File scan report
Verdict Safe
Is this email message safe? Yes, no threats found.
No antivirus engine detected this email, and available researcher intelligence found no matching malware indicators, although runtime and host-reputation evidence are unavailable.
Read the whole reasonShow less
Moderate evidence · No engine flags it, but no publisher signature confirms who made it.
Good practice2 tips
We found nothing harmful in this file.
Open it only after checking with the sender through a phone number or address you already have.
Keep your security software and system updates switched on.
No scanner can promise a file is 100% safe.
Reads the latest antivirus results for this file's hash. Nothing is uploaded.
Antivirus results
0 of 61 flagged
- Flagged 0
- No detection 61
- No result 14
- Code signing Not applicable
- Test run Not run
- First seen 2mo ago
Chapter 02
Why we think so
3 points against it and 5 in its favour, checked against the scan evidence.
The reasoning behind this verdict
All 61 antivirus engines that checked it returned no malicious or suspicious detection, including 16 major antivirus engines that reported no detection. External intelligence also produced no hits, but the email was not observed when it ran and no complete reputation check of embedded hosts is available.
The email received zero malicious and zero suspicious detections across 75 antivirus engines. Researcher intelligence returned no CIRCL, MalwareBazaar, or YARAify match, and no rule-based rule fired. Code signing is not applicable to an RFC 822 email file. Because no sandbox run completed and contacted-host coverage is unavailable, embedded links or attachments should still be handled according to normal email-security precautions.
What We Detected
The RFC 822 email received 0/75 malicious or suspicious engine results. CIRCL, MalwareBazaar, and YARAify returned no matching intelligence, and no rule-based rule fired.
Threat Behavior
No completed observation from the test run is available because behaviour is null. The contacted-host block is also null, so there is no complete reputation result for any links or other hosts that may be associated with the message.
What To Do Now
The available static evidence contains no malware indicator. Still verify the sender and expected business context before opening attachments, following links, entering credentials, or enabling active content, and keep security software enabled.
Where this verdict could be wrong3 caveats
- No completed sandbox run was recorded, so no behaviour in the test run evidence is available to validate links, attachments, or other email activity.
- No contacted-host reputation result was saved, meaning any embedded or associated hosts did not receive a complete saved reputation cross-check.
- A count of 1 distinct submitter and a count of 1 submission provide limited population history despite the medium classification.
These are the assessment's weak points. If you believe one applies to your file, report the verdict and we'll re-review it.
- 0/61 engines reported a malicious or suspicious result.
- No major antivirus engines flagged it, with 16 major antivirus engines reporting no detection.
- The hash is not listed in the MalwareBazaar malware database and the hash is not in the known-software reference database.
- No community YARA rule matched.
- triggeredHeuristics contains no fired rules.
- No completed observation from the test run is available for the email.
- No complete contacted-host reputation result is available.
- Only one source and one submission are recorded for this hash.
6 sources checked · 4 complete · 1 not run · 1 not needed or not applicable. See every source
Chapter 03
Technical details
None of the 61 antivirus engines that checked it flag it.
Sources checked
Every check behind this verdict
6 sources checked · 4 complete · 1 not run · 1 not needed or not applicable. Complete means the check returned a usable result; it does not mean the file is safe.
File fingerprint
- File name
- Email message
- Format
- Size
- 284.8 kB
- Code signing
- Not applicable to this file type
- Last analyzed
- Sep 8, 2026, 6:49 PM UTC
- SHA-256
186993b647f6a2cebb6f197b3ced44a65ad1faa22404d34a205d616eb0e8da8d- SHA-1
4919912167cc615570c099ffc21cd1fd0ddd244f- MD5
ba5dd5b33f22df4ad35ee422464518b4
First scanned Updated
Includes every engine result (75) and how widely the file has been seen.
Show the technical evidenceChapter 04
Questions & answers
Short answers to the 6 questions people ask most about this file.
Is this email message safe?
What is this email message?
How many antivirus engines detected this email message?
What is the SHA-256 hash of this email message?
Is it safe to open this email message?
How up to date is this analysis of this email message?
Community
Member reviews and reports for this exact file hash.