adding some live malware in order to build file based egress test cases