{"action":"created","issue":{"url":"https://api.github.com/repos/ocornut/imgui/issues/1246","repository_url":"https://api.github.com/repos/ocornut/imgui","labels_url":"https://api.github.com/repos/ocornut/imgui/issues/1246/labels{/name}","comments_url":"https://api.github.com/repos/ocornut/imgui/issues/1246/comments","events_url":"https://api.github.com/repos/ocornut/imgui/issues/1246/events","html_url":"https://github.com/ocornut/imgui/issues/1246","id":244896042,"number":1246,"title":"Threat detected in imgui-demo-binaries-20161113.zip","user":{"login":"liorda","id":1058684,"avatar_url":"https://avatars2.githubusercontent.com/u/1058684?v=4","gravatar_id":"","url":"https://api.github.com/users/liorda","html_url":"https://github.com/liorda","followers_url":"https://api.github.com/users/liorda/followers","following_url":"https://api.github.com/users/liorda/following{/other_user}","gists_url":"https://api.github.com/users/liorda/gists{/gist_id}","starred_url":"https://api.github.com/users/liorda/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/liorda/subscriptions","organizations_url":"https://api.github.com/users/liorda/orgs","repos_url":"https://api.github.com/users/liorda/repos","events_url":"https://api.github.com/users/liorda/events{/privacy}","received_events_url":"https://api.github.com/users/liorda/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":0,"created_at":"2017-07-23T08:10:55Z","updated_at":"2017-07-23T08:26:21Z","closed_at":null,"body":"Hi,\r\n\r\nWe're using Cisco AMP, and it detected a potential threat from http://www.miracleworld.net/imgui/binaries/imgui-demo-binaries-20161113.zip (the link in the main readme.md right now)\r\n\r\nThe threat name is \"w32.dfb4799b30-100.sbx.vioc\". The page at https://www.talosintelligence.com/amp-naming gives no useful information.\r\n\r\nI downloaded this zip in the past, and it didn't detect any threats then. Was that file changed? I think it's better to host a clean version of it in github so we'll be able to know when it changes.\r\n\r\nThanks.\r\n"},"comment":{"url":"https://api.github.com/repos/ocornut/imgui/issues/comments/317237418","html_url":"https://github.com/ocornut/imgui/issues/1246#issuecomment-317237418","issue_url":"https://api.github.com/repos/ocornut/imgui/issues/1246","id":317237418,"user":{"login":"ocornut","id":8225057,"avatar_url":"https://avatars2.githubusercontent.com/u/8225057?v=4","gravatar_id":"","url":"https://api.github.com/users/ocornut","html_url":"https://github.com/ocornut","followers_url":"https://api.github.com/users/ocornut/followers","following_url":"https://api.github.com/users/ocornut/following{/other_user}","gists_url":"https://api.github.com/users/ocornut/gists{/gist_id}","starred_url":"https://api.github.com/users/ocornut/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/ocornut/subscriptions","organizations_url":"https://api.github.com/users/ocornut/orgs","repos_url":"https://api.github.com/users/ocornut/repos","events_url":"https://api.github.com/users/ocornut/events{/privacy}","received_events_url":"https://api.github.com/users/ocornut/received_events","type":"User","site_admin":false},"created_at":"2017-07-23T08:26:21Z","updated_at":"2017-07-23T08:26:21Z","body":"The files haven't changed since uploaded. I just downloaded and compared with my local copy.\r\nThe .exe were compressed with UPX to save on ZIP file (I was using an old 2010 version back then). Lazy anti-viruses software are likely get confused by UPX executables.\r\n\r\nWe can't include executable on the git repository because they are too big and would be included with everyone's checkout. The binaries are merely for quick reference but it is expected that people can compile the example applications.\r\n\r\nThis package doesn't use UPX:\r\n[imgui-demo-binaries-20170723-noncompressed.zip](https://github.com/ocornut/imgui/files/1167951/imgui-demo-binaries-20170723-noncompressed.zip)\r\n\r\nThis package uses exe compressed by a 2013 version of UPX:\r\n[imgui-demo-binaries-20170723-upx2013.zip](https://github.com/ocornut/imgui/files/1167953/imgui-demo-binaries-20170723-upx2013.zip)\r\n\r\nDo you get any alert there?"}}
{"actor":{"display_login":"ocornut"}}