# gunzip
> Decompress gzip-compressed data (often used in multi-stage payload extraction)

**Category:** [[categories/utilities|utilities]] | **Tier:** Rich (FOR610)

## Usage
```bash
gunzip -c compressed.gz > output.bin
```

## Recipes
- [[recipes/multi-stage-base64-gzip|Decode Base64 + Gzip Payload]]
- [[recipes/office-full-decode-chain|Full Office Macro Decode Chain]]

## Workflows
- [[workflows/document-analysis-workflow|Malicious Document Analysis]] — Step 5: Payload Decoding

## Related Tools
- [[tools/hexdump|hexdump]] — Display file content in hexadecimal format
- [[tools/jq|jq]] — Command-line JSON processor for extracting and transforming 
- [[tools/wget|wget]] — Download files from HTTP/HTTPS/FTP servers
- [[tools/xxd|xxd]] — Create hex dump of a file or reverse a hex dump back to bina

## FOR610
**Labs:** 3.4
**Sections:** 3

#compression #extraction