File scan report
Verdict Low Risk
Is this Word document safe? Not fully confirmed.
No antivirus engine detected this RTF document, but absent evidence from the test run and minimal prevalence prevent a confident assessment of its behavior.
Read the whole reasonShow less
Why not Safe? Only one source had seen it when we scanned it.
Limited evidence · Nothing points to a problem, but little confirms who made it.
Good practice2 tips
Low Risk: no threat found, but we could not fully confirm this file.
Get it from the publisher's own website or app store, not from a re-upload or a link someone sent you.
Keep your security software on, and stop if the file does anything you didn't expect.
Reads the latest antivirus results for this file's hash. Nothing is uploaded.
Antivirus results
0 of 61 flagged
- Flagged 0
- No detection 61
- No result 14
- Code signing Not applicable
- Test run Not run
- First seen 20d ago
Chapter 02
Why we think so
4 points against it and 5 in its favour, checked against the scan evidence.
The reasoning behind this verdict
All 61 antivirus engines that checked it returned without a detection, including 17 major antivirus engines. However, this document has only one recorded submission and no completed sandbox observation, so the scan cannot establish what happens when it is opened.
Static antivirus coverage produced 0 detections among 75 engines, with all 17 participating major antivirus engines reporting no threat. No malware family, suspicious heuristic, malicious child, or researcher-rule match was identified. The document is and has only one recorded source and submission, which leaves little reputation history. There is no completed observation from the test run, so exploit behavior, programs it started, or network activity cannot be assessed. No complete contacted-host reputation result is available.
What We Detected
None of the 61 antivirus engines that checked it flagged the document, and 17 major antivirus engines—including Microsoft, Kaspersky, BitDefender, ESET-NOD32, and Fortinet—reported no detection. No matching malware family, researcher rule, or known sample-feed entry was found.
Threat Behavior
No completed sandbox run is available. As a result, there is no evidence from the test run showing whether opening the RTF document launches processes, exploits a document vulnerability, drops another file, or contacts a remote host. No complete host-reputation cross-check is available.
What To Do Now
Because the file is and has almost no prevalence history, treat an unsolicited copy cautiously. Keep security software enabled, verify the sender and expected context, and open it only in a patched, isolated document viewer if necessary.
Where this verdict could be wrong2 caveats
- The 0/61 detection result supports a benign interpretation, but the sample is and has no evidence from the test run.
- Its original file name (hidden on this page for privacy) “Word document” could be misleading, although no bidi override, hidden characters, or related filename behaviour rule matched.
These are the assessment's weak points. If you believe one applies to your file, report the verdict and we'll re-review it.
- 0/61 antivirus engines reported a detection
- 17 major antivirus engines reported it clean
- No community YARA rule matched
- The hash is not listed in the MalwareBazaar malware database
- No triggeredHeuristics entries
- Sample with a count of 1 distinct submitter
- No completed observation from the test run
- No complete contacted-host reputation result
- Filename combines “.rtf” and “.doc” format indicators
6 sources checked · 4 complete · 1 not run · 1 not needed or not applicable. See every source
Chapter 03
Technical details
None of the 61 antivirus engines that checked it flag it.
Sources checked
Every check behind this verdict
6 sources checked · 4 complete · 1 not run · 1 not needed or not applicable. Complete means the check returned a usable result; it does not mean the file is safe.
File fingerprint
- File name
- Word document
- Format
- Rich Text Format
- Size
- 56.1 kB
- Code signing
- Not applicable to this file type
- Last analyzed
- Oct 5, 2026, 2:33 PM UTC
- SHA-256
d4e1a79ac10acc7be373f78e0f6d554203e37a16da01561ef9621187bf7c9685- SHA-1
2be64eaf06173debea4eb495980f2888ef22acac- MD5
bfa2c7097cd497f319a1a18fa7ae326e
First scanned
Includes every engine result (75) and how widely the file has been seen.
Show the technical evidenceChapter 04
Questions & answers
Short answers to the 5 questions people ask most about this file.
Is this Word document safe?
What is this Word document?
How many antivirus engines detected this Word document?
What is the SHA-256 hash of this Word document?
How up to date is this analysis of this Word document?
Community
Member reviews and reports for this exact file hash.