Page 1 of 1

Suspicious process running under user cpanellogaholic

Posted: 12 Dec 2013, 22:27
by marnslee
Hi since cPanel has upgraded, we are now using cpanel logaholic (which looks really good) we are getting Suspicious process running under user cpanellogaholic, I dont want to ignore the executable /usr/local/cpanel/3rdparty/php/53/bin/php-cgi
is there any other way to stop the warnings?

thanks in advance,
Executable:

/usr/local/cpanel/3rdparty/php/53/bin/php-cgi

Command Line (often faked in exploits):

/usr/local/cpanel/3rdparty/php/53/bin/php-cgi -d display_errors=0 -d log_errors=1 -d error_log=/usr/local/cpanel/logs/error_log /usr/local/cpanel/base/3rdparty/Logaholic/update.php

Network connections by the process (if any):

tcp: ...............:55666 -> 89.187.142.144:80

Files open by the process (if any):

/var/cpanel/locale/themes/x3/en.cdb
/usr/local/cpanel/base/3rdparty/Logaholic/components/geoip/GeoLiteCity.dat
/var/cpanel/userhomes/cpanellogaholic/................../.................._update_progress.lwa.log
/usr/local/apache/domlogs/..................bkup (deleted)

Re: Suspicious process running under user cpanellogaholic

Posted: 18 Feb 2015, 20:51
by jmginer
+1

Code: Select all


Time:    Wed Feb 18 21:08:29 2015 +0100
PID:     7905 (Parent PID:7904)
Account: cpanellogaholic
Uptime:  119 seconds


Executable:

/usr/local/cpanel/3rdparty/php/54/bin/php-cgi


Command Line (often faked in exploits):

/usr/local/cpanel/3rdparty/php/54/bin/php-cgi -d display_errors=0 -d log_errors=1 -d error_log=/usr/local/cpanel/logs/error_log /usr/local/cpanel/base/3rdparty/Logaholic/update-php


Network connections by the process (if any):

tcp: 5-134-117-200:48378 -> 89-187-142-144:80


Files open by the process (if any):

/var/cpanel/locale/themes/paper_lantern/en-cdb
/var/cpanel/locale/themes/paper_lantern/es-cdb
/usr/local/cpanel/base/3rdparty/Logaholic/components/geoip/GeoLiteCity-dat
/var/cpanel/userhomes/cpanellogaholic/xxx- com/xxx- com_update_progress-lwa-log
/usr/local/apache/domlogs/xxx- com


Memory maps by the process (if any):

00400000-010ad000 r-xp 00000000 fd:02 36977032                           /usr/local/cpanel/3rdparty/php/54/bin/php-cgi
012ac000-012c4000 rw-p 00cac000 fd:02 36977032                           /usr/local/cpanel/3rdparty/php/54/bin/php-cgi
012c4000-012e7000 rw-p 00000000 00:00 0 
01b88000-027a4000 rw-p 00000000 00:00 0                                  [heap]
7f797d10e000-7f797d113000 r-xp 00000000 fd:02 33469444                   /lib64/libnss_dns-2-12-so
7f797d113000-7f797d312000 ---p 00005000 fd:02 33469444                   /lib64/libnss_dns-2-12-so
7f797d312000-7f797d313000 r--p 00004000 fd:02 33469444                   /lib64/libnss_dns-2-12-so
7f797d313000-7f797d314000 rw-p 00005000 fd:02 33469444                   /lib64/libnss_dns-2-12-so
7f797d314000-7f797d355000 rw-p 00000000 00:00 0 
7f797d381000-7f797d3c2000 rw-p 00000000 00:00 0 
7f797d3d8000-7f797d419000 rw-p 00000000 00:00 0 
7f797d419000-7f797d425000 r-xp 00000000 fd:02 33469258                   /lib64/libnss_files-2-12-so
7f797d425000-7f797d625000 ---p 0000c000 fd:02 33469258                   /lib64/libnss_files-2-12-so
7f797d625000-7f797d626000 r--p 0000c000 fd:02 33469258                   /lib64/libnss_files-2-12-so
7f797d626000-7f797d627000 rw-p 0000d000 fd:02 33469258                   /lib64/libnss_files-2-12-so
7f797d627000-7f797d738000 r-xp 00000000 fd:02 36849795                   /usr/local/cpanel/3rdparty/php/54/ioncube/ioncube_loader_lin_5-4-so
7f797d738000-7f797d837000 ---p 00111000 fd:02 36849795                   /usr/local/cpanel/3rdparty/php/54/ioncube/ioncube_loader_lin_5-4-so
7f797d837000-7f797d847000 rw-p 00110000 fd:02 36849795                   /usr/local/cpanel/3rdparty/php/54/ioncube/ioncube_loader_lin_5-4-so
7f797d847000-7f797d84a000 rw-p 00000000 00:00 0 
7f797d84a000-7f797d867000 r-xp 00000000 fd:02 33469277                   /lib64/libselinux-so-1
7f797d867000-7f797da66000 ---p 0001d000 fd:02 33469277                   /lib64/libselinux-so-1
7f797da66000-7f797da67000 r--p 0001c000 fd:02 33469277                   /lib64/libselinux-so-1
7f797da67000-7f797da68000 rw-p 0001d000 fd:02 33469277                   /lib64/libselinux-so-1
7f797da68000-7f797da69000 rw-p 00000000 00:00 0 
7f797da69000-7f797da82000 r-xp 00000000 fd:02 59510062                   /usr/lib64/libsasl2-so-2-0-23
7f797da82000-7f797dc81000 ---p 00019000 fd:02 59510062                   /usr/lib64/libsasl2-so-2-0-23
7f797dc81000-7f797dc82000 r--p 00018000 fd:02 59510062                   /usr/lib64/libsasl2-so-2-0-23
7f797dc82000-7f797dc83000 rw-p 00019000 fd:02 59510062                   /usr/lib64/libsasl2-so-2-0-23
7f797dc83000-7f797dc91000 r-xp 00000000 fd:02 33469240                   /lib64/liblber-2-4-so-2-10-2
7f797dc91000-7f797de90000 ---p 0000e000 fd:02 33469240                   /lib64/liblber-2-4-so-2-10-2
7f797de90000-7f797de91000 r--p 0000d000 fd:02 33469240                   /lib64/liblber-2-4-so-2-10-2
7f797de91000-7f797de92000 rw-p 0000e000 fd:02 33469240                   /lib64/liblber-2-4-so-2-10-2
7f797de92000-7f797de94000 r-xp 00000000 fd:02 59510675                   /usr/lib64/libXau-so-6-0-0
7f797de94000-7f797e094000 ---p 00002000 fd:02 59510675                   /usr/lib64/libXau-so-6-0-0
7f797e094000-7f797e095000 rw-p 00002000 fd:02 59510675                   /usr/lib64/libXau-so-6-0-0
7f797e095000-7f797e097000 r-xp 00000000 fd:02 33469257                   /lib64/libkeyutils-so-1-3
7f797e097000-7f797e296000 ---p 00002000 fd:02 33469257                   /lib64/libkeyutils-so-1-3
7f797e296000-7f797e297000 r--p 00001000 fd:02 33469257                   /lib64/libkeyutils-so-1-3
7f797e297000-7f797e298000 rw-p 00002000 fd:02 33469257                   /lib64/libkeyutils-so-1-3
7f797e298000-7f797e2a2000 r-xp 00000000 fd:02 33469426                   /lib64/libkrb5support-so-0-1
7f797e2a2000-7f797e4a1000 ---p 0000a000 fd:02 33469426                   /lib64/libkrb5support-so-0-1
7f797e4a1000-7f797e4a2000 r--p 00009000 fd:02 33469426                   /lib64/libkrb5support-so-0-1
7f797e4a2000-7f797e4a3000 rw-p 0000a000 fd:02 33469426                   /lib64/libkrb5support-so-0-1
7f797e4a3000-7f797e4ca000 r-xp 00000000 fd:02 59510380                   /usr/lib64/libssh2-so-1-0-1
7f797e4ca000-7f797e6c9000 ---p 00027000 fd:02 59510380                   /usr/lib64/libssh2-so-1-0-1
7f797e6c9000-7f797e6cb000 rw-p 00026000 fd:02 59510380                   /usr/lib64/libssh2-so-1-0-1
7f797e6cb000-7f797e704000 r-xp 00000000 fd:02 33469306                   /lib64/libnspr4-so
7f797e704000-7f797e904000 ---p 00039000 fd:02 33469306                   /lib64/libnspr4-so
7f797e904000-7f797e905000 r--p 00039000 fd:02 33469306                   /lib64/libnspr4-so
7f797e905000-7f797e907000 rw-p 0003a000 fd:02 33469306                   /lib64/libnspr4-so
7f797e907000-7f797e909000 rw-p 00000000 00:00 0 
7f797e909000-7f797e90d000 r-xp 00000000 fd:02 33469324                   /lib64/libplc4-so
7f797e90d000-7f797eb0c000 ---p 00004000 fd:02 33469324                   /lib64/libplc4-so
7f797eb0c000-7f797eb0d000 r--p 00003000 fd:02 33469324                   /lib64/libplc4-so
7f797eb0d000-7f797eb0e000 rw-p 00004000 fd:02 33469324                   /lib64/libplc4-so
7f797eb0e000-7f797eb11000 r-xp 00000000 fd:02 33469397                   /lib64/libplds4-so
7f797eb11000-7f797ed10000 ---p 00003000 fd:02 33469397                   /lib64/libplds4-so
7f797ed10000-7f797ed11000 r--p 00002000 fd:02 33469397                   /lib64/libplds4-so
7f797ed11000-7f797ed12000 rw-p 00003000 fd:02 33469397                   /lib64/libplds4-so
7f797ed12000-7f797ed37000 r-xp 00000000 fd:02 59514116                   /usr/lib64/libnssutil3-so
7f797ed37000-7f797ef37000 ---p 00025000 fd:02 59514116                   /usr/lib64/libnssutil3-so
7f797ef37000-7f797ef3d000 r--p 00025000 fd:02 59514116                   /usr/lib64/libnssutil3-so
7f797ef3d000-7f797ef3e000 rw-p 0002b000 fd:02 59514116                   /usr/lib64/libnssutil3-so
7f797ef3e000-7f797f075000 r-xp 00000000 fd:02 59513686                   /usr/lib64/libnss3-so
7f797f075000-7f797f274000 ---p 00137000 fd:02 59513686                   /usr/lib64/libnss3-so
7f797f274000-7f797f279000 r--p 00136000 fd:02 59513686                   /usr/lib64/libnss3-so
7f797f279000-7f797f27b000 rw-p 0013b000 fd:02 59513686                   /usr/lib64/libnss3-so
7f797f27b000-7f797f27d000 rw-p 00000000 00:00 0 
7f797f27d000-7f797f2a5000 r-xp 00000000 fd:02 59510735                   /usr/lib64/libsmime3-so
7f797f2a5000-7f797f4a4000 ---p 00028000 fd:02 59510735                   /usr/lib64/libsmime3-so
7f797f4a4000-7f797f4a8000 r--p 00027000 fd:02 59510735                   /usr/lib64/libsmime3-so
7f797f4a8000-7f797f4a9000 rw-p 0002b000 fd:02 59510735                   /usr/lib64/libsmime3-so
7f797f4a9000-7f797f4e4000 r-xp 00000000 fd:02 59510656                   /usr/lib64/libssl3-so
7f797f4e4000-7f797f6e3000 ---p 0003b000 fd:02 59510656                   /usr/lib64/libssl3-so
7f797f6e3000-7f797f6e6000 r--p 0003a000 fd:02 59510656                   /usr/lib64/libssl3-so
7f797f6e6000-7f797f6e7000 rw-p 0003d000 fd:02 59510656                   /usr/lib64/libssl3-so
7f797f6e7000-7f797f6e8000 rw-p 00000000 00:00 0 
7f797f6e8000-7f797f735000 r-xp 00000000 fd:02 33468994                   /lib64/libldap-2-4-so-2-10-2
7f797f735000-7f797f934000 ---p 0004d000 fd:02 33468994                   /lib64/libldap-2-4-so-2-10-2
7f797f934000-7f797f936000 r--p 0004c000 fd:02 33468994                   /lib64/libldap-2-4-so-2-10-2
7f797f936000-7f797f938000 rw-p 0004e000 fd:02 33468994                   /lib64/libldap-2-4-so-2-10-2
7f797f938000-7f797f96a000 r-xp 00000000 fd:02 33469261                   /lib64/libidn-so-11-6-1
7f797f96a000-7f797fb69000 ---p 00032000 fd:02 33469261                   /lib64/libidn-so-11-6-1
7f797fb69000-7f797fb6a000 rw-p 00031000 fd:02 33469261                   /lib64/libidn-so-11-6-1
7f797fb6a000-7f797fb87000 r-xp 00000000 fd:02 59514073                   /usr/lib64/libxcb-so-1-1-0
7f797fb87000-7f797fd87000 ---p 0001d000 fd:02 59514073                   /usr/lib64/libxcb-so-1-1-0
7f797fd87000-7f797fd88000 rw-p 0001d000 fd:02 59514073                   /usr/lib64/libxcb-so-1-1-0
7f797fd88000-7f797fd9f000 r-xp 00000000 fd:02 33469237                   /lib64/libaudit-so-1-0-0
7f797fd9f000-7f797ff9f000 ---p 00017000 fd:02 33469237                   /lib64/libaudit-so-1-0-0
7f797ff9f000-7f797ffa0000 r--p 00017000 fd:02 33469237                   /lib64/libaudit-so-1-0-0
7f797ffa0000-7f797ffab000 rw-p 00018000 fd:02 33469237                   /lib64/libaudit-so-1-0-0
7f797ffab000-7f797ffc2000 r-xp 00000000 fd:02 33469238                   /lib64/libpthread-2-12-so
7f797ffc2000-7f79801c2000 ---p 00017000 fd:02 33469238                   /lib64/libpthread-2-12-so
7f79801c2000-7f79801c3000 r--p 00017000 fd:02 33469238                   /lib64/libpthread-2-12-so
7f79801c3000-7f79801c4000 rw-p 00018000 fd:02 33469238                   /lib64/libpthread-2-12-so
7f79801c4000-7f79801c8000 rw-p 00000000 00:00 0 
7f79801c8000-7f79801ca000 r-xp 00000000 fd:02 33469319                   /lib64/libfreebl3-so
7f79801ca000-7f79803c9000 ---p 00002000 fd:02 33469319                   /lib64/libfreebl3-so
7f79803c9000-7f79803ca000 r--p 00001000 fd:02 33469319                   /lib64/libfreebl3-so
7f79803ca000-7f79803cb000 rw-p 00002000 fd:02 33469319                   /lib64/libfreebl3-so
7f79803cb000-7f79803e1000 r-xp 00000000 fd:02 33469199                   /lib64/libresolv-2-12-so
7f79803e1000-7f79805e1000 ---p 00016000 fd:02 33469199                   /lib64/libresolv-2-12-so
7f79805e1000-7f79805e2000 r--p 00016000 fd:02 33469199                   /lib64/libresolv-2-12-so
7f79805e2000-7f79805e3000 rw-p 00017000 fd:02 33469199                   /lib64/libresolv-2-12-so
7f79805e3000-7f79805e5000 rw-p 00000000 00:00 0 
7f79805e5000-7f798076f000 r-xp 00000000 fd:02 33469242                   /lib64/libc-2-12-so
7f798076f000-7f798096f000 ---p 0018a000 fd:02 33469242                   /lib64/libc-2-12-so
7f798096f000-7f7980973000 r--p 0018a000 fd:02 33469242                   /lib64/libc-2-12-so
7f7980973000-7f7980974000 rw-p 0018e000 fd:02 33469242                   /lib64/libc-2-12-so
7f7980974000-7f7980979000 rw-p 00000000 00:00 0 
7f7980979000-7f7980b37000 r-xp 00000000 fd:02 42735688                   /usr/local/cpanel/3rdparty/lib64/libxml2-so-2-9-1
7f7980b37000-7f7980d37000 ---p 001be000 fd:02 42735688                   /usr/local/cpanel/3rdparty/lib64/libxml2-so-2-9-1
7f7980d37000-7f7980d41000 rw-p 001be000 fd:02 42735688                   /usr/local/cpanel/3rdparty/lib64/libxml2-so-2-9-1
7f7980d41000-7f7980d42000 rw-p 00000000 00:00 0 
7f7980d42000-7f7980d9a000 r-xp 00000000 fd:02 43416468                   /usr/local/cpanel/3rdparty/lib64/mysql/libmysqlclient-so-16-0-0
7f7980d9a000-7f7980f99000 ---p 00058000 fd:02 43416468                   /usr/local/cpanel/3rdparty/lib64/mysql/libmysqlclient-so-16-0-0
7f7980f99000-7f7980fcc000 rw-p 00057000 fd:02 43416468                   /usr/local/cpanel/3rdparty/lib64/mysql/libmysqlclient-so-16-0-0
7f7980fcc000-7f7980fcd000 rw-p 00000000 00:00 0 
7f7980fcd000-7f7980fd0000 r-xp 00000000 fd:02 33469401                   /lib64/libcom_err-so-2-1
7f7980fd0000-7f79811cf000 ---p 00003000 fd:02 33469401                   /lib64/libcom_err-so-2-1
7f79811cf000-7f79811d0000 r--p 00002000 fd:02 33469401                   /lib64/libcom_err-so-2-1
7f79811d0000-7f79811d1000 rw-p 00003000 fd:02 33469401                   /lib64/libcom_err-so-2-1
7f79811d1000-7f79811fa000 r-xp 00000000 fd:02 33469289                   /lib64/libk5crypto-so-3-1
7f79811fa000-7f79813fa000 ---p 00029000 fd:02 33469289                   /lib64/libk5crypto-so-3-1
7f79813fa000-7f79813fb000 r--p 00029000 fd:02 33469289                   /lib64/libk5crypto-so-3-1
7f79813fb000-7f79813fc000 rw-p 0002a000 fd:02 33469289                   /lib64/libk5crypto-so-3-1
7f79813fc000-7f79813fd000 rw-p 00000000 00:00 0 
7f79813fd000-7f79814d8000 r-xp 00000000 fd:02 33469276                   /lib64/libkrb5-so-3-3
7f79814d8000-7f79816d7000 ---p 000db000 fd:02 33469276                   /lib64/libkrb5-so-3-3
7f79816d7000-7f79816e1000 r--p 000da000 fd:02 33469276                   /lib64/libkrb5-so-3-3
7f79816e1000-7f79816e3000 rw-p 000e4000 fd:02 33469276                   /lib64/libkrb5-so-3-3
7f79816e3000-7f7981724000 r-xp 00000000 fd:02 33468993                   /lib64/libgssapi_krb5-so-2-2
7f7981724000-7f7981924000 ---p 00041000 fd:02 33468993                   /lib64/libgssapi_krb5-so-2-2
7f7981924000-7f7981925000 r--p 00041000 fd:02 33468993                   /lib64/libgssapi_krb5-so-2-2
7f7981925000-7f7981927000 rw-p 00042000 fd:02 33468993                   /lib64/libgssapi_krb5-so-2-2
7f7981927000-7f798193d000 r-xp 00000000 fd:02 33469393                   /lib64/libnsl-2-12-so
7f798193d000-7f7981b3c000 ---p 00016000 fd:02 33469393                   /lib64/libnsl-2-12-so
7f7981b3c000-7f7981b3d000 r--p 00015000 fd:02 33469393                   /lib64/libnsl-2-12-so
7f7981b3d000-7f7981b3e000 rw-p 00016000 fd:02 33469393                   /lib64/libnsl-2-12-so
7f7981b3e000-7f7981b40000 rw-p 00000000 00:00 0 
7f7981b40000-7f7981b42000 r-xp 00000000 fd:02 33468984                   /lib64/libdl-2-12-so
7f7981b42000-7f7981d42000 ---p 00002000 fd:02 33468984                   /lib64/libdl-2-12-so
7f7981d42000-7f7981d43000 r--p 00002000 fd:02 33468984                   /lib64/libdl-2-12-so
7f7981d43000-7f7981d44000 rw-p 00003000 fd:02 33468984                   /lib64/libdl-2-12-so
7f7981d44000-7f7981dc7000 r-xp 00000000 fd:02 33469388                   /lib64/libm-2-12-so
7f7981dc7000-7f7981fc6000 ---p 00083000 fd:02 33469388                   /lib64/libm-2-12-so
7f7981fc6000-7f7981fc7000 r--p 00082000 fd:02 33469388                   /lib64/libm-2-12-so
7f7981fc7000-7f7981fc8000 rw-p 00083000 fd:02 33469388                   /lib64/libm-2-12-so
7f7981fc8000-7f798201a000 r-xp 00000000 fd:02 42735685                   /usr/local/cpanel/3rdparty/lib64/libpcre-so-1-2-4
7f798201a000-7f7982219000 ---p 00052000 fd:02 42735685                   /usr/local/cpanel/3rdparty/lib64/libpcre-so-1-2-4
7f7982219000-7f798221a000 rw-p 00051000 fd:02 42735685                   /usr/local/cpanel/3rdparty/lib64/libpcre-so-1-2-4
7f798221a000-7f798222a000 r-xp 00000000 fd:02 33469315                   /lib64/libbz2-so-1-0-4
7f798222a000-7f7982429000 ---p 00010000 fd:02 33469315                   /lib64/libbz2-so-1-0-4
7f7982429000-7f798242b000 rw-p 0000f000 fd:02 33469315                   /lib64/libbz2-so-1-0-4
7f798242b000-7f798247d000 r-xp 00000000 fd:02 59510328                   /usr/lib64/libcurl-so-4-1-1
7f798247d000-7f798267c000 ---p 00052000 fd:02 59510328                   /usr/lib64/libcurl-so-4-1-1
7f798267c000-7f798267f000 rw-p 00051000 fd:02 59510328                   /usr/lib64/libcurl-so-4-1-1
7f798267f000-7f79826be000 r-xp 00000000 fd:02 59509614                   /usr/lib64/libjpeg-so-62-0-0
7f79826be000-7f79828be000 ---p 0003f000 fd:02 59509614                   /usr/lib64/libjpeg-so-62-0-0
7f79828be000-7f79828bf000 rw-p 0003f000 fd:02 59509614                   /usr/lib64/libjpeg-so-62-0-0
7f79828bf000-7f79828cf000 rw-p 00000000 00:00 0 
7f79828cf000-7f79828f4000 r-xp 00000000 fd:02 59509619                   /usr/lib64/libpng12-so-0-49-0
7f79828f4000-7f7982af4000 ---p 00025000 fd:02 59509619                   /usr/lib64/libpng12-so-0-49-0
7f7982af4000-7f7982af5000 rw-p 00025000 fd:02 59509619                   /usr/lib64/libpng12-so-0-49-0
7f7982af5000-7f7982b06000 r-xp 00000000 fd:02 59510875                   /usr/lib64/libXpm-so-4-11-0
7f7982b06000-7f7982d05000 ---p 00011000 fd:02 59510875                   /usr/lib64/libXpm-so-4-11-0
7f7982d05000-7f7982d06000 rw-p 00010000 fd:02 59510875                   /usr/lib64/libXpm-so-4-11-0
7f7982d06000-7f7982e3d000 r-xp 00000000 fd:02 59510078                   /usr/lib64/libX11-so-6-3-0
7f7982e3d000-7f798303d000 ---p 00137000 fd:02 59510078                   /usr/lib64/libX11-so-6-3-0
7f798303d000-7f7983043000 rw-p 00137000 fd:02 59510078                   /usr/lib64/libX11-so-6-3-0
7f7983043000-7f79830fd000 r-xp 00000000 fd:02 42735716                   /usr/local/cpanel/3rdparty/lib64/libfreetype-so-6-9-0
7f79830fd000-7f79832fd000 ---p 000ba000 fd:02 42735716                   /usr/local/cpanel/3rdparty/lib64/libfreetype-so-6-9-0
7f79832fd000-7f7983303000 rw-p 000ba000 fd:02 42735716                   /usr/local/cpanel/3rdparty/lib64/libfreetype-so-6-9-0
7f7983303000-7f798330f000 r-xp 00000000 fd:02 33469220                   /lib64/libpam-so-0-82-2
7f798330f000-7f798350f000 ---p 0000c000 fd:02 33469220                   /lib64/libpam-so-0-82-2
7f798350f000-7f7983510000 r--p 0000c000 fd:02 33469220                   /lib64/libpam-so-0-82-2
7f7983510000-7f7983511000 rw-p 0000d000 fd:02 33469220                   /lib64/libpam-so-0-82-2
7f7983511000-7f7983573000 r-xp 00000000 fd:02 59514051                   /usr/lib64/libssl-so-1-0-1e
7f7983573000-7f7983772000 ---p 00062000 fd:02 59514051                   /usr/lib64/libssl-so-1-0-1e
7f7983772000-7f7983776000 r--p 00061000 fd:02 59514051                   /usr/lib64/libssl-so-1-0-1e
7f7983776000-7f798377d000 rw-p 00065000 fd:02 59514051                   /usr/lib64/libssl-so-1-0-1e
7f798377d000-7f7983936000 r-xp 00000000 fd:02 59510653                   /usr/lib64/libcrypto-so-1-0-1e
7f7983936000-7f7983b35000 ---p 001b9000 fd:02 59510653                   /usr/lib64/libcrypto-so-1-0-1e
7f7983b35000-7f7983b50000 r--p 001b8000 fd:02 59510653                   /usr/lib64/libcrypto-so-1-0-1e
7f7983b50000-7f7983b5c000 rw-p 001d3000 fd:02 59510653                   /usr/lib64/libcrypto-so-1-0-1e
7f7983b5c000-7f7983b60000 rw-p 00000000 00:00 0 
7f7983b60000-7f7983b69000 r-xp 00000000 fd:02 59509642                   /usr/lib64/libltdl-so-7-2-1
7f7983b69000-7f7983d68000 ---p 00009000 fd:02 59509642                   /usr/lib64/libltdl-so-7-2-1
7f7983d68000-7f7983d69000 rw-p 00008000 fd:02 59509642                   /usr/lib64/libltdl-so-7-2-1
7f7983d69000-7f7983da3000 r-xp 00000000 fd:02 42735700                   /usr/local/cpanel/3rdparty/lib64/libmcrypt-so-4-4-8
7f7983da3000-7f7983fa2000 ---p 0003a000 fd:02 42735700                   /usr/local/cpanel/3rdparty/lib64/libmcrypt-so-4-4-8
7f7983fa2000-7f7983fa6000 rw-p 00039000 fd:02 42735700                   /usr/local/cpanel/3rdparty/lib64/libmcrypt-so-4-4-8
7f7983fa6000-7f7983fab000 rw-p 00000000 00:00 0 
7f7983fab000-7f7983fb2000 r-xp 00000000 fd:02 33469256                   /lib64/librt-2-12-so
7f7983fb2000-7f79841b1000 ---p 00007000 fd:02 33469256                   /lib64/librt-2-12-so
7f79841b1000-7f79841b2000 r--p 00006000 fd:02 33469256                   /lib64/librt-2-12-so
7f79841b2000-7f79841b3000 rw-p 00007000 fd:02 33469256                   /lib64/librt-2-12-so
7f79841b3000-7f79841e0000 r-xp 00000000 fd:02 42735696                   /usr/local/cpanel/3rdparty/lib64/libpq-so-5-3
7f79841e0000-7f79843df000 ---p 0002d000 fd:02 42735696                   /usr/local/cpanel/3rdparty/lib64/libpq-so-5-3
7f79843df000-7f79843e2000 rw-p 0002c000 fd:02 42735696                   /usr/local/cpanel/3rdparty/lib64/libpq-so-5-3
7f79843e2000-7f79843f7000 r-xp 00000000 fd:02 33469213                   /lib64/libz-so-1-2-3
7f79843f7000-7f79845f6000 ---p 00015000 fd:02 33469213                   /lib64/libz-so-1-2-3
7f79845f6000-7f79845f7000 r--p 00014000 fd:02 33469213                   /lib64/libz-so-1-2-3
7f79845f7000-7f79845f8000 rw-p 00015000 fd:02 33469213                   /lib64/libz-so-1-2-3
7f79845f8000-7f79845ff000 r-xp 00000000 fd:02 33469325                   /lib64/libcrypt-2-12-so
7f79845ff000-7f79847ff000 ---p 00007000 fd:02 33469325                   /lib64/libcrypt-2-12-so
7f79847ff000-7f7984800000 r--p 00007000 fd:02 33469325                   /lib64/libcrypt-2-12-so
7f7984800000-7f7984801000 rw-p 00008000 fd:02 33469325                   /lib64/libcrypt-2-12-so
7f7984801000-7f798482f000 rw-p 00000000 00:00 0 
7f798482f000-7f798484f000 r-xp 00000000 fd:02 33469278                   /lib64/ld-2-12-so
7f7984854000-7f7984a3e000 rw-p 00000000 00:00 0 
7f7984a4d000-7f7984a4e000 rw-p 00000000 00:00 0 
7f7984a4e000-7f7984a4f000 r--p 0001f000 fd:02 33469278                   /lib64/ld-2-12-so
7f7984a4f000-7f7984a50000 rw-p 00020000 fd:02 33469278                   /lib64/ld-2-12-so
7f7984a50000-7f7984a51000 rw-p 00000000 00:00 0 
7fff64fa8000-7fff64fbd000 rw-p 00000000 00:00 0                          [stack]
7fff64ffe000-7fff65000000 r-xp 00000000 00:00 0                          [vdso]
ffffffffff600000-ffffffffff601000 r-xp 00000000 00:00 0                  [vsyscall]