A PDF is not just a container for pages. It can contain other files embedded inside it: spreadsheets, images, audio clips, other PDFs, even executable code in some cases. When you receive a PDF with embedded files, you may not even know they are there. Most PDF readers show the document's visible pages and give no indication that additional content is attached.
Handling embedded files requires two steps: detecting them, which most PDF readers do poorly, and deciding what to do with them once found. Some embedded files are useful supplements, like data tables attached to a report. Others are security risks, like scripts or executables hidden inside an otherwise innocent-looking document.
The table below categorizes the most common types of embedded files and the recommended handling for each.
| Embedded File Type | Common Source | Risk Level | Recommended Action |
|---|---|---|---|
| Spreadsheets (XLSX, CSV) | Financial reports, data-heavy PDFs with attached source data | Low | Extract and open in the appropriate application; useful supplementary data |
| Images (JPG, PNG) | Design documents, photo collections exported to PDF | Low | Extract if needed at full resolution; otherwise ignore |
| Other PDFs | Portfolios, compiled documents, legal exhibit bundles | Low | Extract and process individually; the embedded PDF is usually a standalone document |
| Executable scripts (JS, EXE) | Malicious PDFs; rarely found in legitimate business documents | High | Do not open or extract; quarantine the PDF and scan with security software |
| Audio/video files | Presentations, training materials, multimedia PDFs | Medium | Extract only from trusted sources; large files may slow PDF processing |
Detecting Embedded Files Before Processing
The quickest way to check for embedded files is to open the PDF in a reader that supports attachment panels. Adobe Acrobat shows attachments in a paperclip panel on the left sidebar. Most browser-based PDF viewers do not display this panel, which means online processing can strip or ignore embedded files without warning. Before uploading a PDF to any online tool, check whether it contains attachments that need to be preserved.
The Unlock PDF operation for documents with embedded files requires special attention. If the PDF is password-protected, the embedded files share the same encryption. Unlocking the parent document may or may not unlock the embedded files, depending on how the encryption was applied. Extract and process embedded files separately to avoid surprises.
What Happens to Embedded Files During Online Processing
Most online PDF tools process only the visible pages of a PDF. Embedded files pass through unmodified or are silently removed, depending on the tool. Compression typically does not affect embedded files because they are stored as binary attachments, not as page content. Conversion to Word or Excel strips embedded files entirely because those formats do not support arbitrary file attachments.
WukongPDF's PDF Security tools can detect and extract embedded files from PDFs. Before processing a document with attachments, extract the embedded files, process them separately if needed, and reattach them afterward or deliver them alongside the processed PDF. This keeps your workflow transparent rather than silently losing content.
Preventing Embedded File Surprises
Before sending a PDF that contains embedded files to a recipient, decide whether the recipient should receive the embedded content. If the attachments are supplementary data meant for the recipient, mention them in your email or message. If the attachments are internal working files that should not be shared, extract and remove them before sending. Most PDF readers do not display embedded files prominently, which means recipients may never discover useful attachments or may discover ones you did not intend to share.