It varies. To prevent the bait files being easily identifiable, they vary in currency, age, software version, file format, age, and coin history. Some of the formats we will keep actively using after delivering the file to you (to make it look like a real user is still using it), while others will appear abandoned. Some of the files will be encrypted with easy-to-guess passwords (like 'blah', 'password', etc.). They all get the same theft alerting.