### BTest baseline data generated by btest-diff. Do not edit. Use "btest -U/-u" to update. Requires BTest >= 0.63.
#separator \x09
#set_separator	,
#empty_field	(empty)
#unset_field	-
#path	smb_files
#open XXXX-XX-XX-XX-XX-XX
#fields	ts	uid	id.orig_h	id.orig_p	id.resp_h	id.resp_p	fuid	action	path	name	size	prev_name	times.modified	times.accessed	times.created	times.changed
#types	time	string	addr	port	addr	port	string	enum	string	string	count	string	time	time	time	time
XXXXXXXXXX.XXXXXX	CHhAvVGS1DHFjwGM9	172.17.0.184	57092	172.17.0.189	445	-	SMB::FILE_OPEN	\\\\172.17.0.189\\share2	<share_root>	4096	-	XXXXXXXXXX.XXXXXX	XXXXXXXXXX.XXXXXX	XXXXXXXXXX.XXXXXX	XXXXXXXXXX.XXXXXX
XXXXXXXXXX.XXXXXX	CHhAvVGS1DHFjwGM9	172.17.0.184	57092	172.17.0.189	445	-	SMB::FILE_OPEN	\\\\172.17.0.189\\share2	00bfsvc.exe	77824	-	XXXXXXXXXX.XXXXXX	XXXXXXXXXX.XXXXXX	XXXXXXXXXX.XXXXXX	XXXXXXXXXX.XXXXXX
XXXXXXXXXX.XXXXXX	CHhAvVGS1DHFjwGM9	172.17.0.184	57092	172.17.0.189	445	-	SMB::FILE_OPEN	\\\\172.17.0.189\\share2	00bfsvc.enc	0	-	XXXXXXXXXX.XXXXXX	XXXXXXXXXX.XXXXXX	XXXXXXXXXX.XXXXXX	XXXXXXXXXX.XXXXXX
XXXXXXXXXX.XXXXXX	CHhAvVGS1DHFjwGM9	172.17.0.184	57092	172.17.0.189	445	-	SMB::FILE_OPEN	\\\\172.17.0.189\\share2	00bfsvc.exe	77824	-	XXXXXXXXXX.XXXXXX	XXXXXXXXXX.XXXXXX	XXXXXXXXXX.XXXXXX	XXXXXXXXXX.XXXXXX
XXXXXXXXXX.XXXXXX	CHhAvVGS1DHFjwGM9	172.17.0.184	57092	172.17.0.189	445	-	SMB::FILE_DELETE	\\\\172.17.0.189\\share2	00bfsvc.exe	77824	-	XXXXXXXXXX.XXXXXX	XXXXXXXXXX.XXXXXX	XXXXXXXXXX.XXXXXX	XXXXXXXXXX.XXXXXX
XXXXXXXXXX.XXXXXX	CHhAvVGS1DHFjwGM9	172.17.0.184	57092	172.17.0.189	445	-	SMB::FILE_OPEN	\\\\172.17.0.189\\share2	01bootstat.docx	67584	-	XXXXXXXXXX.XXXXXX	XXXXXXXXXX.XXXXXX	XXXXXXXXXX.XXXXXX	XXXXXXXXXX.XXXXXX
XXXXXXXXXX.XXXXXX	CHhAvVGS1DHFjwGM9	172.17.0.184	57092	172.17.0.189	445	-	SMB::FILE_OPEN	\\\\172.17.0.189\\share2	<share_root>	4096	-	XXXXXXXXXX.XXXXXX	XXXXXXXXXX.XXXXXX	XXXXXXXXXX.XXXXXX	XXXXXXXXXX.XXXXXX
XXXXXXXXXX.XXXXXX	CHhAvVGS1DHFjwGM9	172.17.0.184	57092	172.17.0.189	445	-	SMB::FILE_OPEN	\\\\172.17.0.189\\share2	01bootstat.enc	0	-	XXXXXXXXXX.XXXXXX	XXXXXXXXXX.XXXXXX	XXXXXXXXXX.XXXXXX	XXXXXXXXXX.XXXXXX
XXXXXXXXXX.XXXXXX	CHhAvVGS1DHFjwGM9	172.17.0.184	57092	172.17.0.189	445	-	SMB::FILE_OPEN	\\\\172.17.0.189\\share2	01bootstat.docx	67584	-	XXXXXXXXXX.XXXXXX	XXXXXXXXXX.XXXXXX	XXXXXXXXXX.XXXXXX	XXXXXXXXXX.XXXXXX
XXXXXXXXXX.XXXXXX	CHhAvVGS1DHFjwGM9	172.17.0.184	57092	172.17.0.189	445	-	SMB::FILE_DELETE	\\\\172.17.0.189\\share2	01bootstat.docx	67584	-	XXXXXXXXXX.XXXXXX	XXXXXXXXXX.XXXXXX	XXXXXXXXXX.XXXXXX	XXXXXXXXXX.XXXXXX
XXXXXXXXXX.XXXXXX	CHhAvVGS1DHFjwGM9	172.17.0.184	57092	172.17.0.189	445	-	SMB::FILE_OPEN	\\\\172.17.0.189\\share2	02DtcInstall.doc	1947	-	XXXXXXXXXX.XXXXXX	XXXXXXXXXX.XXXXXX	XXXXXXXXXX.XXXXXX	XXXXXXXXXX.XXXXXX
XXXXXXXXXX.XXXXXX	CHhAvVGS1DHFjwGM9	172.17.0.184	57092	172.17.0.189	445	-	SMB::FILE_OPEN	\\\\172.17.0.189\\share2	02DtcInstall.enc	0	-	XXXXXXXXXX.XXXXXX	XXXXXXXXXX.XXXXXX	XXXXXXXXXX.XXXXXX	XXXXXXXXXX.XXXXXX
XXXXXXXXXX.XXXXXX	CHhAvVGS1DHFjwGM9	172.17.0.184	57092	172.17.0.189	445	-	SMB::FILE_DELETE	\\\\172.17.0.189\\share2	02DtcInstall.doc	1947	-	XXXXXXXXXX.XXXXXX	XXXXXXXXXX.XXXXXX	XXXXXXXXXX.XXXXXX	XXXXXXXXXX.XXXXXX
XXXXXXXXXX.XXXXXX	CHhAvVGS1DHFjwGM9	172.17.0.184	57092	172.17.0.189	445	-	SMB::FILE_OPEN	\\\\172.17.0.189\\share2	05hh.exe	18432	-	XXXXXXXXXX.XXXXXX	XXXXXXXXXX.XXXXXX	XXXXXXXXXX.XXXXXX	XXXXXXXXXX.XXXXXX
XXXXXXXXXX.XXXXXX	CHhAvVGS1DHFjwGM9	172.17.0.184	57092	172.17.0.189	445	-	SMB::FILE_OPEN	\\\\172.17.0.189\\share2	05hh.enc	0	-	XXXXXXXXXX.XXXXXX	XXXXXXXXXX.XXXXXX	XXXXXXXXXX.XXXXXX	XXXXXXXXXX.XXXXXX
XXXXXXXXXX.XXXXXX	CHhAvVGS1DHFjwGM9	172.17.0.184	57092	172.17.0.189	445	-	SMB::FILE_DELETE	\\\\172.17.0.189\\share2	05hh.exe	18432	-	XXXXXXXXXX.XXXXXX	XXXXXXXXXX.XXXXXX	XXXXXXXXXX.XXXXXX	XXXXXXXXXX.XXXXXX
XXXXXXXXXX.XXXXXX	CHhAvVGS1DHFjwGM9	172.17.0.184	57092	172.17.0.189	445	-	SMB::FILE_OPEN	\\\\172.17.0.189\\share2	06lsasetup.pdf	1376	-	XXXXXXXXXX.XXXXXX	XXXXXXXXXX.XXXXXX	XXXXXXXXXX.XXXXXX	XXXXXXXXXX.XXXXXX
XXXXXXXXXX.XXXXXX	CHhAvVGS1DHFjwGM9	172.17.0.184	57092	172.17.0.189	445	-	SMB::FILE_OPEN	\\\\172.17.0.189\\share2	06lsasetup.enc	0	-	XXXXXXXXXX.XXXXXX	XXXXXXXXXX.XXXXXX	XXXXXXXXXX.XXXXXX	XXXXXXXXXX.XXXXXX
XXXXXXXXXX.XXXXXX	CHhAvVGS1DHFjwGM9	172.17.0.184	57092	172.17.0.189	445	-	SMB::FILE_DELETE	\\\\172.17.0.189\\share2	06lsasetup.pdf	1376	-	XXXXXXXXXX.XXXXXX	XXXXXXXXXX.XXXXXX	XXXXXXXXXX.XXXXXX	XXXXXXXXXX.XXXXXX
XXXXXXXXXX.XXXXXX	CHhAvVGS1DHFjwGM9	172.17.0.184	57092	172.17.0.189	445	-	SMB::FILE_OPEN	\\\\172.17.0.189\\share2	07mib.pdf	43131	-	XXXXXXXXXX.XXXXXX	XXXXXXXXXX.XXXXXX	XXXXXXXXXX.XXXXXX	XXXXXXXXXX.XXXXXX
XXXXXXXXXX.XXXXXX	CHhAvVGS1DHFjwGM9	172.17.0.184	57092	172.17.0.189	445	-	SMB::FILE_OPEN	\\\\172.17.0.189\\share2	07mib.enc	0	-	XXXXXXXXXX.XXXXXX	XXXXXXXXXX.XXXXXX	XXXXXXXXXX.XXXXXX	XXXXXXXXXX.XXXXXX
XXXXXXXXXX.XXXXXX	CHhAvVGS1DHFjwGM9	172.17.0.184	57092	172.17.0.189	445	-	SMB::FILE_OPEN	\\\\172.17.0.189\\share2	07mib.pdf	43131	-	XXXXXXXXXX.XXXXXX	XXXXXXXXXX.XXXXXX	XXXXXXXXXX.XXXXXX	XXXXXXXXXX.XXXXXX
XXXXXXXXXX.XXXXXX	CHhAvVGS1DHFjwGM9	172.17.0.184	57092	172.17.0.189	445	-	SMB::FILE_DELETE	\\\\172.17.0.189\\share2	07mib.pdf	43131	-	XXXXXXXXXX.XXXXXX	XXXXXXXXXX.XXXXXX	XXXXXXXXXX.XXXXXX	XXXXXXXXXX.XXXXXX
XXXXXXXXXX.XXXXXX	CHhAvVGS1DHFjwGM9	172.17.0.184	57092	172.17.0.189	445	-	SMB::FILE_OPEN	\\\\172.17.0.189\\share2	08notepad.exe	202240	-	XXXXXXXXXX.XXXXXX	XXXXXXXXXX.XXXXXX	XXXXXXXXXX.XXXXXX	XXXXXXXXXX.XXXXXX
XXXXXXXXXX.XXXXXX	CHhAvVGS1DHFjwGM9	172.17.0.184	57092	172.17.0.189	445	-	SMB::FILE_OPEN	\\\\172.17.0.189\\share2	08notepad.enc	0	-	XXXXXXXXXX.XXXXXX	XXXXXXXXXX.XXXXXX	XXXXXXXXXX.XXXXXX	XXXXXXXXXX.XXXXXX
XXXXXXXXXX.XXXXXX	CHhAvVGS1DHFjwGM9	172.17.0.184	57092	172.17.0.189	445	-	SMB::FILE_OPEN	\\\\172.17.0.189\\share2	08notepad.exe	202240	-	XXXXXXXXXX.XXXXXX	XXXXXXXXXX.XXXXXX	XXXXXXXXXX.XXXXXX	XXXXXXXXXX.XXXXXX
XXXXXXXXXX.XXXXXX	CHhAvVGS1DHFjwGM9	172.17.0.184	57092	172.17.0.189	445	-	SMB::FILE_DELETE	\\\\172.17.0.189\\share2	08notepad.exe	202240	-	XXXXXXXXXX.XXXXXX	XXXXXXXXXX.XXXXXX	XXXXXXXXXX.XXXXXX	XXXXXXXXXX.XXXXXX
XXXXXXXXXX.XXXXXX	CHhAvVGS1DHFjwGM9	172.17.0.184	57092	172.17.0.189	445	-	SMB::FILE_OPEN	\\\\172.17.0.189\\share2	09PFRO.doc	4772	-	XXXXXXXXXX.XXXXXX	XXXXXXXXXX.XXXXXX	XXXXXXXXXX.XXXXXX	XXXXXXXXXX.XXXXXX
XXXXXXXXXX.XXXXXX	CHhAvVGS1DHFjwGM9	172.17.0.184	57092	172.17.0.189	445	-	SMB::FILE_OPEN	\\\\172.17.0.189\\share2	09PFRO.enc	0	-	XXXXXXXXXX.XXXXXX	XXXXXXXXXX.XXXXXX	XXXXXXXXXX.XXXXXX	XXXXXXXXXX.XXXXXX
XXXXXXXXXX.XXXXXX	CHhAvVGS1DHFjwGM9	172.17.0.184	57092	172.17.0.189	445	-	SMB::FILE_DELETE	\\\\172.17.0.189\\share2	09PFRO.doc	4772	-	XXXXXXXXXX.XXXXXX	XXXXXXXXXX.XXXXXX	XXXXXXXXXX.XXXXXX	XXXXXXXXXX.XXXXXX
XXXXXXXXXX.XXXXXX	CHhAvVGS1DHFjwGM9	172.17.0.184	57092	172.17.0.189	445	-	SMB::FILE_OPEN	\\\\172.17.0.189\\share2	10Professional.docx	30831	-	XXXXXXXXXX.XXXXXX	XXXXXXXXXX.XXXXXX	XXXXXXXXXX.XXXXXX	XXXXXXXXXX.XXXXXX
XXXXXXXXXX.XXXXXX	CHhAvVGS1DHFjwGM9	172.17.0.184	57092	172.17.0.189	445	-	SMB::FILE_OPEN	\\\\172.17.0.189\\share2	10Professional.enc	0	-	XXXXXXXXXX.XXXXXX	XXXXXXXXXX.XXXXXX	XXXXXXXXXX.XXXXXX	XXXXXXXXXX.XXXXXX
XXXXXXXXXX.XXXXXX	CHhAvVGS1DHFjwGM9	172.17.0.184	57092	172.17.0.189	445	-	SMB::FILE_DELETE	\\\\172.17.0.189\\share2	10Professional.docx	30831	-	XXXXXXXXXX.XXXXXX	XXXXXXXXXX.XXXXXX	XXXXXXXXXX.XXXXXX	XXXXXXXXXX.XXXXXX
XXXXXXXXXX.XXXXXX	CHhAvVGS1DHFjwGM9	172.17.0.184	57092	172.17.0.189	445	-	SMB::FILE_OPEN	\\\\172.17.0.189\\share2	11regedit.exe	369664	-	XXXXXXXXXX.XXXXXX	XXXXXXXXXX.XXXXXX	XXXXXXXXXX.XXXXXX	XXXXXXXXXX.XXXXXX
XXXXXXXXXX.XXXXXX	CHhAvVGS1DHFjwGM9	172.17.0.184	57092	172.17.0.189	445	-	SMB::FILE_OPEN	\\\\172.17.0.189\\share2	11regedit.exe	369664	-	XXXXXXXXXX.XXXXXX	XXXXXXXXXX.XXXXXX	XXXXXXXXXX.XXXXXX	XXXXXXXXXX.XXXXXX
XXXXXXXXXX.XXXXXX	CHhAvVGS1DHFjwGM9	172.17.0.184	57092	172.17.0.189	445	-	SMB::FILE_DELETE	\\\\172.17.0.189\\share2	11regedit.exe	369664	-	XXXXXXXXXX.XXXXXX	XXXXXXXXXX.XXXXXX	XXXXXXXXXX.XXXXXX	XXXXXXXXXX.XXXXXX
XXXXXXXXXX.XXXXXX	CHhAvVGS1DHFjwGM9	172.17.0.184	57092	172.17.0.189	445	-	SMB::FILE_OPEN	\\\\172.17.0.189\\share2	12splwow64.exe	135168	-	XXXXXXXXXX.XXXXXX	XXXXXXXXXX.XXXXXX	XXXXXXXXXX.XXXXXX	XXXXXXXXXX.XXXXXX
XXXXXXXXXX.XXXXXX	CHhAvVGS1DHFjwGM9	172.17.0.184	57092	172.17.0.189	445	-	SMB::FILE_OPEN	\\\\172.17.0.189\\share2	12splwow64.enc	0	-	XXXXXXXXXX.XXXXXX	XXXXXXXXXX.XXXXXX	XXXXXXXXXX.XXXXXX	XXXXXXXXXX.XXXXXX
XXXXXXXXXX.XXXXXX	CHhAvVGS1DHFjwGM9	172.17.0.184	57092	172.17.0.189	445	-	SMB::FILE_OPEN	\\\\172.17.0.189\\share2	12splwow64.exe	135168	-	XXXXXXXXXX.XXXXXX	XXXXXXXXXX.XXXXXX	XXXXXXXXXX.XXXXXX	XXXXXXXXXX.XXXXXX
XXXXXXXXXX.XXXXXX	ClEkJM2Vm5giqnMf4h	172.17.0.184	57093	172.17.0.189	445	-	SMB::FILE_OPEN	-	13system.pdf	219	-	XXXXXXXXXX.XXXXXX	XXXXXXXXXX.XXXXXX	XXXXXXXXXX.XXXXXX	XXXXXXXXXX.XXXXXX
XXXXXXXXXX.XXXXXX	CHhAvVGS1DHFjwGM9	172.17.0.184	57092	172.17.0.189	445	-	SMB::FILE_OPEN	\\\\172.17.0.189\\share2	13system.enc	0	-	XXXXXXXXXX.XXXXXX	XXXXXXXXXX.XXXXXX	XXXXXXXXXX.XXXXXX	XXXXXXXXXX.XXXXXX
XXXXXXXXXX.XXXXXX	CtPZjS20MLrsMUOJi2	172.17.0.184	57095	172.17.0.189	445	-	SMB::FILE_OPEN	-	13system.pdf	219	-	XXXXXXXXXX.XXXXXX	XXXXXXXXXX.XXXXXX	XXXXXXXXXX.XXXXXX	XXXXXXXXXX.XXXXXX
XXXXXXXXXX.XXXXXX	CHhAvVGS1DHFjwGM9	172.17.0.184	57092	172.17.0.189	445	-	SMB::FILE_OPEN	\\\\172.17.0.189\\share2	14twain_32.pdf	65024	-	XXXXXXXXXX.XXXXXX	XXXXXXXXXX.XXXXXX	XXXXXXXXXX.XXXXXX	XXXXXXXXXX.XXXXXX
XXXXXXXXXX.XXXXXX	ClEkJM2Vm5giqnMf4h	172.17.0.184	57093	172.17.0.189	445	-	SMB::FILE_OPEN	-	14twain_32.enc	0	-	XXXXXXXXXX.XXXXXX	XXXXXXXXXX.XXXXXX	XXXXXXXXXX.XXXXXX	XXXXXXXXXX.XXXXXX
XXXXXXXXXX.XXXXXX	CHhAvVGS1DHFjwGM9	172.17.0.184	57092	172.17.0.189	445	-	SMB::FILE_OPEN	\\\\172.17.0.189\\share2	14twain_32.pdf	65024	-	XXXXXXXXXX.XXXXXX	XXXXXXXXXX.XXXXXX	XXXXXXXXXX.XXXXXX	XXXXXXXXXX.XXXXXX
XXXXXXXXXX.XXXXXX	CHhAvVGS1DHFjwGM9	172.17.0.184	57092	172.17.0.189	445	-	SMB::FILE_OPEN	\\\\172.17.0.189\\share2	<share_root>	4096	-	XXXXXXXXXX.XXXXXX	XXXXXXXXXX.XXXXXX	XXXXXXXXXX.XXXXXX	XXXXXXXXXX.XXXXXX
XXXXXXXXXX.XXXXXX	C4J4Th3PJpwUYZZ6gc	172.17.0.184	57094	172.17.0.189	445	-	SMB::FILE_OPEN	-	00bfsvc.enc	103968	-	XXXXXXXXXX.XXXXXX	XXXXXXXXXX.XXXXXX	XXXXXXXXXX.XXXXXX	XXXXXXXXXX.XXXXXX
XXXXXXXXXX.XXXXXX	CHhAvVGS1DHFjwGM9	172.17.0.184	57092	172.17.0.189	445	-	SMB::FILE_OPEN	\\\\172.17.0.189\\share2	00bfsvc.enc	103968	-	XXXXXXXXXX.XXXXXX	XXXXXXXXXX.XXXXXX	XXXXXXXXXX.XXXXXX	XXXXXXXXXX.XXXXXX
XXXXXXXXXX.XXXXXX	C4J4Th3PJpwUYZZ6gc	172.17.0.184	57094	172.17.0.189	445	-	SMB::FILE_OPEN	-	01bootstat.enc	90288	-	XXXXXXXXXX.XXXXXX	XXXXXXXXXX.XXXXXX	XXXXXXXXXX.XXXXXX	XXXXXXXXXX.XXXXXX
XXXXXXXXXX.XXXXXX	CHhAvVGS1DHFjwGM9	172.17.0.184	57092	172.17.0.189	445	-	SMB::FILE_OPEN	\\\\172.17.0.189\\share2	01bootstat.enc	90288	-	XXXXXXXXXX.XXXXXX	XXXXXXXXXX.XXXXXX	XXXXXXXXXX.XXXXXX	XXXXXXXXXX.XXXXXX
XXXXXXXXXX.XXXXXX	C4J4Th3PJpwUYZZ6gc	172.17.0.184	57094	172.17.0.189	445	-	SMB::FILE_OPEN	-	02DtcInstall.enc	2736	-	XXXXXXXXXX.XXXXXX	XXXXXXXXXX.XXXXXX	XXXXXXXXXX.XXXXXX	XXXXXXXXXX.XXXXXX
XXXXXXXXXX.XXXXXX	CHhAvVGS1DHFjwGM9	172.17.0.184	57092	172.17.0.189	445	-	SMB::FILE_OPEN	\\\\172.17.0.189\\share2	02DtcInstall.enc	2736	-	XXXXXXXXXX.XXXXXX	XXXXXXXXXX.XXXXXX	XXXXXXXXXX.XXXXXX	XXXXXXXXXX.XXXXXX
XXXXXXXXXX.XXXXXX	C4J4Th3PJpwUYZZ6gc	172.17.0.184	57094	172.17.0.189	445	-	SMB::FILE_OPEN	-	05hh.enc	24624	-	XXXXXXXXXX.XXXXXX	XXXXXXXXXX.XXXXXX	XXXXXXXXXX.XXXXXX	XXXXXXXXXX.XXXXXX
XXXXXXXXXX.XXXXXX	CHhAvVGS1DHFjwGM9	172.17.0.184	57092	172.17.0.189	445	-	SMB::FILE_OPEN	\\\\172.17.0.189\\share2	05hh.enc	24624	-	XXXXXXXXXX.XXXXXX	XXXXXXXXXX.XXXXXX	XXXXXXXXXX.XXXXXX	XXXXXXXXXX.XXXXXX
XXXXXXXXXX.XXXXXX	C4J4Th3PJpwUYZZ6gc	172.17.0.184	57094	172.17.0.189	445	-	SMB::FILE_OPEN	-	06lsasetup.enc	2736	-	XXXXXXXXXX.XXXXXX	XXXXXXXXXX.XXXXXX	XXXXXXXXXX.XXXXXX	XXXXXXXXXX.XXXXXX
XXXXXXXXXX.XXXXXX	CHhAvVGS1DHFjwGM9	172.17.0.184	57092	172.17.0.189	445	-	SMB::FILE_OPEN	\\\\172.17.0.189\\share2	06lsasetup.enc	2736	-	XXXXXXXXXX.XXXXXX	XXXXXXXXXX.XXXXXX	XXXXXXXXXX.XXXXXX	XXXXXXXXXX.XXXXXX
XXXXXXXXXX.XXXXXX	C4J4Th3PJpwUYZZ6gc	172.17.0.184	57094	172.17.0.189	445	-	SMB::FILE_OPEN	-	07mib.enc	58824	-	XXXXXXXXXX.XXXXXX	XXXXXXXXXX.XXXXXX	XXXXXXXXXX.XXXXXX	XXXXXXXXXX.XXXXXX
XXXXXXXXXX.XXXXXX	CHhAvVGS1DHFjwGM9	172.17.0.184	57092	172.17.0.189	445	-	SMB::FILE_OPEN	\\\\172.17.0.189\\share2	07mib.enc	58824	-	XXXXXXXXXX.XXXXXX	XXXXXXXXXX.XXXXXX	XXXXXXXXXX.XXXXXX	XXXXXXXXXX.XXXXXX
XXXXXXXXXX.XXXXXX	C4J4Th3PJpwUYZZ6gc	172.17.0.184	57094	172.17.0.189	445	-	SMB::FILE_OPEN	-	08notepad.enc	270864	-	XXXXXXXXXX.XXXXXX	XXXXXXXXXX.XXXXXX	XXXXXXXXXX.XXXXXX	XXXXXXXXXX.XXXXXX
XXXXXXXXXX.XXXXXX	CHhAvVGS1DHFjwGM9	172.17.0.184	57092	172.17.0.189	445	-	SMB::FILE_OPEN	\\\\172.17.0.189\\share2	08notepad.enc	270864	-	XXXXXXXXXX.XXXXXX	XXXXXXXXXX.XXXXXX	XXXXXXXXXX.XXXXXX	XXXXXXXXXX.XXXXXX
XXXXXXXXXX.XXXXXX	C4J4Th3PJpwUYZZ6gc	172.17.0.184	57094	172.17.0.189	445	-	SMB::FILE_OPEN	-	09PFRO.enc	6840	-	XXXXXXXXXX.XXXXXX	XXXXXXXXXX.XXXXXX	XXXXXXXXXX.XXXXXX	XXXXXXXXXX.XXXXXX
XXXXXXXXXX.XXXXXX	CHhAvVGS1DHFjwGM9	172.17.0.184	57092	172.17.0.189	445	-	SMB::FILE_OPEN	\\\\172.17.0.189\\share2	09PFRO.enc	6840	-	XXXXXXXXXX.XXXXXX	XXXXXXXXXX.XXXXXX	XXXXXXXXXX.XXXXXX	XXXXXXXXXX.XXXXXX
XXXXXXXXXX.XXXXXX	C4J4Th3PJpwUYZZ6gc	172.17.0.184	57094	172.17.0.189	445	-	SMB::FILE_OPEN	-	10Professional.enc	42408	-	XXXXXXXXXX.XXXXXX	XXXXXXXXXX.XXXXXX	XXXXXXXXXX.XXXXXX	XXXXXXXXXX.XXXXXX
XXXXXXXXXX.XXXXXX	CHhAvVGS1DHFjwGM9	172.17.0.184	57092	172.17.0.189	445	-	SMB::FILE_OPEN	\\\\172.17.0.189\\share2	10Professional.enc	42408	-	XXXXXXXXXX.XXXXXX	XXXXXXXXXX.XXXXXX	XXXXXXXXXX.XXXXXX	XXXXXXXXXX.XXXXXX
XXXXXXXXXX.XXXXXX	C4J4Th3PJpwUYZZ6gc	172.17.0.184	57094	172.17.0.189	445	-	SMB::FILE_OPEN	-	11regedit.enc	493848	-	XXXXXXXXXX.XXXXXX	XXXXXXXXXX.XXXXXX	XXXXXXXXXX.XXXXXX	XXXXXXXXXX.XXXXXX
XXXXXXXXXX.XXXXXX	CHhAvVGS1DHFjwGM9	172.17.0.184	57092	172.17.0.189	445	-	SMB::FILE_OPEN	\\\\172.17.0.189\\share2	11regedit.enc	493848	-	XXXXXXXXXX.XXXXXX	XXXXXXXXXX.XXXXXX	XXXXXXXXXX.XXXXXX	XXXXXXXXXX.XXXXXX
XXXXXXXXXX.XXXXXX	C4J4Th3PJpwUYZZ6gc	172.17.0.184	57094	172.17.0.189	445	-	SMB::FILE_OPEN	-	12splwow64.enc	180576	-	XXXXXXXXXX.XXXXXX	XXXXXXXXXX.XXXXXX	XXXXXXXXXX.XXXXXX	XXXXXXXXXX.XXXXXX
XXXXXXXXXX.XXXXXX	CHhAvVGS1DHFjwGM9	172.17.0.184	57092	172.17.0.189	445	-	SMB::FILE_OPEN	\\\\172.17.0.189\\share2	12splwow64.enc	180576	-	XXXXXXXXXX.XXXXXX	XXXXXXXXXX.XXXXXX	XXXXXXXXXX.XXXXXX	XXXXXXXXXX.XXXXXX
XXXXXXXXXX.XXXXXX	C4J4Th3PJpwUYZZ6gc	172.17.0.184	57094	172.17.0.189	445	-	SMB::FILE_OPEN	-	13system.enc	1368	-	XXXXXXXXXX.XXXXXX	XXXXXXXXXX.XXXXXX	XXXXXXXXXX.XXXXXX	XXXXXXXXXX.XXXXXX
XXXXXXXXXX.XXXXXX	CHhAvVGS1DHFjwGM9	172.17.0.184	57092	172.17.0.189	445	-	SMB::FILE_OPEN	\\\\172.17.0.189\\share2	13system.enc	1368	-	XXXXXXXXXX.XXXXXX	XXXXXXXXXX.XXXXXX	XXXXXXXXXX.XXXXXX	XXXXXXXXXX.XXXXXX
XXXXXXXXXX.XXXXXX	C4J4Th3PJpwUYZZ6gc	172.17.0.184	57094	172.17.0.189	445	-	SMB::FILE_OPEN	-	14twain_32.enc	87552	-	XXXXXXXXXX.XXXXXX	XXXXXXXXXX.XXXXXX	XXXXXXXXXX.XXXXXX	XXXXXXXXXX.XXXXXX
XXXXXXXXXX.XXXXXX	CHhAvVGS1DHFjwGM9	172.17.0.184	57092	172.17.0.189	445	-	SMB::FILE_OPEN	\\\\172.17.0.189\\share2	14twain_32.enc	87552	-	XXXXXXXXXX.XXXXXX	XXXXXXXXXX.XXXXXX	XXXXXXXXXX.XXXXXX	XXXXXXXXXX.XXXXXX
#close XXXX-XX-XX-XX-XX-XX
