No Threats Found

No threat detection or the file is empty.

Infected/Known

A threat is found.

Suspicious

Classified as a possible threat but not identified as a specific threat.

Failed To Scan

Scanning is not fully performed (for example, invalid file or no read permission). If no engine is included and scan is enabled, this will be the final result.

Cleaned / Deleted

The threat is found and the file is cleaned (repaired or deleted): repair is not supported yet.

Unknown

Unknown signature. NOTE: this is only used in multiple hash lookup. For single hash lookup, scan_result_* are not returned as a response. see 3.1 Retrieving scan reports using a data hash for more details.

Quarantined

File is quarantined.

Skipped Clean

Scan is skipped because this file type is in white-list.

Skipped Infected

Scan is skipped because this file type is in black-list.

Exceeded Archive Depth

Threat is not found but there are more archive levels which were not extracted.

Not Scanned / No scan results

Scan is skipped by the engine either due to update or other engine specific reason. If the scan is disabled, this will be the final result.

Aborted

The current scan was stopped by the server.

Encrypted

File/buffer is not scanned because the file type is detected as encrypted (password-protected).

Exceeded Archive Size

The extracted archive is too large to scan.

Exceeded Archive File Number

There are more files in the archive than configured on the server.

Password Protected Document

A document that is protected by a password [e.g., Office documents or PDFs that require a password to view its contents]. If a file is password protected document, no sanitization will be applied.

MetaDefender Cloud supports detecting password-protected document for: PDF, DOCX, DOC, DOCM, DOTX, DOTM, DOT, PPTX, PPT, POT, POTM, POTX, PPS, PPSM, PPSX, PPTM, PPTX, XLSX, XLS, XLSM, XLSB,XLS, XLTX, XLTM, XLT, XLAM, XLA.

Exceeded Archive Timeout

The archive process reached the given timeout value.

Mismatch

The file's extension does not match the detected file type. Only applicable when using workflows.

Potentially Vulnerable File

Possible vulnerability detected for the applied file.

Canceled

The file scan was canceled because it failed to scan too many times

Sensitive data found

Data loss prevention engine found sensitive data

Yara Rule Matched

The analysis data matches a yara rule

Potential unwanted application (PUA)

Returned by engines with PUA detection capabilities

Filetype not supported

The engine does not support scanning this file type. Certain engines only scan specific file types such as executable files or documents.

In queue

The file has been added to the scan queue and is waiting to be processed

In progress

The scanning is in progress