Is Cyberpunk2077.exe safe?
All 75 engines were silent, while the verified CD PROJEKT signature, broad prevalence, and five signer-matched precedents strongly support legitimate game software.
No antivirus engine flagged this executable, including all 17 reporting tier-1 engines. Its verified CD PROJEKT S.A. signature, established distribution across 2,303 sources, and five signer-matched benign precedents strongly support an authentic game executable; no complete host-reputation cross-check was available.
a7de82945c03e041fc…947bb350a60991Recommended next actions
Before running
Run it only when it came from the developer's official site or another source you independently trust.
If you already ran it
Keep normal device protection enabled and stop if the file behaves unexpectedly.
Intelligence
The saved assessment, checked against the scan evidence and recorded coverage.
The reasoning behind this verdict
This section explains the evidence supporting the verdict and keeps conflicting or missing signals visible.
No antivirus engine flagged this executable, including all 17 reporting tier-1 engines. Its verified CD PROJEKT S.A. signature, established distribution across 2,303 sources, and five signer-matched benign precedents strongly support an authentic game executable; no complete host-reputation cross-check was available.
The sample received no malicious or suspicious detections from 75 engines, with all 17 reporting tier-1 engines silent. Its code signature verifies to CD PROJEKT S.A., and the payload shows no mismatch between the claimed product brand and signer. The file is established rather than newly observed, with 2,303 sources and 2,788 submissions over 377 days. Five previous signer-matched files received benign assessments, providing consistent publisher context beyond the limited direct signer statistic. One completed sandbox reported no offensive techniques or malicious verdict, although no complete contacted-host reputation result is available.
What We Detected
None of the 75 antivirus engines flagged the executable, and all 17 reporting tier-1 engines returned no detection. The file has a verified digital signature from CD PROJEKT S.A., with no detected mismatch between the product identity and signer. It is broadly established, appearing from 2,303 sources across 2,788 submissions over 377 days. Five prior files matching the same signer also received benign assessments.
Threat Behavior
One completed sandbox run recorded four ambient techniques but no offensive techniques and no malicious sandbox verdict. No dropped malicious child was reported, and static PE analysis found neither packed code nor suspiciously high-entropy code. The sandbox recorded no contacted domains, IP addresses, or URLs; however, no separate contacted-host reputation cross-check was saved.
What To Do Now
The evidence strongly supports a legitimate CD PROJEKT game executable. Confirm that the file came from an official game store or installation channel, retain endpoint protection, and verify that Windows still reports the CD PROJEKT S.A. signature as valid before running it.
Where this verdict could be wrong4 caveats
- signing.signerStats.totalSamples=1, so the direct historical signer statistic alone is too small for automatic trust, although five separate signer-matched prior verdicts support it.
- The file carries detect-debug-environment and checks-user-input tags, but behaviour.offensiveCount=0 and no engine associated them with a malware family.
- contactedHosts=null means no saved host-reputation cross-check exists, though behaviour.contactedDomains, contactedIps, and contactedUrls are all empty.
- One community comment attached unrelated malware-family tags, but it supplied no family identification or detection evidence and conflicts with 0/75 engine detections.
These are the assessment's weak points. If you believe one applies to your file, report the verdict and we'll re-review it.
- 0/75 antivirus engines reported a malicious or suspicious result.
- All 17 reporting tier-1 engines returned no detection.
- The signature verifies to CD PROJEKT S.A. with no brand mismatch.
- The file has 2,303 sources and 2,788 submissions over 377 days.
- Five of five signer-matched prior files received benign assessments.
- The executable uses debug-environment detection and user-input checks, which can also appear in protected game software.
- signing.signerStats contains only 1 directly recorded historical sample and is not auto-trusted.
- No complete contacted-host reputation cross-check was available.
Use the file if it came from an official CD PROJEKT or authorized game-store installation. Keep endpoint protection enabled and recheck the digital signature if the file was obtained from an unofficial source.
Coverage & freshness
Complete means the check returned a usable result. It does not mean the file is safe.
Antivirus
Complete0 of 75 engines flagged the file.
Sandbox
Complete1 isolated runtime environment contributed observations.
Network
Not runNo contacted-host reputation check is recorded.
No timestamp recordedYARA
CompleteRule evaluation completed with no recorded matches.
External intel
Complete3 of 3 independent reference sources completed.
Behavior
Plain-English impact first, then the observed runtime evidence.
Runtime flight recorder
Capture complete- 1isolated sandbox run
- 4MITRE ATT&CK techniques
- 2spawned processes
- 0network contacts
- 0filesystem & mutex artifacts
Attack story
Runtime observations grouped by analysis stage. Arrows organize the stages; they do not claim chronology or causality.
Input file
The submitted object
- FileObserved
Cyberpunk2077.exe
a7de82945c03e041fc7339fcf9066224d98db2f5d80fea50f7947bb350a60991
01Uploaded file
Processes
Runtime execution
- ProcessObserved
Observed process
"C:\Users\user\Desktop\Cyberpunk2077.exe"
02Isolated runtime analysis - ProcessObserved
Observed process
"C:\Users\user\Desktop\software.exe"
03Isolated runtime analysis - +1 more recorded observation in Analyst mode
3 recorded facts from one runtime window. Every fact remains independently traceable in Analyst mode.
What this file did when executed
This file was detonated in 1 sandbox and its runtime behaviour was observed.
Adversary techniques mapped to the MITRE ATT&CK framework.
Detection & Forensics
Consensus, attribution, signatures, code structure, prevalence, and identity.
Evidence integrity
Chain of custody for the facts preserved in this report.
- 0rule hits recorded
- 0 / 75engines flagged
- 2,303sources in submission history
Why these facts are shown
Each statement identifies whether it was directly recorded or derived from saved scan facts.
- 01
0 of 75 antivirus engines flagged the file.
Verdict inputView chapterProvenanceObservedSourceAntivirus analysisObserved at - 02
The hash has a long, established submission history across 2,303 sources.
Verdict inputView chapterProvenanceDerivedSourceSubmission historyObserved at - 03
The file has a valid code signature from CD PROJEKT S.A..
ProvenanceObservedSourceCode-signing metadataObserved at - 04
Scanned file: Cyberpunk2077.exe — a7de82945c03e041fc7339fcf9066224d98db2f5d80fea50f7947bb350a60991
ProvenanceObservedSourceUploaded fileObserved at - 05
Observed process — "C:\Users\user\Desktop\Cyberpunk2077.exe"
ProvenanceObservedSourceIsolated runtime analysisObserved at - 06
Observed process — "C:\Users\user\Desktop\software.exe"
ProvenanceObservedSourceIsolated runtime analysisObserved at
Detection sources at a glance
The available sources did not agree on a named threat category.
MalwareBazaar, YARAify, and CIRCL hashlookup completed and returned no entries for this hash.
YARA rules
No matchesThe rule pass completed without a saved public match.
0 of 75 engines flagged this file
View all 75 engine results
Section entropy & packers
No high-entropy executable section or known packer signature was detected. Data and resource sections can still have high entropy without indicating packed code.
How widely this file has been seen
Widely seen in the wild for a long time. High prior this is legitimate; isolated detections on common-old files are usually false positives.
Fingerprint and provenance
- File name
- Cyberpunk2077.exe
- Format
- Win32 EXE
- Code signing
- Signature valid: CD PROJEKT S.A.
- Size
- 57.2 MB
- Last analyzed
- Sep 23, 2026, 5:06 AM UTC
a7de82945c03e041fc7339fcf9066224d98db2f5d80fea50f7947bb350a60991Safety & FAQ
Complete recovery guidance and answers for the next decision.
What to do now
This file appears low risk based on the evidence available now.
- Recovery step 01
Run it only when it came from the developer's official site or another source you independently trust.
- Recovery step 02
A clean result reduces known risk, but it cannot guarantee that every new or targeted threat has been detected.
- Recovery step 03
Keep your antivirus and Windows updates switched on so you stay protected.
Safety FAQ
Direct answers grounded in the saved verdict and evidence in this report.
Is Cyberpunk2077.exe safe?
What is Cyberpunk2077.exe?
How many antivirus engines detected Cyberpunk2077.exe?
Is Cyberpunk2077.exe digitally signed?
What is the SHA-256 hash of Cyberpunk2077.exe?
Is it safe to run Cyberpunk2077.exe?
How up to date is this analysis of Cyberpunk2077.exe?
Community
Member reviews and reports for this exact file hash.