Detect-It-Easy/db/PE/NET_Spider.2.sg

// Detect It Easy: detection rule file format

init("protector", ".NET Spider");

function detect() {
    if (PE.isNET()) {
        if (PE.isSignatureInSectionPresent(0, "'Protected_By_Attribute'00'NETSpider.Attribute'")) {
            sVersion = "0.5-1.3";
            bDetected = true;
        }
    }

    return result();
}