rule Kogina {
	meta:
		author = "Snorre Fagerland, Norton Labs"
	strings:
		$ = { 48 89 5C 24 08 57 48 83 EC 20 C6 44 24 40 01 4C 8D 41 20 48 2B D1 41 B9 20 00 00 00 42 8A 44 02 E0 41 88 40 20 41 88 00 49 FF C0 49 FF C9 75 EC B3 07 48 8D 79 40 48 8D 54 24 40 48 8B CF E8 [4] FE CB 75 EF 48 8B 5C 24 30 48 83 C4 20 5F C3 }
	condition:
		all of them
}