So...P1. Does that mean we can talk about it? Show me...pls.
Personally, you can detour any exe file execution with a loader, for control execution on a single file.
I have adjusted many firewall rules, to let a file access the outside TCPIP world. It is interesting they NEVER needed to touch the file itself to operate. It's accept or deny the connection direction in the firewall.
So the question of the moment is, What makes interrupting the OS FILE APIs level so important to your programming task ???