> Source: [sk106123](https://support.checkpoint.com/results/sk/sk106123) # sk106123 - File types supported by Threat Emulation in Quantum GW | Property | Value | |----------|-------| | Solution ID | sk106123 | | Date Created | 2015-05-19 | | Last Modified | 2026-07-08 | | Technical Level | General | | Products | Security Gateway | | Versions | R82.10, R82, R81.20, R81.10 (EOS) | | OS | Gaia | ## Solution Check Point Threat Emulation prevents infections from undiscovered exploits, zero-day and targeted attacks. This innovative solution quickly inspects files and runs them in a virtual sandbox to discover malicious behavior. Discovered malware is prevented from entering the network.**Note** : The SKs below list the file types supported by Quantum GW. Support for file types may vary across other products. **Harmony Email \& Collaboration** and the **Threat Emulation API** **support all file types**, regardless of the standard supported file types listed below. ### File types supported by Threat Emulation Enter the string to filter the below table: |------------------------------|--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------| | File Extention | Description | | *.7z* | 7z Archive | | *.ar* | Ar archive | | *.arj* | Compressed file format used by ARJ archiver | | *.apk (\*)* | Android Package Kit file | | *.app (\*)* | Mac OS X Application Bundle file | | *.aspx (\*)* | Active Server Pages Extended (Microsoft ASP.NET) | | *.bat* | Windows OS batch file | | *.bz2* | bzip2 compressed archive | | *.cab* | Compressed archive | | *.chm (\*)* | Archive of Microsoft Compiled HTML Help files | | *.cmd* | Filename extension used by CP/M-style executable programs | | *.com* | Executable File | | *.cpio* | Cpio archive | | *.cpl* | Control Panel file | | *.csv* | Comma-separated values file | | *.dll* | Microsoft Dynamic Link Library | | *.dmg (\*)* | Mac OS X Disk Image file | | *.doc* | Microsoft Word 97-2003 Document | | *.docx* | Microsoft Word Document | | *.dot .dotx* | Microsoft Word Template | | *.dotm .docm* | Microsoft Word macro-enabled template | | *.dylib (\*)* | Mach-O Dynamic Library file | | *.elf (\*)* | Executable and Linkable Format | | *.exe* | Executable File | | *.gz* | Gz Archive | | *.hta (\*)* | HTML Application | | *.hwp* | Hangul Word Processor file | | *.hwpx* | Hangul Word Processor XML file | | *.img* | ISO 9660 CD-ROM filesystem data 'DESKTOP' | | *.iqy* | Excel Web Query file | | *.iso* | Software Image file | | *.jar (not executable only)* | Java Browser Applet | | *.js /.jse (\*\*)* | JavaScript | | *.lnk* | Shortcut file used by Microsoft Windows to point to an executable file. LNK stands for LiNK. | | *.lzh* | Lzh archive | | *.macho (\*)* | Mach-Object executable for macOS | | *.msg* | Mail message file format used by Microsoft Outlook and Exchange | | *.msi* | Installer package file format used by Windows | | *.o (\*)* | Mach object file | | *.ole (\*)* | Microsoft Object Linking and Embedding file | | *.one (\*)* | Microsoft OneNote | | *.PIF* | System file | | *.pdf* | Adobe Acrobat document | | *.pkg (\*)* | Mac OS X packages file | | *.potm* | Microsoft PowerPoint macro-enabled template | | *.potx* | Microsoft PowerPoint template | | *.ppam* | Microsoft PowerPoint add-in | | *.pps* | Legacy Microsoft PowerPoint slideshow | | *.ppsm* | Microsoft PowerPoint macro-enabled slideshow | | *.ppsx* | Microsoft PowerPoint slideshow | | *.ppt* | Microsoft PowerPoint 97-2003 Presentation | | *.pptm* | Microsoft PowerPoint macro-enabled presentation | | *.pptx* | Microsoft PowerPoint Presentation | | *.ps1* | PowerShell script | | *.py (\*)* | Python Script File | | *.qcow2* | Archive file of QEMU disk images | | *.rar* | Rar Archive | | *.rpm* | RPM package | | *.rtf* | Rich Text Format file | | *.scr* | Script Executable file | | *.sh (\*)* | bash shell script | | *.sldm* | Microsoft PowerPoint macro-enabled slide | | *.sldx* | Microsoft PowerPoint slide | | *.slk* | Symbolic LinK files | | *.swf* | Flash | | *.tar* | Tar Archive | | *.tbz2 .tbz .tb2* | BZ2 - bzip2 compressed archive | | *.tgz* | Tgz Archive | | *.udf* | Universal Disk Format is a profile of the specification known as ISO/IEC 13346 and ECMA-167 and is an open vendor-neutral file system for computer data storage for a broad range of media | | *.udf* | Archive file of an optical media | | *.url (\*)* | Internet Shortcut File | | *.uue* | Uuencoded Unix file | | *.vba* | Visual Basic file used with the Microsoft Office Suite | | *.vbe* | Executable Files associated with VBScript Encoded Script File | | *.vbs* | Microsoft VBScript file | | *.website (\*)* | ASP.NET Website Shortcut | | *.wim* | Used to manage files such as drivers, updates, and components without booting the operating system image | | *.wsf* | Windows Script Component | | *.wsf* | Windows Script file | | *.wsh* | Windows Script Host Settings file | | *.xar* | Extensible Archive format | | *.xla* | Microsoft Excel add-on or macro | | *.xlam* | Microsoft Excel add-on | | *.xll* | Microsoft Excel XLL (DLL based) add-on | | *.xlm* | Microsoft Excel macro | | *.xls* | Microsoft Excel 97-2003 Worksheet | | *.xlsb* | Microsoft Excel binary worksheet | | *.xlsm* | Microsoft Excel macro-enabled workbook | | *.xlsx* | Microsoft Excel Worksheet | | *.xlt* | Legacy Microsoft Excel 97-2003 templates | | .xltm | Microsoft Excel macro-enabled template | | *.xltx* | Microsoft Excel template | | *.xlw* | Microsoft Excel workspace | | *.xz* | Archive compressed using XZ compression file | | *.zip* | Zip Archive | {#limitations-Table} (\*) - These files are analyzed using static analysis engines only. Dynamic analysis (virtual sandbox execution) is not performed for these file types. (\*\*) - These files are supported when arriving in archive as an email attachment only. The protection is for campaign usage of the files. To add support for a new file type, please submit a Request for Enhancement as described in [sk71840](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk71840&partition=Basic&product=All). For a list of supported file types by Threat Extraction, see [sk101553](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk101553&partition=Basic&product=Threat). --- # Agent Instructions This content is from the Check Point Support Center (https://support.checkpoint.com), the official knowledge base for Check Point cybersecurity products. ## Navigating This Knowledge Base - **Complete index**: [llms.txt](https://support.checkpoint.com/llms.txt) - **All SK articles**: [SecureKnowledge Sitemap](https://support.checkpoint.com/sitemaps/secureknowledge-sitemap-index.xml) - **SK article URL pattern**: `https://support.checkpoint.com/results/sk/{skId}` - **Markdown responses**: AI bot User-Agents automatically receive `text/markdown` content