Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

IP addresses found in Windows release #72

Open
Nemris opened this issue Jun 23, 2023 · 2 comments
Open

IP addresses found in Windows release #72

Nemris opened this issue Jun 23, 2023 · 2 comments

Comments

@Nemris
Copy link

Nemris commented Jun 23, 2023

Apparently, some VirusTotal engines detected my program that has been compiled with MINIFY = "true". Considering the use of UPX, that's not surprising.

What struck me as odd is that the sandbox results show the addition of a number of IP addresses to the compiled binary.
I make no network calls in my code, therefore I have no idea where those came from. They aren't found in a minified release build that targets Linux.

The workflow that I use is here. Any clue what's going on?

@Douile
Copy link
Member

Douile commented Jun 24, 2023

This action is based on the official rust image so there shouldn't be additional code added. At least one of the IPs belongs to Microsoft and another is a CDN, I would presume they are network requests made by the underlying windows system the sandbox is running on. I've seen another issue similar to this elsewhere if I can find it I will link it.

EDIT:

Also running strings on the resulting windows binary none of the URLs or IPs seem to appear so I would assume they are false positives.

@Nemris
Copy link
Author

Nemris commented Jun 24, 2023

Actually, I had tried with strings myself and came back empty-handed, so there's that.

I'll leave the issue open for the time being, just in case. Feel free to close it if you think all is fine, though!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Development

No branches or pull requests

2 participants