If you believe the file is legitimate for work or a specific project:

: Verify with the sender or the website admin via a separate, trusted channel.

: Upload the file (or the download URL) to VirusTotal to scan it against 70+ antivirus engines.