1638404000x8000000000000015845Applicationar-win-2.attackrange.local2025-02-05T16:35:04ZRulesEngine 1639404000x8000000000000015844Applicationar-win-2.attackrange.local 2575304200x8000000000000015866Applicationar-win-dc.attackrange.localtelemetry_xevents996400000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 2575404200x8000000000000015865Applicationar-win-dc.attackrange.localtelemetry_xevents9A6400000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 1638404000x8000000000000015864Applicationar-win-dc.attackrange.local2025-02-05T16:36:00ZRulesEngine 1639404000x8000000000000015863Applicationar-win-dc.attackrange.local 2575304200x8000000000000015843Applicationar-win-2.attackrange.localtelemetry_xevents996400000A00000009000000610072002D00770069006E002D0032000000070000006D00610073007400650072000000 2575404200x8000000000000015842Applicationar-win-2.attackrange.localtelemetry_xevents9A6400000A00000009000000610072002D00770069006E002D0032000000070000006D00610073007400650072000000 2575304200x8000000000000015862Applicationar-win-dc.attackrange.localtelemetry_xevents996400000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 2575404200x8000000000000015861Applicationar-win-dc.attackrange.localtelemetry_xevents9A6400000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 1638404000x8000000000000015841Applicationar-win-2.attackrange.local2025-02-05T16:34:39ZRulesEngine 1639404000x8000000000000015840Applicationar-win-2.attackrange.local 1638404000x8000000000000015860Applicationar-win-dc.attackrange.local2025-02-05T16:36:16ZRulesEngine 1639404000x8000000000000015859Applicationar-win-dc.attackrange.local 2575304200x8000000000000015839Applicationar-win-2.attackrange.localtelemetry_xevents996400000A00000009000000610072002D00770069006E002D0032000000070000006D00610073007400650072000000 2575404200x8000000000000015838Applicationar-win-2.attackrange.localtelemetry_xevents9A6400000A00000009000000610072002D00770069006E002D0032000000070000006D00610073007400650072000000 812804200x8000000000000015837Applicationar-win-2.attackrange.localxplog70.dll2022.160.1000xp_msverC01F00000A00000009000000610072002D00770069006E002D0032000000070000006D00610073007400650072000000 3309004200x8000000000000015836Applicationar-win-2.attackrange.localxplog70.dll428100000A00000009000000610072002D00770069006E002D0032000000070000006D00610073007400650072000000 301404600x8000000000000015835Applicationar-win-2.attackrange.localBACKUP DATABASE506011634044C60B00000A00000009000000610072002D00770069006E002D0032000000070000006D00610073007400650072000000 1826404600x8000000000000015834Applicationar-win-2.attackrange.localmaster2025/02/0419:41:08515223:216:1223:240:11FILE=6, TYPE=DISK: {'C:\temp\master.bak'}584700000A00000009000000610072002D00770069006E002D0032000000070000006D00610073007400650072000000 301404600x8000000000000015833Applicationar-win-2.attackrange.localBACKUP DATABASE506011733754C60B00000A00000009000000610072002D00770069006E002D0032000000070000006D00610073007400650072000000 1826404600x8000000000000015832Applicationar-win-2.attackrange.localmaster2025/02/0419:41:08515223:96:1223:120:11FILE=5, TYPE=DISK: {'C:\temp\master.bak'}584700000A00000009000000610072002D00770069006E002D0032000000070000006D00610073007400650072000000 301404600x8000000000000015831Applicationar-win-2.attackrange.localBACKUP DATABASE506011733754C60B00000A00000009000000610072002D00770069006E002D0032000000070000006D00610073007400650072000000 1826404600x8000000000000015830Applicationar-win-2.attackrange.localmaster2025/02/0419:41:08515222:472:1222:496:11FILE=4, TYPE=DISK: {'C:\temp\master.bak'}584700000A00000009000000610072002D00770069006E002D0032000000070000006D00610073007400650072000000 301404600x8000000000000015829Applicationar-win-2.attackrange.localBACKUP DATABASE506009342464C60B00000A00000009000000610072002D00770069006E002D0032000000070000006D00610073007400650072000000 1826404600x8000000000000015828Applicationar-win-2.attackrange.localmaster2025/02/0419:41:08515222:352:1222:376:11FILE=3, TYPE=DISK: {'C:\temp\master.bak'}584700000A00000009000000610072002D00770069006E002D0032000000070000006D00610073007400650072000000 1545704200x8000000000000015827Applicationar-win-2.attackrange.localshow advanced options10613C00000A00000009000000610072002D00770069006E002D0032000000070000006D00610073007400650072000000 1545704200x8000000000000015826Applicationar-win-2.attackrange.localxp_cmdshell10613C00000A00000009000000610072002D00770069006E002D0032000000070000006D00610073007400650072000000 1545704200x8000000000000015825Applicationar-win-2.attackrange.localxp_cmdshell01613C00000A00000009000000610072002D00770069006E002D0032000000070000006D00610073007400650072000000 1545704200x8000000000000015824Applicationar-win-2.attackrange.localshow advanced options01613C00000A00000009000000610072002D00770069006E002D0032000000070000006D00610073007400650072000000 1545704200x8000000000000015823Applicationar-win-2.attackrange.localshow advanced options10613C00000A00000009000000610072002D00770069006E002D0032000000070000006D00610073007400650072000000 1545704200x8000000000000015822Applicationar-win-2.attackrange.localxp_cmdshell10613C00000A00000009000000610072002D00770069006E002D0032000000070000006D00610073007400650072000000 1545704200x8000000000000015821Applicationar-win-2.attackrange.localxp_cmdshell11613C00000A00000009000000610072002D00770069006E002D0032000000070000006D00610073007400650072000000 1545704200x8000000000000015820Applicationar-win-2.attackrange.localshow advanced options11613C00000A00000009000000610072002D00770069006E002D0032000000070000006D00610073007400650072000000 1545704200x8000000000000015819Applicationar-win-2.attackrange.localxp_cmdshell11613C00000A00000009000000610072002D00770069006E002D0032000000070000006D00610073007400650072000000 1545704200x8000000000000015818Applicationar-win-2.attackrange.localxp_cmdshell01613C00000A00000009000000610072002D00770069006E002D0032000000070000006D00610073007400650072000000 1545704200x8000000000000015817Applicationar-win-2.attackrange.localshow advanced options11613C00000A00000009000000610072002D00770069006E002D0032000000070000006D00610073007400650072000000 1545704200x8000000000000015816Applicationar-win-2.attackrange.localshow advanced options01613C00000A00000009000000610072002D00770069006E002D0032000000070000006D00610073007400650072000000 2575304200x8000000000000015815Applicationar-win-2.attackrange.localtelemetry_xevents996400000A00000009000000610072002D00770069006E002D0032000000070000006D00610073007400650072000000 104100x8000000000000015814Applicationar-win-2.attackrange.localSqlCeip started pid: 2652 instance: CPEFlag: True 1000104000x800000000000000015813Applicationar-win-2.attackrange.local02025-02-04T19:45:15.8822637Z 104204000x8000000000000015811Applicationar-win-2.attackrange.localC:\Users\Administrator\AppData\Local\Temp\2\chocolatey\sqlcmd\1.6.0\sqlcmd-x64_1.6.0-1.msi6000(NULL)(NULL)(NULL)(NULL) 103304000x8000000000000015810Applicationar-win-2.attackrange.localSqlcmd Tools1.6.010330Microsoft Corporation(NULL)7B42343634343533392D444431302D344546332D423631392D3433303342324130414531357D3030303065623462306539623537303663616661613934633461653065356536663832373030303030393034 1170704000x8000000000000015809Applicationar-win-2.attackrange.localProduct: Sqlcmd Tools -- Installation completed successfully.(NULL)(NULL)(NULL)(NULL)(NULL)7B42343634343533392D444431302D344546332D423631392D3433303342324130414531357D 1000004000x800000000000000015812Applicationar-win-2.attackrange.local02025-02-04T19:45:15.8822637Z 104004000x8000000000000015808Applicationar-win-2.attackrange.localC:\Users\Administrator\AppData\Local\Temp\2\chocolatey\sqlcmd\1.6.0\sqlcmd-x64_1.6.0-1.msi6000(NULL)(NULL)(NULL)(NULL) 2575304200x8000000000000015858Applicationar-win-dc.attackrange.localtelemetry_xevents996400000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 2575404200x8000000000000015857Applicationar-win-dc.attackrange.localtelemetry_xevents9A6400000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 301404600x8000000000000015807Applicationar-win-2.attackrange.localBACKUP DATABASE506005868089C60B00000A00000009000000610072002D00770069006E002D0032000000070000006D00610073007400650072000000 1826404600x8000000000000015806Applicationar-win-2.attackrange.localmaster2025/02/0419:41:08515221:464:1221:488:11FILE=2, TYPE=DISK: {'C:\temp\master.bak'}584700000A00000009000000610072002D00770069006E002D0032000000070000006D00610073007400650072000000 301404600x8000000000000015805Applicationar-win-2.attackrange.localBACKUP DATABASE506006362686C60B00000A00000009000000610072002D00770069006E002D0032000000070000006D00610073007400650072000000 1826404600x8000000000000015804Applicationar-win-2.attackrange.localmaster2025/02/0419:41:08516221:344:1221:368:11FILE=1, TYPE=DISK: {'C:\temp\master.bak'}584700000A00000009000000610072002D00770069006E002D0032000000070000006D00610073007400650072000000 1545704200x8000000000000015803Applicationar-win-2.attackrange.localshow advanced options10613C00000A00000009000000610072002D00770069006E002D0032000000070000006D00610073007400650072000000 1545704200x8000000000000015802Applicationar-win-2.attackrange.localxp_cmdshell10613C00000A00000009000000610072002D00770069006E002D0032000000070000006D00610073007400650072000000 1545704200x8000000000000015801Applicationar-win-2.attackrange.localxp_cmdshell11613C00000A00000009000000610072002D00770069006E002D0032000000070000006D00610073007400650072000000 1545704200x8000000000000015800Applicationar-win-2.attackrange.localshow advanced options11613C00000A00000009000000610072002D00770069006E002D0032000000070000006D00610073007400650072000000 1545704200x8000000000000015799Applicationar-win-2.attackrange.localxp_cmdshell01613C00000A00000009000000610072002D00770069006E002D0032000000070000006D00610073007400650072000000 1545704200x8000000000000015798Applicationar-win-2.attackrange.localshow advanced options01613C00000A00000009000000610072002D00770069006E002D0032000000070000006D00610073007400650072000000 4991204200x8000000000000015797Applicationar-win-2.attackrange.localF8C200000A00000009000000610072002D00770069006E002D003200000000000000 49002100x8000000000000015796Applicationar-win-2.attackrange.localsqlservr7020,R,98SoftwareUsageMetrics-Api: C:\Windows\system32\LogFiles\Sum\Api.chk-1032 (0xfffffbf8)5 (0x00000005)Access is denied. 504000x8000000000000015795Applicationar-win-2.attackrange.localNT SERVICE\SQLTELEMETRY 340804200x8000000000000015794Applicationar-win-2.attackrange.local500D00000A00000009000000610072002D00770069006E002D0032000000070000006D00610073007400650072000000 968804200x8000000000000015793Applicationar-win-2.attackrange.localD82500000A00000009000000610072002D00770069006E002D0032000000070000006D00610073007400650072000000 2605904200x8000000000000015792Applicationar-win-2.attackrange.localMSSQLSvc/ar-win-2.attackrange.local:1433CB6500000A00000009000000610072002D00770069006E002D003200000000000000 2605904200x8000000000000015791Applicationar-win-2.attackrange.localMSSQLSvc/ar-win-2.attackrange.localCB6500000A00000009000000610072002D00770069006E002D003200000000000000 966604200x8000000000000015790Applicationar-win-2.attackrange.localDatabase MirroringC22500000A00000009000000610072002D00770069006E002D0032000000070000006D00610073007400650072000000 966604200x8000000000000015789Applicationar-win-2.attackrange.localService BrokerC22500000A00000009000000610072002D00770069006E002D0032000000070000006D00610073007400650072000000 1711704200x8000000000000015788Applicationar-win-2.attackrange.local2DD4200000A00000009000000610072002D00770069006E002D003200000007000000740065006D007000640062000000 2607604200x8000000000000015787Applicationar-win-2.attackrange.localDC6500000A00000009000000610072002D00770069006E002D003200000000000000 1712604200x8000000000000015786Applicationar-win-2.attackrange.localE64200000A00000009000000610072002D00770069006E002D003200000000000000 1720104200x8000000000000015785Applicationar-win-2.attackrange.local1434314300000A00000009000000610072002D00770069006E002D003200000000000000 2602204200x8000000000000015784Applicationar-win-2.attackrange.local127.0.0.1ipv414341A66500000A00000009000000610072002D00770069006E002D003200000000000000 2602204200x8000000000000015783Applicationar-win-2.attackrange.local::1ipv614341A66500000A00000009000000610072002D00770069006E002D003200000000000000 2602804200x8000000000000015782Applicationar-win-2.attackrange.local\\.\pipe\sql\queryAC6500000A00000009000000610072002D00770069006E002D003200000000000000 2604804200x8000000000000015781Applicationar-win-2.attackrange.local\\.\pipe\SQLLocal\MSSQLSERVERC06500000A00000009000000610072002D00770069006E002D003200000000000000 2602204200x8000000000000015780Applicationar-win-2.attackrange.local'any'ipv414331A66500000A00000009000000610072002D00770069006E002D003200000000000000 2602204200x8000000000000015779Applicationar-win-2.attackrange.local'any'ipv614331A66500000A00000009000000610072002D00770069006E002D003200000000000000 2601804200x8000000000000015778Applicationar-win-2.attackrange.localA26500000A00000009000000610072002D00770069006E002D003200000000000000 1713704200x8000000000000015777Applicationar-win-2.attackrange.localtempdbF14200000A00000009000000610072002D00770069006E002D0032000000070000006D00610073007400650072000000 1713704200x8000000000000015776Applicationar-win-2.attackrange.localmsdbF14200000A00000009000000610072002D00770069006E002D003200000000000000 4111104200x8000000000000015775Applicationar-win-2.attackrange.local97A000000A00000009000000610072002D00770069006E002D003200000000000000 4111004200x8000000000000015774Applicationar-win-2.attackrange.local96A000000A00000009000000610072002D00770069006E002D003200000000000000 1713604200x8000000000000015773Applicationar-win-2.attackrange.localF04200000A00000009000000610072002D00770069006E002D0032000000070000006D00610073007400650072000000 1766304200x8000000000000015772Applicationar-win-2.attackrange.localar-win-2FF4400000A00000009000000610072002D00770069006E002D0032000000070000006D00610073007400650072000000 1903004200x8000000000000015771Applicationar-win-2.attackrange.local1sa564A00000A00000009000000610072002D00770069006E002D0032000000070000006D00610073007400650072000000 2575304200x8000000000000015770Applicationar-win-2.attackrange.localsystem_health996400000A00000009000000610072002D00770069006E002D0032000000070000006D00610073007400650072000000 3321804200x8000000000000015769Applicationar-win-2.attackrange.localC28100000A00000009000000610072002D00770069006E002D0032000000070000006D00610073007400650072000000 3321704200x8000000000000015768Applicationar-win-2.attackrange.localC18100000A00000009000000610072002D00770069006E002D0032000000070000006D00610073007400650072000000 1098104200x8000000000000015767Applicationar-win-2.attackrange.localE52A00000A00000009000000610072002D00770069006E002D0032000000070000006D00610073007400650072000000 1713704200x8000000000000015766Applicationar-win-2.attackrange.localmodel_msdbF14200000A00000009000000610072002D00770069006E002D0032000000070000006D00610073007400650072000000 1713704200x8000000000000015765Applicationar-win-2.attackrange.localmodelF14200000A00000009000000610072002D00770069006E002D0032000000070000006D00610073007400650072000000 95804200x8000000000000015764Applicationar-win-2.attackrange.local16.00.1000BE0300000A00000009000000610072002D00770069006E002D0032000000070000006D00610073007400650072000000 1713704200x8000000000000015763Applicationar-win-2.attackrange.localmssqlsystemresourceF14200000A00000009000000610072002D00770069006E002D0032000000070000006D00610073007400650072000000 1713704200x8000000000000015762Applicationar-win-2.attackrange.localmodel_replicatedmasterF14200000A00000009000000610072002D00770069006E002D0032000000070000006D00610073007400650072000000 625304200x8000000000000015761Applicationar-win-2.attackrange.localv4.0.30319C:\Windows\Microsoft.NET\Framework64\v4.0.30319\6D1800000A00000009000000610072002D00770069006E002D003200000000000000 1713704200x8000000000000015760Applicationar-win-2.attackrange.localmasterF14200000A00000009000000610072002D00770069006E002D003200000000000000 904804200x8000000000000015759Applicationar-win-2.attackrange.localclwb582300000A00000009000000610072002D00770069006E002D003200000000000000 1711804200x8000000000000015758Applicationar-win-2.attackrange.localenabledDE4200000A00000009000000610072002D00770069006E002D003200000000000000 1712504200x8000000000000015757Applicationar-win-2.attackrange.local25005000E54200000A00000009000000610072002D00770069006E002D003200000000000000 1715204200x8000000000000015756Applicationar-win-2.attackrange.local000000000000000ff000000000000000ff0004300000A00000009000000610072002D00770069006E002D003200000000000000 1717604200x8000000000000015755Applicationar-win-2.attackrange.local57922/4/2025 7:41:02 PM2/4/2025 7:41:02 PM184300000A00000009000000610072002D00770069006E002D003200000000000000 1781104200x8000000000000015754Applicationar-win-2.attackrange.local1934500000A00000009000000610072002D00770069006E002D003200000000000000 1726404200x8000000000000015753Applicationar-win-2.attackrange.localSSE SSE2 SSE3 SSSE3 SSE41 SSE42 AVX AVX2 POPCNT BMI1 BMI2 AVX512 (F CD BW DQ VL)704300000A00000009000000610072002D00770069006E002D003200000000000000 87304200x8000000000000015752Applicationar-win-2.attackrange.local690300000A00000009000000610072002D00770069006E002D003200000000000000 4991704200x8000000000000015751Applicationar-win-2.attackrange.localSQL_Latin1_General_CP1_CI_ASus_english1033FDC200000A00000009000000610072002D00770069006E002D003200000000000000 89404200x8000000000000015750Applicationar-win-2.attackrange.local838860851128837E0300000A00000009000000610072002D00770069006E002D003200000000000000 85204200x8000000000000015749Applicationar-win-2.attackrange.local540300000A00000009000000610072002D00770069006E002D003200000000000000 4990304200x8000000000000015748Applicationar-win-2.attackrange.local31955EFC200000A00000009000000610072002D00770069006E002D003200000000000000 1716204200x8000000000000015747Applicationar-win-2.attackrange.local0A4300000A00000009000000610072002D00770069006E002D003200000000000000 1716404200x8000000000000015746Applicationar-win-2.attackrange.local148880C4300000A00000009000000610072002D00770069006E002D003200000000000000 1711504200x8000000000000015745Applicationar-win-2.attackrange.local -s "MSSQLSERVER"DB4200000A00000009000000610072002D00770069006E002D003200000000000000 1711004200x8000000000000015744Applicationar-win-2.attackrange.local -d C:\Program Files\Microsoft SQL Server\MSSQL16.MSSQLSERVER\MSSQL\DATA\master.mdf -e C:\Program Files\Microsoft SQL Server\MSSQL16.MSSQLSERVER\MSSQL\Log\ERRORLOG -l C:\Program Files\Microsoft SQL Server\MSSQL16.MSSQLSERVER\MSSQL\DATA\mastlog.ldfD64200000A00000009000000610072002D00770069006E002D003200000000000000 4990404200x8000000000000015743Applicationar-win-2.attackrange.localNT Service\MSSQLSERVERF0C200000A00000009000000610072002D00770069006E002D003200000000000000 1711104200x8000000000000015742Applicationar-win-2.attackrange.localC:\Program Files\Microsoft SQL Server\MSSQL16.MSSQLSERVER\MSSQL\Log\ERRORLOGD74200000A00000009000000610072002D00770069006E002D003200000000000000 1526804200x8000000000000015741Applicationar-win-2.attackrange.localMIXEDA43B00000A00000009000000610072002D00770069006E002D003200000000000000 1849604200x8000000000000015740Applicationar-win-2.attackrange.localAmazon EC2m5.2xlarge404800000A00000009000000610072002D00770069006E002D003200000000000000 1710404200x8000000000000015739Applicationar-win-2.attackrange.local7020D04200000A00000009000000610072002D00770069006E002D003200000000000000 1710304200x8000000000000015738Applicationar-win-2.attackrange.localCF4200000A00000009000000610072002D00770069006E002D003200000000000000 1710104200x8000000000000015737Applicationar-win-2.attackrange.localCD4200000A00000009000000610072002D00770069006E002D003200000000000000 4991604200x8000000000000015736Applicationar-win-2.attackrange.local000FCC200000A00000009000000610072002D00770069006E002D003200000000000000 1706904200x8000000000000015735Applicationar-win-2.attackrange.localMicrosoft SQL Server 2022 (RTM) - 16.0.1000.6 (X64) Oct 8 2022 05:58:25 Copyright (C) 2022 Microsoft Corporation Developer Edition (64-bit) on Windows Server 2022 Datacenter 10.0 <X64> (Build 20348: ) (Hypervisor) AD4200000A00000009000000610072002D00770069006E002D003200000000000000 1204000x8000000000000015734Applicationar-win-2.attackrange.local 1604000x8000000000000015733Applicationar-win-2.attackrange.local 1304000x8000000000000015732Applicationar-win-2.attackrange.local 1204000x8000000000000015731Applicationar-win-2.attackrange.local 1604000x8000000000000015730Applicationar-win-2.attackrange.local 2606804200x8000000000000015729Applicationar-win-2.attackrange.localMSSQLSvc/ar-win-2.attackrange.local:14330x2af961D46500000A00000009000000610072002D00770069006E002D003200000000000000 2606804200x8000000000000015728Applicationar-win-2.attackrange.localMSSQLSvc/ar-win-2.attackrange.local0x2af961D46500000A00000009000000610072002D00770069006E002D003200000000000000 2572502200x8000000000000015727Applicationar-win-2.attackrange.local7D6400001000000009000000610072002D00770069006E002D0032000000070000006D00610073007400650072000000 1903204200x8000000000000015726Applicationar-win-2.attackrange.local1584A00000A00000009000000610072002D00770069006E002D0032000000070000006D00610073007400650072000000 652704200x8000000000000015725Applicationar-win-2.attackrange.local7F1900000A00000009000000610072002D00770069006E002D0032000000070000006D00610073007400650072000000 1714804200x8000000000000015724Applicationar-win-2.attackrange.localFC4200000A00000009000000610072002D00770069006E002D0032000000070000006D00610073007400650072000000 570304200x8000000000000015723Applicationar-win-2.attackrange.localus_english471600000A00000009000000610072002D00770069006E002D0032000000070000006D00610073007400650072000000 570104200x8000000000000015722Applicationar-win-2.attackrange.localmaster451600000A00000009000000610072002D00770069006E002D0032000000070000006D00610073007400650072000000 1545704200x8000000000000015721Applicationar-win-2.attackrange.localshow advanced options10613C00000A00000009000000610072002D00770069006E002D0032000000070000006D00610073007400650072000000 1545704200x8000000000000015720Applicationar-win-2.attackrange.localAgent XPs10613C00000A00000009000000610072002D00770069006E002D0032000000070000006D00610073007400650072000000 812804200x8000000000000015719Applicationar-win-2.attackrange.localxpstar.dll2022.160.1000xp_instance_regreadC01F00000A00000009000000610072002D00770069006E002D0032000000070000006D00610073007400650072000000 3309004200x8000000000000015718Applicationar-win-2.attackrange.localxpstar.dll428100000A00000009000000610072002D00770069006E002D0032000000070000006D00610073007400650072000000 1545704200x8000000000000015717Applicationar-win-2.attackrange.localAgent XPs01613C00000A00000009000000610072002D00770069006E002D0032000000070000006D00610073007400650072000000 1545704200x8000000000000015716Applicationar-win-2.attackrange.localshow advanced options01613C00000A00000009000000610072002D00770069006E002D0032000000070000006D00610073007400650072000000 570304200x8000000000000015715Applicationar-win-2.attackrange.localus_english471600000A00000009000000610072002D00770069006E002D0032000000070000006D00610073007400650072000000 570104200x8000000000000015714Applicationar-win-2.attackrange.localmaster451600000A00000009000000610072002D00770069006E002D0032000000070000006D00610073007400650072000000 1545704200x8000000000000015713Applicationar-win-2.attackrange.localshow advanced options10613C00000A00000009000000610072002D00770069006E002D0032000000070000006D00610073007400650072000000 1545704200x8000000000000015712Applicationar-win-2.attackrange.localmax degree of parallelism08613C00000A00000009000000610072002D00770069006E002D0032000000070000006D00610073007400650072000000 1545704200x8000000000000015711Applicationar-win-2.attackrange.localshow advanced options01613C00000A00000009000000610072002D00770069006E002D0032000000070000006D00610073007400650072000000 508404200x8000000000000015710Applicationar-win-2.attackrange.localNEW_BROKERONmsdbDC1300000A00000009000000610072002D00770069006E002D0032000000070000006D00610073007400650072000000 508404200x8000000000000015709Applicationar-win-2.attackrange.localNEW_BROKERONtempdbDC1300000A00000009000000610072002D00770069006E002D0032000000070000006D00610073007400650072000000 1545704200x8000000000000015708Applicationar-win-2.attackrange.localshow advanced options10613C00000A00000009000000610072002D00770069006E002D0032000000070000006D00610073007400650072000000 1545704200x8000000000000015707Applicationar-win-2.attackrange.localdefault full-text language10331033613C00000A00000009000000610072002D00770069006E002D0032000000070000006D00610073007400650072000000 1545704200x8000000000000015706Applicationar-win-2.attackrange.localdefault language00613C00000A00000009000000610072002D00770069006E002D0032000000070000006D00610073007400650072000000 1545704200x8000000000000015705Applicationar-win-2.attackrange.localshow advanced options01613C00000A00000009000000610072002D00770069006E002D0032000000070000006D00610073007400650072000000 508404200x8000000000000015704Applicationar-win-2.attackrange.localRECOVERYFULLmodelDC1300000A00000009000000610072002D00770069006E002D0032000000070000006D00610073007400650072000000 570304200x8000000000000015703Applicationar-win-2.attackrange.localus_english471600000A00000009000000610072002D00770069006E002D0032000000070000006D00610073007400650072000000 570104200x8000000000000015702Applicationar-win-2.attackrange.localmaster451600000A00000009000000610072002D00770069006E002D0032000000070000006D00610073007400650072000000 340804200x8000000000000015701Applicationar-win-2.attackrange.local500D00000A00000009000000610072002D00770069006E002D0032000000070000006D00610073007400650072000000 95104200x8000000000000015700Applicationar-win-2.attackrange.localmsdb956957B70300000A00000009000000610072002D00770069006E002D0032000000050000006D007300640062000000 95104200x8000000000000015699Applicationar-win-2.attackrange.localmsdb955956B70300000A00000009000000610072002D00770069006E002D0032000000050000006D007300640062000000 95104200x8000000000000015698Applicationar-win-2.attackrange.localmsdb954955B70300000A00000009000000610072002D00770069006E002D0032000000050000006D007300640062000000 95104200x8000000000000015697Applicationar-win-2.attackrange.localmsdb953954B70300000A00000009000000610072002D00770069006E002D0032000000050000006D007300640062000000 95104200x8000000000000015696Applicationar-win-2.attackrange.localmsdb952953B70300000A00000009000000610072002D00770069006E002D0032000000050000006D007300640062000000 95104200x8000000000000015695Applicationar-win-2.attackrange.localmsdb951952B70300000A00000009000000610072002D00770069006E002D0032000000050000006D007300640062000000 95104200x8000000000000015694Applicationar-win-2.attackrange.localmsdb950951B70300000A00000009000000610072002D00770069006E002D0032000000050000006D007300640062000000 95104200x8000000000000015693Applicationar-win-2.attackrange.localmsdb949950B70300000A00000009000000610072002D00770069006E002D0032000000050000006D007300640062000000 95104200x8000000000000015692Applicationar-win-2.attackrange.localmsdb948949B70300000A00000009000000610072002D00770069006E002D0032000000050000006D007300640062000000 95104200x8000000000000015691Applicationar-win-2.attackrange.localmsdb947948B70300000A00000009000000610072002D00770069006E002D0032000000050000006D007300640062000000 95104200x8000000000000015690Applicationar-win-2.attackrange.localmsdb946947B70300000A00000009000000610072002D00770069006E002D0032000000050000006D007300640062000000 95104200x8000000000000015689Applicationar-win-2.attackrange.localmsdb945946B70300000A00000009000000610072002D00770069006E002D0032000000050000006D007300640062000000 95104200x8000000000000015688Applicationar-win-2.attackrange.localmsdb944945B70300000A00000009000000610072002D00770069006E002D0032000000050000006D007300640062000000 95104200x8000000000000015687Applicationar-win-2.attackrange.localmsdb943944B70300000A00000009000000610072002D00770069006E002D0032000000050000006D007300640062000000 1711704200x8000000000000015686Applicationar-win-2.attackrange.local1DD4200000A00000009000000610072002D00770069006E002D003200000007000000740065006D007000640062000000 95104200x8000000000000015685Applicationar-win-2.attackrange.localmsdb942943B70300000A00000009000000610072002D00770069006E002D0032000000050000006D007300640062000000 95104200x8000000000000015684Applicationar-win-2.attackrange.localmsdb941942B70300000A00000009000000610072002D00770069006E002D0032000000050000006D007300640062000000 95104200x8000000000000015683Applicationar-win-2.attackrange.localmsdb940941B70300000A00000009000000610072002D00770069006E002D0032000000050000006D007300640062000000 95104200x8000000000000015682Applicationar-win-2.attackrange.localmsdb939940B70300000A00000009000000610072002D00770069006E002D0032000000050000006D007300640062000000 95104200x8000000000000015681Applicationar-win-2.attackrange.localmsdb938939B70300000A00000009000000610072002D00770069006E002D0032000000050000006D007300640062000000 95104200x8000000000000015680Applicationar-win-2.attackrange.localmsdb937938B70300000A00000009000000610072002D00770069006E002D0032000000050000006D007300640062000000 95104200x8000000000000015679Applicationar-win-2.attackrange.localmsdb936937B70300000A00000009000000610072002D00770069006E002D0032000000050000006D007300640062000000 95104200x8000000000000015678Applicationar-win-2.attackrange.localmsdb935936B70300000A00000009000000610072002D00770069006E002D0032000000050000006D007300640062000000 95104200x8000000000000015677Applicationar-win-2.attackrange.localmsdb934935B70300000A00000009000000610072002D00770069006E002D0032000000050000006D007300640062000000 95104200x8000000000000015676Applicationar-win-2.attackrange.localmsdb933934B70300000A00000009000000610072002D00770069006E002D0032000000050000006D007300640062000000 1713704200x8000000000000015675Applicationar-win-2.attackrange.localtempdbF14200000A00000009000000610072002D00770069006E002D0032000000070000006D00610073007400650072000000 95104200x8000000000000015674Applicationar-win-2.attackrange.localmsdb932933B70300000A00000009000000610072002D00770069006E002D0032000000050000006D007300640062000000 95104200x8000000000000015673Applicationar-win-2.attackrange.localmsdb931932B70300000A00000009000000610072002D00770069006E002D0032000000050000006D007300640062000000 95104200x8000000000000015672Applicationar-win-2.attackrange.localmsdb930931B70300000A00000009000000610072002D00770069006E002D0032000000050000006D007300640062000000 95104200x8000000000000015671Applicationar-win-2.attackrange.localmsdb929930B70300000A00000009000000610072002D00770069006E002D0032000000050000006D007300640062000000 95104200x8000000000000015670Applicationar-win-2.attackrange.localmsdb928929B70300000A00000009000000610072002D00770069006E002D0032000000050000006D007300640062000000 95104200x8000000000000015669Applicationar-win-2.attackrange.localmsdb927928B70300000A00000009000000610072002D00770069006E002D0032000000050000006D007300640062000000 94404200x8000000000000015668Applicationar-win-2.attackrange.localmsdb927957B00300000A00000009000000610072002D00770069006E002D0032000000050000006D007300640062000000 901304200x8000000000000015667Applicationar-win-2.attackrange.localmsdb4096307250176C:\Program Files\Microsoft SQL Server\MSSQL16.MSSQLSERVER\MSSQL\DATA\MSDBLog.ldf352300000A00000009000000610072002D00770069006E002D003200000000000000 1713704200x8000000000000015666Applicationar-win-2.attackrange.localmsdbF14200000A00000009000000610072002D00770069006E002D003200000000000000 1713604200x8000000000000015665Applicationar-win-2.attackrange.localF04200000A00000009000000610072002D00770069006E002D0032000000070000006D00610073007400650072000000 4114704200x8000000000000015664Applicationar-win-2.attackrange.localthe SQL Server instance is running in single-user modeBBA000000A00000009000000610072002D00770069006E002D0032000000070000006D00610073007400650072000000 1766304200x8000000000000015663Applicationar-win-2.attackrange.localar-win-2FF4400000A00000009000000610072002D00770069006E002D0032000000070000006D00610073007400650072000000 1903004200x8000000000000015662Applicationar-win-2.attackrange.local1sa564A00000A00000009000000610072002D00770069006E002D0032000000070000006D00610073007400650072000000 2575304200x8000000000000015661Applicationar-win-2.attackrange.localsystem_health996400000A00000009000000610072002D00770069006E002D0032000000070000006D00610073007400650072000000 3321804200x8000000000000015660Applicationar-win-2.attackrange.localC28100000A00000009000000610072002D00770069006E002D0032000000070000006D00610073007400650072000000 3321704200x8000000000000015659Applicationar-win-2.attackrange.localC18100000A00000009000000610072002D00770069006E002D0032000000070000006D00610073007400650072000000 95104200x8000000000000015658Applicationar-win-2.attackrange.localmodel_msdb956957B70300000A00000009000000610072002D00770069006E002D00320000000B0000006D006F00640065006C005F006D007300640062000000 95104200x8000000000000015657Applicationar-win-2.attackrange.localmodel_msdb955956B70300000A00000009000000610072002D00770069006E002D00320000000B0000006D006F00640065006C005F006D007300640062000000 95104200x8000000000000015656Applicationar-win-2.attackrange.localmodel_msdb954955B70300000A00000009000000610072002D00770069006E002D00320000000B0000006D006F00640065006C005F006D007300640062000000 95104200x8000000000000015655Applicationar-win-2.attackrange.localmodel_msdb953954B70300000A00000009000000610072002D00770069006E002D00320000000B0000006D006F00640065006C005F006D007300640062000000 95104200x8000000000000015654Applicationar-win-2.attackrange.localmodel_msdb952953B70300000A00000009000000610072002D00770069006E002D00320000000B0000006D006F00640065006C005F006D007300640062000000 95104200x8000000000000015653Applicationar-win-2.attackrange.localmodel_msdb951952B70300000A00000009000000610072002D00770069006E002D00320000000B0000006D006F00640065006C005F006D007300640062000000 95104200x8000000000000015652Applicationar-win-2.attackrange.localmodel_msdb950951B70300000A00000009000000610072002D00770069006E002D00320000000B0000006D006F00640065006C005F006D007300640062000000 95104200x8000000000000015651Applicationar-win-2.attackrange.localmodel_msdb949950B70300000A00000009000000610072002D00770069006E002D00320000000B0000006D006F00640065006C005F006D007300640062000000 95104200x8000000000000015650Applicationar-win-2.attackrange.localmodel_msdb948949B70300000A00000009000000610072002D00770069006E002D00320000000B0000006D006F00640065006C005F006D007300640062000000 95104200x8000000000000015649Applicationar-win-2.attackrange.localmodel_msdb947948B70300000A00000009000000610072002D00770069006E002D00320000000B0000006D006F00640065006C005F006D007300640062000000 95104200x8000000000000015648Applicationar-win-2.attackrange.localmodel_msdb946947B70300000A00000009000000610072002D00770069006E002D00320000000B0000006D006F00640065006C005F006D007300640062000000 95104200x8000000000000015647Applicationar-win-2.attackrange.localmodel_msdb945946B70300000A00000009000000610072002D00770069006E002D00320000000B0000006D006F00640065006C005F006D007300640062000000 95104200x8000000000000015646Applicationar-win-2.attackrange.localmodel_msdb944945B70300000A00000009000000610072002D00770069006E002D00320000000B0000006D006F00640065006C005F006D007300640062000000 95104200x8000000000000015645Applicationar-win-2.attackrange.localmodel_msdb943944B70300000A00000009000000610072002D00770069006E002D00320000000B0000006D006F00640065006C005F006D007300640062000000 95104200x8000000000000015644Applicationar-win-2.attackrange.localmodel_msdb942943B70300000A00000009000000610072002D00770069006E002D00320000000B0000006D006F00640065006C005F006D007300640062000000 2605904200x8000000000000015643Applicationar-win-2.attackrange.localMSSQLSvc/ar-win-2.attackrange.local:1433CB6500000A00000009000000610072002D00770069006E002D003200000000000000 2605904200x8000000000000015642Applicationar-win-2.attackrange.localMSSQLSvc/ar-win-2.attackrange.localCB6500000A00000009000000610072002D00770069006E002D003200000000000000 95104200x8000000000000015641Applicationar-win-2.attackrange.localmodel_msdb941942B70300000A00000009000000610072002D00770069006E002D00320000000B0000006D006F00640065006C005F006D007300640062000000 95104200x8000000000000015640Applicationar-win-2.attackrange.localmodel_msdb940941B70300000A00000009000000610072002D00770069006E002D00320000000B0000006D006F00640065006C005F006D007300640062000000 95104200x8000000000000015639Applicationar-win-2.attackrange.localmodel_msdb939940B70300000A00000009000000610072002D00770069006E002D00320000000B0000006D006F00640065006C005F006D007300640062000000 95104200x8000000000000015638Applicationar-win-2.attackrange.localmodel_msdb938939B70300000A00000009000000610072002D00770069006E002D00320000000B0000006D006F00640065006C005F006D007300640062000000 95104200x8000000000000015637Applicationar-win-2.attackrange.localmodel_msdb937938B70300000A00000009000000610072002D00770069006E002D00320000000B0000006D006F00640065006C005F006D007300640062000000 95104200x8000000000000015636Applicationar-win-2.attackrange.localmodel_msdb936937B70300000A00000009000000610072002D00770069006E002D00320000000B0000006D006F00640065006C005F006D007300640062000000 95104200x8000000000000015635Applicationar-win-2.attackrange.localmodel_msdb935936B70300000A00000009000000610072002D00770069006E002D00320000000B0000006D006F00640065006C005F006D007300640062000000 95104200x8000000000000015634Applicationar-win-2.attackrange.localmodel_msdb934935B70300000A00000009000000610072002D00770069006E002D00320000000B0000006D006F00640065006C005F006D007300640062000000 95104200x8000000000000015633Applicationar-win-2.attackrange.localmodel_msdb933934B70300000A00000009000000610072002D00770069006E002D00320000000B0000006D006F00640065006C005F006D007300640062000000 95104200x8000000000000015632Applicationar-win-2.attackrange.localmodel_msdb932933B70300000A00000009000000610072002D00770069006E002D00320000000B0000006D006F00640065006C005F006D007300640062000000 95104200x8000000000000015631Applicationar-win-2.attackrange.localmodel_msdb931932B70300000A00000009000000610072002D00770069006E002D00320000000B0000006D006F00640065006C005F006D007300640062000000 95104200x8000000000000015630Applicationar-win-2.attackrange.localmodel_msdb930931B70300000A00000009000000610072002D00770069006E002D00320000000B0000006D006F00640065006C005F006D007300640062000000 95104200x8000000000000015629Applicationar-win-2.attackrange.localmodel_msdb929930B70300000A00000009000000610072002D00770069006E002D00320000000B0000006D006F00640065006C005F006D007300640062000000 95104200x8000000000000015628Applicationar-win-2.attackrange.localmodel_msdb928929B70300000A00000009000000610072002D00770069006E002D00320000000B0000006D006F00640065006C005F006D007300640062000000 95104200x8000000000000015627Applicationar-win-2.attackrange.localmodel_msdb927928B70300000A00000009000000610072002D00770069006E002D00320000000B0000006D006F00640065006C005F006D007300640062000000 94404200x8000000000000015626Applicationar-win-2.attackrange.localmodel_msdb927957B00300000A00000009000000610072002D00770069006E002D00320000000B0000006D006F00640065006C005F006D007300640062000000 1713704200x8000000000000015625Applicationar-win-2.attackrange.localmodel_msdbF14200000A00000009000000610072002D00770069006E002D0032000000070000006D00610073007400650072000000 2607604200x8000000000000015624Applicationar-win-2.attackrange.localDC6500000A00000009000000610072002D00770069006E002D003200000000000000 1712604200x8000000000000015623Applicationar-win-2.attackrange.localE64200000A00000009000000610072002D00770069006E002D003200000000000000 1719904200x8000000000000015622Applicationar-win-2.attackrange.local78062F4300000A00000009000000610072002D00770069006E002D003200000000000000 2604804200x8000000000000015621Applicationar-win-2.attackrange.local\\.\pipe\SQLLocal\MSSQLSERVERC06500000A00000009000000610072002D00770069006E002D003200000000000000 2601804200x8000000000000015620Applicationar-win-2.attackrange.localA26500000A00000009000000610072002D00770069006E002D003200000000000000 95104200x8000000000000015619Applicationar-win-2.attackrange.localmodel_replicatedmaster956957B70300000A00000009000000610072002D00770069006E002D0032000000170000006D006F00640065006C005F007200650070006C006900630061007400650064006D00610073007400650072000000 95104200x8000000000000015618Applicationar-win-2.attackrange.localmodel956957B70300000A00000009000000610072002D00770069006E002D0032000000060000006D006F00640065006C000000 95104200x8000000000000015617Applicationar-win-2.attackrange.localmodel_replicatedmaster955956B70300000A00000009000000610072002D00770069006E002D0032000000170000006D006F00640065006C005F007200650070006C006900630061007400650064006D00610073007400650072000000 95104200x8000000000000015616Applicationar-win-2.attackrange.localmodel_replicatedmaster954955B70300000A00000009000000610072002D00770069006E002D0032000000170000006D006F00640065006C005F007200650070006C006900630061007400650064006D00610073007400650072000000 95104200x8000000000000015615Applicationar-win-2.attackrange.localmodel_replicatedmaster953954B70300000A00000009000000610072002D00770069006E002D0032000000170000006D006F00640065006C005F007200650070006C006900630061007400650064006D00610073007400650072000000 95104200x8000000000000015614Applicationar-win-2.attackrange.localmodel955956B70300000A00000009000000610072002D00770069006E002D0032000000060000006D006F00640065006C000000 95104200x8000000000000015613Applicationar-win-2.attackrange.localmodel_replicatedmaster952953B70300000A00000009000000610072002D00770069006E002D0032000000170000006D006F00640065006C005F007200650070006C006900630061007400650064006D00610073007400650072000000 95104200x8000000000000015612Applicationar-win-2.attackrange.localmodel954955B70300000A00000009000000610072002D00770069006E002D0032000000060000006D006F00640065006C000000 95104200x8000000000000015611Applicationar-win-2.attackrange.localmodel_replicatedmaster951952B70300000A00000009000000610072002D00770069006E002D0032000000170000006D006F00640065006C005F007200650070006C006900630061007400650064006D00610073007400650072000000 95104200x8000000000000015610Applicationar-win-2.attackrange.localmodel953954B70300000A00000009000000610072002D00770069006E002D0032000000060000006D006F00640065006C000000 95104200x8000000000000015609Applicationar-win-2.attackrange.localmodel952953B70300000A00000009000000610072002D00770069006E002D0032000000060000006D006F00640065006C000000 95104200x8000000000000015608Applicationar-win-2.attackrange.localmodel951952B70300000A00000009000000610072002D00770069006E002D0032000000060000006D006F00640065006C000000 95104200x8000000000000015607Applicationar-win-2.attackrange.localmodel_replicatedmaster950951B70300000A00000009000000610072002D00770069006E002D0032000000170000006D006F00640065006C005F007200650070006C006900630061007400650064006D00610073007400650072000000 95104200x8000000000000015606Applicationar-win-2.attackrange.localmodel_replicatedmaster949950B70300000A00000009000000610072002D00770069006E002D0032000000170000006D006F00640065006C005F007200650070006C006900630061007400650064006D00610073007400650072000000 95104200x8000000000000015605Applicationar-win-2.attackrange.localmodel_replicatedmaster948949B70300000A00000009000000610072002D00770069006E002D0032000000170000006D006F00640065006C005F007200650070006C006900630061007400650064006D00610073007400650072000000 95104200x8000000000000015604Applicationar-win-2.attackrange.localmodel_replicatedmaster947948B70300000A00000009000000610072002D00770069006E002D0032000000170000006D006F00640065006C005F007200650070006C006900630061007400650064006D00610073007400650072000000 95104200x8000000000000015603Applicationar-win-2.attackrange.localmodel950951B70300000A00000009000000610072002D00770069006E002D0032000000060000006D006F00640065006C000000 95104200x8000000000000015602Applicationar-win-2.attackrange.localmodel_replicatedmaster946947B70300000A00000009000000610072002D00770069006E002D0032000000170000006D006F00640065006C005F007200650070006C006900630061007400650064006D00610073007400650072000000 95104200x8000000000000015601Applicationar-win-2.attackrange.localmodel949950B70300000A00000009000000610072002D00770069006E002D0032000000060000006D006F00640065006C000000 95104200x8000000000000015600Applicationar-win-2.attackrange.localmodel_replicatedmaster945946B70300000A00000009000000610072002D00770069006E002D0032000000170000006D006F00640065006C005F007200650070006C006900630061007400650064006D00610073007400650072000000 95104200x8000000000000015599Applicationar-win-2.attackrange.localmodel948949B70300000A00000009000000610072002D00770069006E002D0032000000060000006D006F00640065006C000000 95104200x8000000000000015598Applicationar-win-2.attackrange.localmodel947948B70300000A00000009000000610072002D00770069006E002D0032000000060000006D006F00640065006C000000 95104200x8000000000000015597Applicationar-win-2.attackrange.localmodel946947B70300000A00000009000000610072002D00770069006E002D0032000000060000006D006F00640065006C000000 95104200x8000000000000015596Applicationar-win-2.attackrange.localmodel945946B70300000A00000009000000610072002D00770069006E002D0032000000060000006D006F00640065006C000000 95104200x8000000000000015595Applicationar-win-2.attackrange.localmodel_replicatedmaster944945B70300000A00000009000000610072002D00770069006E002D0032000000170000006D006F00640065006C005F007200650070006C006900630061007400650064006D00610073007400650072000000 95104200x8000000000000015594Applicationar-win-2.attackrange.localmodel_replicatedmaster943944B70300000A00000009000000610072002D00770069006E002D0032000000170000006D006F00640065006C005F007200650070006C006900630061007400650064006D00610073007400650072000000 95104200x8000000000000015593Applicationar-win-2.attackrange.localmodel944945B70300000A00000009000000610072002D00770069006E002D0032000000060000006D006F00640065006C000000 95104200x8000000000000015592Applicationar-win-2.attackrange.localmodel943944B70300000A00000009000000610072002D00770069006E002D0032000000060000006D006F00640065006C000000 95104200x8000000000000015591Applicationar-win-2.attackrange.localmodel942943B70300000A00000009000000610072002D00770069006E002D0032000000060000006D006F00640065006C000000 95104200x8000000000000015590Applicationar-win-2.attackrange.localmodel941942B70300000A00000009000000610072002D00770069006E002D0032000000060000006D006F00640065006C000000 95104200x8000000000000015589Applicationar-win-2.attackrange.localmodel940941B70300000A00000009000000610072002D00770069006E002D0032000000060000006D006F00640065006C000000 95104200x8000000000000015588Applicationar-win-2.attackrange.localmodel_replicatedmaster942943B70300000A00000009000000610072002D00770069006E002D0032000000170000006D006F00640065006C005F007200650070006C006900630061007400650064006D00610073007400650072000000 95104200x8000000000000015587Applicationar-win-2.attackrange.localmodel939940B70300000A00000009000000610072002D00770069006E002D0032000000060000006D006F00640065006C000000 95104200x8000000000000015586Applicationar-win-2.attackrange.localmodel_replicatedmaster941942B70300000A00000009000000610072002D00770069006E002D0032000000170000006D006F00640065006C005F007200650070006C006900630061007400650064006D00610073007400650072000000 95104200x8000000000000015585Applicationar-win-2.attackrange.localmodel938939B70300000A00000009000000610072002D00770069006E002D0032000000060000006D006F00640065006C000000 95104200x8000000000000015584Applicationar-win-2.attackrange.localmodel_replicatedmaster940941B70300000A00000009000000610072002D00770069006E002D0032000000170000006D006F00640065006C005F007200650070006C006900630061007400650064006D00610073007400650072000000 95104200x8000000000000015583Applicationar-win-2.attackrange.localmodel_replicatedmaster939940B70300000A00000009000000610072002D00770069006E002D0032000000170000006D006F00640065006C005F007200650070006C006900630061007400650064006D00610073007400650072000000 95104200x8000000000000015582Applicationar-win-2.attackrange.localmodel937938B70300000A00000009000000610072002D00770069006E002D0032000000060000006D006F00640065006C000000 95104200x8000000000000015581Applicationar-win-2.attackrange.localmodel_replicatedmaster938939B70300000A00000009000000610072002D00770069006E002D0032000000170000006D006F00640065006C005F007200650070006C006900630061007400650064006D00610073007400650072000000 95104200x8000000000000015580Applicationar-win-2.attackrange.localmodel936937B70300000A00000009000000610072002D00770069006E002D0032000000060000006D006F00640065006C000000 95104200x8000000000000015579Applicationar-win-2.attackrange.localmodel_replicatedmaster937938B70300000A00000009000000610072002D00770069006E002D0032000000170000006D006F00640065006C005F007200650070006C006900630061007400650064006D00610073007400650072000000 95104200x8000000000000015578Applicationar-win-2.attackrange.localmodel935936B70300000A00000009000000610072002D00770069006E002D0032000000060000006D006F00640065006C000000 95104200x8000000000000015577Applicationar-win-2.attackrange.localmodel_replicatedmaster936937B70300000A00000009000000610072002D00770069006E002D0032000000170000006D006F00640065006C005F007200650070006C006900630061007400650064006D00610073007400650072000000 95104200x8000000000000015576Applicationar-win-2.attackrange.localmodel934935B70300000A00000009000000610072002D00770069006E002D0032000000060000006D006F00640065006C000000 95104200x8000000000000015575Applicationar-win-2.attackrange.localmodel_replicatedmaster935936B70300000A00000009000000610072002D00770069006E002D0032000000170000006D006F00640065006C005F007200650070006C006900630061007400650064006D00610073007400650072000000 95104200x8000000000000015574Applicationar-win-2.attackrange.localmodel933934B70300000A00000009000000610072002D00770069006E002D0032000000060000006D006F00640065006C000000 95104200x8000000000000015573Applicationar-win-2.attackrange.localmodel_replicatedmaster934935B70300000A00000009000000610072002D00770069006E002D0032000000170000006D006F00640065006C005F007200650070006C006900630061007400650064006D00610073007400650072000000 95104200x8000000000000015572Applicationar-win-2.attackrange.localmodel932933B70300000A00000009000000610072002D00770069006E002D0032000000060000006D006F00640065006C000000 95104200x8000000000000015571Applicationar-win-2.attackrange.localmodel_replicatedmaster933934B70300000A00000009000000610072002D00770069006E002D0032000000170000006D006F00640065006C005F007200650070006C006900630061007400650064006D00610073007400650072000000 95104200x8000000000000015570Applicationar-win-2.attackrange.localmodel931932B70300000A00000009000000610072002D00770069006E002D0032000000060000006D006F00640065006C000000 95104200x8000000000000015569Applicationar-win-2.attackrange.localmodel930931B70300000A00000009000000610072002D00770069006E002D0032000000060000006D006F00640065006C000000 95104200x8000000000000015568Applicationar-win-2.attackrange.localmodel_replicatedmaster932933B70300000A00000009000000610072002D00770069006E002D0032000000170000006D006F00640065006C005F007200650070006C006900630061007400650064006D00610073007400650072000000 95104200x8000000000000015567Applicationar-win-2.attackrange.localmodel_replicatedmaster931932B70300000A00000009000000610072002D00770069006E002D0032000000170000006D006F00640065006C005F007200650070006C006900630061007400650064006D00610073007400650072000000 95104200x8000000000000015566Applicationar-win-2.attackrange.localmodel_replicatedmaster930931B70300000A00000009000000610072002D00770069006E002D0032000000170000006D006F00640065006C005F007200650070006C006900630061007400650064006D00610073007400650072000000 95104200x8000000000000015565Applicationar-win-2.attackrange.localmodel929930B70300000A00000009000000610072002D00770069006E002D0032000000060000006D006F00640065006C000000 95104200x8000000000000015564Applicationar-win-2.attackrange.localmodel_replicatedmaster929930B70300000A00000009000000610072002D00770069006E002D0032000000170000006D006F00640065006C005F007200650070006C006900630061007400650064006D00610073007400650072000000 95104200x8000000000000015563Applicationar-win-2.attackrange.localmodel928929B70300000A00000009000000610072002D00770069006E002D0032000000060000006D006F00640065006C000000 95104200x8000000000000015562Applicationar-win-2.attackrange.localmodel927928B70300000A00000009000000610072002D00770069006E002D0032000000060000006D006F00640065006C000000 94404200x8000000000000015561Applicationar-win-2.attackrange.localmodel927957B00300000A00000009000000610072002D00770069006E002D0032000000060000006D006F00640065006C000000 95104200x8000000000000015560Applicationar-win-2.attackrange.localmodel_replicatedmaster928929B70300000A00000009000000610072002D00770069006E002D0032000000170000006D006F00640065006C005F007200650070006C006900630061007400650064006D00610073007400650072000000 95104200x8000000000000015559Applicationar-win-2.attackrange.localmodel_replicatedmaster927928B70300000A00000009000000610072002D00770069006E002D0032000000170000006D006F00640065006C005F007200650070006C006900630061007400650064006D00610073007400650072000000 94404200x8000000000000015558Applicationar-win-2.attackrange.localmodel_replicatedmaster927957B00300000A00000009000000610072002D00770069006E002D0032000000170000006D006F00640065006C005F007200650070006C006900630061007400650064006D00610073007400650072000000 901304200x8000000000000015557Applicationar-win-2.attackrange.localmodel4096204875776C:\Program Files\Microsoft SQL Server\MSSQL16.MSSQLSERVER\MSSQL\DATA\modellog.ldf352300000A00000009000000610072002D00770069006E002D0032000000070000006D00610073007400650072000000 901304200x8000000000000015556Applicationar-win-2.attackrange.localmodel_replicatedmaster40962048100352C:\Program Files\Microsoft SQL Server\MSSQL16.MSSQLSERVER\MSSQL\DATA\model_replicatedmaster.ldf352300000A00000009000000610072002D00770069006E002D0032000000070000006D00610073007400650072000000 1713704200x8000000000000015555Applicationar-win-2.attackrange.localmodelF14200000A00000009000000610072002D00770069006E002D0032000000070000006D00610073007400650072000000 1713704200x8000000000000015554Applicationar-win-2.attackrange.localmodel_replicatedmasterF14200000A00000009000000610072002D00770069006E002D0032000000070000006D00610073007400650072000000 4996104200x8000000000000015553Applicationar-win-2.attackrange.localFORCE C:\Program Files\Microsoft SQL Server\MSSQL16.MSSQLSERVER\MSSQL\Binn\Templates\model_msdblog.ldfC:\Program Files\Microsoft SQL Server\MSSQL16.MSSQLSERVER\MSSQL\DATA\model_msdblog.ldf29C300000A00000009000000610072002D00770069006E002D0032000000070000006D00610073007400650072000000 95804200x8000000000000015552Applicationar-win-2.attackrange.local16.00.1000BE0300000A00000009000000610072002D00770069006E002D0032000000070000006D00610073007400650072000000 4996104200x8000000000000015551Applicationar-win-2.attackrange.localFORCE C:\Program Files\Microsoft SQL Server\MSSQL16.MSSQLSERVER\MSSQL\Binn\Templates\model_msdbdata.mdfC:\Program Files\Microsoft SQL Server\MSSQL16.MSSQLSERVER\MSSQL\DATA\model_msdbdata.mdf29C300000A00000009000000610072002D00770069006E002D0032000000070000006D00610073007400650072000000 4996104200x8000000000000015550Applicationar-win-2.attackrange.localFORCE C:\Program Files\Microsoft SQL Server\MSSQL16.MSSQLSERVER\MSSQL\Binn\Templates\model_replicatedmaster.ldfC:\Program Files\Microsoft SQL Server\MSSQL16.MSSQLSERVER\MSSQL\DATA\model_replicatedmaster.ldf29C300000A00000009000000610072002D00770069006E002D0032000000070000006D00610073007400650072000000 1710804200x8000000000000015549Applicationar-win-2.attackrange.localD44200000A00000009000000610072002D00770069006E002D003200000000000000 1713704200x8000000000000015548Applicationar-win-2.attackrange.localmssqlsystemresourceF14200000A00000009000000610072002D00770069006E002D0032000000070000006D00610073007400650072000000 4996104200x8000000000000015547Applicationar-win-2.attackrange.localFORCE C:\Program Files\Microsoft SQL Server\MSSQL16.MSSQLSERVER\MSSQL\Binn\Templates\model_replicatedmaster.mdfC:\Program Files\Microsoft SQL Server\MSSQL16.MSSQLSERVER\MSSQL\DATA\model_replicatedmaster.mdf29C300000A00000009000000610072002D00770069006E002D0032000000070000006D00610073007400650072000000 95104200x8000000000000015546Applicationar-win-2.attackrange.localmaster956957B70300000A00000009000000610072002D00770069006E002D0032000000070000006D00610073007400650072000000 95104200x8000000000000015545Applicationar-win-2.attackrange.localmaster955956B70300000A00000009000000610072002D00770069006E002D0032000000070000006D00610073007400650072000000 95104200x8000000000000015544Applicationar-win-2.attackrange.localmaster954955B70300000A00000009000000610072002D00770069006E002D0032000000070000006D00610073007400650072000000 95104200x8000000000000015543Applicationar-win-2.attackrange.localmaster953954B70300000A00000009000000610072002D00770069006E002D0032000000070000006D00610073007400650072000000 95104200x8000000000000015542Applicationar-win-2.attackrange.localmaster952953B70300000A00000009000000610072002D00770069006E002D0032000000070000006D00610073007400650072000000 95104200x8000000000000015541Applicationar-win-2.attackrange.localmaster951952B70300000A00000009000000610072002D00770069006E002D0032000000070000006D00610073007400650072000000 95104200x8000000000000015540Applicationar-win-2.attackrange.localmaster950951B70300000A00000009000000610072002D00770069006E002D0032000000070000006D00610073007400650072000000 95104200x8000000000000015539Applicationar-win-2.attackrange.localmaster949950B70300000A00000009000000610072002D00770069006E002D0032000000070000006D00610073007400650072000000 95104200x8000000000000015538Applicationar-win-2.attackrange.localmaster948949B70300000A00000009000000610072002D00770069006E002D0032000000070000006D00610073007400650072000000 95104200x8000000000000015537Applicationar-win-2.attackrange.localmaster947948B70300000A00000009000000610072002D00770069006E002D0032000000070000006D00610073007400650072000000 95104200x8000000000000015536Applicationar-win-2.attackrange.localmaster946947B70300000A00000009000000610072002D00770069006E002D0032000000070000006D00610073007400650072000000 95104200x8000000000000015535Applicationar-win-2.attackrange.localmaster945946B70300000A00000009000000610072002D00770069006E002D0032000000070000006D00610073007400650072000000 95104200x8000000000000015534Applicationar-win-2.attackrange.localmaster944945B70300000A00000009000000610072002D00770069006E002D0032000000070000006D00610073007400650072000000 95104200x8000000000000015533Applicationar-win-2.attackrange.localmaster943944B70300000A00000009000000610072002D00770069006E002D0032000000070000006D00610073007400650072000000 95104200x8000000000000015532Applicationar-win-2.attackrange.localmaster942943B70300000A00000009000000610072002D00770069006E002D0032000000070000006D00610073007400650072000000 95104200x8000000000000015531Applicationar-win-2.attackrange.localmaster941942B70300000A00000009000000610072002D00770069006E002D0032000000070000006D00610073007400650072000000 95104200x8000000000000015530Applicationar-win-2.attackrange.localmaster940941B70300000A00000009000000610072002D00770069006E002D0032000000070000006D00610073007400650072000000 95104200x8000000000000015529Applicationar-win-2.attackrange.localmaster939940B70300000A00000009000000610072002D00770069006E002D0032000000070000006D00610073007400650072000000 95104200x8000000000000015528Applicationar-win-2.attackrange.localmaster938939B70300000A00000009000000610072002D00770069006E002D0032000000070000006D00610073007400650072000000 95104200x8000000000000015527Applicationar-win-2.attackrange.localmaster937938B70300000A00000009000000610072002D00770069006E002D0032000000070000006D00610073007400650072000000 95104200x8000000000000015526Applicationar-win-2.attackrange.localmaster936937B70300000A00000009000000610072002D00770069006E002D0032000000070000006D00610073007400650072000000 95104200x8000000000000015525Applicationar-win-2.attackrange.localmaster935936B70300000A00000009000000610072002D00770069006E002D0032000000070000006D00610073007400650072000000 95104200x8000000000000015524Applicationar-win-2.attackrange.localmaster934935B70300000A00000009000000610072002D00770069006E002D0032000000070000006D00610073007400650072000000 95104200x8000000000000015523Applicationar-win-2.attackrange.localmaster933934B70300000A00000009000000610072002D00770069006E002D0032000000070000006D00610073007400650072000000 95104200x8000000000000015522Applicationar-win-2.attackrange.localmaster932933B70300000A00000009000000610072002D00770069006E002D0032000000070000006D00610073007400650072000000 95104200x8000000000000015521Applicationar-win-2.attackrange.localmaster931932B70300000A00000009000000610072002D00770069006E002D0032000000070000006D00610073007400650072000000 95104200x8000000000000015520Applicationar-win-2.attackrange.localmaster930931B70300000A00000009000000610072002D00770069006E002D0032000000070000006D00610073007400650072000000 95104200x8000000000000015519Applicationar-win-2.attackrange.localmaster929930B70300000A00000009000000610072002D00770069006E002D0032000000070000006D00610073007400650072000000 95104200x8000000000000015518Applicationar-win-2.attackrange.localmaster928929B70300000A00000009000000610072002D00770069006E002D0032000000070000006D00610073007400650072000000 625304200x8000000000000015517Applicationar-win-2.attackrange.localv4.0.30319C:\Windows\Microsoft.NET\Framework64\v4.0.30319\6D1800000A00000009000000610072002D00770069006E002D003200000000000000 95104200x8000000000000015516Applicationar-win-2.attackrange.localmaster927928B70300000A00000009000000610072002D00770069006E002D0032000000070000006D00610073007400650072000000 94404200x8000000000000015515Applicationar-win-2.attackrange.localmaster927957B00300000A00000009000000610072002D00770069006E002D0032000000070000006D00610073007400650072000000 901304200x8000000000000015514Applicationar-win-2.attackrange.localmaster40963072390144C:\Program Files\Microsoft SQL Server\MSSQL16.MSSQLSERVER\MSSQL\DATA\mastlog.ldf352300000A00000009000000610072002D00770069006E002D003200000000000000 1713704200x8000000000000015513Applicationar-win-2.attackrange.localmasterF14200000A00000009000000610072002D00770069006E002D003200000000000000 1765804200x8000000000000015512Applicationar-win-2.attackrange.localFA4400000A00000009000000610072002D00770069006E002D003200000000000000 1765604200x8000000000000015511Applicationar-win-2.attackrange.localF84400000A00000009000000610072002D00770069006E002D003200000000000000 904804200x8000000000000015510Applicationar-win-2.attackrange.localclwb582300000A00000009000000610072002D00770069006E002D003200000000000000 148604200x8000000000000015509Applicationar-win-2.attackrange.localCE0500000A00000009000000610072002D00770069006E002D003200000000000000 1711804200x8000000000000015508Applicationar-win-2.attackrange.localenabledDE4200000A00000009000000610072002D00770069006E002D003200000000000000 1712504200x8000000000000015507Applicationar-win-2.attackrange.local25005000E54200000A00000009000000610072002D00770069006E002D003200000000000000 1715204200x8000000000000015506Applicationar-win-2.attackrange.local000000000000000ff000000000000000ff0004300000A00000009000000610072002D00770069006E002D003200000000000000 1781104200x8000000000000015505Applicationar-win-2.attackrange.local1934500000A00000009000000610072002D00770069006E002D003200000000000000 1710704200x8000000000000015504Applicationar-win-2.attackrange.localD34200000A00000009000000610072002D00770069006E002D003200000000000000 1726404200x8000000000000015503Applicationar-win-2.attackrange.localSSE SSE2 SSE3 SSSE3 SSE41 SSE42 AVX AVX2 POPCNT BMI1 BMI2 AVX512 (F CD BW DQ VL)704300000A00000009000000610072002D00770069006E002D003200000000000000 87304200x8000000000000015502Applicationar-win-2.attackrange.local690300000A00000009000000610072002D00770069006E002D003200000000000000 4991704200x8000000000000015501Applicationar-win-2.attackrange.localSQL_Latin1_General_CP1_CI_ASus_english1033FDC200000A00000009000000610072002D00770069006E002D003200000000000000 89404200x8000000000000015500Applicationar-win-2.attackrange.local838860851128837E0300000A00000009000000610072002D00770069006E002D003200000000000000 85204200x8000000000000015499Applicationar-win-2.attackrange.local540300000A00000009000000610072002D00770069006E002D003200000000000000 4990304200x8000000000000015498Applicationar-win-2.attackrange.local31955EFC200000A00000009000000610072002D00770069006E002D003200000000000000 1716204200x8000000000000015497Applicationar-win-2.attackrange.local0A4300000A00000009000000610072002D00770069006E002D003200000000000000 1716404200x8000000000000015496Applicationar-win-2.attackrange.local148880C4300000A00000009000000610072002D00770069006E002D003200000000000000 1711504200x8000000000000015495Applicationar-win-2.attackrange.local -s "MSSQLSERVER" -m "SqlSetup" -Q -q "SQL_Latin1_General_CP1_CI_AS" -T 4022 -T 4010 -T 3659 -T 3610 -T 8015DB4200000A00000009000000610072002D00770069006E002D003200000000000000 1711004200x8000000000000015494Applicationar-win-2.attackrange.local -d C:\Program Files\Microsoft SQL Server\MSSQL16.MSSQLSERVER\MSSQL\DATA\master.mdf -e C:\Program Files\Microsoft SQL Server\MSSQL16.MSSQLSERVER\MSSQL\Log\ERRORLOG -l C:\Program Files\Microsoft SQL Server\MSSQL16.MSSQLSERVER\MSSQL\DATA\mastlog.ldfD64200000A00000009000000610072002D00770069006E002D003200000000000000 4990404200x8000000000000015493Applicationar-win-2.attackrange.localNT Service\MSSQLSERVERF0C200000A00000009000000610072002D00770069006E002D003200000000000000 1711104200x8000000000000015492Applicationar-win-2.attackrange.localC:\Program Files\Microsoft SQL Server\MSSQL16.MSSQLSERVER\MSSQL\Log\ERRORLOGD74200000A00000009000000610072002D00770069006E002D003200000000000000 1526804200x8000000000000015491Applicationar-win-2.attackrange.localMIXEDA43B00000A00000009000000610072002D00770069006E002D003200000000000000 1849604200x8000000000000015490Applicationar-win-2.attackrange.localAmazon EC2m5.2xlarge404800000A00000009000000610072002D00770069006E002D003200000000000000 1710404200x8000000000000015489Applicationar-win-2.attackrange.local5792D04200000A00000009000000610072002D00770069006E002D003200000000000000 1710304200x8000000000000015488Applicationar-win-2.attackrange.localCF4200000A00000009000000610072002D00770069006E002D003200000000000000 1710104200x8000000000000015487Applicationar-win-2.attackrange.localCD4200000A00000009000000610072002D00770069006E002D003200000000000000 4991604200x8000000000000015486Applicationar-win-2.attackrange.local000FCC200000A00000009000000610072002D00770069006E002D003200000000000000 1706904200x8000000000000015485Applicationar-win-2.attackrange.localMicrosoft SQL Server 2022 (RTM) - 16.0.1000.6 (X64) Oct 8 2022 05:58:25 Copyright (C) 2022 Microsoft Corporation Developer Edition (64-bit) on Windows Server 2022 Datacenter 10.0 <X64> (Build 20348: ) (Hypervisor) AD4200000A00000009000000610072002D00770069006E002D003200000000000000 504000x8000000000000015484Applicationar-win-2.attackrange.localNT SERVICE\MSSQLSERVER 100004000x800000000000000015483Applicationar-win-2.attackrange.localSQLSERVERAGENTSQL Server Agent (MSSQLSERVER)1606430000324300000743000033430000 100004000x800000000000000015482Applicationar-win-2.attackrange.localMSSQLSERVERSQL Server (MSSQLSERVER)16F23C000004430000F33C000005430000 6323000x800000000000000015481Applicationar-win-2.attackrange.localSQLServerEventProviderroot\Microsoft\SqlServer\ServerEvents\MSSQLSERVER 6323000x800000000000000015480Applicationar-win-2.attackrange.localSQLServerEventProviderroot\Microsoft\SqlServer\ServerEvents\MSSQLSERVER 100004000x800000000000000015479Applicationar-win-2.attackrange.local{cffbe088-55d3-41ce-9fbf-e887d5ff10ab}SQL Server 2022 XTP Database Engine0 1000104000x800000000000000015478Applicationar-win-2.attackrange.local02025-02-04T19:40:27.6906576Z 104204000x8000000000000015476Applicationar-win-2.attackrange.localC:\SQL2022\Developer_ENU\1033_ENU_LP\x64\setup\sql_engine_core_inst_loc.msi1480(NULL)(NULL)(NULL)(NULL) 103304000x8000000000000015475Applicationar-win-2.attackrange.localSQL Server 2022 Database Engine Services16.0.1000.610330Microsoft Corporation(NULL)7B43344346313637432D343733392D344133412D384437352D3539433943354631333543417D3030303036653636353763366436633632623162663635666130666233303535656430383030303030393034 1170704000x8000000000000015474Applicationar-win-2.attackrange.localProduct: SQL Server 2022 Database Engine Services -- Installation completed successfully.(NULL)(NULL)(NULL)(NULL)(NULL)7B43344346313637432D343733392D344133412D384437352D3539433943354631333543417D 1000004000x800000000000000015477Applicationar-win-2.attackrange.local02025-02-04T19:40:27.6906576Z 1172404000x8000000000000015473Applicationar-win-2.attackrange.localProduct: SQL Server 2022 Database Engine Services -- Install started. 104004000x8000000000000015472Applicationar-win-2.attackrange.localC:\SQL2022\Developer_ENU\1033_ENU_LP\x64\setup\sql_engine_core_inst_loc.msi1480(NULL)(NULL)(NULL)(NULL) 1000104000x800000000000000015471Applicationar-win-2.attackrange.local02025-02-04T19:40:20.8002065Z 104204000x8000000000000015470Applicationar-win-2.attackrange.localC:\SQL2022\Developer_ENU\x64\setup\sql_engine_core_inst.msi1480(NULL)(NULL)(NULL)(NULL) 103304000x8000000000000015469Applicationar-win-2.attackrange.localSQL Server 2022 Database Engine Services16.0.1000.610330Microsoft Corporation(NULL)7B36363231433736352D353639432D344434362D413845392D4336394134373937313335377D3030303036653636353763366436633632623162663635666130666233303535656430383030303030393034 1170704000x8000000000000015468Applicationar-win-2.attackrange.localProduct: SQL Server 2022 Database Engine Services -- Installation completed successfully.(NULL)(NULL)(NULL)(NULL)(NULL)7B36363231433736352D353639432D344434362D413845392D4336394134373937313335377D 1000004000x800000000000000015467Applicationar-win-2.attackrange.local02025-02-04T19:40:20.8002065Z 1172404000x8000000000000015466Applicationar-win-2.attackrange.localProduct: SQL Server 2022 Database Engine Services -- Install started. 104004000x8000000000000015463Applicationar-win-2.attackrange.localC:\SQL2022\Developer_ENU\x64\setup\sql_engine_core_inst.msi1480(NULL)(NULL)(NULL)(NULL) 1000104000x800000000000000015465Applicationar-win-2.attackrange.local02025-02-04T19:40:19.2533408Z 1000004000x800000000000000015464Applicationar-win-2.attackrange.local02025-02-04T19:40:19.2533408Z 104204000x8000000000000015462Applicationar-win-2.attackrange.localC:\SQL2022\Developer_ENU\x64\setup\RsFx.msi1480(NULL)(NULL)(NULL)(NULL) 103304000x8000000000000015461Applicationar-win-2.attackrange.localMicrosoft SQL Server 2022 RsFx Driver16.0.1000.610330Microsoft Corporation(NULL)7B36323943384643392D333736332D344335382D383236342D3532383841453334414645467D3030303031323633316533643764356262616262383636376463363664646636396231653030303030393034 1170704000x8000000000000015460Applicationar-win-2.attackrange.localProduct: Microsoft SQL Server 2022 RsFx Driver -- Installation completed successfully.(NULL)(NULL)(NULL)(NULL)(NULL)7B36323943384643392D333736332D344335382D383236342D3532383841453334414645467D 104004000x8000000000000015459Applicationar-win-2.attackrange.localC:\SQL2022\Developer_ENU\x64\setup\RsFx.msi1480(NULL)(NULL)(NULL)(NULL) 1000104000x800000000000000015458Applicationar-win-2.attackrange.local02025-02-04T19:40:18.3158523Z 1000004000x800000000000000015457Applicationar-win-2.attackrange.local02025-02-04T19:40:18.3158523Z 1000104000x800000000000000015456Applicationar-win-2.attackrange.local02025-02-04T19:40:16.3780938Z 104204000x8000000000000015455Applicationar-win-2.attackrange.localC:\SQL2022\Developer_ENU\1033_ENU_LP\x64\setup\sqlbrowser.msi1480(NULL)(NULL)(NULL)(NULL) 103304000x8000000000000015454Applicationar-win-2.attackrange.localBrowser for SQL Server 202216.0.1000.610330Microsoft Corporation(NULL)7B46444233353744352D434337382D343830412D384432362D4331354431413837373634327D3030303061333861323436656539653465313966383735383365616532623766623265333030303030393034 1170704000x8000000000000015453Applicationar-win-2.attackrange.localProduct: Browser for SQL Server 2022 -- Installation completed successfully.(NULL)(NULL)(NULL)(NULL)(NULL)7B46444233353744352D434337382D343830412D384432362D4331354431413837373634327D 104004000x8000000000000015452Applicationar-win-2.attackrange.localC:\SQL2022\Developer_ENU\1033_ENU_LP\x64\setup\sqlbrowser.msi1480(NULL)(NULL)(NULL)(NULL) 104204000x8000000000000015451Applicationar-win-2.attackrange.localC:\SQL2022\Developer_ENU\1033_ENU_LP\x64\setup\x64\SqlWriter.msi1480(NULL)(NULL)(NULL)(NULL) 103304000x8000000000000015450Applicationar-win-2.attackrange.localMicrosoft VSS Writer for SQL Server 202216.0.1000.610330Microsoft Corporation(NULL)7B41423544383737382D383146332D343745322D383741342D3335453737364344363634427D3030303034363562396561663134316630636662613730626565613465643962366432393030303030393034 1170704000x8000000000000015449Applicationar-win-2.attackrange.localProduct: Microsoft VSS Writer for SQL Server 2022 -- Installation completed successfully.(NULL)(NULL)(NULL)(NULL)(NULL)7B41423544383737382D383146332D343745322D383741342D3335453737364344363634427D 1000004000x800000000000000015448Applicationar-win-2.attackrange.local02025-02-04T19:40:16.3780938Z 104004000x8000000000000015446Applicationar-win-2.attackrange.localC:\SQL2022\Developer_ENU\1033_ENU_LP\x64\setup\x64\SqlWriter.msi1480(NULL)(NULL)(NULL)(NULL) 1000104000x800000000000000015447Applicationar-win-2.attackrange.local02025-02-04T19:40:15.4478766Z 104204000x8000000000000015445Applicationar-win-2.attackrange.localC:\SQL2022\Developer_ENU\1033_ENU_LP\x64\setup\x64\msodbcsql.msi1480(NULL)(NULL)(NULL)(NULL) 103304000x8000000000000015444Applicationar-win-2.attackrange.localMicrosoft ODBC Driver 17 for SQL Server17.4.1.110330Microsoft Corporation(NULL)7B37324146414632312D333346422D343541352D393436382D4139454330373432374638327D3030303036366566666164653362366164343138356161656236353633343633353937653030303030393034 1170704000x8000000000000015443Applicationar-win-2.attackrange.localProduct: Microsoft ODBC Driver 17 for SQL Server -- Installation completed successfully.(NULL)(NULL)(NULL)(NULL)(NULL)7B37324146414632312D333346422D343541352D393436382D4139454330373432374638327D 1000004000x800000000000000015442Applicationar-win-2.attackrange.local02025-02-04T19:40:15.4478766Z 1000104000x800000000000000015441Applicationar-win-2.attackrange.local02025-02-04T19:40:14.1786702Z 104004000x8000000000000015440Applicationar-win-2.attackrange.localC:\SQL2022\Developer_ENU\1033_ENU_LP\x64\setup\x64\msodbcsql.msi1480(NULL)(NULL)(NULL)(NULL) 104204000x8000000000000015439Applicationar-win-2.attackrange.localC:\SQL2022\Developer_ENU\1033_ENU_LP\x64\setup\sql_engine_core_shared_loc.msi1480(NULL)(NULL)(NULL)(NULL) 103304000x8000000000000015438Applicationar-win-2.attackrange.localSQL Server 2022 Database Engine Shared16.0.1000.610330Microsoft Corporation(NULL)7B31363142384431322D433431422D344143462D394242352D4531464545363738383836397D3030303062343565326364303565396665663933376538656664373533633136303933633030303030393034 1170704000x8000000000000015437Applicationar-win-2.attackrange.localProduct: SQL Server 2022 Database Engine Shared -- Installation completed successfully.(NULL)(NULL)(NULL)(NULL)(NULL)7B31363142384431322D433431422D344143462D394242352D4531464545363738383836397D 1000004000x800000000000000015436Applicationar-win-2.attackrange.local02025-02-04T19:40:14.1786702Z 1172404000x8000000000000015434Applicationar-win-2.attackrange.localProduct: SQL Server 2022 Database Engine Shared -- Install started. 104004000x8000000000000015433Applicationar-win-2.attackrange.localC:\SQL2022\Developer_ENU\1033_ENU_LP\x64\setup\sql_engine_core_shared_loc.msi1480(NULL)(NULL)(NULL)(NULL) 1000104000x800000000000000015435Applicationar-win-2.attackrange.local02025-02-04T19:40:13.2010214Z 104204000x8000000000000015432Applicationar-win-2.attackrange.localC:\SQL2022\Developer_ENU\1033_ENU_LP\x64\setup\sql_common_core_loc.msi1480(NULL)(NULL)(NULL)(NULL) 103304000x8000000000000015431Applicationar-win-2.attackrange.localSQL Server 2022 Common Files16.0.1000.610330Microsoft Corporation(NULL)7B38373730414636342D424234422D343430342D424444362D3641463845344334363146437D3030303033636630356635363236616561343239356533663731376237306464613931383030303030393034 1170704000x8000000000000015430Applicationar-win-2.attackrange.localProduct: SQL Server 2022 Common Files -- Installation completed successfully.(NULL)(NULL)(NULL)(NULL)(NULL)7B38373730414636342D424234422D343430342D424444362D3641463845344334363146437D 1000004000x800000000000000015429Applicationar-win-2.attackrange.local02025-02-04T19:40:13.2010214Z 1172404000x8000000000000015427Applicationar-win-2.attackrange.localProduct: SQL Server 2022 Common Files -- Install started. 104004000x8000000000000015426Applicationar-win-2.attackrange.localC:\SQL2022\Developer_ENU\1033_ENU_LP\x64\setup\sql_common_core_loc.msi1480(NULL)(NULL)(NULL)(NULL) 1000104000x800000000000000015428Applicationar-win-2.attackrange.local02025-02-04T19:39:54.5343207Z 104204000x8000000000000015425Applicationar-win-2.attackrange.localC:\SQL2022\Developer_ENU\x64\setup\sql_engine_core_shared.msi1480(NULL)(NULL)(NULL)(NULL) 103304000x8000000000000015424Applicationar-win-2.attackrange.localSQL Server 2022 Database Engine Shared16.0.1000.610330Microsoft Corporation(NULL)7B44364538323135382D303542392D344131382D413632342D4541313335424337373736367D3030303062343565326364303565396665663933376538656664373533633136303933633030303030393034 1170704000x8000000000000015423Applicationar-win-2.attackrange.localProduct: SQL Server 2022 Database Engine Shared -- Installation completed successfully.(NULL)(NULL)(NULL)(NULL)(NULL)7B44364538323135382D303542392D344131382D413632342D4541313335424337373736367D 1000004000x800000000000000015422Applicationar-win-2.attackrange.local02025-02-04T19:39:54.5343207Z 1172404000x8000000000000015421Applicationar-win-2.attackrange.localProduct: SQL Server 2022 Database Engine Shared -- Install started. 104004000x8000000000000015419Applicationar-win-2.attackrange.localC:\SQL2022\Developer_ENU\x64\setup\sql_engine_core_shared.msi1480(NULL)(NULL)(NULL)(NULL) 1000104000x800000000000000015420Applicationar-win-2.attackrange.local02025-02-04T19:39:49.6120496Z 104204000x8000000000000015418Applicationar-win-2.attackrange.localC:\SQL2022\Developer_ENU\x64\setup\sql_common_core.msi1480(NULL)(NULL)(NULL)(NULL) 103304000x8000000000000015417Applicationar-win-2.attackrange.localSQL Server 2022 Common Files16.0.1000.610330Microsoft Corporation(NULL)7B36413638443332432D344330442D343834372D423730432D3538453642344437364131327D3030303033636630356635363236616561343239356533663731376237306464613931383030303030393034 1170704000x8000000000000015416Applicationar-win-2.attackrange.localProduct: SQL Server 2022 Common Files -- Installation completed successfully.(NULL)(NULL)(NULL)(NULL)(NULL)7B36413638443332432D344330442D343834372D423730432D3538453642344437364131327D 1000004000x800000000000000015415Applicationar-win-2.attackrange.local02025-02-04T19:39:49.6120496Z 1000104000x800000000000000015414Applicationar-win-2.attackrange.local02025-02-04T19:39:48.7553665Z 1172404000x8000000000000015413Applicationar-win-2.attackrange.localProduct: SQL Server 2022 Common Files -- Install started. 104004000x8000000000000015412Applicationar-win-2.attackrange.localC:\SQL2022\Developer_ENU\x64\setup\sql_common_core.msi1480(NULL)(NULL)(NULL)(NULL) 104204000x8000000000000015411Applicationar-win-2.attackrange.localC:\SQL2022\Developer_ENU\1033_ENU_LP\x64\setup\smo_loc.msi1480(NULL)(NULL)(NULL)(NULL) 103304000x8000000000000015410Applicationar-win-2.attackrange.localSQL Server 2022 Shared Management Objects16.0.1000.610330Microsoft Corporation(NULL)7B31323631383133312D414139412D344441452D393338372D4345343431373935354239467D3030303039366165663966336636613639313063636163303631363735376361313233343030303030393034 1170704000x8000000000000015409Applicationar-win-2.attackrange.localProduct: SQL Server 2022 Shared Management Objects -- Installation completed successfully.(NULL)(NULL)(NULL)(NULL)(NULL)7B31323631383133312D414139412D344441452D393338372D4345343431373935354239467D 1000004000x800000000000000015408Applicationar-win-2.attackrange.local02025-02-04T19:39:48.7553665Z 1000104000x800000000000000015407Applicationar-win-2.attackrange.local02025-02-04T19:39:47.8776107Z 1172404000x8000000000000015406Applicationar-win-2.attackrange.localProduct: SQL Server 2022 Shared Management Objects -- Install started. 104004000x8000000000000015405Applicationar-win-2.attackrange.localC:\SQL2022\Developer_ENU\1033_ENU_LP\x64\setup\smo_loc.msi1480(NULL)(NULL)(NULL)(NULL) 104204000x8000000000000015404Applicationar-win-2.attackrange.localC:\SQL2022\Developer_ENU\1033_ENU_LP\x64\setup\smo_extensions_loc.msi1480(NULL)(NULL)(NULL)(NULL) 103304000x8000000000000015403Applicationar-win-2.attackrange.localSQL Server 2022 Shared Management Objects Extensions16.0.1000.610330Microsoft Corporation(NULL)7B33354543363134352D453333332D343244422D424342332D3338304446363134304331317D3030303062333964363030346466393666356138383331363065633861643434306432663030303030393034 1170704000x8000000000000015402Applicationar-win-2.attackrange.localProduct: SQL Server 2022 Shared Management Objects Extensions -- Installation completed successfully.(NULL)(NULL)(NULL)(NULL)(NULL)7B33354543363134352D453333332D343244422D424342332D3338304446363134304331317D 1172404000x8000000000000015401Applicationar-win-2.attackrange.localProduct: SQL Server 2022 Shared Management Objects Extensions -- Install started. 1000004000x800000000000000015400Applicationar-win-2.attackrange.local02025-02-04T19:39:47.8776107Z 1000104000x800000000000000015399Applicationar-win-2.attackrange.local02025-02-04T19:39:47.0707110Z 1000004000x800000000000000015398Applicationar-win-2.attackrange.local02025-02-04T19:39:47.0707110Z 104004000x8000000000000015397Applicationar-win-2.attackrange.localC:\SQL2022\Developer_ENU\1033_ENU_LP\x64\setup\smo_extensions_loc.msi1480(NULL)(NULL)(NULL)(NULL) 104204000x8000000000000015396Applicationar-win-2.attackrange.localC:\SQL2022\Developer_ENU\1033_ENU_LP\x64\setup\sql_xevent_loc.msi1480(NULL)(NULL)(NULL)(NULL) 103304000x8000000000000015395Applicationar-win-2.attackrange.localSQL Server 2022 XEvent16.0.1000.610330Microsoft Corporation(NULL)7B39344145423041302D333635432D343439422D423537332D4432454342333533454230367D3030303033613965646132663536643730356636343964643066393036666165326330303030303030393034 1170704000x8000000000000015394Applicationar-win-2.attackrange.localProduct: SQL Server 2022 XEvent -- Installation completed successfully.(NULL)(NULL)(NULL)(NULL)(NULL)7B39344145423041302D333635432D343439422D423537332D4432454342333533454230367D 1172404000x8000000000000015393Applicationar-win-2.attackrange.localProduct: SQL Server 2022 XEvent -- Install started. 104004000x8000000000000015392Applicationar-win-2.attackrange.localC:\SQL2022\Developer_ENU\1033_ENU_LP\x64\setup\sql_xevent_loc.msi1480(NULL)(NULL)(NULL)(NULL) 1000104000x800000000000000015391Applicationar-win-2.attackrange.local02025-02-04T19:39:45.4088829Z 104204000x8000000000000015390Applicationar-win-2.attackrange.localC:\SQL2022\Developer_ENU\x64\setup\smo.msi1480(NULL)(NULL)(NULL)(NULL) 103304000x8000000000000015389Applicationar-win-2.attackrange.localSQL Server 2022 Shared Management Objects16.0.1000.610330Microsoft Corporation(NULL)7B36463832343241412D314232352D343231432D384534352D4643353937384439414133417D3030303039366165663966336636613639313063636163303631363735376361313233343030303030393034 1170704000x8000000000000015388Applicationar-win-2.attackrange.localProduct: SQL Server 2022 Shared Management Objects -- Installation completed successfully.(NULL)(NULL)(NULL)(NULL)(NULL)7B36463832343241412D314232352D343231432D384534352D4643353937384439414133417D 1000004000x800000000000000015387Applicationar-win-2.attackrange.local02025-02-04T19:39:45.4088829Z 1000104000x800000000000000015386Applicationar-win-2.attackrange.local02025-02-04T19:39:41.1903712Z 1172404000x8000000000000015385Applicationar-win-2.attackrange.localProduct: SQL Server 2022 Shared Management Objects -- Install started. 104004000x8000000000000015384Applicationar-win-2.attackrange.localC:\SQL2022\Developer_ENU\x64\setup\smo.msi1480(NULL)(NULL)(NULL)(NULL) 104204000x8000000000000015383Applicationar-win-2.attackrange.localC:\SQL2022\Developer_ENU\x64\setup\smo_extensions.msi1480(NULL)(NULL)(NULL)(NULL) 103304000x8000000000000015382Applicationar-win-2.attackrange.localSQL Server 2022 Shared Management Objects Extensions16.0.1000.610330Microsoft Corporation(NULL)7B41304637414342412D303735462D344243372D413835412D3544433330314643454337347D3030303062333964363030346466393666356138383331363065633861643434306432663030303030393034 1170704000x8000000000000015381Applicationar-win-2.attackrange.localProduct: SQL Server 2022 Shared Management Objects Extensions -- Installation completed successfully.(NULL)(NULL)(NULL)(NULL)(NULL)7B41304637414342412D303735462D344243372D413835412D3544433330314643454337347D 1000004000x800000000000000015380Applicationar-win-2.attackrange.local02025-02-04T19:39:41.1903712Z 1172404000x8000000000000015378Applicationar-win-2.attackrange.localProduct: SQL Server 2022 Shared Management Objects Extensions -- Install started. 104004000x8000000000000015377Applicationar-win-2.attackrange.localC:\SQL2022\Developer_ENU\x64\setup\smo_extensions.msi1480(NULL)(NULL)(NULL)(NULL) 1000104000x800000000000000015379Applicationar-win-2.attackrange.local02025-02-04T19:39:40.0790016Z 104204000x8000000000000015376Applicationar-win-2.attackrange.localC:\SQL2022\Developer_ENU\x64\setup\sql_xevent.msi1480(NULL)(NULL)(NULL)(NULL) 103304000x8000000000000015375Applicationar-win-2.attackrange.localSQL Server 2022 XEvent16.0.1000.610330Microsoft Corporation(NULL)7B42443842373333392D373535392D344643332D393545362D3236343332344434353233357D3030303033613965646132663536643730356636343964643066393036666165326330303030303030393034 1170704000x8000000000000015374Applicationar-win-2.attackrange.localProduct: SQL Server 2022 XEvent -- Installation completed successfully.(NULL)(NULL)(NULL)(NULL)(NULL)7B42443842373333392D373535392D344643332D393545362D3236343332344434353233357D 1000004000x800000000000000015373Applicationar-win-2.attackrange.local02025-02-04T19:39:40.0790016Z 1172404000x8000000000000015371Applicationar-win-2.attackrange.localProduct: SQL Server 2022 XEvent -- Install started. 104004000x8000000000000015370Applicationar-win-2.attackrange.localC:\SQL2022\Developer_ENU\x64\setup\sql_xevent.msi1480(NULL)(NULL)(NULL)(NULL) 1000104000x800000000000000015372Applicationar-win-2.attackrange.local02025-02-04T19:39:38.2498940Z 1638404000x8000000000000015369Applicationar-win-2.attackrange.local2025-02-05T16:34:39ZRulesEngine 104204000x8000000000000015368Applicationar-win-2.attackrange.localC:\SQL2022\Developer_ENU\1033_ENU_LP\x64\setup\SqlSupport.msi1480(NULL)(NULL)(NULL)(NULL) 103304000x8000000000000015367Applicationar-win-2.attackrange.localMicrosoft SQL Server 2022 Setup (English)16.0.1000.610330Microsoft Corporation(NULL)7B42463444384334422D443933312D344436322D413745442D3841333442324643304431427D3030303031613733653936633661366364323635666539333331396330616564643031363030303030393034 1170704000x8000000000000015366Applicationar-win-2.attackrange.localProduct: Microsoft SQL Server 2022 Setup (English) -- Installation completed successfully.(NULL)(NULL)(NULL)(NULL)(NULL)7B42463444384334422D443933312D344436322D413745442D3841333442324643304431427D 1000004000x800000000000000015365Applicationar-win-2.attackrange.local02025-02-04T19:39:38.2498940Z 104004000x8000000000000015362Applicationar-win-2.attackrange.localC:\SQL2022\Developer_ENU\1033_ENU_LP\x64\setup\SqlSupport.msi1480(NULL)(NULL)(NULL)(NULL) 1000104000x800000000000000015364Applicationar-win-2.attackrange.local02025-02-04T19:39:37.3151530Z 1000004000x800000000000000015363Applicationar-win-2.attackrange.local02025-02-04T19:39:37.3151530Z 104204000x8000000000000015361Applicationar-win-2.attackrange.localC:\SQL2022\Developer_ENU\1033_ENU_LP\x64\setup\sql_dmf_loc.msi1480(NULL)(NULL)(NULL)(NULL) 103304000x8000000000000015360Applicationar-win-2.attackrange.localSQL Server 2022 DMF16.0.1000.610330Microsoft Corporation(NULL)7B44434130433244362D383342462D343141452D423141422D4334313831303032444534307D3030303032333637393532373435643666633033323266353738646230633465646266623030303030393034 1170704000x8000000000000015359Applicationar-win-2.attackrange.localProduct: SQL Server 2022 DMF -- Installation completed successfully.(NULL)(NULL)(NULL)(NULL)(NULL)7B44434130433244362D383342462D343141452D423141422D4334313831303032444534307D 1172404000x8000000000000015358Applicationar-win-2.attackrange.localProduct: SQL Server 2022 DMF -- Install started. 104004000x8000000000000015357Applicationar-win-2.attackrange.localC:\SQL2022\Developer_ENU\1033_ENU_LP\x64\setup\sql_dmf_loc.msi1480(NULL)(NULL)(NULL)(NULL) 1000104000x800000000000000015356Applicationar-win-2.attackrange.local02025-02-04T19:39:36.0661019Z 104204000x8000000000000015355Applicationar-win-2.attackrange.localC:\SQL2022\Developer_ENU\x64\setup\sql_dmf.msi1480(NULL)(NULL)(NULL)(NULL) 103304000x8000000000000015354Applicationar-win-2.attackrange.localSQL Server 2022 DMF16.0.1000.610330Microsoft Corporation(NULL)7B35414237374434452D394535462D343632372D423738422D3132394135454332383538417D3030303032333637393532373435643666633033323266353738646230633465646266623030303030393034 1170704000x8000000000000015353Applicationar-win-2.attackrange.localProduct: SQL Server 2022 DMF -- Installation completed successfully.(NULL)(NULL)(NULL)(NULL)(NULL)7B35414237374434452D394535462D343632372D423738422D3132394135454332383538417D 1172404000x8000000000000015352Applicationar-win-2.attackrange.localProduct: SQL Server 2022 DMF -- Install started. 1000004000x800000000000000015351Applicationar-win-2.attackrange.local02025-02-04T19:39:36.0661019Z 104004000x8000000000000015349Applicationar-win-2.attackrange.localC:\SQL2022\Developer_ENU\x64\setup\sql_dmf.msi1480(NULL)(NULL)(NULL)(NULL) 1000104000x800000000000000015350Applicationar-win-2.attackrange.local02025-02-04T19:39:34.6275275Z 104204000x8000000000000015348Applicationar-win-2.attackrange.localC:\SQL2022\Developer_ENU\x64\setup\sql_diag.msi1480(NULL)(NULL)(NULL)(NULL) 103304000x8000000000000015347Applicationar-win-2.attackrange.localSQL Server 2022 SQL Diagnostics16.0.1000.610330Microsoft Corporation(NULL)7B30434546453935382D453731412D343137312D394445462D3737453932333441353631337D3030303061313063633139363564303832333135363063363634326666346664333430653030303030393034 1170704000x8000000000000015346Applicationar-win-2.attackrange.localProduct: SQL Server 2022 SQL Diagnostics -- Installation completed successfully.(NULL)(NULL)(NULL)(NULL)(NULL)7B30434546453935382D453731412D343137312D394445462D3737453932333441353631337D 1000004000x800000000000000015345Applicationar-win-2.attackrange.local02025-02-04T19:39:34.6275275Z 1000104000x800000000000000015344Applicationar-win-2.attackrange.local02025-02-04T19:39:33.2839170Z 1172404000x8000000000000015343Applicationar-win-2.attackrange.localProduct: SQL Server 2022 SQL Diagnostics -- Install started. 104004000x8000000000000015342Applicationar-win-2.attackrange.localC:\SQL2022\Developer_ENU\x64\setup\sql_diag.msi1480(NULL)(NULL)(NULL)(NULL) 104204000x8000000000000015341Applicationar-win-2.attackrange.localC:\SQL2022\Developer_ENU\x64\setup\sql_batchparser.msi1480(NULL)(NULL)(NULL)(NULL) 103304000x8000000000000015340Applicationar-win-2.attackrange.localSQL Server 2022 Batch Parser16.0.1000.610330Microsoft Corporation(NULL)7B37454644384231392D413945362D343143462D413936462D4239423645333045433334357D3030303035356135376631646534633837393835323733356230663131333534363331613030303030393034 1170704000x8000000000000015339Applicationar-win-2.attackrange.localProduct: SQL Server 2022 Batch Parser -- Installation completed successfully.(NULL)(NULL)(NULL)(NULL)(NULL)7B37454644384231392D413945362D343143462D413936462D4239423645333045433334357D 1000004000x800000000000000015338Applicationar-win-2.attackrange.local02025-02-04T19:39:33.2839170Z 1000104000x800000000000000015337Applicationar-win-2.attackrange.local02025-02-04T19:39:32.4457784Z 1172404000x8000000000000015336Applicationar-win-2.attackrange.localProduct: SQL Server 2022 Batch Parser -- Install started. 104004000x8000000000000015335Applicationar-win-2.attackrange.localC:\SQL2022\Developer_ENU\x64\setup\sql_batchparser.msi1480(NULL)(NULL)(NULL)(NULL) 104204000x8000000000000015334Applicationar-win-2.attackrange.localC:\SQL2022\Developer_ENU\1033_ENU_LP\x64\setup\conn_info_loc.msi1480(NULL)(NULL)(NULL)(NULL) 103304000x8000000000000015333Applicationar-win-2.attackrange.localSQL Server 2022 Connection Info16.0.1000.610330Microsoft Corporation(NULL)7B37373044413746322D383137422D344141362D393136302D3038424236353841424443367D3030303038383836643362363261363034343339623165353065383236303636303366663030303030393034 1170704000x8000000000000015332Applicationar-win-2.attackrange.localProduct: SQL Server 2022 Connection Info -- Installation completed successfully.(NULL)(NULL)(NULL)(NULL)(NULL)7B37373044413746322D383137422D344141362D393136302D3038424236353841424443367D 1000004000x800000000000000015331Applicationar-win-2.attackrange.local02025-02-04T19:39:32.4457784Z 1000104000x800000000000000015330Applicationar-win-2.attackrange.local02025-02-04T19:39:30.7996400Z 1172404000x8000000000000015329Applicationar-win-2.attackrange.localProduct: SQL Server 2022 Connection Info -- Install started. 104004000x8000000000000015328Applicationar-win-2.attackrange.localC:\SQL2022\Developer_ENU\1033_ENU_LP\x64\setup\conn_info_loc.msi1480(NULL)(NULL)(NULL)(NULL) 104204000x8000000000000015327Applicationar-win-2.attackrange.localC:\SQL2022\Developer_ENU\x64\setup\conn_info.msi1480(NULL)(NULL)(NULL)(NULL) 103304000x8000000000000015326Applicationar-win-2.attackrange.localSQL Server 2022 Connection Info16.0.1000.610330Microsoft Corporation(NULL)7B45414335344238322D374133372D344139452D383935332D3437343331364244343046367D3030303038383836643362363261363034343339623165353065383236303636303366663030303030393034 1170704000x8000000000000015325Applicationar-win-2.attackrange.localProduct: SQL Server 2022 Connection Info -- Installation completed successfully.(NULL)(NULL)(NULL)(NULL)(NULL)7B45414335344238322D374133372D344139452D383935332D3437343331364244343046367D 1172404000x8000000000000015324Applicationar-win-2.attackrange.localProduct: SQL Server 2022 Connection Info -- Install started. 1000004000x800000000000000015323Applicationar-win-2.attackrange.local02025-02-04T19:39:30.7996400Z 1000104000x800000000000000015322Applicationar-win-2.attackrange.local02025-02-04T19:39:29.3307038Z 104004000x8000000000000015321Applicationar-win-2.attackrange.localC:\SQL2022\Developer_ENU\x64\setup\conn_info.msi1480(NULL)(NULL)(NULL)(NULL) 104204000x8000000000000015320Applicationar-win-2.attackrange.localC:\SQL2022\Developer_ENU\1033_ENU_LP\x64\setup\x64\msoledbsql.msi1480(NULL)(NULL)(NULL)(NULL) 103304000x8000000000000015319Applicationar-win-2.attackrange.localMicrosoft OLE DB Driver for SQL Server18.2.4.010330Microsoft Corporation(NULL)7B37374539453133382D304434432D343935452D424537372D3736314531373937424131367D3030303065613165636365383561353137633036313364626266383063353965323832663030303030393034 1170704000x8000000000000015318Applicationar-win-2.attackrange.localProduct: Microsoft OLE DB Driver for SQL Server -- Installation completed successfully.(NULL)(NULL)(NULL)(NULL)(NULL)7B37374539453133382D304434432D343935452D424537372D3736314531373937424131367D 1000004000x800000000000000015317Applicationar-win-2.attackrange.local02025-02-04T19:39:29.3307038Z 104004000x8000000000000015316Applicationar-win-2.attackrange.localC:\SQL2022\Developer_ENU\1033_ENU_LP\x64\setup\x64\msoledbsql.msi1480(NULL)(NULL)(NULL)(NULL) 1639404000x8000000000000015315Applicationar-win-2.attackrange.local 1638404000x8000000000000015314Applicationar-win-2.attackrange.local2025-02-05T16:35:13ZRulesEngine 902704000x8000000000000015313Applicationar-win-2.attackrange.local 1639404000x8000000000000015312Applicationar-win-2.attackrange.local 1638404000x8000000000000015856Applicationar-win-dc.attackrange.local2025-02-05T16:36:07ZRulesEngine 1639404000x8000000000000015855Applicationar-win-dc.attackrange.local 301404600x8000000000000015854Applicationar-win-dc.attackrange.localBACKUP DATABASE506011833467C60B00000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 1826404600x8000000000000015853Applicationar-win-dc.attackrange.localmaster2025/02/0401:23:56515238:40:1238:64:11FILE=24, TYPE=DISK: {'C:\temp\master.bak'}584700000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 301404600x8000000000000015852Applicationar-win-dc.attackrange.localBACKUP DATABASE506011733754C60B00000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 1826404600x8000000000000015851Applicationar-win-dc.attackrange.localmaster2025/02/0401:23:56515237:416:1237:440:11FILE=23, TYPE=DISK: {'C:\temp\master.bak'}584700000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 301404600x8000000000000015850Applicationar-win-dc.attackrange.localBACKUP DATABASE506011634044C60B00000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 1826404600x8000000000000015849Applicationar-win-dc.attackrange.localmaster2025/02/0401:23:56515237:296:1237:320:11FILE=22, TYPE=DISK: {'C:\temp\master.bak'}584700000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 301404600x8000000000000015848Applicationar-win-dc.attackrange.localBACKUP DATABASE506011833467C60B00000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 1826404600x8000000000000015847Applicationar-win-dc.attackrange.localmaster2025/02/0401:23:56515237:176:1237:200:11FILE=21, TYPE=DISK: {'C:\temp\master.bak'}584700000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 1545704200x8000000000000015846Applicationar-win-dc.attackrange.localshow advanced options10613C00000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 1545704200x8000000000000015845Applicationar-win-dc.attackrange.localxp_cmdshell10613C00000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 1545704200x8000000000000015844Applicationar-win-dc.attackrange.localxp_cmdshell01613C00000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 1545704200x8000000000000015843Applicationar-win-dc.attackrange.localshow advanced options01613C00000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 1545704200x8000000000000015842Applicationar-win-dc.attackrange.localshow advanced options10613C00000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 1545704200x8000000000000015841Applicationar-win-dc.attackrange.localxp_cmdshell10613C00000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 1545704200x8000000000000015840Applicationar-win-dc.attackrange.localxp_cmdshell11613C00000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 1545704200x8000000000000015839Applicationar-win-dc.attackrange.localshow advanced options11613C00000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 1545704200x8000000000000015838Applicationar-win-dc.attackrange.localxp_cmdshell11613C00000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 1545704200x8000000000000015837Applicationar-win-dc.attackrange.localxp_cmdshell01613C00000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 1545704200x8000000000000015836Applicationar-win-dc.attackrange.localshow advanced options11613C00000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 1545704200x8000000000000015835Applicationar-win-dc.attackrange.localshow advanced options01613C00000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 301404600x8000000000000015834Applicationar-win-dc.attackrange.localBACKUP DATABASE506011833467C60B00000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 1826404600x8000000000000015833Applicationar-win-dc.attackrange.localmaster2025/02/0401:23:56515236:416:1236:440:11FILE=20, TYPE=DISK: {'C:\temp\master.bak'}584700000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 301404600x8000000000000015832Applicationar-win-dc.attackrange.localBACKUP DATABASE506011733754C60B00000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 1826404600x8000000000000015831Applicationar-win-dc.attackrange.localmaster2025/02/0401:23:56515236:296:1236:320:11FILE=19, TYPE=DISK: {'C:\temp\master.bak'}584700000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 301404600x8000000000000015830Applicationar-win-dc.attackrange.localBACKUP DATABASE514012133154C60B00000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 1826404600x8000000000000015829Applicationar-win-dc.attackrange.localmaster2025/02/0401:23:56523236:176:4236:200:11FILE=18, TYPE=DISK: {'C:\temp\master.bak'}584700000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 301404600x8000000000000015828Applicationar-win-dc.attackrange.localBACKUP DATABASE506011833467C60B00000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 1826404600x8000000000000015827Applicationar-win-dc.attackrange.localmaster2025/02/0401:23:56515236:56:1236:80:11FILE=17, TYPE=DISK: {'C:\temp\master.bak'}584700000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 1545704200x8000000000000015826Applicationar-win-dc.attackrange.localshow advanced options10613C00000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 1545704200x8000000000000015825Applicationar-win-dc.attackrange.localxp_cmdshell10613C00000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 1545704200x8000000000000015824Applicationar-win-dc.attackrange.localxp_cmdshell01613C00000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 1545704200x8000000000000015823Applicationar-win-dc.attackrange.localshow advanced options01613C00000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 1545704200x8000000000000015822Applicationar-win-dc.attackrange.localshow advanced options10613C00000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 1545704200x8000000000000015821Applicationar-win-dc.attackrange.localxp_cmdshell10613C00000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 1545704200x8000000000000015820Applicationar-win-dc.attackrange.localxp_cmdshell11613C00000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 1545704200x8000000000000015819Applicationar-win-dc.attackrange.localshow advanced options11613C00000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 1545704200x8000000000000015818Applicationar-win-dc.attackrange.localxp_cmdshell11613C00000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 1545704200x8000000000000015817Applicationar-win-dc.attackrange.localxp_cmdshell01613C00000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 1545704200x8000000000000015816Applicationar-win-dc.attackrange.localshow advanced options11613C00000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 1545704200x8000000000000015815Applicationar-win-dc.attackrange.localshow advanced options01613C00000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 1638404000x8000000000000015311Applicationar-win-2.attackrange.local2025-02-05T16:34:36ZRulesEngine 1639404000x8000000000000015310Applicationar-win-2.attackrange.local 2575304200x8000000000000015814Applicationar-win-dc.attackrange.localtelemetry_xevents996400000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 2575404200x8000000000000015813Applicationar-win-dc.attackrange.localtelemetry_xevents9A6400000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 1638404000x8000000000000015309Applicationar-win-2.attackrange.local2025-02-05T16:34:58ZRulesEngine 1639404000x8000000000000015308Applicationar-win-2.attackrange.local 1638404000x8000000000000015812Applicationar-win-dc.attackrange.local2025-02-05T16:36:14ZRulesEngine 1639404000x8000000000000015811Applicationar-win-dc.attackrange.local 1638404000x8000000000000015307Applicationar-win-2.attackrange.local2025-02-05T16:34:36ZRulesEngine 1639404000x8000000000000015306Applicationar-win-2.attackrange.local 2575304200x8000000000000015810Applicationar-win-dc.attackrange.localtelemetry_xevents996400000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 2575404200x8000000000000015809Applicationar-win-dc.attackrange.localtelemetry_xevents9A6400000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 170404000x8000000000000015808Applicationar-win-dc.attackrange.local 1638404000x8000000000000015305Applicationar-win-2.attackrange.local2025-02-05T16:34:42ZRulesEngine 1639404000x8000000000000015304Applicationar-win-2.attackrange.local 1638404000x8000000000000015303Applicationar-win-2.attackrange.local2025-02-05T16:35:00ZRulesEngine 1639404000x8000000000000015302Applicationar-win-2.attackrange.local 1638404000x8000000000000015301Applicationar-win-2.attackrange.local2025-02-05T16:34:57ZRulesEngine 1639404000x8000000000000015300Applicationar-win-2.attackrange.local 2575304200x8000000000000015807Applicationar-win-dc.attackrange.localtelemetry_xevents996400000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 2575404200x8000000000000015806Applicationar-win-dc.attackrange.localtelemetry_xevents9A6400000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 301404600x8000000000000015805Applicationar-win-dc.attackrange.localBACKUP DATABASE506011833467C60B00000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 1826404600x8000000000000015804Applicationar-win-dc.attackrange.localmaster2025/02/0401:23:56515234:288:1234:312:11FILE=16, TYPE=DISK: {'C:\temp\master.bak'}584700000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 301404600x8000000000000015803Applicationar-win-dc.attackrange.localBACKUP DATABASE506011634044C60B00000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 1826404600x8000000000000015802Applicationar-win-dc.attackrange.localmaster2025/02/0401:23:56515234:168:1234:192:11FILE=15, TYPE=DISK: {'C:\temp\master.bak'}584700000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 301404600x8000000000000015801Applicationar-win-dc.attackrange.localBACKUP DATABASE506011733754C60B00000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 1826404600x8000000000000015800Applicationar-win-dc.attackrange.localmaster2025/02/0401:23:56515234:48:1234:72:11FILE=14, TYPE=DISK: {'C:\temp\master.bak'}584700000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 301404600x8000000000000015799Applicationar-win-dc.attackrange.localBACKUP DATABASE506011733754C60B00000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 1826404600x8000000000000015798Applicationar-win-dc.attackrange.localmaster2025/02/0401:23:56515233:424:1233:448:11FILE=13, TYPE=DISK: {'C:\temp\master.bak'}584700000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 1545704200x8000000000000015797Applicationar-win-dc.attackrange.localshow advanced options10613C00000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 1545704200x8000000000000015796Applicationar-win-dc.attackrange.localxp_cmdshell10613C00000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 1545704200x8000000000000015795Applicationar-win-dc.attackrange.localxp_cmdshell01613C00000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 1545704200x8000000000000015794Applicationar-win-dc.attackrange.localshow advanced options01613C00000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 1545704200x8000000000000015793Applicationar-win-dc.attackrange.localshow advanced options10613C00000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 1545704200x8000000000000015792Applicationar-win-dc.attackrange.localxp_cmdshell10613C00000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 1545704200x8000000000000015791Applicationar-win-dc.attackrange.localxp_cmdshell11613C00000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 1545704200x8000000000000015790Applicationar-win-dc.attackrange.localshow advanced options11613C00000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 1545704200x8000000000000015789Applicationar-win-dc.attackrange.localxp_cmdshell11613C00000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 1545704200x8000000000000015788Applicationar-win-dc.attackrange.localxp_cmdshell01613C00000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 1545704200x8000000000000015787Applicationar-win-dc.attackrange.localshow advanced options11613C00000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 1545704200x8000000000000015786Applicationar-win-dc.attackrange.localshow advanced options01613C00000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 301404600x8000000000000015785Applicationar-win-dc.attackrange.localBACKUP DATABASE506011933186C60B00000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 1826404600x8000000000000015784Applicationar-win-dc.attackrange.localmaster2025/02/0401:23:56515233:168:1233:192:11FILE=12, TYPE=DISK: {'C:\temp\master.bak'}584700000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 301404600x8000000000000015783Applicationar-win-dc.attackrange.localBACKUP DATABASE506011833467C60B00000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 1826404600x8000000000000015782Applicationar-win-dc.attackrange.localmaster2025/02/0401:23:56515233:48:1233:72:11FILE=11, TYPE=DISK: {'C:\temp\master.bak'}584700000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 301404600x8000000000000015781Applicationar-win-dc.attackrange.localBACKUP DATABASE506011733754C60B00000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 1826404600x8000000000000015780Applicationar-win-dc.attackrange.localmaster2025/02/0401:23:56515232:424:1232:448:11FILE=10, TYPE=DISK: {'C:\temp\master.bak'}584700000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 301404600x8000000000000015779Applicationar-win-dc.attackrange.localBACKUP DATABASE506011833467C60B00000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 1826404600x8000000000000015778Applicationar-win-dc.attackrange.localmaster2025/02/0401:23:56515232:304:1232:328:11FILE=9, TYPE=DISK: {'C:\temp\master.bak'}584700000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 1545704200x8000000000000015777Applicationar-win-dc.attackrange.localshow advanced options10613C00000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 1545704200x8000000000000015776Applicationar-win-dc.attackrange.localxp_cmdshell10613C00000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 1545704200x8000000000000015775Applicationar-win-dc.attackrange.localxp_cmdshell01613C00000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 1545704200x8000000000000015774Applicationar-win-dc.attackrange.localshow advanced options01613C00000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 1545704200x8000000000000015773Applicationar-win-dc.attackrange.localshow advanced options10613C00000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 1545704200x8000000000000015772Applicationar-win-dc.attackrange.localxp_cmdshell10613C00000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 1545704200x8000000000000015771Applicationar-win-dc.attackrange.localxp_cmdshell11613C00000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 1545704200x8000000000000015770Applicationar-win-dc.attackrange.localshow advanced options11613C00000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 1545704200x8000000000000015769Applicationar-win-dc.attackrange.localxp_cmdshell11613C00000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 1545704200x8000000000000015768Applicationar-win-dc.attackrange.localxp_cmdshell01613C00000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 1545704200x8000000000000015767Applicationar-win-dc.attackrange.localshow advanced options11613C00000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 1545704200x8000000000000015766Applicationar-win-dc.attackrange.localshow advanced options01613C00000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 301404600x8000000000000015765Applicationar-win-dc.attackrange.localBACKUP DATABASE506011833467C60B00000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 1826404600x8000000000000015764Applicationar-win-dc.attackrange.localmaster2025/02/0401:23:56515232:48:1232:72:11FILE=8, TYPE=DISK: {'C:\temp\master.bak'}584700000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 301404600x8000000000000015763Applicationar-win-dc.attackrange.localBACKUP DATABASE506011733754C60B00000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 1826404600x8000000000000015762Applicationar-win-dc.attackrange.localmaster2025/02/0401:23:56515231:424:1231:448:11FILE=7, TYPE=DISK: {'C:\temp\master.bak'}584700000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 301404600x8000000000000015761Applicationar-win-dc.attackrange.localBACKUP DATABASE506011733754C60B00000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 1826404600x8000000000000015760Applicationar-win-dc.attackrange.localmaster2025/02/0401:23:56515231:304:1231:328:11FILE=6, TYPE=DISK: {'C:\temp\master.bak'}584700000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 301404600x8000000000000015759Applicationar-win-dc.attackrange.localBACKUP DATABASE506011933186C60B00000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 1826404600x8000000000000015758Applicationar-win-dc.attackrange.localmaster2025/02/0401:23:56515231:184:1231:208:11FILE=5, TYPE=DISK: {'C:\temp\master.bak'}584700000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 1545704200x8000000000000015757Applicationar-win-dc.attackrange.localshow advanced options10613C00000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 1545704200x8000000000000015756Applicationar-win-dc.attackrange.localxp_cmdshell10613C00000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 1545704200x8000000000000015755Applicationar-win-dc.attackrange.localxp_cmdshell01613C00000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 1545704200x8000000000000015754Applicationar-win-dc.attackrange.localshow advanced options01613C00000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 1545704200x8000000000000015753Applicationar-win-dc.attackrange.localshow advanced options10613C00000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 1545704200x8000000000000015752Applicationar-win-dc.attackrange.localxp_cmdshell10613C00000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 1545704200x8000000000000015751Applicationar-win-dc.attackrange.localxp_cmdshell11613C00000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 1545704200x8000000000000015750Applicationar-win-dc.attackrange.localshow advanced options11613C00000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 1545704200x8000000000000015749Applicationar-win-dc.attackrange.localxp_cmdshell11613C00000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 1545704200x8000000000000015748Applicationar-win-dc.attackrange.localxp_cmdshell01613C00000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 1545704200x8000000000000015747Applicationar-win-dc.attackrange.localshow advanced options11613C00000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 1545704200x8000000000000015746Applicationar-win-dc.attackrange.localshow advanced options01613C00000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 1638404000x8000000000000015299Applicationar-win-2.attackrange.local2025-02-05T16:34:47ZRulesEngine 1639404000x8000000000000015298Applicationar-win-2.attackrange.local 301404600x8000000000000015745Applicationar-win-dc.attackrange.localBACKUP DATABASE506011733754C60B00000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 1826404600x8000000000000015744Applicationar-win-dc.attackrange.localmaster2025/02/0401:23:56515230:408:1230:432:11FILE=4, TYPE=DISK: {'C:\temp\master.bak'}584700000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 301404600x8000000000000015743Applicationar-win-dc.attackrange.localBACKUP DATABASE506011634044C60B00000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 1826404600x8000000000000015742Applicationar-win-dc.attackrange.localmaster2025/02/0401:23:56515230:288:1230:312:11FILE=3, TYPE=DISK: {'C:\temp\master.bak'}584700000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 301404600x8000000000000015741Applicationar-win-dc.attackrange.localBACKUP DATABASE506011933186C60B00000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 1826404600x8000000000000015740Applicationar-win-dc.attackrange.localmaster2025/02/0401:23:56515230:168:1230:192:11FILE=2, TYPE=DISK: {'C:\temp\master.bak'}584700000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 301404600x8000000000000015739Applicationar-win-dc.attackrange.localBACKUP DATABASE506012232370C60B00000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 1826404600x8000000000000015738Applicationar-win-dc.attackrange.localmaster2025/02/0401:23:56516230:48:1230:72:11FILE=1, TYPE=DISK: {'C:\temp\master.bak'}584700000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 1545704200x8000000000000015737Applicationar-win-dc.attackrange.localshow advanced options10613C00000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 1545704200x8000000000000015736Applicationar-win-dc.attackrange.localxp_cmdshell10613C00000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 1545704200x8000000000000015735Applicationar-win-dc.attackrange.localxp_cmdshell01613C00000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 1545704200x8000000000000015734Applicationar-win-dc.attackrange.localshow advanced options01613C00000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 1545704200x8000000000000015733Applicationar-win-dc.attackrange.localshow advanced options10613C00000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 1545704200x8000000000000015732Applicationar-win-dc.attackrange.localxp_cmdshell10613C00000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 1545704200x8000000000000015731Applicationar-win-dc.attackrange.localxp_cmdshell11613C00000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 1545704200x8000000000000015730Applicationar-win-dc.attackrange.localshow advanced options11613C00000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 1545704200x8000000000000015729Applicationar-win-dc.attackrange.localxp_cmdshell11613C00000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 1545704200x8000000000000015728Applicationar-win-dc.attackrange.localxp_cmdshell01613C00000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 1545704200x8000000000000015727Applicationar-win-dc.attackrange.localshow advanced options11613C00000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 1545704200x8000000000000015726Applicationar-win-dc.attackrange.localshow advanced options01613C00000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 301404600x8000000000000015725Applicationar-win-dc.attackrange.localBACKUP DATABASE506011933186C60B00000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 1826404600x8000000000000015724Applicationar-win-dc.attackrange.localmaster2025/02/0401:23:56515229:288:1229:312:11FILE=4, TYPE=DISK: {'C:\Windows\Temp\master.bak'}584700000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 301404600x8000000000000015723Applicationar-win-dc.attackrange.localBACKUP DATABASE506011833467C60B00000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 1826404600x8000000000000015722Applicationar-win-dc.attackrange.localmaster2025/02/0401:23:56515229:168:1229:192:11FILE=3, TYPE=DISK: {'C:\Windows\Temp\master.bak'}584700000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 301404600x8000000000000015721Applicationar-win-dc.attackrange.localBACKUP DATABASE522012333123C60B00000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 1826404600x8000000000000015720Applicationar-win-dc.attackrange.localmaster2025/02/0401:23:56531229:48:7229:72:11FILE=2, TYPE=DISK: {'C:\Windows\Temp\master.bak'}584700000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 301404600x8000000000000015719Applicationar-win-dc.attackrange.localBACKUP DATABASE506011733754C60B00000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 1826404600x8000000000000015718Applicationar-win-dc.attackrange.localmaster2025/02/0401:23:56516228:424:1228:448:11FILE=1, TYPE=DISK: {'C:\Windows\Temp\master.bak'}584700000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 409704000x808000000000000015717Applicationar-win-dc.attackrange.localCN=DigiCert Global Root G3, OU=www.digicert.com, O=DigiCert Inc, C=US7E04DE896A3E666D00E687D33FFAD93BE83D349E 1545704200x8000000000000015716Applicationar-win-dc.attackrange.localshow advanced options10613C00000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 1545704200x8000000000000015715Applicationar-win-dc.attackrange.localxp_cmdshell10613C00000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 1545704200x8000000000000015714Applicationar-win-dc.attackrange.localxp_cmdshell01613C00000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 1545704200x8000000000000015713Applicationar-win-dc.attackrange.localshow advanced options01613C00000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 1545704200x8000000000000015712Applicationar-win-dc.attackrange.localshow advanced options10613C00000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 1545704200x8000000000000015711Applicationar-win-dc.attackrange.localxp_cmdshell10613C00000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 1545704200x8000000000000015710Applicationar-win-dc.attackrange.localxp_cmdshell11613C00000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 1545704200x8000000000000015709Applicationar-win-dc.attackrange.localshow advanced options11613C00000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 1545704200x8000000000000015708Applicationar-win-dc.attackrange.localxp_cmdshell11613C00000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 1545704200x8000000000000015707Applicationar-win-dc.attackrange.localxp_cmdshell01613C00000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 1545704200x8000000000000015706Applicationar-win-dc.attackrange.localshow advanced options11613C00000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 1545704200x8000000000000015705Applicationar-win-dc.attackrange.localshow advanced options01613C00000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 1545704200x8000000000000015704Applicationar-win-dc.attackrange.localshow advanced options10613C00000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 1545704200x8000000000000015703Applicationar-win-dc.attackrange.localxp_cmdshell10613C00000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 1545704200x8000000000000015702Applicationar-win-dc.attackrange.localxp_cmdshell01613C00000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 1545704200x8000000000000015701Applicationar-win-dc.attackrange.localshow advanced options01613C00000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 1545704200x8000000000000015700Applicationar-win-dc.attackrange.localshow advanced options10613C00000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 1545704200x8000000000000015699Applicationar-win-dc.attackrange.localxp_cmdshell10613C00000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 1545704200x8000000000000015698Applicationar-win-dc.attackrange.localxp_cmdshell01613C00000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 1545704200x8000000000000015697Applicationar-win-dc.attackrange.localshow advanced options01613C00000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 1545704200x8000000000000015696Applicationar-win-dc.attackrange.localshow advanced options10613C00000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 1545704200x8000000000000015695Applicationar-win-dc.attackrange.localxp_cmdshell10613C00000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 1545704200x8000000000000015694Applicationar-win-dc.attackrange.localxp_cmdshell01613C00000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 1545704200x8000000000000015693Applicationar-win-dc.attackrange.localshow advanced options01613C00000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 1545704200x8000000000000015692Applicationar-win-dc.attackrange.localshow advanced options10613C00000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 1545704200x8000000000000015691Applicationar-win-dc.attackrange.localxp_cmdshell10613C00000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 1545704200x8000000000000015690Applicationar-win-dc.attackrange.localxp_cmdshell11613C00000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 1545704200x8000000000000015689Applicationar-win-dc.attackrange.localshow advanced options11613C00000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 1545704200x8000000000000015688Applicationar-win-dc.attackrange.localxp_cmdshell11613C00000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 1545704200x8000000000000015687Applicationar-win-dc.attackrange.localshow advanced options11613C00000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 1545704200x8000000000000015686Applicationar-win-dc.attackrange.localxp_cmdshell11613C00000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 1545704200x8000000000000015685Applicationar-win-dc.attackrange.localxp_cmdshell11613C00000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 1545704200x8000000000000015684Applicationar-win-dc.attackrange.localshow advanced options11613C00000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 1545704200x8000000000000015683Applicationar-win-dc.attackrange.localshow advanced options01613C00000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 1545704200x8000000000000015682Applicationar-win-dc.attackrange.localshow advanced options00613C00000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 1545704200x8000000000000015681Applicationar-win-dc.attackrange.localshow advanced options10613C00000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 4993004200x8000000000000015680Applicationar-win-dc.attackrange.localshutdownSQLHellTest40AC300000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 4993004200x8000000000000015679Applicationar-win-dc.attackrange.localstartedSQLHellTest40AC300000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 1713704200x8000000000000015678Applicationar-win-dc.attackrange.localSQLHellTestF14200000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 1545704200x8000000000000015677Applicationar-win-dc.attackrange.localxp_cmdshell01613C00000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 1545704200x8000000000000015676Applicationar-win-dc.attackrange.localshow advanced options01613C00000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 2575304200x8000000000000015675Applicationar-win-dc.attackrange.localtelemetry_xevents996400000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 2575404200x8000000000000015674Applicationar-win-dc.attackrange.localtelemetry_xevents9A6400000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 508404200x8000000000000015673Applicationar-win-dc.attackrange.localSINGLE_USERONSQLHellTestDC1300000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 1528104200x8000000000000015672Applicationar-win-dc.attackrange.localproceduresys.xp_cmdshellxp_cmdshellxp_cmdshellxp_cmdshellxp_cmdshellB13B00000A0000000A000000610072002D00770069006E002D006400630000000C000000530051004C00480065006C006C0054006500730074000000 1528104200x8000000000000015671Applicationar-win-dc.attackrange.localproceduresys.xp_cmdshellxp_cmdshellxp_cmdshellxp_cmdshellxp_cmdshellB13B00000A0000000A000000610072002D00770069006E002D006400630000000C000000530051004C00480065006C006C0054006500730074000000 4993004200x8000000000000015670Applicationar-win-dc.attackrange.localshutdownSQLHellTest40AC300000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 4993004200x8000000000000015669Applicationar-win-dc.attackrange.localstartedSQLHellTest40AC300000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 1713704200x8000000000000015668Applicationar-win-dc.attackrange.localSQLHellTestF14200000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 1638404000x8000000000000015297Applicationar-win-2.attackrange.local2025-02-05T16:34:59ZRulesEngine 1639404000x8000000000000015296Applicationar-win-2.attackrange.local 1545704200x8000000000000015667Applicationar-win-dc.attackrange.localshow advanced options10613C00000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 1545704200x8000000000000015666Applicationar-win-dc.attackrange.localxp_cmdshell10613C00000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 1545704200x8000000000000015665Applicationar-win-dc.attackrange.localxp_cmdshell01613C00000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 1545704200x8000000000000015664Applicationar-win-dc.attackrange.localshow advanced options01613C00000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 1545704200x8000000000000015663Applicationar-win-dc.attackrange.localshow advanced options10613C00000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 1545704200x8000000000000015662Applicationar-win-dc.attackrange.localxp_cmdshell10613C00000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 1545704200x8000000000000015661Applicationar-win-dc.attackrange.localxp_cmdshell01613C00000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 1545704200x8000000000000015660Applicationar-win-dc.attackrange.localshow advanced options01613C00000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 1545704200x8000000000000015659Applicationar-win-dc.attackrange.localshow advanced options10613C00000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 1545704200x8000000000000015658Applicationar-win-dc.attackrange.localxp_cmdshell10613C00000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 1545704200x8000000000000015657Applicationar-win-dc.attackrange.localxp_cmdshell01613C00000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 1545704200x8000000000000015656Applicationar-win-dc.attackrange.localshow advanced options01613C00000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 1545704200x8000000000000015655Applicationar-win-dc.attackrange.localshow advanced options10613C00000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 1545704200x8000000000000015654Applicationar-win-dc.attackrange.localxp_cmdshell10613C00000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 1545704200x8000000000000015653Applicationar-win-dc.attackrange.localxp_cmdshell11613C00000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 1545704200x8000000000000015652Applicationar-win-dc.attackrange.localshow advanced options11613C00000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 1545704200x8000000000000015651Applicationar-win-dc.attackrange.localxp_cmdshell01613C00000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 1545704200x8000000000000015650Applicationar-win-dc.attackrange.localshow advanced options01613C00000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 1528104200x8000000000000015649Applicationar-win-dc.attackrange.localproceduresys.xp_cmdshellxp_cmdshellxp_cmdshellxp_cmdshellxp_cmdshellB13B00000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 1528104200x8000000000000015648Applicationar-win-dc.attackrange.localproceduresys.xp_cmdshellxp_cmdshellxp_cmdshellxp_cmdshellxp_cmdshellB13B00000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 1545704200x8000000000000015647Applicationar-win-dc.attackrange.localshow advanced options00613C00000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 1545704200x8000000000000015646Applicationar-win-dc.attackrange.localshow advanced options10613C00000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 1545704200x8000000000000015645Applicationar-win-dc.attackrange.localxp_cmdshell10613C00000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 1545704200x8000000000000015644Applicationar-win-dc.attackrange.localxp_cmdshell01613C00000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 1545704200x8000000000000015643Applicationar-win-dc.attackrange.localshow advanced options01613C00000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 1545704200x8000000000000015642Applicationar-win-dc.attackrange.localshow advanced options10613C00000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 1545704200x8000000000000015641Applicationar-win-dc.attackrange.localxp_cmdshell10613C00000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 1545704200x8000000000000015640Applicationar-win-dc.attackrange.localxp_cmdshell11613C00000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 1545704200x8000000000000015639Applicationar-win-dc.attackrange.localshow advanced options11613C00000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 1545704200x8000000000000015638Applicationar-win-dc.attackrange.localxp_cmdshell11613C00000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 1545704200x8000000000000015637Applicationar-win-dc.attackrange.localxp_cmdshell01613C00000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 1545704200x8000000000000015636Applicationar-win-dc.attackrange.localshow advanced options11613C00000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 1545704200x8000000000000015635Applicationar-win-dc.attackrange.localshow advanced options01613C00000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 1528104200x8000000000000015634Applicationar-win-dc.attackrange.localproceduresys.xp_cmdshellxp_cmdshellxp_cmdshellxp_cmdshellxp_cmdshellB13B00000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 1528104200x8000000000000015633Applicationar-win-dc.attackrange.localproceduresys.xp_cmdshellxp_cmdshellxp_cmdshellxp_cmdshellxp_cmdshellB13B00000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 1545704200x8000000000000015632Applicationar-win-dc.attackrange.localshow advanced options00613C00000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 1545704200x8000000000000015631Applicationar-win-dc.attackrange.localshow advanced options00613C00000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 1528104200x8000000000000015630Applicationar-win-dc.attackrange.localproceduresys.xp_cmdshellxp_cmdshellxp_cmdshellxp_cmdshellxp_cmdshellB13B00000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 1528104200x8000000000000015629Applicationar-win-dc.attackrange.localproceduresys.xp_cmdshellxp_cmdshellxp_cmdshellxp_cmdshellxp_cmdshellB13B00000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 1528104200x8000000000000015628Applicationar-win-dc.attackrange.localproceduresys.xp_cmdshellxp_cmdshellxp_cmdshellxp_cmdshellxp_cmdshellB13B00000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 1528104200x8000000000000015627Applicationar-win-dc.attackrange.localproceduresys.xp_cmdshellxp_cmdshellxp_cmdshellxp_cmdshellxp_cmdshellB13B00000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 1638404000x8000000000000015295Applicationar-win-2.attackrange.local2025-02-05T16:35:03ZRulesEngine 1639404000x8000000000000015294Applicationar-win-2.attackrange.local 1638404000x8000000000000015626Applicationar-win-dc.attackrange.local2025-02-05T16:36:19ZRulesEngine 1639404000x8000000000000015625Applicationar-win-dc.attackrange.local 2575304200x8000000000000015624Applicationar-win-dc.attackrange.localtelemetry_xevents996400000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 2575404200x8000000000000015623Applicationar-win-dc.attackrange.localtelemetry_xevents9A6400000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 004000x8000000000000015622Applicationar-win-dc.attackrange.localService stopped 1638404000x8000000000000015293Applicationar-win-2.attackrange.local2025-02-05T16:34:26ZRulesEngine 1639404000x8000000000000015292Applicationar-win-2.attackrange.local 1638404000x8000000000000015621Applicationar-win-dc.attackrange.local2025-02-05T16:36:06ZRulesEngine 1639404000x8000000000000015620Applicationar-win-dc.attackrange.local 1638404000x8000000000000015291Applicationar-win-2.attackrange.local2025-02-05T16:34:49ZRulesEngine 1639404000x8000000000000015290Applicationar-win-2.attackrange.local 1638404000x8000000000000015289Applicationar-win-2.attackrange.local2025-02-05T16:34:35ZRulesEngine 1639404000x8000000000000015288Applicationar-win-2.attackrange.local 2575304200x8000000000000015619Applicationar-win-dc.attackrange.localtelemetry_xevents996400000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 2575404200x8000000000000015618Applicationar-win-dc.attackrange.localtelemetry_xevents9A6400000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 004000x8000000000000015287Applicationar-win-2.attackrange.localService stopped 1638404000x8000000000000015617Applicationar-win-dc.attackrange.local2025-02-05T16:35:59ZRulesEngine 1639404000x8000000000000015616Applicationar-win-dc.attackrange.local 1638404000x8000000000000015286Applicationar-win-2.attackrange.local2025-02-05T16:34:21ZRulesEngine 1639404000x8000000000000015285Applicationar-win-2.attackrange.local 2575304200x8000000000000015615Applicationar-win-dc.attackrange.localtelemetry_xevents996400000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 2575404200x8000000000000015614Applicationar-win-dc.attackrange.localtelemetry_xevents9A6400000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 1638404000x8000000000000015613Applicationar-win-dc.attackrange.local2025-02-05T16:36:32ZRulesEngine 1639404000x8000000000000015612Applicationar-win-dc.attackrange.local 1638404000x8000000000000015284Applicationar-win-2.attackrange.local2025-02-05T16:34:19ZRulesEngine 1639404000x8000000000000015283Applicationar-win-2.attackrange.local 2575304200x8000000000000015611Applicationar-win-dc.attackrange.localtelemetry_xevents996400000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 2575404200x8000000000000015610Applicationar-win-dc.attackrange.localtelemetry_xevents9A6400000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 1638404000x8000000000000015282Applicationar-win-2.attackrange.local2025-02-05T16:34:24ZRulesEngine 1639404000x8000000000000015281Applicationar-win-2.attackrange.local 2575304200x8000000000000015609Applicationar-win-dc.attackrange.localtelemetry_xevents996400000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 2575404200x8000000000000015608Applicationar-win-dc.attackrange.localtelemetry_xevents9A6400000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 1638404000x8000000000000015280Applicationar-win-2.attackrange.local2025-02-05T16:34:24ZRulesEngine 1639404000x8000000000000015279Applicationar-win-2.attackrange.local 1638404000x8000000000000015607Applicationar-win-dc.attackrange.local2025-02-05T16:36:10ZRulesEngine 1639404000x8000000000000015606Applicationar-win-dc.attackrange.local 2575304200x8000000000000015605Applicationar-win-dc.attackrange.localtelemetry_xevents996400000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 2575404200x8000000000000015604Applicationar-win-dc.attackrange.localtelemetry_xevents9A6400000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 1638404000x8000000000000015603Applicationar-win-dc.attackrange.local2025-02-05T16:35:57ZRulesEngine 1639404000x8000000000000015602Applicationar-win-dc.attackrange.local 1638404000x8000000000000015278Applicationar-win-2.attackrange.local2025-02-05T16:35:03ZRulesEngine 1639404000x8000000000000015277Applicationar-win-2.attackrange.local 1638404000x8000000000000015601Applicationar-win-dc.attackrange.local2025-02-05T16:36:14ZRulesEngine 1639404000x8000000000000015600Applicationar-win-dc.attackrange.local 1638404000x8000000000000015276Applicationar-win-2.attackrange.local2025-02-05T16:34:49ZRulesEngine 1639404000x8000000000000015275Applicationar-win-2.attackrange.local 1638404000x8000000000000015274Applicationar-win-2.attackrange.local2025-02-05T16:35:04ZRulesEngine 1639404000x8000000000000015273Applicationar-win-2.attackrange.local 2575304200x8000000000000015599Applicationar-win-dc.attackrange.localtelemetry_xevents996400000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 2575404200x8000000000000015598Applicationar-win-dc.attackrange.localtelemetry_xevents9A6400000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 1638404000x8000000000000015272Applicationar-win-2.attackrange.local2025-02-05T16:35:10ZRulesEngine 1639404000x8000000000000015271Applicationar-win-2.attackrange.local 2575304200x8000000000000015597Applicationar-win-dc.attackrange.localtelemetry_xevents996400000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 2575404200x8000000000000015596Applicationar-win-dc.attackrange.localtelemetry_xevents9A6400000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 1638404000x8000000000000015270Applicationar-win-2.attackrange.local2025-02-05T16:34:41ZRulesEngine 1639404000x8000000000000015269Applicationar-win-2.attackrange.local 2575304200x8000000000000015595Applicationar-win-dc.attackrange.localtelemetry_xevents996400000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 2575404200x8000000000000015594Applicationar-win-dc.attackrange.localtelemetry_xevents9A6400000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 1638404000x8000000000000015268Applicationar-win-2.attackrange.local2025-02-05T16:34:47ZRulesEngine 1639404000x8000000000000015267Applicationar-win-2.attackrange.local 1638404000x8000000000000015266Applicationar-win-2.attackrange.local2025-02-05T16:34:26ZRulesEngine 1639404000x8000000000000015265Applicationar-win-2.attackrange.local 1638404000x8000000000000015593Applicationar-win-dc.attackrange.local2025-02-05T16:35:42ZRulesEngine 1639404000x8000000000000015592Applicationar-win-dc.attackrange.local 1638404000x8000000000000015591Applicationar-win-dc.attackrange.local2025-02-05T16:35:56ZRulesEngine 170404000x8000000000000015264Applicationar-win-2.attackrange.local 2575304200x8000000000000015590Applicationar-win-dc.attackrange.localtelemetry_xevents996400000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 2575404200x8000000000000015589Applicationar-win-dc.attackrange.localtelemetry_xevents9A6400000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 1639404000x8000000000000015588Applicationar-win-dc.attackrange.local 1638404000x8000000000000015263Applicationar-win-2.attackrange.local2025-02-05T16:35:02ZRulesEngine 1639404000x8000000000000015262Applicationar-win-2.attackrange.local 1638404000x8000000000000015587Applicationar-win-dc.attackrange.local2025-02-05T16:35:47ZRulesEngine 1639404000x8000000000000015586Applicationar-win-dc.attackrange.local 1638404000x8000000000000015261Applicationar-win-2.attackrange.local2025-02-05T16:34:47ZRulesEngine 1639404000x8000000000000015260Applicationar-win-2.attackrange.local 2575304200x8000000000000015585Applicationar-win-dc.attackrange.localtelemetry_xevents996400000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 2575404200x8000000000000015584Applicationar-win-dc.attackrange.localtelemetry_xevents9A6400000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 1638404000x8000000000000015259Applicationar-win-2.attackrange.local2025-02-05T16:34:39ZRulesEngine 1639404000x8000000000000015258Applicationar-win-2.attackrange.local 004000x8000000000000015583Applicationar-win-dc.attackrange.localService stopped 2575304200x8000000000000015582Applicationar-win-dc.attackrange.localtelemetry_xevents996400000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 2575404200x8000000000000015581Applicationar-win-dc.attackrange.localtelemetry_xevents9A6400000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 1638404000x8000000000000015580Applicationar-win-dc.attackrange.local2025-02-05T16:35:44ZRulesEngine 1639404000x8000000000000015579Applicationar-win-dc.attackrange.local 1638404000x8000000000000015257Applicationar-win-2.attackrange.local2025-02-05T16:34:30ZRulesEngine 1639404000x8000000000000015256Applicationar-win-2.attackrange.local 2575304200x8000000000000015578Applicationar-win-dc.attackrange.localtelemetry_xevents996400000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 2575404200x8000000000000015577Applicationar-win-dc.attackrange.localtelemetry_xevents9A6400000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 004000x8000000000000015255Applicationar-win-2.attackrange.localService stopped 1638404000x8000000000000015254Applicationar-win-2.attackrange.local2025-02-05T16:34:26ZRulesEngine 1639404000x8000000000000015253Applicationar-win-2.attackrange.local 1638404000x8000000000000015252Applicationar-win-2.attackrange.local2025-02-05T16:35:09ZRulesEngine 1639404000x8000000000000015251Applicationar-win-2.attackrange.local 1638404000x8000000000000015576Applicationar-win-dc.attackrange.local2025-02-05T16:36:23ZRulesEngine 1639404000x8000000000000015575Applicationar-win-dc.attackrange.local 1638404000x8000000000000015250Applicationar-win-2.attackrange.local2025-02-05T16:34:46ZRulesEngine 1639404000x8000000000000015249Applicationar-win-2.attackrange.local 1638404000x8000000000000015248Applicationar-win-2.attackrange.local2025-02-05T16:34:44ZRulesEngine 1639404000x8000000000000015247Applicationar-win-2.attackrange.local 2575304200x8000000000000015574Applicationar-win-dc.attackrange.localtelemetry_xevents996400000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 2575404200x8000000000000015573Applicationar-win-dc.attackrange.localtelemetry_xevents9A6400000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 1781002400x8000000000000015572Applicationar-win-dc.attackrange.local1 [CLIENT: 127.0.0.1]92450000140000000A000000610072002D00770069006E002D0064006300000000000000 812804200x8000000000000015571Applicationar-win-dc.attackrange.localxplog70.dll2022.160.1000xp_msverC01F00000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 3309004200x8000000000000015570Applicationar-win-dc.attackrange.localxplog70.dll428100000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 2575304200x8000000000000015569Applicationar-win-dc.attackrange.localtelemetry_xevents996400000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 104100x8000000000000015568Applicationar-win-dc.attackrange.localSqlCeip started pid: 1004 instance: CPEFlag: True 4991204200x8000000000000015567Applicationar-win-dc.attackrange.localF8C200000A0000000A000000610072002D00770069006E002D0064006300000000000000 49002100x8000000000000015566Applicationar-win-dc.attackrange.localsqlservr7648,R,98SoftwareUsageMetrics-Api: C:\Windows\system32\LogFiles\Sum\Api.chk-1032 (0xfffffbf8)5 (0x00000005)Access is denied. 504000x8000000000000015565Applicationar-win-dc.attackrange.localNT SERVICE\SQLTELEMETRY 2606704200x8000000000000015564Applicationar-win-dc.attackrange.localMSSQLSvc/ar-win-dc.attackrange.local:14330x209815D36500000A0000000A000000610072002D00770069006E002D0064006300000000000000 2606704200x8000000000000015563Applicationar-win-dc.attackrange.localMSSQLSvc/ar-win-dc.attackrange.local0x209815D36500000A0000000A000000610072002D00770069006E002D0064006300000000000000 2607604200x8000000000000015562Applicationar-win-dc.attackrange.localDC6500000A0000000A000000610072002D00770069006E002D0064006300000000000000 1712604200x8000000000000015561Applicationar-win-dc.attackrange.localE64200000A0000000A000000610072002D00770069006E002D0064006300000000000000 340804200x8000000000000015560Applicationar-win-dc.attackrange.local500D00000A0000000A000000610072002D00770069006E002D0064006300000000000000 1720104200x8000000000000015559Applicationar-win-dc.attackrange.local1434314300000A0000000A000000610072002D00770069006E002D0064006300000000000000 2602204200x8000000000000015558Applicationar-win-dc.attackrange.local127.0.0.1ipv414341A66500000A0000000A000000610072002D00770069006E002D0064006300000000000000 2602204200x8000000000000015557Applicationar-win-dc.attackrange.local::1ipv614341A66500000A0000000A000000610072002D00770069006E002D0064006300000000000000 2602804200x8000000000000015556Applicationar-win-dc.attackrange.local\\.\pipe\sql\queryAC6500000A0000000A000000610072002D00770069006E002D0064006300000000000000 2604804200x8000000000000015555Applicationar-win-dc.attackrange.local\\.\pipe\SQLLocal\MSSQLSERVERC06500000A0000000A000000610072002D00770069006E002D0064006300000000000000 2602204200x8000000000000015554Applicationar-win-dc.attackrange.local'any'ipv414331A66500000A0000000A000000610072002D00770069006E002D0064006300000000000000 2602204200x8000000000000015553Applicationar-win-dc.attackrange.local'any'ipv614331A66500000A0000000A000000610072002D00770069006E002D0064006300000000000000 2601804200x8000000000000015552Applicationar-win-dc.attackrange.localA26500000A0000000A000000610072002D00770069006E002D0064006300000000000000 968804200x8000000000000015551Applicationar-win-dc.attackrange.localD82500000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 966604200x8000000000000015550Applicationar-win-dc.attackrange.localDatabase MirroringC22500000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 966604200x8000000000000015549Applicationar-win-dc.attackrange.localService BrokerC22500000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 1711704200x8000000000000015548Applicationar-win-dc.attackrange.local2DD4200000A0000000A000000610072002D00770069006E002D0064006300000007000000740065006D007000640062000000 1713704200x8000000000000015547Applicationar-win-dc.attackrange.localtempdbF14200000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 1713704200x8000000000000015546Applicationar-win-dc.attackrange.localmsdbF14200000A0000000A000000610072002D00770069006E002D0064006300000000000000 4111104200x8000000000000015545Applicationar-win-dc.attackrange.local97A000000A0000000A000000610072002D00770069006E002D0064006300000000000000 4111004200x8000000000000015544Applicationar-win-dc.attackrange.local96A000000A0000000A000000610072002D00770069006E002D0064006300000000000000 1713604200x8000000000000015543Applicationar-win-dc.attackrange.localF04200000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 1766304200x8000000000000015542Applicationar-win-dc.attackrange.localar-win-dcFF4400000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 1903004200x8000000000000015541Applicationar-win-dc.attackrange.local1sa564A00000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 2575304200x8000000000000015540Applicationar-win-dc.attackrange.localsystem_health996400000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 3321804200x8000000000000015539Applicationar-win-dc.attackrange.localC28100000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 3321704200x8000000000000015538Applicationar-win-dc.attackrange.localC18100000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 1098104200x8000000000000015537Applicationar-win-dc.attackrange.localE52A00000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 1713704200x8000000000000015536Applicationar-win-dc.attackrange.localmodel_msdbF14200000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 1713704200x8000000000000015535Applicationar-win-dc.attackrange.localmodelF14200000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 95804200x8000000000000015534Applicationar-win-dc.attackrange.local16.00.1000BE0300000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 1713704200x8000000000000015533Applicationar-win-dc.attackrange.localmssqlsystemresourceF14200000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 1713704200x8000000000000015532Applicationar-win-dc.attackrange.localmodel_replicatedmasterF14200000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 625304200x8000000000000015531Applicationar-win-dc.attackrange.localv4.0.30319C:\Windows\Microsoft.NET\Framework64\v4.0.30319\6D1800000A0000000A000000610072002D00770069006E002D0064006300000000000000 1713704200x8000000000000015530Applicationar-win-dc.attackrange.localmasterF14200000A0000000A000000610072002D00770069006E002D0064006300000000000000 904804200x8000000000000015529Applicationar-win-dc.attackrange.localclwb582300000A0000000A000000610072002D00770069006E002D0064006300000000000000 1711804200x8000000000000015528Applicationar-win-dc.attackrange.localenabledDE4200000A0000000A000000610072002D00770069006E002D0064006300000000000000 1712504200x8000000000000015527Applicationar-win-dc.attackrange.local25005000E54200000A0000000A000000610072002D00770069006E002D0064006300000000000000 1715204200x8000000000000015526Applicationar-win-dc.attackrange.local000000000000000ff000000000000000ff0004300000A0000000A000000610072002D00770069006E002D0064006300000000000000 1717604200x8000000000000015525Applicationar-win-dc.attackrange.local21282/4/2025 1:23:51 AM2/4/2025 1:23:51 AM184300000A0000000A000000610072002D00770069006E002D0064006300000000000000 1781104200x8000000000000015524Applicationar-win-dc.attackrange.local1934500000A0000000A000000610072002D00770069006E002D0064006300000000000000 1726404200x8000000000000015523Applicationar-win-dc.attackrange.localSSE SSE2 SSE3 SSSE3 SSE41 SSE42 AVX AVX2 POPCNT BMI1 BMI2 AVX512 (F CD BW DQ VL)704300000A0000000A000000610072002D00770069006E002D0064006300000000000000 87304200x8000000000000015522Applicationar-win-dc.attackrange.local690300000A0000000A000000610072002D00770069006E002D0064006300000000000000 4991704200x8000000000000015521Applicationar-win-dc.attackrange.localSQL_Latin1_General_CP1_CI_ASus_english1033FDC200000A0000000A000000610072002D00770069006E002D0064006300000000000000 89404200x8000000000000015520Applicationar-win-dc.attackrange.local838860851128837E0300000A0000000A000000610072002D00770069006E002D0064006300000000000000 85204200x8000000000000015519Applicationar-win-dc.attackrange.local540300000A0000000A000000610072002D00770069006E002D0064006300000000000000 4990304200x8000000000000015518Applicationar-win-dc.attackrange.local31955EFC200000A0000000A000000610072002D00770069006E002D0064006300000000000000 1716204200x8000000000000015517Applicationar-win-dc.attackrange.local0A4300000A0000000A000000610072002D00770069006E002D0064006300000000000000 1716404200x8000000000000015516Applicationar-win-dc.attackrange.local148880C4300000A0000000A000000610072002D00770069006E002D0064006300000000000000 1711504200x8000000000000015515Applicationar-win-dc.attackrange.local -s "MSSQLSERVER"DB4200000A0000000A000000610072002D00770069006E002D0064006300000000000000 1711004200x8000000000000015514Applicationar-win-dc.attackrange.local -d C:\Program Files\Microsoft SQL Server\MSSQL16.MSSQLSERVER\MSSQL\DATA\master.mdf -e C:\Program Files\Microsoft SQL Server\MSSQL16.MSSQLSERVER\MSSQL\Log\ERRORLOG -l C:\Program Files\Microsoft SQL Server\MSSQL16.MSSQLSERVER\MSSQL\DATA\mastlog.ldfD64200000A0000000A000000610072002D00770069006E002D0064006300000000000000 4990404200x8000000000000015513Applicationar-win-dc.attackrange.localNT Service\MSSQLSERVERF0C200000A0000000A000000610072002D00770069006E002D0064006300000000000000 1711104200x8000000000000015512Applicationar-win-dc.attackrange.localC:\Program Files\Microsoft SQL Server\MSSQL16.MSSQLSERVER\MSSQL\Log\ERRORLOGD74200000A0000000A000000610072002D00770069006E002D0064006300000000000000 1526804200x8000000000000015511Applicationar-win-dc.attackrange.localMIXEDA43B00000A0000000A000000610072002D00770069006E002D0064006300000000000000 1849604200x8000000000000015510Applicationar-win-dc.attackrange.localAmazon EC2m5.2xlarge404800000A0000000A000000610072002D00770069006E002D0064006300000000000000 1710404200x8000000000000015509Applicationar-win-dc.attackrange.local7648D04200000A0000000A000000610072002D00770069006E002D0064006300000000000000 1710304200x8000000000000015508Applicationar-win-dc.attackrange.localCF4200000A0000000A000000610072002D00770069006E002D0064006300000000000000 1710104200x8000000000000015507Applicationar-win-dc.attackrange.localCD4200000A0000000A000000610072002D00770069006E002D0064006300000000000000 4991604200x8000000000000015506Applicationar-win-dc.attackrange.local000FCC200000A0000000A000000610072002D00770069006E002D0064006300000000000000 1706904200x8000000000000015505Applicationar-win-dc.attackrange.localMicrosoft SQL Server 2022 (RTM) - 16.0.1000.6 (X64) Oct 8 2022 05:58:25 Copyright (C) 2022 Microsoft Corporation Developer Edition (64-bit) on Windows Server 2022 Datacenter 10.0 <X64> (Build 20348: ) (Hypervisor) AD4200000A0000000A000000610072002D00770069006E002D0064006300000000000000 1204000x8000000000000015504Applicationar-win-dc.attackrange.local 1604000x8000000000000015503Applicationar-win-dc.attackrange.local 1304000x8000000000000015502Applicationar-win-dc.attackrange.local 1204000x8000000000000015501Applicationar-win-dc.attackrange.local 1604000x8000000000000015500Applicationar-win-dc.attackrange.local 170404000x8000000000000015499Applicationar-win-dc.attackrange.local 2572502200x8000000000000015498Applicationar-win-dc.attackrange.local7D640000100000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 1903204200x8000000000000015497Applicationar-win-dc.attackrange.local1584A00000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 652704200x8000000000000015496Applicationar-win-dc.attackrange.local7F1900000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 1714804200x8000000000000015495Applicationar-win-dc.attackrange.localFC4200000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 570304200x8000000000000015494Applicationar-win-dc.attackrange.localus_english471600000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 570104200x8000000000000015493Applicationar-win-dc.attackrange.localmaster451600000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 1545704200x8000000000000015492Applicationar-win-dc.attackrange.localshow advanced options10613C00000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 1545704200x8000000000000015491Applicationar-win-dc.attackrange.localAgent XPs10613C00000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 812804200x8000000000000015490Applicationar-win-dc.attackrange.localxpstar.dll2022.160.1000xp_instance_regreadC01F00000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 3309004200x8000000000000015489Applicationar-win-dc.attackrange.localxpstar.dll428100000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 1545704200x8000000000000015488Applicationar-win-dc.attackrange.localAgent XPs01613C00000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 1545704200x8000000000000015487Applicationar-win-dc.attackrange.localshow advanced options01613C00000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 570304200x8000000000000015486Applicationar-win-dc.attackrange.localus_english471600000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 570104200x8000000000000015485Applicationar-win-dc.attackrange.localmaster451600000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 1545704200x8000000000000015484Applicationar-win-dc.attackrange.localshow advanced options10613C00000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 1545704200x8000000000000015483Applicationar-win-dc.attackrange.localmax degree of parallelism08613C00000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 1545704200x8000000000000015482Applicationar-win-dc.attackrange.localshow advanced options01613C00000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 508404200x8000000000000015481Applicationar-win-dc.attackrange.localNEW_BROKERONmsdbDC1300000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 508404200x8000000000000015480Applicationar-win-dc.attackrange.localNEW_BROKERONtempdbDC1300000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 1545704200x8000000000000015479Applicationar-win-dc.attackrange.localshow advanced options10613C00000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 1545704200x8000000000000015478Applicationar-win-dc.attackrange.localdefault full-text language10331033613C00000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 1545704200x8000000000000015477Applicationar-win-dc.attackrange.localdefault language00613C00000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 1545704200x8000000000000015476Applicationar-win-dc.attackrange.localshow advanced options01613C00000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 508404200x8000000000000015475Applicationar-win-dc.attackrange.localRECOVERYFULLmodelDC1300000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 570304200x8000000000000015474Applicationar-win-dc.attackrange.localus_english471600000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 570104200x8000000000000015473Applicationar-win-dc.attackrange.localmaster451600000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 340804200x8000000000000015472Applicationar-win-dc.attackrange.local500D00000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 95104200x8000000000000015471Applicationar-win-dc.attackrange.localmsdb956957B70300000A0000000A000000610072002D00770069006E002D00640063000000050000006D007300640062000000 95104200x8000000000000015470Applicationar-win-dc.attackrange.localmsdb955956B70300000A0000000A000000610072002D00770069006E002D00640063000000050000006D007300640062000000 95104200x8000000000000015469Applicationar-win-dc.attackrange.localmsdb954955B70300000A0000000A000000610072002D00770069006E002D00640063000000050000006D007300640062000000 95104200x8000000000000015468Applicationar-win-dc.attackrange.localmsdb953954B70300000A0000000A000000610072002D00770069006E002D00640063000000050000006D007300640062000000 95104200x8000000000000015467Applicationar-win-dc.attackrange.localmsdb952953B70300000A0000000A000000610072002D00770069006E002D00640063000000050000006D007300640062000000 95104200x8000000000000015466Applicationar-win-dc.attackrange.localmsdb951952B70300000A0000000A000000610072002D00770069006E002D00640063000000050000006D007300640062000000 95104200x8000000000000015465Applicationar-win-dc.attackrange.localmsdb950951B70300000A0000000A000000610072002D00770069006E002D00640063000000050000006D007300640062000000 95104200x8000000000000015464Applicationar-win-dc.attackrange.localmsdb949950B70300000A0000000A000000610072002D00770069006E002D00640063000000050000006D007300640062000000 95104200x8000000000000015463Applicationar-win-dc.attackrange.localmsdb948949B70300000A0000000A000000610072002D00770069006E002D00640063000000050000006D007300640062000000 95104200x8000000000000015462Applicationar-win-dc.attackrange.localmsdb947948B70300000A0000000A000000610072002D00770069006E002D00640063000000050000006D007300640062000000 95104200x8000000000000015461Applicationar-win-dc.attackrange.localmsdb946947B70300000A0000000A000000610072002D00770069006E002D00640063000000050000006D007300640062000000 95104200x8000000000000015460Applicationar-win-dc.attackrange.localmsdb945946B70300000A0000000A000000610072002D00770069006E002D00640063000000050000006D007300640062000000 95104200x8000000000000015459Applicationar-win-dc.attackrange.localmsdb944945B70300000A0000000A000000610072002D00770069006E002D00640063000000050000006D007300640062000000 95104200x8000000000000015458Applicationar-win-dc.attackrange.localmsdb943944B70300000A0000000A000000610072002D00770069006E002D00640063000000050000006D007300640062000000 95104200x8000000000000015457Applicationar-win-dc.attackrange.localmsdb942943B70300000A0000000A000000610072002D00770069006E002D00640063000000050000006D007300640062000000 95104200x8000000000000015456Applicationar-win-dc.attackrange.localmsdb941942B70300000A0000000A000000610072002D00770069006E002D00640063000000050000006D007300640062000000 1711704200x8000000000000015455Applicationar-win-dc.attackrange.local1DD4200000A0000000A000000610072002D00770069006E002D0064006300000007000000740065006D007000640062000000 95104200x8000000000000015454Applicationar-win-dc.attackrange.localmsdb940941B70300000A0000000A000000610072002D00770069006E002D00640063000000050000006D007300640062000000 95104200x8000000000000015453Applicationar-win-dc.attackrange.localmsdb939940B70300000A0000000A000000610072002D00770069006E002D00640063000000050000006D007300640062000000 95104200x8000000000000015452Applicationar-win-dc.attackrange.localmsdb938939B70300000A0000000A000000610072002D00770069006E002D00640063000000050000006D007300640062000000 95104200x8000000000000015451Applicationar-win-dc.attackrange.localmsdb937938B70300000A0000000A000000610072002D00770069006E002D00640063000000050000006D007300640062000000 95104200x8000000000000015450Applicationar-win-dc.attackrange.localmsdb936937B70300000A0000000A000000610072002D00770069006E002D00640063000000050000006D007300640062000000 95104200x8000000000000015449Applicationar-win-dc.attackrange.localmsdb935936B70300000A0000000A000000610072002D00770069006E002D00640063000000050000006D007300640062000000 95104200x8000000000000015448Applicationar-win-dc.attackrange.localmsdb934935B70300000A0000000A000000610072002D00770069006E002D00640063000000050000006D007300640062000000 95104200x8000000000000015447Applicationar-win-dc.attackrange.localmsdb933934B70300000A0000000A000000610072002D00770069006E002D00640063000000050000006D007300640062000000 95104200x8000000000000015446Applicationar-win-dc.attackrange.localmsdb932933B70300000A0000000A000000610072002D00770069006E002D00640063000000050000006D007300640062000000 95104200x8000000000000015445Applicationar-win-dc.attackrange.localmsdb931932B70300000A0000000A000000610072002D00770069006E002D00640063000000050000006D007300640062000000 1713704200x8000000000000015444Applicationar-win-dc.attackrange.localtempdbF14200000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 95104200x8000000000000015443Applicationar-win-dc.attackrange.localmsdb930931B70300000A0000000A000000610072002D00770069006E002D00640063000000050000006D007300640062000000 95104200x8000000000000015442Applicationar-win-dc.attackrange.localmsdb929930B70300000A0000000A000000610072002D00770069006E002D00640063000000050000006D007300640062000000 95104200x8000000000000015441Applicationar-win-dc.attackrange.localmsdb928929B70300000A0000000A000000610072002D00770069006E002D00640063000000050000006D007300640062000000 95104200x8000000000000015440Applicationar-win-dc.attackrange.localmsdb927928B70300000A0000000A000000610072002D00770069006E002D00640063000000050000006D007300640062000000 94404200x8000000000000015439Applicationar-win-dc.attackrange.localmsdb927957B00300000A0000000A000000610072002D00770069006E002D00640063000000050000006D007300640062000000 901304200x8000000000000015438Applicationar-win-dc.attackrange.localmsdb4096307250176C:\Program Files\Microsoft SQL Server\MSSQL16.MSSQLSERVER\MSSQL\DATA\MSDBLog.ldf352300000A0000000A000000610072002D00770069006E002D0064006300000000000000 1713704200x8000000000000015437Applicationar-win-dc.attackrange.localmsdbF14200000A0000000A000000610072002D00770069006E002D0064006300000000000000 1713604200x8000000000000015436Applicationar-win-dc.attackrange.localF04200000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 4114704200x8000000000000015435Applicationar-win-dc.attackrange.localthe SQL Server instance is running in single-user modeBBA000000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 1766304200x8000000000000015434Applicationar-win-dc.attackrange.localar-win-dcFF4400000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 1903004200x8000000000000015433Applicationar-win-dc.attackrange.local1sa564A00000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 2575304200x8000000000000015432Applicationar-win-dc.attackrange.localsystem_health996400000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 3321804200x8000000000000015431Applicationar-win-dc.attackrange.localC28100000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 3321704200x8000000000000015430Applicationar-win-dc.attackrange.localC18100000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 95104200x8000000000000015429Applicationar-win-dc.attackrange.localmodel_msdb956957B70300000A0000000A000000610072002D00770069006E002D006400630000000B0000006D006F00640065006C005F006D007300640062000000 95104200x8000000000000015428Applicationar-win-dc.attackrange.localmodel_msdb955956B70300000A0000000A000000610072002D00770069006E002D006400630000000B0000006D006F00640065006C005F006D007300640062000000 95104200x8000000000000015427Applicationar-win-dc.attackrange.localmodel_msdb954955B70300000A0000000A000000610072002D00770069006E002D006400630000000B0000006D006F00640065006C005F006D007300640062000000 95104200x8000000000000015426Applicationar-win-dc.attackrange.localmodel_msdb953954B70300000A0000000A000000610072002D00770069006E002D006400630000000B0000006D006F00640065006C005F006D007300640062000000 95104200x8000000000000015425Applicationar-win-dc.attackrange.localmodel_msdb952953B70300000A0000000A000000610072002D00770069006E002D006400630000000B0000006D006F00640065006C005F006D007300640062000000 95104200x8000000000000015424Applicationar-win-dc.attackrange.localmodel_msdb951952B70300000A0000000A000000610072002D00770069006E002D006400630000000B0000006D006F00640065006C005F006D007300640062000000 95104200x8000000000000015423Applicationar-win-dc.attackrange.localmodel_msdb950951B70300000A0000000A000000610072002D00770069006E002D006400630000000B0000006D006F00640065006C005F006D007300640062000000 95104200x8000000000000015422Applicationar-win-dc.attackrange.localmodel_msdb949950B70300000A0000000A000000610072002D00770069006E002D006400630000000B0000006D006F00640065006C005F006D007300640062000000 95104200x8000000000000015421Applicationar-win-dc.attackrange.localmodel_msdb948949B70300000A0000000A000000610072002D00770069006E002D006400630000000B0000006D006F00640065006C005F006D007300640062000000 95104200x8000000000000015420Applicationar-win-dc.attackrange.localmodel_msdb947948B70300000A0000000A000000610072002D00770069006E002D006400630000000B0000006D006F00640065006C005F006D007300640062000000 95104200x8000000000000015419Applicationar-win-dc.attackrange.localmodel_msdb946947B70300000A0000000A000000610072002D00770069006E002D006400630000000B0000006D006F00640065006C005F006D007300640062000000 95104200x8000000000000015418Applicationar-win-dc.attackrange.localmodel_msdb945946B70300000A0000000A000000610072002D00770069006E002D006400630000000B0000006D006F00640065006C005F006D007300640062000000 95104200x8000000000000015417Applicationar-win-dc.attackrange.localmodel_msdb944945B70300000A0000000A000000610072002D00770069006E002D006400630000000B0000006D006F00640065006C005F006D007300640062000000 95104200x8000000000000015416Applicationar-win-dc.attackrange.localmodel_msdb943944B70300000A0000000A000000610072002D00770069006E002D006400630000000B0000006D006F00640065006C005F006D007300640062000000 95104200x8000000000000015415Applicationar-win-dc.attackrange.localmodel_msdb942943B70300000A0000000A000000610072002D00770069006E002D006400630000000B0000006D006F00640065006C005F006D007300640062000000 95104200x8000000000000015414Applicationar-win-dc.attackrange.localmodel_msdb941942B70300000A0000000A000000610072002D00770069006E002D006400630000000B0000006D006F00640065006C005F006D007300640062000000 95104200x8000000000000015413Applicationar-win-dc.attackrange.localmodel_msdb940941B70300000A0000000A000000610072002D00770069006E002D006400630000000B0000006D006F00640065006C005F006D007300640062000000 95104200x8000000000000015412Applicationar-win-dc.attackrange.localmodel_msdb939940B70300000A0000000A000000610072002D00770069006E002D006400630000000B0000006D006F00640065006C005F006D007300640062000000 95104200x8000000000000015411Applicationar-win-dc.attackrange.localmodel_msdb938939B70300000A0000000A000000610072002D00770069006E002D006400630000000B0000006D006F00640065006C005F006D007300640062000000 95104200x8000000000000015410Applicationar-win-dc.attackrange.localmodel_msdb937938B70300000A0000000A000000610072002D00770069006E002D006400630000000B0000006D006F00640065006C005F006D007300640062000000 95104200x8000000000000015409Applicationar-win-dc.attackrange.localmodel_msdb936937B70300000A0000000A000000610072002D00770069006E002D006400630000000B0000006D006F00640065006C005F006D007300640062000000 95104200x8000000000000015408Applicationar-win-dc.attackrange.localmodel_msdb935936B70300000A0000000A000000610072002D00770069006E002D006400630000000B0000006D006F00640065006C005F006D007300640062000000 95104200x8000000000000015407Applicationar-win-dc.attackrange.localmodel_msdb934935B70300000A0000000A000000610072002D00770069006E002D006400630000000B0000006D006F00640065006C005F006D007300640062000000 95104200x8000000000000015406Applicationar-win-dc.attackrange.localmodel_msdb933934B70300000A0000000A000000610072002D00770069006E002D006400630000000B0000006D006F00640065006C005F006D007300640062000000 95104200x8000000000000015405Applicationar-win-dc.attackrange.localmodel_msdb932933B70300000A0000000A000000610072002D00770069006E002D006400630000000B0000006D006F00640065006C005F006D007300640062000000 95104200x8000000000000015404Applicationar-win-dc.attackrange.localmodel_msdb931932B70300000A0000000A000000610072002D00770069006E002D006400630000000B0000006D006F00640065006C005F006D007300640062000000 95104200x8000000000000015403Applicationar-win-dc.attackrange.localmodel_msdb930931B70300000A0000000A000000610072002D00770069006E002D006400630000000B0000006D006F00640065006C005F006D007300640062000000 95104200x8000000000000015402Applicationar-win-dc.attackrange.localmodel_msdb929930B70300000A0000000A000000610072002D00770069006E002D006400630000000B0000006D006F00640065006C005F006D007300640062000000 95104200x8000000000000015401Applicationar-win-dc.attackrange.localmodel_msdb928929B70300000A0000000A000000610072002D00770069006E002D006400630000000B0000006D006F00640065006C005F006D007300640062000000 95104200x8000000000000015400Applicationar-win-dc.attackrange.localmodel_msdb927928B70300000A0000000A000000610072002D00770069006E002D006400630000000B0000006D006F00640065006C005F006D007300640062000000 94404200x8000000000000015399Applicationar-win-dc.attackrange.localmodel_msdb927957B00300000A0000000A000000610072002D00770069006E002D006400630000000B0000006D006F00640065006C005F006D007300640062000000 2606704200x8000000000000015398Applicationar-win-dc.attackrange.localMSSQLSvc/ar-win-dc.attackrange.local:14330x209815D36500000A0000000A000000610072002D00770069006E002D0064006300000000000000 2606704200x8000000000000015397Applicationar-win-dc.attackrange.localMSSQLSvc/ar-win-dc.attackrange.local0x209815D36500000A0000000A000000610072002D00770069006E002D0064006300000000000000 1713704200x8000000000000015396Applicationar-win-dc.attackrange.localmodel_msdbF14200000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 2607604200x8000000000000015395Applicationar-win-dc.attackrange.localDC6500000A0000000A000000610072002D00770069006E002D0064006300000000000000 1712604200x8000000000000015394Applicationar-win-dc.attackrange.localE64200000A0000000A000000610072002D00770069006E002D0064006300000000000000 1719904200x8000000000000015393Applicationar-win-dc.attackrange.local78062F4300000A0000000A000000610072002D00770069006E002D0064006300000000000000 2604804200x8000000000000015392Applicationar-win-dc.attackrange.local\\.\pipe\SQLLocal\MSSQLSERVERC06500000A0000000A000000610072002D00770069006E002D0064006300000000000000 2601804200x8000000000000015391Applicationar-win-dc.attackrange.localA26500000A0000000A000000610072002D00770069006E002D0064006300000000000000 95104200x8000000000000015390Applicationar-win-dc.attackrange.localmodel_replicatedmaster956957B70300000A0000000A000000610072002D00770069006E002D00640063000000170000006D006F00640065006C005F007200650070006C006900630061007400650064006D00610073007400650072000000 95104200x8000000000000015389Applicationar-win-dc.attackrange.localmodel956957B70300000A0000000A000000610072002D00770069006E002D00640063000000060000006D006F00640065006C000000 95104200x8000000000000015388Applicationar-win-dc.attackrange.localmodel_replicatedmaster955956B70300000A0000000A000000610072002D00770069006E002D00640063000000170000006D006F00640065006C005F007200650070006C006900630061007400650064006D00610073007400650072000000 95104200x8000000000000015387Applicationar-win-dc.attackrange.localmodel_replicatedmaster954955B70300000A0000000A000000610072002D00770069006E002D00640063000000170000006D006F00640065006C005F007200650070006C006900630061007400650064006D00610073007400650072000000 95104200x8000000000000015386Applicationar-win-dc.attackrange.localmodel_replicatedmaster953954B70300000A0000000A000000610072002D00770069006E002D00640063000000170000006D006F00640065006C005F007200650070006C006900630061007400650064006D00610073007400650072000000 95104200x8000000000000015385Applicationar-win-dc.attackrange.localmodel_replicatedmaster952953B70300000A0000000A000000610072002D00770069006E002D00640063000000170000006D006F00640065006C005F007200650070006C006900630061007400650064006D00610073007400650072000000 95104200x8000000000000015384Applicationar-win-dc.attackrange.localmodel955956B70300000A0000000A000000610072002D00770069006E002D00640063000000060000006D006F00640065006C000000 95104200x8000000000000015383Applicationar-win-dc.attackrange.localmodel_replicatedmaster951952B70300000A0000000A000000610072002D00770069006E002D00640063000000170000006D006F00640065006C005F007200650070006C006900630061007400650064006D00610073007400650072000000 95104200x8000000000000015382Applicationar-win-dc.attackrange.localmodel954955B70300000A0000000A000000610072002D00770069006E002D00640063000000060000006D006F00640065006C000000 95104200x8000000000000015381Applicationar-win-dc.attackrange.localmodel953954B70300000A0000000A000000610072002D00770069006E002D00640063000000060000006D006F00640065006C000000 95104200x8000000000000015380Applicationar-win-dc.attackrange.localmodel952953B70300000A0000000A000000610072002D00770069006E002D00640063000000060000006D006F00640065006C000000 95104200x8000000000000015379Applicationar-win-dc.attackrange.localmodel951952B70300000A0000000A000000610072002D00770069006E002D00640063000000060000006D006F00640065006C000000 95104200x8000000000000015378Applicationar-win-dc.attackrange.localmodel_replicatedmaster950951B70300000A0000000A000000610072002D00770069006E002D00640063000000170000006D006F00640065006C005F007200650070006C006900630061007400650064006D00610073007400650072000000 95104200x8000000000000015377Applicationar-win-dc.attackrange.localmodel_replicatedmaster949950B70300000A0000000A000000610072002D00770069006E002D00640063000000170000006D006F00640065006C005F007200650070006C006900630061007400650064006D00610073007400650072000000 95104200x8000000000000015376Applicationar-win-dc.attackrange.localmodel_replicatedmaster948949B70300000A0000000A000000610072002D00770069006E002D00640063000000170000006D006F00640065006C005F007200650070006C006900630061007400650064006D00610073007400650072000000 95104200x8000000000000015375Applicationar-win-dc.attackrange.localmodel_replicatedmaster947948B70300000A0000000A000000610072002D00770069006E002D00640063000000170000006D006F00640065006C005F007200650070006C006900630061007400650064006D00610073007400650072000000 95104200x8000000000000015374Applicationar-win-dc.attackrange.localmodel_replicatedmaster946947B70300000A0000000A000000610072002D00770069006E002D00640063000000170000006D006F00640065006C005F007200650070006C006900630061007400650064006D00610073007400650072000000 95104200x8000000000000015373Applicationar-win-dc.attackrange.localmodel950951B70300000A0000000A000000610072002D00770069006E002D00640063000000060000006D006F00640065006C000000 95104200x8000000000000015372Applicationar-win-dc.attackrange.localmodel_replicatedmaster945946B70300000A0000000A000000610072002D00770069006E002D00640063000000170000006D006F00640065006C005F007200650070006C006900630061007400650064006D00610073007400650072000000 95104200x8000000000000015371Applicationar-win-dc.attackrange.localmodel949950B70300000A0000000A000000610072002D00770069006E002D00640063000000060000006D006F00640065006C000000 95104200x8000000000000015370Applicationar-win-dc.attackrange.localmodel948949B70300000A0000000A000000610072002D00770069006E002D00640063000000060000006D006F00640065006C000000 95104200x8000000000000015369Applicationar-win-dc.attackrange.localmodel947948B70300000A0000000A000000610072002D00770069006E002D00640063000000060000006D006F00640065006C000000 95104200x8000000000000015368Applicationar-win-dc.attackrange.localmodel_replicatedmaster944945B70300000A0000000A000000610072002D00770069006E002D00640063000000170000006D006F00640065006C005F007200650070006C006900630061007400650064006D00610073007400650072000000 95104200x8000000000000015367Applicationar-win-dc.attackrange.localmodel946947B70300000A0000000A000000610072002D00770069006E002D00640063000000060000006D006F00640065006C000000 95104200x8000000000000015366Applicationar-win-dc.attackrange.localmodel_replicatedmaster943944B70300000A0000000A000000610072002D00770069006E002D00640063000000170000006D006F00640065006C005F007200650070006C006900630061007400650064006D00610073007400650072000000 95104200x8000000000000015365Applicationar-win-dc.attackrange.localmodel945946B70300000A0000000A000000610072002D00770069006E002D00640063000000060000006D006F00640065006C000000 95104200x8000000000000015364Applicationar-win-dc.attackrange.localmodel944945B70300000A0000000A000000610072002D00770069006E002D00640063000000060000006D006F00640065006C000000 95104200x8000000000000015363Applicationar-win-dc.attackrange.localmodel943944B70300000A0000000A000000610072002D00770069006E002D00640063000000060000006D006F00640065006C000000 95104200x8000000000000015362Applicationar-win-dc.attackrange.localmodel942943B70300000A0000000A000000610072002D00770069006E002D00640063000000060000006D006F00640065006C000000 95104200x8000000000000015361Applicationar-win-dc.attackrange.localmodel_replicatedmaster942943B70300000A0000000A000000610072002D00770069006E002D00640063000000170000006D006F00640065006C005F007200650070006C006900630061007400650064006D00610073007400650072000000 95104200x8000000000000015360Applicationar-win-dc.attackrange.localmodel941942B70300000A0000000A000000610072002D00770069006E002D00640063000000060000006D006F00640065006C000000 95104200x8000000000000015359Applicationar-win-dc.attackrange.localmodel_replicatedmaster941942B70300000A0000000A000000610072002D00770069006E002D00640063000000170000006D006F00640065006C005F007200650070006C006900630061007400650064006D00610073007400650072000000 95104200x8000000000000015358Applicationar-win-dc.attackrange.localmodel940941B70300000A0000000A000000610072002D00770069006E002D00640063000000060000006D006F00640065006C000000 95104200x8000000000000015357Applicationar-win-dc.attackrange.localmodel_replicatedmaster940941B70300000A0000000A000000610072002D00770069006E002D00640063000000170000006D006F00640065006C005F007200650070006C006900630061007400650064006D00610073007400650072000000 95104200x8000000000000015356Applicationar-win-dc.attackrange.localmodel939940B70300000A0000000A000000610072002D00770069006E002D00640063000000060000006D006F00640065006C000000 95104200x8000000000000015355Applicationar-win-dc.attackrange.localmodel_replicatedmaster939940B70300000A0000000A000000610072002D00770069006E002D00640063000000170000006D006F00640065006C005F007200650070006C006900630061007400650064006D00610073007400650072000000 95104200x8000000000000015354Applicationar-win-dc.attackrange.localmodel938939B70300000A0000000A000000610072002D00770069006E002D00640063000000060000006D006F00640065006C000000 95104200x8000000000000015353Applicationar-win-dc.attackrange.localmodel_replicatedmaster938939B70300000A0000000A000000610072002D00770069006E002D00640063000000170000006D006F00640065006C005F007200650070006C006900630061007400650064006D00610073007400650072000000 95104200x8000000000000015352Applicationar-win-dc.attackrange.localmodel937938B70300000A0000000A000000610072002D00770069006E002D00640063000000060000006D006F00640065006C000000 95104200x8000000000000015351Applicationar-win-dc.attackrange.localmodel_replicatedmaster937938B70300000A0000000A000000610072002D00770069006E002D00640063000000170000006D006F00640065006C005F007200650070006C006900630061007400650064006D00610073007400650072000000 95104200x8000000000000015350Applicationar-win-dc.attackrange.localmodel936937B70300000A0000000A000000610072002D00770069006E002D00640063000000060000006D006F00640065006C000000 95104200x8000000000000015349Applicationar-win-dc.attackrange.localmodel_replicatedmaster936937B70300000A0000000A000000610072002D00770069006E002D00640063000000170000006D006F00640065006C005F007200650070006C006900630061007400650064006D00610073007400650072000000 95104200x8000000000000015348Applicationar-win-dc.attackrange.localmodel935936B70300000A0000000A000000610072002D00770069006E002D00640063000000060000006D006F00640065006C000000 95104200x8000000000000015347Applicationar-win-dc.attackrange.localmodel_replicatedmaster935936B70300000A0000000A000000610072002D00770069006E002D00640063000000170000006D006F00640065006C005F007200650070006C006900630061007400650064006D00610073007400650072000000 95104200x8000000000000015346Applicationar-win-dc.attackrange.localmodel934935B70300000A0000000A000000610072002D00770069006E002D00640063000000060000006D006F00640065006C000000 95104200x8000000000000015345Applicationar-win-dc.attackrange.localmodel_replicatedmaster934935B70300000A0000000A000000610072002D00770069006E002D00640063000000170000006D006F00640065006C005F007200650070006C006900630061007400650064006D00610073007400650072000000 95104200x8000000000000015344Applicationar-win-dc.attackrange.localmodel933934B70300000A0000000A000000610072002D00770069006E002D00640063000000060000006D006F00640065006C000000 95104200x8000000000000015343Applicationar-win-dc.attackrange.localmodel_replicatedmaster933934B70300000A0000000A000000610072002D00770069006E002D00640063000000170000006D006F00640065006C005F007200650070006C006900630061007400650064006D00610073007400650072000000 95104200x8000000000000015342Applicationar-win-dc.attackrange.localmodel932933B70300000A0000000A000000610072002D00770069006E002D00640063000000060000006D006F00640065006C000000 95104200x8000000000000015341Applicationar-win-dc.attackrange.localmodel931932B70300000A0000000A000000610072002D00770069006E002D00640063000000060000006D006F00640065006C000000 95104200x8000000000000015340Applicationar-win-dc.attackrange.localmodel_replicatedmaster932933B70300000A0000000A000000610072002D00770069006E002D00640063000000170000006D006F00640065006C005F007200650070006C006900630061007400650064006D00610073007400650072000000 95104200x8000000000000015339Applicationar-win-dc.attackrange.localmodel_replicatedmaster931932B70300000A0000000A000000610072002D00770069006E002D00640063000000170000006D006F00640065006C005F007200650070006C006900630061007400650064006D00610073007400650072000000 95104200x8000000000000015338Applicationar-win-dc.attackrange.localmodel930931B70300000A0000000A000000610072002D00770069006E002D00640063000000060000006D006F00640065006C000000 95104200x8000000000000015337Applicationar-win-dc.attackrange.localmodel_replicatedmaster930931B70300000A0000000A000000610072002D00770069006E002D00640063000000170000006D006F00640065006C005F007200650070006C006900630061007400650064006D00610073007400650072000000 95104200x8000000000000015336Applicationar-win-dc.attackrange.localmodel929930B70300000A0000000A000000610072002D00770069006E002D00640063000000060000006D006F00640065006C000000 95104200x8000000000000015335Applicationar-win-dc.attackrange.localmodel_replicatedmaster929930B70300000A0000000A000000610072002D00770069006E002D00640063000000170000006D006F00640065006C005F007200650070006C006900630061007400650064006D00610073007400650072000000 95104200x8000000000000015334Applicationar-win-dc.attackrange.localmodel928929B70300000A0000000A000000610072002D00770069006E002D00640063000000060000006D006F00640065006C000000 95104200x8000000000000015333Applicationar-win-dc.attackrange.localmodel927928B70300000A0000000A000000610072002D00770069006E002D00640063000000060000006D006F00640065006C000000 94404200x8000000000000015332Applicationar-win-dc.attackrange.localmodel927957B00300000A0000000A000000610072002D00770069006E002D00640063000000060000006D006F00640065006C000000 95104200x8000000000000015331Applicationar-win-dc.attackrange.localmodel_replicatedmaster928929B70300000A0000000A000000610072002D00770069006E002D00640063000000170000006D006F00640065006C005F007200650070006C006900630061007400650064006D00610073007400650072000000 95104200x8000000000000015330Applicationar-win-dc.attackrange.localmodel_replicatedmaster927928B70300000A0000000A000000610072002D00770069006E002D00640063000000170000006D006F00640065006C005F007200650070006C006900630061007400650064006D00610073007400650072000000 94404200x8000000000000015329Applicationar-win-dc.attackrange.localmodel_replicatedmaster927957B00300000A0000000A000000610072002D00770069006E002D00640063000000170000006D006F00640065006C005F007200650070006C006900630061007400650064006D00610073007400650072000000 901304200x8000000000000015328Applicationar-win-dc.attackrange.localmodel4096204875776C:\Program Files\Microsoft SQL Server\MSSQL16.MSSQLSERVER\MSSQL\DATA\modellog.ldf352300000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 901304200x8000000000000015327Applicationar-win-dc.attackrange.localmodel_replicatedmaster40962048100352C:\Program Files\Microsoft SQL Server\MSSQL16.MSSQLSERVER\MSSQL\DATA\model_replicatedmaster.ldf352300000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 1713704200x8000000000000015326Applicationar-win-dc.attackrange.localmodelF14200000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 1713704200x8000000000000015325Applicationar-win-dc.attackrange.localmodel_replicatedmasterF14200000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 4996104200x8000000000000015324Applicationar-win-dc.attackrange.localFORCE C:\Program Files\Microsoft SQL Server\MSSQL16.MSSQLSERVER\MSSQL\Binn\Templates\model_msdblog.ldfC:\Program Files\Microsoft SQL Server\MSSQL16.MSSQLSERVER\MSSQL\DATA\model_msdblog.ldf29C300000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 95804200x8000000000000015323Applicationar-win-dc.attackrange.local16.00.1000BE0300000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 4996104200x8000000000000015322Applicationar-win-dc.attackrange.localFORCE C:\Program Files\Microsoft SQL Server\MSSQL16.MSSQLSERVER\MSSQL\Binn\Templates\model_msdbdata.mdfC:\Program Files\Microsoft SQL Server\MSSQL16.MSSQLSERVER\MSSQL\DATA\model_msdbdata.mdf29C300000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 4996104200x8000000000000015321Applicationar-win-dc.attackrange.localFORCE C:\Program Files\Microsoft SQL Server\MSSQL16.MSSQLSERVER\MSSQL\Binn\Templates\model_replicatedmaster.ldfC:\Program Files\Microsoft SQL Server\MSSQL16.MSSQLSERVER\MSSQL\DATA\model_replicatedmaster.ldf29C300000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 1710804200x8000000000000015320Applicationar-win-dc.attackrange.localD44200000A0000000A000000610072002D00770069006E002D0064006300000000000000 1713704200x8000000000000015319Applicationar-win-dc.attackrange.localmssqlsystemresourceF14200000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 4996104200x8000000000000015318Applicationar-win-dc.attackrange.localFORCE C:\Program Files\Microsoft SQL Server\MSSQL16.MSSQLSERVER\MSSQL\Binn\Templates\model_replicatedmaster.mdfC:\Program Files\Microsoft SQL Server\MSSQL16.MSSQLSERVER\MSSQL\DATA\model_replicatedmaster.mdf29C300000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 95104200x8000000000000015317Applicationar-win-dc.attackrange.localmaster956957B70300000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 95104200x8000000000000015316Applicationar-win-dc.attackrange.localmaster955956B70300000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 95104200x8000000000000015315Applicationar-win-dc.attackrange.localmaster954955B70300000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 95104200x8000000000000015314Applicationar-win-dc.attackrange.localmaster953954B70300000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 95104200x8000000000000015313Applicationar-win-dc.attackrange.localmaster952953B70300000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 95104200x8000000000000015312Applicationar-win-dc.attackrange.localmaster951952B70300000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 95104200x8000000000000015311Applicationar-win-dc.attackrange.localmaster950951B70300000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 95104200x8000000000000015310Applicationar-win-dc.attackrange.localmaster949950B70300000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 95104200x8000000000000015309Applicationar-win-dc.attackrange.localmaster948949B70300000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 95104200x8000000000000015308Applicationar-win-dc.attackrange.localmaster947948B70300000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 95104200x8000000000000015307Applicationar-win-dc.attackrange.localmaster946947B70300000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 95104200x8000000000000015306Applicationar-win-dc.attackrange.localmaster945946B70300000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 95104200x8000000000000015305Applicationar-win-dc.attackrange.localmaster944945B70300000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 95104200x8000000000000015304Applicationar-win-dc.attackrange.localmaster943944B70300000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 95104200x8000000000000015303Applicationar-win-dc.attackrange.localmaster942943B70300000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 95104200x8000000000000015302Applicationar-win-dc.attackrange.localmaster941942B70300000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 95104200x8000000000000015301Applicationar-win-dc.attackrange.localmaster940941B70300000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 95104200x8000000000000015300Applicationar-win-dc.attackrange.localmaster939940B70300000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 95104200x8000000000000015299Applicationar-win-dc.attackrange.localmaster938939B70300000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 95104200x8000000000000015298Applicationar-win-dc.attackrange.localmaster937938B70300000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 95104200x8000000000000015297Applicationar-win-dc.attackrange.localmaster936937B70300000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 95104200x8000000000000015296Applicationar-win-dc.attackrange.localmaster935936B70300000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 95104200x8000000000000015295Applicationar-win-dc.attackrange.localmaster934935B70300000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 95104200x8000000000000015294Applicationar-win-dc.attackrange.localmaster933934B70300000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 95104200x8000000000000015293Applicationar-win-dc.attackrange.localmaster932933B70300000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 95104200x8000000000000015292Applicationar-win-dc.attackrange.localmaster931932B70300000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 95104200x8000000000000015291Applicationar-win-dc.attackrange.localmaster930931B70300000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 95104200x8000000000000015290Applicationar-win-dc.attackrange.localmaster929930B70300000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 95104200x8000000000000015289Applicationar-win-dc.attackrange.localmaster928929B70300000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 95104200x8000000000000015288Applicationar-win-dc.attackrange.localmaster927928B70300000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 94404200x8000000000000015287Applicationar-win-dc.attackrange.localmaster927957B00300000A0000000A000000610072002D00770069006E002D00640063000000070000006D00610073007400650072000000 625304200x8000000000000015286Applicationar-win-dc.attackrange.localv4.0.30319C:\Windows\Microsoft.NET\Framework64\v4.0.30319\6D1800000A0000000A000000610072002D00770069006E002D0064006300000000000000 901304200x8000000000000015285Applicationar-win-dc.attackrange.localmaster40963072390144C:\Program Files\Microsoft SQL Server\MSSQL16.MSSQLSERVER\MSSQL\DATA\mastlog.ldf352300000A0000000A000000610072002D00770069006E002D0064006300000000000000 1713704200x8000000000000015284Applicationar-win-dc.attackrange.localmasterF14200000A0000000A000000610072002D00770069006E002D0064006300000000000000 1765804200x8000000000000015283Applicationar-win-dc.attackrange.localFA4400000A0000000A000000610072002D00770069006E002D0064006300000000000000 1765604200x8000000000000015282Applicationar-win-dc.attackrange.localF84400000A0000000A000000610072002D00770069006E002D0064006300000000000000 904804200x8000000000000015281Applicationar-win-dc.attackrange.localclwb582300000A0000000A000000610072002D00770069006E002D0064006300000000000000 148604200x8000000000000015280Applicationar-win-dc.attackrange.localCE0500000A0000000A000000610072002D00770069006E002D0064006300000000000000 1711804200x8000000000000015279Applicationar-win-dc.attackrange.localenabledDE4200000A0000000A000000610072002D00770069006E002D0064006300000000000000 1712504200x8000000000000015278Applicationar-win-dc.attackrange.local25005000E54200000A0000000A000000610072002D00770069006E002D0064006300000000000000 1715204200x8000000000000015277Applicationar-win-dc.attackrange.local000000000000000ff000000000000000ff0004300000A0000000A000000610072002D00770069006E002D0064006300000000000000 1781104200x8000000000000015276Applicationar-win-dc.attackrange.local1934500000A0000000A000000610072002D00770069006E002D0064006300000000000000 1710704200x8000000000000015275Applicationar-win-dc.attackrange.localD34200000A0000000A000000610072002D00770069006E002D0064006300000000000000 1726404200x8000000000000015274Applicationar-win-dc.attackrange.localSSE SSE2 SSE3 SSSE3 SSE41 SSE42 AVX AVX2 POPCNT BMI1 BMI2 AVX512 (F CD BW DQ VL)704300000A0000000A000000610072002D00770069006E002D0064006300000000000000 87304200x8000000000000015273Applicationar-win-dc.attackrange.local690300000A0000000A000000610072002D00770069006E002D0064006300000000000000 4991704200x8000000000000015272Applicationar-win-dc.attackrange.localSQL_Latin1_General_CP1_CI_ASus_english1033FDC200000A0000000A000000610072002D00770069006E002D0064006300000000000000 89404200x8000000000000015271Applicationar-win-dc.attackrange.local838860851128837E0300000A0000000A000000610072002D00770069006E002D0064006300000000000000 85204200x8000000000000015270Applicationar-win-dc.attackrange.local540300000A0000000A000000610072002D00770069006E002D0064006300000000000000 4990304200x8000000000000015269Applicationar-win-dc.attackrange.local31955EFC200000A0000000A000000610072002D00770069006E002D0064006300000000000000 1716204200x8000000000000015268Applicationar-win-dc.attackrange.local0A4300000A0000000A000000610072002D00770069006E002D0064006300000000000000 1716404200x8000000000000015267Applicationar-win-dc.attackrange.local148880C4300000A0000000A000000610072002D00770069006E002D0064006300000000000000 1711504200x8000000000000015266Applicationar-win-dc.attackrange.local -s "MSSQLSERVER" -m "SqlSetup" -Q -q "SQL_Latin1_General_CP1_CI_AS" -T 4022 -T 4010 -T 3659 -T 3610 -T 8015DB4200000A0000000A000000610072002D00770069006E002D0064006300000000000000 1711004200x8000000000000015265Applicationar-win-dc.attackrange.local -d C:\Program Files\Microsoft SQL Server\MSSQL16.MSSQLSERVER\MSSQL\DATA\master.mdf -e C:\Program Files\Microsoft SQL Server\MSSQL16.MSSQLSERVER\MSSQL\Log\ERRORLOG -l C:\Program Files\Microsoft SQL Server\MSSQL16.MSSQLSERVER\MSSQL\DATA\mastlog.ldfD64200000A0000000A000000610072002D00770069006E002D0064006300000000000000 4990404200x8000000000000015264Applicationar-win-dc.attackrange.localNT Service\MSSQLSERVERF0C200000A0000000A000000610072002D00770069006E002D0064006300000000000000 1711104200x8000000000000015263Applicationar-win-dc.attackrange.localC:\Program Files\Microsoft SQL Server\MSSQL16.MSSQLSERVER\MSSQL\Log\ERRORLOGD74200000A0000000A000000610072002D00770069006E002D0064006300000000000000 1526804200x8000000000000015262Applicationar-win-dc.attackrange.localMIXEDA43B00000A0000000A000000610072002D00770069006E002D0064006300000000000000 1849604200x8000000000000015261Applicationar-win-dc.attackrange.localAmazon EC2m5.2xlarge404800000A0000000A000000610072002D00770069006E002D0064006300000000000000 1710404200x8000000000000015260Applicationar-win-dc.attackrange.local2128D04200000A0000000A000000610072002D00770069006E002D0064006300000000000000 1710304200x8000000000000015259Applicationar-win-dc.attackrange.localCF4200000A0000000A000000610072002D00770069006E002D0064006300000000000000 1710104200x8000000000000015258Applicationar-win-dc.attackrange.localCD4200000A0000000A000000610072002D00770069006E002D0064006300000000000000 4991604200x8000000000000015257Applicationar-win-dc.attackrange.local000FCC200000A0000000A000000610072002D00770069006E002D0064006300000000000000 1706904200x8000000000000015256Applicationar-win-dc.attackrange.localMicrosoft SQL Server 2022 (RTM) - 16.0.1000.6 (X64) Oct 8 2022 05:58:25 Copyright (C) 2022 Microsoft Corporation Developer Edition (64-bit) on Windows Server 2022 Datacenter 10.0 <X64> (Build 20348: ) (Hypervisor) AD4200000A0000000A000000610072002D00770069006E002D0064006300000000000000 504000x8000000000000015255Applicationar-win-dc.attackrange.localNT SERVICE\MSSQLSERVER 100004000x800000000000000015254Applicationar-win-dc.attackrange.localSQLSERVERAGENTSQL Server Agent (MSSQLSERVER)16B8480000E4480000B9480000E5480000 100004000x800000000000000015253Applicationar-win-dc.attackrange.localMSSQLSERVERSQL Server (MSSQLSERVER)16A4420000B6480000A5420000B7480000 6323000x800000000000000015252Applicationar-win-dc.attackrange.localSQLServerEventProviderroot\Microsoft\SqlServer\ServerEvents\MSSQLSERVER 6323000x800000000000000015251Applicationar-win-dc.attackrange.localSQLServerEventProviderroot\Microsoft\SqlServer\ServerEvents\MSSQLSERVER 100004000x800000000000000015250Applicationar-win-dc.attackrange.local{cffbe088-55d3-41ce-9fbf-e887d5ff10ab}SQL Server 2022 XTP Database Engine0 1000104000x800000000000000015249Applicationar-win-dc.attackrange.local02025-02-04T01:23:15.7530987Z 104204000x8000000000000015246Applicationar-win-dc.attackrange.localC:\SQL2022\Developer_ENU\1033_ENU_LP\x64\setup\sql_engine_core_inst_loc.msi7128(NULL)(NULL)(NULL)(NULL) 103304000x8000000000000015245Applicationar-win-dc.attackrange.localSQL Server 2022 Database Engine Services16.0.1000.610330Microsoft Corporation(NULL)7B43344346313637432D343733392D344133412D384437352D3539433943354631333543417D3030303036653636353763366436633632623162663635666130666233303535656430383030303030393034 1170704000x8000000000000015244Applicationar-win-dc.attackrange.localProduct: SQL Server 2022 Database Engine Services -- Installation completed successfully.(NULL)(NULL)(NULL)(NULL)(NULL)7B43344346313637432D343733392D344133412D384437352D3539433943354631333543417D 1000004000x800000000000000015248Applicationar-win-dc.attackrange.local02025-02-04T01:23:15.7530987Z 1000104000x800000000000000015247Applicationar-win-dc.attackrange.local02025-02-04T01:23:08.8360170Z 1172404000x8000000000000015243Applicationar-win-dc.attackrange.localProduct: SQL Server 2022 Database Engine Services -- Install started. 104004000x8000000000000015242Applicationar-win-dc.attackrange.localC:\SQL2022\Developer_ENU\1033_ENU_LP\x64\setup\sql_engine_core_inst_loc.msi7128(NULL)(NULL)(NULL)(NULL) 104204000x8000000000000015241Applicationar-win-dc.attackrange.localC:\SQL2022\Developer_ENU\x64\setup\sql_engine_core_inst.msi7128(NULL)(NULL)(NULL)(NULL) 103304000x8000000000000015240Applicationar-win-dc.attackrange.localSQL Server 2022 Database Engine Services16.0.1000.610330Microsoft Corporation(NULL)7B36363231433736352D353639432D344434362D413845392D4336394134373937313335377D3030303036653636353763366436633632623162663635666130666233303535656430383030303030393034 1170704000x8000000000000015239Applicationar-win-dc.attackrange.localProduct: SQL Server 2022 Database Engine Services -- Installation completed successfully.(NULL)(NULL)(NULL)(NULL)(NULL)7B36363231433736352D353639432D344434362D413845392D4336394134373937313335377D 1000004000x800000000000000015238Applicationar-win-dc.attackrange.local02025-02-04T01:23:08.8360170Z 1172404000x8000000000000015237Applicationar-win-dc.attackrange.localProduct: SQL Server 2022 Database Engine Services -- Install started. 104004000x8000000000000015234Applicationar-win-dc.attackrange.localC:\SQL2022\Developer_ENU\x64\setup\sql_engine_core_inst.msi7128(NULL)(NULL)(NULL)(NULL) 1000104000x800000000000000015236Applicationar-win-dc.attackrange.local02025-02-04T01:23:07.1635972Z 1000004000x800000000000000015235Applicationar-win-dc.attackrange.local02025-02-04T01:23:07.1635972Z 104204000x8000000000000015233Applicationar-win-dc.attackrange.localC:\SQL2022\Developer_ENU\x64\setup\RsFx.msi7128(NULL)(NULL)(NULL)(NULL) 103304000x8000000000000015232Applicationar-win-dc.attackrange.localMicrosoft SQL Server 2022 RsFx Driver16.0.1000.610330Microsoft Corporation(NULL)7B36323943384643392D333736332D344335382D383236342D3532383841453334414645467D3030303031323633316533643764356262616262383636376463363664646636396231653030303030393034 1170704000x8000000000000015231Applicationar-win-dc.attackrange.localProduct: Microsoft SQL Server 2022 RsFx Driver -- Installation completed successfully.(NULL)(NULL)(NULL)(NULL)(NULL)7B36323943384643392D333736332D344335382D383236342D3532383841453334414645467D 104004000x8000000000000015230Applicationar-win-dc.attackrange.localC:\SQL2022\Developer_ENU\x64\setup\RsFx.msi7128(NULL)(NULL)(NULL)(NULL) 1000104000x800000000000000015229Applicationar-win-dc.attackrange.local02025-02-04T01:23:06.2060937Z 1000004000x800000000000000015228Applicationar-win-dc.attackrange.local02025-02-04T01:23:06.2060937Z 104204000x8000000000000015227Applicationar-win-dc.attackrange.localC:\SQL2022\Developer_ENU\1033_ENU_LP\x64\setup\sqlbrowser.msi7128(NULL)(NULL)(NULL)(NULL) 103304000x8000000000000015226Applicationar-win-dc.attackrange.localBrowser for SQL Server 202216.0.1000.610330Microsoft Corporation(NULL)7B46444233353744352D434337382D343830412D384432362D4331354431413837373634327D3030303061333861323436656539653465313966383735383365616532623766623265333030303030393034 1170704000x8000000000000015225Applicationar-win-dc.attackrange.localProduct: Browser for SQL Server 2022 -- Installation completed successfully.(NULL)(NULL)(NULL)(NULL)(NULL)7B46444233353744352D434337382D343830412D384432362D4331354431413837373634327D 104004000x8000000000000015224Applicationar-win-dc.attackrange.localC:\SQL2022\Developer_ENU\1033_ENU_LP\x64\setup\sqlbrowser.msi7128(NULL)(NULL)(NULL)(NULL) 1000104000x800000000000000015223Applicationar-win-dc.attackrange.local02025-02-04T01:23:04.2219673Z 104204000x8000000000000015222Applicationar-win-dc.attackrange.localC:\SQL2022\Developer_ENU\1033_ENU_LP\x64\setup\x64\SqlWriter.msi7128(NULL)(NULL)(NULL)(NULL) 103304000x8000000000000015221Applicationar-win-dc.attackrange.localMicrosoft VSS Writer for SQL Server 202216.0.1000.610330Microsoft Corporation(NULL)7B41423544383737382D383146332D343745322D383741342D3335453737364344363634427D3030303034363562396561663134316630636662613730626565613465643962366432393030303030393034 1170704000x8000000000000015220Applicationar-win-dc.attackrange.localProduct: Microsoft VSS Writer for SQL Server 2022 -- Installation completed successfully.(NULL)(NULL)(NULL)(NULL)(NULL)7B41423544383737382D383146332D343745322D383741342D3335453737364344363634427D 1000004000x800000000000000015219Applicationar-win-dc.attackrange.local02025-02-04T01:23:04.2219673Z 104004000x8000000000000015217Applicationar-win-dc.attackrange.localC:\SQL2022\Developer_ENU\1033_ENU_LP\x64\setup\x64\SqlWriter.msi7128(NULL)(NULL)(NULL)(NULL) 1000104000x800000000000000015218Applicationar-win-dc.attackrange.local02025-02-04T01:23:03.3778949Z 104204000x8000000000000015216Applicationar-win-dc.attackrange.localC:\SQL2022\Developer_ENU\1033_ENU_LP\x64\setup\x64\msodbcsql.msi7128(NULL)(NULL)(NULL)(NULL) 103304000x8000000000000015215Applicationar-win-dc.attackrange.localMicrosoft ODBC Driver 17 for SQL Server17.4.1.110330Microsoft Corporation(NULL)7B37324146414632312D333346422D343541352D393436382D4139454330373432374638327D3030303036366566666164653362366164343138356161656236353633343633353937653030303030393034 1170704000x8000000000000015214Applicationar-win-dc.attackrange.localProduct: Microsoft ODBC Driver 17 for SQL Server -- Installation completed successfully.(NULL)(NULL)(NULL)(NULL)(NULL)7B37324146414632312D333346422D343541352D393436382D4139454330373432374638327D 1000004000x800000000000000015213Applicationar-win-dc.attackrange.local02025-02-04T01:23:03.3778949Z 1000104000x800000000000000015212Applicationar-win-dc.attackrange.local02025-02-04T01:23:02.0967773Z 104004000x8000000000000015211Applicationar-win-dc.attackrange.localC:\SQL2022\Developer_ENU\1033_ENU_LP\x64\setup\x64\msodbcsql.msi7128(NULL)(NULL)(NULL)(NULL) 104204000x8000000000000015210Applicationar-win-dc.attackrange.localC:\SQL2022\Developer_ENU\1033_ENU_LP\x64\setup\sql_engine_core_shared_loc.msi7128(NULL)(NULL)(NULL)(NULL) 103304000x8000000000000015209Applicationar-win-dc.attackrange.localSQL Server 2022 Database Engine Shared16.0.1000.610330Microsoft Corporation(NULL)7B31363142384431322D433431422D344143462D394242352D4531464545363738383836397D3030303062343565326364303565396665663933376538656664373533633136303933633030303030393034 1170704000x8000000000000015208Applicationar-win-dc.attackrange.localProduct: SQL Server 2022 Database Engine Shared -- Installation completed successfully.(NULL)(NULL)(NULL)(NULL)(NULL)7B31363142384431322D433431422D344143462D394242352D4531464545363738383836397D 1000004000x800000000000000015207Applicationar-win-dc.attackrange.local02025-02-04T01:23:02.0967773Z 1172404000x8000000000000015205Applicationar-win-dc.attackrange.localProduct: SQL Server 2022 Database Engine Shared -- Install started. 104004000x8000000000000015204Applicationar-win-dc.attackrange.localC:\SQL2022\Developer_ENU\1033_ENU_LP\x64\setup\sql_engine_core_shared_loc.msi7128(NULL)(NULL)(NULL)(NULL) 1000104000x800000000000000015206Applicationar-win-dc.attackrange.local02025-02-04T01:23:01.1278109Z 104204000x8000000000000015203Applicationar-win-dc.attackrange.localC:\SQL2022\Developer_ENU\1033_ENU_LP\x64\setup\sql_common_core_loc.msi7128(NULL)(NULL)(NULL)(NULL) 103304000x8000000000000015202Applicationar-win-dc.attackrange.localSQL Server 2022 Common Files16.0.1000.610330Microsoft Corporation(NULL)7B38373730414636342D424234422D343430342D424444362D3641463845344334363146437D3030303033636630356635363236616561343239356533663731376237306464613931383030303030393034 1170704000x8000000000000015201Applicationar-win-dc.attackrange.localProduct: SQL Server 2022 Common Files -- Installation completed successfully.(NULL)(NULL)(NULL)(NULL)(NULL)7B38373730414636342D424234422D343430342D424444362D3641463845344334363146437D 1000004000x800000000000000015200Applicationar-win-dc.attackrange.local02025-02-04T01:23:01.1278109Z 1172404000x8000000000000015198Applicationar-win-dc.attackrange.localProduct: SQL Server 2022 Common Files -- Install started. 104004000x8000000000000015197Applicationar-win-dc.attackrange.localC:\SQL2022\Developer_ENU\1033_ENU_LP\x64\setup\sql_common_core_loc.msi7128(NULL)(NULL)(NULL)(NULL) 1000104000x800000000000000015199Applicationar-win-dc.attackrange.local02025-02-04T01:22:43.7369137Z 104204000x8000000000000015196Applicationar-win-dc.attackrange.localC:\SQL2022\Developer_ENU\x64\setup\sql_engine_core_shared.msi7128(NULL)(NULL)(NULL)(NULL) 103304000x8000000000000015195Applicationar-win-dc.attackrange.localSQL Server 2022 Database Engine Shared16.0.1000.610330Microsoft Corporation(NULL)7B44364538323135382D303542392D344131382D413632342D4541313335424337373736367D3030303062343565326364303565396665663933376538656664373533633136303933633030303030393034 1170704000x8000000000000015194Applicationar-win-dc.attackrange.localProduct: SQL Server 2022 Database Engine Shared -- Installation completed successfully.(NULL)(NULL)(NULL)(NULL)(NULL)7B44364538323135382D303542392D344131382D413632342D4541313335424337373736367D 1000004000x800000000000000015193Applicationar-win-dc.attackrange.local02025-02-04T01:22:43.7369137Z 1172404000x8000000000000015192Applicationar-win-dc.attackrange.localProduct: SQL Server 2022 Database Engine Shared -- Install started. 1000104000x800000000000000015191Applicationar-win-dc.attackrange.local02025-02-04T01:22:38.9246656Z 104004000x8000000000000015190Applicationar-win-dc.attackrange.localC:\SQL2022\Developer_ENU\x64\setup\sql_engine_core_shared.msi7128(NULL)(NULL)(NULL)(NULL) 104204000x8000000000000015189Applicationar-win-dc.attackrange.localC:\SQL2022\Developer_ENU\x64\setup\sql_common_core.msi7128(NULL)(NULL)(NULL)(NULL) 103304000x8000000000000015188Applicationar-win-dc.attackrange.localSQL Server 2022 Common Files16.0.1000.610330Microsoft Corporation(NULL)7B36413638443332432D344330442D343834372D423730432D3538453642344437364131327D3030303033636630356635363236616561343239356533663731376237306464613931383030303030393034 1170704000x8000000000000015187Applicationar-win-dc.attackrange.localProduct: SQL Server 2022 Common Files -- Installation completed successfully.(NULL)(NULL)(NULL)(NULL)(NULL)7B36413638443332432D344330442D343834372D423730432D3538453642344437364131327D 1172404000x8000000000000015184Applicationar-win-dc.attackrange.localProduct: SQL Server 2022 Common Files -- Install started. 1000004000x800000000000000015186Applicationar-win-dc.attackrange.local02025-02-04T01:22:38.9246656Z 1000104000x800000000000000015185Applicationar-win-dc.attackrange.local02025-02-04T01:22:38.0746093Z 104004000x8000000000000015183Applicationar-win-dc.attackrange.localC:\SQL2022\Developer_ENU\x64\setup\sql_common_core.msi7128(NULL)(NULL)(NULL)(NULL) 104204000x8000000000000015182Applicationar-win-dc.attackrange.localC:\SQL2022\Developer_ENU\1033_ENU_LP\x64\setup\smo_loc.msi7128(NULL)(NULL)(NULL)(NULL) 103304000x8000000000000015181Applicationar-win-dc.attackrange.localSQL Server 2022 Shared Management Objects16.0.1000.610330Microsoft Corporation(NULL)7B31323631383133312D414139412D344441452D393338372D4345343431373935354239467D3030303039366165663966336636613639313063636163303631363735376361313233343030303030393034 1170704000x8000000000000015180Applicationar-win-dc.attackrange.localProduct: SQL Server 2022 Shared Management Objects -- Installation completed successfully.(NULL)(NULL)(NULL)(NULL)(NULL)7B31323631383133312D414139412D344441452D393338372D4345343431373935354239467D 1000004000x800000000000000015179Applicationar-win-dc.attackrange.local02025-02-04T01:22:38.0746093Z 1172404000x8000000000000015176Applicationar-win-dc.attackrange.localProduct: SQL Server 2022 Shared Management Objects -- Install started. 104004000x8000000000000015175Applicationar-win-dc.attackrange.localC:\SQL2022\Developer_ENU\1033_ENU_LP\x64\setup\smo_loc.msi7128(NULL)(NULL)(NULL)(NULL) 1000104000x800000000000000015178Applicationar-win-dc.attackrange.local02025-02-04T01:22:37.1742948Z 1000004000x800000000000000015177Applicationar-win-dc.attackrange.local02025-02-04T01:22:37.1742948Z 104204000x8000000000000015174Applicationar-win-dc.attackrange.localC:\SQL2022\Developer_ENU\1033_ENU_LP\x64\setup\smo_extensions_loc.msi7128(NULL)(NULL)(NULL)(NULL) 103304000x8000000000000015173Applicationar-win-dc.attackrange.localSQL Server 2022 Shared Management Objects Extensions16.0.1000.610330Microsoft Corporation(NULL)7B33354543363134352D453333332D343244422D424342332D3338304446363134304331317D3030303062333964363030346466393666356138383331363065633861643434306432663030303030393034 1170704000x8000000000000015172Applicationar-win-dc.attackrange.localProduct: SQL Server 2022 Shared Management Objects Extensions -- Installation completed successfully.(NULL)(NULL)(NULL)(NULL)(NULL)7B33354543363134352D453333332D343244422D424342332D3338304446363134304331317D 1172404000x8000000000000015171Applicationar-win-dc.attackrange.localProduct: SQL Server 2022 Shared Management Objects Extensions -- Install started. 104004000x8000000000000015167Applicationar-win-dc.attackrange.localC:\SQL2022\Developer_ENU\1033_ENU_LP\x64\setup\smo_extensions_loc.msi7128(NULL)(NULL)(NULL)(NULL) 1000104000x800000000000000015170Applicationar-win-dc.attackrange.local02025-02-04T01:22:36.3308995Z 1000004000x800000000000000015169Applicationar-win-dc.attackrange.local02025-02-04T01:22:36.3308995Z 1000104000x800000000000000015168Applicationar-win-dc.attackrange.local02025-02-04T01:22:34.6402222Z 104204000x8000000000000015166Applicationar-win-dc.attackrange.localC:\SQL2022\Developer_ENU\1033_ENU_LP\x64\setup\sql_xevent_loc.msi7128(NULL)(NULL)(NULL)(NULL) 103304000x8000000000000015165Applicationar-win-dc.attackrange.localSQL Server 2022 XEvent16.0.1000.610330Microsoft Corporation(NULL)7B39344145423041302D333635432D343439422D423537332D4432454342333533454230367D3030303033613965646132663536643730356636343964643066393036666165326330303030303030393034 1170704000x8000000000000015164Applicationar-win-dc.attackrange.localProduct: SQL Server 2022 XEvent -- Installation completed successfully.(NULL)(NULL)(NULL)(NULL)(NULL)7B39344145423041302D333635432D343439422D423537332D4432454342333533454230367D 1172404000x8000000000000015163Applicationar-win-dc.attackrange.localProduct: SQL Server 2022 XEvent -- Install started. 104004000x8000000000000015162Applicationar-win-dc.attackrange.localC:\SQL2022\Developer_ENU\1033_ENU_LP\x64\setup\sql_xevent_loc.msi7128(NULL)(NULL)(NULL)(NULL) 104204000x8000000000000015161Applicationar-win-dc.attackrange.localC:\SQL2022\Developer_ENU\x64\setup\smo.msi7128(NULL)(NULL)(NULL)(NULL) 103304000x8000000000000015160Applicationar-win-dc.attackrange.localSQL Server 2022 Shared Management Objects16.0.1000.610330Microsoft Corporation(NULL)7B36463832343241412D314232352D343231432D384534352D4643353937384439414133417D3030303039366165663966336636613639313063636163303631363735376361313233343030303030393034 1170704000x8000000000000015159Applicationar-win-dc.attackrange.localProduct: SQL Server 2022 Shared Management Objects -- Installation completed successfully.(NULL)(NULL)(NULL)(NULL)(NULL)7B36463832343241412D314232352D343231432D384534352D4643353937384439414133417D 1000004000x800000000000000015158Applicationar-win-dc.attackrange.local02025-02-04T01:22:34.6402222Z 1000104000x800000000000000015157Applicationar-win-dc.attackrange.local02025-02-04T01:22:30.2678575Z 1172404000x8000000000000015156Applicationar-win-dc.attackrange.localProduct: SQL Server 2022 Shared Management Objects -- Install started. 104004000x8000000000000015155Applicationar-win-dc.attackrange.localC:\SQL2022\Developer_ENU\x64\setup\smo.msi7128(NULL)(NULL)(NULL)(NULL) 104204000x8000000000000015154Applicationar-win-dc.attackrange.localC:\SQL2022\Developer_ENU\x64\setup\smo_extensions.msi7128(NULL)(NULL)(NULL)(NULL) 103304000x8000000000000015153Applicationar-win-dc.attackrange.localSQL Server 2022 Shared Management Objects Extensions16.0.1000.610330Microsoft Corporation(NULL)7B41304637414342412D303735462D344243372D413835412D3544433330314643454337347D3030303062333964363030346466393666356138383331363065633861643434306432663030303030393034 1170704000x8000000000000015152Applicationar-win-dc.attackrange.localProduct: SQL Server 2022 Shared Management Objects Extensions -- Installation completed successfully.(NULL)(NULL)(NULL)(NULL)(NULL)7B41304637414342412D303735462D344243372D413835412D3544433330314643454337347D 1638404000x8000000000000015151Applicationar-win-dc.attackrange.local2025-02-05T16:36:30ZRulesEngine 1172404000x8000000000000015150Applicationar-win-dc.attackrange.localProduct: SQL Server 2022 Shared Management Objects Extensions -- Install started. 1000004000x800000000000000015149Applicationar-win-dc.attackrange.local02025-02-04T01:22:30.2678575Z 104004000x8000000000000015146Applicationar-win-dc.attackrange.localC:\SQL2022\Developer_ENU\x64\setup\smo_extensions.msi7128(NULL)(NULL)(NULL)(NULL) 1000104000x800000000000000015148Applicationar-win-dc.attackrange.local02025-02-04T01:22:29.1430991Z 1000004000x800000000000000015147Applicationar-win-dc.attackrange.local02025-02-04T01:22:29.1430991Z 104204000x8000000000000015145Applicationar-win-dc.attackrange.localC:\SQL2022\Developer_ENU\x64\setup\sql_xevent.msi7128(NULL)(NULL)(NULL)(NULL) 103304000x8000000000000015144Applicationar-win-dc.attackrange.localSQL Server 2022 XEvent16.0.1000.610330Microsoft Corporation(NULL)7B42443842373333392D373535392D344643332D393545362D3236343332344434353233357D3030303033613965646132663536643730356636343964643066393036666165326330303030303030393034 1170704000x8000000000000015143Applicationar-win-dc.attackrange.localProduct: SQL Server 2022 XEvent -- Installation completed successfully.(NULL)(NULL)(NULL)(NULL)(NULL)7B42443842373333392D373535392D344643332D393545362D3236343332344434353233357D 1172404000x8000000000000015142Applicationar-win-dc.attackrange.localProduct: SQL Server 2022 XEvent -- Install started. 104004000x8000000000000015140Applicationar-win-dc.attackrange.localC:\SQL2022\Developer_ENU\x64\setup\sql_xevent.msi7128(NULL)(NULL)(NULL)(NULL) 1000104000x800000000000000015141Applicationar-win-dc.attackrange.local02025-02-04T01:22:27.3148367Z 104204000x8000000000000015139Applicationar-win-dc.attackrange.localC:\SQL2022\Developer_ENU\1033_ENU_LP\x64\setup\SqlSupport.msi7128(NULL)(NULL)(NULL)(NULL) 103304000x8000000000000015138Applicationar-win-dc.attackrange.localMicrosoft SQL Server 2022 Setup (English)16.0.1000.610330Microsoft Corporation(NULL)7B42463444384334422D443933312D344436322D413745442D3841333442324643304431427D3030303031613733653936633661366364323635666539333331396330616564643031363030303030393034 1170704000x8000000000000015137Applicationar-win-dc.attackrange.localProduct: Microsoft SQL Server 2022 Setup (English) -- Installation completed successfully.(NULL)(NULL)(NULL)(NULL)(NULL)7B42463444384334422D443933312D344436322D413745442D3841333442324643304431427D 1000004000x800000000000000015136Applicationar-win-dc.attackrange.local02025-02-04T01:22:27.3148367Z 104004000x8000000000000015135Applicationar-win-dc.attackrange.localC:\SQL2022\Developer_ENU\1033_ENU_LP\x64\setup\SqlSupport.msi7128(NULL)(NULL)(NULL)(NULL) 1000104000x800000000000000015134Applicationar-win-dc.attackrange.local02025-02-04T01:22:26.4082368Z 1000004000x800000000000000015133Applicationar-win-dc.attackrange.local02025-02-04T01:22:26.4082368Z 1000104000x800000000000000015132Applicationar-win-dc.attackrange.local02025-02-04T01:22:25.1943704Z 104204000x8000000000000015131Applicationar-win-dc.attackrange.localC:\SQL2022\Developer_ENU\1033_ENU_LP\x64\setup\sql_dmf_loc.msi7128(NULL)(NULL)(NULL)(NULL) 103304000x8000000000000015130Applicationar-win-dc.attackrange.localSQL Server 2022 DMF16.0.1000.610330Microsoft Corporation(NULL)7B44434130433244362D383342462D343141452D423141422D4334313831303032444534307D3030303032333637393532373435643666633033323266353738646230633465646266623030303030393034 1170704000x8000000000000015129Applicationar-win-dc.attackrange.localProduct: SQL Server 2022 DMF -- Installation completed successfully.(NULL)(NULL)(NULL)(NULL)(NULL)7B44434130433244362D383342462D343141452D423141422D4334313831303032444534307D 1172404000x8000000000000015128Applicationar-win-dc.attackrange.localProduct: SQL Server 2022 DMF -- Install started. 104004000x8000000000000015127Applicationar-win-dc.attackrange.localC:\SQL2022\Developer_ENU\1033_ENU_LP\x64\setup\sql_dmf_loc.msi7128(NULL)(NULL)(NULL)(NULL) 104204000x8000000000000015126Applicationar-win-dc.attackrange.localC:\SQL2022\Developer_ENU\x64\setup\sql_dmf.msi7128(NULL)(NULL)(NULL)(NULL) 103304000x8000000000000015125Applicationar-win-dc.attackrange.localSQL Server 2022 DMF16.0.1000.610330Microsoft Corporation(NULL)7B35414237374434452D394535462D343632372D423738422D3132394135454332383538417D3030303032333637393532373435643666633033323266353738646230633465646266623030303030393034 1170704000x8000000000000015124Applicationar-win-dc.attackrange.localProduct: SQL Server 2022 DMF -- Installation completed successfully.(NULL)(NULL)(NULL)(NULL)(NULL)7B35414237374434452D394535462D343632372D423738422D3132394135454332383538417D 1000004000x800000000000000015123Applicationar-win-dc.attackrange.local02025-02-04T01:22:25.1943704Z 1172404000x8000000000000015121Applicationar-win-dc.attackrange.localProduct: SQL Server 2022 DMF -- Install started. 104004000x8000000000000015120Applicationar-win-dc.attackrange.localC:\SQL2022\Developer_ENU\x64\setup\sql_dmf.msi7128(NULL)(NULL)(NULL)(NULL) 1000104000x800000000000000015122Applicationar-win-dc.attackrange.local02025-02-04T01:22:23.7051425Z 104204000x8000000000000015119Applicationar-win-dc.attackrange.localC:\SQL2022\Developer_ENU\x64\setup\sql_diag.msi7128(NULL)(NULL)(NULL)(NULL) 103304000x8000000000000015118Applicationar-win-dc.attackrange.localSQL Server 2022 SQL Diagnostics16.0.1000.610330Microsoft Corporation(NULL)7B30434546453935382D453731412D343137312D394445462D3737453932333441353631337D3030303061313063633139363564303832333135363063363634326666346664333430653030303030393034 1170704000x8000000000000015117Applicationar-win-dc.attackrange.localProduct: SQL Server 2022 SQL Diagnostics -- Installation completed successfully.(NULL)(NULL)(NULL)(NULL)(NULL)7B30434546453935382D453731412D343137312D394445462D3737453932333441353631337D 1000004000x800000000000000015116Applicationar-win-dc.attackrange.local02025-02-04T01:22:23.7051425Z 1000104000x800000000000000015115Applicationar-win-dc.attackrange.local02025-02-04T01:22:22.3772418Z 1172404000x8000000000000015114Applicationar-win-dc.attackrange.localProduct: SQL Server 2022 SQL Diagnostics -- Install started. 104004000x8000000000000015113Applicationar-win-dc.attackrange.localC:\SQL2022\Developer_ENU\x64\setup\sql_diag.msi7128(NULL)(NULL)(NULL)(NULL) 104204000x8000000000000015112Applicationar-win-dc.attackrange.localC:\SQL2022\Developer_ENU\x64\setup\sql_batchparser.msi7128(NULL)(NULL)(NULL)(NULL) 103304000x8000000000000015111Applicationar-win-dc.attackrange.localSQL Server 2022 Batch Parser16.0.1000.610330Microsoft Corporation(NULL)7B37454644384231392D413945362D343143462D413936462D4239423645333045433334357D3030303035356135376631646534633837393835323733356230663131333534363331613030303030393034 1170704000x8000000000000015110Applicationar-win-dc.attackrange.localProduct: SQL Server 2022 Batch Parser -- Installation completed successfully.(NULL)(NULL)(NULL)(NULL)(NULL)7B37454644384231392D413945362D343143462D413936462D4239423645333045433334357D 1000004000x800000000000000015109Applicationar-win-dc.attackrange.local02025-02-04T01:22:22.3772418Z 1000104000x800000000000000015108Applicationar-win-dc.attackrange.local02025-02-04T01:22:21.6113892Z 1172404000x8000000000000015107Applicationar-win-dc.attackrange.localProduct: SQL Server 2022 Batch Parser -- Install started. 104004000x8000000000000015106Applicationar-win-dc.attackrange.localC:\SQL2022\Developer_ENU\x64\setup\sql_batchparser.msi7128(NULL)(NULL)(NULL)(NULL) 104204000x8000000000000015105Applicationar-win-dc.attackrange.localC:\SQL2022\Developer_ENU\1033_ENU_LP\x64\setup\conn_info_loc.msi7128(NULL)(NULL)(NULL)(NULL) 103304000x8000000000000015104Applicationar-win-dc.attackrange.localSQL Server 2022 Connection Info16.0.1000.610330Microsoft Corporation(NULL)7B37373044413746322D383137422D344141362D393136302D3038424236353841424443367D3030303038383836643362363261363034343339623165353065383236303636303366663030303030393034 1170704000x8000000000000015103Applicationar-win-dc.attackrange.localProduct: SQL Server 2022 Connection Info -- Installation completed successfully.(NULL)(NULL)(NULL)(NULL)(NULL)7B37373044413746322D383137422D344141362D393136302D3038424236353841424443367D 1172404000x8000000000000015102Applicationar-win-dc.attackrange.localProduct: SQL Server 2022 Connection Info -- Install started. 1000004000x800000000000000015101Applicationar-win-dc.attackrange.local02025-02-04T01:22:21.6113892Z 1000104000x800000000000000015100Applicationar-win-dc.attackrange.local02025-02-04T01:22:19.8927464Z 104004000x8000000000000015099Applicationar-win-dc.attackrange.localC:\SQL2022\Developer_ENU\1033_ENU_LP\x64\setup\conn_info_loc.msi7128(NULL)(NULL)(NULL)(NULL) 104204000x8000000000000015098Applicationar-win-dc.attackrange.localC:\SQL2022\Developer_ENU\x64\setup\conn_info.msi7128(NULL)(NULL)(NULL)(NULL) 103304000x8000000000000015097Applicationar-win-dc.attackrange.localSQL Server 2022 Connection Info16.0.1000.610330Microsoft Corporation(NULL)7B45414335344238322D374133372D344139452D383935332D3437343331364244343046367D3030303038383836643362363261363034343339623165353065383236303636303366663030303030393034 1170704000x8000000000000015096Applicationar-win-dc.attackrange.localProduct: SQL Server 2022 Connection Info -- Installation completed successfully.(NULL)(NULL)(NULL)(NULL)(NULL)7B45414335344238322D374133372D344139452D383935332D3437343331364244343046367D 1172404000x8000000000000015093Applicationar-win-dc.attackrange.localProduct: SQL Server 2022 Connection Info -- Install started. 1000004000x800000000000000015095Applicationar-win-dc.attackrange.local02025-02-04T01:22:19.8927464Z 1000104000x800000000000000015094Applicationar-win-dc.attackrange.local02025-02-04T01:22:18.5331374Z 104004000x8000000000000015092Applicationar-win-dc.attackrange.localC:\SQL2022\Developer_ENU\x64\setup\conn_info.msi7128(NULL)(NULL)(NULL)(NULL) 104204000x8000000000000015091Applicationar-win-dc.attackrange.localC:\SQL2022\Developer_ENU\1033_ENU_LP\x64\setup\x64\msoledbsql.msi7128(NULL)(NULL)(NULL)(NULL) 103304000x8000000000000015090Applicationar-win-dc.attackrange.localMicrosoft OLE DB Driver for SQL Server18.2.4.010330Microsoft Corporation(NULL)7B37374539453133382D304434432D343935452D424537372D3736314531373937424131367D3030303065613165636365383561353137633036313364626266383063353965323832663030303030393034 1170704000x8000000000000015089Applicationar-win-dc.attackrange.localProduct: Microsoft OLE DB Driver for SQL Server -- Installation completed successfully.(NULL)(NULL)(NULL)(NULL)(NULL)7B37374539453133382D304434432D343935452D424537372D3736314531373937424131367D 1000004000x800000000000000015088Applicationar-win-dc.attackrange.local02025-02-04T01:22:18.5331374Z 104004000x8000000000000015087Applicationar-win-dc.attackrange.localC:\SQL2022\Developer_ENU\1033_ENU_LP\x64\setup\x64\msoledbsql.msi7128(NULL)(NULL)(NULL)(NULL) 1639404000x8000000000000015086Applicationar-win-dc.attackrange.local 1638404000x8000000000000015246Applicationar-win-2.attackrange.local2025-02-05T16:34:28ZRulesEngine 1639404000x8000000000000015245Applicationar-win-2.attackrange.local 1638404000x8000000000000015244Applicationar-win-2.attackrange.local2025-02-05T16:35:13ZRulesEngine 1639404000x8000000000000015243Applicationar-win-2.attackrange.local 1638404000x8000000000000015242Applicationar-win-2.attackrange.local2025-02-05T16:34:28ZRulesEngine 1639404000x8000000000000015241Applicationar-win-2.attackrange.local 1638404000x8000000000000015240Applicationar-win-2.attackrange.local2025-02-05T16:34:38ZRulesEngine 1639404000x8000000000000015239Applicationar-win-2.attackrange.local 1638404000x8000000000000015085Applicationar-win-dc.attackrange.local2025-02-05T16:36:22ZRulesEngine 1639404000x8000000000000015084Applicationar-win-dc.attackrange.local 1638404000x8000000000000015238Applicationar-win-2.attackrange.local2025-02-05T16:34:34ZRulesEngine 1639404000x8000000000000015237Applicationar-win-2.attackrange.local 1638404000x8000000000000015083Applicationar-win-dc.attackrange.local2025-02-05T16:36:12ZRulesEngine 1639404000x8000000000000015082Applicationar-win-dc.attackrange.local 1638404000x8000000000000015236Applicationar-win-2.attackrange.local2025-02-05T16:34:59ZRulesEngine 1639404000x8000000000000015235Applicationar-win-2.attackrange.local 1638404000x8000000000000015081Applicationar-win-dc.attackrange.local2025-02-05T16:36:34ZRulesEngine 1639404000x8000000000000015080Applicationar-win-dc.attackrange.local 1638404000x8000000000000015234Applicationar-win-2.attackrange.local2025-02-05T16:34:45ZRulesEngine 1639404000x8000000000000015233Applicationar-win-2.attackrange.local 100204000x8000000000000015079Applicationar-win-dc.attackrange.localexplorer.exe 1638404000x8000000000000015232Applicationar-win-2.attackrange.local2025-02-05T16:35:08ZRulesEngine 1639404000x8000000000000015231Applicationar-win-2.attackrange.local 1638404000x8000000000000015078Applicationar-win-dc.attackrange.local2025-02-05T16:35:52ZRulesEngine 1638404000x8000000000000015230Applicationar-win-2.attackrange.local2025-02-05T16:34:34ZRulesEngine 1639404000x8000000000000015077Applicationar-win-dc.attackrange.local 1639404000x8000000000000015229Applicationar-win-2.attackrange.local