You might see that the Dropbox Community team have been busy working on some major updates to the Community itself! So, here is some info on what’s changed, what’s staying the same and what you can expect from the Dropbox Community overall.

Forum Discussion

Mercury415's avatar
Mercury415
New member | Level 2
6 years ago

Does Dropbox Run Powershell Commands?

Hello, our endpoint software picked up dropbox running this command - C:\WINDOWS\System32\WindowsPowerShell\v1.0\powershell "Get-AppxPackage C27EB4BA.DropboxOEM | Remove-AppxPackage"  I saw the exa...
Desktop
Share
Sync
  • Ross_S's avatar
    Ross_S
    6 years ago

    Hi there,

    Yes, this looks expected, we call that when we uninstall the DropboxOEM. You'll only see this on Windows 10 as it related to the UWP version of our app. 

    Via Powershell we're uninstalling the DropboxOEM from system level so that it does not get installed again. This effectively cancels scheduled installation of DropboxOEM.

    There shouldn't be anything to be worried about here, this is acting as designed.

    Hope this helps!

     

Jane's avatar
Jane
Icon for Dropbox Staff rankDropbox Staff
6 years ago
Hey Mercury415, let me forward your inquiry to a team specialist in form of a question. To get going with that, I’ve sent you a brief message on the email address connected to your Community profile. 
 
Whenever you have some spare time, please have a look at your inbox for my message & I’ll make sure to promptly follow-up with you asap. Thanks in advance- I’ll be awaiting your next reply!
  • Kombi's avatar
    Kombi
    New member | Level 2
    6 years ago

    Any update?

  • Wumbowarrior's avatar
    Wumbowarrior
    New member | Level 2
    6 years ago

    We have run into this exact same behavior, which was detected with our endpoint software. Is it normal for DropBox to operate in this way? I'm concerned that someone may have maliciously hijacked powershell to dump credentials to a dropbox account.

    • Jane's avatar
      Jane
      Icon for Dropbox Staff rankDropbox Staff
      6 years ago
      Hey Kombi & Wumbowarrior, thanks for the nudge; I’m afraid I don’t have any news to share, however I’ll do my best to follow-up on your concern. 
       
      • If it’s not too much trouble for you, could you also please send a screenshot of any diagnostic messages you received (including any error messages in case you're getting any)?
      • Could you let me know what's the name of the application that picked the file in question? 
      Any detail you could include on this discussion would be very helpful & thanks in advance for the time you're devoting to work on that with me! 
      • Kombi's avatar
        Kombi
        New member | Level 2
        6 years ago

        It is not an error - Our endpoint security picked up dropbox running this command - C:\WINDOWS\System32\WindowsPowerShell\v1.0\powershell "Get-AppxPackage C27EB4BA.DropboxOEM | Remove-AppxPackage"  

        Is it normal for DropBox to operate in this way?

About Create, upload, and share

Find help to solve issues with creating, uploading, and sharing files and folders in Dropbox. Get support and advice from the Dropbox Community.

Need more support

If you need more help you can view your support options (expected response time for an email or ticket is 24 hours), or contact us on X or Facebook.

For more info on available support options for your Dropbox plan, see this article.

If you found the answer to your question in this Community thread, please 'like' the post to say thanks and to let us know it was useful!