If you did not obtain the file directly from Microsoft, MSDN, a VLSC portal, or a trusted OEM, assume it is dangerous until proven otherwise.

If you must determine the nature of this file, follow a strict sandbox procedure.