pe
	pdb_path = "TestNetApp.pdb"
	number_of_resources = 2
	resources
		[0]
			offset = 44192
			length = 812
			type = 16
			id = 1
			language = 0
			type_string = YR_UNDEFINED
			name_string = YR_UNDEFINED
			language_string = YR_UNDEFINED
		[1]
			offset = 45004
			length = 490
			type = 24
			id = 1
			language = 0
			type_string = YR_UNDEFINED
			name_string = YR_UNDEFINED
			language_string = YR_UNDEFINED
	resource_version
		minor = 0
		major = 0
	resource_timestamp = 0
	export_details
	export_timestamp = YR_UNDEFINED
	dll_name = YR_UNDEFINED
	number_of_exports = 0
	number_of_imports = 1
	rich_signature
		clear_data = YR_UNDEFINED
		raw_data = YR_UNDEFINED
		key = YR_UNDEFINED
		length = YR_UNDEFINED
		offset = YR_UNDEFINED
	overlay
		size = 0
		offset = YR_UNDEFINED
	sections
		[0]
			name = ".text"
			characteristics = 1610612768
			virtual_address = 8192
			virtual_size = 43412
			raw_data_offset = 512
			raw_data_size = 43520
			pointer_to_relocations = 0
			pointer_to_line_numbers = 0
			number_of_relocations = 0
			number_of_line_numbers = 0
		[1]
			name = ".rsrc"
			characteristics = 1073741888
			virtual_address = 57344
			virtual_size = 1464
			raw_data_offset = 44032
			raw_data_size = 1536
			pointer_to_relocations = 0
			pointer_to_line_numbers = 0
			number_of_relocations = 0
			number_of_line_numbers = 0
		[2]
			name = ".reloc"
			characteristics = 1107296320
			virtual_address = 65536
			virtual_size = 12
			raw_data_offset = 45568
			raw_data_size = 512
			pointer_to_relocations = 0
			pointer_to_line_numbers = 0
			number_of_relocations = 0
			number_of_line_numbers = 0
	data_directories
		[0]
			virtual_address = 0
			size = 0
		[1]
			virtual_address = 51520
			size = 75
		[2]
			virtual_address = 57344
			size = 1464
		[3]
			virtual_address = 0
			size = 0
		[4]
			virtual_address = 0
			size = 0
		[5]
			virtual_address = 65536
			size = 12
		[6]
			virtual_address = 51444
			size = 28
		[7]
			virtual_address = 0
			size = 0
		[8]
			virtual_address = 0
			size = 0
		[9]
			virtual_address = 0
			size = 0
		[10]
			virtual_address = 0
			size = 0
		[11]
			virtual_address = 0
			size = 0
		[12]
			virtual_address = 8192
			size = 8
		[13]
			virtual_address = 0
			size = 0
		[14]
			virtual_address = 8200
			size = 72
	loader_flags = 0
	size_of_heap_commit = 4096
	size_of_heap_reserve = 1048576
	size_of_stack_commit = 4096
	size_of_stack_reserve = 1048576
	dll_characteristics = 34112
	subsystem = 3
	checksum = 0
	size_of_headers = 512
	size_of_image = 73728
	win32_version_value = 0
	subsystem_version
		minor = 0
		major = 4
	image_version
		minor = 0
		major = 0
	os_version
		minor = 0
		major = 4
	linker_version
		minor = 0
		major = 48
	file_alignment = 512
	section_alignment = 8192
	base_of_data = 57344
	base_of_code = 8192
	size_of_uninitialized_data = 0
	size_of_initialized_data = 2048
	size_of_code = 43520
	opthdr_magic = 267
	version_info
		Comments = ""
		CompanyName = ""
		FileDescription = "TestNetApp"
		FileVersion = "1.0.0.0"
		InternalName = "TestNetApp.exe"
		LegalCopyright = "Copyright \xa9  2016"
		LegalTrademarks = ""
		OriginalFilename = "TestNetApp.exe"
		ProductName = "TestNetApp"
		ProductVersion = "1.0.0.0"
		Assembly Version = "1.0.0.0"
	number_of_rva_and_sizes = 15
	image_base = 4194304
	entry_point = 43918
	characteristics = 302
	size_of_optional_header = 224
	number_of_symbols = 0
	pointer_to_symbol_table = 0
	timestamp = 1586933551
	number_of_sections = 3
	machine = 332
	is_pe = 1
	RESOURCE_TYPE_MANIFEST = 24
	RESOURCE_TYPE_HTML = 23
	RESOURCE_TYPE_ANIICON = 22
	RESOURCE_TYPE_ANICURSOR = 21
	RESOURCE_TYPE_VXD = 20
	RESOURCE_TYPE_PLUGPLAY = 19
	RESOURCE_TYPE_DLGINCLUDE = 17
	RESOURCE_TYPE_VERSION = 16
	RESOURCE_TYPE_GROUP_ICON = 14
	RESOURCE_TYPE_GROUP_CURSOR = 12
	RESOURCE_TYPE_MESSAGETABLE = 11
	RESOURCE_TYPE_RCDATA = 10
	RESOURCE_TYPE_ACCELERATOR = 9
	RESOURCE_TYPE_FONT = 8
	RESOURCE_TYPE_FONTDIR = 7
	RESOURCE_TYPE_STRING = 6
	RESOURCE_TYPE_DIALOG = 5
	RESOURCE_TYPE_MENU = 4
	RESOURCE_TYPE_ICON = 3
	RESOURCE_TYPE_BITMAP = 2
	RESOURCE_TYPE_CURSOR = 1
	SECTION_MEM_WRITE = 2147483648
	SECTION_MEM_READ = 1073741824
	SECTION_MEM_EXECUTE = 536870912
	SECTION_MEM_SHARED = 268435456
	SECTION_MEM_NOT_PAGED = 134217728
	SECTION_MEM_NOT_CACHED = 67108864
	SECTION_MEM_DISCARDABLE = 33554432
	SECTION_LNK_NRELOC_OVFL = 16777216
	SECTION_MEM_16BIT = 131072
	SECTION_GPREL = 32768
	SECTION_CNT_UNINITIALIZED_DATA = 128
	SECTION_CNT_INITIALIZED_DATA = 64
	SECTION_CNT_CODE = 32
	IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR = 14
	IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT = 13
	IMAGE_DIRECTORY_ENTRY_IAT = 12
	IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT = 11
	IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG = 10
	IMAGE_DIRECTORY_ENTRY_TLS = 9
	IMAGE_DIRECTORY_ENTRY_GLOBALPTR = 8
	IMAGE_DIRECTORY_ENTRY_ARCHITECTURE = 7
	IMAGE_DIRECTORY_ENTRY_DEBUG = 6
	IMAGE_DIRECTORY_ENTRY_BASERELOC = 5
	IMAGE_DIRECTORY_ENTRY_SECURITY = 4
	IMAGE_DIRECTORY_ENTRY_EXCEPTION = 3
	IMAGE_DIRECTORY_ENTRY_RESOURCE = 2
	IMAGE_DIRECTORY_ENTRY_IMPORT = 1
	IMAGE_DIRECTORY_ENTRY_EXPORT = 0
	BYTES_REVERSED_HI = 32768
	UP_SYSTEM_ONLY = 16384
	DLL = 8192
	SYSTEM = 4096
	NET_RUN_FROM_SWAP = 2048
	REMOVABLE_RUN_FROM_SWAP = 1024
	DEBUG_STRIPPED = 512
	MACHINE_32BIT = 256
	BYTES_REVERSED_LO = 128
	LARGE_ADDRESS_AWARE = 32
	AGGRESIVE_WS_TRIM = 16
	LOCAL_SYMS_STRIPPED = 8
	LINE_NUMS_STRIPPED = 4
	EXECUTABLE_IMAGE = 2
	RELOCS_STRIPPED = 1
	TERMINAL_SERVER_AWARE = 32768
	WDM_DRIVER = 8192
	NO_BIND = 2048
	NO_SEH = 1024
	NO_ISOLATION = 512
	NX_COMPAT = 256
	FORCE_INTEGRITY = 128
	DYNAMIC_BASE = 64
	SUBSYSTEM_WINDOWS_BOOT_APPLICATION = 16
	SUBSYSTEM_XBOX = 14
	SUBSYSTEM_EFI_RUNTIME_DRIVER = 12
	SUBSYSTEM_EFI_BOOT_SERVICE_DRIVER = 11
	SUBSYSTEM_EFI_APPLICATION = 10
	SUBSYSTEM_WINDOWS_CE_GUI = 9
	SUBSYSTEM_NATIVE_WINDOWS = 8
	SUBSYSTEM_POSIX_CUI = 7
	SUBSYSTEM_OS2_CUI = 5
	SUBSYSTEM_WINDOWS_CUI = 3
	SUBSYSTEM_WINDOWS_GUI = 2
	SUBSYSTEM_NATIVE = 1
	SUBSYSTEM_UNKNOWN = 0
	MACHINE_WCEMIPSV2 = 361
	MACHINE_THUMB = 450
	MACHINE_SH5 = 424
	MACHINE_SH4 = 422
	MACHINE_SH3DSP = 419
	MACHINE_SH3 = 418
	MACHINE_R4000 = 358
	MACHINE_POWERPCFP = 497
	MACHINE_POWERPC = 496
	MACHINE_MIPSFPU16 = 1126
	MACHINE_MIPSFPU = 870
	MACHINE_MIPS16 = 614
	MACHINE_M32R = 36929
	MACHINE_IA64 = 512
	MACHINE_I386 = 332
	MACHINE_EBC = 3772
	MACHINE_ARM64 = 43620
	MACHINE_ARMNT = 452
	MACHINE_ARM = 448
	MACHINE_AMD64 = 34404
	MACHINE_AM33 = 467
	MACHINE_UNKNOWN = 0
dotnet
	number_of_field_offsets = 8
	field_offsets
		[0] = 43276
		[1] = 43532
		[2] = 43572
		[3] = 43602
		[4] = 43634
		[5] = 43650
		[6] = 43682
		[7] = 43746
	number_of_constants = YR_UNDEFINED
	constants
	typelib = "b1147c35-cd68-45de-bcae-21a45f03b24c"
	number_of_user_strings = 31
	user_strings
		[0] = "S\x00y\x00s\x00t\x00e\x00m\x00.\x00C\x00o\x00r\x00e\x00,\x00 \x00V\x00e\x00r\x00s\x00i\x00o\x00n\x00=\x003\x00.\x005\x00.\x000\x00.\x000\x00,\x00 \x00C\x00u\x00l\x00t\x00u\x00r\x00e\x00=\x00n\x00e\x00u\x00t\x00r\x00a\x00l\x00,\x00 \x00P\x00u\x00b\x00l\x00i\x00c\x00K\x00e\x00y\x00T\x00o\x00k\x00e\x00n\x00=\x00b\x007\x007\x00a\x005\x00c\x005\x006\x001\x009\x003\x004\x00e\x000\x008\x009\x00"
		[1] = "S\x00y\x00s\x00t\x00e\x00m\x00.\x00S\x00e\x00c\x00u\x00r\x00i\x00t\x00y\x00.\x00C\x00r\x00y\x00p\x00t\x00o\x00g\x00r\x00a\x00p\x00h\x00y\x00.\x00A\x00e\x00s\x00C\x00r\x00y\x00p\x00t\x00o\x00S\x00e\x00r\x00v\x00i\x00c\x00e\x00P\x00r\x00o\x00v\x00i\x00d\x00e\x00r\x00"
		[2] = "W\x00P\x004\x00E\x00Q\x00K\x00S\x001\x00w\x008\x002\x00i\x00c\x00B\x00F\x00u\x00q\x002\x00.\x00v\x00F\x00S\x00A\x000\x00R\x000\x00j\x00s\x00W\x000\x00d\x00h\x00P\x00Y\x00W\x00p\x00c\x00"
		[3] = "{\x001\x001\x001\x001\x001\x00-\x002\x002\x002\x002\x002\x00-\x001\x000\x000\x000\x009\x00-\x001\x001\x001\x001\x002\x00}\x00"
		[4] = "k\x00b\x00x\x00P\x00S\x00E\x00h\x00L\x00T\x00x\x005\x003\x008\x00W\x00m\x00O\x00k\x00t\x00.\x00U\x00G\x00Q\x00Q\x00Y\x007\x00r\x00M\x00w\x00X\x00L\x00H\x00s\x00c\x00R\x00X\x00X\x00O\x00"
		[5] = "{\x001\x001\x001\x001\x001\x00-\x002\x002\x002\x002\x002\x00-\x005\x000\x000\x000\x001\x00-\x000\x000\x000\x000\x000\x00}\x00"
		[6] = "G\x00e\x00t\x00D\x00e\x00l\x00e\x00g\x00a\x00t\x00e\x00F\x00o\x00r\x00F\x00u\x00n\x00c\x00t\x00i\x00o\x00n\x00P\x00o\x00i\x00n\x00t\x00e\x00r\x00"
		[7] = "f\x00i\x00l\x00e\x00:\x00/\x00/\x00/\x00"
		[8] = "L\x00o\x00c\x00a\x00t\x00i\x00o\x00n\x00"
		[9] = "F\x00i\x00n\x00d\x00 \x00"
		[10] = "R\x00e\x00s\x00o\x00u\x00r\x00c\x00e\x00A\x00"
		[11] = "V\x00i\x00r\x00t\x00u\x00a\x00l\x00 \x00"
		[12] = "A\x00l\x00l\x00o\x00c\x00"
		[13] = "W\x00r\x00i\x00t\x00e\x00 \x00"
		[14] = "P\x00r\x00o\x00c\x00e\x00s\x00s\x00 \x00"
		[15] = "M\x00e\x00m\x00o\x00r\x00y\x00"
		[16] = "P\x00r\x00o\x00t\x00e\x00c\x00t\x00"
		[17] = "O\x00p\x00e\x00n\x00 \x00"
		[18] = "P\x00r\x00o\x00c\x00e\x00s\x00s\x00"
		[19] = "C\x00l\x00o\x00s\x00e\x00 \x00"
		[20] = "H\x00a\x00n\x00d\x00l\x00e\x00"
		[21] = "k\x00e\x00r\x00n\x00e\x00l\x00 \x00"
		[22] = "3\x002\x00.\x00d\x00l\x00l\x00"
		[23] = "{\x001\x001\x001\x001\x001\x00-\x002\x002\x002\x002\x002\x00-\x002\x000\x000\x000\x001\x00-\x000\x000\x000\x000\x001\x00}\x00"
		[24] = "{\x001\x001\x001\x001\x001\x00-\x002\x002\x002\x002\x002\x00-\x002\x000\x000\x000\x001\x00-\x000\x000\x000\x000\x002\x00}\x00"
		[25] = "{\x001\x001\x001\x001\x001\x00-\x002\x002\x002\x002\x002\x00-\x003\x000\x000\x000\x001\x00-\x000\x000\x000\x000\x001\x00}\x00"
		[26] = "{\x001\x001\x001\x001\x001\x00-\x002\x002\x002\x002\x002\x00-\x003\x000\x000\x000\x001\x00-\x000\x000\x000\x000\x002\x00}\x00"
		[27] = "{\x001\x001\x001\x001\x001\x00-\x002\x002\x002\x002\x002\x00-\x004\x000\x000\x000\x001\x00-\x000\x000\x000\x000\x001\x00}\x00"
		[28] = "{\x001\x001\x001\x001\x001\x00-\x002\x002\x002\x002\x002\x00-\x004\x000\x000\x000\x001\x00-\x000\x000\x000\x000\x002\x00}\x00"
		[29] = "{\x001\x001\x001\x001\x001\x00-\x002\x002\x002\x002\x002\x00-\x005\x000\x000\x000\x001\x00-\x000\x000\x000\x000\x001\x00}\x00"
		[30] = "{\x001\x001\x001\x001\x001\x00-\x002\x002\x002\x002\x002\x00-\x005\x000\x000\x000\x001\x00-\x000\x000\x000\x000\x002\x00}\x00"
	number_of_modulerefs = 2
	modulerefs
		[0] = "kernel32.dll"
		[1] = "kernel32"
	assembly
		culture = YR_UNDEFINED
		name = "TestNetApp"
		version
			revision_number = 0
			build_number = 0
			minor = 0
			major = 1
	number_of_assembly_refs = 4
	assembly_refs
		[0]
			version
				major = 4
				minor = 0
				build_number = 0
				revision_number = 0
			public_key_or_token = "\xb7z\V\x194\xe0"
			name = "mscorlib"
		[1]
			version
				major = 4
				minor = 0
				build_number = 0
				revision_number = 0
			public_key_or_token = "\xb7z\V\x194\xe0"
			name = "System.Core"
		[2]
			version
				major = 4
				minor = 0
				build_number = 0
				revision_number = 0
			public_key_or_token = "\xb7z\V\x194\xe0"
			name = "System.Windows.Forms"
		[3]
			version
				major = 65535
				minor = 65535
				build_number = 65535
				revision_number = 65535
			public_key_or_token = "\xb7z\V\x194\xe0"
			name = "mscorlib"
	number_of_resources = 3
	resources
		[0]
			offset = 37164
			length = 274
			name = "kbxPSEhLTx538WmOkt.UGQQY7rMwXLHscRXXO"
		[1]
			offset = 37442
			length = 180
			name = "TestNetApp.g.resources"
		[2]
			offset = 37626
			length = 5650
			name = "aR3nbf8dQp2feLmk31.lSfgApatkdxsVcGcrktoFd.resources"
	number_of_guids = 2
	guids
		[0] = "ea0a5d89-147e-4c38-ba3a-c879d5440649"
		[1] = "00000000-0000-0000-0000-000000000000"
	number_of_streams = 5
	streams
		[0]
			name = "#~"
			offset = 22584
			size = 5728
		[1]
			name = "#Strings"
			offset = 28312
			size = 5600
		[2]
			name = "#US"
			offset = 33912
			size = 1248
		[3]
			name = "#GUID"
			offset = 35160
			size = 32
		[4]
			name = "#Blob"
			offset = 35192
			size = 1968
	module_name = "TestNetApp.exe"
	version = "v4.0.30319"