Detect-It-Easy/db/PE/Obfuscator.NET 2009.2.sg

// DIE's signature file

init("protector","Obfuscator.NET 2009");

function detect(bShowType,bShowVersion,bShowOptions)
{
    if(PE.isNET())
    {
        if(PE.isNETStringPresent("Macrobject.Obfuscator"))
        {
            bDetected=1;
        }
        else if(PE.isNETStringPresent("Obfuscated by Macrobject Obfuscator.NET UNREGISTRED"))
        {
            sOptions="Unregistered";
            bDetected=1;
        }
    }

    return result(bShowType,bShowVersion,bShowOptions);
}