Static Analysis It can be useful to identify malicious infrastructure, libraries or packed files. Technical indicators are identified such as file names, hashes, strings such as IP addresses, domains, and file header data can be used to determine whether that file is malicious.