Hello, thanks for your answer. Yes, I need both conditions, as a way to filter ransomware/malware (usually smaller zip or rar files).
