In response to @subTee’s challenge, I’ve implemented a parser for data serialized by .NET via the BinaryFormatter. Use this to extract PE files from byte arrays embedded within these opaque objects.

https://github.com/williballenthin/python-dotnet-binaryformat