established

Prefetch (.pf) Viewer

Reads a Windows Prefetch file — created automatically by Windows to speed up an application's startup — showing how many times it has run, when it last ran, and every file it references.

Why it exists

Seeing an application's execution history — run count, last run time, referenced DLLs — directly from its Prefetch file.

How to use it

Drop a .pf file. Run count, last run time(s), and every referenced file appear immediately.

Good to know

Windows 10/11 Prefetch files are compressed with Microsoft's Xpress Huffman algorithm (the "MAM" container); this is decompressed entirely in your browser before reading. Supports format versions 17 (XP) through 31 (Windows 11).

Open the tool