Extract File Paths
Pull every Windows and UNIX file path out of a text, with duplicates removed and the list sorted.
- Runs in your browser
- Free to use
About this tool
Incident reports, crash logs and malware analyses are full of file paths mixed with prose. The File Path Extractor finds Windows drive and UNC paths and, optionally, UNIX paths, strips trailing punctuation, removes duplicates and sorts the list so you can turn it into indicators, exclusions or a file inventory in seconds, entirely in your browser.
Related: Extract Hashes and the Regex Matches Extractor for anything with a custom pattern.
How to use it — quick steps
- 01
Enter the text to scan
Type or paste the text to scan in the field above. Nothing is uploaded. Use Ctrl + V to paste.
- 02
Adjust the options
Pick the settings that fit your case; the defaults work for most people. Changes apply instantly.
- 03
Press "Extract file paths"
Press "Extract file paths" or Ctrl + Enter. The result appears instantly below the form.
Key features of this tool
Precise patterns
Battle-tested regular expressions match real-world formats while avoiding common false positives.
Deduplicated
Every matched entry is returned once (without duplicates), with counts of total and unique matches.
Private
The text is processed in your browser; text and documents never leave your device, ensuring data privacy.
Frequently asked questions
What counts as a Windows path?
Anything starting with a drive letter (C:\) or a UNC server (\server\share) followed by backslash-separated segments. Paths with spaces inside a segment are cut at the space, so copy those by hand.
What counts as a UNIX path?
A slash-separated path starting with / or ~/ that stands alone in the text (after a space, quote, bracket or at the start of a line), such as /etc/hosts or ~/.ssh/config.
Why is Windows the default?
URLs and many other strings contain slashes, so UNIX matching produces more false positives; switch to UNIX when the text really contains UNIX paths.
Are my files or data uploaded?
No. The tool is plain JavaScript that runs in your browser; the files or data you provide here are never uploaded to our servers.