Fake site hmcl.info installs a hidden remote control program / 假冒网站 hmcl.info 会偷偷安装远程控制程序

[modgradehq]

hmcl.info (registered 17 Sep 2026) poses as the HMCL download site. Its download buttons lead to hmcl-3.15.2.zip, which holds the real HMCL-3.15.2.exe next to a renamed Microsoft SQL Server setup and a small .dll. The .dll silently installs ScreenConnect, a remote control program, disguised as "Microsoft Visual C++ 2022 Redistributable (x64)" 14.38.33135.0, connected to 442.open-fast-ports.com:8041, with its notices turned off. Whoever runs that server can use the player's PC.

Players should only download HMCL from hmcl.huangyuhui.net or this GitHub.

---

hmcl.info（2026 年 9 月 17 日注册）冒充 HMCL 下载站。它的下载按钮提供 hmcl-3.15.2.zip，里面有真正的 HMCL-3.15.2.exe，同时还有一个改名的 Microsoft SQL Server 安装程序和一个小的 .dll 文件。这个 .dll 会在后台偷偷安装远程控制软件 ScreenConnect，伪装成 "Microsoft Visual C++ 2022 Redistributable (x64)" 14.38.33135.0，并连接到 442.open-fast-ports.com:8041，所有提示都被关闭。控制该服务器的人可以操作玩家的电脑。

请只从 hmcl.huangyuhui.net 或本 GitHub 下载 HMCL。

Julien Bermann, Modgrade (modgrade.com)

[fishdry1000]

似乎已被 cf 拿下

[modgradehq]

是的，我向 Cloudflare 举报后，他们已经封禁了这个下载链接。

[zkitefly]

https://docs.hmcl.net/verify.html

我们可以在此处验证在本地的 HMCL 二进制文件是否为官方提供

[hejiehao]

exe 是真的，怎么验证（