But without specific knowledge, it's safer to keep the answer general. Provide steps for both security checks and extraction, while advising caution. Also, if the file was provided by someone they trust, maybe they can ask that person about its contents.
