diff --git a/components/safe_browsing/content/resources/download_file_types.asciipb b/components/safe_browsing/content/resources/download_file_types.asciipb
index 45c35861814cc4e7ec401de8da1916260d09b8ca..e849e946dd5da6405e89eb096e58c33355da642e 100644
--- a/components/safe_browsing/content/resources/download_file_types.asciipb
+++ b/components/safe_browsing/content/resources/download_file_types.asciipb
@@ -8,7 +8,7 @@
 ##
 ## Top level settings
 ##
-version_id: 59
+version_id: 66
 sampled_ping_probability: 0.01
 max_archived_binaries_to_report: 10
 default_file_type {
@@ -658,7 +658,6 @@ file_types {
   uma_value: 234
   is_archive: true
   ping_setting: FULL_PING
-
 }
 file_types {
   # Opens in IE, drops MOTW
@@ -732,6 +731,16 @@ file_types {
   is_archive: true
   ping_setting: FULL_PING
 }
+file_types {
+  extension: "zst"
+  uma_value: 412
+  is_archive: true
+  inspection_type: SEVEN_ZIP
+  platform_settings {
+    auto_open_hint: ALLOW_AUTO_OPEN
+    max_file_size_to_analyze: 52428800 # 50MB
+  }
+}
 
 # Java
 file_types {
@@ -1595,6 +1604,19 @@ file_types {
   ping_setting: FULL_PING
 }
 
+# IQY files can execute Powershell on opening. See
+# https://crbug.com/40068800.
+file_types {
+  extension: "iqy"
+  ping_setting: FULL_PING
+  uma_value: 413
+  platform_settings {
+    platform: PLATFORM_TYPE_WINDOWS
+    danger_level: ALLOW_ON_USER_GESTURE
+    auto_open_hint: DISALLOW_AUTO_OPEN
+  }
+}
+
 # Extensions that will open in IE even when chrome is set as default browser.
 file_types {
   extension: "partial"
diff --git a/tools/metrics/histograms/enums.xml b/tools/metrics/histograms/enums.xml
index 190c5b03cd26815288733c9c1ec38b9edca7a0cb..fd2463fb47e9b1f0528a1d23d078e724b8c7f358 100644
--- a/tools/metrics/histograms/enums.xml
+++ b/tools/metrics/histograms/enums.xml
@@ -92087,6 +92087,8 @@ https://www.dmtf.org/sites/default/files/standards/documents/DSP0134_2.7.1.pdf
   <int value="403" label="BGI"/>
   <int value="404" label="FTPLOC"/>
   <int value="405" label="ATLOC"/>
+  <int value="412" label="ZST"/>
+  <int value="413" label="IQY"/>
 </enum>
 
 <enum name="SBClientDownloadIsSignedBinary">