Browser Download of Executable to Non-System Drive

Shadows VMB@Vemorian_Mort

•updated Sep 3, 2026•3•0•4

Detects instances where common web browsers (Chrome, Edge, Firefox, IE) download executable or compressed files to drives other than the C: drive. This behavior may indicate an attempt to evade standard security monitoring or hide malicious payloads on secondary volumes or removable media.