Some versions of this file install RATs that give attackers complete control over the victim's computer, allowing them to monitor keystrokes or access webcam feeds.
Security researchers often identify files like this as carriers for the Redline Stealer, which harvests saved passwords from browsers and crypto wallet information. How the Scam Spreads
If you clicked a suspicious link, check your Steam API Key settings. Scammers use these keys to manipulate trades even after you change your password.