rebase.exe

File Path: C:\Users\user\AppData\Local\GitHubDesktop\app-2.5.4\resources\app\git\usr\bin\rebase.exe

Hashes

Type	Hash
MD5	`9D64CD9BC0B1BB328E9B97F4D26F4231`
SHA1	`30482526C17CF5F7FE1C1A07F08E99A43F2A1F05`
SHA256	`0C962A3CAEACD0CE089A795C14D2685B79621580C6FC75A6DD40CA3BDB2040E0`
SHA384	`A6807FF7EDE103289A95C8898453C07BFDCBF1A30EC794B6F0648A68F3E4FC398773E3ADC2741D63B393213431D79A5D`
SHA512	`480A4B04397D17BCF8EEC99325DCE5A6DFD94FDB6BCA84B26F0E34D0531DB1E1119938C73D53E5E93780DD2966ED95A61C1B17DEA313030E74A214CD28CDCC7E`
SSDEEP	`24576:cM1ooGYlsMnB/RtTjgqbWqNZG1HHHHHHHlbfHHHpHHHkrkznb5g:cM16YlsMnB/PjgqbWugbXznb5g`

Runtime Data

Usage (stdout):

Usage: rebase [OPTIONS] [FILE]...
Rebase PE files, usually DLLs, to a specified address or address range.

  -4, --32                Only rebase 32 bit DLLs.
  -8, --64                Only rebase 64 bit DLLs.  This is the default.
  -b, --base=BASEADDRESS  Specifies the base address at which to start rebasing.
  -s, --database          Utilize the rebase database to find unused memory
                          slots to rebase the files on the command line to.
                          (Implies -d).
                          If -b is given, too, the database gets recreated.
  -O, --oblivious         Do not change any files already in the database
                          and do not record any changes to the database.
                          (Implies -s).
  -i, --info              Rather then rebasing, just print the current base
                          address and size of the files.  With -s, use the
                          database.  The files are ordered by base address.
                          A '*' at the end of the line is printed if a
                          collisions with an adjacent file is detected.

  One of the options -b, -s or -i is mandatory.  If no rebase database exists
  yet, -b is required together with -s.

  -d, --down              Treat the BaseAddress as upper ceiling and rebase
                          files top-down from there.  Without this option the
                          files are rebased from BaseAddress bottom-up.
                          With the -s option, this option is implicitly set.
  -n, --no-dynamicbase    Remove PE dynamicbase flag from rebased DLLs, if set.
  -o, --offset=OFFSET     Specify an additional offset between adjacent DLLs
                          when rebasing.  Default is no offset.
  -t, --touch             Use this option to make sure the file's modification
                          time is bumped if it has been successfully rebased.
                          Usually rebase does not change the file's time.
  -T, --filelist=FILE     Also rebase the files specified in FILE.  The format
                          of FILE is one DLL per line.
  -q, --quiet             Be quiet about non-critical issues.
  -v, --verbose           Print some debug output.
  -V, --version           Print version info and exit.
  -h, --help, --usage     This help.

Usage (stderr):

help: skipped because not rebaseable

Loaded Modules:

Path
C:\Users\user\AppData\Local\GitHubDesktop\app-2.5.4\resources\app\git\usr\bin\rebase.exe
C:\Windows\System32\KERNEL32.DLL
C:\Windows\System32\KERNELBASE.dll
C:\Windows\SYSTEM32\ntdll.dll

Signature

Status: Signature verified.
Serial: 045D8F14A82147641722D4FAFC66BC80
Thumbprint: FB713A60A7FA79DFC03CB301CA05D4E8C1BDD431
Issuer: CN=DigiCert SHA2 Assured ID Code Signing CA, OU=www.digicert.com, O=DigiCert Inc, C=US
Subject: CN=”GitHub, Inc.”, O=”GitHub, Inc.”, L=San Francisco, S=California, C=US

File Metadata

Original Filename:
Product Name:
Company Name:
File Version:
Product Version:
Language:
Legal Copyright:

File Similarity (ssdeep match)

File	Score
C:\Users\user\AppData\Local\GitHubDesktop\app-2.5.3\resources\app\git\usr\bin\rebase.exe	97