The potentially malicious program comes disguised as an image file—after expanding the compressed archive and double-clicking it, Leap-A launches and installs itself on your system.