Use the command in this section to prevent an MD5 that was detected as a false-positive event from being marked as malicious.
To view the signature , source and other details of an MD5, use the show analysis intel md5 <md5> command.
To suppress an MD5:
Enable the CLI configuration mode:
hostname > enable hostname # configure terminal
Suppress the MD5:
hostname (config) # file-analysis suppress md5 md5IDwhere md5ID is the MD5 sum.
Save your changes:
hostname (config) # write memory
Example
The following example suppresses a false-positive event from being marked as malicious:
hostname (config) # file-analysis suppress md5 84a17923a66a59eb245dddfd625246e9 Malware (s) 84a17923a66a59eb245dddfd625246e9 suppressed