: Reports often show the file modifying registry values for auto-execution or spawning numerous processes.
If you are looking for a security report for this file, here is what is typically analyzed for such samples: 56577.rar
Do you have a (like MD5 or SHA256) for this file, or did you find it in a specific directory ? Bug#813645: jessie-pu: package libclamunrar/0.99-0+deb8u1 : Reports often show the file modifying registry