@SathisA3 Hi, Greetings. There is no easy way for this other than using a virus scanner. If application is hosted in Pega Cloud, Pega already has Virus scanner installed so that won't be a problem, if it is client-cloud or on-premise we need to install this. Other than this one can have validation on extensions plus file content. We can determine what the file is based on the magic numbers. The first few bytes of a file contain a “magic number” which is a key to the file type, however this alone will not work, you need to have the virus scanner.