** 11\ **Page:** 1
**Author:** ![rigui](https://avatars.discourse-cdn.com/v4/letter/r/cab0a1/32.png) [@rigui](https://sleuthkit.discourse.group/u/rigui)\ **Post date:** [May 7, 2020, 11:30am UTC](https://sleuthkit.discourse.group/t/section-8-recent-activity-missing-installed-programs/1494/1 "2020-05-07T11:30:24Z")
Trying to complete Section 8 Quiz a question asks if MPlayer3 is installed on analyzed system. “Installed Programs” doesn’t appear in the tree below Extracted Concent and Logs show this errors. It seems like a problem related to date format: _2020-05-06 12:00:47.369 org.sleuthkit.autopsy.recentactivity.ExtractRegistry parseAutopsyPluginOutput_ \*WARNING: RegRipper::Conversion on DateTime -\> \* _java.text.ParseException: Unparseable date: “Tue Oct 29 16:54:05 2019”_ - java.text.DateFormat.parse(DateFormat.java:366)\* - org.sleuthkit.autopsy.recentactivity.ExtractRegistry.parseAutopsyPluginOutput(ExtractRegistry.java:562)\* - org.sleuthkit.autopsy.recentactivity.ExtractRegistry.analyzeRegistryFiles(ExtractRegistry.java:319)\* - org.sleuthkit.autopsy.recentactivity.ExtractRegistry.process(ExtractRegistry.java:1840)\* - org.sleuthkit.autopsy.recentactivity.RAImageIngestModule.process(RAImageIngestModule.java:127)\* - org.sleuthkit.autopsy.ingest.DataSourceIngestPipeline$PipelineModule.process(DataSourceIngestPipeline.java:200)\* - org.sleuthkit.autopsy.ingest.DataSourceIngestPipeline.process(DataSourceIngestPipeline.java:113)\* - org.sleuthkit.autopsy.ingest.DataSourceIngestJob.process(DataSourceIngestJob.java:744)\* - org.sleuthkit.autopsy.ingest.DataSourceIngestTask.execute(DataSourceIngestTask.java:30)\* - org.sleuthkit.autopsy.ingest.IngestManager$ExecuteIngestJobTasksTask.run(IngestManager.java:926)\* - java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:511)\* - java.util.concurrent.FutureTask.run(FutureTask.java:266)\* - java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1149)\* - java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:624)\* - java.lang.Thread.run(Thread.java:748)\* _2020-05-06 12:00:47.38 org.sleuthkit.autopsy.recentactivity.ExtractRegistry parseAutopsyPluginOutput_ _SEVERE: Failed to parse epoch time for installed program artifact._ _java.text.ParseException: Unparseable date: “Tue Mar 19 06:23:27 2019”_ - java.text.DateFormat.parse(DateFormat.java:366)\* - org.sleuthkit.autopsy.recentactivity.ExtractRegistry.parseAutopsyPluginOutput(ExtractRegistry.java:741)\* - org.sleuthkit.autopsy.recentactivity.ExtractRegistry.analyzeRegistryFiles(ExtractRegistry.java:319)\* - org.sleuthkit.autopsy.recentactivity.ExtractRegistry.process(ExtractRegistry.java:1840)\* - org.sleuthkit.autopsy.recentactivity.RAImageIngestModule.process(RAImageIngestModule.java:127)\* - org.sleuthkit.autopsy.ingest.DataSourceIngestPipeline$PipelineModule.process(DataSourceIngestPipeline.java:200)\* - org.sleuthkit.autopsy.ingest.DataSourceIngestPipeline.process(DataSourceIngestPipeline.java:113)\* - org.sleuthkit.autopsy.ingest.DataSourceIngestJob.process(DataSourceIngestJob.java:744)\* - org.sleuthkit.autopsy.ingest.DataSourceIngestTask.execute(DataSourceIngestTask.java:30)\* - org.sleuthkit.autopsy.ingest.IngestManager$ExecuteIngestJobTasksTask.run(IngestManager.java:926)\* - java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:511)\* - java.util.concurrent.FutureTask.run(FutureTask.java:266)\* - java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1149)\* - java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:624)\* - java.lang.Thread.run(Thread.java:748)\* _2020-05-06 12:00:47.395 org.sleuthkit.autopsy.recentactivity.RAImageIngestModule process_ _SEVERE: Exception occurred in Registry_ _java.lang.NullPointerException_ - org.sleuthkit.autopsy.recentactivity.ExtractRegistry.parseAutopsyPluginOutput(ExtractRegistry.java:750)\* - org.sleuthkit.autopsy.recentactivity.ExtractRegistry.analyzeRegistryFiles(ExtractRegistry.java:319)\* - org.sleuthkit.autopsy.recentactivity.ExtractRegistry.process(ExtractRegistry.java:1840)\* - org.sleuthkit.autopsy.recentactivity.RAImageIngestModule.process(RAImageIngestModule.java:127)\* - org.sleuthkit.autopsy.ingest.DataSourceIngestPipeline$PipelineModule.process(DataSourceIngestPipeline.java:200)\* - org.sleuthkit.autopsy.ingest.DataSourceIngestPipeline.process(DataSourceIngestPipeline.java:113)\* - org.sleuthkit.autopsy.ingest.DataSourceIngestJob.process(DataSourceIngestJob.java:744)\* - org.sleuthkit.autopsy.ingest.DataSourceIngestTask.execute(DataSourceIngestTask.java:30)\* - org.sleuthkit.autopsy.ingest.IngestManager$ExecuteIngestJobTasksTask.run(IngestManager.java:926)\* - java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:511)\* - java.util.concurrent.FutureTask.run(FutureTask.java:266)\* - java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1149)\* - java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:624)\* - java.lang.Thread.run(Thread.java:748)\* _2020-05-06 12:01:02.268 org.sleuthkit.autopsy.recentactivity.SearchEngineURLQueryAnalyzer complete_ _INFO: Search Engine URL Query Analyzer has completed._ _2020-05-06 12:01:02.268 org.sleuthkit.autopsy.ingest.DataSourceIngestPipeline process_ _INFO: Recent Activity analysis of device1\_laptop.e01 (jobId=1) finished_ _2020-05-06 12:01:02.269 org.sleuthkit.autopsy.ingest.DataSourceIngestJob logInfoMessage_ _INFO: Finished first stage analysis (data source = device1\_laptop.e01, objId = 1, jobId = 1)_ _2020-05-06 12:01:02.27 org.sleuthkit.autopsy.ingest.DataSourceIngestJob logInfoMessage_ _INFO: Finished analysis (data source = device1\_laptop.e01, objId = 1, jobId = 1)_ _2020-05-06 12:01:02.276 org.sleuthkit.autopsy.ingest.IngestManager finishIngestJob_ ---
**Author:** ![BrianMoran](https://yyz2.discourse-cdn.com/free1/user_avatar/sleuthkit.discourse.group/brianmoran/32/453_2.png) [@BrianMoran](https://sleuthkit.discourse.group/u/BrianMoran)\ **Post date:** [May 7, 2020, 2:34pm UTC](https://sleuthkit.discourse.group/t/section-8-recent-activity-missing-installed-programs/1494/2 "2020-05-07T14:34:53Z")
Hello, Did you try closing the Autopsy program and reopening it? We know that on some systems the UI is not refreshing. Based off of your log, it looks like everything ran, it just looks like your UI may not be refreshing properly. ---
**Author:** ![rigui](https://avatars.discourse-cdn.com/v4/letter/r/cab0a1/32.png) [@rigui](https://sleuthkit.discourse.group/u/rigui)\ **Post date:** [May 7, 2020, 2:45pm UTC](https://sleuthkit.discourse.group/t/section-8-recent-activity-missing-installed-programs/1494/3 "2020-05-07T14:45:53Z")
Hello, Thanks for your answer. Yes I did it! I ran Recent Activity ingest yesterday and since then I restarted Autopsy several times. For me, the log seems to say there is a problem parsing the date and hour due to unexpected format (Windows system is in Spanish). ---
**Author:** ![BrianMoran](https://yyz2.discourse-cdn.com/free1/user_avatar/sleuthkit.discourse.group/brianmoran/32/453_2.png) [@BrianMoran](https://sleuthkit.discourse.group/u/BrianMoran)\ **Post date:** [May 7, 2020, 2:49pm UTC](https://sleuthkit.discourse.group/t/section-8-recent-activity-missing-installed-programs/1494/4 "2020-05-07T14:49:21Z")
Yes, we understand that, but not being able to read one date should not cause the ingest module to fail. It looks like something else is happening on your system that is causing either your UI to not refresh, or the ingest modules are not running, or maybe even some aspect of Autopsy itself is being sandboxed by antivirus/EDR/etc. Can you please share screenshots of your UI, and the Ingest Module interface? ---
**Author:** ![rigui](https://avatars.discourse-cdn.com/v4/letter/r/cab0a1/32.png) [@rigui](https://sleuthkit.discourse.group/u/rigui)\ **Post date:** [May 7, 2020, 2:58pm UTC](https://sleuthkit.discourse.group/t/section-8-recent-activity-missing-installed-programs/1494/5 "2020-05-07T14:58:52Z")
![image](https://global.discourse-cdn.com/free1/uploads/sleuthkit/original/1X/72cd78bdaa708a647e18b2f882bcf380a64fa25c.png) Thanks for your help. ---
**Author:** ![rigui](https://avatars.discourse-cdn.com/v4/letter/r/cab0a1/32.png) [@rigui](https://sleuthkit.discourse.group/u/rigui)\ **Post date:** [May 7, 2020, 2:59pm UTC](https://sleuthkit.discourse.group/t/section-8-recent-activity-missing-installed-programs/1494/6 "2020-05-07T14:59:27Z")
![image](https://global.discourse-cdn.com/free1/uploads/sleuthkit/original/1X/5dfa6a86388cff57c0366058f97ad4ff0f29eb64.png) Is this enough? ---
**Author:** ![BrianMoran](https://yyz2.discourse-cdn.com/free1/user_avatar/sleuthkit.discourse.group/brianmoran/32/453_2.png) [@BrianMoran](https://sleuthkit.discourse.group/u/BrianMoran)\ **Post date:** [May 7, 2020, 3:18pm UTC](https://sleuthkit.discourse.group/t/section-8-recent-activity-missing-installed-programs/1494/7 "2020-05-07T15:18:15Z")
Yes, that is perfect. Thank you. Can you also send the full logs to support[@]autopsy[.]com? We will submit this as a bug, and pass that on to the development team and see if we can figure out why this is happening. Everything else is populating as it should, but for some reason, the Installed Applications is not. ---
**Author:** ![fchainho](https://avatars.discourse-cdn.com/v4/letter/f/85f322/32.png) [@fchainho](https://sleuthkit.discourse.group/u/fchainho)\ **Post date:** [May 7, 2020, 4:33pm UTC](https://sleuthkit.discourse.group/t/section-8-recent-activity-missing-installed-programs/1494/8 "2020-05-07T16:33:58Z")
Hello Briamñ, This problem also happens in OS in Portuguese. it is a problem I have with Autopsy several summers. If you need a log to test the problem, let me know. Thank you ---
**Author:** ![grzesiug](https://avatars.discourse-cdn.com/v4/letter/g/839c29/32.png) [@grzesiug](https://sleuthkit.discourse.group/u/grzesiug)\ **Post date:** [May 9, 2020, 8:47pm UTC](https://sleuthkit.discourse.group/t/section-8-recent-activity-missing-installed-programs/1494/9 "2020-05-09T20:47:32Z")
Problem apears on Polish OS too, also with analizing Edge history . ---
**Author:** ![mar](https://avatars.discourse-cdn.com/v4/letter/m/f19dbf/32.png) [@mar](https://sleuthkit.discourse.group/u/mar)\ **Post date:** [May 9, 2020, 10:08pm UTC](https://sleuthkit.discourse.group/t/section-8-recent-activity-missing-installed-programs/1494/10 "2020-05-09T22:08:33Z")
I have same problem, “Installed Programs” doesn’t appear after run Recent Activity ingest. ---
**Author:** ![BrianMoran](https://yyz2.discourse-cdn.com/free1/user_avatar/sleuthkit.discourse.group/brianmoran/32/453_2.png) [@BrianMoran](https://sleuthkit.discourse.group/u/BrianMoran)\ **Post date:** [May 10, 2020, 12:23am UTC](https://sleuthkit.discourse.group/t/section-8-recent-activity-missing-installed-programs/1494/11 "2020-05-10T00:23:26Z")
Due to a bug with some foreign language sets not being able to view some data from Ingest Modules, this question has changed. Thank you for identifying it as a bug.