A VPN hides your IP from your ISP, but it does not hide you from the malware hidden in the file. Furthermore, VPNs keep logs. Law enforcement can still trace you.