I try to find some indicators of compromise through the PEframe tool. Firstly, by using the volatility tool, I found out that there is a DLL file that is malicious. I checked it with the help of Virus Total. Therefore, I want to find out more information about this DLL file, and I try to use the PEframe tool for this. However, I am not sure if I understand the results correctly and if these results offer strong evidence of compromise. The results are shown in the picture below and

Subsequently, I would like to know what information can I extract from the result if possible or do I need to find another way to search the file? Thank you! PEframe results 1 PEframe results 2 PEframe results 3

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.