File scan report
Verdict Safe
Is GTAIV. exe safe? Yes, no threats found.
Legitimate Grand Theft Auto IV patch executable signed by Rockstar Games with zero engine detections.
Strong evidence · A verified publisher signature, and no engine flags it.
Run the file normally; it is the authentic GTA IV Patch 8 executable.
Good practice2 tips
We found nothing harmful in this file.
Run it only if it came from the developer's own website or an official app store.
Keep your antivirus and Windows updates switched on.
No scanner can promise a file is 100% safe.
Antivirus results
0 of 71 flagged
- Flagged 0
- No detection 71
- No result 4
- Code signing Rockstar Games, Inc.
- Test run Completed
- First seen 9y ago
Chapter 02
Why we think so
0 points against it and 3 in its favour, checked against the scan evidence.
The reasoning behind this verdict
The file is a 14.9 MB signed Win32 executable from Rockstar Games. All 71 antivirus engines that checked it returned clean results and the sample has been widely submitted since 2016 as the official GTA IV Patch 8.
Zero malicious detections across 75 engines, including 17 major antivirus engines, combined with verified Rockstar Games code signing and a long history of clean submissions, indicate this is the authentic game patch. Sandbox analysis found no offensive techniques or malicious verdicts. The single rule-based trigger for direct-IP traffic is explicitly noted as inconclusive without host reputation data, which is unavailable here.
What We Detected
75 antivirus engines scanned the file; none flagged it as malicious. The executable is digitally signed by Rockstar Games and matches the known GTA IV Patch 8. Community researchers explicitly label it clean and identify it as the official patch.
Threat Behavior
No malicious sandbox verdicts, no offensive MITRE techniques, and no dropped malicious files it created. The sample contacted external IPs, but the rule-based rule itself states this pattern can occur in legitimate installers and no host-reputation cross-check was completed.
What To Do Now
The file can be executed safely. Keep Windows Defender and other security software enabled as usual.
- Verified Rockstar Games signature
- Zero engine detections across 75 scanners
- Widely distributed since 2016 with clean reputation
6 sources checked · 5 complete · 1 partial. See every source
Chapter 03
What it did in our test
It ran in our isolated test environment; no test environment rated what it did as risky.
Test run summary
Capture complete- 3sandbox rule tags
- 3spawned processes
- 1network contact
- 0filesystem & mutex artifacts
What this file did when executed
This file was run in a sandbox and its runtime behaviour was observed.
Techniques observed in the sandbox
3MITRE ATT&CK techniques the sandbox mapped. Highlighted ones are rare in normal software; the others are common in legitimate programs too.
- T1056· Keylogging
- T1059· Runs commands
- T1071· Application protocol
Observed activity
Processes started
3Programs the file ran, with their command lines.
GTAIV.exe%SAMPLEPATH%\GTAIV.exe3d90e7c516fa450ca002e5031e62c0f66b404590f33e6cc9793b0da4fffbfd0f.exe%SAMPLEPATH%\3d90e7c516fa450ca002e5031e62c0f66b404590f33e6cc9793b0da4fffbfd0f.exe3d90e7c516fa450ca002e5031e62c0f66b404590f33e6cc9793b0da4fffbfd0f.exeC:\3d90e7c516fa450ca002e5031e62c0f66b404590f33e6cc9793b0da4fffbfd0f.exe
Network contacts
11 host, listed as 1 address. Links show the host and path only.
- IP address
104.106.49.52
Sandbox background — not the file
4The analysis machine's own processes and connections, recorded in every run.
- VM host
204.79.197.203 - VM host
a83f:8110:1010:10ff:1010:10ff:1010:10ff - VM host
192.168.0.10 - VM host
184.27.218.92
Chapter 04
Technical details
None of the 71 antivirus engines that checked it flag it; signed by Rockstar Games, Inc..
Sources checked
Every check behind this verdict
6 sources checked · 5 complete · 1 partial. Complete means the check returned a usable result; it does not mean the file is safe.
File fingerprint
- Last analyzed
- Oct 17, 2026, 1:28 PM UTC
- SHA-256
3d90e7c516fa450ca002e5031e62c0f66b404590f33e6cc9793b0da4fffbfd0f- SHA-1
f70da648eb01d0e6ebafe1356f4f493814d9b581- MD5
63f4dd98e911458f36d7ad974bc6e626
About this file
GTAIV.exe is a Win32 EXE file of 15.6 MB.
- Type and size
- Win32 EXE · 15.6 MB
- Signer
- Rockstar Games, Inc.Valid code signature.
- First seen
- Nov 30, 2016On VirusTotal.
- Submitted by
- 1,388 distinct sources
- Packer
- None detected
- Entropy
- 7.28 of 8
First scanned Updated
Antivirus consensus
0 of 71 engines flagged this file
4 of the 75 engines returned no result for this file (file type not supported, or the scan did not finish), so they did not check it.
- Tier-118 engines0flagged
- Tier-236 engines0flagged
- Low-trust17 engines0flagged
View all 75 engine results
- AcronisClean
- AhnLab-V3Clean
- AlibabaClean
- alibabacloudClean
- ALYacClean
- Antiy-AVLClean
- APEXClean
- ArcabitClean
- AvastClean
- Avast-MobileNo result
- AVGClean
- AviraClean
- BitDefenderClean
- BitDefenderFalxNo result
- BkavClean
- CAT-QuickHealClean
- ClamAVClean
- CMCClean
- CrowdStrikeClean
- CTXClean
- CylanceClean
- CynetClean
- DeepInstinctClean
- DrWebClean
- ElasticClean
- EmsisoftClean
- ESET-NOD32Clean
- F-SecureClean
- FortinetClean
- GDataClean
- GoogleClean
- GridinsoftClean
- huorongClean
- IkarusClean
- JiangminClean
- K7AntiVirusClean
- K7GWClean
- KasperskyClean
- KingsoftClean
- LionicClean
- MalwarebytesClean
- MaxSecureClean
- McAfeeDClean
- MicrosoftClean
- MicroWorld-eScanClean
- NANO-AntivirusClean
- PaloaltoClean
- PandaClean
- RisingClean
- SangforClean
- SentinelOneClean
- SkyhighClean
- SophosClean
- SUPERAntiSpywareClean
- SymantecClean
- SymantecMobileInsightNo result
- TACHYONClean
- tehtrisClean
- TencentClean
- TrapmineClean
- TrellixENSClean
- TrendMicroClean
- TrendMicro-HouseCallClean
- TrustlookNo result
- VaristClean
- VBA32Clean
- VIPREClean
- VirITClean
- ViRobotClean
- WebrootClean
- XcitiumClean
- YandexClean
- ZillyaClean
- ZoneAlarmClean
- ZonerClean
Section entropy & packers
No high-entropy executable section or known packer signature was detected. Data and resource sections can still have high entropy without indicating packed code.
How widely this file has been seen
Widely seen in the wild for a long time. High prior this is legitimate; isolated detections on common-old files are usually false positives.
Chapter 05
Questions & answers
Short answers to the 7 questions people ask most about this file.
Is GTAIV.exe safe?
What is GTAIV.exe?
How many antivirus engines detected GTAIV.exe?
Is GTAIV.exe digitally signed?
What is the SHA-256 hash of GTAIV.exe?
Is it safe to run GTAIV.exe?
How up to date is this analysis of GTAIV.exe?
Community
Member reviews and reports for this exact file hash.