Changelog
Prefetch Parser release history, starting with the 0.9.0 cross-platform release.
Versions follow the releases on GitHub. Dates are release dates.
Released 2026-09-06. First release.
Highlights
Section titled “Highlights”- Parses Prefetch format versions 17, 23, 26, 30 and 31, the SuperFetch
Ag*.dbfamily, ReadyBoot traces,Layout.ini, and prefetch hidden in NTFS alternate data streams. - Runs on Linux and macOS as well as Windows, using an XPRESS Huffman decompressor written from the MS-XCA specification.
- Ships a Linux x86-64 bundle of the command line and GUI that needs no Python installation, with a
SHA256SUMS.txtto verify it.
Testing
Section titled “Testing”- 23 test suites against 699 real prefetch files from four independent sources and all five format versions.
- 224 expected values taken from a different implementation’s own test suite, used as an external check.
- A suite that cannot run on a given machine is reported as skipped, never as passed.
- The bundled build’s export was compared cell for cell with the source build’s: 184 rows by 65 columns, identical.
Why 0.9 and not 1.0
Section titled “Why 0.9 and not 1.0”The Windows-only code paths have not yet run on Windows: alternate data stream enumeration on a real NTFS volume, the ntdll decompressor on real compressed files, and a frozen .exe under the Windows loader. They are tested against stubs on every build. Version 1.0 is planned after the first clean run on Windows.