About Extract Files
Performs file carving to attempt to extract files from the input. This operation is currently capable of carving out the following formats: JPG,JPEG,JPE,THM,MPO GIF PNG WEBP BMP ICO TGA FLV WAV MP3 PDF RTF DOCX,XLSX,PPTX EPUB EXE,DLL,DRV,VXD,SYS,OCX,VBX,COM,FON,SCR ELF,BIN,AXF,O,PRX,SO DYLIB ZIP TAR GZ BZ2 ZLIB XZ JAR LZOP,LZO DEB SQLITE EVT EVTX DMP PF PLIST KEYCHAIN LNK Minimum File Size can be used to prune small false positives.
Input: binary bytes (text input uses UTF-8; a file retains its original bytes). Output: a list of files.
Format reference: Extract Files background and specification
Example
Use “Try example” to load this public sample and its settings, then run it.
Settings used in this example
| Parameter | Example value | Input and choices |
|---|---|---|
| Images | true | On or off |
| Video | false | On or off |
| Audio | false | On or off |
| Documents | false | On or off |
| Applications | false | On or off |
| Archives | false | On or off |
| Miscellaneous | false | On or off |
| Ignore failed extractions | false | On or off |
| Minimum File Size | 1 | Number |
Result
The result contains extracted files that can be downloaded separately.
Parameters
| Parameter | Default value | Input and choices |
|---|---|---|
| Images | true | On or off |
| Video | true | On or off |
| Audio | true | On or off |
| Documents | true | On or off |
| Applications | true | On or off |
| Archives | true | On or off |
| Miscellaneous | false | On or off |
| Ignore failed extractions | true | On or off |
| Minimum File Size | 100 | Number |
Before interpreting the result
Extractors find patterns; a matching address or identifier is not proof that it exists or is reachable. Inspect the sample and matching options to understand false positives.
How to use this page
- Paste your input or open a local file.
- Adjust tool options if needed, then choose Run tool.
- Copy the result or download the original output bytes.
Inputs and results are not added to the public catalogue or saved in the URL. Processing happens in your browser; HTTP Request and DNS over HTTPS send the requests you explicitly run. Files up to 128 MiB can be opened; decompression and image tools may have smaller processing limits. Large results have a shortened preview. Text and HTML downloads use UTF-8; binary downloads preserve output bytes. Pasted text follows browser newline handling; open a file when exact input bytes matter.