New Live check inside the running FiveM process
AquaScanner
Forensic scanner for servers and communities

Cheats leave traces.
We find them.

AquaScanner checks a player's PC live: running programs, the game itself, deleted files and tampering. You watch the scan in real time and get a clear result at the end.

Get started View example result

Download requires an account · Link valid for 15 minutes · No installation

Works with
  • FiveM
  • GTA V and RedM
  • Counter-Strike
  • Valorant
  • Roblox

Live check of the game process for FiveM, RedM, alt:V and GTA V. File, trace and browser history searches for all games.

AquaScanner / Scan #1042 / Result
Cheats likely There are clear findings. The most important ones are listed below.
Duration: 2m 47s Administrator: yes Game checked live: yes
3Detected
2Suspicious
4Info
  • Manually mapped module in the game processA PE image sits in private memory with no file on disk.
    Detected
  • Program has memory access to the gameloader.exe · read memory, write memory · Unsigned
    Detected
  • Prefetch was probably clearedOnly 4 entries, although Windows has been installed for a while.
    Suspicious
Features

Built for you and your team

Not just file names: AquaScanner sees what a program does, what was deleted and what is really running in the game.

Uncover deleted cheats

Windows remembers names even after deletion. The Recycle Bin, USN journal, recently opened files and ShimCache reveal what was cleaned up before the scan.

Your own forensic lab

Memory, files, traces and history in a single pass. The most important findings come first.

  • Live game memory
  • Deleted files
  • Prefetch and Windows traces
  • Browser and network
  • Drivers and system protection

Spot bypasses

Cleared event logs, emptied Prefetch, disabled services and Defender exclusions are reported.

Custom signatures

Found a new cheat? One line in custom_signatures.txt is enough, and the next scan knows it.

Download requires an account

The scanner is delivered through a personal link that is valid for 15 minutes. After that, simply create a new one.

A scan in detail

See exactly what the player was up to

Every scan is split into sections. With a few clicks you see what stands out and why.

Cheats likely
  • Cheat string in executable memory: Aimbot
    Detected
  • File in the FiveM plugin folder: x3d3d11.dll
    Detected
  • Windows Defender exclusion for a suspicious path
    Suspicious

The result at a glance

A clear assessment. Cheats likely, notable or clean, with reasoning.

Every finding explained. Path, behaviour and hash are included so you can verify each hit.

Important things first. Evidence from the running game comes before plain file matches.

From PIN to verdict

One PIN, one pass on the player's PC, one result.

PIN
h9vb3k

Create a PIN

Sign in, create a scan and give the player the 6-character PIN.

Scan running
Checking game processes…

The player runs the scanner

They download the scanner, accept the terms and enter the PIN. You see the progress live.

Result ready Cheats likely

Read the result

Assessment, key findings and every hit. No need to send files around.

Transparent

The player knows what happens

Before the scan, AquaScanner shows what is checked and what is uploaded, and the player has to agree. Hits are hints, not proof.

  • Uploaded: findings, file names and paths, plus the most recent browser history entries. The player sees and accepts this before the scan.
  • No document contents, keystrokes, passwords or cookies.
  • Web addresses are shortened so only the search terms remain.
  • Only the account that created the scan can see the results.
FAQ

Frequently asked questions

How long is the download link valid?

15 minutes. After that it has expired and you create a new one in the dashboard with one click. You only get the link with an account.

Does the player need administrator rights?

The scanner also runs without them, but then checks less (for example no handle analysis, no USN journal and no Prefetch). The result states whether it ran with admin rights. With administrator rights the check is complete.

Does the game have to be running during the scan?

For the live check of the game process, yes. Cheats that are only loaded inside the game are otherwise not visible. Without a running game, files, traces and history are still searched, and the result notes that the live check was missing.

How reliable is a hit?

Hits are hints, not proof. A log can merely mention words like “Aimbot”, and tools such as mod injectors can be harmless. Verify every finding before anyone is accused. That is why every finding states why it stands out.

Does AquaScanner only work with FiveM?

The live check is designed for FiveM, RedM, alt:V and GTA V. The search for cheat files, deleted traces, browser history and tampering works for any game.

What is uploaded to the server?

The PIN, the scanner version, whether it ran with admin rights, the progress and, at the end, the findings with names and paths. The scanner also uploads the most recent browser history entries, with web addresses shortened so only the search terms remain. No document contents, keystrokes, passwords or cookies. The player sees this before the scan.

Ready for your first scan?

Create an account, get a link, issue a PIN. You will have your first result in a few minutes.

Get started