The security administrator is implementing a malware storage system to archive all malware seen by the company into a central database. The malware must be categorized and stored based on…

The security administrator is implementing a malware storage system to archive all malware seen by the company into a central database. The malware must be categorized and stored based on similarities in the code. Which of the following should the security administrator use to identify similar malware?