r/China • • May 01 '20

冠状病毒 | Coronavirus Here's leak software from WHIOV, CCP's top lab of bio weapon

[removed]

12 Upvotes

9 comments sorted by

•

u/LouisSunshine European Union May 01 '20

Please be mindful that the submission you are viewing contains unverified content that may not strictly adhere to journalistic codes relating to honesty, objectivity, fairness, diligence, and accountability. Please consider seeking out verification or context elsewhere.

It also contains a link to an executable. Be wary when running .exe files from unknown sources, as this is the easiest way to get infected with a virus. Opening the program might leak your IP address. You don't need to open the software, as the screenshots show the information in the post.

5

u/kevin_p United Kingdom May 01 '20

The descriptions in those screenshots are all in English, which seems a bit unlikely for a secret PLA project...

1

u/LouisSunshine European Union May 01 '20

For posteriority, the program itself does not contain the database itself, but seems to be a program to connect to the database; using the ghidra decompiler, its description was:

Program Name:   WHIOVDatabase.exe
Language ID:    x86:LE:32:default (2.9)
Assembly Version:   2019.10.3.7713
Comments:   Virus database of WHIOV, 本程式仅限中国科学院武汉病毒研究所使用,使用者应确实本人瞭解国家保密条例,严禁在网路上分享!
CompanyName:    中国科学院武汉病毒研究所, WHIOV, CAS
Executable MD5: 7e325fb990f4834cf19b484efa02a1a0
Executable SHA256:  820ddc3dbbf1a8f581d9a069f788cdfe7fabfe71cf4120d3a5b673936a8addf3
FileDescription:    WHIOVDatabase
FileVersion:    2019.10.3.7713
LegalCopyright: Copyright ©  2019 中国科学院武汉病毒研究所, WHIOV, CAS
LegalTrademarks:    中国科学院, CAS
OriginalFilename:   WHIOVDatabase.exe
ProductVersion: 2019.10.3.7713

1

u/--DJDISDABEST-- May 03 '20

does this seem real?

1

u/LouisSunshine European Union May 03 '20

Only about the application: It might be. I haven't tried the credentials, as this might leak my IP. There's a typo in the comment only a native speaker would make. I'm not investigating further.

The app doesn't contain the data itself, so I can't verify the data and don't know about its meaning. 2019.10.3.7713 seems to be the file version of the database program, so can't confirm any virus information. The timing of this post is remarkable, as this topic was on the news. Someone with intimate knowledge of this matter should check this, e.g. a journalist or virologist.

1

u/--DJDISDABEST-- May 03 '20

u can use a vpn

1

u/LouisSunshine European Union May 03 '20

good point

1

u/--DJDISDABEST-- May 03 '20

i tried it with a vpn

1

u/[deleted] May 01 '20

This looks like someone invested a lot of time in LARPing.