These identifiers are than kept in a log along with other information such as whether the attachment was malicious, benign, or borderline and with what certainty the system made those predictions (Step 112). [0101] The results of this analysis are sent from parser3 to html-trap.procmail, which inserts warnings that the file may be malicious and may quarantine the attachment.