The supported archive formats are the following: Zip, 7z, JAR, RAR, RAR5, TAR, ISO, CAB, ARJ, LHA, LZH, RPM, DEB, LZMA, WIM, DMG, XAR, MSM, SFX, XZ, VDI, VHD, VMDK, RAW, CPIO, HFS, APK, GZ, MSI, TAZ, TGZ, TBZ, BZ2, VIB, AR, ALZ, TSE, TSEC, TSEZ, ACE, PST, OST, OFT, IPA, JMOD, MSIX, APPX, EGG, DLL, PGP (with password only), TBWX, SPF, XPI, VTAR, CRX, E01, ASICS, ASICE, GIT Bundle, RIBC, SMINE, MS OLE, ZSTD.
MetaDefender Core can also extract self-extracting archives created by both 7zip, WinRAR, PKZIP, IExpress.
Email/Calendar files (e.g., EML, MSG, ICS) are extracted to scan header, body, attachments.
Encrypted 7z, Zip, RAR, PDF, MS Word (DOC, DOCX, DOCM, DOTX, DOTM)/Excel (XLS, XLSX, XLSM, XLSB, XLTM)/Powerpoint (PPT, PPTX, PPTM, PPSM, POTX, POTM) can be decrypted by the archive module with a given password.
VHD extraction is applied to FAT16, FAT32, NTFS, EXT32, GPT-style only.
For extracting VMDK:
The Archive module supports FAT, NTFS, HFS, EXT for the disk image with one partition only; supports FAT, NTFS, HFS for multiple partitions.
If a VMDK was created from a 20GB disk image, the extraction task would require at least 20GB of free disk space plus the free disk to extract archive files on that disk image.
RAW extraction is applied to NTFS, HFS only.
Supported split archive: ZIP (the first file only), TAR (the first file only), RAR (all parts), CAB (all parts).
For more information, please see the screenshot below:
