That Setup.exe is the actual malware.
No. The file may be structured as an EPUB container (ZIP archive). Even opening it in an ebook reader can trigger embedded JavaScript macros if you use Adobe Digital Editions. The safest action is to delete the file immediately. That Setup
The file is empty or filled with lorem ipsum text, designed only to collect ad revenue from download links. That Setup