Suspicious process running under user memcached / domain name user

1 post Page 1 of 1
greektra
Junior Member
Posts: 1
Joined: 26 Jun 2018, 15:45


I get numerous emails like this and I do not know whether this issue is valid or what to do with it

-----------------------------------------------------
One - a domain name user
-----------------------------------------------------
Code: Select all
Time: Tue Jun 26 16:57:36 2018 +0300
PID: 26377 (Parent PID:25362)
Account: x account
Uptime: 23597 seconds

Executable:

/usr/local/cpanel/3rdparty/perl/526/bin/perl


Command Line (often faked in exploits):

spamd child


Network connections by the process (if any):

tcp: 127.0.0.1:783 -> 127.0.0.1:41456
udp: 176.31.235.124:12385 -> 8.8.4.4:53
tcp: 176.31.235.124:42918 -> 208.83.137.114:2703


Files open by the process (if any):

/dev/null
/usr/local/cpanel/logs/spamd_error_log
/usr/local/cpanel/logs/spamd_error_log
/usr/local/cpanel/3rdparty/perl/526/bin/spamd
/var/cpanel/locale/en.cdb
/home/siderman/.razor/razor-agent.log


Memory maps by the process (if any):

00400000-00402000 r-xp 00000000 09:04 17957607 /usr/local/cpanel/3rdparty/perl/526/bin/perl
00601000-00602000 r--p 00001000 09:04 17957607 /usr/local/cpanel/3rdparty/perl/526/bin/perl
00602000-00603000 rw-p 00002000 09:04 17957607 /usr/local/cpanel/3rdparty/perl/526/bin/perl
02528000-07e69000 rw-p 00000000 00:00 0 [heap]
07e69000-08e54000 rw-p 00000000 00:00 0 [heap]
7f7792a43000-7f7792cb6000 r--s 00000000 09:04 10224017 /var/cpanel/locale/en.cdb
7f7792cb6000-7f7792cb8000 r-xp 00000000 09:04 20450408 /usr/local/cpanel/3rdparty/perl/526/lib64/perl5/5.26.0/x86_64-linux-64int/auto/attributes/attributes.so
7f7792cb8000-7f7792eb7000 ---p 00002000 09:04 20450408 /usr/local/cpanel/3rdparty/perl/526/lib64/perl5/5.26.0/x86_64-linux-64int/auto/attributes/attributes.so
7f7792eb7000-7f7792eb8000 r--p 00001000 09:04 20450408 /usr/local/cpanel/3rdparty/perl/526/lib64/perl5/5.26.0/x86_64-linux-64int/auto/attributes/attributes.so
7f7792eb8000-7f7792eb9000 rw-p 00002000 09:04 20450408 /usr/local/cpanel/3rdparty/perl/526/lib64/perl5/5.26.0/x86_64-linux-64int/auto/attributes/attributes.so
7f7792eb9000-7f7792ec7000 r-xp 00000000 09:04 20451392 /usr/local/cpanel/3rdparty/perl/526/lib64/perl5/cpanel_lib/x86_64-linux-64int/auto/JSON/XS/XS.so
7f7792ec7000-7f77930c6000 ---p 0000e000 09:04 20451392 /usr/local/cpanel/3rdparty/perl/526/lib64/perl5/cpanel_lib/x86_64-linux-64int/auto/JSON/XS/XS.so
7f77930c6000-7f77930c7000 r--p 0000d000 09:04 20451392 /usr/local/cpanel/3rdparty/perl/526/lib64/perl5/cpanel_lib/x86_64-linux-64int/auto/JSON/XS/XS.so
7f77930c7000-7f77930c8000 rw-p 0000e000 09:04 20451392 /usr/local/cpanel/3rdparty/perl/526/lib64/perl5/cpanel_lib/x86_64-linux-64int/auto/JSON/XS/XS.so
7f77930c8000-7f77930cd000 r-xp 00000000 09:04 20582671 /usr/local/cpanel/3rdparty/perl/526/lib64/perl5/cpanel_lib/x86_64-linux-64int/auto/CDB_File/CDB_File.so
7f77930cd000-7f77932cc000 ---p 00005000 09:04 20582671 /usr/local/cpanel/3rdparty/perl/526/lib64/perl5/cpanel_lib/x86_64-linux-64int/auto/CDB_File/CDB_File.so
7f77932cc000-7f77932cd000 r--p 00004000 09:04 20582671 /usr/local/cpanel/3rdparty/perl/526/lib64/perl5/cpanel_lib/x86_64-linux-64int/auto/CDB_File/CDB_File.so
7f77932cd000-7f77932ce000 rw-p 00005000 09:04 20582671 /usr/local/cpanel/3rdparty/perl/526/lib64/perl5/cpanel_lib/x86_64-linux-64int/auto/CDB_File/CDB_File.so
7f77932ce000-7f779334f000 rw-p 00000000 00:00 0 
7f779334f000-7f7793355000 r-xp 00000000 09:04 20711421 /usr/local/cpanel/3rdparty/perl/526/lib64/perl5/cpanel_lib/x86_64-linux-64int/auto/Crypt/OpenSSL/RSA/RSA.so
7f7793355000-7f7793555000 ---p 00006000 09:04 20711421 /usr/local/cpanel/3rdparty/perl/526/lib64/perl5/cpanel_lib/x86_64-linux-64int/auto/Crypt/OpenSSL/RSA/RSA.so
7f7793555000-7f7793556000 r--p 00006000 09:04 20711421 /usr/local/cpanel/3rdparty/perl/526/lib64/perl5/cpanel_lib/x86_64-linux-64int/auto/Crypt/OpenSSL/RSA/RSA.so
7f7793556000-7f7793557000 rw-p 00007000 09:04 20711421 /usr/local/cpanel/3rdparty/perl/526/lib64/perl5/cpanel_lib/x86_64-linux-64int/auto/Crypt/OpenSSL/RSA/RSA.so
7f7793557000-7f779355f000 r-xp 00000000 09:04 20710113 /usr/local/cpanel/3rdparty/perl/526/lib64/perl5/cpanel_lib/x86_64-linux-64int/auto/Crypt/OpenSSL/Bignum/Bignum.so
7f779355f000-7f779375e000 ---p 00008000 09:04 20710113 /usr/local/cpanel/3rdparty/perl/526/lib64/perl5/cpanel_lib/x86_64-linux-64int/auto/Crypt/OpenSSL/Bignum/Bignum.so
7f779375e000-7f779375f000 r--p 00007000 09:04 20710113 /usr/local/cpanel/3rdparty/perl/526/lib64/perl5/cpanel_lib/x86_64-linux-64int/auto/Crypt/OpenSSL/Bignum/Bignum.so
7f779375f000-7f7793760000 rw-p 00008000 09:04 20710113 /usr/local/cpanel/3rdparty/perl/526/lib64/perl5/cpanel_lib/x86_64-linux-64int/auto/Crypt/OpenSSL/Bignum/Bignum.so
7f7793760000-7f77937d4000 rw-p 00000000 00:00 0 
7f77937d4000-7f7793848000 rw-p 00000000 00:00 0 
7f7793848000-7f779384c000 rw-p 00000000 00:00 0 
7f77938bc000-7f77938c0000 rw-p 00000000 00:00 0 
7f77938d5000-7f7793930000 rw-p 00000000 00:00 0 
7f7793930000-7f7793a48000 r-xp 00000000 09:04 10748372 /var/lib/spamassassin/compiled/5.026/3.004001/auto/Mail/SpamAssassin/CompiledRegexps/body_0/body_0.so
7f7793a48000-7f7793c47000 ---p 00118000 09:04 10748372 /var/lib/spamassassin/compiled/5.026/3.004001/auto/Mail/SpamAssassin/CompiledRegexps/body_0/body_0.so
7f7793c47000-7f7793c48000 r--p 00117000 09:04 10748372 /var/lib/spamassassin/compiled/5.026/3.004001/auto/Mail/SpamAssassin/CompiledRegexps/body_0/body_0.so
7f7793c48000-7f7793c49000 rw-p 00118000 09:04 10748372 /var/lib/spamassassin/compiled/5.026/3.004001/auto/Mail/SpamAssassin/CompiledRegexps/body_0/body_0.so
7f7793c49000-7f7793c4c000 r-xp 00000000 09:04 20580072 /usr/local/cpanel/3rdparty/perl/526/lib64/perl5/cpanel_lib/x86_64-linux-64int/auto/BSD/Resource/Resource.so
7f7793c4c000-7f7793e4c000 ---p 00003000 09:04 20580072 /usr/local/cpanel/3rdparty/perl/526/lib64/perl5/cpanel_lib/x86_64-linux-64int/auto/BSD/Resource/Resource.so
7f7793e4c000-7f7793e4d000 r--p 00003000 09:04 20580072 /usr/local/cpanel/3rdparty/perl/526/lib64/perl5/cpanel_lib/x86_64-linux-64int/auto/BSD/Resource/Resource.so
7f7793e4d000-7f7793e4e000 rw-p 00004000 09:04 20580072 /usr/local/cpanel/3rdparty/perl/526/lib64/perl5/cpanel_lib/x86_64-linux-64int/auto/BSD/Resource/Resource.so
7f7793e4e000-7f7793e52000 rw-p 00000000 00:00 0 
7f7793e5e000-7f7793ec2000 rw-p 00000000 00:00 0 
7f7793ec2000-7f7793f22000 r-xp 00000000 09:04 17305029 /usr/lib64/libpcre.so.1.2.0
7f7793f22000-7f7794122000 ---p 00060000 09:04 17305029 /usr/lib64/libpcre.so.1.2.0
7f7794122000-7f7794123000 r--p 00060000 09:04 17305029 /usr/lib64/libpcre.so.1.2.0
7f7794123000-7f7794124000 rw-p 00061000 09:04 17305029 /usr/lib64/libpcre.so.1.2.0
7f7794124000-7f7794148000 r-xp 00000000 09:04 17311174 /usr/lib64/libselinux.so.1
7f7794148000-7f7794347000 ---p 00024000 09:04 17311174 /usr/lib64/libselinux.so.1
7f7794347000-7f7794348000 r--p 00023000 09:04 17311174 /usr/lib64/libselinux.so.1
7f7794348000-7f7794349000 rw-p 00024000 09:04 17311174 /usr/lib64/libselinux.so.1
7f7794349000-7f779434b000 rw-p 00000000 00:00 0 
7f779434b000-7f7794361000 r-xp 00000000 09:04 17306099 /usr/lib64/libresolv-2.17.so
7f7794361000-7f7794560000 ---p 00016000 09:04 17306099 /usr/lib64/libresolv-2.17.so
7f7794560000-7f7794561000 r--p 00015000 09:04 17306099 /usr/lib64/libresolv-2.17.so
7f7794561000-7f7794562000 rw-p 00016000 09:04 17306099 /usr/lib64/libresolv-2.17.so
7f7794562000-7f7794564000 rw-p 00000000 00:00 0 
7f7794564000-7f7794567000 r-xp 00000000 09:04 17306095 /usr/lib64/libkeyutils.so.1.5
7f7794567000-7f7794766000 ---p 00003000 09:04 17306095 /usr/lib64/libkeyutils.so.1.5
7f7794766000-7f7794767000 r--p 00002000 09:04 17306095 /usr/lib64/libkeyutils.so.1.5
7f7794767000-7f7794768000 rw-p 00003000 09:04 17306095 /usr/lib64/libkeyutils.so.1.5
7f7794768000-7f7794775000 r-xp 00000000 09:04 17305244 /usr/lib64/libkrb5support.so.0.1
7f7794775000-7f7794974000 ---p 0000d000 09:04 17305244 /usr/lib64/libkrb5support.so.0.1
7f7794974000-7f7794975000 r--p 0000c000 09:04 17305244 /usr/lib64/libkrb5support.so.0.1
7f7794975000-7f7794976000 rw-p 0000d000 09:04 17305244 /usr/lib64/libkrb5support.so.0.1
7f7794976000-7f77949a7000 r-xp 00000000 09:04 17306484 /usr/lib64/libk5crypto.so.3.1
7f77949a7000-7f7794ba6000 ---p 00031000 09:04 17306484 /usr/lib64/libk5crypto.so.3.1
7f7794ba6000-7f7794ba8000 r--p 00030000 09:04 17306484 /usr/lib64/libk5crypto.so.3.1
7f7794ba8000-7f7794ba9000 rw-p 00032000 09:04 17306484 /usr/lib64/libk5crypto.so.3.1
7f7794ba9000-7f7794bac000 r-xp 00000000 09:04 17311175 /usr/lib64/libcom_err.so.2.1
7f7794bac000-7f7794dab000 ---p 00003000 09:04 17311175 /usr/lib64/libcom_err.so.2.1
7f7794dab000-7f7794dac000 r--p 00002000 09:04 17311175 /usr/lib64/libcom_err.so.2.1
7f7794dac000-7f7794dad000 rw-p 00003000 09:04 17311175 /usr/lib64/libcom_err.so.2.1
7f7794dad000-7f7794e85000 r-xp 00000000 09:04 17306446 /usr/lib64/libkrb5.so.3.3
7f7794e85000-7f7795084000 ---p 000d8000 09:04 17306446 /usr/lib64/libkrb5.so.3.3
7f7795084000-7f7795092000 r--p 000d7000 09:04 17306446 /usr/lib64/libkrb5.so.3.3
7f7795092000-7f7795095000 rw-p 000e5000 09:04 17306446 /usr/lib64/libkrb5.so.3.3
7f7795095000-7f77950df000 r-xp 00000000 09:04 17305048 /usr/lib64/libgssapi_krb5.so.2.2
7f77950df000-7f77952df000 ---p 0004a000 09:04 17305048 /usr/lib64/libgssapi_krb5.so.2.2
7f77952df000-7f77952e0000 r--p 0004a000 09:04 17305048 /usr/lib64/libgssapi_krb5.so.2.2
7f77952e0000-7f77952e2000 rw-p 0004b000 09:04 17305048 /usr/lib64/libgssapi_krb5.so.2.2
7f77952e2000-7f77952f7000 r-xp 00000000 09:04 17305285 /usr/lib64/libz.so.1.2.7
7f77952f7000-7f77954f6000 ---p 00015000 09:04 17305285 /usr/lib64/libz.so.1.2.7
7f77954f6000-7f77954f7000 r--p 00014000 09:04 17305285 /usr/lib64/libz.so.1.2.7
7f77954f7000-7f77954f8000 rw-p 00015000 09:04 17305285 /usr/lib64/libz.so.1.2.7
7f77954f8000-7f779572c000 r-xp 00000000 09:04 17305414 /usr/lib64/libcrypto.so.1.0.2k
7f779572c000-7f779592c000 ---p 00234000 09:04 17305414 /usr/lib64/libcrypto.so.1.0.2k
7f779592c000-7f7795948000 r--p 00234000 09:04 17305414 /usr/lib64/libcrypto.so.1.0.2k
7f7795948000-7f7795955000 rw-p 00250000 09:04 17305414 /usr/lib64/libcrypto.so.1.0.2k
7f7795955000-7f7795959000 rw-p 00000000 00:00 0 
7f7795959000-7f77959c0000 r-xp 00000000 09:04 17305919 /usr/lib64/libssl.so.1.0.2k
7f77959c0000-7f7795bc0000 ---p 00067000 09:04 17305919 /usr/lib64/libssl.so.1.0.2k
7f7795bc0000-7f7795bc4000 r--p 00067000 09:04 17305919 /usr/lib64/libssl.so.1.0.2k
7f7795bc4000-7f7795bcb000 rw-p 0006b000 09:04 17305919 /usr/lib64/libssl.so.1.0.2k
7f7795bcb000-7f7795c21000 r-xp 00000000 09:04 20450808 /usr/local/cpanel/3rdparty/perl/526/lib64/perl5/cpanel_lib/x86_64-linux-64int/auto/Net/SSLeay/SSLeay.so
7f7795c21000-7f7795e20000 ---p 00056000 09:04 20450808 /usr/local/cpanel/3rdparty/perl/526/lib64/perl5/cpanel_lib/x86_64-linux-64int/auto/Net/SSLeay/SSLeay.so
7f7795e20000-7f7795e21000 r--p 00055000 09:04 20450808 /usr/local/cpanel/3rdparty/perl/526/lib64/perl5/cpanel_lib/x86_64-linux-64int/auto/Net/SSLeay/SSLeay.so
7f7795e21000-7f7795e23000 rw-p 00056000 09:04 20450808 /usr/local/cpanel/3rdparty/perl/526/lib64/perl5/cpanel_lib/x86_64-linux-64int/auto/Net/SSLeay/SSLeay.so
7f7795e23000-7f7795e27000 r-xp 00000000 09:04 20840619 /usr/local/cpanel/3rdparty/perl/526/lib64/perl5/cpanel_lib/x86_64-linux-64int/auto/Razor2/Preproc/deHTMLxs/deHTMLxs.so
7f7795e27000-7f7796026000 ---p 00004000 09:04 20840619 /usr/local/cpanel/3rdparty/perl/526/lib64/perl5/cpanel_lib/x86_64-linux-64int/auto/Razor2/Preproc/deHTMLxs/deHTMLxs.so
7f7796026000-7f7796027000 r--p 00003000 09:04 20840619 /usr/local/cpanel/3rdparty/perl/526/lib64/perl5/cpanel_lib/x86_64-linux-64int/auto/Razor2/Preproc/deHTMLxs/deHTMLxs.so
7f7796027000-7f7796028000 rw-p 00004000 09:04 20840619 /usr/local/cpanel/3rdparty/perl/526/lib64/perl5/cpanel_lib/x86_64-linux-64int/auto/Razor2/Preproc/deHTMLxs/deHTMLxs.so
7f7796028000-7f779602f000 r-xp 00000000 09:04 20450364 /usr/local/cpanel/3rdparty/perl/526/lib64/perl5/5.26.0/x86_64-linux-64int/auto/Data/Dumper/Dumper.so
7f779602f000-7f779622e000 ---p 00007000 09:04 20450364 /usr/local/cpanel/3rdparty/perl/526/lib64/perl5/5.26.0/x86_64-linux-64int/auto/Data/Dumper/Dumper.so
7f779622e000-7f779622f000 r--p 00006000 09:04 20450364 /usr/local/cpanel/3rdparty/perl/526/lib64/perl5/5.26.0/x86_64-linux-64int/auto/Data/Dumper/Dumper.so
7f779622f000-7f7796230000 rw-p 00007000 09:04 20450364 /usr/local/cpanel/3rdparty/perl/526/lib64/perl5/5.26.0/x86_64-linux-64int/auto/Data/Dumper/Dumper.so
7f7796230000-7f7796234000 r-xp 00000000 09:04 20450527 /usr/local/cpanel/3rdparty/perl/526/lib64/perl5/cpanel_lib/x86_64-linux-64int/auto/Digest/SHA1/SHA1.so
7f7796234000-7f7796433000 ---p 00004000 09:04 20450527 /usr/local/cpanel/3rdparty/perl/526/lib64/perl5/cpanel_lib/x86_64-linux-64int/auto/Digest/SHA1/SHA1.so
7f7796433000-7f7796434000 r--p 00003000 09:04 20450527 /usr/local/cpanel/3rdparty/perl/526/lib64/perl5/cpanel_lib/x86_64-linux-64int/auto/Digest/SHA1/SHA1.so
7f7796434000-7f7796435000 rw-p 00004000 09:04 20450527 /usr/local/cpanel/3rdparty/perl/526/lib64/perl5/cpanel_lib/x86_64-linux-64int/auto/Digest/SHA1/SHA1.so
7f7796435000-7f77965ea000 r-xp 00000000 09:04 17306605 /usr/lib64/libdb-5.3.so
7f77965ea000-7f77967ea000 ---p 001b5000 09:04 17306605 /usr/lib64/libdb-5.3.so
7f77967ea000-7f77967f1000 r--p 001b5000 09:04 17306605 /usr/lib64/libdb-5.3.so
7f77967f1000-7f77967f4000 rw-p 001bc000 09:04 17306605 /usr/lib64/libdb-5.3.so
7f77967f4000-7f77967fe000 r-xp 00000000 09:04 20450363 /usr/local/cpanel/3rdparty/perl/526/lib64/perl5/5.26.0/x86_64-linux-64int/auto/DB_File/DB_File.so
7f77967fe000-7f77969fd000 ---p 0000a000 09:04 20450363 /usr/local/cpanel/3rdparty/perl/526/lib64/perl5/5.26.0/x86_64-linux-64int/auto/DB_File/DB_File.so
7f77969fd000-7f77969fe000 r--p 00009000 09:04 20450363 /usr/local/cpanel/3rdparty/perl/526/lib64/perl5/5.26.0/x86_64-linux-64int/auto/DB_File/DB_File.so
7f77969fe000-7f77969ff000 rw-p 0000a000 09:04 20450363 /usr/local/cpanel/3rdparty/perl/526/lib64/perl5/5.26.0/x86_64-linux-64int/auto/DB_File/DB_File.so
7f77969ff000-7f7796a4d000 rw-p 00000000 00:00 0 
7f7796a4d000-7f7796aa9000 rw-p 00000000 00:00 0 
7f7796af3000-7f7796af6000 r-xp 00000000 09:04 20450401 /usr/local/cpanel/3rdparty/perl/526/lib64/perl5/5.26.0/x86_64-linux-64int/auto/Sys/Syslog/Syslog.so
7f7796af6000-7f7796cf5000 ---p 00003000 09:04 20450401 /usr/local/cpanel/3rdparty/perl/526/lib64/perl5/5.26.0/x86_64-linux-64int/auto/Sys/Syslog/Syslog.so
7f7796cf5000-7f7796cf6000 r--p 00002000 09:04 20450401 /usr/local/cpanel/3rdparty/perl/526/lib64/perl5/5.26.0/x86_64-linux-64int/auto/Sys/Syslog/Syslog.so
7f7796cf6000-7f7796cf7000 rw-p 00003000 09:04 20450401 /usr/local/cpanel/3rdparty/perl/526/lib64/perl5/5.26.0/x86_64-linux-64int/auto/Sys/Syslog/Syslog.so
7f7796cf7000-7f7796d01000 r-xp 00000000 09:04 20450387 /usr/local/cpanel/3rdparty/perl/526/lib64/perl5/5.26.0/x86_64-linux-64int/auto/List/Util/Util.so
7f7796d01000-7f7796f00000 ---p 0000a000 09:04 20450387 /usr/local/cpanel/3rdparty/perl/526/lib64/perl5/5.26.0/x86_64-linux-64int/auto/List/Util/Util.so
7f7796f00000-7f7796f01000 r--p 00009000 09:04 20450387 /usr/local/cpanel/3rdparty/perl/526/lib64/perl5/5.26.0/x86_64-linux-64int/auto/List/Util/Util.so
7f7796f01000-7f7796f02000 rw-p 0000a000 09:04 20450387 /usr/local/cpanel/3rdparty/perl/526/lib64/perl5/5.26.0/x86_64-linux-64int/auto/List/Util/Util.so
7f7796f02000-7f7796f34000 r-xp 00000000 09:04 17305256 /usr/lib64/libidn.so.11.6.11
7f7796f34000-7f7797133000 ---p 00032000 09:04 17305256 /usr/lib64/libidn.so.11.6.11
7f7797133000-7f7797134000 r--p 00031000 09:04 17305256 /usr/lib64/libidn.so.11.6.11
7f7797134000-7f7797135000 rw-p 00032000 09:04 17305256 /usr/lib64/libidn.so.11.6.11
7f7797135000-7f7797139000 r-xp 00000000 09:04 20710205 /usr/local/cpanel/3rdparty/perl/526/lib64/perl5/cpanel_lib/x86_64-linux-64int/auto/Net/LibIDN/LibIDN.so
7f7797139000-7f7797339000 ---p 00004000 09:04 20710205 /usr/local/cpanel/3rdparty/perl/526/lib64/perl5/cpanel_lib/x86_64-linux-64int/auto/Net/LibIDN/LibIDN.so
7f7797339000-7f779733a000 r--p 00004000 09:04 20710205 /usr/local/cpanel/3rdparty/perl/526/lib64/perl5/cpanel_lib/x86_64-linux-64int/auto/Net/LibIDN/LibIDN.so
7f779733a000-7f779733b000 rw-p 00005000 09:04 20710205 /usr/local/cpanel/3rdparty/perl/526/lib64/perl5/cpanel_lib/x86_64-linux-64int/auto/Net/LibIDN/LibIDN.so
7f779733b000-7f7797350000 r-xp 00000000 09:04 17311707 /usr/lib64/libgcc_s-4.8.5-20150702.so.1
7f7797350000-7f779754f000 ---p 00015000 09:04 17311707 /usr/lib64/libgcc_s-4.8.5-20150702.so.1
7f779754f000-7f7797550000 r--p 00014000 09:04 17311707 /usr/lib64/libgcc_s-4.8.5-20150702.so.1
7f7797550000-7f7797551000 rw-p 00015000 09:04 17311707 /usr/lib64/libgcc_s-4.8.5-20150702.so.1
7f7797551000-7f779763a000 r-xp 00000000 09:04 17311180 /usr/lib64/libstdc++.so.6.0.19
7f779763a000-7f7797839000 ---p 000e9000 09:04 17311180 /usr/lib64/libstdc++.so.6.0.19
7f7797839000-7f7797841000 r--p 000e8000 09:04 17311180 /usr/lib64/libstdc++.so.6.0.19
7f7797841000-7f7797843000 rw-p 000f0000 09:04 17311180 /usr/lib64/libstdc++.so.6.0.19
7f7797843000-7f7797858000 rw-p 00000000 00:00 0 
7f7797858000-7f7797871000 r-xp 00000000 09:04 20840577 /usr/local/cpanel/3rdparty/perl/526/lib64/perl5/cpanel_lib/x86_64-linux-64int/auto/Encode/Detect/Detector/Detector.so
7f7797871000-7f7797a71000 ---p 00019000 09:04 20840577 /usr/local/cpanel/3rdparty/perl/526/lib64/perl5/cpanel_lib/x86_64-linux-64int/auto/Encode/Detect/Detector/Detector.so
7f7797a71000-7f7797a72000 r--p 00019000 09:04 20840577 /usr/local/cpanel/3rdparty/perl/526/lib64/perl5/cpanel_lib/x86_64-linux-64int/auto/Encode/Detect/Detector/Detector.so
7f7797a72000-7f7797a7c000 rw-p 0001a000 09:04 20840577 /usr/local/cpanel/3rdparty/perl/526/lib64/perl5/cpanel_lib/x86_64-linux-64int/auto/Encode/Detect/Detector/Detector.so
7f7797a7c000-7f7797a84000 r-xp 00000000 09:04 20450371 /usr/local/cpanel/3rdparty/perl/526/lib64/perl5/5.26.0/x86_64-linux-64int/auto/Encode/Encode.so
7f7797a84000-7f7797c83000 ---p 00008000 09:04 20450371 /usr/local/cpanel/3rdparty/perl/526/lib64/perl5/5.26.0/x86_64-linux-64int/auto/Encode/Encode.so
7f7797c83000-7f7797c84000 r--p 00007000 09:04 20450371 /usr/local/cpanel/3rdparty/perl/526/lib64/perl5/5.26.0/x86_64-linux-64int/auto/Encode/Encode.so
7f7797c84000-7f7797c85000 rw-p 00008000 09:04 20450371 /usr/local/cpanel/3rdparty/perl/526/lib64/perl5/5.26.0/x86_64-linux-64int/auto/Encode/Encode.so
7f7797c85000-7f7797c8e000 r-xp 00000000 09:04 20451210 /usr/local/cpanel/3rdparty/perl/526/lib64/perl5/cpanel_lib/x86_64-linux-64int/auto/HTML/Parser/Parser.so
7f7797c8e000-7f7797e8e000 ---p 00009000 09:04 20451210 /usr/local/cpanel/3rdparty/perl/526/lib64/perl5/cpanel_lib/x86_64-linux-64int/auto/HTML/Parser/Parser.so
7f7797e8e000-7f7797e8f000 r--p 00009000 09:04 20451210 /usr/local/cpanel/3rdparty/perl/526/lib64/perl5/cpanel_lib/x86_64-linux-64int/auto/HTML/Parser/Parser.so
7f7797e8f000-7f7797e90000 rw-p 0000a000 09:04 20451210 /usr/local/cpanel/3rdparty/perl/526/lib64/perl5/cpanel_lib/x86_64-linux-64int/auto/HTML/Parser/Parser.so
7f7797e90000-7f7797e99000 r-xp 00000000 09:04 20450367 /usr/local/cpanel/3rdparty/perl/526/lib64/perl5/5.26.0/x86_64-linux-64int/auto/Digest/SHA/SHA.so
7f7797e99000-7f7798098000 ---p 00009000 09:04 20450367 /usr/local/cpanel/3rdparty/perl/526/lib64/perl5/5.26.0/x86_64-linux-64int/auto/Digest/SHA/SHA.so
7f7798098000-7f7798099000 r--p 00008000 09:04 20450367 /usr/local/cpanel/3rdparty/perl/526/lib64/perl5/5.26.0/x86_64-linux-64int/auto/Digest/SHA/SHA.so
7f7798099000-7f779809a000 rw-p 00009000 09:04 20450367 /usr/local/cpanel/3rdparty/perl/526/lib64/perl5/5.26.0/x86_64-linux-64int/auto/Digest/SHA/SHA.so
7f779809a000-7f779809f000 r-xp 00000000 09:04 20450379 /usr/local/cpanel/3rdparty/perl/526/lib64/perl5/5.26.0/x86_64-linux-64int/auto/File/Glob/Glob.so
7f779809f000-7f779829e000 ---p 00005000 09:04 20450379 /usr/local/cpanel/3rdparty/perl/526/lib64/perl5/5.26.0/x86_64-linux-64int/auto/File/Glob/Glob.so
7f779829e000-7f779829f000 r--p 00004000 09:04 20450379 /usr/local/cpanel/3rdparty/perl/526/lib64/perl5/5.26.0/x86_64-linux-64int/auto/File/Glob/Glob.so
7f779829f000-7f77982a0000 rw-p 00005000 09:04 20450379 /usr/local/cpanel/3rdparty/perl/526/lib64/perl5/5.26.0/x86_64-linux-64int/auto/File/Glob/Glob.so
7f77982a0000-7f77982a3000 r-xp 00000000 09:04 20450388 /usr/local/cpanel/3rdparty/perl/526/lib64/perl5/5.26.0/x86_64-linux-64int/auto/MIME/Base64/Base64.so
7f77982a3000-7f77984a2000 ---p 00003000 09:04 20450388 /usr/local/cpanel/3rdparty/perl/526/lib64/perl5/5.26.0/x86_64-linux-64int/auto/MIME/Base64/Base64.so
7f77984a2000-7f77984a3000 r--p 00002000 09:04 20450388 /usr/local/cpanel/3rdparty/perl/526/lib64/perl5/5.26.0/x86_64-linux-64int/auto/MIME/Base64/Base64.so
7f77984a3000-7f77984a4000 rw-p 00003000 09:04 20450388 /usr/local/cpanel/3rdparty/perl/526/lib64/perl5/5.26.0/x86_64-linux-64int/auto/MIME/Base64/Base64.so
7f77984a4000-7f77984a8000 r-xp 00000000 09:04 20451056 /usr/local/cpanel/3rdparty/perl/526/lib64/perl5/cpanel_lib/x86_64-linux-64int/auto/NetAddr/IP/Util/Util.so
7f77984a8000-7f77986a8000 ---p 00004000 09:04 20451056 /usr/local/cpanel/3rdparty/perl/526/lib64/perl5/cpanel_lib/x86_64-linux-64int/auto/NetAddr/IP/Util/Util.so
7f77986a8000-7f77986a9000 r--p 00004000 09:04 20451056 /usr/local/cpanel/3rdparty/perl/526/lib64/perl5/cpanel_lib/x86_64-linux-64int/auto/NetAddr/IP/Util/Util.so
7f77986a9000-7f77986aa000 rw-p 00005000 09:04 20451056 /usr/local/cpanel/3rdparty/perl/526/lib64/perl5/cpanel_lib/x86_64-linux-64int/auto/NetAddr/IP/Util/Util.so
7f77986aa000-7f77986ae000 r-xp 00000000 09:04 20580034 /usr/local/cpanel/3rdparty/perl/526/lib64/perl5/cpanel_lib/x86_64-linux-64int/auto/Socket6/Socket6.so
7f77986ae000-7f77988ae000 ---p 00004000 09:04 20580034 /usr/local/cpanel/3rdparty/perl/526/lib64/perl5/cpanel_lib/x86_64-linux-64int/auto/Socket6/Socket6.so
7f77988ae000-7f77988af000 r--p 00004000 09:04 20580034 /usr/local/cpanel/3rdparty/perl/526/lib64/perl5/cpanel_lib/x86_64-linux-64int/auto/Socket6/Socket6.so
7f77988af000-7f77988b0000 rw-p 00005000 09:04 20580034 /usr/local/cpanel/3rdparty/perl/526/lib64/perl5/cpanel_lib/x86_64-linux-64int/auto/Socket6/Socket6.so
7f77988b0000-7f77988b1000 r-xp 00000000 09:04 20450400 /usr/local/cpanel/3rdparty/perl/526/lib64/perl5/5.26.0/x86_64-linux-64int/auto/Sys/Hostname/Hostname.so
7f77988b1000-7f7798ab0000 ---p 00001000 09:04 20450400 /usr/local/cpanel/3rdparty/perl/526/lib64/perl5/5.26.0/x86_64-linux-64int/auto/Sys/Hostname/Hostname.so
7f7798ab0000-7f7798ab1000 r--p 00000000 09:04 20450400 /usr/local/cpanel/3rdparty/perl/526/lib64/perl5/5.26.0/x86_64-linux-64int/auto/Sys/Hostname/Hostname.so
7f7798ab1000-7f7798ab2000 rw-p 00001000 09:04 20450400 /usr/local/cpanel/3rdparty/perl/526/lib64/perl5/5.26.0/x86_64-linux-64int/auto/Sys/Hostname/Hostname.so
7f7798ab2000-7f7798ab5000 r-xp 00000000 09:04 20450362 /usr/local/cpanel/3rdparty/perl/526/lib64/perl5/5.26.0/x86_64-linux-64int/auto/Cwd/Cwd.so
7f7798ab5000-7f7798cb4000 ---p 00003000 09:04 20450362 /usr/local/cpanel/3rdparty/perl/526/lib64/perl5/5.26.0/x86_64-linux-64int/auto/Cwd/Cwd.so
7f7798cb4000-7f7798cb5000 r--p 00002000 09:04 20450362 /usr/local/cpanel/3rdparty/perl/526/lib64/perl5/5.26.0/x86_64-linux-64int/auto/Cwd/Cwd.so
7f7798cb5000-7f7798cb6000 rw-p 00003000 09:04 20450362 /usr/local/cpanel/3rdparty/perl/526/lib64/perl5/5.26.0/x86_64-linux-64int/auto/Cwd/Cwd.so
7f7798cb6000-7f7798cbd000 r-xp 00000000 09:04 17306477 /usr/lib64/librt-2.17.so
7f7798cbd000-7f7798ebc000 ---p 00007000 09:04 17306477 /usr/lib64/librt-2.17.so
7f7798ebc000-7f7798ebd000 r--p 00006000 09:04 17306477 /usr/lib64/librt-2.17.so
7f7798ebd000-7f7798ebe000 rw-p 00007000 09:04 17306477 /usr/lib64/librt-2.17.so
7f7798ebe000-7f7798ec4000 r-xp 00000000 09:04 20450403 /usr/local/cpanel/3rdparty/perl/526/lib64/perl5/5.26.0/x86_64-linux-64int/auto/Time/HiRes/HiRes.so
7f7798ec4000-7f77990c3000 ---p 00006000 09:04 20450403 /usr/local/cpanel/3rdparty/perl/526/lib64/perl5/5.26.0/x86_64-linux-64int/auto/Time/HiRes/HiRes.so
7f77990c3000-7f77990c4000 r--p 00005000 09:04 20450403 /usr/local/cpanel/3rdparty/perl/526/lib64/perl5/5.26.0/x86_64-linux-64int/auto/Time/HiRes/HiRes.so
7f77990c4000-7f77990c5000 rw-p 00006000 09:04 20450403 /usr/local/cpanel/3rdparty/perl/526/lib64/perl5/5.26.0/x86_64-linux-64int/auto/Time/HiRes/HiRes.so
7f77990c5000-7f77990da000 r-xp 00000000 09:04 20450392 /usr/local/cpanel/3rdparty/perl/526/lib64/perl5/5.26.0/x86_64-linux-64int/auto/POSIX/POSIX.so
7f77990da000-7f77992d9000 ---p 00015000 09:04 20450392 /usr/local/cpanel/3rdparty/perl/526/lib64/perl5/5.26.0/x86_64-linux-64int/auto/POSIX/POSIX.so
7f77992d9000-7f77992dc000 r--p 00014000 09:04 20450392 /usr/local/cpanel/3rdparty/perl/526/lib64/perl5/5.26.0/x86_64-linux-64int/auto/POSIX/POSIX.so
7f77992dc000-7f77992dd000 rw-p 00017000 09:04 20450392 /usr/local/cpanel/3rdparty/perl/526/lib64/perl5/5.26.0/x86_64-linux-64int/auto/POSIX/POSIX.so
7f77992dd000-7f77992e0000 r-xp 00000000 09:04 20450377 /usr/local/cpanel/3rdparty/perl/526/lib64/perl5/5.26.0/x86_64-linux-64int/auto/Fcntl/Fcntl.so
7f77992e0000-7f77994e0000 ---p 00003000 09:04 20450377 /usr/local/cpanel/3rdparty/perl/526/lib64/perl5/5.26.0/x86_64-linux-64int/auto/Fcntl/Fcntl.so
7f77994e0000-7f77994e1000 r--p 00003000 09:04 20450377 /usr/local/cpanel/3rdparty/perl/526/lib64/perl5/5.26.0/x86_64-linux-64int/auto/Fcntl/Fcntl.so
7f77994e1000-7f77994e2000 rw-p 00004000 09:04 20450377 /usr/local/cpanel/3rdparty/perl/526/lib64/perl5/5.26.0/x86_64-linux-64int/auto/Fcntl/Fcntl.so
7f77994e2000-7f77994ee000 r-xp 00000000 09:04 17305088 /usr/lib64/libnss_files-2.17.so
7f77994ee000-7f77996ed000 ---p 0000c000 09:04 17305088 /usr/lib64/libnss_files-2.17.so
7f77996ed000-7f77996ee000 r--p 0000b000 09:04 17305088 /usr/lib64/libnss_files-2.17.so
7f77996ee000-7f77996ef000 rw-p 0000c000 09:04 17305088 /usr/lib64/libnss_files-2.17.so
7f77996ef000-7f77996f5000 rw-p 00000000 00:00 0 
7f77996f5000-7f77996f9000 r-xp 00000000 09:04 20450385 /usr/local/cpanel/3rdparty/perl/526/lib64/perl5/5.26.0/x86_64-linux-64int/auto/IO/IO.so
7f77996f9000-7f77998f8000 ---p 00004000 09:04 20450385 /usr/local/cpanel/3rdparty/perl/526/lib64/perl5/5.26.0/x86_64-linux-64int/auto/IO/IO.so
7f77998f8000-7f77998f9000 r--p 00003000 09:04 20450385 /usr/local/cpanel/3rdparty/perl/526/lib64/perl5/5.26.0/x86_64-linux-64int/auto/IO/IO.so
7f77998f9000-7f77998fa000 rw-p 00004000 09:04 20450385 /usr/local/cpanel/3rdparty/perl/526/lib64/perl5/5.26.0/x86_64-linux-64int/auto/IO/IO.so
7f77998fa000-7f7799902000 r-xp 00000000 09:04 20450398 /usr/local/cpanel/3rdparty/perl/526/lib64/perl5/5.26.0/x86_64-linux-64int/auto/Socket/Socket.so
7f7799902000-7f7799b01000 ---p 00008000 09:04 20450398 /usr/local/cpanel/3rdparty/perl/526/lib64/perl5/5.26.0/x86_64-linux-64int/auto/Socket/Socket.so
7f7799b01000-7f7799b03000 r--p 00007000 09:04 20450398 /usr/local/cpanel/3rdparty/perl/526/lib64/perl5/5.26.0/x86_64-linux-64int/auto/Socket/Socket.so
7f7799b03000-7f7799b04000 rw-p 00009000 09:04 20450398 /usr/local/cpanel/3rdparty/perl/526/lib64/perl5/5.26.0/x86_64-linux-64int/auto/Socket/Socket.so
7f7799b04000-7f7799b6b000 r-xp 00000000 09:04 20450410 /usr/local/cpanel/3rdparty/perl/526/lib64/perl5/5.26.0/x86_64-linux-64int/auto/re/re.so
7f7799b6b000-7f7799d6a000 ---p 00067000 09:04 20450410 /usr/local/cpanel/3rdparty/perl/526/lib64/perl5/5.26.0/x86_64-linux-64int/auto/re/re.so
7f7799d6a000-7f7799d6b000 r--p 00066000 09:04 20450410 /usr/local/cpanel/3rdparty/perl/526/lib64/perl5/5.26.0/x86_64-linux-64int/auto/re/re.so
7f7799d6b000-7f7799d6c000 rw-p 00067000 09:04 20450410 /usr/local/cpanel/3rdparty/perl/526/lib64/perl5/5.26.0/x86_64-linux-64int/auto/re/re.so
7f7799d6c000-7f7799d6e000 r-xp 00000000 09:04 17306056 /usr/lib64/libfreebl3.so
7f7799d6e000-7f7799f6d000 ---p 00002000 09:04 17306056 /usr/lib64/libfreebl3.so
7f7799f6d000-7f7799f6e000 r--p 00001000 09:04 17306056 /usr/lib64/libfreebl3.so
7f7799f6e000-7f7799f6f000 rw-p 00002000 09:04 17306056 /usr/lib64/libfreebl3.so
7f7799f6f000-7f779a132000 r-xp 00000000 09:04 17305431 /usr/lib64/libc-2.17.so
7f779a132000-7f779a331000 ---p 001c3000 09:04 17305431 /usr/lib64/libc-2.17.so
7f779a331000-7f779a335000 r--p 001c2000 09:04 17305431 /usr/lib64/libc-2.17.so
7f779a335000-7f779a337000 rw-p 001c6000 09:04 17305431 /usr/lib64/libc-2.17.so
7f779a337000-7f779a33c000 rw-p 00000000 00:00 0 
7f779a33c000-7f779a33e000 r-xp 00000000 09:04 17305280 /usr/lib64/libutil-2.17.so
7f779a33e000-7f779a53d000 ---p 00002000 09:04 17305280 /usr/lib64/libutil-2.17.so
7f779a53d000-7f779a53e000 r--p 00001000 09:04 17305280 /usr/lib64/libutil-2.17.so
7f779a53e000-7f779a53f000 rw-p 00002000 09:04 17305280 /usr/lib64/libutil-2.17.so
7f779a53f000-7f779a547000 r-xp 00000000 09:04 17306113 /usr/lib64/libcrypt-2.17.so
7f779a547000-7f779a746000 ---p 00008000 09:04 17306113 /usr/lib64/libcrypt-2.17.so
7f779a746000-7f779a747000 r--p 00007000 09:04 17306113 /usr/lib64/libcrypt-2.17.so
7f779a747000-7f779a748000 rw-p 00008000 09:04 17306113 /usr/lib64/libcrypt-2.17.so
7f779a748000-7f779a776000 rw-p 00000000 00:00 0 
7f779a776000-7f779a877000 r-xp 00000000 09:04 17303258 /usr/lib64/libm-2.17.so
7f779a877000-7f779aa76000 ---p 00101000 09:04 17303258 /usr/lib64/libm-2.17.so
7f779aa76000-7f779aa77000 r--p 00100000 09:04 17303258 /usr/lib64/libm-2.17.so
7f779aa77000-7f779aa78000 rw-p 00101000 09:04 17303258 /usr/lib64/libm-2.17.so
7f779aa78000-7f779aa7a000 r-xp 00000000 09:04 17303242 /usr/lib64/libdl-2.17.so
7f779aa7a000-7f779ac7a000 ---p 00002000 09:04 17303242 /usr/lib64/libdl-2.17.so
7f779ac7a000-7f779ac7b000 r--p 00002000 09:04 17303242 /usr/lib64/libdl-2.17.so
7f779ac7b000-7f779ac7c000 rw-p 00003000 09:04 17303242 /usr/lib64/libdl-2.17.so
7f779ac7c000-7f779ac93000 r-xp 00000000 09:04 17305094 /usr/lib64/libnsl-2.17.so
7f779ac93000-7f779ae92000 ---p 00017000 09:04 17305094 /usr/lib64/libnsl-2.17.so
7f779ae92000-7f779ae93000 r--p 00016000 09:04 17305094 /usr/lib64/libnsl-2.17.so
7f779ae93000-7f779ae94000 rw-p 00017000 09:04 17305094 /usr/lib64/libnsl-2.17.so
7f779ae94000-7f779ae96000 rw-p 00000000 00:00 0 
7f779ae96000-7f779aead000 r-xp 00000000 09:04 17306007 /usr/lib64/libpthread-2.17.so
7f779aead000-7f779b0ac000 ---p 00017000 09:04 17306007 /usr/lib64/libpthread-2.17.so
7f779b0ac000-7f779b0ad000 r--p 00016000 09:04 17306007 /usr/lib64/libpthread-2.17.so
7f779b0ad000-7f779b0ae000 rw-p 00017000 09:04 17306007 /usr/lib64/libpthread-2.17.so
7f779b0ae000-7f779b0b2000 rw-p 00000000 00:00 0 
7f779b0b2000-7f779b248000 r-xp 00000000 09:04 20450211 /usr/local/cpanel/3rdparty/perl/526/lib64/perl5/5.26.0/x86_64-linux-64int/CORE/libperl.so
7f779b248000-7f779b448000 ---p 00196000 09:04 20450211 /usr/local/cpanel/3rdparty/perl/526/lib64/perl5/5.26.0/x86_64-linux-64int/CORE/libperl.so
7f779b448000-7f779b44e000 r--p 00196000 09:04 20450211 /usr/local/cpanel/3rdparty/perl/526/lib64/perl5/5.26.0/x86_64-linux-64int/CORE/libperl.so
7f779b44e000-7f779b452000 rw-p 0019c000 09:04 20450211 /usr/local/cpanel/3rdparty/perl/526/lib64/perl5/5.26.0/x86_64-linux-64int/CORE/libperl.so
7f779b452000-7f779b453000 rw-p 00000000 00:00 0 
7f779b453000-7f779b45a000 r-xp 00000000 09:04 17305246 /usr/lib64/libgdbm.so.4.0.0
7f779b45a000-7f779b65a000 ---p 00007000 09:04 17305246 /usr/lib64/libgdbm.so.4.0.0
7f779b65a000-7f779b65b000 r--p 00007000 09:04 17305246 /usr/lib64/libgdbm.so.4.0.0
7f779b65b000-7f779b65c000 rw-p 00008000 09:04 17305246 /usr/lib64/libgdbm.so.4.0.0
7f779b65c000-7f779b67e000 r-xp 00000000 09:04 17307069 /usr/lib64/ld-2.17.so
7f779b693000-7f779b6df000 rw-p 00000000 00:00 0 
7f779b6df000-7f779b714000 r--s 00000000 09:04 10356274 /var/db/nscd/passwd
7f779b714000-7f779b718000 rw-p 00000000 00:00 0 
7f779b71e000-7f779b720000 rw-p 00000000 00:00 0 
7f779b748000-7f779b74a000 rw-p 00000000 00:00 0 
7f779b75d000-7f779b75f000 rw-p 00000000 00:00 0 
7f779b7a9000-7f779b86a000 r--s 00000000 09:04 10356276 /var/db/nscd/hosts
7f779b86a000-7f779b871000 rw-p 00000000 00:00 0 
7f779b87c000-7f779b87d000 rw-p 00000000 00:00 0 
7f779b87d000-7f779b87e000 r--p 00021000 09:04 17307069 /usr/lib64/ld-2.17.so
7f779b87e000-7f779b87f000 rw-p 00022000 09:04 17307069 /usr/lib64/ld-2.17.so
7f779b87f000-7f779b880000 rw-p 00000000 00:00 0 
7ffe83b3e000-7ffe83b5f000 rw-p 00000000 00:00 0 [stack]
7ffe83ba1000-7ffe83ba3000 r-xp 00000000 00:00 0 [vdso]
ffffffffff600000-ffffffffff601000 r-xp 00000000 00:00 0 [vsyscall]
-----------------------------------------------------
Two - Memcache:
-----------------------------------------------------

Code: Select all
Time: Mon Jun 25 09:26:23 2018 +0300
PID: 1460 (Parent PID:1460)
Account: memcached
Uptime: 219910 seconds


Executable:

/usr/bin/memcached


Command Line (often faked in exploits):

/usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024 -l 127.0.0.1,::1


Network connections by the process (if any):

tcp: 127.0.0.1:11211 -> 127.0.0.1:46292


Files open by the process (if any):

/dev/null
anon_inode:[eventpoll]
anon_inode:[eventpoll]
anon_inode:[eventpoll]
anon_inode:[eventpoll]
anon_inode:[eventpoll]


Memory maps by the process (if any):

00400000-00426000 r-xp 00000000 09:04 17309968 /usr/bin/memcached
00625000-00626000 r--p 00025000 09:04 17309968 /usr/bin/memcached
00626000-00627000 rw-p 00026000 09:04 17309968 /usr/bin/memcached
00627000-0063d000 rw-p 00000000 00:00 0 
015b7000-015d8000 rw-p 00000000 00:00 0 [heap]
7fc53c000000-7fc53c043000 rw-p 00000000 00:00 0 
7fc53c043000-7fc540000000 ---p 00000000 00:00 0 
7fc540000000-7fc54003b000 rw-p 00000000 00:00 0 
7fc54003b000-7fc544000000 ---p 00000000 00:00 0 
7fc544dea000-7fc545ffc000 rw-p 00000000 00:00 0 
7fc545ffc000-7fc545ffd000 ---p 00000000 00:00 0 
7fc545ffd000-7fc5467fd000 rw-p 00000000 00:00 0 
7fc5467fd000-7fc5467fe000 ---p 00000000 00:00 0 
7fc5467fe000-7fc546ffe000 rw-p 00000000 00:00 0 
7fc546ffe000-7fc546fff000 ---p 00000000 00:00 0 
7fc546fff000-7fc5477ff000 rw-p 00000000 00:00 0 
7fc5477ff000-7fc547800000 ---p 00000000 00:00 0 
7fc547800000-7fc548000000 rw-p 00000000 00:00 0 
7fc548000000-7fc548034000 rw-p 00000000 00:00 0 
7fc548034000-7fc54c000000 ---p 00000000 00:00 0 
7fc54c000000-7fc54c03f000 rw-p 00000000 00:00 0 
7fc54c03f000-7fc550000000 ---p 00000000 00:00 0 
7fc550000000-7fc55003b000 rw-p 00000000 00:00 0 
7fc55003b000-7fc554000000 ---p 00000000 00:00 0 
7fc554049000-7fc55464f000 rw-p 00000000 00:00 0 
7fc55464f000-7fc554650000 ---p 00000000 00:00 0 
7fc554650000-7fc554e50000 rw-p 00000000 00:00 0 
7fc554e50000-7fc554e51000 ---p 00000000 00:00 0 
7fc554e51000-7fc555651000 rw-p 00000000 00:00 0 
7fc555651000-7fc555652000 ---p 00000000 00:00 0 
7fc555652000-7fc555e52000 rw-p 00000000 00:00 0 
7fc555e52000-7fc555e53000 ---p 00000000 00:00 0 
7fc555e53000-7fc556653000 rw-p 00000000 00:00 0 
7fc556653000-7fc556654000 ---p 00000000 00:00 0 
7fc556654000-7fc556e54000 rw-p 00000000 00:00 0 
7fc556e54000-7fc556eb4000 r-xp 00000000 09:04 17305029 /usr/lib64/libpcre.so.1.2.0
7fc556eb4000-7fc5570b4000 ---p 00060000 09:04 17305029 /usr/lib64/libpcre.so.1.2.0
7fc5570b4000-7fc5570b5000 r--p 00060000 09:04 17305029 /usr/lib64/libpcre.so.1.2.0
7fc5570b5000-7fc5570b6000 rw-p 00061000 09:04 17305029 /usr/lib64/libpcre.so.1.2.0
7fc5570b6000-7fc5570da000 r-xp 00000000 09:04 17311174 /usr/lib64/libselinux.so.1
7fc5570da000-7fc5572d9000 ---p 00024000 09:04 17311174 /usr/lib64/libselinux.so.1
7fc5572d9000-7fc5572da000 r--p 00023000 09:04 17311174 /usr/lib64/libselinux.so.1
7fc5572da000-7fc5572db000 rw-p 00024000 09:04 17311174 /usr/lib64/libselinux.so.1
7fc5572db000-7fc5572dd000 rw-p 00000000 00:00 0 
7fc5572dd000-7fc5572e0000 r-xp 00000000 09:04 17306095 /usr/lib64/libkeyutils.so.1.5
7fc5572e0000-7fc5574df000 ---p 00003000 09:04 17306095 /usr/lib64/libkeyutils.so.1.5
7fc5574df000-7fc5574e0000 r--p 00002000 09:04 17306095 /usr/lib64/libkeyutils.so.1.5
7fc5574e0000-7fc5574e1000 rw-p 00003000 09:04 17306095 /usr/lib64/libkeyutils.so.1.5
7fc5574e1000-7fc5574e3000 r-xp 00000000 09:04 17306056 /usr/lib64/libfreebl3.so
7fc5574e3000-7fc5576e2000 ---p 00002000 09:04 17306056 /usr/lib64/libfreebl3.so
7fc5576e2000-7fc5576e3000 r--p 00001000 09:04 17306056 /usr/lib64/libfreebl3.so
7fc5576e3000-7fc5576e4000 rw-p 00002000 09:04 17306056 /usr/lib64/libfreebl3.so
7fc5576e4000-7fc5576f1000 r-xp 00000000 09:04 17305244 /usr/lib64/libkrb5support.so.0.1
7fc5576f1000-7fc5578f0000 ---p 0000d000 09:04 17305244 /usr/lib64/libkrb5support.so.0.1
7fc5578f0000-7fc5578f1000 r--p 0000c000 09:04 17305244 /usr/lib64/libkrb5support.so.0.1
7fc5578f1000-7fc5578f2000 rw-p 0000d000 09:04 17305244 /usr/lib64/libkrb5support.so.0.1
7fc5578f2000-7fc5578f5000 r-xp 00000000 09:04 17311175 /usr/lib64/libcom_err.so.2.1
7fc5578f5000-7fc557af4000 ---p 00003000 09:04 17311175 /usr/lib64/libcom_err.so.2.1
7fc557af4000-7fc557af5000 r--p 00002000 09:04 17311175 /usr/lib64/libcom_err.so.2.1
7fc557af5000-7fc557af6000 rw-p 00003000 09:04 17311175 /usr/lib64/libcom_err.so.2.1
7fc557af6000-7fc557b27000 r-xp 00000000 09:04 17306484 /usr/lib64/libk5crypto.so.3.1
7fc557b27000-7fc557d26000 ---p 00031000 09:04 17306484 /usr/lib64/libk5crypto.so.3.1
7fc557d26000-7fc557d28000 r--p 00030000 09:04 17306484 /usr/lib64/libk5crypto.so.3.1
7fc557d28000-7fc557d29000 rw-p 00032000 09:04 17306484 /usr/lib64/libk5crypto.so.3.1
7fc557d29000-7fc557e01000 r-xp 00000000 09:04 17306446 /usr/lib64/libkrb5.so.3.3
7fc557e01000-7fc558000000 ---p 000d8000 09:04 17306446 /usr/lib64/libkrb5.so.3.3
7fc558000000-7fc55800e000 r--p 000d7000 09:04 17306446 /usr/lib64/libkrb5.so.3.3
7fc55800e000-7fc558011000 rw-p 000e5000 09:04 17306446 /usr/lib64/libkrb5.so.3.3
7fc558011000-7fc55805b000 r-xp 00000000 09:04 17305048 /usr/lib64/libgssapi_krb5.so.2.2
7fc55805b000-7fc55825b000 ---p 0004a000 09:04 17305048 /usr/lib64/libgssapi_krb5.so.2.2
7fc55825b000-7fc55825c000 r--p 0004a000 09:04 17305048 /usr/lib64/libgssapi_krb5.so.2.2
7fc55825c000-7fc55825e000 rw-p 0004b000 09:04 17305048 /usr/lib64/libgssapi_krb5.so.2.2
7fc55825e000-7fc558266000 r-xp 00000000 09:04 17306113 /usr/lib64/libcrypt-2.17.so
7fc558266000-7fc558465000 ---p 00008000 09:04 17306113 /usr/lib64/libcrypt-2.17.so
7fc558465000-7fc558466000 r--p 00007000 09:04 17306113 /usr/lib64/libcrypt-2.17.so
7fc558466000-7fc558467000 rw-p 00008000 09:04 17306113 /usr/lib64/libcrypt-2.17.so
7fc558467000-7fc558495000 rw-p 00000000 00:00 0 
7fc558495000-7fc5584ab000 r-xp 00000000 09:04 17306099 /usr/lib64/libresolv-2.17.so
7fc5584ab000-7fc5586aa000 ---p 00016000 09:04 17306099 /usr/lib64/libresolv-2.17.so
7fc5586aa000-7fc5586ab000 r--p 00015000 09:04 17306099 /usr/lib64/libresolv-2.17.so
7fc5586ab000-7fc5586ac000 rw-p 00016000 09:04 17306099 /usr/lib64/libresolv-2.17.so
7fc5586ac000-7fc5586ae000 rw-p 00000000 00:00 0 
7fc5586ae000-7fc5586b0000 r-xp 00000000 09:04 17303242 /usr/lib64/libdl-2.17.so
7fc5586b0000-7fc5588b0000 ---p 00002000 09:04 17303242 /usr/lib64/libdl-2.17.so
7fc5588b0000-7fc5588b1000 r--p 00002000 09:04 17303242 /usr/lib64/libdl-2.17.so
7fc5588b1000-7fc5588b2000 rw-p 00003000 09:04 17303242 /usr/lib64/libdl-2.17.so
7fc5588b2000-7fc558a75000 r-xp 00000000 09:04 17305431 /usr/lib64/libc-2.17.so
7fc558a75000-7fc558c74000 ---p 001c3000 09:04 17305431 /usr/lib64/libc-2.17.so
7fc558c74000-7fc558c78000 r--p 001c2000 09:04 17305431 /usr/lib64/libc-2.17.so
7fc558c78000-7fc558c7a000 rw-p 001c6000 09:04 17305431 /usr/lib64/libc-2.17.so
7fc558c7a000-7fc558c7f000 rw-p 00000000 00:00 0 
7fc558c7f000-7fc558c96000 r-xp 00000000 09:04 17306007 /usr/lib64/libpthread-2.17.so
7fc558c96000-7fc558e95000 ---p 00017000 09:04 17306007 /usr/lib64/libpthread-2.17.so
7fc558e95000-7fc558e96000 r--p 00016000 09:04 17306007 /usr/lib64/libpthread-2.17.so
7fc558e96000-7fc558e97000 rw-p 00017000 09:04 17306007 /usr/lib64/libpthread-2.17.so
7fc558e97000-7fc558e9b000 rw-p 00000000 00:00 0 
7fc558e9b000-7fc558eb7000 r-xp 00000000 09:04 17306110 /usr/lib64/libsasl2.so.3.0.0
7fc558eb7000-7fc5590b6000 ---p 0001c000 09:04 17306110 /usr/lib64/libsasl2.so.3.0.0
7fc5590b6000-7fc5590b7000 r--p 0001b000 09:04 17306110 /usr/lib64/libsasl2.so.3.0.0
7fc5590b7000-7fc5590b8000 rw-p 0001c000 09:04 17306110 /usr/lib64/libsasl2.so.3.0.0
7fc5590b8000-7fc5590fe000 r-xp 00000000 09:04 17305388 /usr/lib64/libevent-2.0.so.5.1.9
7fc5590fe000-7fc5592fd000 ---p 00046000 09:04 17305388 /usr/lib64/libevent-2.0.so.5.1.9
7fc5592fd000-7fc5592fe000 r--p 00045000 09:04 17305388 /usr/lib64/libevent-2.0.so.5.1.9
7fc5592fe000-7fc5592ff000 rw-p 00046000 09:04 17305388 /usr/lib64/libevent-2.0.so.5.1.9
7fc5592ff000-7fc559300000 rw-p 00000000 00:00 0 
7fc559300000-7fc559322000 r-xp 00000000 09:04 17307069 /usr/lib64/ld-2.17.so
7fc5593a9000-7fc5594d7000 rw-p 00000000 00:00 0 
7fc5594d7000-7fc55950c000 r--s 00000000 09:04 10356274 /var/db/nscd/passwd
7fc55950c000-7fc559515000 rw-p 00000000 00:00 0 
7fc559520000-7fc559521000 rw-p 00000000 00:00 0 
7fc559521000-7fc559522000 r--p 00021000 09:04 17307069 /usr/lib64/ld-2.17.so
7fc559522000-7fc559523000 rw-p 00022000 09:04 17307069 /usr/lib64/ld-2.17.so
7fc559523000-7fc559524000 rw-p 00000000 00:00 0 
7ffe9a603000-7ffe9a624000 rw-p 00000000 00:00 0 [stack]
7ffe9a705000-7ffe9a707000 r-xp 00000000 00:00 0 [vdso]
ffffffffff600000-ffffffffff601000 r-xp 00000000 00:00 0 [vsyscall]
1 post Page 1 of 1