The following is a list of md5sums of malware samples which have displayed the behavior detected by SID 16864:
067ce932fa20deb4d3ed8020d4c5e9fe
151e1e3f0cdae420d3e2a8fa6ee4f153
1682235b522d8892cd995c0c43fd6cc8
1a3a36cb329ade4bfb9f707b12b14be2
1b47c12920421ea609aaad765792cab3
1bc5b6bb88cb2344a4207ce21c0f3aa8
20e80be67392a4a6b052418be3caa770
21d21b5e5abbbafb9cad72951e3bba3b
27fa8e10ed66ef9fc1968a0fd1fb9489
28da399b99e7fd3ee27debe90067b97c
30f2f969f32819a50bf66f546e29cc74
32927f803c11d4db0916ae97a8333c5a
33768ab392876d3feb8e6a2868c16bb0
3a35a90739078ebe91c518643c5a0bdb
3bd43a20e97d814d3735e9d52c848353
3e0205ba34217ca99fda5beaddb5c6ae
42d32d3991db420c96dc3c70b85c1bb4
49b371238b6a9823bbc6b0214d34f625
5b42a56f924cd14461ed02365d10292e
5d100541ccf2f613225365917fcde3c3
5e836806513847dbc7166f330d46de2c
5edc94d43a083a8fd7bdedd65e0d7871
6e0b5ff5c7b89522e59566fc635f2fd8
6ef69118636be1a79029817d628dbc83
70124dac0e675e1f9f9a88c4496123fa
70f8b19135141b89b7199addfe9f58b6
7376f89d675f622e12256f4a61d9482d
745b2794827a6df1f3e3466e4715bcc7
77dcf06a1734eaa1d23cf84f95efabd5
7a3e09faf8f50aa95c699a998261670d
85042af5c7837d56746fac259aa6736b
852fabb239a2ccfa19eaf2b95baf4ba9
8850c79f7912880f3b0e506e6eba4213
88e3a9770dbcd9f2d46865554b85b1fd
911b513e5342f7943af88efcec581662
959ce4f620816106e5f4518030c9ba1c
9d345f6b931d61a3befe367f7a4dd3fa
a005a3a77875bc95af76e1f1adc61310
a2093742b28e9224776b98cc009f332f
a2f1d2607ccbd0327352c930722d4b70
a434f33dec69d0df5f0680cffb91e768
a9f36644060ba14c4887abe655d1ed13
ac7a0473a2053d339e4a5741a496802a
b6d39dbfa33c323c701f891444c695e4
bb51ef52430d81d87f0125fda2bf3027
bece548a6618cbf31bcef9226f37588c
c09f536a1ff1ce396e15d8ac315a1851
c1f034b264d540b7a05a93cdd6d0be50
c34cb96ebe8f00ca103c9825c2b12208
c9cd4c02106d0af04e66ff9716405186
ca3a808275820adb234fd8c83ab12cf3
cf0003d7407bd7f653042efc26c29e9a
d01c181ac75a4b5e104f8e38f116f298
d1a2acbdaa6ceacaab6a0457cc8a1c9e
d57a9b339825e56297b40e0ab6867cbf
d65e09c82f54ca8a39f08c82f3309bb0
d75d86cbfb29238ddc6dbb80a1429417
d77a38114cb699b5a6ebde55bc8d371b
d870678d1daa709bac9200c1ab2bc96d
de3a8656cf7ca346d00c6263e5ef74f3
e1acea437e59edbf96e96f526c6fb8b5
ef57edd2931d7f2569e00ba0565c90a5
f26fca0e4706b74a25d647f4767fc52a
f82d7b8eb69508d379370731c2146ccc
f98f59476ebdc291005737c2c94de62f
fc5eb759db9d027c7d78856f3facb923
fd08af7b27cdf4697b7706cc0b111295
fd10dde3fe9ef477104cfb1d4948c598
fde86bda532d05d8f5a55e07dec9c1f0
fef3e67afe9e03f6ffb331197a399d69
ffa9268055c3d0e73dd6be31ff30172e
')
