Global prevalence is a field that indicates how frequently the hash of a file is seen across all CrowdStrike customer environments.
A global prevalence of common means that the file is widely distributed and likely benign.
However, if you do not know what the executable is, you may want to investigate it further to confirm its legitimacy and functionality.
One way to do that is to click the VT Hash button from the detection, which will pivot you to VirusTotal, a service that analyzes files and URLs for viruses, malware, and other threats.
You can then see more information about the file, such as its name, size, type, signatures, detections, comments, etc.
The best course of action when analyzing an executable with a global prevalence of "common" but unknown functionality is:
B. From detection, click the VT Hash button to pivot to VirusTotal to investigate further
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
Andr3yas
1 month, 2 weeks agoalanalanalan
3 months, 2 weeks agosilva222222
3 months, 2 weeks agokangaru
7 months agosbag0024
7 months, 1 week agosbag0024
7 months, 1 week agoAicha78
8 months, 2 weeks agowildbandana
8 months, 4 weeks ago