01-13-2026 05:08 AM
Support information:
Probable Root Cause :
I would like to inform you that I checked the HASH in our Wildfire portal, and would like to inform you that, Initially the file had a local verdict of malware, due to which a local analysis alert got triggered.
Currently, the file is classified as benign, and therefore its a legitimate application, and we can consider the alerts to be false positives.
As the verdict is globally flagged as a benign file, once the verdict is updated on your endpoints, the alerts will be stopped.
If you are still receiving the alerts, please restart the agent services by following the command:
- Open the command prompt with administrative privileges
- Navigate to C:\Program Files\Palo Alto Networks\Traps
- Run the below command to stop the agent services
#cytool runtime stop
- Run the below command to start the agent services
#cytool runtime start
