File format coverage
The Spectra Assure platform supports a variety of archive and installer formats, as well as executable packers. A specific set of features is available for each of those file categories.
The Spectra Assure platform digs deep into the many layers of software, its components and dependencies, regardless of toolchain choices or the size of builds, releases, or containers being analyzed. It extracts metadata that provides critical information - often not available from other tools - for determining the intent and capabilities of every compiled software package.
With high accuracy, Spectra Assure products detect unauthorized software changes, malware or backdoors, and exposed secrets that can be used in software supply chain attacks.
During the analysis, all files receive one of the following classification states: Goodware, Suspicious, Malicious, or Unknown.
Analysis results are saved to a report that can be exported and shared in several industry-standard formats.
The full report contains the aforementioned classification information along with the complete SBOM (Software Bill of Materials), deployment risks categorized by severity and priority, information on digital signatures, file behavior descriptions, extracted URIs, and many more details on the analyzed file.
In contrast, Spectra Assure generates only partial reports for unsupported file formats. A partial report means that Spectra Assure can only perform surface-level analysis without unpacking, which provides an insufficient risk assessment coverage.
To check if a file format is supported by Spectra Assure, consult the following reference tables on this page:
For every listed file format, the tables cover the following information:
- Supported (Archive/Installer) Formats, Unsupported Formats, Executable Packers - the supported archives, installers, and packers, along with the unsupported filetypes
- SFX Extraction - indicates if the Spectra Assure products can extract self-extracting (SFX) archive files of particular formats
- Password Support - indicates if the Spectra Assure products can decrypt password-protected files of particular formats. If supported, the following default password list is used:
password,infected,VelvetSweatshop,1234 - Signature Validation - indicates if the Spectra Assure products can validate digital signatures for particular formats
In tables, the --- symbols indicate the feature is not applicable to the file format.
Supported formats
Supported archive formats
| File Format | SFX Extraction | Password Support | Signature Validation |
|---|---|---|---|
| 7ZIP | ✔️ | ✔️ | --- |
| A/AR/LIB | --- | --- | --- |
| ACE | ✔️ | ✔️ | --- |
| ALZ | ✔️ | ❌ | --- |
| APK:Alpine | --- | --- | --- |
| AppImage | ✔️ | --- | --- |
| APPX | --- | ❌ | ✔️ |
| ARC | --- | --- | --- |
| ARJ | --- | ❌ | --- |
| ASAR | --- | --- | --- |
| BLZ | --- | --- | --- |
| CAB | ✔️ | --- | ✔️ |
| CFBF:Compound | ✔️ | --- | ✔️ |
| CPIO | --- | --- | --- |
| CRX | --- | --- | ✔️ |
| DEB/UDEB | --- | --- | --- |
| DMG:HFSX/HFS+ | --- | --- | --- |
| EGG | ✔️ | ❌ | --- |
| GEM | --- | --- | --- |
| GZIP | --- | --- | --- |
| ISO | --- | --- | --- |
| JAR/WAR/HPI | ✔️ | --- | ✔️ |
| LHA | --- | --- | --- |
| LZ4 | --- | --- | --- |
| LZH | --- | --- | --- |
| LZip | --- | --- | --- |
| LZMA | --- | --- | --- |
| LZOP | --- | --- | --- |
| MAR | --- | --- | --- |
| MIME | --- | --- | --- |
| MSI | ✔️ | --- | ✔️ |
| MSIX | ✔️ | --- | ✔️ |
| NPY | --- | --- | --- |
| NPZ | --- | --- | --- |
| NuGet | --- | --- | ✔️ |
| OEX | --- | --- | --- |
| OVA | --- | --- | ✔️ |
| PAK | --- | --- | --- |
| PKL | --- | --- | --- |
| PYZ | --- | --- | --- |
| QCOW/QCOW2 | --- | --- | --- |
| RAR | ✔️ | ✔️ | --- |
| RPM/DRPM | --- | --- | --- |
| SQX | --- | --- | --- |
| SZDD | ✔️ | --- | --- |
| TAR/TGZ | --- | --- | --- |
| UDF | --- | --- | --- |
| UUE | --- | --- | --- |
| VDI NTFS/FAT/EXT/XFS/UFS2 | --- | --- | --- |
| VHD NTFS/FAT/EXT/XFS/UFS2 | --- | --- | --- |
| VHDX NTFS/FAT/EXT/XFS/UFS2 | --- | --- | --- |
| VMDK NTFS/FAT/EXT/XFS/UFS2 | --- | --- | --- |
| VSIX | ✔️ | --- | ✔️ |
| WARC | --- | --- | --- |
| WHL | --- | --- | --- |
| WIM | --- | ✔️ | ❌ |
| XAR/PKG | --- | --- | --- |
| XPI | --- | --- | ✔️ |
| XZ | --- | --- | --- |
| YENC | --- | --- | --- |
| Z | --- | --- | --- |
| ZIP | ✔️ | ✔️ | --- |
| ZOO | --- | --- | --- |
Supported installer formats
| File Format | SFX Extraction | Password Support | Signature Validation |
|---|---|---|---|
| Actual installer | ✔️ | ❌ | ✔️ |
| Advanced installer | ✔️ | ❌ | ✔️ |
| DreamShield | ✔️ | --- | ✔️ |
| InnoSetup | ✔️ | ❌ | ✔️ |
| InstallAnywhere | ✔️ | ❌ | ✔️ |
| InstallBuilder | ✔️ | ❌ | ✔️ |
| InstallShield | ✔️ | ❌ | ✔️ |
| NSIS | ✔️ | ❌ | ✔️ |
| Py2ExeInstaller | ✔️ | --- | ✔️ |
| PyInstaller (for Windows) | ✔️ | --- | ✔️ |
| Wise | ✔️ | ✔️ | ✔️ |
| WiX Toolset | ✔️ | ❌ | ✔️ |
Supported executable packers
This table lists only the most popular commercial and open source packers. Total coverage includes more than 200 executable packers.
| Executable Packers | PE 32bit | PE 64bit | PE.NET |
|---|---|---|---|
| 32Lite | ✔️ | --- | --- |
| ASPack | ✔️ | --- | --- |
| eZIP | ✔️ | --- | --- |
| mPress | ✔️ | ✔️ | ✔️ |
| NeoLite | ✔️ | --- | --- |
| nPack | ✔️ | --- | --- |
| nSPack | ✔️ | ✔️ | ✔️ |
| PackMan | ✔️ | --- | --- |
| PEBundle | ✔️ | --- | --- |
| PECompact | ✔️ | --- | --- |
| RLPack | ✔️ | --- | --- |
| UPX | ✔️ | ✔️ | --- |
| XPack/XComp | ✔️ | --- | --- |
| WinUPack | ✔️ | --- | --- |
| y0da Crypt | ✔️ | --- | --- |
| y0da Protect | ✔️ | --- | --- |
Unsupported formats
If you're working with a format the Spectra Assure platform doesn't (fully) support, you can always convert it to any of the supported formats to get the full analysis report.
Formats triggering a warning on upload
| Unsupported Formats | SFX Extraction | Password Support | Signature Validation |
|---|---|---|---|
| DAA | ❌ | --- | --- |
| E01 | ❌ | --- | --- |
| GHO | ❌ | --- | --- |
| KGB | ❌ | --- | --- |
| MDF | ❌ | --- | --- |
| NRG | ❌ | --- | --- |
| RUN | ❌ | --- | --- |
| ZPAQ | ❌ | --- | --- |
Unsupported installer formats
| Unsupported Installer Formats | SFX Extraction | Password Support | Signature Validation |
|---|---|---|---|
| AKInstaller | ❌ | --- | --- |
| InstallForge | ❌ | --- | --- |
| InstallJammer | ❌ | --- | --- |
| InstallMate | ❌ | --- | --- |
| InstallerVICE | ❌ | --- | --- |
| PyInstaller (for Linux) | ❌ | --- | --- |
| QTinstaller | ❌ | --- | --- |
| SetupFactory | ❌ | --- | --- |
| SmartInstallMaker | ❌ | --- | --- |
| VisualInstaller | ❌ | --- | --- |