Bob69

Uploading the World
Uploader
Donor
Compressor
Mar 2, 2019
23,752
325,247
998
I'll add to the thread that I don't seem to have the update.exe mentioned so far and I did 100% the game. I'm not sure which download I did, but the SHA256 for the "Game.exe" that I have for it is:
487BD28F3D0B43ED9827BA519D6D113C4F31059BD62B4492DA586C7BC82A9474
If you got it from here then it is that version. Maybe it got blocked for you? Or it has a timer sadly I have no idea about Java.

Go to Breeding City Welcomes You!\www\js\libs check the SHA256 of pixi.js
SHA256: 85aafadcf0855ce32d2412689491a58b59874d67703020d46372237ae0a4e967
 
  • Like
Reactions: Hitman Kazama

Silentce

Quiet Eldritch Horror
Modder
Uploader
Jan 2, 2018
4,355
27,964
788
This is not a false alarm, that's for sure. Other infected games behave in the same way - they download an infostealer, which in turn steals your data (logins and passwords). There is a whole thread about this here. Everyone who downloaded and launched the game should run a full scan, especially of the %appdata% folder. It's best not to launch the game anymore and wait until a clean version is released. Information about the virus (at the end, how to remove it). Since it steals passwords, you may need to change your passwords and enable 2FA.
my AV caught it when it created that exe file so I assume I am fine.
 

khallyl

Newbie
Oct 17, 2020
41
22
131
Yeah thats definitly the same Virus they try to put in games all the fucking time now.


Those are the same ones but different names. There is a second game, I myself tested that one and even played it, I assume it has a timer again. Lets see if I can find the malicious code.
If you got it from here then it is that version. Maybe it got blocked for you? Or it has a timer sadly I have no idea about Java.

Go to Breeding City Welcomes You!\www\js\libs check the SHA256 of pixi.js
SHA256: 85aafadcf0855ce32d2412689491a58b59874d67703020d46372237ae0a4e967
Did the Breeding city you uploaded came directly 072? If so, The guys are selling It with malware then?(If It is malware of course)
 
  • Haha
Reactions: humanity666

Bob69

Uploading the World
Uploader
Donor
Compressor
Mar 2, 2019
23,752
325,247
998
Did the Breeding city you uploaded came directly 072? If so, The guys are selling It with malware then?(If It is malware of course)
No it was leaked in a request thread and an uploader updated the thread, after our usual virus checks, that came out negative. (the other game thats also infected was the same). It looks like the script kiddy now learned about RPGM too... Still Lummastealer tho.
 

khallyl

Newbie
Oct 17, 2020
41
22
131
So, what is a good place to get the game free?
Well here or kimochi, but then It would be same, you don't know right now If the source(072) got contaminated or If someone that shared the game until It reached here was a asshole, same for kimochi.

I will ask If they can look at my direct file from 072, i need to at least warn the site If they are the source.
 
  • Hey there
Reactions: humanity666

Szakal007

Newbie
Feb 8, 2024
92
92
80
If you got it from here then it is that version. Maybe it got blocked for you? Or it has a timer sadly I have no idea about Java.

Go to Breeding City Welcomes You!\www\js\libs check the SHA256 of pixi.js
SHA256: 85aafadcf0855ce32d2412689491a58b59874d67703020d46372237ae0a4e967
The same checksum, although interesting because I didn't have this problem and I finished the game and AV didn't detect anything disturbing, nor did it create these folders for me.

SHA256: 85aafadcf0855ce32d2412689491a58b59874d67703020d46372237ae0a4e967

Zip file SHA ↓↓↓
SHA256: 10afacb6cb6bbc7ada46d70dfb91eb9555238d52b5e5f7ea73dc998486b05923
 

humanity666

Newbie
Feb 4, 2025
42
58
27
Well here or kimochi, but then It would be same, you don't know right now If the source(072) got contaminated or If someone that shared the game until It reached here was a asshole, same for kimochi.

I will ask If they can look at my direct file from 072, i need to at least warn the site If they are the source.
i'm going to be fairly certain the middle man between 072 and uploader obviously was not trusted
i wouldn't bother store because virus got on pirate forum

i assume msg bob69 or check the request thread
 
  • Like
Reactions: khallyl

random257

New Member
Jun 25, 2017
3
2
187
If you got it from here then it is that version. Maybe it got blocked for you? Or it has a timer sadly I have no idea about Java.

Go to Breeding City Welcomes You!\www\js\libs check the SHA256 of pixi.js
SHA256: 85aafadcf0855ce32d2412689491a58b59874d67703020d46372237ae0a4e967
Yup, it matches. I assume line 39292 is the malware launching point. It might be able to be removed, but I'm not going to mess with it; I don't have experience on that type of stuff. I'm not finding any leftover folders/files mentioned here in %localappdata%, so it might have run it's course and removed the tracks or gotten blocked. I honestly don't know which it is. I have malwarebytes if someone else has it and knows that it got blocked for them
 

Bob69

Uploading the World
Uploader
Donor
Compressor
Mar 2, 2019
23,752
325,247
998
Well here or kimochi, but then It would be same, you don't know right now If the source(072) got contaminated or If someone that shared the game until It reached here was a asshole, same for kimochi.

I will ask If they can look at my direct file from 072, i need to at least warn the site If they are the source.
I think the kimochi file seems fine. But am kinda lost rn to many windows and shit open :KEK:
Can i shared the direct file from 072 so that you guys take a look? If the problem is them, they probally would like to know.
Sure.
 
3.80 star(s) 33 Votes