Threat Hunting Mining Behaviour - Question 1

There's a script to "implement the miner" and the miner itself - the first one is the one. If you can't spot the miner by it's filename, find it by manually looking at all files. Otherwise there's no help one could give without giving the solution.