Page 1 of 1

Re: Suspicious process running under user postfix

Posted: 03 Aug 2021, 12:13
by xthekrakenx
Hi! I have a VPS running Virtualmin/Webmin and have CSF installed and mostly tweaked to ignore most of the false positive type of processes. A few weeks back - prior to installing CSF, I had someone exploit one of my wordpress sites and they managed to lay waste to several of my sub servers. Over the weeks - I have wiped most traces that I could find (without standing up a brand new server) and I think I have all but rid myself of the hacker but have been getting periodic postfix processes that appear to be making outbound connections to a variety of foreign IP's, usually on different ports, but all running the same "Command Line" and have the same files opened by the process. My sites are all relatively unknown so should have virtually no legitimate email traffic. I have tried to trace it back to what *may* be triggering this process to fire, as again it is periodically/not at set intervals but no luck so far. My server is running 20.04, fully updated, notification I receive below. Complete disclosure - I am still learning - so please be gentle! :P

Time: Tue Aug 3 05:37:02 2021 -0400
PID: 2540072 (Parent PID:127161)
Account: postfix
Uptime: 69 seconds


Executable:

/usr/lib/postfix/sbin/smtpd


Command Line (often faked in exploits):

smtpd -n smtp -t inet -u -c -o stress= -s 2 -o smtpd_sasl_auth_enable=yes -o smtpd_tls_security_level=may


Network connections by the process (if any):

tcp: XX.XXX.XXX.XX:25 -> 37.0.8.37:65241


Files open by the process (if any):

/dev/null
/dev/null
/dev/null
/var/spool/postfix/pid/inet.smtp
anon_inode:[eventpoll]
/etc/aliases.db
/etc/aliases.db
/etc/postfix/virtual.db
/etc/postfix/virtual.db
/etc/postfix/sni_map.db
/etc/postfix/sni_map.db


Memory maps by the process (if any):

55fc8d6d8000-55fc8d6e2000 r--p 00000000 fd:00 74423 /usr/lib/postfix/sbin/smtpd
55fc8d6e2000-55fc8d705000 r-xp 0000a000 fd:00 74423 /usr/lib/postfix/sbin/smtpd
55fc8d705000-55fc8d713000 r--p 0002d000 fd:00 74423 /usr/lib/postfix/sbin/smtpd
55fc8d714000-55fc8d717000 r--p 0003b000 fd:00 74423 /usr/lib/postfix/sbin/smtpd
55fc8d717000-55fc8d718000 rw-p 0003e000 fd:00 74423 /usr/lib/postfix/sbin/smtpd
55fc8f26a000-55fc8f2ee000 rw-p 00000000 00:00 0 [heap]
7f6fe1961000-7f6fe1963000 r--p 00000000 fd:00 886630 /var/spool/postfix/lib/x86_64-linux-gnu/libnss_dns-2.31.so
7f6fe1963000-7f6fe1967000 r-xp 00002000 fd:00 886630 /var/spool/postfix/lib/x86_64-linux-gnu/libnss_dns-2.31.so
7f6fe1967000-7f6fe1968000 r--p 00006000 fd:00 886630 /var/spool/postfix/lib/x86_64-linux-gnu/libnss_dns-2.31.so
7f6fe1968000-7f6fe1969000 r--p 00006000 fd:00 886630 /var/spool/postfix/lib/x86_64-linux-gnu/libnss_dns-2.31.so
7f6fe1969000-7f6fe196a000 rw-p 00007000 fd:00 886630 /var/spool/postfix/lib/x86_64-linux-gnu/libnss_dns-2.31.so
7f6fe196a000-7f6fe1970000 r--p 00000000 fd:00 16481 /lib/x86_64-linux-gnu/libnss_systemd.so.2
7f6fe1970000-7f6fe1996000 r-xp 00006000 fd:00 16481 /lib/x86_64-linux-gnu/libnss_systemd.so.2
7f6fe1996000-7f6fe19a2000 r--p 0002c000 fd:00 16481 /lib/x86_64-linux-gnu/libnss_systemd.so.2
7f6fe19a2000-7f6fe19a5000 r--p 00037000 fd:00 16481 /lib/x86_64-linux-gnu/libnss_systemd.so.2
7f6fe19a5000-7f6fe19a6000 rw-p 0003a000 fd:00 16481 /lib/x86_64-linux-gnu/libnss_systemd.so.2
7f6fe19ae000-7f6fe19b0000 r--p 00000000 fd:00 107419 /usr/lib/x86_64-linux-gnu/sasl2/libntlm.so.2.0.25
7f6fe19b0000-7f6fe19b5000 r-xp 00002000 fd:00 107419 /usr/lib/x86_64-linux-gnu/sasl2/libntlm.so.2.0.25
7f6fe19b5000-7f6fe19b7000 r--p 00007000 fd:00 107419 /usr/lib/x86_64-linux-gnu/sasl2/libntlm.so.2.0.25
7f6fe19b7000-7f6fe19b8000 r--p 00008000 fd:00 107419 /usr/lib/x86_64-linux-gnu/sasl2/libntlm.so.2.0.25
7f6fe19b8000-7f6fe19b9000 rw-p 00009000 fd:00 107419 /usr/lib/x86_64-linux-gnu/sasl2/libntlm.so.2.0.25
7f6fe19b9000-7f6fe19bb000 r--p 00000000 fd:00 107417 /usr/lib/x86_64-linux-gnu/sasl2/libdigestmd5.so.2.0.25
7f6fe19bb000-7f6fe19c4000 r-xp 00002000 fd:00 107417 /usr/lib/x86_64-linux-gnu/sasl2/libdigestmd5.so.2.0.25
7f6fe19c4000-7f6fe19c7000 r--p 0000b000 fd:00 107417 /usr/lib/x86_64-linux-gnu/sasl2/libdigestmd5.so.2.0.25
7f6fe19c7000-7f6fe19c8000 r--p 0000d000 fd:00 107417 /usr/lib/x86_64-linux-gnu/sasl2/libdigestmd5.so.2.0.25
7f6fe19c8000-7f6fe19c9000 rw-p 0000e000 fd:00 107417 /usr/lib/x86_64-linux-gnu/sasl2/libdigestmd5.so.2.0.25
7f6fe19c9000-7f6fe19cb000 r--p 00000000 fd:00 105468 /usr/lib/x86_64-linux-gnu/sasl2/libsasldb.so.2.0.25
7f6fe19cb000-7f6fe19ce000 r-xp 00002000 fd:00 105468 /usr/lib/x86_64-linux-gnu/sasl2/libsasldb.so.2.0.25
7f6fe19ce000-7f6fe19d0000 r--p 00005000 fd:00 105468 /usr/lib/x86_64-linux-gnu/sasl2/libsasldb.so.2.0.25
7f6fe19d0000-7f6fe19d1000 r--p 00006000 fd:00 105468 /usr/lib/x86_64-linux-gnu/sasl2/libsasldb.so.2.0.25
7f6fe19d1000-7f6fe19d2000 rw-p 00007000 fd:00 105468 /usr/lib/x86_64-linux-gnu/sasl2/libsasldb.so.2.0.25
7f6fe19d2000-7f6fe19d3000 r--p 00000000 fd:00 107420 /usr/lib/x86_64-linux-gnu/sasl2/libplain.so.2.0.25
7f6fe19d3000-7f6fe19d6000 r-xp 00001000 fd:00 107420 /usr/lib/x86_64-linux-gnu/sasl2/libplain.so.2.0.25
7f6fe19d6000-7f6fe19d7000 r--p 00004000 fd:00 107420 /usr/lib/x86_64-linux-gnu/sasl2/libplain.so.2.0.25
7f6fe19d7000-7f6fe19d8000 r--p 00004000 fd:00 107420 /usr/lib/x86_64-linux-gnu/sasl2/libplain.so.2.0.25
7f6fe19d8000-7f6fe19d9000 rw-p 00005000 fd:00 107420 /usr/lib/x86_64-linux-gnu/sasl2/libplain.so.2.0.25
7f6fe19d9000-7f6fe19da000 r--p 00000000 fd:00 107416 /usr/lib/x86_64-linux-gnu/sasl2/libcrammd5.so.2.0.25
7f6fe19da000-7f6fe19dd000 r-xp 00001000 fd:00 107416 /usr/lib/x86_64-linux-gnu/sasl2/libcrammd5.so.2.0.25
7f6fe19dd000-7f6fe19de000 r--p 00004000 fd:00 107416 /usr/lib/x86_64-linux-gnu/sasl2/libcrammd5.so.2.0.25
7f6fe19de000-7f6fe19df000 r--p 00004000 fd:00 107416 /usr/lib/x86_64-linux-gnu/sasl2/libcrammd5.so.2.0.25
7f6fe19df000-7f6fe19e0000 rw-p 00005000 fd:00 107416 /usr/lib/x86_64-linux-gnu/sasl2/libcrammd5.so.2.0.25
7f6fe19e0000-7f6fe19e1000 r--p 00000000 fd:00 107415 /usr/lib/x86_64-linux-gnu/sasl2/libanonymous.so.2.0.25
7f6fe19e1000-7f6fe19e3000 r-xp 00001000 fd:00 107415 /usr/lib/x86_64-linux-gnu/sasl2/libanonymous.so.2.0.25
7f6fe19e3000-7f6fe19e4000 r--p 00003000 fd:00 107415 /usr/lib/x86_64-linux-gnu/sasl2/libanonymous.so.2.0.25
7f6fe19e4000-7f6fe19e5000 r--p 00003000 fd:00 107415 /usr/lib/x86_64-linux-gnu/sasl2/libanonymous.so.2.0.25
7f6fe19e5000-7f6fe19e6000 rw-p 00004000 fd:00 107415 /usr/lib/x86_64-linux-gnu/sasl2/libanonymous.so.2.0.25
7f6fe19e6000-7f6fe19e9000 r--p 00000000 fd:00 16298 /lib/x86_64-linux-gnu/libnss_files-2.31.so
7f6fe19e9000-7f6fe19f0000 r-xp 00003000 fd:00 16298 /lib/x86_64-linux-gnu/libnss_files-2.31.so
7f6fe19f0000-7f6fe19f2000 r--p 0000a000 fd:00 16298 /lib/x86_64-linux-gnu/libnss_files-2.31.so
7f6fe19f2000-7f6fe19f3000 r--p 0000b000 fd:00 16298 /lib/x86_64-linux-gnu/libnss_files-2.31.so
7f6fe19f3000-7f6fe19f4000 rw-p 0000c000 fd:00 16298 /lib/x86_64-linux-gnu/libnss_files-2.31.so
7f6fe19f4000-7f6fe19fa000 rw-p 00000000 00:00 0
7f6fe19fa000-7f6fe19fd000 r--p 00000000 fd:00 16302 /lib/x86_64-linux-gnu/libnss_nis-2.31.so
7f6fe19fd000-7f6fe1a05000 r-xp 00003000 fd:00 16302 /lib/x86_64-linux-gnu/libnss_nis-2.31.so
7f6fe1a05000-7f6fe1a07000 r--p 0000b000 fd:00 16302 /lib/x86_64-linux-gnu/libnss_nis-2.31.so
7f6fe1a07000-7f6fe1a08000 r--p 0000c000 fd:00 16302 /lib/x86_64-linux-gnu/libnss_nis-2.31.so
7f6fe1a08000-7f6fe1a09000 rw-p 0000d000 fd:00 16302 /lib/x86_64-linux-gnu/libnss_nis-2.31.so
7f6fe1a09000-7f6fe1a0b000 r--p 00000000 fd:00 16296 /lib/x86_64-linux-gnu/libnss_compat-2.31.so
7f6fe1a0b000-7f6fe1a12000 r-xp 00002000 fd:00 16296 /lib/x86_64-linux-gnu/libnss_compat-2.31.so
7f6fe1a12000-7f6fe1a13000 r--p 00009000 fd:00 16296 /lib/x86_64-linux-gnu/libnss_compat-2.31.so
7f6fe1a13000-7f6fe1a14000 r--p 00009000 fd:00 16296 /lib/x86_64-linux-gnu/libnss_compat-2.31.so
7f6fe1a14000-7f6fe1a15000 rw-p 0000a000 fd:00 16296 /lib/x86_64-linux-gnu/libnss_compat-2.31.so
7f6fe1a15000-7f6fe1a1a000 rw-p 00000000 00:00 0
7f6fe1a1a000-7f6fe1a1d000 r--p 00000000 fd:00 16227 /lib/x86_64-linux-gnu/libgcc_s.so.1
7f6fe1a1d000-7f6fe1a2f000 r-xp 00003000 fd:00 16227 /lib/x86_64-linux-gnu/libgcc_s.so.1
7f6fe1a2f000-7f6fe1a33000 r--p 00015000 fd:00 16227 /lib/x86_64-linux-gnu/libgcc_s.so.1
7f6fe1a33000-7f6fe1a34000 r--p 00018000 fd:00 16227 /lib/x86_64-linux-gnu/libgcc_s.so.1
7f6fe1a34000-7f6fe1a35000 rw-p 00019000 fd:00 16227 /lib/x86_64-linux-gnu/libgcc_s.so.1
7f6fe1a35000-7f6fe1a44000 r--p 00000000 fd:00 16288 /lib/x86_64-linux-gnu/libm-2.31.so
7f6fe1a44000-7f6fe1aeb000 r-xp 0000f000 fd:00 16288 /lib/x86_64-linux-gnu/libm-2.31.so
7f6fe1aeb000-7f6fe1b82000 r--p 000b6000 fd:00 16288 /lib/x86_64-linux-gnu/libm-2.31.so
7f6fe1b82000-7f6fe1b83000 r--p 0014c000 fd:00 16288 /lib/x86_64-linux-gnu/libm-2.31.so
7f6fe1b83000-7f6fe1b84000 rw-p 0014d000 fd:00 16288 /lib/x86_64-linux-gnu/libm-2.31.so
7f6fe1b84000-7f6fe1c1a000 r--p 00000000 fd:00 65971 /usr/lib/x86_64-linux-gnu/libstdc++.so.6.0.28
7f6fe1c1a000-7f6fe1d0b000 r-xp 00096000 fd:00 65971 /usr/lib/x86_64-linux-gnu/libstdc++.so.6.0.28
7f6fe1d0b000-7f6fe1d54000 r--p 00187000 fd:00 65971 /usr/lib/x86_64-linux-gnu/libstdc++.so.6.0.28
7f6fe1d54000-7f6fe1d55000 ---p 001d0000 fd:00 65971 /usr/lib/x86_64-linux-gnu/libstdc++.so.6.0.28
7f6fe1d55000-7f6fe1d60000 r--p 001d0000 fd:00 65971 /usr/lib/x86_64-linux-gnu/libstdc++.so.6.0.28
7f6fe1d60000-7f6fe1d63000 rw-p 001db000 fd:00 65971 /usr/lib/x86_64-linux-gnu/libstdc++.so.6.0.28
7f6fe1d63000-7f6fe1d68000 rw-p 00000000 00:00 0
7f6fe1d68000-7f6fe1d69000 r--p 00000000 fd:00 65687 /usr/lib/x86_64-linux-gnu/libicudata.so.66.1
7f6fe1d69000-7f6fe1d6a000 r-xp 00001000 fd:00 65687 /usr/lib/x86_64-linux-gnu/libicudata.so.66.1
7f6fe1d6a000-7f6fe3827000 r--p 00002000 fd:00 65687 /usr/lib/x86_64-linux-gnu/libicudata.so.66.1
7f6fe3827000-7f6fe3828000 r--p 01abe000 fd:00 65687 /usr/lib/x86_64-linux-gnu/libicudata.so.66.1
7f6fe3828000-7f6fe3829000 rw-p 01abf000 fd:00 65687 /usr/lib/x86_64-linux-gnu/libicudata.so.66.1
7f6fe3829000-7f6fe388e000 r--p 00000000 fd:00 65810 /usr/lib/x86_64-linux-gnu/libicuuc.so.66.1
7f6fe388e000-7f6fe3973000 r-xp 00065000 fd:00 65810 /usr/lib/x86_64-linux-gnu/libicuuc.so.66.1
7f6fe3973000-7f6fe39f9000 r--p 0014a000 fd:00 65810 /usr/lib/x86_64-linux-gnu/libicuuc.so.66.1
7f6fe39f9000-7f6fe39fa000 ---p 001d0000 fd:00 65810 /usr/lib/x86_64-linux-gnu/libicuuc.so.66.1
7f6fe39fa000-7f6fe3a0c000 r--p 001d0000 fd:00 65810 /usr/lib/x86_64-linux-gnu/libicuuc.so.66.1
7f6fe3a0c000-7f6fe3a0d000 rw-p 001e2000 fd:00 65810 /usr/lib/x86_64-linux-gnu/libicuuc.so.66.1
7f6fe3a0d000-7f6fe3a0f000 rw-p 00000000 00:00 0
7f6fe3a0f000-7f6fe3a10000 r--p 00000000 fd:00 16280 /lib/x86_64-linux-gnu/libdl-2.31.so
7f6fe3a10000-7f6fe3a12000 r-xp 00001000 fd:00 16280 /lib/x86_64-linux-gnu/libdl-2.31.so
7f6fe3a12000-7f6fe3a13000 r--p 00003000 fd:00 16280 /lib/x86_64-linux-gnu/libdl-2.31.so
7f6fe3a13000-7f6fe3a14000 r--p 00003000 fd:00 16280 /lib/x86_64-linux-gnu/libdl-2.31.so
7f6fe3a14000-7f6fe3a15000 rw-p 00004000 fd:00 16280 /lib/x86_64-linux-gnu/libdl-2.31.so
7f6fe3a15000-7f6fe3a1a000 r--p 00000000 fd:00 16294 /lib/x86_64-linux-gnu/libnsl-2.31.so
7f6fe3a1a000-7f6fe3a2a000 r-xp 00005000 fd:00 16294 /lib/x86_64-linux-gnu/libnsl-2.31.so
7f6fe3a2a000-7f6fe3a2e000 r--p 00015000 fd:00 16294 /lib/x86_64-linux-gnu/libnsl-2.31.so
7f6fe3a2e000-7f6fe3a2f000 r--p 00018000 fd:00 16294 /lib/x86_64-linux-gnu/libnsl-2.31.so
7f6fe3a2f000-7f6fe3a30000 rw-p 00019000 fd:00 16294 /lib/x86_64-linux-gnu/libnsl-2.31.so
7f6fe3a30000-7f6fe3a32000 rw-p 00000000 00:00 0
7f6fe3a32000-7f6fe3a52000 r--p 00000000 fd:00 66016 /usr/lib/x86_64-linux-gnu/libdb-5.3.so
7f6fe3a52000-7f6fe3b94000 r-xp 00020000 fd:00 66016 /usr/lib/x86_64-linux-gnu/libdb-5.3.so
7f6fe3b94000-7f6fe3bd9000 r--p 00162000 fd:00 66016 /usr/lib/x86_64-linux-gnu/libdb-5.3.so
7f6fe3bd9000-7f6fe3be0000 r--p 001a6000 fd:00 66016 /usr/lib/x86_64-linux-gnu/libdb-5.3.so
7f6fe3be0000-7f6fe3be1000 rw-p 001ad000 fd:00 66016 /usr/lib/x86_64-linux-gnu/libdb-5.3.so
7f6fe3be1000-7f6fe3be3000 rw-p 00000000 00:00 0
7f6fe3be3000-7f6fe3be7000 r--p 00000000 fd:00 16311 /lib/x86_64-linux-gnu/libresolv-2.31.so
7f6fe3be7000-7f6fe3bf7000 r-xp 00004000 fd:00 16311 /lib/x86_64-linux-gnu/libresolv-2.31.so
7f6fe3bf7000-7f6fe3bfa000 r--p 00014000 fd:00 16311 /lib/x86_64-linux-gnu/libresolv-2.31.so
7f6fe3bfa000-7f6fe3bfb000 ---p 00017000 fd:00 16311 /lib/x86_64-linux-gnu/libresolv-2.31.so
7f6fe3bfb000-7f6fe3bfc000 r--p 00017000 fd:00 16311 /lib/x86_64-linux-gnu/libresolv-2.31.so
7f6fe3bfc000-7f6fe3bfd000 rw-p 00018000 fd:00 16311 /lib/x86_64-linux-gnu/libresolv-2.31.so
7f6fe3bfd000-7f6fe3bff000 rw-p 00000000 00:00 0
7f6fe3bff000-7f6fe3c77000 r--p 00000000 fd:00 66294 /usr/lib/x86_64-linux-gnu/libcrypto.so.1.1
7f6fe3c77000-7f6fe3e12000 r-xp 00078000 fd:00 66294 /usr/lib/x86_64-linux-gnu/libcrypto.so.1.1
7f6fe3e12000-7f6fe3ea3000 r--p 00213000 fd:00 66294 /usr/lib/x86_64-linux-gnu/libcrypto.so.1.1
7f6fe3ea3000-7f6fe3ecf000 r--p 002a3000 fd:00 66294 /usr/lib/x86_64-linux-gnu/libcrypto.so.1.1
7f6fe3ecf000-7f6fe3ed1000 rw-p 002cf000 fd:00 66294 /usr/lib/x86_64-linux-gnu/libcrypto.so.1.1
7f6fe3ed1000-7f6fe3ed5000 rw-p 00000000 00:00 0
7f6fe3ed5000-7f6fe3ef1000 r--p 00000000 fd:00 66295 /usr/lib/x86_64-linux-gnu/libssl.so.1.1
7f6fe3ef1000-7f6fe3f40000 r-xp 0001c000 fd:00 66295 /usr/lib/x86_64-linux-gnu/libssl.so.1.1
7f6fe3f40000-7f6fe3f5a000 r--p 0006b000 fd:00 66295 /usr/lib/x86_64-linux-gnu/libssl.so.1.1
7f6fe3f5a000-7f6fe3f5b000 ---p 00085000 fd:00 66295 /usr/lib/x86_64-linux-gnu/libssl.so.1.1
7f6fe3f5b000-7f6fe3f64000 r--p 00085000 fd:00 66295 /usr/lib/x86_64-linux-gnu/libssl.so.1.1
7f6fe3f64000-7f6fe3f68000 rw-p 0008e000 fd:00 66295 /usr/lib/x86_64-linux-gnu/libssl.so.1.1
7f6fe3f68000-7f6fe3f8d000 r--p 00000000 fd:00 16278 /lib/x86_64-linux-gnu/libc-2.31.so
7f6fe3f8d000-7f6fe4105000 r-xp 00025000 fd:00 16278 /lib/x86_64-linux-gnu/libc-2.31.so
7f6fe4105000-7f6fe414f000 r--p 0019d000 fd:00 16278 /lib/x86_64-linux-gnu/libc-2.31.so
7f6fe414f000-7f6fe4150000 ---p 001e7000 fd:00 16278 /lib/x86_64-linux-gnu/libc-2.31.so
7f6fe4150000-7f6fe4153000 r--p 001e7000 fd:00 16278 /lib/x86_64-linux-gnu/libc-2.31.so
7f6fe4153000-7f6fe4156000 rw-p 001ea000 fd:00 16278 /lib/x86_64-linux-gnu/libc-2.31.so
7f6fe4156000-7f6fe415a000 rw-p 00000000 00:00 0
7f6fe415a000-7f6fe4161000 r--p 00000000 fd:00 16310 /lib/x86_64-linux-gnu/libpthread-2.31.so
7f6fe4161000-7f6fe4172000 r-xp 00007000 fd:00 16310 /lib/x86_64-linux-gnu/libpthread-2.31.so
7f6fe4172000-7f6fe4177000 r--p 00018000 fd:00 16310 /lib/x86_64-linux-gnu/libpthread-2.31.so
7f6fe4177000-7f6fe4178000 r--p 0001c000 fd:00 16310 /lib/x86_64-linux-gnu/libpthread-2.31.so
7f6fe4178000-7f6fe4179000 rw-p 0001d000 fd:00 16310 /lib/x86_64-linux-gnu/libpthread-2.31.so
7f6fe4179000-7f6fe417f000 rw-p 00000000 00:00 0
7f6fe417f000-7f6fe4182000 r--p 00000000 fd:00 65402 /usr/lib/x86_64-linux-gnu/libsasl2.so.2.0.25
7f6fe4182000-7f6fe4194000 r-xp 00003000 fd:00 65402 /usr/lib/x86_64-linux-gnu/libsasl2.so.2.0.25
7f6fe4194000-7f6fe419a000 r--p 00015000 fd:00 65402 /usr/lib/x86_64-linux-gnu/libsasl2.so.2.0.25
7f6fe419a000-7f6fe419b000 r--p 0001a000 fd:00 65402 /usr/lib/x86_64-linux-gnu/libsasl2.so.2.0.25
7f6fe419b000-7f6fe419c000 rw-p 0001b000 fd:00 65402 /usr/lib/x86_64-linux-gnu/libsasl2.so.2.0.25
7f6fe419e000-7f6fe419f000 r--p 00000000 fd:00 107418 /usr/lib/x86_64-linux-gnu/sasl2/liblogin.so.2.0.25
7f6fe419f000-7f6fe41a1000 r-xp 00001000 fd:00 107418 /usr/lib/x86_64-linux-gnu/sasl2/liblogin.so.2.0.25
7f6fe41a1000-7f6fe41a2000 r--p 00003000 fd:00 107418 /usr/lib/x86_64-linux-gnu/sasl2/liblogin.so.2.0.25
7f6fe41a2000-7f6fe41a3000 r--p 00003000 fd:00 107418 /usr/lib/x86_64-linux-gnu/sasl2/liblogin.so.2.0.25
7f6fe41a3000-7f6fe41a4000 rw-p 00004000 fd:00 107418 /usr/lib/x86_64-linux-gnu/sasl2/liblogin.so.2.0.25
7f6fe41a4000-7f6fe41ad000 r--p 00000000 fd:00 73080 /usr/lib/postfix/libpostfix-util.so
7f6fe41ad000-7f6fe41d6000 r-xp 00009000 fd:00 73080 /usr/lib/postfix/libpostfix-util.so
7f6fe41d6000-7f6fe41e5000 r--p 00032000 fd:00 73080 /usr/lib/postfix/libpostfix-util.so
7f6fe41e5000-7f6fe41e6000 ---p 00041000 fd:00 73080 /usr/lib/postfix/libpostfix-util.so
7f6fe41e6000-7f6fe41e7000 r--p 00041000 fd:00 73080 /usr/lib/postfix/libpostfix-util.so
7f6fe41e7000-7f6fe41e8000 rw-p 00042000 fd:00 73080 /usr/lib/postfix/libpostfix-util.so
7f6fe41e8000-7f6fe41e9000 rw-p 00000000 00:00 0
7f6fe41e9000-7f6fe41f9000 r--p 00000000 fd:00 73062 /usr/lib/postfix/libpostfix-global.so
7f6fe41f9000-7f6fe421d000 r-xp 00010000 fd:00 73062 /usr/lib/postfix/libpostfix-global.so
7f6fe421d000-7f6fe422c000 r--p 00034000 fd:00 73062 /usr/lib/postfix/libpostfix-global.so
7f6fe422c000-7f6fe422d000 ---p 00043000 fd:00 73062 /usr/lib/postfix/libpostfix-global.so
7f6fe422d000-7f6fe4230000 r--p 00043000 fd:00 73062 /usr/lib/postfix/libpostfix-global.so
7f6fe4230000-7f6fe4231000 rw-p 00046000 fd:00 73062 /usr/lib/postfix/libpostfix-global.so
7f6fe4231000-7f6fe4233000 r--p 00000000 fd:00 73061 /usr/lib/postfix/libpostfix-dns.so
7f6fe4233000-7f6fe4236000 r-xp 00002000 fd:00 73061 /usr/lib/postfix/libpostfix-dns.so
7f6fe4236000-7f6fe4238000 r--p 00005000 fd:00 73061 /usr/lib/postfix/libpostfix-dns.so
7f6fe4238000-7f6fe4239000 r--p 00006000 fd:00 73061 /usr/lib/postfix/libpostfix-dns.so
7f6fe4239000-7f6fe423a000 rw-p 00007000 fd:00 73061 /usr/lib/postfix/libpostfix-dns.so
7f6fe423a000-7f6fe4243000 r--p 00000000 fd:00 73078 /usr/lib/postfix/libpostfix-tls.so
7f6fe4243000-7f6fe4254000 r-xp 00009000 fd:00 73078 /usr/lib/postfix/libpostfix-tls.so
7f6fe4254000-7f6fe425c000 r--p 0001a000 fd:00 73078 /usr/lib/postfix/libpostfix-tls.so
7f6fe425c000-7f6fe425e000 r--p 00021000 fd:00 73078 /usr/lib/postfix/libpostfix-tls.so
7f6fe425e000-7f6fe425f000 rw-p 00023000 fd:00 73078 /usr/lib/postfix/libpostfix-tls.so
7f6fe425f000-7f6fe4262000 r--p 00000000 fd:00 73063 /usr/lib/postfix/libpostfix-master.so
7f6fe4262000-7f6fe4269000 r-xp 00003000 fd:00 73063 /usr/lib/postfix/libpostfix-master.so
7f6fe4269000-7f6fe426b000 r--p 0000a000 fd:00 73063 /usr/lib/postfix/libpostfix-master.so
7f6fe426b000-7f6fe426c000 r--p 0000b000 fd:00 73063 /usr/lib/postfix/libpostfix-master.so
7f6fe426c000-7f6fe426d000 rw-p 0000c000 fd:00 73063 /usr/lib/postfix/libpostfix-master.so
7f6fe426d000-7f6fe426f000 rw-p 00000000 00:00 0
7f6fe426f000-7f6fe4270000 r--p 00000000 fd:00 16241 /lib/x86_64-linux-gnu/ld-2.31.so
7f6fe4270000-7f6fe4293000 r-xp 00001000 fd:00 16241 /lib/x86_64-linux-gnu/ld-2.31.so
7f6fe4293000-7f6fe429b000 r--p 00024000 fd:00 16241 /lib/x86_64-linux-gnu/ld-2.31.so
7f6fe429c000-7f6fe429d000 r--p 0002c000 fd:00 16241 /lib/x86_64-linux-gnu/ld-2.31.so
7f6fe429d000-7f6fe429e000 rw-p 0002d000 fd:00 16241 /lib/x86_64-linux-gnu/ld-2.31.so
7f6fe429e000-7f6fe429f000 rw-p 00000000 00:00 0
7ffdef454000-7ffdef475000 rw-p 00000000 00:00 0 [stack]
7ffdef478000-7ffdef47b000 r--p 00000000 00:00 0 [vvar]
7ffdef47b000-7ffdef47c000 r-xp 00000000 00:00 0 [vdso]
ffffffffff600000-ffffffffff601000 --xp 00000000 00:00 0 [vsyscall]