By default, MalCare scans only WordPress tables. Skipped files are non-WordPress tables. However, you can also add other tables and then run a scan.