Mladen_Andzic the PoC I am implementing is to take regular native copy_only backups of multiple databases that are hosted in a Managed Instance, where all the databases are time-aligned (i.e. use PITR to create secondary copies at a point in time, on the MI then backkup those secondary copies). We have 3 Managed Instances, one for each country that is supported. Each uses its own TDE key.
(For development work) I have a copy of SQL Server 2022 on my laptop. When I want to restore a database from region A, I run a script which creates credentials using the SQL Server Azure EKM provider to reference the appropriate key vault. The DBA user is altered to be associated with the just-created credential.
At the point of creating an asymmetric key using:
CREATE ASYMMETRIC KEY [$(TDEHostname)_ekm_login_key]
FROM PROVIDER [$(KeyvaultProviderName)]
WITH PROVIDER_KEY_NAME = '$(TDEHostname)-sqlmi'
,CREATION_DISPOSITION = OPEN_EXISTING
;
one of two errors will be generated:
Msg 33049, Level 16, State 2, Line 116
Key with name 'xxx' does not exist in the provider or access is denied. Provider error code: 3113. (Provider Error - No explanation is available, consult EKM Provider for details)
This may be a problem in Azure (permissions etc.) so should be solvable.
The other more serious error is:
Msg 109, Level 20, State 0, Line 24
A transport-level error has occurred when receiving results from the server. (provider: Shared Memory Provider, error: 0 - The pipe has been ended.)
This is a result of the instance of SQL Server 2022 crashing, and therefore the service is off. I then have to restart the service to try again.
Apologies for the length, but this is the SQL Server log at the point of failure:
Date,Source,Severity,Message
07/06/2022 10:05:46,spid79,Unknown,External dump process return code 0x20000001.<nl/>External dump process returned no errors.
07/06/2022 10:05:45,spid79,Unknown,CDmpClient::ExecuteAllCallbacks completed. Time elapsed: 0 seconds.
07/06/2022 10:05:45,spid79,Unknown,DumpCallbackPolyBase is executing...
07/06/2022 10:05:45,spid79,Unknown,DumpCallbackRepl is executing...
07/06/2022 10:05:45,spid79,Unknown,DumpCallbackHk is executing...
07/06/2022 10:05:45,spid79,Unknown,DumpCallbackSQLCLR is executing...
07/06/2022 10:05:45,spid79,Unknown,DumpCallbackFullText is executing...
07/06/2022 10:05:45,spid79,Unknown,DumpCallbackQE is executing...
07/06/2022 10:05:45,spid79,Unknown,DumpCallbackSSB is executing...
07/06/2022 10:05:45,spid79,Unknown,DumpCallbackSEAM is executing...
07/06/2022 10:05:45,spid79,Unknown,DumpCallbackSE is executing...
07/06/2022 10:05:45,spid79,Unknown,DumpCallbackEE is executing...
07/06/2022 10:05:45,spid79,Unknown,DumpCallbackSOS is executing...
07/06/2022 10:05:45,spid79,Unknown,XE_DumpCallbacks is executing...
07/06/2022 10:05:45,spid79,Unknown,CDmpClient::ExecuteAllCallbacks started.
07/06/2022 10:05:45,spid79,Unknown,Stack Signature for the dump is 0x00000001A776B86D
07/06/2022 10:05:45,spid79,Unknown,<frame id="00" address="0x7FFB24B22651" pdb="ntdll.pdb" age="1" guid="FEA202D5-4733-41CB-4B29-F58357A35D63" module="ntdll" rva="0x52651" />
07/06/2022 10:05:45,spid79,Unknown,<frame id="00" address="0x7FFB23FF7034" pdb="kernel32.pdb" age="1" guid="7C5D719F-BDAA-EC24-A02F-94E8FDFED8F8" module="kernel32" rva="0x17034" />
07/06/2022 10:05:45,spid79,Unknown,<frame id="00" address="0x7FFAA2D296DA" pdb="SqlDK.pdb" age="2" guid="9CA7910A-3090-4EF3-B34F-8F74B6F0736F" module="SqlDK" rva="0x396DA" />
07/06/2022 10:05:45,spid79,Unknown,<frame id="00" address="0x7FFAA2D28B89" pdb="SqlDK.pdb" age="2" guid="9CA7910A-3090-4EF3-B34F-8F74B6F0736F" module="SqlDK" rva="0x38B89" />
07/06/2022 10:05:45,spid79,Unknown,<frame id="00" address="0x7FFAA2D28D50" pdb="SqlDK.pdb" age="2" guid="9CA7910A-3090-4EF3-B34F-8F74B6F0736F" module="SqlDK" rva="0x38D50" />
07/06/2022 10:05:45,spid79,Unknown,<frame id="00" address="0x7FFAA2D28A0F" pdb="SqlDK.pdb" age="2" guid="9CA7910A-3090-4EF3-B34F-8F74B6F0736F" module="SqlDK" rva="0x38A0F" />
07/06/2022 10:05:45,spid79,Unknown,<frame id="00" address="0x7FFAA2CF8451" pdb="SqlDK.pdb" age="2" guid="9CA7910A-3090-4EF3-B34F-8F74B6F0736F" module="SqlDK" rva="0x8451" />
07/06/2022 10:05:45,spid79,Unknown,<frame id="00" address="0x7FFAA2CF88E6" pdb="SqlDK.pdb" age="2" guid="9CA7910A-3090-4EF3-B34F-8F74B6F0736F" module="SqlDK" rva="0x88E6" />
07/06/2022 10:05:45,spid79,Unknown,<frame id="00" address="0x7FFAA2CF8BD9" pdb="SqlDK.pdb" age="2" guid="9CA7910A-3090-4EF3-B34F-8F74B6F0736F" module="SqlDK" rva="0x8BD9" />
07/06/2022 10:05:45,spid79,Unknown,<frame id="00" address="0x7FFA7E0C5087" pdb="sqllang.pdb" age="2" guid="C97CCDF6-BCDE-4EEA-88AB-30167EA5105C" module="sqllang" rva="0x15087" />
07/06/2022 10:05:45,spid79,Unknown,<frame id="00" address="0x7FFA7E0C52E9" pdb="sqllang.pdb" age="2" guid="C97CCDF6-BCDE-4EEA-88AB-30167EA5105C" module="sqllang" rva="0x152E9" />
07/06/2022 10:05:45,spid79,Unknown,<frame id="00" address="0x7FFA7E0D27CC" pdb="sqllang.pdb" age="2" guid="C97CCDF6-BCDE-4EEA-88AB-30167EA5105C" module="sqllang" rva="0x227CC" />
07/06/2022 10:05:45,spid79,Unknown,<frame id="00" address="0x7FFA7E0C760D" pdb="sqllang.pdb" age="2" guid="C97CCDF6-BCDE-4EEA-88AB-30167EA5105C" module="sqllang" rva="0x1760D" />
07/06/2022 10:05:45,spid79,Unknown,<frame id="00" address="0x7FFA7E0C8CC9" pdb="sqllang.pdb" age="2" guid="C97CCDF6-BCDE-4EEA-88AB-30167EA5105C" module="sqllang" rva="0x18CC9" />
07/06/2022 10:05:45,spid79,Unknown,<frame id="00" address="0x7FFA7E0C81AA" pdb="sqllang.pdb" age="2" guid="C97CCDF6-BCDE-4EEA-88AB-30167EA5105C" module="sqllang" rva="0x181AA" />
07/06/2022 10:05:45,spid79,Unknown,<frame id="00" address="0x7FFA7E0C7974" pdb="sqllang.pdb" age="2" guid="C97CCDF6-BCDE-4EEA-88AB-30167EA5105C" module="sqllang" rva="0x17974" />
07/06/2022 10:05:45,spid79,Unknown,<frame id="00" address="0x7FFA7E3364FE" pdb="sqllang.pdb" age="2" guid="C97CCDF6-BCDE-4EEA-88AB-30167EA5105C" module="sqllang" rva="0x2864FE" />
07/06/2022 10:05:45,spid79,Unknown,<frame id="00" address="0x7FFA7EFB6D1A" pdb="sqllang.pdb" age="2" guid="C97CCDF6-BCDE-4EEA-88AB-30167EA5105C" module="sqllang" rva="0xF06D1A" />
07/06/2022 10:05:45,spid79,Unknown,<frame id="00" address="0x7FFA7EF9663E" pdb="sqllang.pdb" age="2" guid="C97CCDF6-BCDE-4EEA-88AB-30167EA5105C" module="sqllang" rva="0xEE663E" />
07/06/2022 10:05:45,spid79,Unknown,<frame id="00" address="0x7FFA7EF966C2" pdb="sqllang.pdb" age="2" guid="C97CCDF6-BCDE-4EEA-88AB-30167EA5105C" module="sqllang" rva="0xEE66C2" />
07/06/2022 10:05:45,spid79,Unknown,<frame id="00" address="0x7FFA7EF96F90" pdb="sqllang.pdb" age="2" guid="C97CCDF6-BCDE-4EEA-88AB-30167EA5105C" module="sqllang" rva="0xEE6F90" />
07/06/2022 10:05:45,spid79,Unknown,<frame id="00" address="0x7FFA7EF6DDFE" pdb="sqllang.pdb" age="2" guid="C97CCDF6-BCDE-4EEA-88AB-30167EA5105C" module="sqllang" rva="0xEBDDFE" />
07/06/2022 10:05:45,spid79,Unknown,<frame id="00" address="0x7FFA7EF63913" pdb="sqllang.pdb" age="2" guid="C97CCDF6-BCDE-4EEA-88AB-30167EA5105C" module="sqllang" rva="0xEB3913" />
07/06/2022 10:05:45,spid79,Unknown,<frame id="00" address="0x7FFA7EF64526" pdb="sqllang.pdb" age="2" guid="C97CCDF6-BCDE-4EEA-88AB-30167EA5105C" module="sqllang" rva="0xEB4526" />
07/06/2022 10:05:45,spid79,Unknown,<frame id="00" address="0x7FFAF71E29E9" pdb="Microsoft.AzureKeyVaultService.EKM.pdb" age="1" guid="494C611B-4011-494A-AF7E-1B759FC85FB1" module="Microsoft.AzureKeyVaultService.EKM" rva="0x29E9" />
07/06/2022 10:05:45,spid79,Unknown,<frame id="00" address="0x7FFAF71E78B4" pdb="Microsoft.AzureKeyVaultService.EKM.pdb" age="1" guid="494C611B-4011-494A-AF7E-1B759FC85FB1" module="Microsoft.AzureKeyVaultService.EKM" rva="0x78B4" />
07/06/2022 10:05:45,spid79,Unknown,<frame id="00" address="0x7FFAF71E8C10" pdb="Microsoft.AzureKeyVaultService.EKM.pdb" age="1" guid="494C611B-4011-494A-AF7E-1B759FC85FB1" module="Microsoft.AzureKeyVaultService.EKM" rva="0x8C10" />
07/06/2022 10:05:45,spid79,Unknown,<frame id="00" address="0x7FFAFE446BFA" pdb="vcruntime140.amd64.pdb" age="1" guid="1FE44F15-73B2-4602-9EAF-FD19C4B14467" module="vcruntime140.amd64" rva="0x6BFA" />
07/06/2022 10:05:45,spid79,Unknown,<frame id="00" address="0x7FFB227F2851" pdb="ucrtbase.pdb" age="1" guid="152B3C4F-5E1C-E0FE-6BC3-6E9F0F2B10E6" module="ucrtbase" rva="0x72851" />
07/06/2022 10:05:45,spid79,Unknown,<frame id="00" address="0x7FFB227F1881" pdb="ucrtbase.pdb" age="1" guid="152B3C4F-5E1C-E0FE-6BC3-6E9F0F2B10E6" module="ucrtbase" rva="0x71881" />
07/06/2022 10:05:45,spid79,Unknown,<frame id="00" address="0x7FFAA2D7CF54" pdb="SqlDK.pdb" age="2" guid="9CA7910A-3090-4EF3-B34F-8F74B6F0736F" module="SqlDK" rva="0x8CF54" />
07/06/2022 10:05:45,spid79,Unknown,<frame id="00" address="0x7FFAA2D7D6C3" pdb="SqlDK.pdb" age="2" guid="9CA7910A-3090-4EF3-B34F-8F74B6F0736F" module="SqlDK" rva="0x8D6C3" />
07/06/2022 10:05:45,spid79,Unknown,<frame id="00" address="0x7FFA80C3A1BC" pdb="sqlmin.pdb" age="2" guid="A85BD4FB-BC54-4065-8A4F-063B6CDE3AFD" module="sqlmin" rva="0x4EA1BC" />
07/06/2022 10:05:45,spid79,Unknown,<frame id="00" address="0x7FFA7F166D06" pdb="sqllang.pdb" age="2" guid="C97CCDF6-BCDE-4EEA-88AB-30167EA5105C" module="sqllang" rva="0x10B6D06" />
07/06/2022 10:05:45,spid79,Unknown,<frame id="00" address="0x7FFA7F162A9E" pdb="sqllang.pdb" age="2" guid="C97CCDF6-BCDE-4EEA-88AB-30167EA5105C" module="sqllang" rva="0x10B2A9E" />
07/06/2022 10:05:45,spid79,Unknown,<frame id="00" address="0x7FFB22224FD9" pdb="kernelbase.pdb" age="1" guid="839BB75D-BB96-9739-7D7D-63A226E0F71F" module="kernelbase" rva="0x34FD9" />
07/06/2022 10:05:45,spid79,Unknown,* Short Stack Dump
07/06/2022 10:05:45,spid79,Unknown,* -------------------------------------------------------------------------------
07/06/2022 10:05:45,spid79,Unknown,* *******************************************************************************
07/06/2022 10:05:45,spid79,Unknown,* Rip: 00007FFB22224FD9: 8C8B480000441F0F CC3348000000C024 C4814800059652E8 6483CCC3000000D8 CCCCCCCFEB003824 CCCCCCCCCCCCCCCC
07/06/2022 10:05:45,spid79,Unknown,* R15: 00007FFAA2F026C0: 0074005F00780065 0069006D00720065 006F00740061006E 0020002D00200072 007400730061004C 0061006800630020
07/06/2022 10:05:45,spid79,Unknown,* R14: 0000025D89277F10: 0000025D89277F10 0000025D892728C0 0000000000000000 0000000000000000 0000000000000000 000000000000000D
07/06/2022 10:05:45,spid79,Unknown,* R13: 000000000000002F:
07/06/2022 10:05:45,spid79,Unknown,* R12: 0000000000000000:
07/06/2022 10:05:45,spid79,Unknown,* R11: 0000000000000008:
07/06/2022 10:05:45,spid79,Unknown,* R10: 0000000000000010:
07/06/2022 10:05:45,spid79,Unknown,* R9: 000000D3977F4160: 0000000000000025 000000D3977F4108 0000000000000000 00007FFA7FEBA100 000000D3977F4910 0000000000000053
07/06/2022 10:05:45,spid79,Unknown,* R8: 00007FFB2278F49B: FFFFFDE5E930438B 438B480820438348 B4E9F878BF0F4820 00000001BEFFFFFD F6FFFFFEB9E9C68B 0420CC850F103043
07/06/2022 10:05:45,spid79,Unknown,* Rdi: 0000025D892728C0: 0000025D8926E040 0000025D8926E870 0000025D89272140 0000025D89277E70 0000025D89272930 0000025D6E7173C0
07/06/2022 10:05:45,spid79,Unknown,* Rsi: 0000000000000000:
07/06/2022 10:05:45,spid79,Unknown,* Rbp: 00007FFAA2F026C0: 0074005F00780065 0069006D00720065 006F00740061006E 0020002D00200072 007400730061004C 0061006800630020
07/06/2022 10:05:45,spid79,Unknown,* Rsp: 000000D3977F47C0: 000000D3977F47D0 0000000000000000 0000000000000000 0000000000000000 00000000000042AC 0000000000000000
07/06/2022 10:05:45,spid79,Unknown,* Rbx: 0000000000000000:
07/06/2022 10:05:45,spid79,Unknown,* Rdx: 0000000100000001:
07/06/2022 10:05:45,spid79,Unknown,* Rcx: 0000025D8B62D000: 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
07/06/2022 10:05:45,spid79,Unknown,* Rax: 00000000FFFFFF00:
07/06/2022 10:05:45,spid79,Unknown,* EFlags: 0000000000000206:
07/06/2022 10:05:45,spid79,Unknown,* SegSs: 000000000000002B:
07/06/2022 10:05:45,spid79,Unknown,* SegGs: 000000000000002B:
07/06/2022 10:05:45,spid79,Unknown,* SegFs: 0000000000000053:
07/06/2022 10:05:45,spid79,Unknown,* SegEs: 000000000000002B:
07/06/2022 10:05:45,spid79,Unknown,* SegDs: 000000000000002B:
07/06/2022 10:05:45,spid79,Unknown,* SegCs: 0000000000000033:
07/06/2022 10:05:45,spid79,Unknown,* MxCsr: 0000000000001FA8:
07/06/2022 10:05:45,spid79,Unknown,* ContextFlags: 000000000010004F:
07/06/2022 10:05:45,spid79,Unknown,* P6Home: 0000000000000001:
07/06/2022 10:05:45,spid79,Unknown,* P5Home: 0000000000000000:
07/06/2022 10:05:45,spid79,Unknown,* P4Home: 000000D3977F3DE0: 00007FFA8065FD38 000000D3977F48A0 000000000000000A 000000D3977F3880 00007FFA7E5238F2 00007FFA80028C30
07/06/2022 10:05:45,spid79,Unknown,* P3Home: 0000000000000000:
07/06/2022 10:05:45,spid79,Unknown,* P2Home: 00007FFA80752899: 48000002E08D8B48 98458B4C1874C985 FF2503C8C1C08B41 820F64F883000003 0FF685480000A878 0001B80021756685
07/06/2022 10:05:45,spid79,Unknown,* P1Home: 0000000000000000:
07/06/2022 10:05:45,spid79,Unknown,*
07/06/2022 10:05:45,spid79,Unknown,* cryptnet 00007FFAF97A0000 00007FFAF97D0FFF 00031000
07/06/2022 10:05:45,spid79,Unknown,* WINNSI 00007FFB1BC30000 00007FFB1BC3AFFF 0000b000
07/06/2022 10:05:45,spid79,Unknown,* ondemandconnroutehelper 00007FFAEB820000 00007FFAEB836FFF 00017000
07/06/2022 10:05:45,spid79,Unknown,* Microsoft.AzureKeyVaultService.EKM 00007FFAF71E0000 00007FFAF7201FFF 00022000
07/06/2022 10:05:45,spid79,Unknown,* odbccp32 00007FFAF73F0000 00007FFAF7416FFF 00027000
07/06/2022 10:05:45,spid79,Unknown,* xpstar 00000261F8140000 00000261F814CFFF 0000d000
07/06/2022 10:05:45,spid79,Unknown,* SQLSCM 00007FFB15750000 00007FFB15768FFF 00019000
07/06/2022 10:05:45,spid79,Unknown,* xpstar 00007FFADE360000 00007FFADE3D9FFF 0007a000
07/06/2022 10:05:45,spid79,Unknown,* ncryptsslp 00007FFAF4390000 00007FFAF43B5FFF 00026000
07/06/2022 10:05:45,spid79,Unknown,* fwpuclnt 00007FFB1B5C0000 00007FFB1B63FFFF 00080000
07/06/2022 10:05:45,spid79,Unknown,* rasadhlp 00007FFB15770000 00007FFB15779FFF 0000a000
07/06/2022 10:05:45,spid79,Unknown,* DSPARSE 00007FFB14830000 00007FFB1483BFFF 0000c000
07/06/2022 10:05:45,spid79,Unknown,* ntdsapi 00007FFB13DD0000 00007FFB13DF9FFF 0002a000
07/06/2022 10:05:45,spid79,Unknown,* ntmarta 00007FFB21ED0000 00007FFB21F02FFF 00033000
07/06/2022 10:05:45,spid79,Unknown,* mskeyprotect 00007FFAF4340000 00007FFAF4354FFF 00015000
07/06/2022 10:05:45,spid79,Unknown,* Wldp 00007FFB21550000 00007FFB2157BFFF 0002c000
07/06/2022 10:05:45,spid79,Unknown,* windows.storage 00007FFB20210000 00007FFB209A3FFF 00794000
07/06/2022 10:05:45,spid79,Unknown,* clrjit 00007FFB06B00000 00007FFB06C4EFFF 0014f000
07/06/2022 10:05:45,spid79,Unknown,* SqlAccess 00007FFADCFA0000 00007FFADD009FFF 0006a000
07/06/2022 10:05:45,spid79,Unknown,* mscorlib.ni 00007FFB06EC0000 00007FFB084BFFFF 01600000
07/06/2022 10:05:45,spid79,Unknown,* ucrtbase_clr0400 00007FFB08A20000 00007FFB08ADCFFF 000bd000
07/06/2022 10:05:45,spid79,Unknown,* VCRUNTIME140_CLR0400 00007FFB08AE0000 00007FFB08AF5FFF 00016000
07/06/2022 10:05:45,spid79,Unknown,* clr 00007FFB08B00000 00007FFB09634FFF 00b35000
07/06/2022 10:05:45,spid79,Unknown,* SQLNCLIRDAR11 00000261F6650000 00000261F6687FFF 00038000
07/06/2022 10:05:45,spid79,Unknown,* sqlnclirda11 00000000515B0000 0000000051908FFF 00359000
07/06/2022 10:05:45,spid79,Unknown,* netbios 00007FFAF4F80000 00007FFAF4F8BFFF 0000c000
07/06/2022 10:05:45,spid79,Unknown,* SQLNCLIR11 00000261F51B0000 00000261F51E7FFF 00038000
07/06/2022 10:05:45,spid79,Unknown,* MSVCR100 0000000051910000 00000000519E1FFF 000d2000
07/06/2022 10:05:45,spid79,Unknown,* sqlncli11 00007FFAF3FE0000 00007FFAF4332FFF 00353000
07/06/2022 10:05:45,spid79,Unknown,* dhcpcsvc6 00007FFB1B140000 00007FFB1B156FFF 00017000
07/06/2022 10:05:45,spid79,Unknown,* MSOLEDBSQLR 00000261F5150000 00000261F5171FFF 00022000
07/06/2022 10:05:45,spid79,Unknown,* COMCTL32 00007FFAF3F30000 00007FFAF3FDFFFF 000b0000
07/06/2022 10:05:45,spid79,Unknown,* COMDLG32 00007FFB24920000 00007FFB249FAFFF 000db000
07/06/2022 10:05:45,spid79,Unknown,* msoledbsql 00007FFABDDD0000 00007FFABE057FFF 00288000
07/06/2022 10:05:45,spid79,Unknown,* BatchParser 00007FFAF71B0000 00007FFAF71DBFFF 0002c000
07/06/2022 10:05:45,spid79,Unknown,* msxml3 00007FFAFA8B0000 00007FFAFAABBFFF 0020c000
07/06/2022 10:05:45,spid79,Unknown,* clbcatq 00007FFB22B30000 00007FFB22BD8FFF 000a9000
07/06/2022 10:05:45,spid79,Unknown,* SqlServerSpatial160 00007FFADD010000 00007FFADD0B5FFF 000a6000
07/06/2022 10:05:45,spid79,Unknown,* mscoreei 00007FFB09710000 00007FFB097B9FFF 000aa000
07/06/2022 10:05:45,spid79,Unknown,* MSCOREE 00007FFB097C0000 00007FFB09824FFF 00065000
07/06/2022 10:05:45,spid79,Unknown,* SECURITY 00000261F4F70000 00000261F4F72FFF 00003000
07/06/2022 10:05:45,spid79,Unknown,* schannel 00007FFB20A10000 00007FFB20AA7FFF 00098000
07/06/2022 10:05:45,spid79,Unknown,* kerberos 00007FFB213D0000 00007FFB214E8FFF 00119000
07/06/2022 10:05:45,spid79,Unknown,* cryptdll 00007FFB21320000 00007FFB21334FFF 00015000
07/06/2022 10:05:45,spid79,Unknown,* NtlmShared 00007FFB21270000 00007FFB21282FFF 00013000
07/06/2022 10:05:45,spid79,Unknown,* msv1_0 00007FFB21140000 00007FFB211C8FFF 00089000
07/06/2022 10:05:45,spid79,Unknown,* profapi 00007FFB22130000 00007FFB2214EFFF 0001f000
07/06/2022 10:05:45,spid79,Unknown,* ncryptprov 00007FFB13B00000 00007FFB13B5BFFF 0005c000
07/06/2022 10:05:45,spid79,Unknown,* opends60 00007FFB16500000 00007FFB1650AFFF 0000b000
07/06/2022 10:05:45,spid79,Unknown,* XmlLite 00007FFB1F8F0000 00007FFB1F925FFF 00036000
07/06/2022 10:05:45,spid79,Unknown,* dbghelp 00007FFB21BF0000 00007FFB21DD3FFF 001e4000
07/06/2022 10:05:45,spid79,Unknown,* hkengine 00007FFAA25E0000 00007FFAA2CE6FFF 00707000
07/06/2022 10:05:45,spid79,Unknown,* hkcompile 00007FFAD6F10000 00007FFAD705BFFF 0014c000
07/06/2022 10:05:45,spid79,Unknown,* hkruntime 00007FFAD8790000 00007FFAD8A65FFF 002d6000
07/06/2022 10:05:45,spid79,Unknown,* RESUTILS 00007FFAF8CC0000 00007FFAF8D5BFFF 0009c000
07/06/2022 10:05:45,spid79,Unknown,* NSI 00007FFB234F0000 00007FFB234F7FFF 00008000
07/06/2022 10:05:45,spid79,Unknown,* DNSAPI 00007FFB20F90000 00007FFB2105AFFF 000cb000
07/06/2022 10:05:45,spid79,Unknown,* CLUSAPI 00007FFAF8BB0000 00007FFAF8CBAFFF 0010b000
07/06/2022 10:05:45,spid79,Unknown,* sqlevn70 0000025CED240000 0000025CED5C3FFF 00384000
07/06/2022 10:05:45,spid79,Unknown,* cscapi 00007FFAF9970000 00007FFAF9981FFF 00012000
07/06/2022 10:05:45,spid79,Unknown,* wkscli 00007FFB21300000 00007FFB21318FFF 00019000
07/06/2022 10:05:45,spid79,Unknown,* gpapi 00007FFB1F4C0000 00007FFB1F4E2FFF 00023000
07/06/2022 10:05:45,spid79,Unknown,* imagehlp 00007FFB23960000 00007FFB2397CFFF 0001d000
07/06/2022 10:05:45,spid79,Unknown,* CRYPTBASE 00007FFB21DE0000 00007FFB21DEBFFF 0000c000
07/06/2022 10:05:45,spid79,Unknown,* rsaenh 00007FFB20AF0000 00007FFB20B23FFF 00034000
07/06/2022 10:05:45,spid79,Unknown,* CRYPTSP 00007FFB21F10000 00007FFB21F27FFF 00018000
07/06/2022 10:05:45,spid79,Unknown,* instapi160 00007FFAD7DE0000 00007FFAD7DF7FFF 00018000
07/06/2022 10:05:45,spid79,Unknown,* kernel.appcore 00007FFB1F390000 00007FFB1F3A1FFF 00012000
07/06/2022 10:05:45,spid79,Unknown,* MSASN1 00007FFB21980000 00007FFB21991FFF 00012000
07/06/2022 10:05:45,spid79,Unknown,* bcryptPrimitives 00007FFB22620000 00007FFB226A1FFF 00082000
07/06/2022 10:05:45,spid79,Unknown,* psapi 00007FFB24A00000 00007FFB24A07FFF 00008000
07/06/2022 10:05:45,spid79,Unknown,* NTASN1 00007FFB21580000 00007FFB215BAFFF 0003b000
07/06/2022 10:05:45,spid79,Unknown,* LOGONCLI 00007FFB21220000 00007FFB21263FFF 00044000
07/06/2022 10:05:45,spid79,Unknown,* SAMCLI 00007FFB13EE0000 00007FFB13EF8FFF 00019000
07/06/2022 10:05:45,spid79,Unknown,* SSPICLI 00007FFB220E0000 00007FFB22111FFF 00032000
07/06/2022 10:05:45,spid79,Unknown,* DPAPI 00007FFB21F80000 00007FFB21F89FFF 0000a000
07/06/2022 10:05:45,spid79,Unknown,* ncrypt 00007FFB215C0000 00007FFB215E6FFF 00027000
07/06/2022 10:05:45,spid79,Unknown,* dhcpcsvc 00007FFB1B160000 00007FFB1B17CFFF 0001d000
07/06/2022 10:05:45,spid79,Unknown,* shcore 00007FFB22C70000 00007FFB22D1CFFF 000ad000
07/06/2022 10:05:45,spid79,Unknown,* webservices 00007FFB12A90000 00007FFB12BE2FFF 00153000
07/06/2022 10:05:45,spid79,Unknown,* iertutil 00007FFB13770000 00007FFB13A20FFF 002b1000
07/06/2022 10:05:45,spid79,Unknown,* srvcli 00007FFB10A20000 00007FFB10A47FFF 00028000
07/06/2022 10:05:45,spid79,Unknown,* netutils 00007FFB21210000 00007FFB2121BFFF 0000c000
07/06/2022 10:05:45,spid79,Unknown,* WINMM 00007FFAFED10000 00007FFAFED36FFF 00027000
07/06/2022 10:05:45,spid79,Unknown,* AUTHZ 00007FFB20030000 00007FFB2007DFFF 0004e000
07/06/2022 10:05:45,spid79,Unknown,* VERSION 00007FFB1F270000 00007FFB1F279FFF 0000a000
07/06/2022 10:05:45,spid79,Unknown,* USERENV 00007FFB220B0000 00007FFB220DDFFF 0002e000
07/06/2022 10:05:45,spid79,Unknown,* bcrypt 00007FFB22750000 00007FFB22776FFF 00027000
07/06/2022 10:05:45,spid79,Unknown,* MSWSOCK 00007FFB21290000 00007FFB212F9FFF 0006a000
07/06/2022 10:05:45,spid79,Unknown,* VCRUNTIME140_1 00007FFAFE430000 00007FFAFE43BFFF 0000c000
07/06/2022 10:05:45,spid79,Unknown,* ODBC32 00007FFAFEC40000 00007FFAFECF7FFF 000b8000
07/06/2022 10:05:45,spid79,Unknown,* secforwarder 00007FFB15710000 00007FFB15721FFF 00012000
07/06/2022 10:05:45,spid79,Unknown,* XOLEHLP 00007FFAFE6D0000 00007FFAFE6E6FFF 00017000
07/06/2022 10:05:45,spid79,Unknown,* WINHTTP 00007FFB20B80000 00007FFB20C89FFF 0010a000
07/06/2022 10:05:45,spid79,Unknown,* SHELL32 00007FFB240D0000 00007FFB24813FFF 00744000
07/06/2022 10:05:45,spid79,Unknown,* WININET 00007FFAFE760000 00007FFAFEC35FFF 004d6000
07/06/2022 10:05:45,spid79,Unknown,* Secur32 00007FFB209B0000 00007FFB209BBFFF 0000c000
07/06/2022 10:05:45,spid79,Unknown,* WINTRUST 00007FFB22A40000 00007FFB22AA6FFF 00067000
07/06/2022 10:05:45,spid79,Unknown,* urlmon 00007FFB10740000 00007FFB1092BFFF 001ec000
07/06/2022 10:05:45,spid79,Unknown,* VCRUNTIME140 00007FFAFE440000 00007FFAFE45AFFF 0001b000
07/06/2022 10:05:45,spid79,Unknown,* MSVCP140 00007FFAFE460000 00007FFAFE4ECFFF 0008d000
07/06/2022 10:05:45,spid79,Unknown,* qds 00007FFADA950000 00007FFADAAFFFFF 001b0000
07/06/2022 10:05:45,spid79,Unknown,* svl 00007FFAFCD90000 00007FFAFCDBDFFF 0002e000
07/06/2022 10:05:45,spid79,Unknown,* sqldk 00007FFAA2CF0000 00007FFAA3268FFF 00579000
07/06/2022 10:05:45,spid79,Unknown,* sqlTsEs 00007FFAA3270000 00007FFAA3AA6FFF 00837000
07/06/2022 10:05:45,spid79,Unknown,* sqllang 00007FFA7E0B0000 00007FFA8074AFFF 0269b000
07/06/2022 10:05:45,spid79,Unknown,* sqlmin 00007FFA80750000 00007FFA83147FFF 029f8000
07/06/2022 10:05:45,spid79,Unknown,* SQLOS 00007FFB1A570000 00007FFB1A579FFF 0000a000
07/06/2022 10:05:45,spid79,Unknown,* OLEAUT32 00007FFB23500000 00007FFB235CCFFF 000cd000
07/06/2022 10:05:45,spid79,Unknown,* SHLWAPI 00007FFB248C0000 00007FFB24914FFF 00055000
07/06/2022 10:05:45,spid79,Unknown,* USER32 00007FFB23B80000 00007FFB23D1FFFF 001a0000
07/06/2022 10:05:45,spid79,Unknown,* msvcp_win 00007FFB226B0000 00007FFB2274CFFF 0009d000
07/06/2022 10:05:45,spid79,Unknown,* gdi32full 00007FFB22930000 00007FFB22A3AFFF 0010b000
07/06/2022 10:05:45,spid79,Unknown,* win32u 00007FFB22AB0000 00007FFB22AD1FFF 00022000
07/06/2022 10:05:45,spid79,Unknown,* GDI32 00007FFB235D0000 00007FFB235F9FFF 0002a000
07/06/2022 10:05:45,spid79,Unknown,* combase 00007FFB23190000 00007FFB234E3FFF 00354000
07/06/2022 10:05:45,spid79,Unknown,* IPHLPAPI 00007FFB20F50000 00007FFB20F8AFFF 0003b000
07/06/2022 10:05:45,spid79,Unknown,* ole32 00007FFB23980000 00007FFB23AA9FFF 0012a000
07/06/2022 10:05:45,spid79,Unknown,* RPCRT4 00007FFB236B0000 00007FFB237D4FFF 00125000
07/06/2022 10:05:45,spid79,Unknown,* sechost 00007FFB23F40000 00007FFB23FDBFFF 0009c000
07/06/2022 10:05:45,spid79,Unknown,* WS2_32 00007FFB23D20000 00007FFB23D8AFFF 0006b000
07/06/2022 10:05:45,spid79,Unknown,* advapi32 00007FFB23600000 00007FFB236ADFFF 000ae000
07/06/2022 10:05:45,spid79,Unknown,* msvcrt 00007FFB24820000 00007FFB248BDFFF 0009e000
07/06/2022 10:05:45,spid79,Unknown,* ucrtbase 00007FFB22780000 00007FFB2287FFFF 00100000
07/06/2022 10:05:45,spid79,Unknown,* NETAPI32 00007FFB09970000 00007FFB09989FFF 0001a000
07/06/2022 10:05:45,spid79,Unknown,* pdh 00007FFB06A10000 00007FFB06A58FFF 00049000
07/06/2022 10:05:45,spid79,Unknown,* CRYPT32 00007FFB224C0000 00007FFB22615FFF 00156000
07/06/2022 10:05:45,spid79,Unknown,* KERNELBASE 00007FFB221F0000 00007FFB224BCFFF 002cd000
07/06/2022 10:05:45,spid79,Unknown,* KERNEL32 00007FFB23FE0000 00007FFB2409CFFF 000bd000
07/06/2022 10:05:45,spid79,Unknown,* ntdll 00007FFB24AD0000 00007FFB24CC6FFF 001f7000
07/06/2022 10:05:45,spid79,Unknown,* sqlservr 00007FF65F180000 00007FF65F252FFF 000d3000
07/06/2022 10:05:45,spid79,Unknown,* MODULE BASE END SIZE