: Does it try to add itself to your "Startup" folder?

: Does it try to hide inside explorer.exe or svchost.exe ? To provide a more specific report, if you're comfortable:

: Opening the archive is generally safe, but running any executable inside is high-risk.