User downloads discordusernamecheckermain.rar , runs the .exe “as administrator.” Nothing visible happens. The next day, their Discord account sends spam DMs to every friend, all servers are left, and the email/password is changed. The attacker now uses their Nitro subscription to gift boosts to themselves.