Mysterious Hacker on FFAReplays

[Lightweight!]

Hello everybody!
Recently a guy who claims himself as the "mh-cleaner" appeared on ffareplays trying to animate us to start hacking. So far so good, not a big thing until he said that he is from FML. At this point i got curious and started an investigation in this case. You will be surprised what i figured out! 

The perpetrator left a track which is also the most important evidence... it is.... the replay!
The parser was my best friend while doing the investigation. Let us start with the evidence.
What i know: The game was played on Northrend, the suspect is using the hotkeys 1,2 and 3 while he uses hotkey 1 the most.

Before i start with the suspects here the properties from the hacker:
http://img832.imageshack.us/img832/8760/actionsapmhacker.png


Suspect #1: MKKKKKKKKKKKKKKKKKKKKKKKKKKKKK
Mkkkkk from Belgium, who would have thought to see him as a suspect in this case. Sometimes nice, sometimes a bit sneaky. But why is he a suspect?
http://img14.imageshack.us/img14/4958/suspectmk.png
If you compare the hacker hotkeys with his, the result will be that mkkkk is using exactly the same hotkeys with the preference of using hotkey "1" the most. Unlike the hacker he uses hotkey "3" more often.

The interesting thing in my eyes is that if you would compare the actions of the hacker game to the ones from mkkkkk you will see that if the hacker game (which was 27 minutes) would lasted as long as mmmmmk's game, the actions (right click,select/deselect, select group hotkey) would match a bit. In addition to that the hacker is playing hipporiders in this game which mkkkk likes to do also if he hits nightelf with random.
Result: Guilt factor 10%

Suspect #2: Aq.Gammel
Compared to the little differences in mkkkk's case, Gammel's hotkeys match 100 % perfectly with the hacker ones.
http://img826.imageshack.us/img826/5606/suspectgammel.png
Preferences on "1", a bit usage of "2" and "3" close to zero (surely used for buildings). Also take a look at the hackers actions and the ones from Gammel. His actions match perfectly with the hacker game if you simply let them grow proportional.
Result: Guilt factor 20%

Suspect #3: Renaud
Yes, you may now think "how can Renaud be a suspect in such a crime when he is always well mannered and helpful to all. Well, his insignificance in hacking makes him a suspect here. Just take a look at his hotkeys and compare them to the hotkeys from the hacker.
http://img809.imageshack.us/img809/2233/suspectrenaud.png
A big preference on hotkey "1" and totally ignoring hotkey "3" as the hacker does.
And here the evidence which made me very suspicious. Take a look at the comment the hacker made on ffareplays:
"Name: MH_Cleaner
and @lightweight of course i watch there creep route etc but only to suicide them if they hack,"
This guy says "there" instead of "their". The only person to do so is Renaud who does the same mistake.
The hacker game was played on Northrend (when does Renaud play ffa ladder on north?) and also i simply could not believe that Renaud would do that. Renaud is the last i would suspect to maphack (although he did in sc1).
Result: Guilt factor 0,1%

Suspect #4: F10EX
F10EX and I never liked each other. I did not leave my position in our dispute, neither he did until the end. He became a suspect after he posted comments on ffareplays and in this thread insulting the good old Lightweight like F10EX did in his best times. I got suspicious about that and checked the hotkeys. The results proofed me right to assume it might be him also.
http://img805.imageshack.us/img805/6673/newsuspect.png
Big preference on hotkey "1", lower usage of hotkey "2", close to no usage of hotkey "3" and total ignorance of all the other hotkeys.
Result: Guilt factor 60%

I would like to close the evidence here from my side and would be very interested to know what you think about this. Since we solved the humanstar smurf case and many other, i am confident to solve this case too with your help! 

Edit: F10EX joined the game and his appearance lowers the other guys guilt factor massively. Renaud is out the race (technical resignation). Plus i opened a new Poll!

Edit #2: The perpetrator is from the US so i apoligize to those whom i made suspects. I pretty much ran into a wall here  .
And to those who hack: LW is watching you!

Ps: Sorry for grammatical errors.

[tehlill0r]

hää ich checke nichts was soll das mit den tasten is doch schwachsinn.... klär mich mal auf ^_^

[Camp_and_Spank]

haha very amuzing LW:)

although i think most guys uses 1 more than 2 more than 3? but the ratios are interesting...

[Pinballmap]

hää ich checke nichts was soll das mit den tasten is doch schwachsinn.... klär mich mal auf ^_^

Er meint halt dass der Typ der auf ffareplays der sich als MH_cleaner ausgibt einer von den FML Spielern ist. Es gibt 3 verdächtige: mmmk,Gammel oder Renaud.


@topic voted for mmmmmmk, very similiar chat behaviour and the hotkey setup/apm is identical.

[ATiBright]

Perfect my normal usage of hot-keying my army to 3 since warcraft 3's release has hidden my tracks!

[Redkeekee]

Wait there are people that don't hotkey their buildings?

[FML|Renaud]

I use 1 for chims and hero
2-3 for hippo

8 for aowind
9 for chim roost
0 for zeppelin or altar

The time where I both remember to assign hotkeys 8-9-0 and think of using them are so rare I can count them on my fingers (though I usually am able to remember it as far as zeppelins goes)

[Redkeekee]

I use 1 for chims and hero
2-3 for hippo

8 for aowind
9 for chim roost
0 for zeppelin or altar

The time where I both remember to assign hotkeys 8-9-0 and think of using them are so rare I can count them on my fingers (though I usually am able to remember it as far as zeppelins goes)

No Idea how you can do it that way.  Heros gotta be apart from chim if I want to keep them alive while keeping chims focusing.
1 heros
2 chims
3 hippo
4 aowar then aolore then 2nd hippo group or hippo/dott or dott
5 tree of life then aowind after starting t3 upgrade
6 chim roost
occasionally if im building lores late game i'll shift it to 5 lore 6 wind 7 roost
9 hunts hall
0 altar

[Redkeekee]

This guy says "there" instead of "their". The only person to so is Renaud who does the same mistake.

Lol, I've almost never seen ANYONE on north use "there" "their" and "they're" correctly.  Hell, there are tons of American's that don't even use them right.

Otherwise I just lol'd.  BURN THE WITCH!!!

[Persuade]

Lol, I've almost never seen ANYONE on north use "there" "their" and "they're" correctly.  Hell, there tons of American's that don't even use them right.

Otherwise I just lol'd.  BURN THE WITCH!!!

Can't tell if making joke, or if incredibly ironic.

[FML|WorpeX]

It's mmmmk. Actions and hotkeys match him perfectly, as does the way he talks. Gammel's hotkeys are similar, but don't really match that well considering he uses #2 A LOT and the hacker doesn't. Actions are slightly different too. Gammel is also super quiet and doesn't really care about the FFA scene much so I doubt that its him. Besides, we have a chat log of mmmk saying that hes going to try maphacking.

Still, can't prove anything so we can't really take any action.

[Lightweight!]

Well, my intention is not to ban this guy from fml, i just got curious that is all. And also it should show that hacking doesn't pay off at fml, because we will find out anyway.

Furthermore a statement from the suspected players could light up the dark  .

[ATiBright]

You guys use weird hotkeys here is the Bright way to do it.
1 (AOW) later Chim roosts.  2 (Ancient of Lore/Ancient of Winds) 3 (Primary army started putting all 3 heros and chims used to be slightly diff) 4 (Hippos) 5(Hippos n Crows) 6 Tree  no more hotkeys required.

In starcraft 2: 3 (Zealot/sentry/collossus/Immortal/ late game add stalker) 4 (stalkers) 5 Nexus's change to high templars when they come out change all nexus to 6. W gateways, Q warp prism, F1-F4 Location hotkeys at expands, Space bar Location hotkey at my upgrade facilities.

[Pinballmap]

You guys use weird hotkeys here is the Bright way to do it.
1 (AOW) later Chim roosts.  2 (Ancient of Lore/Ancient of Winds) 3 (Primary army started putting all 3 heros and chims used to be slightly diff) 4 (Hippos) 5(Hippos n Crows) 6 Tree  no more hotkeys required.

In starcraft 2: 3 (Zealot/sentry/collossus/Immortal/ late game add stalker) 4 (stalkers) 5 Nexus's change to high templars when they come out change all nexus to 6. W gateways, Q warp prism, F1-F4 Location hotkeys at expands, Space bar Location hotkey at my upgrade facilities.

noone asked you how you play sc2^^ plz stay on topic :)

[ATiBright]

You guys use weird hotkeys here is the Bright way to do it.
1 (AOW) later Chim roosts.  2 (Ancient of Lore/Ancient of Winds) 3 (Primary army started putting all 3 heros and chims used to be slightly diff) 4 (Hippos) 5(Hippos n Crows) 6 Tree  no more hotkeys required.

In starcraft 2: 3 (Zealot/sentry/collossus/Immortal/ late game add stalker) 4 (stalkers) 5 Nexus's change to high templars when they come out change all nexus to 6. W gateways, Q warp prism, F1-F4 Location hotkeys at expands, Space bar Location hotkey at my upgrade facilities.

noone asked you how you play sc2^^ plz stay on topic :)

I'm giving out free advice take it before I charge son :P