I can't replicate the findings in Process Monitor. Could someone please post some proof of Wireshark, process monitor or firewall screenshots?