An analyst submits a suspicious executable to a malware detonation chamber. Reviewing the report, they want to determine whether this exact sample has been seen before by threat intelligence feeds without executing it again. Which section of the sandbox output report should the analyst reference?