Which program wrote a file?

Solution 1:

Yes, you can use Windows Auditing to monitor file and folder access.

Solution 2:

Try Process Monitor, a sysinternals tool.