If you’ve already downloaded or run that file, I strongly recommend running a full antivirus/anti-malware scan (Windows Defender Offline scan, Malwarebytes, etc.) and changing any passwords stored on that device.
The progress bar finished, but the result wasn't a man in a trench coat.
He opened Resource Monitor and filtered the network activity. The traffic was originating from a background process named Adobe Genuine Service , but the destination IP wasn't an Adobe subnet. It was routing through a server in a country Elias didn't recognize, sending encrypted packets.
A free, web-based editor that looks and feels almost exactly like Photoshop, capable of opening .psd files without any installation.