Download Nmap.exe

[Marie Ota]

WhileNmap was once a Unix-only tool, a Windows version wasreleased in 2000 and has since become the second most popular Nmapplatform (behind Linux). Because of this popularity and the fact thatmany Windows users do not have a compiler, binary executables aredistributed for each major Nmap release. We support Nmap on Windows 7and newer, as well as Windows Server 2008 and newer. We also maintaina guide for userswho must run Nmap on earlier Windows releases. While it has improved dramatically, the Windows port is notquite as efficient as on Unix. Here are the known limitations:

Nmap only supports ethernet interfaces (including most802.11 wireless cards and many VPN clients) for raw packet scans.Unless you use the -sT -Pn options, RAS connections(such as PPP dialups) and certain VPN clients are not supported. Thissupport was dropped when Microsoft removed raw TCP/IP socket supportin Windows XP SP2. Now Nmap must send lower-level ethernet framesinstead.

When using Nmap without Npcap, you cannotgenerally scan your own machine from itself (using aloopback IP such as 127.0.0.1 or any of itsregistered IP addresses). This is a Windows limitation that wehave worked around in Npcap, which is included in the Windows self-installer.Users stuck without a Npcap installation can use a TCPconnect scan without pinging (-sT -Pn) as that usesthe high level socket API rather than sending rawpackets.

Scan speeds on Windows are generally comparable to those onUnix, though the latter often has a slight performance edge. Oneexception to this is connect scan (-sT), which isoften much slower on Windows because of deficiencies in the Windowsnetworking API. This is a shame, since that is the one TCP scan thatworks over all networking types (not just ethernet, like the raw packet scans).Connect scan performance can beimproved substantially by applying the Registry changes in thenmap_performance.reg file included with Nmap. By default these changes are applied for you by the Nmap executable installer. This registry fileis in the nmap-directory of the Windows binary zip file, andnmap-/mswin32in the source tarball (where is theversion number of the specific release). These changes increasethe number of ephemeral ports reserved for user applications (such asNmap) and reduce the time delay before a closed connection canbe reused. Most people simply check the box to apply these changes in the executable Nmap installer, but you can also apply them by double-clicking onnmap_performance.reg, or by running the commandregedt32 nmap_performance.reg. To make the changes by hand, add these three Registry DWORD values toHKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters:

I would like to thank Ryan Permeh of eEye, Andy Lutomirski, and Jens Vogt for their hard work on the Nmap Windows port. For many years, Nmap was a Unix-only tool, and it would likely still be that way if not for their efforts.

Every stable Nmap release comes with Windowscommand-line binaries and associated files in a Zip archive. Nographical interface is included, so you need to runnmap.exe from a DOS/command window. Or you candownload and install a superior command shell such as those includedwith the freeCygwinsystem available from Here are the step-by-step instructions for installing and executing the Nmap .zip binaries.

Nmap requires the free Npcap packet capture library.We include a recent Npcap installer which is available in the zip fileas npcap-.exe,where is the Npcap version ratherthan the Nmap version. Alternatively, you can obtain and installthe latest version from

Due to the way Nmap is compiled, it requires theMicrosoft Visual C++ Redistributable Package of runtimecomponents. Many systems already have this installed from otherpackages, but you should run VC_redist.x86.exefrom the zip file just in case you need it.Pass the /q option to run these installers in quiet (non interactive) mode.

Most Windows users prefer to use the Nmap binary self-installer,but compilation from source code is an option, particularly if you plan to help with Nmap development. Compilation requiresMicrosoft Visual C++ 2019, which is part of their commercial Visual Studiosuite. Any of the Visual Studio 2019 editions should work, including the freeVisual Studio 2019 Community.

Some of Nmap's dependencies on Windows are inconvenient to build. Forthis reason, precompiled binaries of the dependencies are stored inSubversion, in the directory /nmap-mswin32-aux.When building from source, whether from a source code release or fromSubversion, check out /nmap-mswin32-aux asdescribed below.

Download the Windows dependencies from Subversion with the commandsvn checkout -mswin32-aux.The build files are configured to look for dependencies in thischecked-out directory. If you want to build the dependencies yourselfinstead, you will have to reconfigure the Visual Studio project files topoint to the alternate directory.

Download the latest Nmap source distribution from It has the namenmap-.tar.bz2 ornmap-.tgz. Those are the same tar file compressed using bzip2 or gzip, respectively. The bzip2-compressed version is smaller.

Uncompress the source code file you just downloaded. Thesource code directory and the nmap-mswin32-aux mustbe in the same parent directory.Recent releases of the free Cygwin distribution can handle both the .tar.bz2 and .tgz formats. Use the command tar xvjf nmap-version.tar.bz2 or tar xvzf nmap-version.tgz, respectively. Alternatively, the common WinZip application can decompress these files.

Many people have asked whether Nmap can be compiled with thegcc/g++ includedwith Cygwin or other compilers. Some users have reported success withthis, but we don't maintain instructions for building Nmap underCygwin.

Nmap releases now include theZenmap graphical user interface for Nmap.If you used the Nmap installer and left the Zenmap field checked,there should be a new Zenmap entry on your desktop and Start Menu.Click this to get started. Zenmap is fully documented inChapter 12, Zenmap GUI Users' Guide. While many users love Zenmap, others preferthe traditional command-line approach to executing Nmap. Here aredetailed instructions for users who are unfamiliar with command-lineinterfaces:

Change to the directory you installed Nmap into. You can skip this step if Nmap is already in your command path (the Zenmap isntaller adds it there by default). Otherwise, type the following commands.

The genuine nmap.exe file is a software component of Nmap by Gordon Lyon.

Nmap is a security scanner that is designed to discover hosts and services on a computer network resulting in a "map" across the network. Nmap.exe runs the Nmap (Network Mapper) security scanner software. This is a genuine software that is used for administrative purposes. It should not be removed unless known to cause problems.

Originally written by Gordon Lyon, Nmap provides several features to probe computer networks, detecting information including operating system, and host services. This free and open source utility was once exclusively written for Linux, but has since been ported to Windows, Solaris, HP-UX, BSD variants (including macOS), AmigaOS, and IRIX.

Gordon Lyon is the author of the Nmap security scanner, and runs several other internet security resource sites including Insecure.Org, SecLists.Org, and SecTools.Org. He created Nmap as a free community-oriented project in the hopes of helping people, but today it has become his full-time occupation.

The .exe extension on a filename indicates an executable file. Executable files may, in some cases, harm your computer. Therefore, please read below to decide for yourself whether the nmap.exe on your computer is a Trojan that you should remove, or whether it is a file belonging to the Windows operating system or to a trusted application.

Important: Some malware camouflages itself as nmap.exe, particularly when located in the C:\Windows or C:\Windows\System32 folder. Therefore, you should check the nmap.exe process on your PC to see if it is a threat. We recommend Security Task Manager for verifying your computer's security. This was one of the Top Download Picks of The Washington Post and PC World.

A clean and tidy computer is the key requirement for avoiding problems with nmap. This means running a scan for malware, cleaning your hard drive using 1cleanmgr and 2sfc /scannow, 3uninstalling programs that you no longer need, checking for Autostart programs (using 4msconfig) and enabling Windows' 5Automatic Update. Always remember to perform periodic backups, or at least to set restore points.

Should you experience an actual problem, try to recall the last thing you did, or the last thing you installed before the problem appeared for the first time. Use the 6resmon command to identify the processes that are causing your problem. Even for serious problems, rather than reinstalling Windows, you are better off repairing of your installation or, for Windows 8 and later versions, executing the 7DISM.exe /Online /Cleanup-image /Restorehealth command. This allows you to repair the operating system without losing data.

To help you analyze the nmap.exe process on your computer, the following programs have proven to be helpful: ASecurity Task Manager displays all running Windows tasks, including embedded hidden processes, such as keyboard and browser monitoring or Autostart entries. A unique security risk rating indicates the likelihood of the process being potential spyware, malware or a Trojan. BMalwarebytes Anti-Malware detects and removes sleeping spyware, adware, Trojans, keyloggers, malware and trackers from your hard drive.

Probably you will need to re-run the scan. If you continue to run into this failure, I would manually run nmap on the scanpoint to see what the problem is (you can find the full parameter list of the call to nmap.exe in your client log on the scanpoint).

I am running into this issue as well. the job keeps failing at the same point. I took a look at the job and the values in the registry do exist. The file is getting created in the c:\windows\Temp\NMAP folder and it appears to be incomplete. I compared this file to an NMAP scan I ran a couple months ago and the failing file seems to be not complete. The failure in the job is because the

3a8082e126