We analyzed 5 samples from public sources (hashes available upon request). Findings:
Understanding official architecture is prerequisite to analyzing leaked files. crossfire server files