Reads CPU attributes

Enumerates kernel/hardware configuration

Reads contents of /sys virtual filesystem to enumerate system information.

Reads runtime system information

Reads data from /proc virtual filesystem.

Writes file to tmp directory

Malware often drops required files in the /tmp directory.