Running DUXAC.exe

Download and verify#

Download DUXAC.exe only from the official download page. The page shows the SHA-256 of every published release. To check that your file is genuine, open PowerShell in the folder where you saved it and run:

Get-FileHash .\DUXAC.exe -Algorithm SHA256

The Hash value must equal the one on the download page (letter case does not matter). If it differs, delete the file and do not run it.

The scanner also reports its own hash when you enter the PIN. A build that is not an official release is flagged to the community, or refused, depending on the platform settings.

Administrator rights#

The scanner runs as a normal user by default. On the consent screen you can choose Restart as administrator; Windows asks you to confirm.

With administrator rights, the scanner can also read:

• Prefetch and Background Activity Moderator (BAM) records: which programs ran recently;
• the USN journal: recent file creations, renames and deletions;
• process memory for the memory string scan (if the community's plan includes it);
• Microsoft Defender exclusions;
• handles other programs hold on FiveM, and cleared event logs.

Without administrator rights these checks are skipped. That is your choice, but it lowers the scan's coverage: a scan with no findings and low coverage comes back as inconclusive rather than clean, and the community may ask you to run it again.

Time limits#

• The PIN must be entered before it expires (the staff member can create a new one).
• After entering the PIN you have a limited time to accept or decline.
• After accepting, the scan must finish before its deadline. If your connection drops, the scanner retries uploads with back-off until then.

After the scan#

Close the scanner. It removes its temporary files and nothing stays installed. You can delete DUXAC.exe or keep it for the next check; it will tell you when an update is required.