Supported File Types

What is CDR?

An increasingly popular and effective method of compromising computer security, especially as part of a targeted attack, involves sharing common document types or image files with victims. Even though the original versions of these files do not contain executable data, attackers have found ways to trigger these files to execute embedded malicious code. Popular techniques used to accomplish this include VBA macros, exploit payloads, and embedded Flash or JavaScript code. This type of attack has a high success rate because most users don’t expect common file types to contain infections. For high-risk files or scenarios, Content Disarm & Reconstruction (CDR) prevents any possibility of malicious content (including zero-day threats) from executing. High-risk files can be sanitized through several different methods:

Removing hidden exploitable objects (e.g, scripts, macros, etc.)
Converting the file format

Supported File Types (both Windows and Linux)

	Source File Type	Description	Target Sanitized Types
1	doc	Microsoft Word 97-2003 Document	doc, docx, pdf, rtf
2	dot	Microsoft Word 97-2003 Template	dot, dotx
3	xls	Microsoft Excel 97-2003 Workbook	xls, pdf, csv
4	xlt	Microsoft Excel 97-2003 Template	xlt, `pdf` ,`png`
5	ppt	Microsoft PowerPoint 97-2003 Presentation	ppt, pdf
6	pot	Microsoft PowerPoint 97-2003 Template	pot, `pdf` ,`png`
7	rtf	Microsoft Rich Text Format	rtf, pdf*
8	docx	Microsoft Word Document	docx, txt, html, pdf, `ps, jpg, bmp, png, tiff, svg, rtf`
9	docm	Microsoft Word Macro-Enabled Document	docm, `docx, txt, html, pdf, ps, jpg, bmp, png, tiff, svg` , rtf
10	dotx	Microsoft Word Template	dotx
11	dotm	Microsoft Word Macro-Enabled Template	dotm , dotx
12	xlsx	Microsoft Excel Workbook	xlsx, csv, html, `tiff*, pdf, ps, jpg, bmp, png, svg`
13	xlsm	Microsoft Excel Macro-Enabled Workbook	xlsm , `xlsx, csv, html, tiff*, pdf, ps, jpg, bmp, png, svg`
14	xlsb	Microsoft Excel Binary Workbook	xlsb
15	xltx	Microsoft Excel Template	xltx, `pdf, png` , csv
16	xltm	Microsoft Excel Macro-Enabled Template	xltm, `pdf, png` , csv*
17	xlam	Microsoft Excel Add-in	xlam
18	csv	Comma-separated values	csv
19	tsv	Tab-separated values	tsv
20	pptx	Microsoft PowerPoint Presentation	pptx, `html, pdf, ps, jpg` , bmp, `png, tiff*, svg`
21	potx	Microsoft PowerPoint Template	potx, `pdf, png`
22	pptm	Microsoft PowerPoint Macro-Enabled Presentation	pptm , `pptx, html, pdf, ps, jpg, bmp, png, tiff*, svg`
23	potm	Microsoft PowerPoint Macro-Enabled Template	potm, `pdf, png`
24	pps	Microsoft PowerPoint 97-2003 Show	pps, `pdf, png`
25	ppsm	Microsoft PowerPoint Macro-Enabled Show	ppsm, `pdf, png`
26	ppsx	Microsoft PowerPoint Show	ppsx, bmp
27	ppam	Microsoft Powerpoint add-on	ppam
28	sldx	Microsoft Powerpoint Slide 2007+	sldx
29	sldm	Microsoft Office PowerPoint 2007 Slide - Macro Enabled	sldm
30	vsdx	Microsoft Visio Drawing	vsdx, `pdf, xps, jpg, png, bmp, tiff, svg, emf*, html, xaml, swf`
31	vssx	Microsoft Visio Stencil	vssx, `pdf, xps, jpg, png, bmp, tiff, svg, emf, html, xaml, swf`
32	vstx	Microsoft Visio Template	vstx, `pdf, xps, jpg, png, bmp, tiff, svg, emf, html, xaml, swf`
33	vsdm	Microsoft Visio Macro-Enabled Drawing	vsdm, `pdf, xps, jpg, png, bmp, tiff, svg, emf, html, xaml, swf`
34	vssm	Microsoft Visio Macro-Enabled Stencil	vssm, `pdf, xps, jpg, png, bmp, tiff, svg, emf, html, xaml, swf`
35	vstm	Microsoft Visio Macro-Enabled Template	vstm, `pdf, xps, jpg, png, bmp, tiff, svg, emf, html, xaml, swf`
36	vsx	Microsoft Visio XML Stencil	vsx, `pdf, xps, jpg, png, bmp, tiff, svg, emf, html, xaml, swf`
37	vtx	Microsoft Visio XML Template	vtx, `pdf, xps, jpg, png, bmp, tiff, svg, emf, html, xaml, swf`
38	vdx	Microsoft Visio XML Drawing	vdx, `pdf, xps, jpg, png, bmp, tiff, svg, emf, html, xaml, swf`
39	one	Microsoft OneNote	one
40	odt	OpenDocument Text	odt
41	ods	OpenDocument Spreadsheet	ods
42	ott	OpenDocument Document Template	ott
43	ots	OpenDocument Spreadsheet Template	ots
44	odp	OpenDocument Presentation	odp
45	otp	OpenDocument Presentation Template	otp
46	htm/html	Hypertext Markup Language	html, `pdf, ps, jpg, bmp, png, svg` , txt
47	mht	MIME HTML	pdf, `pg, bmp, png, tiff`
48	hta	HTML Application	hta
49	pdf	Adobe Portable Document Format	pdf, `html, svg, jpg, bmp, png, tiff, txt`
50	ai	Adobe Illustrator	ai
51	hwp	Hangul Word Processor	hwp
52	hwt	Hangul Word Template	hwt
53	hwpx	Hangul Word Processor	hwpx
54	cell	Hancom Cell	cell
55	show	Hancom Show	show
56	jtd	Ichitaro Document	jtd
57	jtdc	Ichitaro Compressed Document	jtdc
58	jhd	Justsystem Hanako	jhd
59	xml	Extensible Markup Language	xml
60	xml-doc	Microsoft Word 2003 XML Document	pdf
61	xml-docx	Microsoft Word XML Document	pdf
62	xml-xls	Microsoft XML Spreadsheet 2003	pdf
63	twbx	Tableau packaged workbook	twbx
64	twb	Tableau workbook	twb
65	tds	Tableau Datasource	tds
66	rdf	Resource Description Framwork	rdf
67	vcs	vCalendar	vcs
68	ics	iCalendar	ics
69	lnk	Windows Shortcut	lnk
70	jpg	JPEG Image	jpg, bmp, png, tiff, svg, gif, ps, eps, pdf*
71	jpx	JPEG 2000	jpx
72	bmp	Windows Bitmap Image	bmp, jpg, png, tiff, svg, gif, ps, eps, pdf*
73	png	Portable Network Graphics	png, jpg, bmp, tiff, svg, gif, ps, eps, pdf*
74	apng	Animated PNG	apng, png
75	tiff	Tagged Image File Format	tiff, jpg, bmp, png, svg, gif, ps, eps
76	tiff64	Big Tiff	tiff64, jpg, png, gif, bmp
77	nef	Nikon Raw Image	nef, jpg, bmp, png, svg, gif
78	svg	Scalable Vector Graphics	svg, `jpg, bmp, png, tiff, gif, ps, eps`
79	gif	Graphics Interchange Format	gif, jpg, bmp, png, tiff, svg, ps, eps, pdf*
80	wmf	Windows Metafile	wmf, `jpg, bmp, png, tiff, svg, gif, ps,eps, pdf*`
81	emf	Windows Enhanced Metafile	emf
82	ico	Icon	ico
83	cur	Cursor	cur
84	webp	Google Image File Format for Web	webp
85	wdp	HD Photo	wdp
86	dwg	AutoCAD	dwg
87	dwt	AutoCAD Drawing Template	dwt
88	dws	AutoCAD Drawing Standards	dws
89	sfc	SXF Feature Comment	sfc
90	p21	STEP Data Model	p21
91	jww	JW CAD	jww
92	jwc	JW CAD	jwc
93	bfo	V-nas BFO	bfo
94	dxf	AutoCAD DXF	dxf, pdf, `jpg, png, bmp, gif, tiff`
95	dwf	Design Web Format	pdf, `jpg, png, bmp, gif, tiff`
96	3ds	3D Studio	3ds, `dae, stl, fbx`
97	dae	Digital Asset Exchange	dae, `3ds, stl, fbx`
98	u3d	Universal 3D	u3d, `3ds, dae, stl, pdf, drc, rvm, fbx`
99	drc	Google Draco	drc, `3ds, dae, pdf, u3d, rvm, fbx`
100	rvm	AVEVA Plant Design Management System Model	rvm, `3ds, dae, stl, pdf, u3d, drc, fbx`
101	dcm	Digital Imaging and Communications in Medicine	dcm
102	shp	Shapefile	shp
103	shx	Shapefile	shx
104	dbf	Shapefile	dbf
105	heic	High Efficiency Image File Format	heic, jpg, pdf
106	wmv	Windows Media Video	wmv
107	wma	Windows Media Audio	wma
108	mpeg	Moving Picture Experts Group	mpeg
109	wav	Waveform Audio	wav
110	mp3	MPEG-1 Audio Layer-3	mp3
111	mp4	MPEG-4 Part 14	mp4
112	mov	QuickTime video format	mov
113	avi	Audio Video Interleave	avi
114	webm	Video file format	webm
115	flv	Flash Video	flv
116	bwf	Broadcast wave format	bwf
117	w64	Sony wave64 autdio format	w64
118	rf64	BWF-compatible multichannel audio file format	rf64
119	m4a	MPEG-4 Audio	m4a
120	mts	MPEG-2 Tranmission	m2s
121	ogg	Ogg Vorbis Compressed Audio	ogg
122	aiff	Audio Interchange File Forma	aiff
123	aac	Advanced Audio Coding	aac
124	opus	Ogg Opus	opus
125	mxf	Material Exchange Format	mxf
126	vtxt	VTXT	vtxt
127	eml	Electronic mail	eml
128	msg	Microsoft Outlook Message	msg
129	oft	Microsoft Outlook Template	oft
130	pst	Outlook Personal Folder	pst
131	txt	Text	txt, pdf
132	json	JSON	json
133	xdw	DocuWork Image	xdw*
134	xbd	DocuWork Binder	xbd*
135	xct	DocuWork Container	xct*
136	crl	Certificate Revocation List	crl
137	spf	StorageCraft ShadowProtect	spf
138	prn	printing	prn
139	utib	UTIB	utib
140	har	HTML Archive	har
141	story	Storyist Document	story
142	7z	7-zip Archive	7z, zip, gz, xz, tar
143	gz/gzip	GNU Zipped Archive	gz, 7z, zip, xz, tar
144	rar	WinRAR Archive	rar, zip, 7z, gz, xz, tar
145	xz	XZ Archive	xz, zip, 7z, gz, tar
146	zip	ZIP Archive	zip, 7z, gz, xz, tar
147	alz	ALZip	zip, 7z, gz, xz, tar
148	tar	Tape Archive	tar, zip, 7z, gz, xz
149	bz2	BZ2 Archive	zip, 7z, gz, xz, tar
150	lzma	LZMA Archive	zip, 7z, gz, xz, tar
151	lzh	LZH Archive	zip, 7z, gz, xz, tar
152	arj	ARJ Archive	zip, 7z, gz, xz, tar
153	cab	Cabinet Archive	cab, zip, 7z, gz, xz, tar
154	wsp	Windows Sharepoint	zip, 7z, gz, xz, tar
155	ace	WinAce archive format	zip, 7z, gz, xz, tar
156	tse	TIP Test Selection Engine	tse, zip, 7z, gz, xz, tar
157	tsez	TIP Test Selection Engine	tsez, zip, 7z, gz, xz, tar
158	tsec	TIP Test Selection Engine	tsec, zip, 7z, gz, xz, tar
159	egg	EGG archive format	zip, 7z, gz, xz, tar
160	asics	Associated Signature Container	asics
161	asice	Associated Signature Container	asice
162	es3	e-dossier	es3
163	pck	System Center Configuration Manager Package Files	pck
164	aem	AppleSingle/AppleDouble Encoded Macintosh	aem

(*) Only supported on Windows for now.
For the archive sanitization, please enable it in the Compression tab

Sanitization is in BETA for these file types:

AAC
MTS, FLV
VTXT
MXF
SPF
TWBX, TWB
TDS
SHP, SHX, DBF
XBD
ONE
RDF
PPAM
UTIB
HAR
XCT
BFO
STORY
ASICS, ASICE
ES3, PCK, AEM
PRN
XLAM

XML sanitization is specific to XML vulnerability. It does not eliminate other threat such as Microsoft Office XML formats.

HTML/TXT sanitization is designed for Email Security purposes, should not use for sanitizing normal HTML traffic.

HWP: there are two versions of HWP, v3.0 and v5.0. v3.0 document can be created from only legacy old Hangul Word Processor. For this reason, we do not support HWP v3 and result in "failed to sanitize". We recommend this old version file as suspicious. If you need support for v3.0, please contact support.

XDW/XBD/XCT: Customers need to install and activate DocuWorks 9 or newer on the system to use this feature

HEIC: it is enabled on-demand, please contact Customer Support or Sales team to enable it.

Single / Multiple Output File

If target contains only one file, it will be not zipped and treat as single output file. For example, If a PDF file has only one page, converts to JPG will be JPG. If a PDF file has more than one page, there will be multiple JPG files and will result in a ZIP file. The following sanitization result in potentially multiple files (single ZIP file).

PDF->HTML
PDF->IMG
DOCX→HTML, IMG
XLSX->HTML, CSV, IMG
PPTX→HTML, IMG

Notes:

Deep CDR removes active content that can drive a malicious behavior. These objects are usually non-visual, such as javascript, hidden malicious code in an image (steganography). However, those objects can also be visible such as hyperlinks, active code that change the data (e.g. macros). Even though is not within CDR process's scope, it might also alter the content if it's configured to do so.

For images and media files, we don’t “edit” the content, which means the original file and sanitized file will have the same content. However, the quality may be altered due to several steps performed to disarm the content by decoding, processing and encoding it again.

Known Issues

Not supporting Microsoft Office 95 document format
Conversion from HTML to an image would fail if the size of the HTML file is bigger than 90KB
Support AutoCAD file (.DWG) versions: 2004-2024. With version 2007-2009, when removing macro from the original file (if it has), opening sanitize file will display an error message "Failed to load project from storage" appeared but the file still works as usual
Support MPEG2 only
Support TXT in ASCII, UTF-8, Shift-JIS and ISO/IEC 8859-1 encoding only
When converting Excel files to TXT, only the first sheet is converted
Support AI in PDF format
If the file names inside XCT contain multibyte characters after sanitization, it will be different from the original. As a workaround, users can change the system default code page setting by the following steps: Settings > Time & language > Language & region > Administrative language settings > Change system locale, and check Beta: Use Unicode UTF-8 for worldwide language support

Last updated on

Was this page helpful?