Wells Fargo Interview Question

How you investigate a malicious file executed on the host?