Windows 7 Forums
Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.

Windows 7: Get the Full Process path from the prefetch file.(Offset Address)

03 Oct 2016   #1

Windows 7 64 Bit
Get the Full Process path from the prefetch file.(Offset Address)

I am in an attempt of listing some details from the Windows Prefetch file such Filename, FileCreatedTime,
FileModifiedTime,File Size, Process Name, Process Path,Run Counter & Last Run time.
Though there are many tools like Nirsoft WinPrefetchViewer and couple of more available. I thought of creating
one internally for my organization.
And coming to the point out of these many details I have cracked or extracted them except the Process full path
(For Eg. C:\Program Files (x86)\Mozilla Firefox\Firefox.exe in case Firefox executable).
To give more details I have converted the .pf file into a hexdecimal format for extarcting the offset addresses
of the field and converted them to decimal or Asci accordingly.
And spending considerable amount of time in exploring I was not able to find the offset address of the Full process
path in the prefetch file.
It will be great if someone through light in this regard.

My System SpecsSystem Spec

 Get the Full Process path from the prefetch file.(Offset Address)

Thread Tools

Similar help and support threads
Thread Forum
Set Explorer to always display full path in the address bar.
I've looked but can't find this. When I left click in Explorer address bar It displays the full normal path. I want this to be the default option for Explorer. Or can this option be flipped ? I've tried setting the Classic Theme and setting the property in... "Organize->Folder and Search...
General Discussion
View Full Path-File Location?
Sometimes, various things pertaining to one subject (topic) get scattered around in different locations. Then I want to consolidate them and put them all in one file. Here, for example, a search shows a lot of recipes, pictures, documents etc. that are about spaghetti and I want to put them all in...
General Discussion
How to make File Explorer display full address of files in search
I have done a search and file explorer returns some results. You can see the locations of each file are chopped off. But there is no grid splitter allowing me to expand the filename column. How can I view the whole address of the files in Search results?
General Discussion
Windows explorer does not show full file path with click.
As mentioned above, I can not get windows explorer to show the full file path even when I click in the empty space. I have looked everywhere for how to fix this. It also does not copy the full file path when you ask it to do so. I don't want to go to classic. My hard drive died in my laptop. I...
General Discussion
Process Explorer Question: Odd Path?
Hi everyone. Sorry if this is the wrong place to ask this question, but I thought I might as well ask here. A lot of the time I use Sysinternal's Process Explorer. Usually when running process explorer, hovering the mouse over a process shows both its list of services, and also the path from...

Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd

All times are GMT -5. The time now is 23:27.
Twitter Facebook Google+