Also, what's the point of releasing password protected files to public? I mean, they give you the password thus kind of making the whole password thing a moot point.
So download it, decrypt it, and pick a different password. Takes a couple minutes, tops. And if your 'release' gets more attention than the original, how does the original prove that's what happened, or even get heard?