: Collects hardware specs, IP address, and screenshots.

: If executed, turn off your internet to stop data exfiltration.

: Run a deep scan using Malwarebytes or Windows Defender .

: Log out of all active web sessions via security settings. If you'd like to dive deeper into the recovery process: Specific antivirus results for this file. Steps to check startup locations for leftovers. How to verify if your data was leaked .

: If you haven't opened it, delete the file immediately.

: Scans for local cryptocurrency wallets and browser extensions.