Benign powershell Download

AWS.Tools.CodePipeline 5.0.303

AWS SDK for .NET Core assemblyAuthenticode chain CN: Amazon Web Services, Inc.

Evidence

AWS SDK for .NET Core assembly 0x411c5–0x41285
0x411c5436f6e66696775726174696f6e50726fConfigurationPro
0x411d570657274795479706500416374696f6epertyType.Action
0x411e5436f6e66696775726174696f6e50726fConfigurationPro
0x411f5706572747954797065005f7479706500pertyType._type.
0x4120541575353444b2e436f7265006765745fAWSSDK.Core.get_
0x41215417274696661637453746f7265007365ArtifactStore.se
0x41225745f417274696661637453746f726500t_ArtifactStore.
0x412354973536574417274696661637453746fIsSetArtifactSto
0x412457265005f617274696661637453746f72re._artifactStor
0x4125565006765745f4f6e4661696c75726500e.get_OnFailure.
0x412657365745f4f6e4661696c757265004973set_OnFailure.Is
0x412755365744f6e4661696c757265005f6f6eSetOnFailure._on
0x412854661696c757265005f6973 Failure._is
.NET set_Item method reference 0x4262b–0x426eb
0x4262b5f5175657279506172616d007365745f_QueryParam.set_
0x4263b5175657279506172616d004973536574QueryParam.IsSet
0x4264b5175657279506172616d005f71756572QueryParam._quer
0x4265b79506172616d006765745f4974656d00yParam.get_Item.
0x4266b7365745f4974656d004c697374576562set_Item.ListWeb
0x4267b686f6f6b4974656d0053797374656d00hookItem.System.
0x4268b437573746f6d00416d617a6f6e2e5275Custom.Amazon.Ru
0x4269b6e74696d652e496e7465726e616c2e54ntime.Internal.T
0x426ab72616e73666f726d00466e00426f6f6cransform.Fn.Bool
0x426bb65616e0054696d655370616e004f7665ean.TimeSpan.Ove
0x426cb7272696464656e006765745f546f6b65rridden.get_Toke
0x426db6e007365745f546f6b656e006765745fn.set_Token.get_
0x426eb53657373696f6e54 SessionT
Path ending in credentials 0x47572–0x47632
0x4757274696661637443726564656e7469616ctifactCredential
0x4758273004973536574417274696661637443s.IsSetArtifactC
0x47592726564656e7469616c73005f61727469redentials._arti
0x475a26661637443726564656e7469616c7300factCredentials.
0x475b263726564656e7469616c73006765745fcredentials.get_
0x475c2506f6c6c696e67536572766963655072PollingServicePr
0x475d2696e636970616c73007365745f506f6cincipals.set_Pol
0x475e26c696e67536572766963655072696e63lingServicePrinc
0x475f26970616c73004973536574506f6c6c69ipals.IsSetPolli
0x476026e67536572766963655072696e636970ngServicePrincip
0x47612616c73005f706f6c6c696e6753657276als._pollingServ
0x476226963655072696e636970616c73006765icePrincipals.ge
0x47632745f4d6174636845717561 t_MatchEqua
HttpClient UserAgent accessor 0x48577–0x48637
0x485776e672e5461736b732e536f7572636573ng.Tasks.Sources
0x485872e4956616c75655461736b536f757263.IValueTaskSourc
0x48597652e476574526573756c740049735365e.GetResult.IsSe
0x485a774526573756c74005f726573756c7400tResult._result.
0x485b76765745f557365724167656e74005f75get_UserAgent._u
0x485c77365724167656e7400416d617a6f6e53serAgent.AmazonS
0x485d7657276696365436c69656e7400416d61erviceClient.Ama
0x485e77a6f6e436f6465506970656c696e6543zonCodePipelineC
0x485f76c69656e74005f636c69656e7400456elient._client.En
0x486077669726f6e6d656e740053797374656dvironment.System
0x486172e436f6c6c656374696f6e732e47656e.Collections.Gen
0x48627657269632e494173796e63456e756d65eric.IAsyncEnume
0x486377261746f723c416d617a6f6e2e rator<Amazon.
UTF-16 exe filename suffix token 0x4a8ec–0x4a9bc
0x4a8ec45007800650063007500740069006f00E.x.e.c.u.t.i.o.
0x4a8fc6e00002b7200650073006f006c007600n..+r.e.s.o.l.v.
0x4a90c6500640043006f006e00660069006700e.d.C.o.n.f.i.g.
0x4a91c750072006100740069006f006e00001fu.r.a.t.i.o.n...
0x4a92c65007800650063007500740069006f00e.x.e.c.u.t.i.o.
0x4a93c6e0052006500730075006c0074000019n.R.e.s.u.l.t...
0x4a94c6500720072006f007200440065007400e.r.r.o.r.D.e.t.
0x4a95c610069006c0073000027650078007400a.i.l.s..'e.x.t.
0x4a96c650072006e0061006c00450078006500e.r.n.a.l.E.x.e.
0x4a97c63007500740069006f006e0049006400c.u.t.i.o.n.I.d.
0x4a98c0031650078007400650072006e006100.1e.x.t.e.r.n.a.
0x4a99c6c004500780065006300750074006900l.E.x.e.c.u.t.i.
0x4a9ac6f006e00530075006d006d0061007200o.n.S.u.m.m.a.r.
0x4a9bc79 y

Showing the top 5 files — 1 more file (29 regions) not shown.

No evidence locations were recorded for this file. Raw result

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.