thunderbird.exe - Thunderbird

info
MZ
PE
resources
strings
imports
exports
foremost
version info
signature
hexdump
disasm
log
discuss
donate

filename	thunderbird.exe
size	220704 (0x35e20)
md5	f68facc0e65c4fb2de800b133616d97a

type	PE32 executable (GUI) Intel 80386, for MS Windows
mimetype	application/x-dosexec

clamav	OK
virustotal	→ scan with virustotal.com

histogram

MZ Header

signature	MZ
bytes_in_last_block	0x90
blocks_in_file	3
num_relocs	0
header_paragraphs	4
min_extra_paragraphs	0
max_extra_paragraphs	0xffff
ss	0
sp	0xb8
checksum	0
ip	0
cs	0
reloc_table_offset	0x40
overlay_number	0
reserved0	0
oem_id	0
oem_info	0
reserved2	0
reserved3	0
reserved4	0
reserved5	0
reserved6	0
lfanew	0x118

Rich Header

lib id	version	times used
147	30729	16
199	41118	1
259	25305	10
260	25305	13
257	25305	4
261	25305	26
257	24610	4
257	25547	3
1	0	275
260	25547	1
261	25547	112
256	25547	1
255	25547	1
258	25547	1

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

Signature	PE
Machine	0x14c
NumberOfSections	5
TimeDateStamp	0x5d0b4cd4
PointerToSymbolTable	0
NumberOfSymbols	0
SizeOfOptionalHeader	0xe0
Characteristics	0x122
Magic	0x10b
LinkerVersion	14.11
SizeOfCode	0x21000
SizeOfInitializedData	0x14a00
SizeOfUninitializedData	0
AddressOfEntryPoint	0x20a06
BaseOfCode	0x1000
BaseOfData	0x22000
ImageBase	0x400000
SectionAlignment	0x1000
FileAlignment	0x200
OperatingSystemVersion	6.1
ImageVersion	0.0
SubsystemVersion	6.1
Reserved1	0
SizeOfImage	0x38000
SizeOfHeaders	0x400
CheckSum	0x36334
Subsystem	2
DllCharacteristics	0x8140
SizeOfStackReserve	0x100000
SizeOfStackCommit	0x1000
SizeOfHeapReserve	0x40000
SizeOfHeapCommit	0x1000
LoaderFlags	0
NumberOfRvaAndSizes	0x10

Packer / Compiler

MS Visual C++ v8.0

Sections

name	va	vsize	raw size	flags
.text	0x1000	0x20e5d	0x21000	R-X CODE
.rdata	0x22000	0x5b38	0x5c00	R-- IDATA
.data	0x28000	0x1e8c	0x200	RW- IDATA
.rsrc	0x2a000	0xb698	0xb800	R-- IDATA
.reloc	0x36000	0x1404	0x1600	R-- IDATA DISCARDABLE

Data Directory

type	va	size
EXPORT	0x257d0	0x7b0
IMPORT	0x25f80	0x118
RESOURCE	0x2a000	0xb698
EXCEPTION	0	0
SECURITY	0x34000	0x1e20
BASERELOC	0x36000	0x1404
DEBUG	0x24de0	0x54
ARCHITECTURE	0	0
GLOBALPTR	0	0
TLS	0x24e34	0x18
LOAD_CONFIG	0x24d40	0x40
Bound_IAT	0	0
IAT	0x22000	0x3c4
Delay_IAT	0x2568c	0x40
CLR_Header	0	0

TLS

raw start	raw end	index	callbks	zero fill	flags
0x42528c	0x425294	0x429b40	0x422400	0	0x300000

show previews

type	name	size
ICON	#1	1128
ICON	#2	4264
ICON	#3	9640
ICON	#4	26676
ICON	#5	296
ICON	#6	315
ICON	#7	399
STRING	#7	54
GROUP_ICON	#32512	62
GROUP_ICON	#32576	20
GROUP_ICON	#32577	20
GROUP_ICON	#32578	20
VERSION	#1	1196
MANIFEST	#1	1806

id	lang	string
103	1033	Thunderbird

module_name	hint	function_name
mozglue.dll	124	free
mozglue.dll	122	_wcsdup
mozglue.dll	134	malloc
mozglue.dll	36	void __cdecl DllBlocklist_Initialize(unsigned int) ?DllBlocklist_Initialize@@YAXI@Z
mozglue.dll	50	private: static class mozilla::TimeStamp __cdecl mozilla::TimeStamp::Now(bool) ?Now@TimeStamp@mozilla@@CA?AV12@_N@Z
mozglue.dll	149	moz_xmalloc
mozglue.dll	156	strdup
KERNEL32.dll		AcquireSRWLockExclusive
KERNEL32.dll	886	IsDebuggerPresent
KERNEL32.dll	1109	RaiseException
KERNEL32.dll	1479	WaitForSingleObject
KERNEL32.dll	1389	Sleep
KERNEL32.dll	240	CreateThread
KERNEL32.dll	535	GetCurrentThread
KERNEL32.dll	536	GetCurrentThreadId
KERNEL32.dll	757	GetThreadId
KERNEL32.dll	1424	TlsGetValue
KERNEL32.dll	1422	TlsAlloc
KERNEL32.dll	1425	TlsSetValue
KERNEL32.dll	1423	TlsFree
KERNEL32.dll	1088	QueryPerformanceCounter
KERNEL32.dll	738	GetSystemTimeAsFileTime
KERNEL32.dll	787	GetVersionExW
KERNEL32.dll	638	GetNativeSystemInfo
KERNEL32.dll	963	LocalFree
KERNEL32.dll	206	CreateIoCompletionPort
KERNEL32.dll	707	GetQueuedCompletionStatus
KERNEL32.dll	1046	PostQueuedCompletionStatus
KERNEL32.dll	853	InitializeCriticalSection
KERNEL32.dll	302	EnterCriticalSection
KERNEL32.dll	946	LeaveCriticalSection
KERNEL32.dll	269	DeleteCriticalSection
KERNEL32.dll	1287	SetEvent
KERNEL32.dll	1208	ResetEvent
KERNEL32.dll	189	CreateEventW
KERNEL32.dll	1447	UnregisterWaitEx
KERNEL32.dll	1403	TerminateJobObject
KERNEL32.dll	1312	SetInformationJobObject
KERNEL32.dll	532	GetCurrentProcessId
KERNEL32.dll	1463	VirtualAllocEx
KERNEL32.dll	1466	VirtualFreeEx
KERNEL32.dll	1550	WriteProcessMemory
KERNEL32.dll	1311	SetHandleInformation
KERNEL32.dll	684	GetProcessHandleCount
KERNEL32.dll	1465	VirtualFree
KERNEL32.dll	1024	OpenProcess
KERNEL32.dll	686	GetProcessHeaps
KERNEL32.dll	1469	VirtualProtectEx
KERNEL32.dll	208	CreateJobObjectW
KERNEL32.dll	36	AssignProcessToJobObject
KERNEL32.dll	218	CreateNamedPipeW
KERNEL32.dll	259	DebugBreak
KERNEL32.dll	1583	lstrlenW
KERNEL32.dll	837	HeapSetInformation
KERNEL32.dll	1471	VirtualQueryEx
KERNEL32.dll	622	GetModuleHandleA
KERNEL32.dll	1225	SearchPathW
KERNEL32.dll	525	GetCurrentDirectoryW
KERNEL32.dll	228	CreateRemoteThread
KERNEL32.dll	227	CreateProcessW
KERNEL32.dll	584	GetFileType
KERNEL32.dll	1058	ProcessIdToSessionId
KERNEL32.dll	1128	ReadProcessMemory
KERNEL32.dll	1387	SignalObjectAndWait
KERNEL32.dll	216	CreateMutexW
KERNEL32.dll	561	GetEnvironmentStringsW
KERNEL32.dll	422	FreeEnvironmentStringsW
KERNEL32.dll	832	HeapDestroy
KERNEL32.dll	768	GetTickCount
KERNEL32.dll	779	GetUserDefaultLangID
KERNEL32.dll	778	GetUserDefaultLCID
KERNEL32.dll	201	CreateFileW
KERNEL32.dll	575	GetFileAttributesW
KERNEL32.dll	615	GetLongPathNameW
KERNEL32.dll	794	GetVolumePathNameW
KERNEL32.dll	298	EncodePointer
KERNEL32.dll	262	DecodePointer
KERNEL32.dll	412	FlushInstructionCache
KERNEL32.dll	951	LoadLibraryExA
KERNEL32.dll	952	LoadLibraryExW
KERNEL32.dll	1125	ReadFile
KERNEL32.dll	1300	SetFilePointerEx
KERNEL32.dll	687	GetProcessId
KERNEL32.dll	625	GetModuleHandleW
KERNEL32.dll	1440	UnmapViewOfFile
KERNEL32.dll	977	MapViewOfFile
KERNEL32.dll	198	CreateFileMappingW
KERNEL32.dll	1470	VirtualQuery
KERNEL32.dll	296	DuplicateHandle
KERNEL32.dll	133	CloseHandle
KERNEL32.dll	624	GetModuleHandleExW
KERNEL32.dll	1188	ReleaseSRWLockExclusive
KERNEL32.dll	1315	SetLastError
KERNEL32.dll	602	GetLastError
KERNEL32.dll	1404	TerminateProcess
KERNEL32.dll	531	GetCurrentProcess
KERNEL32.dll	1521	WideCharToMultiByte
KERNEL32.dll	994	MultiByteToWideChar
KERNEL32.dll	1279	SetDllDirectoryW
KERNEL32.dll	953	LoadLibraryW
KERNEL32.dll	679	GetProcAddress
KERNEL32.dll	621	GetModuleFileNameW
KERNEL32.dll	423	FreeLibrary
KERNEL32.dll	350	ExpandEnvironmentStringsW
KERNEL32.dll	1285	SetEnvironmentVariableW
KERNEL32.dll	563	GetEnvironmentVariableW
KERNEL32.dll	732	GetSystemInfo
KERNEL32.dll	1468	VirtualProtect
KERNEL32.dll	1480	WaitForSingleObjectEx
KERNEL32.dll	1437	UnhandledExceptionFilter
KERNEL32.dll	1374	SetUnhandledExceptionFilter
KERNEL32.dll	893	IsProcessorFeaturePresent
KERNEL32.dll	858	InitializeSListHead
KERNEL32.dll	1179	RegisterWaitForSingleObject
ADVAPI32.dll	329	GetKernelObjectSecurity
ADVAPI32.dll	610	RegCreateKeyExW
ADVAPI32.dll	650	RegOpenKeyExW
ADVAPI32.dll	626	RegDisablePredefinedCache
ADVAPI32.dll	601	RegCloseKey
ADVAPI32.dll	701	RevertToSelf
ADVAPI32.dll	751	SetThreadToken
ADVAPI32.dll	139	CreateProcessAsUserW
ADVAPI32.dll	146	CreateWellKnownSid
ADVAPI32.dll	133	CopySid
ADVAPI32.dll	123	ConvertSidToStringSidW
ADVAPI32.dll	129	ConvertStringSecurityDescriptorToSecurityDescriptorW
ADVAPI32.dll	131	ConvertStringSidToSidW
ADVAPI32.dll	731	SetKernelObjectSecurity
ADVAPI32.dll	353	GetSecurityDescriptorSacl
ADVAPI32.dll	330	GetLengthSid
ADVAPI32.dll	310	GetAce
ADVAPI32.dll	430	LookupPrivilegeValueW
ADVAPI32.dll	281	EqualSid
ADVAPI32.dll	240	DuplicateTokenEx
ADVAPI32.dll	239	DuplicateToken
ADVAPI32.dll	142	CreateRestrictedToken
ADVAPI32.dll	532	OpenProcessToken
ADVAPI32.dll	745	SetSecurityInfo
ADVAPI32.dll	354	GetSecurityInfo
ADVAPI32.dll	724	SetEntriesInAclW
ADVAPI32.dll	752	SetTokenInformation
ADVAPI32.dll	367	GetTokenInformation
ADVAPI32.dll	799	SystemFunction036
ADVAPI32.dll	663	RegQueryValueExW
MSVCP140.dll	651	void __cdecl std::_Xbad_alloc(void) ?_Xbad_alloc@std@@YAXXZ
MSVCP140.dll	654	void __cdecl std::_Xlength_error(char const *) ?_Xlength_error@std@@YAXPBD@Z
MSVCP140.dll	536	private: static void __cdecl std::ios_base::_Ios_base_dtor(class std::ios_base *) ?_Ios_base_dtor@ios_base@std@@CAXPAV12@@Z
MSVCP140.dll	47	protected: __thiscall std::basic_streambuf<char, struct std::char_traits<char> >::basic_streambuf<char, struct std::char_traits<char> >(void) ??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
MSVCP140.dll	137	public: virtual __thiscall std::basic_streambuf<char, struct std::char_traits<char> >::~basic_streambuf<char, struct std::char_traits<char> >(void) ??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
MSVCP140.dll	1246	public: int __thiscall std::basic_streambuf<char, struct std::char_traits<char> >::sputc(char) ?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
MSVCP140.dll	1249	public: __int64 __thiscall std::basic_streambuf<char, struct std::char_traits<char> >::sputn(char const *, __int64) ?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z
MSVCP140.dll	586	protected: char * __thiscall std::basic_streambuf<char, struct std::char_traits<char> >::_Pninc(void) ?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
MSVCP140.dll	1221	public: void __thiscall std::basic_ios<char, struct std::char_traits<char> >::setstate(int, bool) ?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
MSVCP140.dll	37	public: __thiscall std::basic_ostream<char, struct std::char_traits<char> >::basic_ostream<char, struct std::char_traits<char> >(class std::basic_streambuf<char, struct std::char_traits<char> > *, bool) ??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
MSVCP140.dll	134	public: virtual __thiscall std::basic_ostream<char, struct std::char_traits<char> >::~basic_ostream<char, struct std::char_traits<char> >(void) ??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ
MSVCP140.dll	580	public: void __thiscall std::basic_ostream<char, struct std::char_traits<char> >::_Osfx(void) ?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
MSVCP140.dll	255	public: class std::basic_ostream<char, struct std::char_traits<char> > & __thiscall std::basic_ostream<char, struct std::char_traits<char> >::operator<<(int) ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
MSVCP140.dll	256	public: class std::basic_ostream<char, struct std::char_traits<char> > & __thiscall std::basic_ostream<char, struct std::char_traits<char> >::operator<<(unsigned int) ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@I@Z
MSVCP140.dll	872	public: class std::basic_ostream<char, struct std::char_traits<char> > & __thiscall std::basic_ostream<char, struct std::char_traits<char> >::flush(void) ?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
MSVCP140.dll	552	public: virtual void __thiscall std::basic_streambuf<char, struct std::char_traits<char> >::_Lock(void) ?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
MSVCP140.dll	639	public: virtual void __thiscall std::basic_streambuf<char, struct std::char_traits<char> >::_Unlock(void) ?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
MSVCP140.dll	1014	protected: virtual void __thiscall std::basic_streambuf<char, struct std::char_traits<char> >::imbue(class std::locale const &) ?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z
MSVCP140.dll	1205	protected: virtual class std::basic_streambuf<char, struct std::char_traits<char> > * __thiscall std::basic_streambuf<char, struct std::char_traits<char> >::setbuf(char *, __int64) ?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z
MSVCP140.dll	1237	protected: virtual __int64 __thiscall std::basic_streambuf<char, struct std::char_traits<char> >::showmanyc(void) ?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
MSVCP140.dll	1277	protected: virtual int __thiscall std::basic_streambuf<char, struct std::char_traits<char> >::sync(void) ?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
MSVCP140.dll	1307	protected: virtual int __thiscall std::basic_streambuf<char, struct std::char_traits<char> >::uflow(void) ?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
MSVCP140.dll	1347	protected: virtual __int64 __thiscall std::basic_streambuf<char, struct std::char_traits<char> >::xsgetn(char *, __int64) ?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
MSVCP140.dll	1350	protected: virtual __int64 __thiscall std::basic_streambuf<char, struct std::char_traits<char> >::xsputn(char const *, __int64) ?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
MSVCP140.dll	406	__int64 const std::_BADOFF ?_BADOFF@std@@3_JB
MSVCP140.dll	347	const std::ios_base::`vftable' ??_7ios_base@std@@6B@
MSVCP140.dll	307	const std::basic_ios<char, struct std::char_traits<char> >::`vftable' ??_7?$basic_ios@DU?$char_traits@D@std@@@std@@6B@
MSVCP140.dll	655	void __cdecl std::_Xout_of_range(char const *) ?_Xout_of_range@std@@YAXPBD@Z
VCRUNTIME140.dll	71	memmove
VCRUNTIME140.dll	70	memcpy
VCRUNTIME140.dll	72	memset
VCRUNTIME140.dll	61	_purecall
VCRUNTIME140.dll	69	memcmp
VCRUNTIME140.dll	75	strrchr
VCRUNTIME140.dll	48	__vcrt_InitializeCriticalSectionEx
VCRUNTIME140.dll	53	_except_handler4_common
api-ms-win-crt-string-l1-1-0.dll	176	wmemcpy_s
api-ms-win-crt-string-l1-1-0.dll	84	_wcsnicmp
api-ms-win-crt-string-l1-1-0.dll	52	_strnicmp
api-ms-win-crt-string-l1-1-0.dll	161	wcscpy_s
api-ms-win-crt-string-l1-1-0.dll	74	_wcsicmp
api-ms-win-crt-string-l1-1-0.dll	173	wcstok_s
api-ms-win-crt-string-l1-1-0.dll	104	isdigit
api-ms-win-crt-string-l1-1-0.dll	155	towupper
api-ms-win-crt-string-l1-1-0.dll	42	_stricmp
api-ms-win-crt-environment-l1-1-0.dll	3	_putenv
api-ms-win-crt-environment-l1-1-0.dll	16	getenv
api-ms-win-crt-environment-l1-1-0.dll		__p__environ
api-ms-win-crt-stdio-l1-1-0.dll	1	__p__commode
api-ms-win-crt-stdio-l1-1-0.dll	98	_wfopen
api-ms-win-crt-stdio-l1-1-0.dll	12	__stdio_common_vsnwprintf_s
api-ms-win-crt-stdio-l1-1-0.dll	17	__stdio_common_vswprintf
api-ms-win-crt-stdio-l1-1-0.dll	116	fclose
api-ms-win-crt-stdio-l1-1-0.dll	122	fgets
api-ms-win-crt-stdio-l1-1-0.dll	11	__stdio_common_vsnprintf_s
api-ms-win-crt-stdio-l1-1-0.dll	13	__stdio_common_vsprintf
api-ms-win-crt-stdio-l1-1-0.dll	84	_set_fmode
api-ms-win-crt-runtime-l1-1-0.dll	35	_errno
api-ms-win-crt-runtime-l1-1-0.dll	106	terminate
api-ms-win-crt-runtime-l1-1-0.dll	29	_controlfp_s
api-ms-win-crt-runtime-l1-1-0.dll	58	_invalid_parameter_noinfo
api-ms-win-crt-runtime-l1-1-0.dll	59	_invalid_parameter_noinfo_noreturn
api-ms-win-crt-runtime-l1-1-0.dll	62	_register_onexit_function
api-ms-win-crt-runtime-l1-1-0.dll	66	_seh_filter_exe
api-ms-win-crt-runtime-l1-1-0.dll	68	_set_app_type
api-ms-win-crt-runtime-l1-1-0.dll	54	_initialize_onexit_table
api-ms-win-crt-runtime-l1-1-0.dll	26	_configure_wide_argv
api-ms-win-crt-runtime-l1-1-0.dll	55	_initialize_wide_environment
api-ms-win-crt-runtime-l1-1-0.dll	43	_get_initial_wide_environment
api-ms-win-crt-runtime-l1-1-0.dll	56	_initterm
api-ms-win-crt-runtime-l1-1-0.dll	57	_initterm_e
api-ms-win-crt-runtime-l1-1-0.dll	88	exit
api-ms-win-crt-runtime-l1-1-0.dll	37	_exit
api-ms-win-crt-runtime-l1-1-0.dll	63	_register_thread_local_exe_atexit_callback
api-ms-win-crt-runtime-l1-1-0.dll	5	__p___argc
api-ms-win-crt-runtime-l1-1-0.dll	7	__p___wargv
api-ms-win-crt-runtime-l1-1-0.dll	23	_cexit
api-ms-win-crt-runtime-l1-1-0.dll	22	_c_exit
api-ms-win-crt-runtime-l1-1-0.dll	31	_crt_atexit
api-ms-win-crt-math-l1-1-0.dll	46	__setusermatherr
api-ms-win-crt-math-l1-1-0.dll	64	_except1
api-ms-win-crt-filesystem-l1-1-0.dll	57	_wsplitpath_s
api-ms-win-crt-locale-l1-1-0.dll	8	_configthreadlocale
api-ms-win-crt-heap-l1-1-0.dll	22	_set_new_mode

ord	entry_va	function_name
1	0x882c	GetHandleVerifier
2	0x19a7f	IsSandboxedProcess
3	0x14bf9	_TargetConfigureOPMProtectedOutput@20
4	0x10e90	_TargetCreateNamedPipeW@36
5	0x14cfd	_TargetCreateOPMProtectedOutputs@24
6	0x168bc	_TargetCreateProcessA@44
7	0x16b9b	_TargetCreateProcessW@44
8	0x16d93	_TargetCreateThread@28
9	0x14e19	_TargetDestroyOPMProtectedOutput@8
10	0x14eaf	_TargetEnumDisplayDevicesA@20
11	0x14eb4	_TargetEnumDisplayMonitors@20
12	0x14fb9	_TargetGdiDllInitialize@12
13	0x14fbf	_TargetGetCertificate@20
14	0x14fdc	_TargetGetCertificateByHandle@20
15	0x14ff9	_TargetGetCertificateSize@16
16	0x15013	_TargetGetCertificateSizeByHandle@16
17	0x1502d	_TargetGetMonitorInfoA@12
18	0x150c6	_TargetGetMonitorInfoW@12
19	0x15140	_TargetGetOPMInformation@16
20	0x15252	_TargetGetOPMRandomNumber@12
21	0x152f9	_TargetGetStockObject@8
22	0x152fe	_TargetGetSuggestedOPMProtectedOutputArraySize@12
23	0x1c783	_TargetNtCreateEvent@24
24	0xbfcc	_TargetNtCreateFile@48
25	0x17f27	_TargetNtCreateKey@32
26	0x1cf9e	_TargetNtMapViewOfSection@44
27	0x1c8e8	_TargetNtOpenEvent@16
28	0xc1d0	_TargetNtOpenFile@28
29	0x18182	_TargetNtOpenKey@16
30	0x181cc	_TargetNtOpenKeyEx@20
31	0x16f06	_TargetNtOpenProcess@20
32	0x17023	_TargetNtOpenProcessToken@16
33	0x17116	_TargetNtOpenProcessTokenEx@20
34	0x17210	_TargetNtOpenThread@20
35	0x1285f	_TargetNtOpenThreadToken@20
36	0x1288f	_TargetNtOpenThreadTokenEx@24
37	0xc3b6	_TargetNtQueryAttributesFile@12
38	0xc4f9	_TargetNtQueryFullAttributesFile@12
39	0xc63c	_TargetNtSetInformationFile@24
40	0x128c2	_TargetNtSetInformationThread@20
41	0x1d0c2	_TargetNtUnmapViewOfSection@12
42	0x153d6	_TargetRegisterClassW@8
43	0x153dc	_TargetSetOPMSigningKeyAndSequenceNumbers@12
44	0x29890	g_handles_to_close
45	0x29944	g_interceptions
46	0x299a0	g_nt
47	0x298a0	g_originals
48	0x299fc	g_shared_IPC_size
49	0x28050	g_shared_delayed_integrity_level
50	0x29a48	g_shared_delayed_mitigations
51	0x29a00	g_shared_policy_size
52	0x29998	g_shared_section

module_name	thunderbird.exe
flags	0
timestamp	2106-02-07 06:28:15
version	0.0
ordinal_base	1
nFunctions	52
nNames	52
Names(52)	0x258c8
Functions(52)	0x257f8
NameOrdinals(52)	0x25998

StringTable 000004b0

Comments	Mozilla Thunderbird Mail and News Client
LegalCopyright	©Thunderbird and Mozilla Developers, according to the MPL 1.1/GPL 2.0/LGPL 2.1 licenses, as applicable.
CompanyName	Mozilla Corporation
FileDescription	Thunderbird
FileVersion	60.7.2
ProductVersion	60.7.2
InternalName	Thunderbird
LegalTrademarks	Thunderbird is a Trademark of The Mozilla Foundation.
OriginalFilename	thunderbird.exe
ProductName	Thunderbird
BuildID	20190620083217

VS_FIXEDFILEINFO

FileVersion	60.7.2.7110
ProductVersion	60.7.2.0
StrucVersion	0x10000
FileFlagsMask	0x3f
FileFlags	0
FileOS	4
FileType	2
FileSubtype	0

OpenSSL (terse)
ASN.1 (verbose)

Signers (1)

issuer: /C=US/O=DigiCert Inc/OU=www.digicert.com/CN=DigiCert SHA2 Assured ID Code Signing CA

serial: 0B1F8CD59E64746BEAE153ECCA21066B

Certificates (5)

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:e7:e0:e5:17:d8:46:fe:8f:e5:60:fc:1b:f0:30:39
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Assured ID Root CA
        Validity
            Not Before: Nov 10 00:00:00 2006 GMT
            Not After : Nov 10 00:00:00 2031 GMT
        Subject: C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Assured ID Root CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:0e:15:ce:e4:43:80:5c:b1:87:f3:b7:60:f9:
                    71:12:a5:ae:dc:26:94:88:aa:f4:ce:f5:20:39:28:
                    58:60:0c:f8:80:da:a9:15:95:32:61:3c:b5:b1:28:
                    84:8a:8a:dc:9f:0a:0c:83:17:7a:8f:90:ac:8a:e7:
                    79:53:5c:31:84:2a:f6:0f:98:32:36:76:cc:de:dd:
                    3c:a8:a2:ef:6a:fb:21:f2:52:61:df:9f:20:d7:1f:
                    e2:b1:d9:fe:18:64:d2:12:5b:5f:f9:58:18:35:bc:
                    47:cd:a1:36:f9:6b:7f:d4:b0:38:3e:c1:1b:c3:8c:
                    33:d9:d8:2f:18:fe:28:0f:b3:a7:83:d6:c3:6e:44:
                    c0:61:35:96:16:fe:59:9c:8b:76:6d:d7:f1:a2:4b:
                    0d:2b:ff:0b:72:da:9e:60:d0:8e:90:35:c6:78:55:
                    87:20:a1:cf:e5:6d:0a:c8:49:7c:31:98:33:6c:22:
                    e9:87:d0:32:5a:a2:ba:13:82:11:ed:39:17:9d:99:
                    3a:72:a1:e6:fa:a4:d9:d5:17:31:75:ae:85:7d:22:
                    ae:3f:01:46:86:f6:28:79:c8:b1:da:e4:57:17:c4:
                    7e:1c:0e:b0:b4:92:a6:56:b3:bd:b2:97:ed:aa:a7:
                    f0:b7:c5:a8:3f:95:16:d0:ff:a1:96:eb:08:5f:18:
                    77:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature, Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier: 
                45:EB:A2:AF:F4:92:CB:82:31:2D:51:8B:A7:A7:21:9D:F3:6D:C8:0F
            X509v3 Authority Key Identifier: 
                keyid:45:EB:A2:AF:F4:92:CB:82:31:2D:51:8B:A7:A7:21:9D:F3:6D:C8:0F

    Signature Algorithm: sha1WithRSAEncryption
         a2:0e:bc:df:e2:ed:f0:e3:72:73:7a:64:94:bf:f7:72:66:d8:
         32:e4:42:75:62:ae:87:eb:f2:d5:d9:de:56:b3:9f:cc:ce:14:
         28:b9:0d:97:60:5c:12:4c:58:e4:d3:3d:83:49:45:58:97:35:
         69:1a:a8:47:ea:56:c6:79:ab:12:d8:67:81:84:df:7f:09:3c:
         94:e6:b8:26:2c:20:bd:3d:b3:28:89:f7:5f:ff:22:e2:97:84:
         1f:e9:65:ef:87:e0:df:c1:67:49:b3:5d:eb:b2:09:2a:eb:26:
         ed:78:be:7d:3f:2b:f3:b7:26:35:6d:5f:89:01:b6:49:5b:9f:
         01:05:9b:ab:3d:25:c1:cc:b6:7f:c2:f1:6f:86:c6:fa:64:68:
         eb:81:2d:94:eb:42:b7:fa:8c:1e:dd:62:f1:be:50:67:b7:6c:
         bd:f3:f1:1f:6b:0c:36:07:16:7f:37:7c:a9:5b:6d:7a:f1:12:
         46:60:83:d7:27:04:be:4b:ce:97:be:c3:67:2a:68:11:df:80:
         e7:0c:33:66:bf:13:0d:14:6e:f3:7f:1f:63:10:1e:fa:8d:1b:
         25:6d:6c:8f:a5:b7:61:01:b1:d2:a3:26:a1:10:71:9d:ad:e2:
         c3:f9:c3:99:51:b7:2b:07:08:ce:2e:e6:50:b2:a7:fa:0a:45:
         2f:a2:f0:f2

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Assured ID Root CA
        Validity
            Not Before: Oct 22 12:00:00 2013 GMT
            Not After : Oct 22 12:00:00 2028 GMT
        Subject: C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert SHA2 Assured ID Code Signing CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:d3:b3:1c:7f:0e:11:af:67:77:07:d3:0b:31:
                    49:19:cf:d0:fb:45:99:b1:3a:db:44:f5:7f:e5:a8:
                    9d:db:32:d7:71:ea:76:9d:05:2e:b7:8f:fa:92:43:
                    c0:a5:f9:89:d4:37:19:d7:b6:aa:f0:9c:86:a5:d8:
                    25:ac:0e:79:28:3a:7e:e9:d1:67:d3:c6:fb:29:27:
                    c7:d3:7b:23:94:e4:91:23:96:90:77:82:f9:a1:84:
                    23:66:12:54:33:50:74:b1:28:26:bb:24:69:c2:c2:
                    52:f2:14:67:8a:89:45:d4:2d:a1:a3:e9:88:2c:20:
                    95:ae:1c:4a:87:08:df:0c:f5:e2:4d:60:18:be:aa:
                    c4:b2:ae:70:31:66:33:71:3e:ac:70:a2:ab:ce:7f:
                    e9:7c:cb:92:a1:e5:3b:31:1c:cf:ea:f2:0a:e4:57:
                    bb:4a:b5:e9:74:e6:2b:fe:6c:cb:7e:74:39:36:0d:
                    90:ef:e4:b5:4e:a4:a9:ea:6a:0a:ab:84:f3:ac:67:
                    4e:b5:c4:f7:8c:d1:20:25:23:eb:08:64:3e:52:96:
                    c1:f2:0f:12:f4:c5:8e:0f:c1:a2:e8:2c:51:f7:73:
                    bc:bd:85:b1:62:83:73:41:82:07:e4:38:8b:6a:73:
                    20:d0:0f:64:73:3c:9e:9f:a6:33:a9:fd:19:df:25:
                    93:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            X509v3 Key Usage: critical
                Digital Signature, Certificate Sign, CRL Sign
            X509v3 Extended Key Usage: 
                Code Signing
            Authority Information Access: 
                OCSP - URI:http://ocsp.digicert.com
                CA Issuers - URI:http://cacerts.digicert.com/DigiCertAssuredIDRootCA.crt

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl4.digicert.com/DigiCertAssuredIDRootCA.crl

                Full Name:
                  URI:http://crl3.digicert.com/DigiCertAssuredIDRootCA.crl

            X509v3 Certificate Policies: 
                Policy: 2.16.840.1.114412.0.2.4
                  CPS: https://www.digicert.com/CPS
                Policy: 2.16.840.1.114412.3

            X509v3 Subject Key Identifier: 
                5A:C4:B9:7B:2A:0A:A3:A5:EA:71:03:C0:60:F9:2D:F6:65:75:0E:58
            X509v3 Authority Key Identifier: 
                keyid:45:EB:A2:AF:F4:92:CB:82:31:2D:51:8B:A7:A7:21:9D:F3:6D:C8:0F

    Signature Algorithm: sha256WithRSAEncryption
         3e:ec:0d:5a:24:b3:f3:22:d1:15:c8:2c:7c:25:29:76:a8:1d:
         5d:1c:2d:3a:1a:c4:ef:30:61:d7:7e:0b:60:fd:c3:3d:0f:c4:
         af:8b:fd:ef:2a:df:20:55:37:b0:e1:f6:d1:92:75:0f:51:b4:
         6e:a5:8e:5a:e2:5e:24:81:4e:10:a4:ee:3f:71:8e:63:0e:13:
         4b:ad:d7:5f:44:79:f3:36:14:06:8a:f7:9c:46:4e:5c:ff:90:
         b1:1b:07:0e:91:15:fb:ba:af:b5:51:c2:8d:24:ae:24:c6:c7:
         27:2a:a1:29:28:1a:3a:71:28:02:3c:2e:91:a3:c0:25:11:e2:
         9c:14:47:a1:7a:68:68:af:9b:a7:5c:20:5c:d9:71:b1:0c:8f:
         bb:a8:f8:c5:12:68:9f:cf:40:cb:40:44:a5:13:f0:e6:64:0c:
         25:08:42:32:b2:36:8a:24:02:fe:2f:72:7e:1c:d7:49:45:96:
         e8:59:1d:e9:fa:74:64:6b:b2:eb:66:43:da:b3:b0:8c:d5:e9:
         0d:dd:f6:01:20:ce:99:31:63:3d:08:1a:18:b3:81:9b:4f:c6:
         93:10:06:fc:07:81:fa:8b:da:f9:82:49:f7:62:6e:a1:53:fa:
         12:94:18:85:2e:92:91:ea:68:6c:44:32:b2:66:a1:e7:18:a4:
         9a:64:51:ef

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:1f:8c:d5:9e:64:74:6b:ea:e1:53:ec:ca:21:06:6b
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert SHA2 Assured ID Code Signing CA
        Validity
            Not Before: May 31 00:00:00 2019 GMT
            Not After : Jun  4 12:00:00 2020 GMT
        Subject: C=US, ST=California, L=Mountain View, O=Mozilla Corporation, OU=Release Engineering, CN=Mozilla Corporation/emailAddress=release+certificates@mozilla.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (4096 bit)
                Modulus:
                    00:de:8d:fa:2a:f5:00:34:ec:ab:d1:4e:67:b7:c1:
                    10:69:64:78:6f:35:a2:1a:5d:9b:69:07:d5:da:5a:
                    07:9e:58:c3:c1:8c:25:19:d8:bc:9f:7d:28:3b:ac:
                    67:95:1f:c1:15:95:3d:d6:b8:5b:f6:51:41:3b:c9:
                    4f:1e:0f:04:35:4b:96:68:f5:96:95:40:ce:fd:50:
                    ab:a0:09:a0:d7:49:7c:34:1b:f6:cc:c4:2d:5f:66:
                    fb:f7:d5:3a:62:5e:b0:63:1d:fa:d3:d7:45:7e:17:
                    7f:bc:1e:21:cc:ab:35:8c:51:50:4d:36:1e:44:3a:
                    4d:2b:97:9d:64:ea:ec:31:be:03:80:3a:eb:10:f9:
                    bc:08:e9:c2:ef:44:d4:7a:36:63:40:67:b1:f5:1b:
                    cb:59:1d:47:f5:e6:e4:a9:ab:33:b0:8d:42:39:7a:
                    42:8d:3b:9f:53:43:23:f3:03:41:3a:3e:d7:d6:21:
                    9f:90:05:9a:4b:42:b6:61:37:bb:88:6e:c8:c4:f1:
                    4c:9d:ec:02:67:2d:df:17:56:1e:b5:c6:7b:9c:31:
                    39:a2:60:d6:2e:bb:5f:8c:be:48:e4:c6:1e:34:e3:
                    be:21:36:7d:df:cd:e7:52:8b:aa:a4:45:25:8b:93:
                    05:88:dc:bf:00:5d:93:31:60:0c:88:fd:b4:86:de:
                    b3:1d:63:83:6a:25:24:67:09:b4:88:0a:48:c6:6f:
                    ef:af:b3:72:58:f7:60:95:59:5a:db:a2:32:a1:2d:
                    18:6d:3c:48:08:76:5d:27:94:fd:22:c7:49:53:fa:
                    bf:af:0f:06:8b:24:8a:51:ca:a9:2b:45:ea:84:df:
                    f4:23:6d:0c:e7:d5:1e:cf:14:0e:c0:09:d9:66:3a:
                    3e:5d:75:5a:3d:01:e5:a5:12:c4:ef:82:17:ce:b0:
                    8a:9a:a2:a5:4e:14:2d:44:30:35:a1:c0:a8:e1:75:
                    b8:7c:7a:ee:a0:52:9f:b7:e1:9e:b1:f5:67:ed:5b:
                    89:a6:f4:ab:55:12:30:bb:9f:e8:6a:a9:d9:2b:39:
                    29:76:08:75:ad:3a:c5:dd:48:2a:c3:69:a6:a0:a9:
                    23:c2:49:65:29:bd:86:54:15:17:65:c7:1b:4b:1f:
                    87:09:6c:04:6e:c0:71:06:be:c0:67:46:6b:a5:77:
                    f0:69:47:09:d3:5c:4b:3a:aa:55:ee:ab:6c:f6:b3:
                    5a:a7:de:17:a3:b3:cd:16:4f:a0:56:53:f7:b6:0e:
                    eb:67:07:5c:59:c7:8c:cd:e2:97:de:d3:a2:3a:71:
                    70:1d:63:45:1a:d4:a6:58:dc:2d:6e:25:b8:90:1c:
                    c6:d9:cc:c9:0f:80:be:1d:53:23:8c:ee:2c:d5:60:
                    1f:d9:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Authority Key Identifier: 
                keyid:5A:C4:B9:7B:2A:0A:A3:A5:EA:71:03:C0:60:F9:2D:F6:65:75:0E:58

            X509v3 Subject Key Identifier: 
                A6:A8:57:85:7D:DD:0B:25:6C:FB:34:A2:90:FC:2D:1E:A2:0F:F1:5A
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 Extended Key Usage: 
                Code Signing
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl3.digicert.com/sha2-assured-cs-g1.crl

                Full Name:
                  URI:http://crl4.digicert.com/sha2-assured-cs-g1.crl

            X509v3 Certificate Policies: 
                Policy: 2.16.840.1.114412.3.1
                  CPS: https://www.digicert.com/CPS
                Policy: 2.23.140.1.4.1

            Authority Information Access: 
                OCSP - URI:http://ocsp.digicert.com
                CA Issuers - URI:http://cacerts.digicert.com/DigiCertSHA2AssuredIDCodeSigningCA.crt

            X509v3 Basic Constraints: critical
                CA:FALSE
    Signature Algorithm: sha256WithRSAEncryption
         e1:cb:5f:49:fe:9d:e9:27:bf:7a:74:ff:b7:8f:a5:fc:7a:c9:
         fa:3a:d1:93:ad:5d:17:d3:dd:ce:51:61:c4:7a:95:1f:ba:56:
         de:89:9e:e3:69:10:20:c2:43:43:53:3e:27:1f:f8:c9:8f:ca:
         5f:a3:20:11:bd:c8:bf:3a:61:37:a9:a1:4d:47:ac:67:13:23:
         7d:fb:f8:2e:cb:a9:0a:d1:b1:90:46:b6:8c:5e:0a:a1:1a:86:
         bb:b2:11:15:59:e1:c8:2b:0b:45:f2:e0:92:5c:f5:fd:f5:12:
         3a:7b:8a:42:f1:a4:3a:9e:87:03:20:0e:30:4b:cb:44:ff:d5:
         8c:d3:cc:d0:3d:2a:77:06:80:d3:a0:3e:fe:13:3d:45:98:3e:
         49:41:cc:b6:2a:e2:1b:f7:4f:92:6e:36:c6:04:93:0b:ac:d6:
         f3:49:29:d9:ea:85:bc:c0:4c:e2:66:99:04:69:aa:4d:48:32:
         dc:ad:53:36:a8:ac:6f:41:f8:d5:39:f7:db:86:b5:55:18:99:
         0e:37:df:8d:22:c0:32:c3:af:fb:d2:05:92:91:a9:96:7c:41:
         50:3d:64:c1:a6:f6:41:d8:a2:06:ff:f2:ab:ea:30:ff:4d:60:
         e4:6e:c3:a4:9d:14:43:61:b4:5c:9b:e2:cd:9b:a1:53:34:5f:
         39:f9:60:a2

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=US, O=Symantec Corporation, CN=Symantec Time Stamping Services CA - G2
        Validity
            Not Before: Oct 18 00:00:00 2012 GMT
            Not After : Dec 29 23:59:59 2020 GMT
        Subject: C=US, O=Symantec Corporation, CN=Symantec Time Stamping Services Signer - G4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:63:0b:39:44:b8:bb:23:a7:44:49:bb:0e:ff:
                    a1:f0:61:0a:53:93:b0:98:db:ad:2c:0f:4a:c5:6e:
                    ff:86:3c:53:55:0f:15:ce:04:3f:2b:fd:a9:96:96:
                    d9:be:61:79:0b:5b:c9:4c:86:76:e5:e0:43:4b:22:
                    95:ee:c2:2b:43:c1:9f:d8:68:b4:8e:40:4f:ee:85:
                    38:b9:11:c5:23:f2:64:58:f0:15:32:6f:4e:57:a1:
                    ae:88:a4:02:d7:2a:1e:cd:4b:e1:dd:63:d5:17:89:
                    32:5b:b0:5e:99:5a:a8:9d:28:50:0e:17:ee:96:db:
                    61:3b:45:51:1d:cf:12:56:0b:92:47:fc:ab:ae:f6:
                    66:3d:47:ac:70:72:e7:92:e7:5f:cd:10:b9:c4:83:
                    64:94:19:bd:25:80:e1:e8:d2:22:a5:d0:ba:02:7a:
                    a1:77:93:5b:65:c3:ee:17:74:bc:41:86:2a:dc:08:
                    4c:8c:92:8c:91:2d:9e:77:44:1f:68:d6:a8:74:77:
                    db:0e:5b:32:8b:56:8b:33:bd:d9:63:c8:49:9d:3a:
                    c5:c5:ea:33:0b:d2:f1:a3:1b:f4:8b:be:d9:b3:57:
                    8b:3b:de:04:a7:7a:22:b2:24:ae:2e:c7:70:c5:be:
                    4e:83:26:08:fb:0b:bd:a9:4f:99:08:e1:10:28:72:
                    aa:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Extended Key Usage: critical
                Time Stamping
            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                OCSP - URI:http://ts-ocsp.ws.symantec.com
                CA Issuers - URI:http://ts-aia.ws.symantec.com/tss-ca-g2.cer

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://ts-crl.ws.symantec.com/tss-ca-g2.crl

            X509v3 Subject Alternative Name: 
                DirName:/CN=TimeStamp-2048-2
            X509v3 Subject Key Identifier: 
                46:C6:69:A3:0E:4A:14:1E:D5:4C:DA:52:63:17:3F:5E:36:BC:0D:E6
            X509v3 Authority Key Identifier: 
                keyid:5F:9A:F5:6E:5C:CC:CC:74:9A:D4:DD:7D:EF:3F:DB:EC:4C:80:2E:DD

    Signature Algorithm: sha1WithRSAEncryption
         78:3b:b4:91:2a:00:4c:f0:8f:62:30:37:78:a3:84:27:07:6f:
         18:b2:de:25:dc:a0:d4:94:03:aa:86:4e:25:9f:9a:40:03:1c:
         dd:ce:e3:79:cb:21:68:06:da:b6:32:b4:6d:bf:f4:2c:26:63:
         33:e4:49:64:6d:0d:e6:c3:67:0e:f7:05:a4:35:6c:7c:89:16:
         c6:e9:b2:df:b2:e9:dd:20:c6:71:0f:cd:95:74:dc:b6:5c:de:
         bd:37:1f:43:78:e6:78:b5:cd:28:04:20:a3:aa:f1:4b:c4:88:
         29:91:0e:80:d1:11:fc:dd:5c:76:6e:4f:5e:0e:45:46:41:6e:
         0d:b0:ea:38:9a:b1:3a:da:09:71:10:fc:1c:79:b4:80:7b:ac:
         69:f4:fd:9c:b6:0c:16:2b:f1:7f:5b:09:3d:9b:5b:e2:16:ca:
         13:81:6d:00:2e:38:0d:a8:29:8f:2c:e1:b2:f4:5a:a9:01:af:
         15:9c:2c:2f:49:1b:db:22:bb:c3:fe:78:94:51:c3:86:b1:82:
         88:5d:f0:3d:b4:51:a1:79:33:2b:2e:7b:b9:dc:20:09:13:71:
         eb:6a:19:5b:cf:e8:a5:30:57:2c:89:49:3f:b9:cf:7f:c9:bf:
         3e:22:68:63:53:9a:bd:69:74:ac:c5:1d:3c:7f:92:e0:c3:bc:
         1c:d8:04:75

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=ZA, ST=Western Cape, L=Durbanville, O=Thawte, OU=Thawte Certification, CN=Thawte Timestamping CA
        Validity
            Not Before: Dec 21 00:00:00 2012 GMT
            Not After : Dec 30 23:59:59 2020 GMT
        Subject: C=US, O=Symantec Corporation, CN=Symantec Time Stamping Services CA - G2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:ac:b3:49:54:4b:97:1c:12:0a:d8:25:79:91:
                    22:57:2a:6f:dc:b8:26:c4:43:73:6b:c2:bf:2e:50:
                    5a:fb:14:c2:76:8e:43:01:25:43:b4:a1:e2:45:f4:
                    e8:b7:7b:c3:74:cc:22:d7:b4:94:00:02:f7:4d:ed:
                    bf:b4:b7:44:24:6b:cd:5f:45:3b:d1:44:ce:43:12:
                    73:17:82:8b:69:b4:2b:cb:99:1e:ac:72:1b:26:4d:
                    71:1f:b1:31:dd:fb:51:61:02:53:a6:aa:f5:49:2c:
                    05:78:45:a5:2f:89:ce:e7:99:e7:fe:8c:e2:57:3f:
                    3d:c6:92:dc:4a:f8:7b:33:e4:79:0a:fb:f0:75:88:
                    41:9c:ff:c5:03:51:99:aa:d7:6c:9f:93:69:87:65:
                    29:83:85:c2:60:14:c4:c8:c9:3b:14:da:c0:81:f0:
                    1f:0d:74:de:92:22:ab:ca:f7:fb:74:7c:27:e6:f7:
                    4a:1b:7f:a7:c3:9e:2d:ae:8a:ea:a6:e6:aa:27:16:
                    7d:61:f7:98:71:11:bc:e2:50:a1:4b:e5:5d:fa:e5:
                    0e:a7:2c:9f:aa:65:20:d3:d8:96:e8:c8:7c:a5:4e:
                    48:44:ff:19:e2:44:07:92:0b:d7:68:84:80:5d:6a:
                    78:64:45:cd:60:46:7e:54:c1:13:7c:c5:79:f1:c9:
                    c1:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                5F:9A:F5:6E:5C:CC:CC:74:9A:D4:DD:7D:EF:3F:DB:EC:4C:80:2E:DD
            Authority Information Access: 
                OCSP - URI:http://ocsp.thawte.com

            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl.thawte.com/ThawteTimestampingCA.crl

            X509v3 Extended Key Usage: 
                Time Stamping
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Subject Alternative Name: 
                DirName:/CN=TimeStamp-2048-1
    Signature Algorithm: sha1WithRSAEncryption
         03:09:9b:8f:79:ef:7f:59:30:aa:ef:68:b5:fa:e3:09:1d:bb:
         4f:82:06:5d:37:5f:a6:52:9f:16:8d:ea:1c:92:09:44:6e:f5:
         6d:eb:58:7c:30:e8:f9:69:8d:23:73:0b:12:6f:47:a9:ae:39:
         11:f8:2a:b1:9b:b0:1a:c3:8e:eb:59:96:00:ad:ce:0c:4d:b2:
         d0:31:a6:08:5c:2a:7a:fc:e2:7a:1d:57:4c:a8:65:18:e9:79:
         40:62:25:96:6e:c7:c7:37:6a:83:21:08:8e:41:ea:dd:d9:57:
         3f:1d:77:49:87:2a:16:06:5e:a6:38:6a:22:12:a3:51:19:83:
         7e:b6

pkcs7-signedData

SHA1: nil

1.3.6.1.4.1.311.2.1.4

1.3.6.1.4.1.311.2.1.15

00 3c 00 3c 00 3c 00 4f  00 62 00 73 00 6f 00 6c  |.<.<.<.O.b.s.o.l|
00 65 00 74 00 65 00 3e  00 3e 00 3e              |.e.t.e.>.>.>    |

SHA1

a4 d7 52 4f ca f7 73 6e 15 b6 6a 5a 2f 4a 0c 8a |..RO..sn..jZ/J..| bb cb 47 6c |..Gl |

Certificates
- Certificate #0
  - 2
    - 0C:E7:E0:E5:17:D8:46:FE:8F:E5:60:FC:1B:F0:30:39
    - RSA-SHA1: nil
    - Issuer
      - C: US
      - O: DigiCert Inc
      - OU: www.digicert.com
      - CN: DigiCert Assured ID Root CA
    - 2006-11-10 00:00:00 UTC: 2031-11-10 00:00:00 UTC
    - Subject
      - C: US
      - O: DigiCert Inc
      - OU: www.digicert.com
      - CN: DigiCert Assured ID Root CA
    - #5
      - rsaEncryption: nil
      - AD:0E:15:CE:E4:43:80:5C:B1:87:F3:B7:60:F9:71:12:
        A5:AE:DC:26:94:88:AA:F4:CE:F5:20:39:28:58:60:0C:
        F8:80:DA:A9:15:95:32:61:3C:B5:B1:28:84:8A:8A:DC:
        9F:0A:0C:83:17:7A:8F:90:AC:8A:E7:79:53:5C:31:84:
        2A:F6:0F:98:32:36:76:CC:DE:DD:3C:A8:A2:EF:6A:FB:
        21:F2:52:61:DF:9F:20:D7:1F:E2:B1:D9:FE:18:64:D2:
        12:5B:5F:F9:58:18:35:BC:47:CD:A1:36:F9:6B:7F:D4:
        B0:38:3E:C1:1B:C3:8C:33:D9:D8:2F:18:FE:28:0F:B3:
        A7:83:D6:C3:6E:44:C0:61:35:96:16:FE:59:9C:8B:76:
        6D:D7:F1:A2:4B:0D:2B:FF:0B:72:DA:9E:60:D0:8E:90:
        35:C6:78:55:87:20:A1:CF:E5:6D:0A:C8:49:7C:31:98:
        33:6C:22:E9:87:D0:32:5A:A2:BA:13:82:11:ED:39:17:
        9D:99:3A:72:A1:E6:FA:A4:D9:D5:17:31:75:AE:85:7D:
        22:AE:3F:01:46:86:F6:28:79:C8:B1:DA:E4:57:17:C4:
        7E:1C:0E:B0:B4:92:A6:56:B3:BD:B2:97:ED:AA:A7:F0:
        B7:C5:A8:3F:95:16:D0:FF:A1:96:EB:08:5F:18:77:4F: 0x010001
    - #6
      - keyUsage: true, 0x86
      - basicConstraints: true, true
      - subjectKeyIdentifier:
        45 eb a2 af f4 92 cb 82 31 2d 51 8b a7 a7 21 9d |E.......1-Q...!.| f3 6d c8 0f |.m.. |
      - authorityKeyIdentifier:
        45 eb a2 af f4 92 cb 82 31 2d 51 8b a7 a7 21 9d |E.......1-Q...!.| f3 6d c8 0f |.m.. |
  - RSA-SHA1:
```
a2 0e bc df e2 ed f0 e3  72 73 7a 64 94 bf f7 72  |........rszd...r|
66 d8 32 e4 42 75 62 ae  87 eb f2 d5 d9 de 56 b3  |f.2.Bub.......V.|
9f cc ce 14 28 b9 0d 97  60 5c 12 4c 58 e4 d3 3d  |....(...`\.LX..=|
83 49 45 58 97 35 69 1a  a8 47 ea 56 c6 79 ab 12  |.IEX.5i..G.V.y..|
d8 67 81 84 df 7f 09 3c  94 e6 b8 26 2c 20 bd 3d  |.g.....<...&, .=|
b3 28 89 f7 5f ff 22 e2  97 84 1f e9 65 ef 87 e0  |.(.._.".....e...|
df c1 67 49 b3 5d eb b2  09 2a eb 26 ed 78 be 7d  |..gI.]...*.&.x.}|
3f 2b f3 b7 26 35 6d 5f  89 01 b6 49 5b 9f 01 05  |?+..&5m_...I[...|
9b ab 3d 25 c1 cc b6 7f  c2 f1 6f 86 c6 fa 64 68  |..=%......o...dh|
eb 81 2d 94 eb 42 b7 fa  8c 1e dd 62 f1 be 50 67  |..-..B.....b..Pg|
b7 6c bd f3 f1 1f 6b 0c  36 07 16 7f 37 7c a9 5b  |.l....k.6...7|.[|
6d 7a f1 12 46 60 83 d7  27 04 be 4b ce 97 be c3  |mz..F`..'..K....|
67 2a 68 11 df 80 e7 0c  33 66 bf 13 0d 14 6e f3  |g*h.....3f....n.|
7f 1f 63 10 1e fa 8d 1b  25 6d 6c 8f a5 b7 61 01  |..c.....%ml...a.|
b1 d2 a3 26 a1 10 71 9d  ad e2 c3 f9 c3 99 51 b7  |...&..q.......Q.|
2b 07 08 ce 2e e6 50 b2  a7 fa 0a 45 2f a2 f0 f2  |+.....P....E/...|
```
- Certificate #1
  - 2
    - 04:09:18:1B:5F:D5:BB:66:75:53:43:B5:6F:95:50:08
    - RSA-SHA256: nil
    - Issuer
      - C: US
      - O: DigiCert Inc
      - OU: www.digicert.com
      - CN: DigiCert Assured ID Root CA
    - 2013-10-22 12:00:00 UTC: 2028-10-22 12:00:00 UTC
    - Subject
      - C: US
      - O: DigiCert Inc
      - OU: www.digicert.com
      - CN: DigiCert SHA2 Assured ID Code Signing CA
    - #5
      - rsaEncryption: nil
      - F8:D3:B3:1C:7F:0E:11:AF:67:77:07:D3:0B:31:49:19:
        CF:D0:FB:45:99:B1:3A:DB:44:F5:7F:E5:A8:9D:DB:32:
        D7:71:EA:76:9D:05:2E:B7:8F:FA:92:43:C0:A5:F9:89:
        D4:37:19:D7:B6:AA:F0:9C:86:A5:D8:25:AC:0E:79:28:
        3A:7E:E9:D1:67:D3:C6:FB:29:27:C7:D3:7B:23:94:E4:
        91:23:96:90:77:82:F9:A1:84:23:66:12:54:33:50:74:
        B1:28:26:BB:24:69:C2:C2:52:F2:14:67:8A:89:45:D4:
        2D:A1:A3:E9:88:2C:20:95:AE:1C:4A:87:08:DF:0C:F5:
        E2:4D:60:18:BE:AA:C4:B2:AE:70:31:66:33:71:3E:AC:
        70:A2:AB:CE:7F:E9:7C:CB:92:A1:E5:3B:31:1C:CF:EA:
        F2:0A:E4:57:BB:4A:B5:E9:74:E6:2B:FE:6C:CB:7E:74:
        39:36:0D:90:EF:E4:B5:4E:A4:A9:EA:6A:0A:AB:84:F3:
        AC:67:4E:B5:C4:F7:8C:D1:20:25:23:EB:08:64:3E:52:
        96:C1:F2:0F:12:F4:C5:8E:0F:C1:A2:E8:2C:51:F7:73:
        BC:BD:85:B1:62:83:73:41:82:07:E4:38:8B:6A:73:20:
        D0:0F:64:73:3C:9E:9F:A6:33:A9:FD:19:DF:25:93:D1: 0x010001
    - X509v3 extensions
      - basicConstraints
        true
        true: 0
      - keyUsage: true, 0x86
      - extendedKeyUsage: codeSigning
      - authorityInfoAccess
        #0
        OCSP: http://ocsp.digicert.com
        caIssuers: http://cacerts.digicert.com/DigiCertAssuredIDRootCA.crt
      - crlDistributionPoints
        http://crl4.digicert.com/DigiCertAssuredIDRootCA.crl: http://crl3.digicert.com/DigiCertAssuredIDRootCA.crl
      - certificatePolicies
        #0
        2.16.840.1.114412.0.2.4
        id-qt-cps: https://www.digicert.com/CPS
        2.16.840.1.114412.3
      - subjectKeyIdentifier:
        5a c4 b9 7b 2a 0a a3 a5 ea 71 03 c0 60 f9 2d f6 |Z..{*....q..`.-.| 65 75 0e 58 |eu.X |
      - authorityKeyIdentifier:
        45 eb a2 af f4 92 cb 82 31 2d 51 8b a7 a7 21 9d |E.......1-Q...!.| f3 6d c8 0f |.m.. |
  - RSA-SHA256:
```
3e ec 0d 5a 24 b3 f3 22  d1 15 c8 2c 7c 25 29 76  |>..Z$.."...,|%)v|
a8 1d 5d 1c 2d 3a 1a c4  ef 30 61 d7 7e 0b 60 fd  |..].-:...0a.~.`.|
c3 3d 0f c4 af 8b fd ef  2a df 20 55 37 b0 e1 f6  |.=......*. U7...|
d1 92 75 0f 51 b4 6e a5  8e 5a e2 5e 24 81 4e 10  |..u.Q.n..Z.^$.N.|
a4 ee 3f 71 8e 63 0e 13  4b ad d7 5f 44 79 f3 36  |..?q.c..K.._Dy.6|
14 06 8a f7 9c 46 4e 5c  ff 90 b1 1b 07 0e 91 15  |.....FN\........|
fb ba af b5 51 c2 8d 24  ae 24 c6 c7 27 2a a1 29  |....Q..$.$..'*.)|
28 1a 3a 71 28 02 3c 2e  91 a3 c0 25 11 e2 9c 14  |(.:q(.<....%....|
47 a1 7a 68 68 af 9b a7  5c 20 5c d9 71 b1 0c 8f  |G.zhh...\ \.q...|
bb a8 f8 c5 12 68 9f cf  40 cb 40 44 a5 13 f0 e6  |.....h..@.@D....|
64 0c 25 08 42 32 b2 36  8a 24 02 fe 2f 72 7e 1c  |d.%.B2.6.$../r~.|
d7 49 45 96 e8 59 1d e9  fa 74 64 6b b2 eb 66 43  |.IE..Y...tdk..fC|
da b3 b0 8c d5 e9 0d dd  f6 01 20 ce 99 31 63 3d  |.......... ..1c=|
08 1a 18 b3 81 9b 4f c6  93 10 06 fc 07 81 fa 8b  |......O.........|
da f9 82 49 f7 62 6e a1  53 fa 12 94 18 85 2e 92  |...I.bn.S.......|
91 ea 68 6c 44 32 b2 66  a1 e7 18 a4 9a 64 51 ef  |..hlD2.f.....dQ.|
```
- Certificate #2
  - 2
    - 0B:1F:8C:D5:9E:64:74:6B:EA:E1:53:EC:CA:21:06:6B
    - RSA-SHA256: nil
    - Issuer
      - C: US
      - O: DigiCert Inc
      - OU: www.digicert.com
      - CN: DigiCert SHA2 Assured ID Code Signing CA
    - 2019-05-31 00:00:00 UTC: 2020-06-04 12:00:00 UTC
    - Subject
      - C: US
      - ST: California
      - L: Mountain View
      - O: Mozilla Corporation
      - OU: Release Engineering
      - CN: Mozilla Corporation
      - emailAddress: release+certificates@mozilla.com
    - #5
      - rsaEncryption: nil
      - DE:8D:FA:2A:F5:00:34:EC:AB:D1:4E:67:B7:C1:10:69:
        64:78:6F:35:A2:1A:5D:9B:69:07:D5:DA:5A:07:9E:58:
        C3:C1:8C:25:19:D8:BC:9F:7D:28:3B:AC:67:95:1F:C1:
        15:95:3D:D6:B8:5B:F6:51:41:3B:C9:4F:1E:0F:04:35:
        4B:96:68:F5:96:95:40:CE:FD:50:AB:A0:09:A0:D7:49:
        7C:34:1B:F6:CC:C4:2D:5F:66:FB:F7:D5:3A:62:5E:B0:
        63:1D:FA:D3:D7:45:7E:17:7F:BC:1E:21:CC:AB:35:8C:
        51:50:4D:36:1E:44:3A:4D:2B:97:9D:64:EA:EC:31:BE:
        03:80:3A:EB:10:F9:BC:08:E9:C2:EF:44:D4:7A:36:63:
        40:67:B1:F5:1B:CB:59:1D:47:F5:E6:E4:A9:AB:33:B0:
        8D:42:39:7A:42:8D:3B:9F:53:43:23:F3:03:41:3A:3E:
        D7:D6:21:9F:90:05:9A:4B:42:B6:61:37:BB:88:6E:C8:
        C4:F1:4C:9D:EC:02:67:2D:DF:17:56:1E:B5:C6:7B:9C:
        31:39:A2:60:D6:2E:BB:5F:8C:BE:48:E4:C6:1E:34:E3:
        BE:21:36:7D:DF:CD:E7:52:8B:AA:A4:45:25:8B:93:05:
        88:DC:BF:00:5D:93:31:60:0C:88:FD:B4:86:DE:B3:1D:
        63:83:6A:25:24:67:09:B4:88:0A:48:C6:6F:EF:AF:B3:
        72:58:F7:60:95:59:5A:DB:A2:32:A1:2D:18:6D:3C:48:
        08:76:5D:27:94:FD:22:C7:49:53:FA:BF:AF:0F:06:8B:
        24:8A:51:CA:A9:2B:45:EA:84:DF:F4:23:6D:0C:E7:D5:
        1E:CF:14:0E:C0:09:D9:66:3A:3E:5D:75:5A:3D:01:E5:
        A5:12:C4:EF:82:17:CE:B0:8A:9A:A2:A5:4E:14:2D:44:
        30:35:A1:C0:A8:E1:75:B8:7C:7A:EE:A0:52:9F:B7:E1:
        9E:B1:F5:67:ED:5B:89:A6:F4:AB:55:12:30:BB:9F:E8:
        6A:A9:D9:2B:39:29:76:08:75:AD:3A:C5:DD:48:2A:C3:
        69:A6:A0:A9:23:C2:49:65:29:BD:86:54:15:17:65:C7:
        1B:4B:1F:87:09:6C:04:6E:C0:71:06:BE:C0:67:46:6B:
        A5:77:F0:69:47:09:D3:5C:4B:3A:AA:55:EE:AB:6C:F6:
        B3:5A:A7:DE:17:A3:B3:CD:16:4F:A0:56:53:F7:B6:0E:
        EB:67:07:5C:59:C7:8C:CD:E2:97:DE:D3:A2:3A:71:70:
        1D:63:45:1A:D4:A6:58:DC:2D:6E:25:B8:90:1C:C6:D9:
        CC:C9:0F:80:BE:1D:53:23:8C:EE:2C:D5:60:1F:D9:1D: 0x010001
    - #6
      - authorityKeyIdentifier:
        5a c4 b9 7b 2a 0a a3 a5 ea 71 03 c0 60 f9 2d f6 |Z..{*....q..`.-.| 65 75 0e 58 |eu.X |
      - subjectKeyIdentifier:
        a6 a8 57 85 7d dd 0b 25 6c fb 34 a2 90 fc 2d 1e |..W.}..%l.4...-.| a2 0f f1 5a |...Z |
      - keyUsage: true, 0x80
      - extendedKeyUsage: codeSigning
      - crlDistributionPoints
        http://crl3.digicert.com/sha2-assured-cs-g1.crl: http://crl4.digicert.com/sha2-assured-cs-g1.crl
      - certificatePolicies
        #0
        2.16.840.1.114412.3.1
        id-qt-cps: https://www.digicert.com/CPS
        2.23.140.1.4.1
      - authorityInfoAccess
        #0
        OCSP: http://ocsp.digicert.com
        caIssuers: http://cacerts.digicert.com/DigiCertSHA2AssuredIDCodeSigningCA.crt
      - basicConstraints
        true
        nil
  - RSA-SHA256:
```
e1 cb 5f 49 fe 9d e9 27  bf 7a 74 ff b7 8f a5 fc  |.._I...'.zt.....|
7a c9 fa 3a d1 93 ad 5d  17 d3 dd ce 51 61 c4 7a  |z..:...]....Qa.z|
95 1f ba 56 de 89 9e e3  69 10 20 c2 43 43 53 3e  |...V....i. .CCS>|
27 1f f8 c9 8f ca 5f a3  20 11 bd c8 bf 3a 61 37  |'....._. ....:a7|
a9 a1 4d 47 ac 67 13 23  7d fb f8 2e cb a9 0a d1  |..MG.g.#}.......|
b1 90 46 b6 8c 5e 0a a1  1a 86 bb b2 11 15 59 e1  |..F..^........Y.|
c8 2b 0b 45 f2 e0 92 5c  f5 fd f5 12 3a 7b 8a 42  |.+.E...\....:{.B|
f1 a4 3a 9e 87 03 20 0e  30 4b cb 44 ff d5 8c d3  |..:... .0K.D....|
cc d0 3d 2a 77 06 80 d3  a0 3e fe 13 3d 45 98 3e  |..=*w....>..=E.>|
49 41 cc b6 2a e2 1b f7  4f 92 6e 36 c6 04 93 0b  |IA..*...O.n6....|
ac d6 f3 49 29 d9 ea 85  bc c0 4c e2 66 99 04 69  |...I).....L.f..i|
aa 4d 48 32 dc ad 53 36  a8 ac 6f 41 f8 d5 39 f7  |.MH2..S6..oA..9.|
db 86 b5 55 18 99 0e 37  df 8d 22 c0 32 c3 af fb  |...U...7..".2...|
d2 05 92 91 a9 96 7c 41  50 3d 64 c1 a6 f6 41 d8  |......|AP=d...A.|
a2 06 ff f2 ab ea 30 ff  4d 60 e4 6e c3 a4 9d 14  |......0.M`.n....|
43 61 b4 5c 9b e2 cd 9b  a1 53 34 5f 39 f9 60 a2  |Ca.\.....S4_9.`.|
```
- Certificate #3
  - 2
    - 0E:CF:F4:38:C8:FE:BF:35:6E:04:D8:6A:98:1B:1A:50
    - RSA-SHA1: nil
    - Issuer
      - C: US
      - O: Symantec Corporation
      - CN: Symantec Time Stamping Services CA - G2
    - 2012-10-18 00:00:00 UTC: 2020-12-29 23:59:59 UTC
    - Subject
      - C: US
      - O: Symantec Corporation
      - CN: Symantec Time Stamping Services Signer - G4
    - #5
      - rsaEncryption: nil
      - A2:63:0B:39:44:B8:BB:23:A7:44:49:BB:0E:FF:A1:F0:
        61:0A:53:93:B0:98:DB:AD:2C:0F:4A:C5:6E:FF:86:3C:
        53:55:0F:15:CE:04:3F:2B:FD:A9:96:96:D9:BE:61:79:
        0B:5B:C9:4C:86:76:E5:E0:43:4B:22:95:EE:C2:2B:43:
        C1:9F:D8:68:B4:8E:40:4F:EE:85:38:B9:11:C5:23:F2:
        64:58:F0:15:32:6F:4E:57:A1:AE:88:A4:02:D7:2A:1E:
        CD:4B:E1:DD:63:D5:17:89:32:5B:B0:5E:99:5A:A8:9D:
        28:50:0E:17:EE:96:DB:61:3B:45:51:1D:CF:12:56:0B:
        92:47:FC:AB:AE:F6:66:3D:47:AC:70:72:E7:92:E7:5F:
        CD:10:B9:C4:83:64:94:19:BD:25:80:E1:E8:D2:22:A5:
        D0:BA:02:7A:A1:77:93:5B:65:C3:EE:17:74:BC:41:86:
        2A:DC:08:4C:8C:92:8C:91:2D:9E:77:44:1F:68:D6:A8:
        74:77:DB:0E:5B:32:8B:56:8B:33:BD:D9:63:C8:49:9D:
        3A:C5:C5:EA:33:0B:D2:F1:A3:1B:F4:8B:BE:D9:B3:57:
        8B:3B:DE:04:A7:7A:22:B2:24:AE:2E:C7:70:C5:BE:4E:
        83:26:08:FB:0B:BD:A9:4F:99:08:E1:10:28:72:AA:CD: 0x010001
    - X509v3 extensions
      - basicConstraints
        true
        nil
      - extendedKeyUsage: true, timeStamping
      - keyUsage: true, 0x80
      - authorityInfoAccess
        #0
        OCSP: http://ts-ocsp.ws.symantec.com
        caIssuers: http://ts-aia.ws.symantec.com/tss-ca-g2.cer
      - crlDistributionPoints: http://ts-crl.ws.symantec.com/tss-ca-g2.crl
      - subjectAltName
        CN: TimeStamp-2048-2
      - subjectKeyIdentifier:
        46 c6 69 a3 0e 4a 14 1e d5 4c da 52 63 17 3f 5e |F.i..J...L.Rc.?^| 36 bc 0d e6 |6... |
      - authorityKeyIdentifier:
        5f 9a f5 6e 5c cc cc 74 9a d4 dd 7d ef 3f db ec |_..n\..t...}.?..| 4c 80 2e dd |L... |
  - RSA-SHA1:
```
78 3b b4 91 2a 00 4c f0  8f 62 30 37 78 a3 84 27  |x;..*.L..b07x..'|
07 6f 18 b2 de 25 dc a0  d4 94 03 aa 86 4e 25 9f  |.o...%.......N%.|
9a 40 03 1c dd ce e3 79  cb 21 68 06 da b6 32 b4  |.@.....y.!h...2.|
6d bf f4 2c 26 63 33 e4  49 64 6d 0d e6 c3 67 0e  |m..,&c3.Idm...g.|
f7 05 a4 35 6c 7c 89 16  c6 e9 b2 df b2 e9 dd 20  |...5l|......... |
c6 71 0f cd 95 74 dc b6  5c de bd 37 1f 43 78 e6  |.q...t..\..7.Cx.|
78 b5 cd 28 04 20 a3 aa  f1 4b c4 88 29 91 0e 80  |x..(. ...K..)...|
d1 11 fc dd 5c 76 6e 4f  5e 0e 45 46 41 6e 0d b0  |....\vnO^.EFAn..|
ea 38 9a b1 3a da 09 71  10 fc 1c 79 b4 80 7b ac  |.8..:..q...y..{.|
69 f4 fd 9c b6 0c 16 2b  f1 7f 5b 09 3d 9b 5b e2  |i......+..[.=.[.|
16 ca 13 81 6d 00 2e 38  0d a8 29 8f 2c e1 b2 f4  |....m..8..).,...|
5a a9 01 af 15 9c 2c 2f  49 1b db 22 bb c3 fe 78  |Z.....,/I.."...x|
94 51 c3 86 b1 82 88 5d  f0 3d b4 51 a1 79 33 2b  |.Q.....].=.Q.y3+|
2e 7b b9 dc 20 09 13 71  eb 6a 19 5b cf e8 a5 30  |.{.. ..q.j.[...0|
57 2c 89 49 3f b9 cf 7f  c9 bf 3e 22 68 63 53 9a  |W,.I?.....>"hcS.|
bd 69 74 ac c5 1d 3c 7f  92 e0 c3 bc 1c d8 04 75  |.it...<........u|
```
- Certificate #4
  - 2
    - 7E:93:EB:FB:7C:C6:4E:59:EA:4B:9A:77:D4:06:FC:3B
    - RSA-SHA1: nil
    - Issuer
      - C: ZA
      - ST: Western Cape
      - L: Durbanville
      - O: Thawte
      - OU: Thawte Certification
      - CN: Thawte Timestamping CA
    - 2012-12-21 00:00:00 UTC: 2020-12-30 23:59:59 UTC
    - Subject
      - C: US
      - O: Symantec Corporation
      - CN: Symantec Time Stamping Services CA - G2
    - #5
      - rsaEncryption: nil
      - B1:AC:B3:49:54:4B:97:1C:12:0A:D8:25:79:91:22:57:
        2A:6F:DC:B8:26:C4:43:73:6B:C2:BF:2E:50:5A:FB:14:
        C2:76:8E:43:01:25:43:B4:A1:E2:45:F4:E8:B7:7B:C3:
        74:CC:22:D7:B4:94:00:02:F7:4D:ED:BF:B4:B7:44:24:
        6B:CD:5F:45:3B:D1:44:CE:43:12:73:17:82:8B:69:B4:
        2B:CB:99:1E:AC:72:1B:26:4D:71:1F:B1:31:DD:FB:51:
        61:02:53:A6:AA:F5:49:2C:05:78:45:A5:2F:89:CE:E7:
        99:E7:FE:8C:E2:57:3F:3D:C6:92:DC:4A:F8:7B:33:E4:
        79:0A:FB:F0:75:88:41:9C:FF:C5:03:51:99:AA:D7:6C:
        9F:93:69:87:65:29:83:85:C2:60:14:C4:C8:C9:3B:14:
        DA:C0:81:F0:1F:0D:74:DE:92:22:AB:CA:F7:FB:74:7C:
        27:E6:F7:4A:1B:7F:A7:C3:9E:2D:AE:8A:EA:A6:E6:AA:
        27:16:7D:61:F7:98:71:11:BC:E2:50:A1:4B:E5:5D:FA:
        E5:0E:A7:2C:9F:AA:65:20:D3:D8:96:E8:C8:7C:A5:4E:
        48:44:FF:19:E2:44:07:92:0B:D7:68:84:80:5D:6A:78:
        64:45:CD:60:46:7E:54:C1:13:7C:C5:79:F1:C9:C1:71: 0x010001
    - #6
      - subjectKeyIdentifier:
        5f 9a f5 6e 5c cc cc 74 9a d4 dd 7d ef 3f db ec |_..n\..t...}.?..| 4c 80 2e dd |L... |
      - authorityInfoAccess
        OCSP: http://ocsp.thawte.com
      - basicConstraints
        true
        true: 0
      - crlDistributionPoints: http://crl.thawte.com/ThawteTimestampingCA.crl
      - extendedKeyUsage: timeStamping
      - keyUsage: true, 6
      - subjectAltName
        CN: TimeStamp-2048-1
  - RSA-SHA1:
```
03 09 9b 8f 79 ef 7f 59  30 aa ef 68 b5 fa e3 09  |....y..Y0..h....|
1d bb 4f 82 06 5d 37 5f  a6 52 9f 16 8d ea 1c 92  |..O..]7_.R......|
09 44 6e f5 6d eb 58 7c  30 e8 f9 69 8d 23 73 0b  |.Dn.m.X|0..i.#s.|
12 6f 47 a9 ae 39 11 f8  2a b1 9b b0 1a c3 8e eb  |.oG..9..*.......|
59 96 00 ad ce 0c 4d b2  d0 31 a6 08 5c 2a 7a fc  |Y.....M..1..\*z.|
e2 7a 1d 57 4c a8 65 18  e9 79 40 62 25 96 6e c7  |.z.WL.e..y@b%.n.|
c7 37 6a 83 21 08 8e 41  ea dd d9 57 3f 1d 77 49  |.7j.!..A...W?.wI|
87 2a 16 06 5e a6 38 6a  22 12 a3 51 19 83 7e b6  |.*..^.8j"..Q..~.|
```

Signer

1
unnamed
- #0
  - C: US
  - O: DigiCert Inc
  - OU: www.digicert.com
  - CN: DigiCert SHA2 Assured ID Code Signing CA
- 0B:1F:8C:D5:9E:64:74:6B:EA:E1:53:EC:CA:21:06:6B
SHA1: nil
#3
- contentType: 1.3.6.1.4.1.311.2.1.4
- signingTime: 2019-06-20 09:31:08 UTC
- 1.3.6.1.4.1.311.2.1.11: msCodeInd
- messageDigest:
```
1f 36 eb 6a 64 8b e9 bc  93 57 4c 21 bc 00 98 fc  |.6.jd....WL!....|
67 0a ea 86                                       |g...            |
```
- 1.3.6.1.4.1.311.2.1.12: https://www.mozilla.com

rsaEncryption:

81 4f fb 8b d9 8f 30 c4  ac a1 64 97 34 e7 84 8e  |.O....0...d.4...|
8b 9b 0f 64 45 75 5b 3b  1e f3 b1 c9 24 28 37 8a  |...dEu[;....$(7.|
1b fc 9e fd ef bf 99 72  38 dc a4 8e ff 1b ab 13  |.......r8.......|
86 66 c1 7a 35 f8 8e 57  53 48 30 dd 5e 9b 09 3c  |.f.z5..WSH0.^..<|
7e 0d e5 39 35 70 5c 65  01 1b 3d 2e d1 78 8d 95  |~..95p\e..=..x..|
fc cf db 40 2b 2a f5 7c  38 32 90 54 47 ec 80 49  |...@+*.|82.TG..I|
3d e7 48 78 08 e0 06 70  ab d0 b9 32 2f 70 c4 f5  |=.Hx...p...2/p..|
c6 d3 ce 23 a8 a0 7b 53  f6 f4 97 91 8c 27 0c 94  |...#..{S.....'..|
05 b9 92 cc 03 3d 80 d0  95 0e ac 89 41 f4 91 24  |.....=......A..$|
64 b0 0c 0f df be e1 f1  c0 a5 cd c5 87 9d 9b f0  |d...............|
bd 71 2d 75 d5 06 74 15  cd 27 e6 73 f4 f9 a3 02  |.q-u..t..'.s....|
67 47 6b 3f 08 dc 90 24  73 5e 8f 20 aa ca ed cb  |gGk?...$s^. ....|
c9 bd aa 58 2d 03 cf d1  59 3c 4f 33 e3 2b d4 f6  |...X-...Ycountersignature1unnamed#0C: US
O: Symantec Corporation
CN: Symantec Time Stamping Services CA - G2
0E:CF:F4:38:C8:FE:BF:35:6E:04:D8:6A:98:1B:1A:50
SHA1: nil
#2contentType: pkcs7-data
signingTime: 2019-06-20 09:31:11 UTC
messageDigest: 82 31 a7 d5 3f 74 38 11  84 79 8f a9 bc 72 58 fc  |.1..?t8..y...rX.|
8b 90 78 c6                                       |..x.            |
rsaEncryption: 77 89 c7 1c 88 cf 02 95  f1 e7 6d 9b 11 9b 6e c9  |w.........m...n.|
99 28 fb e1 b4 bb 01 c3  eb c9 ea 48 4d f0 65 8a  |.(.........HM.e.|
c3 e2 ed af cb 38 80 4f  e7 4c ab bd cc 68 6d 88  |.....8.O.L...hm.|
2c b1 4c 62 46 1e 2f 35  49 7f 3b 35 59 0c 67 d8  |,.LbF./5I.;5Y.g.|
6e 80 c7 6b f4 a2 d4 8a  70 fe 37 93 c3 dd 19 ac  |n..k....p.7.....|
eb 21 81 8e 1a cd 28 03  ca 91 d9 13 4e 7a 85 df  |.!....(.....Nz..|
c3 1c f7 0d f9 5d 83 cf  7d 69 49 35 2d 5a ed a8  |.....]..}iI5-Z..|
92 4b e1 49 cc c4 f2 ad  37 9d df b7 6e 4d 02 c6  |.K.I....7...nM..|
96 0c 50 7f 6d a3 e6 f6  43 fa cd e9 65 f7 ae 65  |..P.m...C...e..e|
70 4d 0e da b2 36 db 29  98 f2 13 7f 76 73 fa 9f  |pM...6.)....vs..|
38 e9 ca 67 91 a6 b2 c2  60 fe 46 16 70 f2 8b 7f  |8..g....`.F.p...|
89 9b 7a c7 61 18 1c 58  eb c9 b7 12 52 2c f4 ff  |..z.a..X....R,..|
07 84 c0 87 52 28 c4 30  b8 5e ab 92 fe 36 4b d9  |....R(.0.^...6K.|
50 22 44 6d df 07 da 66  6c b4 4e 3a a1 09 46 a7  |P"Dm...fl.N:..F.|
b4 52 e6 a6 da 94 19 b0  10 c9 cd a6 bd 5d b1 37  |.R...........].7|
f3 30 6d 07 3e a7 2b 18  67 62 5b 76 01 87 29 5e  |.0m.>.+.gb[v..)^|