Share
ReportHello,
I received an email from my security team, that a PowerShell query using power automate triggered a credential dump issue with high priority.
When checked, we found that the the object it is pointing is PowerShell and and command that triggered the error is
C:\WINDOWS\Sysnative\WindowsPowerShell\v1.0\powershell.exe"" -c "" try { $assy = [System.Reflection.Assembly]::LoadFrom('C:\Program Files (x86)\Power Automate Desktop\Microsoft.Flow.RPA.Service.Core.dll'); $rdCoreClientType = $assy.GetType('Microsoft.Flow.RPA.Service.Core.Platform.RDClient'); $constructorInfo = $rdCoreClientType.GetConstructor(@()); $rdClientInstance = $constructorInfo.Invoke(@()); } catch [System.DllNotFoundException] { <# Note[guco]: This is the exception we get when there is a broken VC redist install. #> exit -42; } catch [Exception] { Write-Host $_; } ""
Could you please help me understand, if this should trigger the issue (Possible credential dump was found)?
Awaiting your response.
Much appreciated!!
All responses (
Answers (
2
