The user unzips the file and clicks the internal component.

Use a tool like Any.Run or Joe Sandbox to observe the file's behavior in a safe, virtualized environment.

Essential for checking if the file is known on platforms like VirusTotal.