EventID:4663 ObjectType:File AccessMask:0x6 ObjectName:.xml (ObjectName:Temp* ObjectName:ScreenConnect*) ProcessName:ScreenConnect.Service.exe*