Hacked Computer: Unable to Run Just Downloaded procexp.exe Just deleted procexp64.exe Creeps Opened

Описание: by [email protected] @cybertrapped

@0:07:30 While I run the command ".\gpg --recv-keys 031EC2536E580D8EA286A9F22071B08A33BD3F06" in PowerShell, I can see the icon of procexp64.exe in the taskbar.

I can see gpg's debugging information in the screen.

@0:07:48 PowerShell's prompt is ready for entry (e.g., the command has executed)

@0:07:49 The procexp64.exe icon disappears from the task bar

@0:09:42 I call procexp64.exe through PowerShell, and after a few seconds, @0:09:51 procexp64.exe window pops opened. I filter for dirmngr, and I see an instance of it running

@0:10:05 I call ".\gpg-config --kill dirmngr"

@0:12:04 I run the command ".\gpg --recv-keys 031EC2536E580D8EA286A9F22071B08A33BD3F06" in PowerShell (we can see the procexp64.exe icon in the far right side of the taskbar)

@0:12:14 The PowerShell prompt is ready for entry (i.e, the command finished executing) and a millisecond later the procexp64.exe icon disappears from the task bar.

@0:12:30 I call procexp64.exe through PowerShell, and after a few seconds, @0:09:51 procexp64.exe window pops opened. I filter for dirmngr, and I see an instance of it running

#HackedByFormerEmployer #cybertrapped