Encryption

PHP Version

7.4.27

Cryptor

OpenSSL

Default Cipher

aes-256-cbc

mb_internal_encoding

UTF-8

IP Validation

$headers from get_ip()

Array
(
    [X-Https] => 1
    [User-Agent] => SiteLock (Module: SmartDB; Source: https://www.sitelock.com/; Version: 1.0)
    [Host] => www.mudrashram.com
    [Connection] => TE, close
    [Te] => deflate,gzip;q=0.3
)

IP Check started in

/home/mudrashr/public_html/tmp/92c4c8d0f6f443ecc390c3d53f74ed4b.php

IP Check started at

2023-12-22T18:01:04-05:00

The following IPs will be tested

Array
(
    [0] => 198.20.67.205
)

mapi_post URL

https://mapi.sitelock.com/v3/connect/

mapi_post_request

Array
(
    [pluginVersion] => 100.0.0
    [apiTargetVersion] => 3.0.0
    [token] => b65***
    [requests] => Array
        (
            [id] => fe54e25813eb8687820f18bbad720dd0-17032860648064
            [action] => validate_ip
            [params] => Array
                (
                    [site_id] => 14769440
                    [ip] => 198.20.67.205
                )

        )

)

curl_getinfo()

Array
(
    [url] => https://mapi.sitelock.com/v3/connect/
    [content_type] => text/html; charset=UTF-8
    [http_code] => 200
    [header_size] => 778
    [request_size] => 462
    [filetime] => -1
    [ssl_verify_result] => 20
    [redirect_count] => 0
    [total_time] => 0.206307
    [namelookup_time] => 0.00018
    [connect_time] => 0.01877
    [pretransfer_time] => 0.040637
    [size_upload] => 324
    [size_download] => 510
    [speed_download] => 2472
    [speed_upload] => 1570
    [download_content_length] => -1
    [upload_content_length] => 324
    [starttransfer_time] => 0.206182
    [redirect_time] => 0
    [redirect_url] => 
    [primary_ip] => 45.60.12.54
    [certinfo] => Array
        (
        )

    [primary_port] => 443
    [local_ip] => 199.204.248.117
    [local_port] => 50826
    [http_version] => 2
    [protocol] => 2
    [ssl_verifyresult] => 0
    [scheme] => HTTPS
    [appconnect_time_us] => 40572
    [connect_time_us] => 18770
    [namelookup_time_us] => 180
    [pretransfer_time_us] => 40637
    [redirect_time_us] => 0
    [starttransfer_time_us] => 206182
    [total_time_us] => 206307
)

mapi_response

{"apiVersion":"3.0.1","status":"ok","globalResponse":null,"banner":null,"forceLogout":false,"newToken":null,"now":1703286014,"responses":[{"id":"fe54e25813eb8687820f18bbad720dd0-17032860648064","data":{"ip_address":"198.20.67.205","valid":true},"raw_api_url":"https:\/\/api.sitelock.com\/v1\/b65***\/dbscan\/checkip","raw_response":{"@attributes":{"version":"1.1","encoding":"UTF-8"},"checkIP":{"status":"1"}},"raw_request":{"site_id":"14769440","ip":"198.20.67.205"},"status":"ok"}]}

BackupGrabAndZip

_POST

Array
(
)

_GET (raw)

cmd=db_creds_ready&enc_db_creds=0lJzexZTRTlEm%2FHV3QQleLsQMDkFgG3qY%2B27Jzfc5HZAgKua1QtatU2FWhIWFWUvTKTMyQVh6YhCScdGx20XswUK0EWDeHhKfKbWR7b49w1mtVBTL2EwK2FxcVyWWZXg&smart_single_download_id=4801284

Detected memory_limit

512M

Chunk Size

10485760

mapi_post URL

https://mapi.sitelock.com/v3/connect/

mapi_post_request

Array
(
    [pluginVersion] => 100.0.0
    [apiTargetVersion] => 3.0.0
    [token] => b65***
    [requests] => Array
        (
            [id] => aa7b7cea8519cd4c93f25666bfb4ebba-17032860650134
            [action] => s3_get_enc_info
            [params] => Array
                (
                    [site_id] => 14769440
                    [queue_id] => 4801284
                )

        )

)

curl_getinfo()

Array
(
    [url] => https://mapi.sitelock.com/v3/connect/
    [content_type] => text/html; charset=UTF-8
    [http_code] => 200
    [header_size] => 766
    [request_size] => 466
    [filetime] => -1
    [ssl_verify_result] => 20
    [redirect_count] => 0
    [total_time] => 0.114765
    [namelookup_time] => 0.000186
    [connect_time] => 0.012881
    [pretransfer_time] => 0.024767
    [size_upload] => 328
    [size_download] => 817
    [speed_download] => 7118
    [speed_upload] => 2858
    [download_content_length] => -1
    [upload_content_length] => 328
    [starttransfer_time] => 0.114675
    [redirect_time] => 0
    [redirect_url] => 
    [primary_ip] => 45.60.12.54
    [certinfo] => Array
        (
        )

    [primary_port] => 443
    [local_ip] => 199.204.248.117
    [local_port] => 50840
    [http_version] => 2
    [protocol] => 2
    [ssl_verifyresult] => 0
    [scheme] => HTTPS
    [appconnect_time_us] => 24707
    [connect_time_us] => 12881
    [namelookup_time_us] => 186
    [pretransfer_time_us] => 24767
    [redirect_time_us] => 0
    [starttransfer_time_us] => 114675
    [total_time_us] => 114765
)

Received encryption details

Array
(
    [cipher] => aes-256-cbc
    [key] => dRq***
    [iv] => +RA***
)

get_bullet_lock_path:

/home/mudrashr/public_html/tmp/92c4c8d0f6f443ecc390c3d53f74ed4b.php.lock

bullet_is_locked check:

not locked (no lock file)

get_bullet_lock_path:

/home/mudrashr/public_html/tmp/92c4c8d0f6f443ecc390c3d53f74ed4b.php.lock

lock_the_bullet: bytes written

Starting MySQLi constructor

$_SCHEMAS received

["mudrashr_mudrawp"]

Attempted to setlocale() with UTF-8

Success

ini_get('disable_functions')

exec,passthru,shell_exec,system

NO SHELL AVAILABLE

Will try using the PHP library

Starting execution using PHP library

Used PHP library to add mudrashr_mudrawp to ./.cbfbdc714ec7e92fe4f43f01835817ab/database_backup.sql.

archive_files

start

archive_files 5

Send to CLI0

Failed shell_exec for /usr/bin/zip.

shell_exec_not_available

Attempting to use ZipArchive.

good luck!

archived file

/home/mudrashr/public_html/tmp/.cbfbdc714ec7e92fe4f43f01835817ab/0850767001703286077.zip

Original ZIP size

28272211

Encoded chunks written

wrap_up_the_backup with status ok

Returned technical error details, if any

mapi_post URL

https://mapi.sitelock.com/v3/connect/

mapi_post_request

Array
(
    [pluginVersion] => 100.0.0
    [apiTargetVersion] => 3.0.0
    [token] => b65***
    [requests] => Array
        (
            [id] => 2e7942c81d9cc96e6597a35eac9835b4-17032860883037
            [action] => s3_queue
            [params] => Array
                (
                    [site_id] => 14769440
                    [queue_id] => 4801284
                    [client_id] => 1832
                    [feature_code] => backup_db
                    [status] => ok
                    [url] => .cbfbdc714ec7e92fe4f43f01835817ab/0850767001703286077.zip
                    [zip_file_info] => .cbfbdc714ec7e92fe4f43f01835817ab/0850767001703286077.zip-descriptor
                )

        )

)

curl_getinfo()

Array
(
    [url] => https://mapi.sitelock.com/v3/connect/
    [content_type] => text/html; charset=UTF-8
    [http_code] => 200
    [header_size] => 783
    [request_size] => 742
    [filetime] => -1
    [ssl_verify_result] => 20
    [redirect_count] => 0
    [total_time] => 1.919419
    [namelookup_time] => 0.000148
    [connect_time] => 0.010826
    [pretransfer_time] => 0.023037
    [size_upload] => 604
    [size_download] => 738
    [speed_download] => 384
    [speed_upload] => 314
    [download_content_length] => -1
    [upload_content_length] => 604
    [starttransfer_time] => 1.919341
    [redirect_time] => 0
    [redirect_url] => 
    [primary_ip] => 45.60.12.54
    [certinfo] => Array
        (
        )

    [primary_port] => 443
    [local_ip] => 199.204.248.117
    [local_port] => 51688
    [http_version] => 2
    [protocol] => 2
    [ssl_verifyresult] => 0
    [scheme] => HTTPS
    [appconnect_time_us] => 22969
    [connect_time_us] => 10826
    [namelookup_time_us] => 148
    [pretransfer_time_us] => 23037
    [redirect_time_us] => 0
    [starttransfer_time_us] => 1919341
    [total_time_us] => 1919419
)

mapi_response

{"apiVersion":"3.0.1","status":"ok","globalResponse":null,"banner":null,"forceLogout":false,"newToken":null,"now":1703286039,"responses":[{"id":"2e7942c81d9cc96e6597a35eac9835b4-17032860883037","data":{"s3_status":"ok","queue_id":""},"raw_api_url":"https:\/\/api.sitelock.com\/v1\/b65***\/backup\/queue","raw_response":{"@attributes":{"version":"1.1","encoding":"UTF-8"},"backup_db":{"message":"OK","status":"ok"}},"raw_request":"<xml>\n  <backup_db site_id=\"14769440\" queue_id=\"4801284\" url=\".cbfbdc714ec7e92fe4f43f01835817ab\/0850767001703286077.zip\" status=\"ok\" zip_file_info=\".cbfbdc714ec7e92fe4f43f01835817ab\/0850767001703286077.zip-descriptor\" backup_db_id=\"1832\"\/>\n<\/xml>","status":"ok"}]}

get_bullet_lock_path:

/home/mudrashr/public_html/tmp/92c4c8d0f6f443ecc390c3d53f74ed4b.php.lock

unlock_the_bullet: status

success

delete_unique_directory - unlink( $descriptor_file[0] );

/home/mudrashr/public_html/tmp/.bf482e32ffc81b648add6b00a3e86fa1/0047681001703199755.zip-descriptor

delete_unique_directory - file chunk

/home/mudrashr/public_html/tmp/.bf482e32ffc81b648add6b00a3e86fa1/0047681001703199755.zip.0

delete_unique_directory - file chunk

/home/mudrashr/public_html/tmp/.bf482e32ffc81b648add6b00a3e86fa1/0047681001703199755.zip.1

delete_unique_directory - file chunk

/home/mudrashr/public_html/tmp/.bf482e32ffc81b648add6b00a3e86fa1/0047681001703199755.zip.2

delete_unique_directory - rmdir( $path )

/home/mudrashr/public_html/tmp/.bf482e32ffc81b648add6b00a3e86fa1

Bullet run time, seconds.

25.96