PrefetchBrowser

[Updates]

• Added Hashes of the Prefetch file (MD5,SHA1,SHA256)
• Added actual offsets to each node
• removed unknown stuff (for now)

Thanks to @EricZimmerman !! for the XressStream code

To Do:

• Add error checking
• Add support for earlier versions of Prefetch (17/23/26)
• Windows 10/11 (30 ver 1 & 2)
• More testing ..

MD5: 5E6D325FF2CE591408C72D55EB0E7FD3
SHA256: 78125D7C84DDF218518E987B8DB5A721334BCD926B45F7DEDB4A756A03DD69CF

PrefetchBrowser

[Update]

• Works with Windows 10/11 Prefetch files
• Added option to export the raw uncompressed Prefetch Data to a new file
• Added option to copy the selected Node & sub-nodes text (from the Prefetch properties tree)
• Added some Volume info I missed
• Double-clicking on a filename string (blue) opens the respective File Metrics entry and vice versa

Thanks to @EricZimmerman !! for the XressStream code

To Do:

• Add error checking
• Add support for earlier versions of Prefetch (17/23/26)
• Windows 10/11 ok

MD5: 5A316840C2BF98DEDD31DF461DBF82D3
SHA256: 5B896FC9DB591A57639403535BBD31F52EA7E6852442B36747461EF6A3892558

PrefetchBrowser

[Initial Release]

• Should work with Windows 10 Prefetch files

Note: Might need admin rights to read the Windows\Prefetch folder

MD5: 964D26C379BBD6D946E6E057424333A0
SHA256: AABC4498A9866EDF221D2DBB7598F191E06E7231A07083792D9C4421DD758508