VirusTotal is still analysing this freshly-seen file — this page refreshes automatically and will show the verdict the moment its engines finish reporting.
File verdict·Decided by the MT AI Engine
Our call

Unknown

We couldn't analyse this file — no antivirus engines have scanned it yet. Re-upload the file or try a different sample.

Trust score50Caution
ShellHost.exe.txt
51.8 KB
26cc929ac4ef06eb33f21f3f4a18
Antivirus engines
0 of 0 flagged
Code signing
Unsigned
MT AI Engine · Verdict analysis

The reasoning behind this verdict

The MT AI Engine weighs every signal from this scan — antivirus detections, sandbox behaviour, code signing, prevalence and historical matches — to reach a single, evidence-based verdict.

10%Confidence
Exploratory
Reasoning

We couldn't analyse this file — no antivirus engines have scanned it yet. Re-upload the file or try a different sample.

Key signals · 2

Each signal cites a concrete token from the evidence the arbiter saw — engine name, MITRE technique, signer string, or an exact count.

  1. file.fileSize=53024

  2. engines.total=0

Recommended action

Re-upload or try a different file.

What to do now

There isn't enough information to give this file a clear rating.

  1. Be cautious — an unknown rating is not the same as a clean bill of health.

  2. Only run it if it came directly from the official maker of the software.

  3. When in doubt, don't open it — or scan it again later once it's more widely seen.

No researcher-database hits
External threat-intel sources were not collected for this scan.
File identity

Forensic fingerprint

File biography
First seen (VT)
First seen (MalwareBazaar)
Last analysis (VT)
5/14/2026, 8:43:47 PM
Scanned here
5/14/2026, 8:44:50 PM
File name
ShellHost.exe.txt
Size
51.8 KB
MIME type
text/plain
Detected type
(unknown)
SHA-256
26cc929ac4ef06eb335699f814ecdac1cd65789bb6398b546d718cf21f3f4a18
MD5
e7170b5ed0430ef4cd28099f3d85a321
SHA-1
853a4780ed476f9b19f8a731a4897c6a028c6a7a
Last analysis (VT)
5/14/2026, 8:43:47 PM
First scan (MalwareTips)
5/14/2026, 8:44:38 PM
Last scan (MalwareTips)
5/14/2026, 8:44:50 PM
Frequently asked

Safety FAQ

Common questions about ShellHost.exe.txt, answered from the scan data above.

  • We can't give ShellHost.exe.txt a confident verdict yet — too few engines have an opinion on this exact file. Uncommon or brand-new files often show little coverage before vendors catch up, so treat it as untrusted: don't opened it unless you're certain of the source.
  • ShellHost.exe.txt is a file (text/plain), about 52 KB. We identify a file by its cryptographic hash rather than its name, because the same filename can be reused by completely different files — the hash below is the reliable fingerprint.
  • The SHA-256 hash of ShellHost.exe.txt is 26cc929ac4ef06eb335699f814ecdac1cd65789bb6398b546d718cf21f3f4a18, and its MD5 is e7170b5ed0430ef4cd28099f3d85a321. This hash is the file's unique fingerprint — two files with the same SHA-256 are identical. Use it to confirm you're looking at exactly this file (not just one with the same name) when comparing against antivirus databases or a download's published checksum.
  • This report reflects the scan run on May 14, 2026. Because a file's hash never changes, the identity of ShellHost.exe.txt is fixed — but antivirus coverage improves over time, so a file that looks clean today can pick up detections later (and vice-versa). If you need the latest picture, MalwareTips staff can re-run the analysis from scratch.
Community classification

Reviews & malware reports(0)

Tell the community what you saw. Tag the sample — Trojan, Adware, False Positive — and share what the file did on your system. Your report helps confirm or dispute the AV verdict.

Loading…
Loading reports…
Files are processed in a streaming pass-through — MalwareTips never stores the binary on its servers. Only the scan result (hash, detections, verdict) is retained so the next person who scans the same file gets an instant answer. If you ran this file on your computer and are worried, scan your system with an up-to-date antivirus and change critical passwords from a different device.