Bettershet.rar -
If you have interacted with this file, look for these signs:
Saved passwords, cookies, autofill credit card info (Chrome, Edge, Opera). BetterShet.rar
New folders in %AppData% or %LocalAppData% with random 8-character names. If you have interacted with this file, look
IP address, hardware ID, location, and screenshots of your desktop. look for these signs: Saved passwords
Permanently delete the .rar and any extracted contents.