: Use tools like 7-Zip to inspect the contents of the archive without executing them. james-heinrich/getid3 - Packagist.org

: Upload the file to VirusTotal to see if it matches known malware signatures.

If you suspect this file is malicious, you can perform a basic analysis by: