Description of Scan Result Codes

These are the possible values returned for file scans. These values appear in scan_all_result_i and scan_all_result_a:

Not all codes will be returned by MetaDefender Cloud. Some codes are only returned by the on-premise version.

Value	Short description	Long description
0	No Threats Found	No threat detection or the file is empty.
1	Infected/Known	A threat is found.
2	Suspicious	Classified as a possible threat but not identified as a specific threat.
3	Failed To Scan	Scanning is not fully performed (for example, invalid file or no read permission). If no engine is included and scan is enabled, this will be the final result.
5	Unknown	Unknown signature. NOTE: this is only used in multiple hash lookup. For single hash lookup, scan_result_* are not returned as a response. see 3.1 Retrieving scan reports using a data hash for more details.
7	Skipped Clean	Scan is skipped because this file type is on the allowlist.
8	Skipped Infected	Scan is skipped because this file type is on the blocklist.
9	Exceeded Archive Depth	Threat is not found but there are more archive levels which were not extracted.
10	Not Scanned / No scan results	Scan is skipped by the engine either due to update or other engine specific reason. If the scan is disabled, this will be the final result.
11	Aborted	The current scan was stopped due to an issue with OPSWAT servers
12	Encrypted	File/buffer is not scanned because the file type is detected as encrypted (password-protected).
13	Exceeded Archive Size	The extracted archive is too large to scan.
14	Exceeded Archive File Number	There are more files in the archive than configured on the server.
15	Password Protected Document	A document that is protected by a password [e.g., Office documents or PDFs that require a password to view its contents]. If a file is password protected document, no sanitization will be applied. MetaDefender Cloud supports detecting password-protected document for: PDF, DOCX, DOC, DOCM, DOTX, DOTM, DOT, PPTX, PPT, POT, POTM, POTX, PPS, PPSM, PPSX, PPTM, PPTX, XLSX, XLS, XLSM, XLSB,XLS, XLTX, XLTM, XLT, XLAM, XLA.
16	Exceeded Archive Timeout	The archive process reached the given timeout value (pre-defined value of 30 minutes)
17	Mismatch	The file's extension does not match the detected file type. Currently not supported by MD Cloud, feature coming soon
18	Potentially Vulnerable File	Possible vulnerability detected for the applied file.
19	Canceled	The file scan was canceled because it failed to scan too many times
23	Filetype not supported	The engine does not support scanning this file type. Certain engines only scan specific file types such as executable files or documents.
30	Blocked Verdict by Deep CDR	Blocked Verdict by Deep CDR
252	Empty File	The scan was not completed because the file content was empty.
253	Not Scanned	Rate limit exceeded, retry after the limit is reset. Limit: <no. of> requests / day
254	In queue	The file has been added to the scan queue and is waiting to be processed
255	In progress	The scanning is in progress

Last updated on

Was this page helpful?

Description of Scan Result Codes

This Website Uses Cookies

Functional Cookies

Performance Cookies

Strictly Necessary Cookies

Targeting Cookies