alibi 3.8 · python · consolidated reportscan BREAD-PC · 2026-06-09T18:23:26 · read-only · no network calls
Verdict

INPUT DEVICES DETECTED

No cheat brands or HWID spoofers were detected. The scan did find high-confidence input-device adapter software (XIM / Cronus / ReaSnow / KMBox / Titan). Some games treat these as bannable; some do not.

host
BREAD-PC
user
BradS
os
Windows 11 · 10.0.26200
admin
false
scan
2026-06-09 18:23:26 · pc-mode
Recent findings · last 180d
HIGH9verdict-drivingMEDIUM2dual-use signalsWARN1access deniedINFO3scan summary
cheat-kind 0input-kind 13dual-use 3archived 1 (off-verdict)

Why this verdict · 6 named items

click an item to jump & pin its finding card ↓
  • Process +3xim matrix — (PID 9320) running
  • AppData +1cronuszen — Cronus Zen Studio - 528 files, 87 distinct days
  • AppData +1rewasd — reWASD - 96 files, 22 distinct days
  • Process +2hidhide — (PID 5104) running
  • USBcronus — Cronus Zen
  • Processrewasdengine — (PID 6248) running
Forensic timeline

Log-scale recency · 15 recent + 1 archived findings

5in last 7 days
5in last 30 days
10in last 180 days
HIGHMEDWARNINFOtoday−1d−3d−1w−2w−1mo−3mo−6moarchive · 1> 180dlog compressed →4y

01·aActivity by pattern

linear timeline · install diamond · activity circle
OCT '25NOV '25DEC '25JAN '26FEB '26MAR '26APR '26MAY '26JUN '26CRONUSZENcronuszen · InstallDate · 2025-09-22cronuszen · NewestWrite · 2026-06-09cronuszen · OldestWrite · 2025-10-12CRONUScronus · LastArrival · 2026-06-09cronus · FirstInstall · 2025-10-12cronus · LastRemoval · 2026-06-09REWASDrewasd · InstallDate · 2026-01-18rewasd · NewestWrite · 2026-06-08rewasd · OldestWrite · 2026-02-01HIDHIDEhidhide · InstallDate · 2026-01-18hidhide · process start · 2026-06-09XIM MATRIXxim matrix · InstallDate · 2026-02-04xim matrix · LastArrival · 2026-06-09xim matrix · FirstInstall · 2026-02-19xim matrix · LastRemoval · 2026-06-09xim matrix · NewestWrite · 2026-06-09xim matrix · OldestWrite · 2026-02-19xim matrix · process start · 2026-06-09REWASDENGINErewasdengine · process start · 2026-06-09DS4WINDOWSds4windows · InstallDate · 2026-01-15OBS STUDIOobs studio · InstallDate · 2026-02-08today

21 dated events across 8 patterns. Diamonds are install dates from the Windows uninstall registry; circles are execution, write, USB-arrival, or run events. Hover any marker for the source field and date.

Category signal · which scanners firedclick to filter findings ↓

00All indicators · score distribution

findings + processes + services · 24 indicators
total24indicators
HIGH9 findings · 3 process · 1 service13
MEDIUM2 findings · 0 process · 1 service3
WARN1 findings · access denied1
INFO3 scan-summary findings · informational only3
LOW / CLEAN3 LOW/CLEAN processes · 1 LOW/CLEAN services4

Each slice is one score tier across all artifact classes. 13 HIGH indicators (54.2%) drive the verdict. A clean machine would show a single solid LOW/CLEAN ring — the more red and amber present, the worse the picture.

01Findings · cheat trace scan

recent (≤180d) · verdict-relevant

HIGH

9 findings

MEDIUM

2 findings

WARN · access denied

1 findings

INFO

3 findings · hidden by default

02·03Runtime · processes & services

hover a row to highlight linked findings ↑

Processes

3HIGH0MED3LOW/CLEAN
scorepidname · path
LOW12384chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
4 of 6 shown · 2 CLEAN hidden

Services

1HIGH1MED1LOW/CLEAN
scorestatename · path
2 of 3 shown · 1 CLEAN hidden
archived · > 180 days · did NOT affect verdict

1 finding(s) with a most-recent timestamp older than 180 days were demoted by the recency-decay rule. They are logged here for transparency — old artifacts from games or tools the user has long since stopped using do not, on their own, make a currently-clean machine look dirty.

Coverage limitations

alibi 4.0 · python · read-only scan · no system state was modifiedno network calls · file self-contained