home

gounzipsetup.gounzip_dm.enknlcpanodakgmfgjhndmgjcailkaak.ch.exe

This is a setup program which is used to install the application. The file has been seen being downloaded from ak.dl.gounzip.com.
MD5:
6ae3ac0e5e70dd1eaf49da5fdf2ec309

SHA-1:
deebe53751ebf618494ea64c1c49da8346a46bcd

SHA-256:
2f6d4ff12904b6a3a7a84e48681005b30d26662c979e91af18b9b39f6bac3a29

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
8/23/2025 12:27:06 PM UTC  (today)

File size:
4.4 MB (4,611,440 bytes)

File type:
Executable application (Win16 EXE)

Common path:
C:\users\{user}\downloads\gounzipsetup.gounzip_dm.enknlcpanodakgmfgjhndmgjcailkaak.ch.exe

File PE Metadata
OS bitness:
Win16

CTPH (ssdeep):
98304:EhIm0gDHMxJad6uxcQ8ohr4x8x1UGomgkUinzEdj/4aaqnKniUlBsX+:gImhCE6uGQ8ohmgev1ktnw4kUUu

Entropy:
7.8961  (probably packed)

The file gounzipsetup.gounzip_dm.enknlcpanodakgmfgjhndmgjcailkaak.ch.exe has been seen being distributed by the following URL.

http://ak.dl.gounzip.com/images/nocache/vicinio/executable-packages/GoUnzip/1458069221476/.../GoUnzipSetup.GoUnzip_dm.enknlcpanodakgmfgjhndmgjcailkaak.ch.exe

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.