FIVEM PC CHECK · OPEN SOURCE · OFFLINE
A FiveM PC check
that shows evidence, not verdicts
aeterna-rongroi looks for the traces cheats leave on a Windows PC, and for settings that make cheating easier, then shows them as evidence. A player can check their own PC, or server staff can watch over a screenshare (SS) with the player's consent. It never tells you a PC is "clean".
Ordinary things that also produce this:
- PCs that boot in legacy BIOS or CSM mode
Evidence only. This report cannot prove that a PC is clean.
Pre-alpha. Most rules have not yet been checked against enough real PCs. Do not ban anyone because of what this tool shows, or clear anyone because of it.
How it differs from other PC checkers
Sends nothing anywhere
The program's code has no network access, and CI fails the build if someone adds it. No screenshots, no browser history, no remote access.
Open to inspection
Every rule and every check is on GitHub. Anyone can read what it looks for, and which ordinary things produce the same result.
Evidence, not a verdict
No score, no pass or fail. A person decides, with the report as one piece of evidence.
Every result is one of three
What 0.13.0 checks
| What | In plain words |
|---|---|
| FiveM itself | Whether FiveM's files are the real, signed ones, what add-on files sit in its folders, and when FiveM was last played beside when its folders were last writtenBoth Legacy and GTA V Enhanced |
| Programs that ran | What Windows remembers running recentlyPrefetch, BAM, PCA · context only: no rule judges a program by its file name |
| Wiped records | Windows' own logs cleared, or set so they cannot record |
| Protection switched off | Microsoft Defender switched off, Secure Boot, TPM, memory integrity and other Windows security settings |
| Risky drivers | Drivers with known security holes, which a cheat can abuse to get deep into WindowsCompared with 1,847 LOLDrivers entries |
| Deleted or renamed files | In FiveM's add-on folders |
| Modified Windows | Windows versions that come with protections removed, such as Atlas or ReviOSA person may run whatever Windows they like; this row only says which one it is |
| Other settings | Unsigned programs that start by themselves, and a hosts file that redirects FiveM or Rockstar |
| PowerShell | Whether a command downloaded something and ran it, told Microsoft Defender to look away, or cleared a log — kept as kinds of words, never the commandNEWFull scan only, with the player's agreement |
| How far back it can see | So that "not found" is never read as "never happened" |
Every rule in detail: the rule reference
A screenshare in five steps
- The player downloads itfrom the Releases page. Send the link, never the file.
- Check that it is the real fileIn Command Prompt (
cmd), in the download folder, runcertutil -hashfile <file name> SHA256and compare it withSHA256SUMSon the release page. If it does not match, stop. - Open SS modeClick "Screenshare check (SS mode)". The player agrees, or refuses; if they refuse, nothing is read.
- Check the headerIt must say official build. If it says UNOFFICIAL BUILD, do not rely on the result.
- Read the results row by rowtogether with the ordinary causes of each.
The full steps and how to read every row: the screenshare guide
What not to conclude
| The report shows | It does not mean |
|---|---|
| A "found" row | The player cheated |
| No "found" row at all | The PC is clean |
| "Not measured" | The player is hiding something |
| A machine-setting row | Anything about the person |
It cannot see: cheats running on a second PC (DMA), menus hidden from screen capture, or a Windows modified to fool the programs running on it.
Questions
Is it free?
Yes. It is open source under GPL-3.0-or-later; the rules are CC-BY-SA-4.0.
Does it send anything from my PC?
The program's own code sends nothing. The window version uses Microsoft WebView2, a Windows component that may send Windows diagnostic data according to your Windows settings. The command-line (CLI) version does not use WebView2. Details: PRIVACY.md
Why does Windows warn when I open it?
Releases are not code-signed yet. Always check the hash first (step 2), and do not turn SmartScreen off for the whole PC.
Does it need administrator rights?
No. It scans without them, but some checks then read "not measured", and the report says how many.
Does it catch every cheat?
No. It shows the traces left on the PC. Cheats on a second PC (DMA) and menus hidden from screen capture are out of its sight.
Can it tell me a PC is clean?
No, and it never will. Finding nothing does not mean there is nothing.
Which Windows does it run on?
64-bit Windows (x64). The measurements recorded in the project were made on Windows 11.
I found a way around a check. Where do I report it?
Privately, as SECURITY.md describes. Please do not post it publicly.
More questions: GitHub Discussions