: Portable system cleaners (CCleaner), network scanners, or password recovery tools.

: Look for "double extensions" (e.g., Herramientas.pdf.exe ), which are a primary indicator of malware.

: Open the RAR with a tool like WinRAR or 7-Zip without extracting to see the internal file list.