home

gunzip.exe

This is a setup program which is used to install the application. The file has been seen being downloaded from wwwin-dfx.cisco.com.
MD5:
30be2dc419821f7807579370994d8ff1

SHA-1:
dfb864eda513f07baab36798f9fb636e2281d4f1

SHA-256:
c8f277e4e6445477883465c1c134a27b738b2c50875bcc70365d62816722f21c

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/23/2024 2:31:52 AM UTC  (today)

File size:
48 KB (49,152 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\Windows\System32\gunzip.exe

File PE Metadata
Compilation timestamp:
8/26/1999 8:37:41 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows Console

Linker version:
2.55

CTPH (ssdeep):
768:E1IdVGiXOjR7cpmbcuX+C3H4b1CCJzjb2HwYZqtGFv0arI9:FEAmbZX13k1BJz2QYEGKw

Entry address:
0x11DC

Entry point:
55, 89, E5, 83, EC, 08, 83, C4, F4, 6A, 01, A1, 28, E2, 45, 00, FF, D0, E8, 8D, FF, FF, FF, 31, C0, C9, C3, 90, 55, 89, E5, 83, EC, 08, 83, C4, F4, 6A, 02, A1, 28, E2, 45, 00, FF, D0, E8, 71, FF, FF, FF, C9, C3, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 20, 20, 20, 46, 6F, 75, 6E, 64, 61, 74, 69, 6F, 6E, 2C, 20, 49, 6E, 63, 2E, 2C, 20, 36, 37, 35, 20, 4D, 61, 73, 73, 20, 41, 76, 65, 2C, 20, 43, 61, 6D, 62, 72, 69, 64, 67, 65, 2C, 20, 4D, 41, 20, 30, 32, 31, 33, 39, 2C, 20, 55, 53, 41, 2E...
 
[+]

Code size:
42.5 KB (43,520 bytes)

The file gunzip.exe has been discovered within the following programs.

Atrinik Client  by Atrinik Team
About 1% of users remove it
MON2020  by Emerson Process Management
www.EmersonProcessManagement.com
About 3% of users remove it
Praim - ThinMan  by Praim
www.praim.com
About 7% of users remove it
 
Powered by Should I Remove It?

The file gunzip.exe has been seen being distributed by the following URL.

http://wwwin-dfx.cisco.com/valor/ValorSetup/.../gunzip.exe

Scan gunzip.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.