As to linux to know the source of the process?

How to know which file/script runs the process ? In Windows just open the file location in Linux ?
Need to know where this malware starts cryptonight
mysite 224079 3.9 0.0 1883876 46716 ? Sl Sep26 3186:59 ./httpd -a cryptonight -o -u
June 10th 19 at 16:57
2 answers
June 10th 19 at 16:59
To see where is the executable file of the process:
ll /proc/{PID}/exe
To see who its parent is:
ps -o ppid= -p {PID}
thank you - Rickey.Morar commented on June 10th 19 at 17:02
June 10th 19 at 17:01
1. First, the withdrawal of processes different options on the keys as anyone should. For example:
man ps
2. In order to know where exactly is the file, you can use:
pwdx PID
where PID is the process number.
Can and using lsof to find out:
lsof -p PID | grep cwd
where PID is the same process number.
Thank you - Rickey.Morar commented on June 10th 19 at 17:04

Find more questions by tags AntivirusesLinux