11-23-2021 04:53 PM
Hi,
Im Trying to get some information on "Threat ID 52019", as i found only 1 document referencing it in the Palo Alto Knowledge Base . The information provided does not describe it. Is there a way to get more information on this? FYI, I don't have access to threat vault.
Thanks!
11-23-2021 05:04 PM
As you found it in the KB, ID: 52019 is a file type signature which detects "Windows Dynamic Link Library (DLL)". If you see it in the WildFire submission log, I'd suggest to check the WildFire report for more detail or get the hash value of the sample to research further.
11-23-2021 05:29 PM
Thanks @ymiyashita. I do not have access to Wildfire reports as well, but there is a WildFire report ID that is in the raw logs. The reason I wanted to know more about this thread ID is that it was detected as a "high" severity detection and labelled as malicious, but the file hash itself has no detections on VirusTotal/X-Force.
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!
