topic Threat ID 52019 in Advanced Threat Prevention Discussions

Threat ID 52019

ppradhan — Wed, 24 Nov 2021 00:53:57 GMT

Hi,

Im Trying to get some information on "Threat ID 52019", as i found only 1 document referencing it in the Palo Alto Knowledge Base . The information provided does not describe it. Is there a way to get more information on this? FYI, I don't have access to threat vault.

Thanks!

Re: Threat ID 52019

ymiyashita — Wed, 24 Nov 2021 01:04:19 GMT

As you found it in the KB, ID: 52019 is a file type signature which detects "Windows Dynamic Link Library (DLL)". If you see it in the WildFire submission log, I'd suggest to check the WildFire report for more detail or get the hash value of the sample to research further.

Re: Threat ID 52019

ppradhan — Wed, 24 Nov 2021 01:29:59 GMT

Thanks @ymiyashita. I do not have access to Wildfire reports as well, but there is a WildFire report ID that is in the raw logs. The reason I wanted to know more about this thread ID is that it was detected as a "high" severity detection and labelled as malicious, but the file hash itself has no detections on VirusTotal/X-Force.

Re: Threat ID 52019

mivaldi — Wed, 24 Nov 2021 16:31:08 GMT

Please open a Support case.