AmsiResult Enum

Namespace: Meziantou.Framework.Win32
Assembly: Meziantou.Framework.Win32.Amsi.dll
Package: Meziantou.Framework.Win32.Amsi 3.0.9
Available in package assets: net10.0net11.0

Represents the result of an AMSI scan.

public enum AmsiResult

Remarks

An antimalware provider may return any value between AmsiResult.NotDetected and 32767 as an estimated risk level: the larger the value, the riskier it is to continue with the content. Those values are provider specific and may identify a malware family or ID.

Fields

Name	Value	Description
`Clean`	`0`	Known good. No detection found, and the result is likely not going to change after a future definition update.
`NotDetected`	`1`	No detection found, but the result might change after a future definition update.
`BlockedByAdminStart`	`16384`	Administrator policy blocked this content on this machine (beginning of range).
`BlockedByAdminEnd`	`20479`	Administrator policy blocked this content on this machine (end of range).
`Detected`	`32768`	Detection found. The content is considered malware and should be blocked.