• Crypto mining would be symmetrical up/down though. This is only a small amount of data downloaded, and a huge amount uploaded. That looks more like a botnet attack, where an attacker hacked the machine and pointed it at a target, then just left it to run.