: Only open the contents inside a virtual machine or a sandbox environment.

: Do not extract the contents. Run the file through VirusTotal to check for hidden threats. How to safely check the content

: View the file in a hex editor to see if it’s a legitimate archive.