Yep, thats malicious.
I had a fake paypal mail in my Gmail some time. And my grandma got 2 malicious zip attachments via mail some weeks ago.
And i just killed my Explorer with a context scan of the file.