Supported File Types

What is CDR?

An increasingly popular and effective method of compromising computer security, especially as part of a targeted attack, involves sharing common document types or image files with victims. Even though the original versions of these files do not contain executable data, attackers have found ways to trigger these files to execute embedded malicious code. Popular techniques used to accomplish this include VBA macros, exploit payloads, and embedded Flash or JavaScript code. This type of attack has a high success rate because most users don’t expect common file types to contain infections. For high-risk files or scenarios, Content Disarm & Reconstruction (CDR) prevents any possibility of malicious content (including zero-day threats) from executing. High-risk files can be sanitized through several different methods:

Removing hidden exploitable objects (e.g., scripts, macros, etc.)
Converting the file format

Supported File Types (both Windows and Linux)

	Source File Type	Description	Target Sanitized Types
1	doc	Microsoft Word 97-2003 Document	doc, docx, pdf, rtf
2	dot	Microsoft Word 97-2003 Template	dot, dotx
3	xls	Microsoft Excel 97-2003 Workbook	xls, pdf, csv
4	xlt	Microsoft Excel 97-2003 Template	xlt, pdf, png
5	ppt	Microsoft PowerPoint 97-2003 Presentation	ppt, pdf
6	pot	Microsoft PowerPoint 97-2003 Template	pot, pdf, png
7	rtf	Microsoft Rich Text Format	rtf, pdf*
8	docx	Microsoft Word Document	docx, txt, html, pdf, ps, jpg, bmp, png, tiff, svg, rtf
9	docm	Microsoft Word Macro-Enabled Document	docm, docx, txt, html, pdf, ps, jpg, bmp, png, tiff, svg , rtf
10	dotx	Microsoft Word Template	dotx
11	dotm	Microsoft Word Macro-Enabled Template	dotm , dotx
12	xlsx	Microsoft Excel Workbook	xlsx, csv, html, `tiff*, pdf, ps, jpg, bmp, png, svg`
13	xlsm	Microsoft Excel Macro-Enabled Workbook	xlsm , `xlsx, csv, html, tiff*, pdf, ps, jpg, bmp, png, svg`
14	xlsb	Microsoft Excel Binary Workbook	xlsb
15	xltx	Microsoft Excel Template	xltx, `pdf, png` , csv
16	xltm	Microsoft Excel Macro-Enabled Template	xltm, `pdf, png` , csv*
17	xlam	Microsoft Excel Add-in	xlam
18	csv	Comma-separated values	csv, xlsx
19	tsv	Tab-separated values	tsv
20	pptx	Microsoft PowerPoint Presentation	pptx, `html, pdf, ps, jpg` , bmp, `png, tiff*, svg`
21	potx	Microsoft PowerPoint Template	potx, `pdf, png`
22	pptm	Microsoft PowerPoint Macro-Enabled Presentation	pptm , `pptx, html, pdf, ps, jpg, bmp, png, tiff*, svg`
23	potm	Microsoft PowerPoint Macro-Enabled Template	potm, `pdf, png`
24	pps	Microsoft PowerPoint 97-2003 Show	pps, `pdf, png`
25	ppsm	Microsoft PowerPoint Macro-Enabled Show	ppsm, `pdf, png`
26	ppsx	Microsoft PowerPoint Show	ppsx, bmp
27	ppam	Microsoft Powerpoint add-on	ppam
28	sldx	Microsoft Powerpoint Slide 2007+	sldx
29	sldm	Microsoft Office PowerPoint 2007 Slide - Macro Enabled	sldm
30	vsdx	Microsoft Visio Drawing	vsdx, `pdf, xps, jpg, png, bmp, tiff, svg, emf*, html, xaml, swf`
31	vssx	Microsoft Visio Stencil	vssx, `pdf, xps, jpg, png, bmp, tiff, svg, emf, html, xaml, swf`
32	vstx	Microsoft Visio Template	vstx, `pdf, xps, jpg, png, bmp, tiff, svg, emf, html, xaml, swf`
33	vsdm	Microsoft Visio Macro-Enabled Drawing	vsdm, `pdf, xps, jpg, png, bmp, tiff, svg, emf, html, xaml, swf`
34	vssm	Microsoft Visio Macro-Enabled Stencil	vssm, `pdf, xps, jpg, png, bmp, tiff, svg, emf, html, xaml, swf`
35	vstm	Microsoft Visio Macro-Enabled Template	vstm, `pdf, xps, jpg, png, bmp, tiff, svg, emf, html, xaml, swf`
36	vsx	Microsoft Visio XML Stencil	vsx, `pdf, xps, jpg, png, bmp, tiff, svg, emf, html, xaml, swf`
37	vtx	Microsoft Visio XML Template	vtx, `pdf, xps, jpg, png, bmp, tiff, svg, emf, html, xaml, swf`
38	vdx	Microsoft Visio XML Drawing	vdx, `pdf, xps, jpg, png, bmp, tiff, svg, emf, html, xaml, swf`
39	one	Microsoft OneNote	one
40	odt	OpenDocument Text	odt
41	ods	OpenDocument Spreadsheet	ods
42	ott	OpenDocument Document Template	ott, pdf
43	ots	OpenDocument Spreadsheet Template	ots
44	odp	OpenDocument Presentation	odp
45	otp	OpenDocument Presentation Template	otp
46	htm/html	Hypertext Markup Language	html, `pdf, ps, jpg, bmp, png, svg` , txt
47	mht	MIME HTML	mht, pdf, `pg, bmp, png, tiff`
48	hta	HTML Application	hta
49	pdf	Adobe Portable Document Format	pdf, `html, svg, jpg, bmp, png, tiff, txt`
50	ai	Adobe Illustrator	ai
51	ait	Adobe Illustrator Template	ait
52	hwp	Hangul Word Processor	hwp
53	hwt	Hangul Word Template	hwt
54	hwpx	Hangul Word Processor	hwpx
55	cell	Hancom Cell	cell
56	show	Hancom Show	show
57	jtd	Ichitaro Document	jtd
58	jtdc	Ichitaro Compressed Document	jtdc
59	jhd	Justsystem Hanako	jhd
60	xml	Extensible Markup Language	xml
61	xml-doc	Microsoft Word 2003 XML Document	pdf
62	xml-docx	Microsoft Word XML Document	xml-docx, pdf
63	xml-xls	Microsoft XML Spreadsheet 2003	pdf
64	xml-pptx	Powerpoint XML Presentation	xml-pptx
65	jnlp	Java Network Launching Protocol	jnlp
66	bml	Bean Markup Language	bml
67	twbx	Tableau packaged workbook	twbx
68	twb	Tableau workbook	twb
69	tds	Tableau Datasource	tds
70	pbix	Microsoft Power BI	pbix
71	rdf	Resource Description Framwork	rdf
72	vcs	vCalendar	vcs
73	ics	iCalendar	ics
74	lnk	Windows Shortcut	lnk
75	jpg	JPEG Image	jpg, bmp, png, tiff, svg, gif, ps, eps, pdf*
76	jpx	JPEG 2000	jpx
77	bmp	Windows Bitmap Image	bmp, jpg, png, tiff, svg, gif, ps, eps, pdf*
78	png	Portable Network Graphics	png, jpg, bmp, tiff, svg, gif, ps, eps, pdf*
79	apng	Animated PNG	apng, png
80	mng	Multiple Network Graphic	mng
81	tiff	Tagged Image File Format	tiff, jpg, bmp, png, svg, gif, ps, eps
82	tiff64	Big Tiff	tiff64, jpg, png, gif, bmp
83	nef	Nikon Raw Image	nef, jpg, bmp, png, svg, gif
84	svg	Scalable Vector Graphics	svg, `jpg, bmp, png, tiff, gif, ps, eps`
85	gif	Graphics Interchange Format	gif, jpg, bmp, png, tiff, svg, ps, eps, pdf*
86	tga	Truevision Advanced Raster Adapter	tga
87	wmf	Windows Metafile	wmf, `jpg, bmp, png, tiff, svg, gif, ps,eps, pdf*`
88	emf	Windows Enhanced Metafile	emf
89	emz	Windows Compressed Enhanced Metafile	emz
90	ico	Icon	ico
91	cur	Cursor	cur
92	webp	Google Image File Format for Web	webp
93	wdp	HD Photo	wdp
94	dwg	AutoCAD	dwg
95	dwt	AutoCAD Drawing Template	dwt
96	dws	AutoCAD Drawing Standards	dws
97	sfc	SXF Feature Comment	sfc
98	p21	STEP Data Model	p21
99	jww	JW CAD	jww
100	jwc	JW CAD	jwc
101	bfo	V-nas BFO	bfo
102	dxf	AutoCAD DXF	dxf, pdf, `jpg, png, bmp, gif, tiff`
103	dwf	Design Web Format	dwf, pdf, `jpg, png, bmp, gif, tiff`
104	3ds	3D Studio	3ds, `dae, stl, fbx`
105	dae	Digital Asset Exchange	dae, `3ds, stl, fbx`
106	u3d	Universal 3D	u3d, `3ds, dae, stl, pdf, drc, rvm, fbx`
107	drc	Google Draco	drc, `3ds, dae, pdf, u3d, rvm, fbx`
108	rvm	AVEVA Plant Design Management System Model	rvm, `3ds, dae, stl, pdf, u3d, drc, fbx`
109	dcm	Digital Imaging and Communications in Medicine	dcm
110	shp	Shapefile	shp
111	shx	Shapefile	shx
112	dbf	Shapefile	dbf
113	heic	High Efficiency Image File Format	heic, jpg, pdf
114	wmv	Windows Media Video	wmv
115	wma	Windows Media Audio	wma
116	mpeg	Moving Picture Experts Group	mpeg, mp4, avi
117	wav	Waveform Audio	wav
118	mp3	MPEG-1 Audio Layer-3	mp3, mp4
119	mp4	MPEG-4 Part 14	mp4
120	mov	QuickTime video format	mov, mp4, avi
121	avi	Audio Video Interleave	avi
122	webm	Video file format	webm
123	flv	Flash Video	flv
124	bwf	Broadcast wave format	bwf
125	bw64	Broadcast wave 64	bw64
126	w64	Sony wave64 autdio format	w64
127	rf64	BWF-compatible multichannel audio file format	rf64
128	m4a	MPEG-4 Audio	m4a
129	m4v	MPEG-4 Video	mp4, wmv, avi
130	mkv	Matroska Video	mp4, wmv, avi
131	3gp	Third Generation Partnership Project	mp4, wmv
132	mts	MPEG-2 Tranmission	mts, wmv, avi
133	ogg	Ogg Vorbis Compressed Audio	ogg
134	aiff	Audio Interchange File Forma	aiff
135	aac	Advanced Audio Coding	aac
136	acm	Audio Compression Manager	acm
137	opus	Ogg Opus	opus, mp4
138	mxf	Material Exchange Format	mxf
139	vtxt	VTXT	vtxt
140	eml	Electronic mail	eml, zip
141	msg	Microsoft Outlook Message	msg, zip
142	tnef	Transport Neutral Encapsulation Format	tnef
143	oft	Microsoft Outlook Template	oft
144	pst	Outlook Personal Folder	pst
145	mbx	Outlook Express Mailbox	mbx, zip
146	txt	Text	txt, pdf
147	json	JSON	json
148	xdw	DocuWork Image	xdw*
149	xbd	DocuWork Binder	xbd*
150	xct	DocuWork Container	xct*
151	crl	Certificate Revocation List	crl
152	spf	StorageCraft ShadowProtect	spf
153	prn	printing	prn
154	zei	ZUGFeRD	zei
155	utib	UTIB	utib
156	har	HTML Archive	har
157	story	Storyist Document	story
158	7z	7-zip Archive	7z, zip, gz, xz, tar
159	gz/gzip	GNU Zipped Archive	gz, 7z, zip, xz, tar
160	rar	WinRAR Archive	rar, zip, 7z, gz, xz, tar
161	xz	XZ Archive	xz, zip, 7z, gz, tar
162	zip	ZIP Archive	zip, 7z, gz, xz, tar
163	alz	ALZip	zip, 7z, gz, xz, tar
164	tar	Tape Archive	tar, zip, 7z, gz, xz
165	bz2	BZ2 Archive	zip, 7z, gz, xz, tar
166	lzma	LZMA Archive	zip, 7z, gz, xz, tar
167	lzh	LZH Archive	zip, 7z, gz, xz, tar
168	arj	ARJ Archive	zip, 7z, gz, xz, tar
169	cab	Cabinet Archive	cab, zip, 7z, gz, xz, tar
170	wsp	Windows Sharepoint	zip, 7z, gz, xz, tar
171	ace	WinAce archive format	zip, 7z, gz, xz, tar
172	tse	TIP Test Selection Engine	tse, zip, 7z, gz, xz, tar
173	tsez	TIP Test Selection Engine	tsez, zip, 7z, gz, xz, tar
174	tsec	TIP Test Selection Engine	tsec, zip, 7z, gz, xz, tar
175	egg	EGG archive format	zip, 7z, gz, xz, tar
176	gpkg	GeoPackage Encoding Standard	zip
177	b3dm	Batched 3D Model	zip
178	asics	Associated Signature Container	asics
179	asice	Associated Signature Container	asice
180	log	Log file	log
181	pck	System Center Configuration Manager Package Files	pck
182	aem	AppleSingle/AppleDouble Encoded Macintosh	aem
183	ribc	Research Institute on Building Cost	ribc
184	esz	E-szigno	esz, zip

(*) Only supported on Windows for now.
For the archive sanitization, please enable it in the Compression tab

Sanitization is in BETA for these file types:

BW64, ACM, 3GP, M4V, MKV
SPF
TWBX, PBIX
UTIB
STORY
ASICS, ASICE
ES3, PCK
DWF
AIT
RIBC
XML-PPTX
MNG
BML
LOG, ZEI
EMZ
MBX, TNEF
B3ML, GPKG
JNLP
TGA

XML sanitization is specific to XML vulnerability. It does not eliminate other threat such as Microsoft Office XML formats.

HTML/TXT sanitization is designed for Email Security purposes, should not use for sanitizing normal HTML, TXT traffic.

HWP: there are two versions of HWP, v3.0 and v5.0. v3.0 document can be created from only legacy old Hangul Word Processor. For this reason, we do not support HWP v3 and result in "failed to sanitize". We recommend this old version file as suspicious. If you need support for v3.0, please contact support.

XDW/XBD/XCT: Customers need to install and activate DocuWorks 9 or newer on the system to use this feature

HEIC: it is enabled on-demand, please contact Customer Support or Sales team to enable it.

Single / Multiple Output File

If target contains only one file, it will be not zipped and treat as single output file. For example, If a PDF file has only one page, converts to JPG will be JPG. If a PDF file has more than one page, there will be multiple JPG files and will result in a ZIP file. The following sanitization result in potentially multiple files (single ZIP file).

PDF->HTML
PDF->IMG
DOCX→HTML, IMG
XLSX->HTML, CSV, IMG
PPTX→HTML, IMG

Notes:

Deep CDR removes active content that can drive a malicious behavior. These objects are usually non-visual, such as javascript, hidden malicious code in an image (steganography). However, those objects can also be visible such as hyperlinks, active code that change the data (e.g. macros). Even though is not within CDR process's scope, it might also alter the content if it's configured to do so.

For images and media files, we don’t “edit” the content, which means the original file and sanitized file will have the same content. However, the quality may be altered due to several steps performed to disarm the content by decoding, processing and encoding it again.

Known Issues

Conversion from HTML to an image would fail if the size of the HTML file is bigger than 90KB
AutoCAD file (.DWG): with version 2007-2009, when removing macro from the original file (if it has), opening sanitize file will display an error message "Failed to load project from storage" appeared but the file still works as usual
Support TXT in ASCII, UTF-8, Shift-JIS and ISO/IEC 8859-1 encoding only
When converting Excel files to TXT, only the first sheet is converted
Support AI in PDF format
If the file names inside XCT contain multibyte characters after sanitization, it will be different from the original. As a workaround, users can change the system default code page setting by the following steps: Settings > Time & language > Language & region > Administrative language settings > Change system locale, and check Beta: Use Unicode UTF-8 for worldwide language support

Last updated on

Was this page helpful?