: Even if you extract it, scan the resulting files. Archives are often used to "hide" executable malware (like .exe or .scr files) from basic email scanners.

: Upload the file to VirusTotal to see if it triggers detections from major antivirus engines.

: Check the MD5 or SHA-256 hash of the file against the source's provided hash to ensure the file hasn't been tampered with.