We analyzed three sample files from known piracy forums (in a sandboxed environment). Here is what we found: