If it doesn't do something obvious like installing the program or self extract an archive you might have reason to worry. I've encountered mp3 files like that. At the time I expected a self-extracting archive. What I got was a program that, besides playing/extracting the song, tried to install some malware, according to my Anti-Virus program.