Windows Prefetch
E719155
Windows Prefetch is a performance optimization feature in Microsoft Windows that accelerates application and system startup by preloading frequently used data into memory based on past usage patterns.
Statements (49)
| Predicate | Object |
|---|---|
| instanceOf |
Windows performance optimization feature
ⓘ
operating system component ⓘ |
| affectedBy |
manual deletion of .pf files
ⓘ
system cleanup utilities ⓘ |
| analyzedBy | digital forensics tools ⓘ |
| canBeDisabled | true ⓘ |
| category |
Windows internals feature
ⓘ
system performance feature ⓘ |
| containsInformation |
list of files accessed during launch
ⓘ
paths to executables ⓘ volume information ⓘ |
| controlledByRegistryKey | HKLM\SYSTEM\CurrentControlSet\Control\Session Manager\Memory Management\PrefetchParameters ⓘ |
| creates |
boot prefetch trace files
ⓘ
per-application prefetch trace files ⓘ |
| defaultState | enabled ⓘ |
| dependsOn | NTFS file system features ⓘ |
| developedBy | Microsoft ⓘ |
| fileExtension | .pf ⓘ |
| forensicValue |
approximate first run time of executables
ⓘ
approximate last run time of executables ⓘ evidence of program execution ⓘ run count of executables ⓘ |
| hasRegistryValue | EnablePrefetcher ⓘ |
| improves |
perceived performance
ⓘ
system responsiveness ⓘ |
| introducedInVersion | Windows XP NERFINISHED ⓘ |
| monitors |
boot process
ⓘ
executable file launches ⓘ |
| operatesAtLevel | kernel level ⓘ |
| optimizationTarget |
application load time
ⓘ
disk I/O patterns ⓘ |
| partOf | Microsoft Windows NERFINISHED ⓘ |
| platform |
Windows 10
NERFINISHED
ⓘ
Windows 11 NERFINISHED ⓘ Windows 7 NERFINISHED ⓘ Windows 8 NERFINISHED ⓘ Windows 8.1 NERFINISHED ⓘ Windows Vista NERFINISHED ⓘ Windows XP NERFINISHED ⓘ |
| primaryPurpose |
accelerate application startup
ⓘ
accelerate system startup ⓘ |
| relatedTo |
Windows ReadyBoost
NERFINISHED
ⓘ
Windows SuperFetch NERFINISHED ⓘ |
| storesDataInDirectory | C:\Windows\Prefetch ⓘ |
| storesDataType | prefetch files ⓘ |
| usedBy |
Windows boot process
ⓘ
application launch process ⓘ |
| usesMechanism |
preloading frequently used data into memory
ⓘ
tracking past usage patterns ⓘ |
Referenced by (1)
Full triples — surface form annotated when it differs from this entity's canonical label.