$watcher = New-Object System.IO.FileSystemWatcher $watcher.Path = "C:\Users\$env:USERNAME\Downloads" $watcher.Filter = "*writetime.exe" $watcher.EnableRaisingEvents = $true Register-ObjectEvent $watcher "Created" -Action Write-Host "Detected: $($Event.SourceEventArgs.FullPath)"