File scan report
Verdict Safe
Is Game Input Redist. dll safe? Yes, no threats found.
This Microsoft-signed GameInput redistributable DLL was flagged by none of the 71 antivirus engines that checked it, shows no hostile sandbox behaviour, and matches the signer's…
Read the whole reasonShow less
Strong evidence · A verified publisher signature, and no engine flags it.
This file appears legitimate and can be used as normal. Keep your antivirus enabled and get Microsoft components from official sources.
Good practice2 tips
We found nothing harmful in this file.
Use it only as part of a program you got from the developer's own website.
Keep your antivirus and Windows updates switched on.
No scanner can promise a file is 100% safe.
Antivirus results
0 of 71 flagged
- Flagged 0
- No detection 71
- No result 4
- Code signing Microsoft Corporation
- Test run Completed
- First seen 1mo ago
Chapter 02
Why we think so
2 points against it and 4 in its favour, checked against the scan evidence.
The reasoning behind this verdict
None of the 71 antivirus engines that checked it flagged this DLL, and it carries a valid Microsoft Corporation signature. Three sandbox runs showed no malicious verdict, no process injection and no network contacts. The generic YARA matches are ordinary capability rules and carry no weight.
No engine flagged the file, and 18 major antivirus engines reported it clean. The signature is valid and belongs to Microsoft Corporation, whose history in our records is 35 of 35 clean samples. The combined sandbox summary shows no malicious verdict, no injection target and no contacted domains. The mapping has no supporting artefact, so it is not evidence of defence tampering. The YARA matches are all generic capability or anti-debug rules, which ordinary software also triggers. Similar Microsoft-signed files were all previously judged clean.
What We Detected
No engine out of 75 flagged this 64-bit DLL. It carries a valid Microsoft Corporation signature, and the file name matches Microsoft's GameInput redistributable.
Threat Behavior
The sandbox runs loaded the DLL through regsvr32 and rundll32 and showed no injection, persistence or network contact. Six generic community YARA rules matched, but none is malware-specific. A complete host-reputation check is not available, though no hosts were contacted.
What To Do Now
No action is needed. Obtain the file from Microsoft or an official installer and keep your security software enabled.
Where this verdict could be wrong2 caveats
- YARAify matched generic community rules, including names that mention Cobalt Strike and ransomware, but all are marked generic and no engine or malware-specific rule backs them.
- The sandbox mapped and noted anti-debug and long-sleep tags, but no artefact of defence tampering was recorded.
These are the assessment's weak points. If you believe one applies to your file, report the verdict and we'll re-review it.
- Valid Microsoft Corporation signature
- 0 of the 71 antivirus engines that checked it flagged the file
- Signer has 35 of 35 prior samples clean
- No injection or network activity in the sandbox runs
- The DLL includes anti-debug checks and long sleeps, which are common in protected commercial software.
- No complete host-reputation check is available for this file.
6 sources checked · 5 complete · 1 not needed or not applicable. See every source
Chapter 03
What it did in our test
It ran in 3 isolated tests; no test environment rated what it did as risky.
Test run summary
Capture complete- 3isolated sandbox runs
- 19sandbox rule tags
- 8spawned processes
- 0network contacts
- 21filesystem & mutex artifacts
Includes 19 mapped techniques, every process, file, registry and network entry and 4 dropped files.
Show the technical evidenceChapter 04
Technical details
None of the 71 antivirus engines that checked it flag it; signed by Microsoft Corporation.
Sources checked
Every check behind this verdict
6 sources checked · 5 complete · 1 not needed or not applicable. Complete means the check returned a usable result; it does not mean the file is safe.
File fingerprint
- Last analyzed
- Oct 20, 2026, 5:03 AM UTC
- SHA-256
6d3650dbeea5f8c639972537dbaed3f2bb465561e63d34fa9661902f24cb9686- SHA-1
cd39cb59e01ea26996b8f611757c9aef612ed57d- MD5
655e7652532d3b966c1674c52d14873b
About this file
GameInputRedist.dll says it is GameInput (Microsoft® Windows® GameInput), 952.4 kB.
- Claims to be
- GameInput (Microsoft® Windows® GameInput)From the file's own version information, written by whoever built it.
- Original name
- GameInputRedist.dllMatches the shared file name.
- Type and size
- Win32 DLL · 952.4 kB
- Signer
- Microsoft CorporationValid code signature.
- First seen
- Sep 6, 2026On VirusTotal.
- Submitted by
- 467 distinct sources
- Packer
- None detected
- Entropy
- 5.79 of 8
First scanned
Includes every engine result (75), 6 matched signature rules, PE section entropy and packers and how widely the file has been seen.
Show the technical evidenceChapter 05
Questions & answers
Short answers to the 7 questions people ask most about this file.
Is GameInputRedist.dll safe?
What is GameInputRedist.dll?
How many antivirus engines detected GameInputRedist.dll?
Is GameInputRedist.dll digitally signed?
What is the SHA-256 hash of GameInputRedist.dll?
Is it safe to use GameInputRedist.dll?
How up to date is this analysis of GameInputRedist.dll?
Community
Member reviews and reports for this exact file hash.