Cyber-security experts often analyze malware distribution campaigns where file sizes are standardized. A file that is too small (e.g., 1 KB) looks suspicious—users know a key should be small, but an empty text file looks like a scam. A file that is too large (e.g., 500 MB) signals a download time that might cause the user to reconsider or scan the file with an antivirus.