Check the "From" address. Does "File Key.rar" come from a known contact? Even if it does, was it expected?
Once a user extracts File Key.rar , they rarely find a text document. Instead, they typically encounter: Download File Key.rar
Never open unexpected archives on a host machine. Use a virtual environment or an online tool like VirusTotal to see what the community says about the hash. Check the "From" address