Mal-Where Get the app

Desktop file security

Every file has a story. Look closer.

Mal-Where holds every new download in quarantine, inspects it in layers, and shows you exactly why it is safe or not, before anything has a chance to run.

Get Mal-Where for Windows See how it works →

Inspect

Nothing runs unchecked.

New downloads are pulled into an isolated vault and examined, from file hashes and signatures to what the file actually does when it is run safely.

Explain

Evidence, not just a score.

Every verdict arrives with the findings behind it: plain language for everyday users, full technical detail for analysts.

Decide

You keep the final call.

Release a file, delete it, or restore a cleaned copy. Mal-Where recommends. You decide.

How it works

A little file. A much bigger journey.

Follow one download, invoice.pdf.exe, from the moment it lands to the decision about what happens next. It moves inward through three tiers of analysis. Select a checkpoint, or run the full route.

Checkpoint 03 of 07Tier 2

At this stage

    Following: invoice.pdf.exe

    Capabilities

    Layered analysis,
    one clear verdict.

    Six tools that work together on every file, so the final answer rests on more than a single signal.

    01

    Automatic monitoring

    Watches your common folders and quarantines new files the moment they appear.

    02

    Static analysis

    Hashes, YARA rules, file structure, entropy, and embedded strings reveal what a file contains without running it.

    03

    Dynamic sandbox

    Observes processes, registry changes, file activity, and network calls from inside an isolated environment.

    04

    Hybrid ML detection

    Weighs static and behavioral features together in a trained classifier for the final assessment.

    05

    File sanitization

    Strips active content from documents and returns a clean, working copy.

    06

    Reports with context

    The verdict, risk score, flagged indicators, and supporting evidence, ready to export and share.

    For teams

    Plain answers for users. Full control for admins.

    For everyday users

    • A personal dashboard of everything held, scanned, and released
    • Severity colors that always mean the same thing
    • Scan queue and quarantine vault in one place

    For analysts and administrators

    • A dedicated admin console with four role levels
    • A timestamped, system-wide activity log
    • Hash and YARA signature management
    • Background analysis with live status updates

    Know the file.
    Make the call.

    Built by four Qatar University students to make malware detection explainable, not just automated. Point it at your folders and see what your downloads have been hiding.

    Mal-Where for WindowsDesktop client
    VersionComing soon
    SizeComing soon
    RequiresWindows 10 or later

    The installer is on its way. Check back soon.