Prefetch (.pf) Viewer
Reads a Windows Prefetch file — created automatically to speed up an application’s startup — showing how many times it has run, when it last ran, and every file it references.
Drop a .pf file here, or click to choose one
Works entirely offline in your browser. Nothing is uploaded.
When you'd use this
- Checking when and how often a program has actually been run
- Reviewing a Prefetch file during a forensic investigation of program execution history
- Investigating what files a program loaded on a past run
Windows 10/11 Prefetch files are compressed with Microsoft’s Xpress Huffman algorithm (the "MAM" container); this is decompressed entirely in your browser before reading. Supports format versions 17 (XP) through 31 (Windows 11).