From a different, clean device , change the passwords for your email, banking, and primary social accounts. Enable Multi-Factor Authentication (MFA) everywhere [1, 2]. How to Stay Safe
If you must test suspicious software, use a virtual machine or a tool like Any.Run to see what the file does in a safe environment.
If you have already run the file, disconnect your PC from the internet to stop the data from being sent to the attacker's server.
They target Discord tokens, Telegram sessions, and gaming accounts (like Steam or Roblox) to take over your profiles [1, 2].
Be wary of "double extensions" like document.pdf.exe .
They scan your web browsers to steal saved passwords, cookies, and credit card information [1, 3].