Malicious code can be hidden several folders deep.
Are you writing about conventions?
A RAR file is a proprietary archive format used to store and compress one or more files. Unlike the more common ZIP format, RAR files offer higher compression ratios and more robust error recovery. In the context of a filename like "23708," the string typically represents a sequential ID from a database. These are frequently found on: 23708.rar