Often, these files are sent by compromised accounts or bots pretending to share "leaks," "game assets," or "exclusive content".
If you haven't downloaded it, simply block the sender and delete the message.
If you are seeing "virus detected" pop-ups in your browser after visiting a site related to this file, it may just be a fake notification scam.