> ## Documentation Index
> Fetch the complete documentation index at: https://docs.mythic-c2.net/llms.txt
> Use this file to discover all available pages before exploring further.

# Files

> Track, preview, edit, resume, and download operation files.

Use the paperclip icon on the left to quickly navigate to the file search.
Mythic associates each uploaded or downloaded file with its task, callback, host, operator, timestamps, remote path, hashes, and transfer state.

## Review files

Select a row to inspect its SHA-1 and MD5 hashes, size, bytes received, task comment, tags, and file metadata.
Preview supported files as media, text, hex, or a SQLite database without first saving them locally.
Authenticated previews and downloads use the current Bearer token in v4.

Select multiple completed downloads and choose **Zip & Download selected** to retrieve them as one archive.

<Frame>
  <img src="https://mintcdn.com/specterops-3/UWQzb5_oCXJhRmtv/images/version-4.0/operational-pieces-files-list.png?fit=max&auto=format&n=UWQzb5_oCXJhRmtv&q=85&s=5c51fdac7f77c94a3888f66a67d78627" width="1643" height="762" data-path="images/version-4.0/operational-pieces-files-list.png" />
</Frame>

## Transfer progress and resume

Mythic 4.0 supports the existing numbered-chunk protocol and a byte-offset protocol.
Offset transfers expose byte-level progress, and interrupted agent-to-Mythic downloads can resume from the next missing chunk or offset when the agent supplies the existing `file_id` with `resume: true`.

```mermaid theme={"system"}
sequenceDiagram
    participant A as Agent
    participant M as Mythic
    A->>M: Register total_size and metadata
    M-->>A: file_id
    A->>M: chunk_offset plus chunk_data
    M-->>A: next missing chunk_offset
    Note over A,M: Connection is interrupted
    A->>M: existing file_id plus resume true
    M-->>A: next missing chunk_offset
    A->>M: Continue remaining bytes
```

See [Agent → Mythic File Downloads](/version-4.0/message-flow/file-download-agent-greater-than-mythic) for wire examples.

## Edit text files

Commands that implement the v4 file-editor protocol can open a versioned UTF-8 document in the task response.
The editor supports refresh, save, staged previews, conflicts, force-overwrite, history, and close.
See [File Editor](/version-4.0/operational-pieces/file-editor).

C2 profiles can also track files hosted through the profile.
Operators can update, retry, stop, or remove a hosted file from the C2 profile workflow instead of treating hosting as an untracked side effect.

<Frame>
  <img src="https://mintcdn.com/specterops-3/UWQzb5_oCXJhRmtv/images/version-4.0/operational-pieces-files-hosted.png?fit=max&auto=format&n=UWQzb5_oCXJhRmtv&q=85&s=757a08a0d7e8ca444d603b0febb5f18e" width="1638" height="357" data-path="images/version-4.0/operational-pieces-files-hosted.png" />
</Frame>