Avoid downloading or extracting the contents of this file, especially if you did not explicitly request it from a trusted source.
Malicious archives often contain hidden scripts or executables designed to run the moment you extract them.
If the file is already on your system, use a service like VirusTotal to check the file's hash against dozens of security engines.
If this came from a colleague, contact them via a different channel (like a phone call or chat) to confirm they actually sent it.