sqlservr.exe
Named by 2 kept items in this workspace.
Search every workspace for sqlservr.exe. It matches the name as written, so it can find other things that share it.
The items that name it 2
MSSQL instance process observed running commands, flagged by Huntress SOC
MS SQL Server process; suspicious when seen as process parent or grandparent of command execution
All technologies in this workspace.