[netsharc]

I wonder if a malware should just grep for "pw:" or "password:" and then try the string it finds against anything encrypted. Or forward it to the control center.

Also the contents of files like password[s].txt