explaingit

biplobsarker/umbrella-hwid

★ 18C#Audience · generalComplexity · 2/5ActiveLicenseSetup · easy

TLDR

Windows tool that changes hardware identifiers (motherboard, disk, MAC, GPU, registry entries) so a PC reports a different machine identity, marketed for privacy testing but tagged for bypassing game anti-cheat bans.

Mindmap

mindmap
  root((Umbrella-HWID))
    Inputs
      User selected components
      Admin privileges
      Restart trigger
    Outputs
      New disk serials
      New MAC address
      New GPU and baseboard IDs
      Checker report
    Use Cases
      Privacy testing
      Hardware fingerprint research
      Game ban workaround
    Tech Stack
      C#
      Windows registry
      WMI

Things people build with this

USE CASE 1

Inspect what hardware identifiers a Windows machine exposes and which ones a tool like this can rewrite.

USE CASE 2

Test how a privacy or asset-management product behaves when the underlying disk and MAC IDs change between reboots.

USE CASE 3

Verify with the bundled checker.bat that selected identifiers were actually replaced after a restart.

USE CASE 4

Study the troubleshooting list as a reference for which subsystems (DNS, Defender, motherboard drivers) a spoofer typically breaks.

Tech stack

C#WindowsWMI.NET

Getting it running

Difficulty · easy Time to first run · 5min

Download zip, extract with password 2026, run as Administrator, restart. Antivirus and Defender often block the binary.

MIT license, free to use, modify, and redistribute as long as the copyright notice is kept.

In plain English

This repository ships a Windows program called Umbrella HWID. A Hardware ID, or HWID, is the set of serial numbers and identifiers your computer's components report to the operating system: the motherboard, the disk drives, the network card's MAC address, the GPU, and various registry entries. Umbrella HWID is a tool that changes or masks those values so the PC looks like a different machine to whatever is reading them. The README presents the tool as being for privacy, personalization, and hardware identification testing. The repository description and topic tags are more explicit about the typical use case, naming game anti-cheat systems such as Valorant Vanguard, EAC on Apex Legends, FiveM CfX:re, and BattlEye, along with phrases like ban fix and unban tool. Readers should understand that running such a spoofer against an online game is typically against that game's terms of service. Installation is aimed at end users on Windows 10 and Windows 11. The user downloads UmbrellaSpoof.zip from the releases page, extracts it with the password 2026, and runs Umbrella-HWID.exe as Administrator. Inside the application the user picks which identifiers to change (Disk, Baseboard, MAC, GPU and so on), clicks Apply Changes, waits for the process to finish, and then restarts the PC for the new serial numbers to take effect. The README includes a short troubleshooting table. If the serials do not appear to change, it says to confirm the tool was run as Administrator and that the machine was restarted. If the internet stops working, it suggests flushing DNS with ipconfig /flushdns or restarting the router. If antivirus or Windows Defender blocks the file, it suggests turning off real-time protection or adding the tool to the exclusions list. For blue screens it recommends updating motherboard drivers and turning off Vanguard or FACEIT before running. A checker.bat script is mentioned for verifying that the identifiers actually changed. The project is released under the MIT license. The README is otherwise short, with no source-code instructions, build steps, or notes on how the spoofing is implemented under the hood.

Copy-paste prompts

Prompt 1
Read the Umbrella-HWID README and list every hardware identifier it claims to change, then map each one to the Windows API or registry key that normally exposes it.
Prompt 2
Write a short defensive checklist for a Windows endpoint that wants to detect tools like Umbrella-HWID changing disk and MAC IDs between reboots.
Prompt 3
Audit the Umbrella-HWID install flow (zipped exe, password 2026, run as Administrator) for the obvious red flags a security team should flag.
Prompt 4
Explain why a HWID spoofer typically requires a restart and which Windows caches hold the old identifiers until then.
Prompt 5
Summarise the legal and terms-of-service risks of running an HWID changer against an online game like Valorant or Apex Legends.
Open on GitHub → Explain another repo

Generated 2026-05-22 · Model: sonnet-4-6 · Verify against the repo before relying on details.