Because i am local admin and i’m authorized to do whatever i want, i can use process explorer.
But i want to use taskmgr.exe
The exe is signed by microsoft
Task manager can have a password?
Anyway, it looks suspicious. Resolution of that window is not quite right, it’s fuzzy. Though I now see you said the .exe is signed, so I guess it’s just some scaling bug.
It’s a screenshot from Intel amt remote admin session so it’s scaled& compressed
But indeed now that I notice, it’s weird that the text “enter password” is out of focus compared to the other crispy text.
But maybe it’s because everything is scaled 150% and that window doesn’t support scaling
No, that’s not what I meant. The window and text around looks fine. I meant the content of the window, that prompt itself.
there was a 3rd party exe that intercepted the call and asked for the password
Alternative: Download sysinternals tools from Microsoft, procmon is way better anyways and portable.
