Wibe Scanner Forensic PC Check For FiveM.
Hand the player a 6-digit PIN, they run one portable .exe, and minutes later your staff panel holds the full report: cheat files, execution history, deleted traces, USB devices and a screenshot.
Everything A Staff PC Check Needs
Wibe Scanner reads the traces Windows keeps on its own, so a renamed, moved or deleted cheat still leaves a mark.
Deep File Scan
User profiles, the C:\ drive and ProgramData are walked file by file. Names are matched against the cheat list, binaries are opened and their strings extracted, and YARA rules plus PE analysis catch renamed loaders.
Execution History
What ran on the PC, even if the file is gone: BAM/DAM kernel records, UserAssist, Prefetch, Amcache and recent execution traces.
BAMdiscord.exe21:04PrefetchFIVEM.EXE-3A1B2C4D.pf21:06UserAssistC:\Temp\x\inject0r.exe21:07Amcachesteam.exe21:09Deleted Trace Recovery
The NTFS USN Journal shows executables that were renamed or deleted right before the check. The Recycle Bin is searched for thrown-away cheat files.
menu_loader.exe→update.tmpupdate.tmpUSN Journal$R8K2Q1.exeRecycle BinFiveM Mods & RPF Check
Every .rpf in the FiveM mods folder is listed with its size and checked for cheat keywords, so staff see exactly what the player loads into the game.
Cleaner & Integrity Checks
Cheat cleaners leave holes. The scanner flags a missing SRUDB.dat, a stopped SysMain service, cheat domains in the hosts file and cheat persistence in scheduled tasks.
SRUDB.datDeleted / missingSysMainService stoppedhostsNo redirectsTask SchedulerNo cheat tasksUSB, Browser & Discord
Connected USB drives are listed and scanned, browser history and Discord LevelDB are searched for cheat sites, and Windows crash reports are checked for cheat names.
Screenshot & System Profile
When the scan ends, a screenshot of every monitor and a hardware profile (HWID, OS, CPU, GPU, storage devices) are attached to the report.
Three Steps, One Report
No accounts for players, no setup on their PC. A PIN ties the scan to your panel.
Create a PIN
A staff member creates a 6-digit PIN in the panel and sends it to the player.
Player runs the scanner
The player downloads Wibe Scanner with the PIN and starts it. The scan runs on its own and shows its progress.
Review the results
Findings, screenshot and system profile land in the panel under that PIN, sorted into threats and info.
All 17 Checks, In Order
This is the order the scanner runs its checks. Press run to watch a demo scan with sample data.
- User profiles Files
- C:\ drive Files
- ProgramData Files
- FiveM mods (RPF) FiveM
- Browser history Web
- USB activity Devices
- Recent execution Execution
- Prefetch & temp Execution
- BAM / DAM Execution
- UserAssist Execution
- USN Journal Deleted
- Recycle Bin Deleted
- Scheduled tasks Persistence
- WER crash reports Persistence
- Discord activity Web
- Hosts file Network
- System integrity Integrity
Built For A Fair Check
Runs only when started
The scanner does nothing until the player opens it. It installs no service and does not keep running after the scan.
Reads traces, not documents
It looks for cheat names, signatures and execution records. It does not upload personal files or browse private chats.
Results go to one place
The report is sent only to the panel of the server that created the PIN. See exactly what is sent.
Does the player need to install anything?
How long does a scan take?
Can a cheat hide by being renamed or deleted?
Does a finding mean the player cheated?
How do PINs work?
Is this the same as WibeAC?
Got a PIN?
Type it in and go straight to the download. Staff create PINs in the panel.