Detect-It-Easy/db/COM/Shadow.2.sg

// Detect It Easy: detection rule file
// Author: hypn0 <hypn0@mail.ru>

init("protector", "Shadow");

function detect() {
    if (Binary.compare("e9$$$$b9....bb....be....bf....ad33c3ab86dff7d3e2..68....c3")) {
        sVersion = "1.0 beta";
        sOptions = "by Tailgunner";
        bDetected = true;
    }

    return result();
}