If the filename includes setup.exe , keygen , crack , or password: 123 , treat it as highly suspicious.