ElfFile'Mmu$ElfChnk&&PacH 7VE =^ # f?  MFc &** e T&T%Bqvq4AM Eventjxmlns5http://schemas.microsoft.com/win/2004/08/events/eventoTSystemAY{Provider6F=KNameX)GuidAMzaEventID'X) Qualifiers " Version dLevelE{Task ?Opcode$fjKeywordsAP; TimeCreated'j<{ SystemTime .F EventRecordID A Correlation\FF ActivityIDmz5RelatedActivityID Am ExecutionHFF ProcessID9ThreadID "aChannel<F;nComputer FILF-APP-RECAB.SecurityfLUserID $m5DUserData!  6H!''ej]]Microsoft-Windows-SMBServerԢ3KO)aMicrosoft-Windows-SMBServer/Security ҽ3Kҽ3K,#{"ѬtAED EventData#j Smb2Namespace*c SessionGUID 0ConnectionGUID  Status 4# TranslatedStatus :^ ClientAddressLength . s ClientAddress &  SessionId 0 ~UserNameLength $8 iUserName 4c  ~ClientNameLength ( 8 i ClientName  }}}}mm∬0\\172.31.8.149 **`Bh T&  6H!''Bhj]]PMicrosoft-Windows-SMBServerԢ3KO)aMicrosoft-Windows-SMBServer/Security ҽ3K }}}}mm⊬0\\172.31.8.149`**`m T&  6H!''mj]]Microsoft-Windows-SMBServerԢ3KO)aMicrosoft-Windows-SMBServer/Security ҽ3K }}}}mm⋬ 0\\172.31.8.149`**`Ǚw T&  6H!''Ǚw`3^ Microsoft-Windows-SMBServerԢ3KO)aMicrosoft-Windows-SMBServer/Security ҽ3K }"}}!}mmج 0\\172.31.8.149`**`Iw T&  6H!''Iw`3^ Microsoft-Windows-SMBServerԢ3KO)aMicrosoft-Windows-SMBServer/Security ҽ3K }$}}#}mm٬0\\172.31.8.149`**`x T&  6H!''x`3^ Microsoft-Windows-SMBServerԢ3KO)aMicrosoft-Windows-SMBServer/Security ҽ3K }&}}%}mm۬0\\172.31.8.149`**`uj T&  6H!''ujf^?XMicrosoft-Windows-SMBServerԢ3KO)aMicrosoft-Windows-SMBServer/Security ҽ3K  O<QO< O<PO<mm4\\172.31.8.149`**`- T&  6H!''-f^?X(Microsoft-Windows-SMBServerԢ3KO)aMicrosoft-Windows-SMBServer/Security ҽ3K  O<SO< O<RO<mm4\\172.31.8.149`**` \ T&  6H!''\f^?X Microsoft-Windows-SMBServerԢ3KO)aMicrosoft-Windows-SMBServer/Security ҽ3K  O<UO< O<TO<mm 4\\172.31.8.149`**` C T&  6H!''CtP'P' Microsoft-Windows-SMBServerԢ3KO)aMicrosoft-Windows-SMBServer/Security ҽ3K tP'P'tP'P'mmƍ8\\172.31.8.161`**` C T&  6H!''CtP'P' Microsoft-Windows-SMBServerԢ3KO)aMicrosoft-Windows-SMBServer/Security ҽ3K tP'P'tP'P'mmƎ8\\172.31.8.161`**` C T&  6H!''CtP'P' Microsoft-Windows-SMBServerԢ3KO)aMicrosoft-Windows-SMBServer/Security ҽ3K tP'P'tP'P'mmƏ 8\\172.31.8.161`**` :]! T&  6H!'':]!q^w$ Microsoft-Windows-SMBServerԢ3KO)aMicrosoft-Windows-SMBServer/Security ҽ3K tP'ߚP'tP'ޚP'mm 8\\172.31.8.161`**`*I! T&  6H!''*I!q^w$ Microsoft-Windows-SMBServerԢ3KO)aMicrosoft-Windows-SMBServer/Security ҽ3K tP'P'tP'P'mm8\\172.31.8.161`**`*I! T&  6H!''*I!q^w$ Microsoft-Windows-SMBServerԢ3KO)aMicrosoft-Windows-SMBServer/Security ҽ3K tP'P'tP'P'mm8\\172.31.8.161`**`~$! T&  6H!''~$!q^$ Microsoft-Windows-SMBServerԢ3KO)aMicrosoft-Windows-SMBServer/Security ҽ3K tP'P'tP'P'mm8\\172.31.8.161`**`{s$! T&  6H!''{s$!q^$ Microsoft-Windows-SMBServerԢ3KO)aMicrosoft-Windows-SMBServer/Security ҽ3K tP'P'tP'P'mm8\\172.31.8.161`**`{s$! T&  6H!''{s$!q^$ Microsoft-Windows-SMBServerԢ3KO)aMicrosoft-Windows-SMBServer/Security ҽ3K tP'P'tP'P'mm!8\\172.31.8.161`**`-}:! T&  6H!''-}:!q^LMicrosoft-Windows-SMBServerԢ3KO)aMicrosoft-Windows-SMBServer/Security ҽ3K tP'P'tP'P'mm%8\\172.31.8.161`**`6:! T&  6H!''6:!q^LMicrosoft-Windows-SMBServerԢ3KO)aMicrosoft-Windows-SMBServer/Security ҽ3K tP'P'tP'P'mm)8\\172.31.8.161`**`:! T&  6H!'':!q^LMicrosoft-Windows-SMBServerԢ3KO)aMicrosoft-Windows-SMBServer/Security ҽ3K tP'P'tP'P'mm-8\\172.31.8.161`**`! T&  6H!''!B]Microsoft-Windows-SMBServerԢ3KO)aMicrosoft-Windows-SMBServer/Security ҽ3K tP'P'tP'P'mm18\\172.31.8.151`**`! T&  6H!''!B]Microsoft-Windows-SMBServerԢ3KO)aMicrosoft-Windows-SMBServer/Security ҽ3K tP'P'tP'P'mm58\\172.31.8.151`**`L! T&  6H!''L!B]Microsoft-Windows-SMBServerԢ3KO)aMicrosoft-Windows-SMBServer/Security ҽ3K tP'P'tP'P'mm98\\172.31.8.151`**`! T&  6H!''!B]LMicrosoft-Windows-SMBServerԢ3KO)aMicrosoft-Windows-SMBServer/Security ҽ3K tP'P'tP'P'mm=8\\172.31.8.151`**`;Q! T&  6H!'';Q!B]LMicrosoft-Windows-SMBServerԢ3KO)aMicrosoft-Windows-SMBServer/Security ҽ3K tP'P'tP'P'mmA8\\172.31.8.151`**` ! T&  6H!'' !B]LMicrosoft-Windows-SMBServerԢ3KO)aMicrosoft-Windows-SMBServer/Security ҽ3K tP'P'tP'P'mmE8\\172.31.8.151`**`|# T&  6H!''|#CMicrosoft-Windows-SMBServerԢ3KO)aMicrosoft-Windows-SMBServer/Security ҽ3K """"mmL<\\172.31.8.151`**`|# T&  6H!''|#CMicrosoft-Windows-SMBServerԢ3KO)aMicrosoft-Windows-SMBServer/Security ҽ3K """"mmM<\\172.31.8.151`**`E# T&  6H!''E#CMicrosoft-Windows-SMBServerԢ3KO)aMicrosoft-Windows-SMBServer/Security ҽ3K """"mmN <\\172.31.8.151`**`)8  T&  6H!'')8 - Microsoft-Windows-SMBServerԢ3KO)aMicrosoft-Windows-SMBServer/Security ҽ3K "^""^"mm5<\\172.31.8.149`**`  T&  6H!'' - Microsoft-Windows-SMBServerԢ3KO)aMicrosoft-Windows-SMBServer/Security ҽ3K "^""^"mm6<\\172.31.8.149`**`!~  T&  6H!''~ - !Microsoft-Windows-SMBServerԢ3KO)aMicrosoft-Windows-SMBServer/Security ҽ3K "^""^"mm7<\\172.31.8.149`**`"ˁ T&  6H!''ˁ-d"Microsoft-Windows-SMBServerԢ3KO)aMicrosoft-Windows-SMBServer/Security ҽ3K 9p]Tp9p\Tpmm{ H\\172.31.8.173`**`#ҁ T&  6H!''ҁ-#Microsoft-Windows-SMBServerԢ3KO)aMicrosoft-Windows-SMBServer/Security ҽ3K 9p_Tp9p^Tpmm|H\\172.31.8.173`**`$ŷҁ T&  6H!''ŷҁ-d$Microsoft-Windows-SMBServerԢ3KO)aMicrosoft-Windows-SMBServer/Security ҽ3K 9paTp9p`Tpmm}H\\172.31.8.173`**`%ԁ T&  6H!''ԁ-%Microsoft-Windows-SMBServerԢ3KO)aMicrosoft-Windows-SMBServer/Security ҽ3K 9pcTp9pbTpmm~H\\172.31.8.173`**`&ڊ}] T&  6H!''ڊ}]hqk/ 7 &Microsoft-Windows-SMBServerԢ3KO)aMicrosoft-Windows-SMBServer/Security ҽ3K 2`L[h[M[2`L[g[M[mmZ5d5dat\\172.16.53.100`