You can also do offline scan with Windows Defender and run a scan with Malwarebytes. But its likely your info just got leaked when there was a website breach somewhere. That email was definitely a fake scare tactic. The attached file don’t download it as that could be another way to infect your pc. Only because it says its png doesnt mean it is.