Windows 10 reached EOS (end of support) on October 14, 2025. If you are on Windows 10, see this article.

Search Support

Avoid support scams. We will never ask you to call or text a phone number or share personal information. Please report suspicious activity using the “Report Abuse” option.

Learn More

Firefox.exe suspicious file

  • 3 replies
  • 1 has this problem
  • 148 views
  • Last reply by TyDraniu

Today as I got to work (Windows 11 machine), I had a suspicious Firefox.exe file on my Desktop, it was not a shortcut, but exe file. I did a little investigation and research, and I noticed some difference from Program Files exe file and Firefox.exe on my Desktop:

C:\Program Files\Mozilla Firefox\firefox.exe

Size: 695424 bytes SHA-256 hash: EEB242895F8ED48B43EAAA9ECA06C6DDE54425F8AE0E16200D2D46F839B9A540 File version: 145.0.0.327 Copyright: ©Firefox and Mozilla Developers Date modified: 16.11.2025 12:35 Original filename: firefox.exe Digital Signature: Mozilla Corporation

and Firefox.exe that appeared on Desktop

C:\Users\User\Desktop\Firefox.exe

Size: 389248 bytes SHA-256 hash: E8DA5735FE1B5E92BA3636B8D17B5BEC0EA521DB6A8B5A52177FF3E8B2F60710 File version: 145.0.0.327 Copyright: Licence: MPL 2 Date modified: 16.11.2025 12:35 Original filename: desktop-launcher.exe Digital Signature: Mozilla Corporation

I scanned both files in VirusTotal, and they both seems clean and legit

I uploaded both files to:

https://drive.google.com/file/d/1kALgQbfhIpHqs1pN6dmTdF71nm10LlD-/view?usp=sharing

Can somebody assure me that both files are OK, and can somebody explain to me why Firefox.exe appeared on my Desktop, and why is there difference between two files in size, Copyright info, and original filename ?

Today as I got to work (Windows 11 machine), I had a suspicious Firefox.exe file on my Desktop, it was not a shortcut, but exe file. I did a little investigation and research, and I noticed some difference from Program Files exe file and Firefox.exe on my Desktop: C:\Program Files\Mozilla Firefox\firefox.exe Size: 695424 bytes SHA-256 hash: EEB242895F8ED48B43EAAA9ECA06C6DDE54425F8AE0E16200D2D46F839B9A540 File version: 145.0.0.327 Copyright: ©Firefox and Mozilla Developers Date modified: 16.11.2025 12:35 Original filename: firefox.exe Digital Signature: Mozilla Corporation and Firefox.exe that appeared on Desktop C:\Users\User\Desktop\Firefox.exe Size: 389248 bytes SHA-256 hash: E8DA5735FE1B5E92BA3636B8D17B5BEC0EA521DB6A8B5A52177FF3E8B2F60710 File version: 145.0.0.327 Copyright: Licence: MPL 2 Date modified: 16.11.2025 12:35 Original filename: desktop-launcher.exe Digital Signature: Mozilla Corporation I scanned both files in VirusTotal, and they both seems clean and legit I uploaded both files to: https://drive.google.com/file/d/1kALgQbfhIpHqs1pN6dmTdF71nm10LlD-/view?usp=sharing Can somebody assure me that both files are OK, and can somebody explain to me why Firefox.exe appeared on my Desktop, and why is there difference between two files in size, Copyright info, and original filename ?
Attached screenshots

All Replies (3)

Yes, that desktop one is a launcher, it's a different file and both are OK.

Pheeew .... thank You very much for info. But can somebody explain to me how that Firefox.exe / desktop-launcher.exe appeared on Desktop in first place and why ? That is not normal behaviour for any Windows program, let alone famus Firefox - executable files should be installed in Program Files, and on Desktop it should be only shortcuts. Can You imagine the horror I went realizing there is some unknown exe file on my Desktop in this digital age, and everyday scams, viruses, badware in buisness environment ? I had a NOD32 antivirus on my PC before, now I have a BitDefender alongside NOD32 :-)

They're just dropping old shortcuts in favor of this exe on Win11. A worrisome precedence for advanced users, but supposedly it has some additional features, esp for people migrating from Win10, so it is how it is.

Ask a question

You must log in to your account to reply to posts. Please start a new question, if you do not have an account yet.