Detect-It-Easy/db/COM/DCFR.2.sg

// Detect It Easy: detection rule file
// Author: hypn0 <hypn0@mail.ru>

init("protector", "DCFR");

function detect() {
    if (Binary.compare("b8....ba....3bc4eb$$72$$5250b9....bb....8b0733c140890743e2")) {
        sVersion = "0.0.4";
        bDetected = true;
    }

    return result();
}