Scanning Limits

Max scan size - MaxScanSize
Set the maximum amount of data to be scanned for each input file. Archives and other containers are recursively extracted and scanned up to this value. A value of 0 disables the limit. Note: disabling this limit or setting it too high may result in severe damage to the system.
Default: 100M

Max file size - MaxFileSize
Files larger than this limit will not be scanned. A value of 0 disables the limit. Note: disabling this limit or setting it too high may result in severe damage to the system.
Default: 25M

Max recursion - MaxRecursion
Nested archives are scanned recursively, e.g. if a Zip archive contains a RAR file, all files within it will also be scanned. This options specifies how deeply the process should be continued. Note: disabling this limit or setting it too high may result in severe damage to the system.
Default: 16

Max files - MaxFiles
The number of files to be scanned within an archive, a document, or any other container file. A value of 0 disables the limit. Note: disabling this limit or setting it too high may result in severe damage to the system.
Default: 10000

Max embedded PE - MaxEmbeddedPE
The maximum size of a file to check for embedded PE. Files larger than this value will skip the additional analysis step. Note: disabling this limit or setting it too high may result in severe damage to the system.
Default: 10M

Max HTML normalize - MaxHTMLNormalize
The maximum size of a HTML file to normalize. HTML files larger than this value will not be normalized or scanned. Note: disabling this limit or setting it too high may result in severe damage to the system.
Default: 10M

Max HTML no tags - MaxHTMLNoTags
The maximum size of a normalized HTML file to scan. HTML files larger than this value after normalization will not be scanned. Note: disabling this limit or setting it too high may result in severe damage to the system.
Default: 2M

Max script normalize - MaxScriptNormalize
The maximum size of a script file to normalize. Script content larger than this value will not be normalized or scanned. Note: disabling this limit or setting it too high may result in severe damage to the system.
Default: 5M

Max Zip Type Rcg - MaxZipTypeRcg
The maximum size of a ZIP file to reanalyze type recognition. ZIP files larger than this value will skip the step to potentially reanalyze as PE. Note: disabling this limit or setting it too high may result in severe damage to the system.
Default: 3M

Max Zip Type Rcg - MaxZipTypeRcg
The maximum size of a ZIP file to reanalyze type recognition. ZIP files larger than this value will skip the step to potentially reanalyze as PE. Note: disabling this limit or setting it too high may result in severe damage to the system.
Default: 3M

Max partitions - MaxPartitions
The maximum number of partitions of a raw disk image to be scanned.Raw disk images with more partitions than this value will have up to the value number partitions scanned. Negative values are not allowed. Note: setting this limit too high may result in severe damage or impact performance.
Default: 50

Max icons PE - MaxIconsPE
The maximum number of icons within a PE to be scanned. PE files with more icons than this value will have up to the value number icons scanned. Negative values are not allowed. WARNING: setting this limit too high may result in severe damage or impact performance.
Default: 100

Max recursive HWP3 - MaxRecHWP3
The maximum recursive calls for HWP3 parsing during scanning. HWP3 files using more than this limit will be terminated and alert the user. Scans will be unable to scan any HWP3 attachments if the recursive limit is reached. Negative values are not allowed. WARNING: setting this limit too high may result in severe damage or impact performance.
Default: 16

PCRE match limit - PCREMatchLimit
The maximum calls to the PCRE match function during an instance of regex matching. Instances using more than this limit will be terminated and alert the user but the scan will continue. Negative values are not allowed. WARNING: setting this limit too high may severely impact performance.
Default: 100000

PCRE recursive match limit - PCRERecMatchLimit
The maximum recursive calls to the PCRE match function during an instance of regex matching. Instances using more than this limit will be terminated and alert the user but the scan will continue. Negative values are not allowed and values > PCREMatchLimit are superfluous. WARNING: setting this limit too high may severely impact performance.
Default: 2000

PCRE max file size - PCREMaxFileSize
The maximum filesize for which PCRE subsigs will be executed. Files exceeding this limit will not have PCRE subsigs executed unless a subsig is encompassed to a smaller buffer. Negative values are not allowed. Setting this value to zero disables the limit. WARNING: setting this limit too high or disabling it may severely impact performance.
Default: 25M