They stole Login Data and other passwords, should I be afraid?

Question

Malware

I caught a simple but not pleasant virus, which KAV does not even suspect of anything.
After I realized that the software was a snag, I started running it in the sandbox and other tools to study the behavior.
And then the full picture emerged.
The bottom line is that the virus steals the whole folder:
C:\Users\Adminko\AppData\Roaming\Opera Software\Opera Stable
C:\Users\Adminko\AppData\Local\Google\Chrome\User Data\Default
and other files from Skype, FileZilla and a couple more incomprehensible ones
(This is what I could see in the archive that was sent to the FTP server)
Changed the passwords from Skype and FTP all at once, but as far as I know about browsers, these files will not give anything to a hacker, since passwords encrypted with DPAPI.
The question is, can a hacker also steal DPAPI to decrypt my passwords on his PC?
Since there were still files in the archive that were not readable at all, and I don’t know what they are and where they pulled them from, but there is a feeling that this is the same DPAPI.
I have Windows 10 x64

Answer 1

1. This is not a virus, but a Trojan (the virus, at least, is able to multiply without the participation (use) of a person).
   
2. Everything that he pulled from the profile under which he himself is running, he will be able to decrypt (because it can be a browser running under this user).
   
3. If it was launched from under the administrator, then it pulled and decrypted (or grabbed everything necessary for decryption) everything at least somewhat interesting from the profiles of all users on the machine.
   
4. The only case where DPAPI could be of any help is if a Trojan running as non-administrator somehow got access to the browser profile in another user's profile, but did not get access to the registry of that user (the file in the root of his profile). The case is generally the rarest, and the number can be theoretically considered, because by default access rights close all the contents of the profile of one user from another (non-administrator).