Comment Comment by rootw0rm You're right, Sysinternals Process Monitor will show lots of stuff going on for your example. parent rootw0rm 3 years ago