Changes its process name

Executes dropped EXE

Modifies Watchdog functionality

Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

Reads system routing table

Gets active network interfaces from /proc virtual filesystem.