Malware INFOLocal-first Windows incident analysis

Product News

Malware INFO Free 1.2.1 Is Now Available

Malware INFO Free 1.2.1 is now available as the official Windows x64 MSI, with an exact SHA-256 checksum and clear unsigned-installer guidance.

By Malware INFO Team4 min read
Malware INFO Free 1.2.1 Is Now Available

Malware INFO Free 1.2.1 is available now

Malware INFO Free 1.2.1 was publicly released on August 22, 2026. The official Free installer is available for Windows x64 from the Malware INFO download channel.

Download Malware INFO only from the official channel and verify the exact SHA-256 before installation. The published MSI is not digitally signed, so Windows may show an Unknown Publisher or Smart App Control warning. Do not weaken organizational security policy merely to run an unverified file.

Built for practical Windows investigation

Malware INFO helps users move from an initial question - such as whether a file, hash, URL, domain, or IP address deserves closer review - to organized evidence that can be understood, preserved, and handed to another analyst.

The Free edition is a focused starting point for students, independent researchers, IT teams, incident responders, and security-conscious Windows users. It brings core investigation tools together without presenting one scan result, reputation lookup, or rule match as the whole story.

What is included in the Free edition

The current Free edition provides these core routes:

  • Threat Lookup for supported hashes, files, URLs, domains, and IP addresses.
  • Rapid Scan for known-bad hash evidence within recorded coverage.
  • Deep Signature Scan for supported HEX-signature and YARA-rule matching.
  • Quarantine Vault for reviewing and managing supported quarantined items.
  • Reports & Evidence for organizing and preserving investigation results.
  • Detection Library for supported local detection content.
  • Threat Briefing for bounded public advisory context.
  • Vulnerability Alerts for bounded public vulnerability notices.
  • Help Center for feature, workflow, evidence, and operational guidance.
  • Tray & Notifications for returning to the application and reviewing status.

Professional and Enterprise features are not unlocked by the Free edition. Static previews may describe paid or future workflows, but a preview does not produce evidence, activate a license, or grant response authority. Consult the Edition Comparison for the current access boundaries.

Evidence and safety remain separate from release status

A released product version does not convert every feature into unrestricted or generally available functionality. API Hook Trace retains its documented Enterprise Developer Preview and AlertOnly boundaries. Offline Windows Memory Forensics remains a validation-gated future area and is not made generally available merely by installing Version 1.2.1.

A hash, HEX, or YARA match means that the named indicator or rule matched within the recorded scan coverage. It does not automatically prove execution, attacker intent, complete system safety, or authority for automatic containment. Human analyst judgment and the recorded evidence limitations remain required.

Local-first by design

Core analysis is designed to remain on the Windows computer unless the user deliberately chooses a documented lookup, upload, connector, or export action. Malware INFO complements antivirus, Endpoint Security, EDR, XDR, SIEM, and sandbox platforms; it does not replace them.

Unknown files should not be executed on an everyday computer. Use an isolated, disposable, organization-approved lab when live execution is authorized and necessary. Review the safe-use guide before investigating an unknown sample.

Verify before installation

After downloading the MSI, compute its SHA-256 locally and compare all 64 hexadecimal characters with the published value. If the filename, source, size, or SHA-256 does not match, stop and obtain a new copy from the official channel.

The checksum proves byte identity with the published file; it does not replace a trusted publisher signature. Because this release is unsigned, keep Windows security controls and organizational approval requirements in place.

Thank you for being part of the journey

Malware INFO has grown through a continuing effort to make Windows malware research and incident investigation more structured, understandable, and evidence-focused. Thank you to everyone who followed the project, shared feedback, tested workflows, and helped shape the Version 1.2.1 release.