Downloading a file titled "username and password.rar" is extremely dangerous and is a common tactic used by cybercriminals to distribute malware . These files are almost never legitimate lists of credentials and are instead "baits" designed to infect your system with infostealers or ransomware. The risk of downloading software from the Internet - Visma