If your pc is in any way compromised, and no 2fa is enabled (and the 2fa device is not compromised as well), you must assume everything is or has been available

If your pc is in any way compromised, and no 2fa is enabled (and the 2fa device is not compromised as well), you must assume everything is or has been available to the evil actor. Sometimes, its a drive-by download or a dropper malware that will install other virii. You will never really know what went in or out your pc...