MalwareTips

File scan report

Scan another file

Verdict Safe

Analyzed , 3 months ago

Is a4a414.msi safe? Yes, no threats found.

This is a Famatech-signed Radmin Server installer, widely submitted since 2017. Only one less reliable engine labels it unwanted remote-admin software.

Read the whole reasonShow less

Strong evidence · Widely seen for a long time, and nothing harmful found.

Install it as usual if it came from the official source

Use this installer only if you intend to run Radmin Server for remote administration. If it appeared on a machine unexpectedly, remove it and investigate for unauthorised access.

Good practice2 tips

We found nothing harmful in this file.

  1. Install it only if it came from the developer's own website or an official app store.

  2. Keep your antivirus and Windows updates switched on.

No scanner can promise a file is 100% safe.

Why we think so

Share this file report

a4a414.msi: Safe — MalwareTips file scan

The link always shows the latest result for this exact file (its SHA-256 fingerprint).

Reads the latest antivirus results for this file's hash. Nothing is uploaded.

Antivirus results

1 of 60 flagged

  • Flagged 1
  • No detection 59
  • No result 14
Filea4a414.msi4.6 MBSHA-256 85844ae7394f…53320e
  • Code signing Famatech Corp.
  • Test run Completed
  • First seen 8y ago
It has a long history: seen by 460 sources over more than six months.

Chapter 02

Why we think so

2 points against it and 3 in its favour, checked against the scan evidence.

MT AI Engine · Verdict analysis

The reasoning behind this verdict

Analyst conclusion

This installer carries a verified Famatech Corp. signature and was first seen on Dec 14, 2017. It has been submitted by 460 sources. Only AhnLab-V3, one of the 60 antivirus engines that checked it, flags it, as unwanted remote-administration software. Its installation behaviour matches a normal Radmin Server setup.

Where this verdict could be wrong2 caveats
  • Remote-access tools like Radmin Server are abused by attackers for silent remote control, and the sandbox ran this installer quietly with the licence pre-accepted. If it appears on a machine where nobody installed it, treat it as an intrusion.
  • Our own history for this signer holds only one prior sample, and that sample was judged malicious, so the signer record gives no support either way.

These are the assessment's weak points. If you believe one applies to your file, report the verdict and we'll re-review it.

6 sources checked · 5 complete · 1 partial. See every source

Chapter 03

What it did in our test

It ran in our isolated test environment; no test environment rated what it did as risky.

Test run summary

Capture complete
  • 26sandbox rule tags
  • 8spawned processes
  • 14network contacts
  • 40filesystem & mutex artifacts

Chapter 04

Technical details

1 of the 60 antivirus engines that checked it flags it; signed by Famatech Corp..

Sources checked

Every check behind this verdict

6 sources checked · 5 complete · 1 partial. Complete means the check returned a usable result; it does not mean the file is safe.

SourceStatusResultChecked
Antivirus enginesVirusTotal · 74 enginesCompleteWorth noting: 1 of 60 engines flagged it · 14 gave no result · treated as non-decisive Details for antivirus engines
Sandbox runVirusTotal sandboxesCompleteRuntime behaviour was recorded Details for sandbox run
Contacted hostsMalwareTips URL scannerPartial7 of 15 contacted hosts were cross-checked; coverage is incomplete Details for contacted hosts
Signature rulesYARAify community rules + MalwareTips rulesCompleteWorth noting: 2 MalwareTips behaviour rules Details for signature rules
Malware sample databaseabuse.ch MalwareBazaarCompleteNot listed
Known-software referenceCIRCL hashlookupCompleteNo match

Engines that flagged it 1

The Safe verdict weighed these detections and treats them as non-decisive.

  • AhnLab-V3Unwanted/MSI.Radmin

File fingerprint

Last analyzed
Jul 26, 2026, 1:25 AM UTC
SHA-256
85844ae7394f2cf907b6378b415e77f7e29069c7e791598cf0985adf4f53320e
SHA-1
c81efc67a52ddd207528ab4ce74c5d25b446b25e
MD5
a59832798a697bfe456b14f10e6eccd4

About this file

a4a414.msi is a Windows Installer file of 4.6 MB.

Type and size
Windows Installer · 4.6 MB
Signer
Famatech Corp.Valid code signature.
First seen
Dec 14, 2017On VirusTotal.
Submitted by
460 distinct sources

First scanned Updated

Verdict history

  1. Malicious
  2. Safeafter a re-check of the saved evidence

Ratings change when antivirus engines, our checks or MalwareTips staff learn more about a file.

Chapter 05

Questions & answers

Short answers to the 7 questions people ask most about this file.

Is a4a414.msi safe?
We found nothing harmful in a4a414.msi. 1 of the 60 antivirus engines that checked it flags it; after weighing the other evidence we treat that alert as false alarms. It has a valid digital signature from Famatech Corp.. Install it only if it came from the developer's own website or an official app store.
What is a4a414.msi?
a4a414.msi is a Windows installer (MSI), about 4.6 MB. VirusTotal first saw it on Dec 14, 2017.
How many antivirus engines detected a4a414.msi?
1 of the 60 antivirus engines that checked it flags a4a414.msi (AhnLab). We weigh which engines flagged it and what else the scan found, not just the count.
Is a4a414.msi digitally signed?
Yes. a4a414.msi has a valid digital signature from Famatech Corp., which shows the file hasn't been changed since that publisher signed it. Malware is sometimes signed with stolen certificates, so a signature alone isn't proof of safety.
What is the SHA-256 hash of a4a414.msi?
The SHA-256 fingerprint of a4a414.msi is 85844ae7394f2cf907b6378b415e77f7e29069c7e791598cf0985adf4f53320e, and its MD5 is a59832798a697bfe456b14f10e6eccd4. Two files with the same SHA-256 are identical, so use it to check you have exactly this file, not just one with the same name.
Is it safe to install a4a414.msi?
We found nothing harmful in a4a414.msi, and its digital signature checks out. The main caveat is where you got it: attackers sometimes spread malware under the name of real software, so get it from the official website. If your own antivirus warns about it, check the source before you ignore the warning.
How up to date is this analysis of a4a414.msi?
This report reflects the scan on Jul 26, 2026. A file's fingerprint never changes, but antivirus engines keep learning, so a rating can change later. To get a newer result, scan the file again: we refresh the antivirus results when the saved ones are out of date.
Chapter 06

Community

Member reviews and reports for this exact file hash.

Related file reports

Recent reports on other files with the same rating.

All file reports
Scan another
Check a different file
URL instead?
Check if a link is safe
This report and its SHA-256 fingerprint are public, so the next person who checks the same file gets an instant answer; documents and images are listed by type instead of their file name. A file we had not seen before is uploaded to VirusTotal, whose security partners and subscribers can download it; MalwareTips deletes its own copy after the scan. If you ran this file and are worried, scan your device with up-to-date security software.