Be wary of "double extensions" like document.pdf.exe .

Use a reputable antivirus (like Microsoft Defender Offline or Malwarebytes) to scan and remove the threat [2, 3].

They search for local cryptocurrency wallet files or browser extensions to transfer funds out [1, 3].

If you haven't opened it, delete it immediately and empty your trash.

Files with names like this are usually designed to look like a tool or utility (often for game cheating or automated software). When executed, they typically perform the following actions:

From a different, clean device , change the passwords for your email, banking, and primary social accounts. Enable Multi-Factor Authentication (MFA) everywhere [1, 2]. How to Stay Safe