A: Windows tracks the key files used during startup and logon and stores them in Layout.ini, which is in the %SystemRoot%\Prefetch folder (e.g. C:\Windows\Prefetch). You can view it in Notepad or any other text editor. The first part is shown below, and as you can see, it shows the files used, such as NTOSKRNL.EXE and HAL.DLL.
[OptimalLayoutFile]Version=1C:\WINDOWS\SYSTEM32\NTOSKRNL.EXEC:\WINDOWS\SYSTEM32\PSHED.DLLC:\WINDOWS\SYSTEM32\KDCOM.DLLC:\WINDOWS\SYSTEM32\CLFS.SYSC:\WINDOWS\SYSTEM32\CI.DLLC:\WINDOWS\SYSTEM32\HAL.DLLC:\WINDOWS\SYSTEM32\CONFIG\SYSTEMC:\WINDOWS\SYSTEM32\CONFIG\SOFTWAREC:\WINDOWS\SYSTEM32\C_1252.NLSC:\WINDOWS\SYSTEM32\C_437.NLSC:\WINDOWS\SYSTEM32\L_INTL.NLSC:\WINDOWS\FONTS\VGAOEM.FONC:\WINDOWS\SYSTEM32\DRIVERS\ACPI.SYSC:\WINDOWS\SYSTEM32\DRIVERS\WMILIB.SYSC:\WINDOWS\SYSTEM32\DRIVERS\AMDXATA:SYSC:\WINDOWS\SYSTEM32\DRIVERS\ATAPI.SYSC:\WINDOWS\SYSTEM32\DRIVERS\ATAPORT.SYSC:\WINDOWS\SYSTEM32\DRIVERS\BOWSER.SYSC:\WINDOWS\SYSTEM32\DRIVERS\CNG.SYSC:\WINDOWS\SYSTEM32\DRIVERS\COMPBATT.SYSC:\WINDOWS\SYSTEM32\DRIVERS\BATTC.SYS
When the system is idle, a scheduled task runs on non-SSD systems that uses the information in Layout.ini and moves all the files to the outer tracks of the disk, improving their performance. The process that moves the files is actually defrag.exe.
