Authentic software providers will never send you a password-protected RAR file via email.

Harvesting saved passwords from your browser [4].

Encrypted archives cannot be easily scanned by automated security bots or email filters [2].

If you didn't specifically request this file from a verified source, delete it.