🕵️ FRST Forensic Analyzer

No log loaded
📂
Drag & drop FRST logs here
or
← Upload FRST.txt or Addition.txt to begin analysis
🚨 Threat Report
No threats detected yet. Upload a log to see analysis.
🔍 Keyword / Regex Extractor
📄 Extraction Output
📝 Fixlist Scratchpad
💡 Quick Add from Threats
🎨 Custom Highlights
🛡️ VirusTotal Integration

Get free API key from virustotal.com

📊 About

This tool analyzes FRST (Farbar Recovery Scan Tool) logs for malware indicators. It detects:
• Suspicious scheduled tasks (geographic names, LOLBins)
• MD5/SHA256 hash-named folders (malware droppers)
• Defender disable keys and exclusions
• RenPy folders (common malware vector)
• Encoded PowerShell commands
• Orphaned services/drivers/firewall rules
• KMS crack indicators (SppExtComObjHook.dll)
• Browser hijacks (hao123, mysearch.avg)
• And more...