What Is Anybrain?
Anybrain is a company that supplies the game industry with behaviour-based anti-cheat. Unlike classic signature-based anti-cheats (EAC, BattlEye), Anybrain focuses on a statistical model of player input: mouse motion profile, trigger-pull timing, aim trajectory curve.
Wardogs uses Anybrain for both server-side behaviour scoring and client-side hardware ID collection. That is two layers: aim/input analysis (behavioural) + HWID ban (hardware).
They run independently. Even with clean hardware an abnormal aim pattern can get flagged; even with natural aim a banned HWID blocks access to the game.
Which Hardware IDs Does Anybrain Collect?
There is no public documentation, but from Wardogs ban reports and the fact that users regain access after HWID rotation, the detection profile reads:
Disk serial number (NVMe + SATA): the unique number written in each drive's firmware. MAC address (Ethernet + Wi-Fi): physical network adapter address. SMBIOS: motherboard serial, UUID, baseboard, chassis. GPU vendor/device ID + GPU serial. Monitor EDID: PnP serial. System UUID (Windows MachineGuid). CPUID + brand string. TPM 2.0 EK hash (on Windows 11 systems).
Anybrain collects a mix of these and writes them to its ban database. Even one match blocks access.
How Do You Bypass an Anybrain HWID Ban?
User-mode spoofers (running as admin but not in kernel) are not reliable against Anybrain — Anybrain reads IDs like disk serial and SMBIOS below the OS layer, in some queries directly through driver calls. Spoofing above the kernel layer shows through on those calls.
A kernel-level spoofer (such as HWID Core) loads a Ring0 driver and rotates IDs inside the OS kernel. That returns consistent new values across every path Anybrain uses: WMI, SetupAPI, Registry, direct driver IOCTL.
HWID Core rotates disks, MACs, SMBIOS, GPU and monitor IDs at kernel level before Wardogs starts, then clears memory before the game loads. All Anybrain sees is the new identities.
Does DMA ESP Also Bypass Anybrain's Behavioural Layer?
Yes, because DMA-based ESP + aim assist runs no software on the gaming PC. Game memory is copied over a PCIe DMA card to a second PC; the ESP is drawn on the second screen, and aim assist produces mouse input via external hardware like KMBox.
Anybrain's client side (hardware ID + input sampling) runs on the gaming PC. It never sees the second PC. Mouse movement from KMBox is indistinguishable from a real USB mouse — the OS registers it as a physical input device.
On the behavioural side the aim-assist settings matter: UltraStealth mode mimics a human movement profile. Standard mode is more aggressive and statistically more conspicuous — but it still stays below the detection threshold for most players. Either way, the gaming PC looks clean to Anybrain.