One file. No installer-for-the-installer.
MalnoxSetup.exe
1.1.31 · 177 MB · Windows x64
Free, no account. All 17 engines are in the Free plan.
SHA-256
ed963eb2e1bd4d42e08c312159a2dc191cd394834f8c05258c8a67d7adc941ccWhat is inside the package
- Bundled Node.js 22 runtime — does not rely on the machine's Node
- All 16 file engines plus the memory scanner, including YARA-X and the MalNOX signature engine
- 67 YARA rules in 10 editable files
- Native MalnoxDesktop.exe shell (WinForms + WebView2) with tray
- Service host compiled locally with csc.exe, registered through the SCM API
- 177 MB installer, a single file, with an SHA-256 trailer at the end
System requirements
- Operating system
- Windows 10 (1809+) / Windows 11 / Windows Server 2019+
- Memory
- 4 GB RAM
- Disk space
- 400 MB free space
- Runtime
- Node.js 22.5+ (bundled in the standalone package)
- Console port
- 127.0.0.1:4711 (or 4712–4730)
- Privileges
- Administrator for installation
Four steps, no surprises
The installer validates package integrity before touching the system. If something does not match, it stops and tells you why.
- 01
Run the installer
Double-click MalnoxSetup.exe. Nothing to unzip and no additional components are downloaded.
- 02
Choose folder and port
Defaults are C:\Program Files\Malnox and 4711. If the port is taken, the first free one in the range is offered.
- 03
Wait for the health check
The installer waits up to 120 s for /api/health and confirms the response comes from the Malnox service, not another program.
- 04
Open the app
Malnox appears in the Start Menu and on the Desktop. The tray shows protection status and starts a quick scan in one click.
Silent install (GPO / Intune)
The same parameters work from PowerShell and from group policy. --silent output prints the log path, so you do not depend on the progress window.
MalnoxSetup.exe --silent
MalnoxSetup.exe --silent --dir D:\Apps\Malnox --port 4711
MalnoxSetup.exe --silent --dry-run --dir %TEMP%\test
MalnoxSetup.exe --silent --uninstall--silentNo graphical UI--dir <cale>Custom install folder--port <port>Console port (4711–4730)--dry-runValidate the package, do not touch the SCM--keep-payloadKeep the extracted archive--uninstallUninstall, keep the data
If the installation fails
Every installation writes a log to disk, whether or not the window closes. A single file is enough for support.
- 1first choice
%ProgramData%\Malnox\logs\setup.log - 2if ProgramData is not reachable
%TEMP%\MalnoxSetup.log
What people ask at install time
If the answer is not here, write to us. Repeated questions end up in the documentation.
No. The package ships its own runtime: Node.js 22 and its modules are inside the installer. On Windows 10 with Edge and on Windows 11 the WebView2 runtime is already present; the managed SDK ships in the package, so nothing is downloaded during setup.
It validates the 56-byte trailer before anything else (an interrupted download is rejected, not half-installed), extracts the archive to %TEMP%, compares SHA-256, copies the files to %ProgramFiles%\Malnox with ACL protection, registers the Malnox service through the SCM API and starts it as LocalSystem, then waits up to 120 s for /api/health.
The graphical installer automatically offers the first free port in the 4711–4730 range. If you explicitly request an occupied port with --port, it aborts before touching the existing service and tells you the name and PID of the process holding the port.
From Apps & features, or with MalnoxSetup.exe --silent --uninstall. The service, shortcuts, auto-start entry and program files are removed. %ProgramData%\Malnox stays: quarantine and the audit log are evidence, not cache.
Yes. The service runs as LocalSystem and does not depend on an interactive session; the local console stays available on http://127.0.0.1:4711 for diagnostics. The native window (WebView2) is just a face of the same application.
No. The installer adds the install folder and the data folder to Windows Defender exclusions, because two products scanning the same signature tree slow each other down. Defender stays active for the rest of the system.
Try it on a file you already have.
The installer is 177 MB and asks for no account. Not convinced? Check a link above — the web engine is already running on this page.