macOS Analysis Report
https://github.com/testadminia/Card-Memory.git

ID:	1649543
Product:	CloudBasic
Start time:	21:59:50
Start date:	26.03.2025
Cookbook:	urldownload.jbs
System description:	Virtual Machine, Mojave (Office 16 16.27, Java 11.0.2+9, Adobe Reader 2019.010.20099)
Architecture:	MAC

Name	Type	MD5	SHA1	SHA256
/Users/bernard/Desktop/download/Card-Memory.git	HTML document, ASCII text, with very long lines (1616)	ECE94C70066DAB431AB6A14ECD5B5039	97E648F7C217FC7E10C86F1F2D5AA122CB51DD87	B0403F3106A19B9CA963AE8B3251916077C2FAD3719043C6AEA02F6C2075BA81

Compliance

Source: unknown	HTTPS traffic detected: 151.101.195.6:443 -> 192.168.11.12:49352 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 140.82.114.3:443 -> 192.168.11.12:49353 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.3.6:443 -> 192.168.11.12:49382 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.3.6:443 -> 192.168.11.12:49383 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.131.6:443 -> 192.168.11.12:49387 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.195.6:443 -> 192.168.11.12:49388 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.195.6:443 -> 192.168.11.12:49389 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.195.6:443 -> 192.168.11.12:49390 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.195.6:443 -> 192.168.11.12:49391 version: TLS 1.2

Networking

Source: unknown	TCP traffic detected without corresponding DNS query: 17.248.201.72
Source: unknown	TCP traffic detected without corresponding DNS query: 17.248.201.72
Source: unknown	TCP traffic detected without corresponding DNS query: 17.248.201.72
Source: unknown	TCP traffic detected without corresponding DNS query: 17.248.201.72
Source: unknown	TCP traffic detected without corresponding DNS query: 23.197.169.54
Source: unknown	TCP traffic detected without corresponding DNS query: 23.197.169.54
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	DNS traffic detected: DNS query: github.com
Source: global traffic	DNS traffic detected: DNS query: h3.apis.apple.map.fastly.net

Source: /usr/bin/curl (PID: 614)

Reads from socket in process: data

Jump to behavior

Source: Card-Memory.git.246.dr	String found in binary or memory: http://schema.org/SoftwareSourceCode
Source: Card-Memory.git.246.dr	String found in binary or memory: https://api.github.com/_private/browser/errors
Source: Card-Memory.git.246.dr	String found in binary or memory: https://api.github.com/_private/browser/stats
Source: Card-Memory.git.246.dr	String found in binary or memory: https://avatars.githubusercontent.com
Source: Card-Memory.git.246.dr	String found in binary or memory: https://collector.github.com/github/collect
Source: Card-Memory.git.246.dr	String found in binary or memory: https://docs.github.com
Source: Card-Memory.git.246.dr	String found in binary or memory: https://docs.github.com/
Source: Card-Memory.git.246.dr	String found in binary or memory: https://docs.github.com/get-started/accessibility/keyboard-shortcuts
Source: Card-Memory.git.246.dr	String found in binary or memory: https://docs.github.com/search-github/github-code-search/understanding-github-code-search-syntax
Source: Card-Memory.git.246.dr	String found in binary or memory: https://docs.github.com/site-policy/github-terms/github-terms-of-service
Source: Card-Memory.git.246.dr	String found in binary or memory: https://docs.github.com/site-policy/privacy-policies/github-privacy-statement
Source: Card-Memory.git.246.dr	String found in binary or memory: https://github-cloud.s3.amazonaws.com
Source: Card-Memory.git.246.dr	String found in binary or memory: https://github.blog
Source: Card-Memory.git.246.dr	String found in binary or memory: https://github.com
Source: Card-Memory.git.246.dr	String found in binary or memory: https://github.com/collections
Source: Card-Memory.git.246.dr	String found in binary or memory: https://github.com/customer-stories
Source: Card-Memory.git.246.dr	String found in binary or memory: https://github.com/enterprise
Source: Card-Memory.git.246.dr	String found in binary or memory: https://github.com/enterprise/advanced-security
Source: Card-Memory.git.246.dr	String found in binary or memory: https://github.com/enterprise/startups
Source: Card-Memory.git.246.dr	String found in binary or memory: https://github.com/features
Source: Card-Memory.git.246.dr	String found in binary or memory: https://github.com/features/actions
Source: Card-Memory.git.246.dr	String found in binary or memory: https://github.com/features/code-review
Source: Card-Memory.git.246.dr	String found in binary or memory: https://github.com/features/code-search
Source: Card-Memory.git.246.dr	String found in binary or memory: https://github.com/features/codespaces
Source: Card-Memory.git.246.dr	String found in binary or memory: https://github.com/features/copilot
Source: Card-Memory.git.246.dr	String found in binary or memory: https://github.com/features/discussions
Source: Card-Memory.git.246.dr	String found in binary or memory: https://github.com/features/issues
Source: Card-Memory.git.246.dr	String found in binary or memory: https://github.com/features/security
Source: Card-Memory.git.246.dr	String found in binary or memory: https://github.com/fluidicon.png
Source: Card-Memory.git.246.dr	String found in binary or memory: https://github.com/pricing
Source: Card-Memory.git.246.dr	String found in binary or memory: https://github.com/readme
Source: Card-Memory.git.246.dr	String found in binary or memory: https://github.com/resources/whitepapers
Source: Card-Memory.git.246.dr	String found in binary or memory: https://github.com/security
Source: Card-Memory.git.246.dr	String found in binary or memory: https://github.com/solutions/executive-insights
Source: Card-Memory.git.246.dr	String found in binary or memory: https://github.com/team
Source: Card-Memory.git.246.dr	String found in binary or memory: https://github.com/testadminia/Card-Memory
Source: Card-Memory.git.246.dr	String found in binary or memory: https://github.com/testadminia/Card-Memory"
Source: Card-Memory.git.246.dr	String found in binary or memory: https://github.com/testadminia/Card-Memory.git
Source: Card-Memory.git.246.dr	String found in binary or memory: https://github.com/topics
Source: Card-Memory.git.246.dr	String found in binary or memory: https://github.com/trending
Source: Card-Memory.git.246.dr	String found in binary or memory: https://github.githubassets.com
Source: Card-Memory.git.246.dr	String found in binary or memory: https://github.githubassets.com/
Source: Card-Memory.git.246.dr	String found in binary or memory: https://github.githubassets.com/assets/app_assets_modules_github_behaviors_ajax-error_ts-app_assets_
Source: Card-Memory.git.246.dr	String found in binary or memory: https://github.githubassets.com/assets/app_assets_modules_github_behaviors_commenting_edit_ts-app_as
Source: Card-Memory.git.246.dr	String found in binary or memory: https://github.githubassets.com/assets/app_assets_modules_github_behaviors_task-list_ts-app_assets_m
Source: Card-Memory.git.246.dr	String found in binary or memory: https://github.githubassets.com/assets/app_assets_modules_github_ref-selector_ts-3e9d848bab5f.js
Source: Card-Memory.git.246.dr	String found in binary or memory: https://github.githubassets.com/assets/app_assets_modules_github_sticky-scroll-into-view_ts-3e000c5d
Source: Card-Memory.git.246.dr	String found in binary or memory: https://github.githubassets.com/assets/apple-touch-icon-180x180-a80b8e11abe2.png
Source: Card-Memory.git.246.dr	String found in binary or memory: https://github.githubassets.com/assets/apple-touch-icon-92bd46d04241.png
Source: Card-Memory.git.246.dr	String found in binary or memory: https://github.githubassets.com/assets/behaviors-8c474dd4309b.js
Source: Card-Memory.git.246.dr	String found in binary or memory: https://github.githubassets.com/assets/code-0210be90f4d3.css
Source: Card-Memory.git.246.dr	String found in binary or memory: https://github.githubassets.com/assets/code-menu-1c0aedc134b1.js
Source: Card-Memory.git.246.dr	String found in binary or memory: https://github.githubassets.com/assets/codespaces-c3bcacfe317c.js
Source: Card-Memory.git.246.dr	String found in binary or memory: https://github.githubassets.com/assets/dark-8a995f0bacd4.css
Source: Card-Memory.git.246.dr	String found in binary or memory: https://github.githubassets.com/assets/dark_colorblind-cd826e8636dc.css
Source: Card-Memory.git.246.dr	String found in binary or memory: https://github.githubassets.com/assets/dark_dimmed-f37fb7684b1f.css
Source: Card-Memory.git.246.dr	String found in binary or memory: https://github.githubassets.com/assets/dark_high_contrast-9ac301c3ebe5.css
Source: Card-Memory.git.246.dr	String found in binary or memory: https://github.githubassets.com/assets/dark_tritanopia-18119e682df0.css
Source: Card-Memory.git.246.dr	String found in binary or memory: https://github.githubassets.com/assets/element-registry-8206a1f1fc89.js
Source: Card-Memory.git.246.dr	String found in binary or memory: https://github.githubassets.com/assets/environment-f04cb2a9fc8c.js
Source: Card-Memory.git.246.dr	String found in binary or memory: https://github.githubassets.com/assets/github-ea73c9cb5377.css
Source: Card-Memory.git.246.dr	String found in binary or memory: https://github.githubassets.com/assets/github-elements-394f8eb34f19.js
Source: Card-Memory.git.246.dr	String found in binary or memory: https://github.githubassets.com/assets/global-7eaba1d4847c.css
Source: Card-Memory.git.246.dr	String found in binary or memory: https://github.githubassets.com/assets/keyboard-shortcuts-dialog-33dfb803e078.js
Source: Card-Memory.git.246.dr	String found in binary or memory: https://github.githubassets.com/assets/light-74231a1f3bbb.css
Source: Card-Memory.git.246.dr	String found in binary or memory: https://github.githubassets.com/assets/light_colorblind-f91b0f603451.css
Source: Card-Memory.git.246.dr	String found in binary or memory: https://github.githubassets.com/assets/light_high_contrast-83beb16e0ecf.css
Source: Card-Memory.git.246.dr	String found in binary or memory: https://github.githubassets.com/assets/light_tritanopia-6e122dab64fc.css
Source: Card-Memory.git.246.dr	String found in binary or memory: https://github.githubassets.com/assets/notifications-global-01e85cd1be94.js
Source: Card-Memory.git.246.dr	String found in binary or memory: https://github.githubassets.com/assets/notifications-subscriptions-menu-58a0c58bfee4.js
Source: Card-Memory.git.246.dr	String found in binary or memory: https://github.githubassets.com/assets/notifications-subscriptions-menu.1bcff9205c241e99cff2.module.
Source: Card-Memory.git.246.dr	String found in binary or memory: https://github.githubassets.com/assets/octicons-react-cf2f2ab8dab4.js
Source: Card-Memory.git.246.dr	String found in binary or memory: https://github.githubassets.com/assets/pinned-octocat-093da3e6fa40.svg
Source: Card-Memory.git.246.dr	String found in binary or memory: https://github.githubassets.com/assets/primer-aaa714e5674d.css
Source: Card-Memory.git.246.dr	String found in binary or memory: https://github.githubassets.com/assets/primer-primitives-225433424a87.css
Source: Card-Memory.git.246.dr	String found in binary or memory: https://github.githubassets.com/assets/primer-react-e05a7c4c5398.js
Source: Card-Memory.git.246.dr	String found in binary or memory: https://github.githubassets.com/assets/primer-react.9df1783473f10f02fb62.module.css
Source: Card-Memory.git.246.dr	String found in binary or memory: https://github.githubassets.com/assets/react-core-cee80bd425f0.js
Source: Card-Memory.git.246.dr	String found in binary or memory: https://github.githubassets.com/assets/react-lib-f1bca44e0926.js
Source: Card-Memory.git.246.dr	String found in binary or memory: https://github.githubassets.com/assets/repos-overview-d245eae13daf.js
Source: Card-Memory.git.246.dr	String found in binary or memory: https://github.githubassets.com/assets/repos-overview.0ee7cac3ab511a65d9f9.module.css
Source: Card-Memory.git.246.dr	String found in binary or memory: https://github.githubassets.com/assets/repositories-7a0dbaa42c57.js
Source: Card-Memory.git.246.dr	String found in binary or memory: https://github.githubassets.com/assets/repository-4fce88777fa8.css
Source: Card-Memory.git.246.dr	String found in binary or memory: https://github.githubassets.com/assets/sessions-730dca81d0a2.js
Source: Card-Memory.git.246.dr	String found in binary or memory: https://github.githubassets.com/assets/ui_packages_aria-live_aria-live_ts-ui_packages_promise-with-r
Source: Card-Memory.git.246.dr	String found in binary or memory: https://github.githubassets.com/assets/ui_packages_code-view-shared_hooks_use-canonical-object_ts-ui
Source: Card-Memory.git.246.dr	String found in binary or memory: https://github.githubassets.com/assets/ui_packages_commit-attribution_index_ts-ui_packages_commit-ch
Source: Card-Memory.git.246.dr	String found in binary or memory: https://github.githubassets.com/assets/ui_packages_failbot_failbot_ts-75968cfb5298.js
Source: Card-Memory.git.246.dr	String found in binary or memory: https://github.githubassets.com/assets/ui_packages_paths_index_ts-e019c54eb886.js
Source: Card-Memory.git.246.dr	String found in binary or memory: https://github.githubassets.com/assets/ui_packages_ref-selector_RefSelector_tsx-7496afc3784d.js
Source: Card-Memory.git.246.dr	String found in binary or memory: https://github.githubassets.com/assets/ui_packages_ui-commands_ui-commands_ts-2ea4e93613c0.js
Source: Card-Memory.git.246.dr	String found in binary or memory: https://github.githubassets.com/assets/ui_packages_updatable-content_updatable-content_ts-2a55124d5c
Source: Card-Memory.git.246.dr	String found in binary or memory: https://github.githubassets.com/assets/vendors-node_modules_braintree_browser-detection_dist_browser
Source: Card-Memory.git.246.dr	String found in binary or memory: https://github.githubassets.com/assets/vendors-node_modules_color-convert_index_js-e3180fe3bcb3.js
Source: Card-Memory.git.246.dr	String found in binary or memory: https://github.githubassets.com/assets/vendors-node_modules_delegated-events_dist_index_js-node_modu
Source: Card-Memory.git.246.dr	String found in binary or memory: https://github.githubassets.com/assets/vendors-node_modules_dompurify_dist_purify_es_mjs-dd1d3ea6a43
Source: Card-Memory.git.246.dr	String found in binary or memory: https://github.githubassets.com/assets/vendors-node_modules_emotion_is-prop-valid_dist_emotion-is-pr
Source: Card-Memory.git.246.dr	String found in binary or memory: https://github.githubassets.com/assets/vendors-node_modules_github_arianotify-polyfill_ariaNotify-po
Source: Card-Memory.git.246.dr	String found in binary or memory: https://github.githubassets.com/assets/vendors-node_modules_github_auto-complete-element_dist_index_
Source: Card-Memory.git.246.dr	String found in binary or memory: https://github.githubassets.com/assets/vendors-node_modules_github_file-attachment-element_dist_inde
Source: Card-Memory.git.246.dr	String found in binary or memory: https://github.githubassets.com/assets/vendors-node_modules_github_filter-input-element_dist_index_j
Source: Card-Memory.git.246.dr	String found in binary or memory: https://github.githubassets.com/assets/vendors-node_modules_github_markdown-toolbar-element_dist_ind
Source: Card-Memory.git.246.dr	String found in binary or memory: https://github.githubassets.com/assets/vendors-node_modules_github_mini-throttle_dist_decorators_js-
Source: Card-Memory.git.246.dr	String found in binary or memory: https://github.githubassets.com/assets/vendors-node_modules_github_mini-throttle_dist_index_js-node_
Source: Card-Memory.git.246.dr	String found in binary or memory: https://github.githubassets.com/assets/vendors-node_modules_github_quote-selection_dist_index_js-nod
Source: Card-Memory.git.246.dr	String found in binary or memory: https://github.githubassets.com/assets/vendors-node_modules_github_relative-time-element_dist_index_
Source: Card-Memory.git.246.dr	String found in binary or memory: https://github.githubassets.com/assets/vendors-node_modules_github_remote-form_dist_index_js-node_mo
Source: Card-Memory.git.246.dr	String found in binary or memory: https://github.githubassets.com/assets/vendors-node_modules_github_selector-observer_dist_index_esm_
Source: Card-Memory.git.246.dr	String found in binary or memory: https://github.githubassets.com/assets/vendors-node_modules_github_text-expander-element_dist_index_
Source: Card-Memory.git.246.dr	String found in binary or memory: https://github.githubassets.com/assets/vendors-node_modules_github_turbo_dist_turbo_es2017-esm_js-a0
Source: Card-Memory.git.246.dr	String found in binary or memory: https://github.githubassets.com/assets/vendors-node_modules_lit-html_lit-html_js-be8cb88f481b.js
Source: Card-Memory.git.246.dr	String found in binary or memory: https://github.githubassets.com/assets/vendors-node_modules_oddbird_popover-polyfill_dist_popover-fn
Source: Card-Memory.git.246.dr	String found in binary or memory: https://github.githubassets.com/assets/vendors-node_modules_oddbird_popover-polyfill_dist_popover_js
Source: Card-Memory.git.246.dr	String found in binary or memory: https://github.githubassets.com/assets/vendors-node_modules_primer_behaviors_dist_esm_index_mjs-0dbb
Source: Card-Memory.git.246.dr	String found in binary or memory: https://github.githubassets.com/assets/vendors-node_modules_tanstack_query-core_build_modern_queryOb
Source: Card-Memory.git.246.dr	String found in binary or memory: https://github.githubassets.com/assets/vendors-node_modules_virtualized-list_es_index_js-node_module
Source: Card-Memory.git.246.dr	String found in binary or memory: https://github.githubassets.com/assets/wp-runtime-1a284773e964.js
Source: Card-Memory.git.246.dr	String found in binary or memory: https://github.githubassets.com/favicons/favicon
Source: Card-Memory.git.246.dr	String found in binary or memory: https://github.githubassets.com/favicons/favicon.png
Source: Card-Memory.git.246.dr	String found in binary or memory: https://github.githubassets.com/favicons/favicon.svg
Source: Card-Memory.git.246.dr	String found in binary or memory: https://opengraph.githubassets.com/6b336e8c243795ca1500da2d59da960c7fdc16acb8db9cdced84ba32b38539cd/
Source: Card-Memory.git.246.dr	String found in binary or memory: https://partner.github.com
Source: Card-Memory.git.246.dr	String found in binary or memory: https://resources.github.com
Source: Card-Memory.git.246.dr	String found in binary or memory: https://resources.github.com/learn/pathways
Source: Card-Memory.git.246.dr	String found in binary or memory: https://schema.org/abstract
Source: Card-Memory.git.246.dr	String found in binary or memory: https://skills.github.com
Source: Card-Memory.git.246.dr	String found in binary or memory: https://support.github.com?tags=dotcom-footer
Source: Card-Memory.git.246.dr	String found in binary or memory: https://user-images.githubusercontent.com/
Source: Card-Memory.git.246.dr	String found in binary or memory: https://www.githubstatus.com/

Source: unknown	Network traffic detected: HTTP traffic on port 49351 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49352 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49346
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49389
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49388
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49387
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49353
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49352
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49351
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49383
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49382
Source: unknown	Network traffic detected: HTTP traffic on port 49391 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49391
Source: unknown	Network traffic detected: HTTP traffic on port 49353 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49390
Source: unknown	Network traffic detected: HTTP traffic on port 49390 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49387 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49388 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49389 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49346 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49383 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49382 -> 443

Source: /usr/bin/curl (PID: 614)

Writes from socket in process: data

Jump to behavior

Source: unknown	HTTPS traffic detected: 151.101.195.6:443 -> 192.168.11.12:49352 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 140.82.114.3:443 -> 192.168.11.12:49353 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.3.6:443 -> 192.168.11.12:49382 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.3.6:443 -> 192.168.11.12:49383 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.131.6:443 -> 192.168.11.12:49387 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.195.6:443 -> 192.168.11.12:49388 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.195.6:443 -> 192.168.11.12:49389 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.195.6:443 -> 192.168.11.12:49390 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.195.6:443 -> 192.168.11.12:49391 version: TLS 1.2

Spam, unwanted Advertisements and Ransom Demands

Source: /usr/bin/curl (PID: 614)

HTML file containing JavaScript created: /Users/bernard/Desktop/download/Card-Memory.git

Jump to dropped file

Source: /usr/bin/curl (PID: 614)

HTML file created with suspicious ad-related keywords: /Users/bernard/Desktop/download/Card-Memory.git (keywords found: search, track)

Jump to dropped file

System Summary

Source: classification engine

Classification label: clean1.mac@0/1@2/0

Persistence and Installation Behavior

Source: /usr/libexec/firmwarecheckers/eficheck/eficheck (PID: 639)

Random device file read: /dev/random

Jump to behavior