value:  Chimera has harvested data from victim's e-mail including through execution of wmic /node: process call create cmd /c copy c:\Users\\\backup.pst c:\windows\temp\backup.pst" copy "i:\\\My Documents\.pst"copy. 
name: Email Collection: Local Email Collection