: Inside the .rar file is usually an executable ( .exe ) or a script disguised as an image. Because Windows often hides file extensions by default, a file named image.png.exe might just look like image.png .

: You receive a file from a friend (whose account was likely hacked) or a stranger.

: In Windows File Explorer, go to "View" and check "File name extensions" so you can see if a file is actually an .exe .

from people you don't know, or even friends who suddenly send them without context.