Title
Create new category
Edit page index title
Edit category
Edit link
Description of Scan Result Codes
These are the possible values returned for file scans. These values appear in scan_all_result_i and scan_all_result_a:
Not all codes will be returned by MetaDefender Cloud. Some codes are only returned by the on-premise version.
Value | Short description | Long description | |
|---|---|---|---|
0 | No Threats Found | No threat detection or the file is empty. | |
1 | Infected/Known | A threat is found. | |
2 | Suspicious | Classified as a possible threat but not identified as a specific threat. | |
3 | Failed To Scan | Scanning is not fully performed (for example, invalid file or no read permission). If no engine is included and scan is enabled, this will be the final result. | |
5 | Unknown | Unknown signature. NOTE: this is only used in multiple hash lookup. For single hash lookup, scan_result_* are not returned as a response. see 3.1 Retrieving scan reports using a data hash for more details. | |
7 | Skipped Clean | Scan is skipped because this file type is on the allowlist. | |
8 | Skipped Infected | Scan is skipped because this file type is on the blocklist. | |
9 | Exceeded Archive Depth | Threat is not found but there are more archive levels which were not extracted. | |
10 | Not Scanned / No scan results | Scan is skipped by the engine either due to update or other engine specific reason. If the scan is disabled, this will be the final result. | |
11 | Aborted | The current scan was stopped due to an issue with OPSWAT servers | |
12 | Encrypted | File/buffer is not scanned because the file type is detected as encrypted (password-protected). | |
13 | Exceeded Archive Size | The extracted archive is too large to scan. | |
14 | Exceeded Archive File Number | There are more files in the archive than configured on the server. | |
15 | Password Protected Document | A document that is protected by a password [e.g., Office documents or PDFs that require a password to view its contents]. If a file is password protected document, no sanitization will be applied. MetaDefender Cloud supports detecting password-protected document for: PDF, DOCX, DOC, DOCM, DOTX, DOTM, DOT, PPTX, PPT, POT, POTM, POTX, PPS, PPSM, PPSX, PPTM, PPTX, XLSX, XLS, XLSM, XLSB,XLS, XLTX, XLTM, XLT, XLAM, XLA. | |
16 | Exceeded Archive Timeout | The archive process reached the given timeout value (pre-defined value of 30 minutes) | |
17 | Mismatch | The file's extension does not match the detected file type. Currently not supported by MD Cloud, feature coming soon | |
18 | Potentially Vulnerable File | Possible vulnerability detected for the applied file. | |
19 | Canceled | The file scan was canceled because it failed to scan too many times | |
23 | Filetype not supported | The engine does not support scanning this file type. Certain engines only scan specific file types such as executable files or documents. | |
30 | Blocked Verdict by Deep CDR | Blocked Verdict by Deep CDR | |
63 | AI Content Detected | The analysis engine did find sufficient evidence that the content was generated by artificial intelligence. | |
252 | Empty File | The scan was not completed because the file content was empty. | |
253 | Not Scanned | Rate limit exceeded, retry after the limit is reset. Limit: <no. of> requests / day | |
254 | In queue | The file has been added to the scan queue and is waiting to be processed | |
255 | In progress | The scanning is in progress |