Skip to content

DUXACPC checks for FiveM communities

Cheats leave traces.
DUXAC finds them.

Your staff creates a PIN, the player runs DUXAC.exe and agrees to a consent screen, and 34 checks look for cheat traces on the PC: processes, files, execution history, drivers, DMA hardware and more. You get a scored report to review, not a black-box ban.

built-in checks
34built-in checks
check categories
11check categories
signature types
15signature types
character PIN, nothing to install
8character PIN, nothing to install

Product preview

Every check your staff runs, in one place

Built from the same components as the real dashboard. All numbers and players below are illustrative sample data, not live data.

Sample Community RP
Product preview · illustrative sample data
Scans · 7d
131
18%increasevs. previous 7d
Detected · 7d
10
awaiting staff review: 3
Quota used
214
of 600 scans this month
Median scan
2m 48s
with admin rights

Scans by verdict

Last 7 days

Running now

Live

Player “Juno”

  • PRC-001Running Processes
  • FIV-001FiveM Installation
  • EXE-001Prefetch
  • EXE-004USN Journal
  • DRV-001Loaded Drivers

Verdict mix

Last 7 days
131scans
  • Clean96 · 73%
  • Suspicious17 · 13%
  • Detected10 · 8%
  • Inconclusive8 · 6%

Recent reports

Risk · coverage
  • Player “Nova”Detected92 risk4m
  • Player “Kade”Suspicious41 risk18m
  • Player “Rook”Inconclusive0 risk36m
  • Player “Ivy”Clean3 risk1h

01How it works

From PIN to reviewed report

No resource to install on your server and nothing that stays on the player's PC. A PC check is a short, consented, one-off scan.

  1. 01

    Staff creates a PIN

    In the dashboard, a staff member starts a scan for a player and gets a one-time PIN such as 7KQ4-M2XA, valid for 15 minutes.

  2. 02

    Player runs DUXAC.exe

    The player downloads the scanner from this site, verifies its SHA-256 if they like, and enters the PIN. Nothing is installed.

  3. 03

    Consent, then scan

    The consent screen names your community and lists every check with the data it reads. The player accepts or declines; an accepted scan must finish within 30 minutes.

  4. 04

    Staff reviews the report

    Findings are uploaded as they are produced, the API computes a verdict, and your staff confirm or clear it. The player only sees a neutral message.

02Coverage

34 checks across 11 categories

27 checks run without administrator rights; 7 more need them. Every check documents what it reads, its highest possible severity and its known false positives.

  • 5 checks

    System Security State

    Virtual machines, test signing, disabled security features and antivirus exclusions that cheats rely on.

  • 4 checks

    Running Processes & Modules

    Running programs, unsigned binaries in user folders, modules loaded into FiveM and handles opened on it.

  • 1 check

    Memory String Scan

    Searches the memory of selected processes for cheat strings (needs administrator rights and the memory scan feature).

  • 4 checks

    FiveM & GTA V Installation

    The FiveM installation, GTA V directory, modified game data, logs and crash dumps.

  • 4 checks

    File System Artefacts

    Known cheat files, freshly created executables, the recycle bin and removable or virtual drives.

  • 5 checks

    Execution History

    What ran on the PC recently: Prefetch, BAM, user execution traces, the USN journal and autoruns.

  • 2 checks

    Drivers & Services

    Loaded kernel drivers and installed services, including vulnerable drivers used to load kernel cheats.

  • 2 checks

    Hardware & DMA

    Traces DMA cards and macro hardware leave behind: PCIe device ids and input-device software.

  • 2 checks

    Network & Browser Traces

    Cheat-seller and loader domains in the DNS cache and in browser history (domains only).

  • 4 checks

    Anti-Forensics & Cleaning

    Cleared event logs, disabled activity recording, trace cleaners and clock manipulation.

  • 1 check

    Scanner Integrity

    Debuggers, hooks and unofficial builds of the scanner itself, checked against published release hashes.

03Check showcase

Look inside any check

Pick a category and a check. Everything here is read from the catalog the scanner implements, including the exact sentence the player sees on the consent screen.

What ran on the PC recently: Prefetch, BAM, user execution traces, the USN journal and autoruns.

EXE-001 Needs admin rights

Prefetch

Windows Prefetch records of programs run in the lookback window, matched against signatures; programs that ran and were then deleted are flagged.

What it reads (shown on the consent screen)

Names, run counts and last run times from C:\Windows\Prefetch.

Highest severity
critical
Coverage weight
5

Signature types evaluated

  • File name
  • File path

False-positive notes

  • Deleted-after-run is low severity unless the name matches a signature.

04DUXAC Intelligence

A verdict that knows what it could not see

The scanner only reports findings. The API scores them, rewards indicators from independent categories, and weighs coverage: a scan where key checks were skipped cannot come back “clean”. Toggle findings below; this runs the real verdict engine.

1 · Findings the scanner uploaded

2 · How the scan ran

Verdict computed by the API

Clean

No significant indicators, and enough of the checks completed to trust that.

Risk score
0.0
Coverage
100%
Indicators
0

Reasons

  • No significant indicators found

Policy: detected at a critical indicator with ≥ 85% confidence or risk ≥ 80; suspicious at risk ≥ 35 or any high indicator; “clean” needs ≥ 80% coverage.

A recommendation for staff, not proof

05Signatures

Your own indicators, without code

Add hashes, file names, paths, window titles, memory strings, drivers, PCI ids or domains. Signatures are data with exact, contains or glob matching, never regex, validated (strings need ≥ 6 characters) and versioned. This playground runs the real matcher.

Signature

files, processes, execution history

e.g. %APPDATA%\*\menu.dll

Values seen on a PC · one per line

Result · 1 of 3 match

  • %APPDATA%\Vortex\loader_v2.exematch
  • %APPDATA%/Discord/Update.exe
  • %LOCALAPPDATA%\Temp\loader.exe

Case-insensitive. Paths are normalised (/ becomes \). Glob: * is any run, ? one character, and the whole value must match. No regular expressions.

06Privacy & security

Built for players' trust as much as staff's

A PC check only works if players agree to it. DUXAC asks for explicit consent, collects as little as possible, and is open about what it cannot do.

  • Signed uploads

    After the PIN claim, every scanner request is HMAC-signed with a per-scan secret, bound to a timestamp (±120 s) and a single-use nonce.

  • Release hashes

    The scanner reports its own SHA-256; the API compares it with published releases and flags or refuses unofficial builds. The scanner never decides the verdict.

  • Pseudonymous hardware reference

    Hardware identifiers are hashed on the PC with a key unique to your workspace. You can link scans of the same PC; nobody can correlate it across communities.

  • Minimal data, limited retention

    Only findings and basic system information leave the PC, with the Windows user name replaced by %USERPROFILE% in paths. Reports are deleted after your plan's retention period.

07Pricing

Plans sized to your staff team

Plans differ in scans per month, staff seats, custom signatures, live progress, memory scan and how long reports are kept.

08FAQ

Questions communities and players ask first

Get started

Run your first PC check

Create an account, attach the license the DUXAC team issues you, invite your staff and create a PIN. That is the whole setup.