basename.exe

File Path: C:\Users\user\AppData\Local\GitHubDesktop\app-2.5.4\resources\app\git\usr\bin\basename.exe

Hashes

Type	Hash
MD5	`06A6BE1F6953444247863D2B556B8710`
SHA1	`05BE799D8D941A9AE2388BDA9123C44795CD5202`
SHA256	`87621206A44C50D742CB42EC55C35CFA9D9C1B9B93277E61F60D111E8B19BF38`
SHA384	`BAF91D4949FF8FE046D9FEC2C91969B4F940BAD4AE6DA12B22697FA2454E9779094D0281197D2EB85222051C394EAECC`
SHA512	`4147834AE56138B4B6A32F46656AFEACEBD41AEA4C1F119ED346F1E339FB14CA39C83DA84A45CC76D294C98FDC3948A1C763A9E48998B8021A5223AF651DC6C8`
SSDEEP	`768:r/FPyMIoeiJcN4KjGYrxgnNiqbo197WNeFMkDGbUf2hg:r/FRIoeiJbKWNeFMrUf`

Runtime Data

Usage (stdout):

Usage: /usr/bin/basename NAME [SUFFIX]
  or:  /usr/bin/basename OPTION... NAME...
Print NAME with any leading directory components removed.
If specified, also remove a trailing SUFFIX.

Mandatory arguments to long options are mandatory for short options too.
  -a, --multiple       support multiple arguments and treat each as a NAME
  -s, --suffix=SUFFIX  remove a trailing SUFFIX; implies -a
  -z, --zero           end each output line with NUL, not newline
      --help     display this help and exit
      --version  output version information and exit

Examples:
  /usr/bin/basename /usr/bin/sort          -> "sort"
  /usr/bin/basename include/stdio.h .h     -> "stdio"
  /usr/bin/basename -s .h include/stdio.h  -> "stdio"
  /usr/bin/basename -a any/str1 any/str2   -> "str1" followed by "str2"

GNU coreutils online help: <https://www.gnu.org/software/coreutils/>
Report any translation bugs to <https://translationproject.org/team/>
Full documentation <https://www.gnu.org/software/coreutils/basename>
or available locally via: info '(coreutils) basename invocation'

Usage (stderr):

basename: unknown option -- h
Try '/usr/bin/basename --help' for more information.

Loaded Modules:

Path
C:\Users\user\AppData\Local\GitHubDesktop\app-2.5.4\resources\app\git\usr\bin\basename.exe
C:\Windows\System32\KERNEL32.DLL
C:\Windows\System32\KERNELBASE.dll
C:\Windows\SYSTEM32\ntdll.dll

Signature

Status: Signature verified.
Serial: 045D8F14A82147641722D4FAFC66BC80
Thumbprint: FB713A60A7FA79DFC03CB301CA05D4E8C1BDD431
Issuer: CN=DigiCert SHA2 Assured ID Code Signing CA, OU=www.digicert.com, O=DigiCert Inc, C=US
Subject: CN=”GitHub, Inc.”, O=”GitHub, Inc.”, L=San Francisco, S=California, C=US

File Metadata

Original Filename:
Product Name:
Company Name:
File Version:
Product Version:
Language:
Legal Copyright:

Possible Misuse

The following table contains possible examples of basename.exe being misused. While basename.exe is not inherently malicious, its legitimate functionality can be abused for malicious purposes.

Source	Source File	Example	License
atomic-red-team	T1556.002.md	$passwordFilterName = (Copy-Item “#{input_dll}” -Destination “C:\Windows\System32” -PassThru).basename	MIT License. © 2018 Red Canary
stockpile	316251ed-6a28-4013-812b-ddf5b5b007f8.yml	`for i in {1..5}; do screencapture -t png screen-$i.png; echo "$(cd "$(dirname "$1")"; pwd -P)/$(basename "screen-$i.png")"; sleep 5; done;`	Apache-2.0
stockpile	0582dc26-e0cf-4645-88cf-f37a02279976.yml	`RemoteFile="$(date '+%Y%m%d%H%M%S')-exfil-#{paw}-$(basename $LocalFile)";`	Apache-2.0
stockpile	3ce95a28-25fc-4a7e-a0cd-0fdb190e2081.yml	`RemoteName="$(date '+%Y%m%d%H%M%S')-exfil-#{paw}-$(basename $LocalFile)";`	Apache-2.0
stockpile	4a1120a5-971c-457f-bb07-60641b4723fd.yml	`RemoteName="$(date '+%Y%m%d%H%M%S')-exfil-#{paw}-$(basename $LocalFile)";`	Apache-2.0
stockpile	5c5b0392-1daa-45e1-967c-2f361ce78849.yml	`$BaseName = $StageDir + "\calderachunk";`	Apache-2.0
stockpile	5c5b0392-1daa-45e1-967c-2f361ce78849.yml	`$ChunkName = "{0}{1}" -f ($BaseName, $idx.ToString().PadLeft(3,'0'));`	Apache-2.0
stockpile	a201bec2-a193-4b58-bf0e-57fa621da474.yml	`RemoteName="$(date '+%Y%m%d%H%M%S')-exfil-#{paw}-$(basename "$TempName")";`	Apache-2.0
stockpile	a201bec2-a193-4b58-bf0e-57fa621da474.yml	`echo "{\"message\":\"Committed $(basename $TempName) at: $(date)\", \"branch\":\"$GHBranch\", \"content\":\"" >/tmp/b64;`	Apache-2.0
stockpile	ba0deadb-97ac-4a4c-aa81-21912fc90980.yml	`RemoteName="exfil-#{paw}-$(basename $LocalFile)";`	Apache-2.0
stockpile	d754878c-17dd-46dc-891c-a993f8a10336.yml	`RemoteName="$(date '+%Y%m%d%H%M%S')-exfil-#{paw}-$(basename $LocalFile)";`	Apache-2.0
stockpile	e7bf5dc7-62e4-48b2-acf8-abaf8734c19c.yml	`RemoteName="exfil-#{paw}-$(basename $LocalFile)";`	Apache-2.0