A malicious file has been identified in a sandbox analysis tool. Which piece of information is needed to search for additional downloads of this file by other hosts?

The correct answer is D. file hash value. A file hash value uniquely identifies the content of a file by generating a cryptographic hash, such as an MD5 or SHA-256 hash. By using the file's hash value, security analysts can perform searches across various systems, databases, or threat intelligence platforms to identify…

Submitted by fatema_kw· Mar 6, 2026Security Monitoring

Question

Options

Afile type
Bfile size
Cfile name
Dfile hash value

How the community answered

(37 responses)

A
3% (1)
C
3% (1)
D
95% (35)

Explanation

A file hash value uniquely identifies the content of a file by generating a cryptographic hash, such as an MD5 or SHA-256 hash. By using the file's hash value, security analysts can perform searches across various systems, databases, or threat intelligence platforms to identify other instances or downloads of the same file. This method helps in tracking the spread or presence of the specific malicious file across different hosts or networks, aiding in threat detection, incident response, and mitigation efforts.

Topics

#file hash#IOCs#threat hunting#malware analysis

Community Discussion

No community discussion yet for this question.

Full 200-201 Practice