Are you sure that the sniffer provides the absolute truth, i.e., that its result is 100% accurate and reliable? Can the author, Sir Kirinyale, guarantee that?
Apparently, only those who understand the save file structure can clarify the situation.
I'm asking because I used to download and run two versions of the sniffer, and my impression (purely superficial, as I'm a "zero" in modern coding) was that they were made "quickly" and "on the fly." :)
By the way, from the version history:
Version 4.1
----------
Fixed (presumably - until new bug reports are received) a buggy check
for cheating.
(Василь Симоненко. Люди – прекрасні)