Files larger than 500MB tend to be bundles of some sort, (compressed files, ISO images, etc.) in these cases it makes sense to upload the inner individual files instead for several reasons, as an example:
- Engines tend to have performance issues on big files (timeouts, some may not even scan them).
- Some engines are not able to inspect certain file types whereas they will be able to inspect the inner files if submitted.
- When scanning a big bundle you lose context on which specific inner file is causing the detection.