alibi 3.8 · python · consolidated reportscan BREAD-PC · 2026-05-26T02:14:11 · read-only · no network calls

Verdict

CLEAN

No recent HIGH or MEDIUM matches against the cheat / input-device / dual-use keyword database (within the last 180 days). This is necessary but not sufficient evidence — see limitations below.

host: BREAD-PC
user: BradS
os: Windows 11 · 10.0.26200
admin: false
scan: 2026-05-26 02:14:11 · pc-mode

Recent findings · last 180d

HIGH0verdict-drivingMEDIUM0dual-use signalsWARN1access deniedINFO3scan summary

cheat-kind 0input-kind 0dual-use 0archived 1 (off-verdict)

Forensic timeline

Log-scale recency · 4 recent + 1 archived findings

0in last 7 days

0in last 30 days

0in last 180 days

Category signal · which scanners firedclick to filter findings ↓

01Findings · cheat trace scan

recent (≤180d) · verdict-relevant

WARN · access denied

1 findings

WARNotherBAM
Access denied
sourceHKLM\SYSTEM\CurrentControlSet\Services\bam\State\UserSettings

INFO

3 findings · hidden by default

INFOotherKnownHashes
Hashed 284 executables, checked against 1 known-bad SHA256 sample(s)
source(scan)
Hashed
284
DatabaseSize
1
INFOotherProcessModules
Scanned 6021 DLL modules across all running processes
source(scan)
ModulesScanned
6021
INFOotherRecencyDecay
Recency analysis: 0 recent, 2 historical (>180d demoted), 1 unknown-timestamp
source(summary)
ThresholdDays
180
RecentFindings
0
HistoricalFindings
2
UnknownTimestampFindings
1

02·03Runtime · processes & services

hover a row to highlight linked findings ↑

Processes

0HIGH0MED4LOW/CLEAN

score	pid	name · path
LOW	12384	chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
LOW	8472	steam.exe C:\Program Files (x86)\Steam\steam.exe
CLEAN	4288	explorer.exe C:\Windows\explorer.exe
CLEAN	1248	svchost.exe C:\Windows\System32\svchost.exe

2 of 4 shown · 2 CLEAN hidden

Services

0HIGH0MED1LOW/CLEAN

score	state	name · path
CLEAN	Running	vgc · vgc "C:\Program Files\Riot Vanguard\vgc.exe"

0 of 1 shown · 1 CLEAN hidden

archived · > 180 days · did NOT affect verdict

1 finding(s) with a most-recent timestamp older than 180 days were demoted by the recency-decay rule. They are logged here for transparency — old artifacts from games or tools the user has long since stopped using do not, on their own, make a currently-clean machine look dirty.

INFOinputInstalledorig MEDIUM · 2,750 d oldmost recent 2018-11-04
xim[xim] XIM Manager 2018
sourceXIM Manager 2018
Pattern
xim
Name
XIM Manager 2018
InstallDate
2018-11-04
MostRecentTimestamp
2018-11-04T00:00:00
AgeDays
2750
OriginalSeverity
MEDIUM

Coverage limitations

DMA cheats cannot be detected at runtime by design — no PC-side footprint. This scan flags DMA development artifacts only.
Input devices configured on a separate machine leave no trace on this PC.
Session duration is recorded in SRUM and requires an ESE database parser. Not extracted here.
Keyword matching only. Sophisticated cleaners can wipe most of these artifacts.
A clean result is necessary but not sufficient.

alibi 4.0 · python · read-only scan · no system state was modifiedno network calls · file self-contained