The Wildfire analysis file size limit for Windows PE files is 100MB. Windows PE files are executable
files that run on the Windows operating system, such as .exe, .dll, .sys, or .scr files. Wildfire is a
cloud-based service that analyzes files and URLs for malicious behavior and generates signatures and
protections for them. Wildfire can analyze various file types, such as PE, APK, PDF, MS Office, and
others, but each file type has a different file size limit. The file size limit determines the maximum
size of the file that can be uploaded or forwarded to Wildfire for analysis. If the file size exceeds the
limit, Wildfire will not analyze the file and will return an error message.
According to the Wildfire documentation1, the file size limit for Windows PE files is 100MB. This
means that any PE file that is larger than 100MB will not be analyzed by Wildfire. However, the
firewall can still apply other security features, such as antivirus, anti-spyware, vulnerability
protection, and file blocking, to the PE file based on the security policy settings. The firewall can also
perform local analysis on the PE file using the Cortex XDR agent, which uses machine learning
models to assess the file and assign it a verdict2.
Reference:
WildFire File Size Limits: This document provides the file size limits for different file types that can be
analyzed by Wildfire.
Local Analysis: This document explains how the Cortex XDR agent performs local analysis on files that
cannot be sent to Wildfire for analysis.