I should also ask the user to confirm the source of the file and whether they trust it. If they can't, it's better to delete it. If they want to proceed with playing a legitimate file, provide steps for safe handling. Check if the file type is known and how it's usually opened. Maybe the extension is missing, so they need to identify the file type first using a tool like TrID or by the file signature.