Can MD Core process the attached files in a PDF file?
This article applies to all MD Core versions
Adobe Acrobat allows users to attach additional files to a PDF, which can be exploited to deliver hidden threats to a system. These attachments often remain undetected, as they are only visible when the PDF is opened with Adobe’s PDF readers.
MetaDefender Core is capable of processing these embedded files. It extracts the attachments and sanitizes their contents to eliminate potential threats.

The DeepCDR engine is required for this use case.

DeepCDR in the workflow
Configuration
Step 1: Enable File Types for Deep CDR

Step 1

Step 2
- Scroll down to Enable for filetypes and click Edit.
- Expand the Adobe Files section.
- Check the box for PDF to enable Deep CDR processing for PDF documents.

Step 1

Step 2
Please ensure the Recursive Level is enabled for the scan session. This setting is required for the engine to detect and scan embedded files within PDF documents.
Once the file type is enabled, scroll down to File type handling > Adobe > PDF.
In the PDF configuration window, locate the Recursive Level setting.
Set the value to 1 or greater.
- Setting it to 0 disables recursive sanitization.
Click OK to save changes.

If Further Assistance is required, please proceed to log a support case or chat with our support engineer.