File scan report
Verdict Safe
Is a. out safe? Yes, no threats found.
A lone generic Huorong rule-based detection lacks major, family, runtime, or external-intelligence corroboration, making a false positive considerably more likely.
Read the whole reasonShow less
Moderate evidence · No engine flags it, but no publisher signature confirms who made it.
Keep security protection enabled and use the file only if it came from a source you trust. For uncertain origins, verify the publisher or test it in an isolated macOS environment first.
Good practice2 tips
We found nothing harmful in this file.
Open it only if you trust the person or website you got it from.
Keep your security software and system updates switched on.
No scanner can promise a file is 100% safe.
Reads the latest antivirus results for this file's hash. Nothing is uploaded.
Antivirus results
1 of 64 flagged
- Flagged 1
- No detection 63
- No result 11
- Code signing Not applicable
- Test run Not run
- First seen 1mo ago
Chapter 02
Why we think so
3 points against it and 4 in its favour, checked against the scan evidence.
The reasoning behind this verdict
Only 1 of the 64 antivirus engines that checked it flagged this macOS-containing ZIP, using a generic rule-based label, while no major antivirus engines detected it. No sandbox execution or complete host-reputation check is available, so the isolated alert is probably a false positive but cannot be validated through evidence from the test run.
Huorong is the only engine reporting a detection among 75 engines, and its label is the generic rule-based HEUR:Trojan/OSX.Agent.a. None of the major antivirus engines flagged the archive, and there is no agreement on a named malware family. Researcher-rule and malware-feed checks supplied no corroborating hit. No completed sandbox observation exists, so the contained Mach-O code was not behaviorally validated. Host reputation was also not fully checked, which limits certainty but does not itself indicate risk.
What We Detected
Huorong alone flagged the file as HEUR:Trojan/OSX.Agent.a. The other engines did not corroborate that generic rule-based label, including the reporting major antivirus engines.
Threat Behavior
No completed sandbox run is available, so there is no observed execution, persistence, process injection, credential access, or network behavior to assess. A complete reputation check of contacted hosts is likewise unavailable.
What To Do Now
Keep security software enabled and obtain the file from its official source where possible. If its origin is uncertain, inspect the archive contents and run the macOS application in an isolated environment before opening it on a production system.
Where this verdict could be wrong2 caveats
- Huorong identified a possible macOS trojan using the label HEUR:Trojan/OSX.Agent.a.
- No completed sandbox run or comprehensive contacted-host reputation check is available, so runtime intent remains unverified.
These are the assessment's weak points. If you believe one applies to your file, report the verdict and we'll re-review it.
- Only 1 of the 64 antivirus engines that checked it flagged the file.
- No major antivirus engines reported a detection.
- No malware-specific researcher rule or malware-feed match corroborated the alert.
- There is no agreed malware family among the engines.
- One antivirus engine reported a generic macOS trojan heuristic.
- The archive contains macOS executable code but has no completed the test run.
- No comprehensive contacted-host reputation result is available.
6 sources checked · 4 complete · 1 not run · 1 not needed or not applicable. See every source
Chapter 03
Technical details
1 of the 64 antivirus engines that checked it flags it.
Sources checked
Every check behind this verdict
6 sources checked · 4 complete · 1 not run · 1 not needed or not applicable. Complete means the check returned a usable result; it does not mean the file is safe.
Engines that flagged it 1
The saved verdict treats these detections as likely false positives.
- huorongHEUR:Trojan/OSX.Agent.a
File fingerprint
- Last analyzed
- Oct 11, 2026, 7:08 PM UTC
- SHA-256
7acd4d8d1408ec2100de7de2a2c19103874e127f9e995bcb46fa06dc809fc5fd- SHA-1
c424f380131550e7665b9eab1c1caab1ca73fa77- MD5
e380a637fb85d8afb85b2ab695bacc1e
About this file
a.out is a ZIP file of 8.1 MB.
- Type and size
- ZIP · 8.1 MB
- Signer
- Not applicable
- First seen
- Aug 28, 2026On VirusTotal.
- Submitted by
- 13 distinct sources
First scanned
Antivirus consensus
1 of 64 engines flagged this file
11 of the 75 engines returned no result for this file (file type not supported, or the scan did not finish), so they did not check it.
- Tier-116 engines0flagged
- Tier-235 engines1flagged
- Low-trust13 engines0flagged
View all 75 engine results
- huorongMalicious: HEUR:Trojan/OSX.Agent.a
- AcronisClean
- AhnLab-V3Clean
- AlibabaClean
- alibabacloudClean
- ALYacClean
- Antiy-AVLClean
- APEXNo result
- ArcabitClean
- AvastClean
- Avast-MobileClean
- AVGClean
- AviraClean
- BitDefenderClean
- BitDefenderFalxNo result
- BkavClean
- CAT-QuickHealClean
- ClamAVClean
- CMCClean
- CrowdStrikeClean
- CTXClean
- CylanceNo result
- CynetClean
- DeepInstinctNo result
- DrWebClean
- ElasticClean
- EmsisoftClean
- ESET-NOD32Clean
- F-SecureClean
- FortinetClean
- GDataClean
- GoogleClean
- GridinsoftClean
- IkarusClean
- JiangminClean
- K7AntiVirusClean
- K7GWClean
- KasperskyClean
- KingsoftClean
- LionicClean
- MalwarebytesClean
- MaxSecureClean
- McAfeeDClean
- MicrosoftClean
- MicroWorld-eScanClean
- NANO-AntivirusClean
- PaloaltoNo result
- PandaClean
- RisingClean
- SangforClean
- SentinelOneClean
- SkyhighNo result
- SophosClean
- SUPERAntiSpywareClean
- SymantecClean
- SymantecMobileInsightNo result
- TACHYONClean
- tehtrisNo result
- TencentClean
- TrapmineNo result
- TrellixENSClean
- TrendMicroNo result
- TrendMicro-HouseCallNo result
- TrustlookClean
- VaristClean
- VBA32Clean
- VIPREClean
- VirITClean
- ViRobotClean
- WebrootClean
- XcitiumClean
- YandexClean
- ZillyaClean
- ZoneAlarmClean
- ZonerClean
How widely this file has been seen
Moderate prevalence — neither rare nor common. No strong prior applies.
Chapter 04
Questions & answers
Short answers to the 6 questions people ask most about this file.
Is a.out safe?
What is a.out?
How many antivirus engines detected a.out?
What is the SHA-256 hash of a.out?
Is it safe to open or extract a.out?
How up to date is this analysis of a.out?
Community
Member reviews and reports for this exact file hash.