Your team discovers a suspicious process running on the web server. You're not sure if it's malicious, but the web server is currently passing all scoring checks.

What should you do first?