# Drag & Drop from Firefox also creates Zone.Identifier file

**URL:** https://resource.dopus.com/t/drag-drop-from-firefox-also-creates-zone-identifier-file/60091
**Category:** Help & Support
**Created:** [July 24, 2026, 1:22pm UTC](https://resource.dopus.com/t/drag-drop-from-firefox-also-creates-zone-identifier-file/60091 "2026-07-24T13:22:10Z")
**Posts on this page:** 12
**Page:** 1

<div class="post-metadata">

### Author: ![sadicus](https://resource.dopus.com/letter_avatar_proxy/v4/letter/s/43a26b/32.png) [@sadicus](https://resource.dopus.com/u/sadicus)
#### Post date: [July 24, 2026, 1:22pm UTC](https://resource.dopus.com/t/drag-drop-from-firefox-also-creates-zone-identifier-file/60091/1 "2026-07-24T13:22:11Z")

</div>

Recently I've noticed when drag/drop a URL from FireFox Browser, an additional file is displaying  
"Zone.Identifier"  
**What settings allow this file to be visible?**  
never knew about this additional file type until DO13,24.  
**Is this now un-hidden file actually necessary to make the URL shortcut work when double clicked?**

also I just accidentally learned about the options select a file name and press [CTRL] so cool.

---

<div class="post-metadata">

### Author: ![Leo](https://resource.dopus.com/user_avatar/resource.dopus.com/leo/32/69732_2.png) [@Leo](https://resource.dopus.com/u/Leo)
#### Post date: [July 24, 2026, 1:46pm UTC](https://resource.dopus.com/t/drag-drop-from-firefox-also-creates-zone-identifier-file/60091/2 "2026-07-24T13:46:03Z")

</div>

I don't think that's a change on our side of things.

What happens when you drag the same thing from Firefox to File Explorer?

---

<div class="post-metadata">

### Author: ![Hardkorn](https://resource.dopus.com/user_avatar/resource.dopus.com/hardkorn/32/48254_2.png) [@Hardkorn](https://resource.dopus.com/u/Hardkorn)
#### Post date: [July 24, 2026, 2:58pm UTC](https://resource.dopus.com/t/drag-drop-from-firefox-also-creates-zone-identifier-file/60091/3 "2026-07-24T14:58:35Z")

</div>

> [@Leo](#):
>
> What happens when you drag the same thing from Firefox to File Explorer?

No Zone.Identifier file is created.

Directory Opus 13.24.5 (Beta) Build 9510 x64  
OS 10.0 (B:26200 P:2 T:1) SP 0.0

---

<div class="post-metadata">

### Author: ![GaiaStevef](https://resource.dopus.com/user_avatar/resource.dopus.com/gaiastevef/32/69830_2.png) [@GaiaStevef](https://resource.dopus.com/u/GaiaStevef)
#### Post date: [July 24, 2026, 4:31pm UTC](https://resource.dopus.com/t/drag-drop-from-firefox-also-creates-zone-identifier-file/60091/4 "2026-07-24T16:31:58Z")

</div>

I've noticed this behavior also, it seems to have manifested since updating from Firefox 152.x to Firefox 153.x.

I installed a FF 152.0.6 portable version to test, and it doesn't create a zone.identifier file.

---

<div class="post-metadata">

### Author: ![Leo](https://resource.dopus.com/user_avatar/resource.dopus.com/leo/32/69732_2.png) [@Leo](https://resource.dopus.com/u/Leo)
#### Post date: [July 24, 2026, 4:49pm UTC](https://resource.dopus.com/t/drag-drop-from-firefox-also-creates-zone-identifier-file/60091/5 "2026-07-24T16:49:43Z")

</div>

> [@Hardkorn](#):
>
> No Zone.Identifier file is created.

I just did a test and it also doesn't actually download the file when dropping on File Explorer; it just creates a shortcut URL.

Debugging what happens when Firefox drops the file on Opus, it's saying there are two files being dropped, one named like `Downloaded File.exe` and the other `Downloaded File.exe:Zone Identifier`.

We can probably detect that and deal with it, but it's an odd change for Firefox to make, and not something any other browser I've tested is doing.

(Not a change in Opus, either. The same thing happens with old versions of Opus.)

---

<div class="post-metadata">

### Author: ![GaiaStevef](https://resource.dopus.com/user_avatar/resource.dopus.com/gaiastevef/32/69830_2.png) [@GaiaStevef](https://resource.dopus.com/u/GaiaStevef)
#### Post date: [July 24, 2026, 5:02pm UTC](https://resource.dopus.com/t/drag-drop-from-firefox-also-creates-zone-identifier-file/60091/6 "2026-07-24T17:02:25Z")

</div>

Typically this is just data that's written to the ADS right? I've never seen this happen before in older versions of FF. If it's being handled in Explorer.exe, then it's being written transparently to the ADS.

---

<div class="post-metadata">

### Author: ![Leo](https://resource.dopus.com/user_avatar/resource.dopus.com/leo/32/69732_2.png) [@Leo](https://resource.dopus.com/u/Leo)
#### Post date: [July 24, 2026, 5:20pm UTC](https://resource.dopus.com/t/drag-drop-from-firefox-also-creates-zone-identifier-file/60091/7 "2026-07-24T17:20:39Z")

</div>

> [@GaiaStevef](#):
>
> Typically this is just data that's written to the ADS right?

Yes, although no other browser I know of adds it (at least in that way) for drag & drops and Firefox didn't until a recent update.

I think our code is sanitising the filename (since including ADS like that in drag & drop data, as a separate file, is definitely not normal), which is why it's being written to a separate file instead of an ADS stream.

> [@GaiaStevef](#):
>
> If it's being handled in Explorer.exe, then it's being written transparently to the ADS.

I'm not sure it is really, since Explorer.exe reacts to the drop by creating a .URL shortcut to the download, rather than downloading the actual file. (Which is odd, since the file data is there in the drag & drop object and Firefox went to the trouble of downloading it, only for the most common file manager to throw the data away and make a shortcut... Firefox is doing something strange here, or at least, I don't understand what they are trying to do vs what happens in any program I've tested with. They're doing something that makes sense in theory, but doesn't seem to produce useful results in anything.)

I also wonder what Firefox expects to happen if the file is dragged to a drive that doesn't support ADS.

---

<div class="post-metadata">

### Author: ![sadicus](https://resource.dopus.com/letter_avatar_proxy/v4/letter/s/43a26b/32.png) [@sadicus](https://resource.dopus.com/u/sadicus)
#### Post date: [July 24, 2026, 5:40pm UTC](https://resource.dopus.com/t/drag-drop-from-firefox-also-creates-zone-identifier-file/60091/8 "2026-07-24T17:40:36Z")

</div>

FireFox 153.0 (64-bit) Win 10x64  
Drag/Drop to File Explorer does not do this.  
Tested it DO Lister, with this thread, here is what it looks like:

 ![DO13_WTF_ExtraFile](https://resource.dopus.com/uploads/default/original/3X/3/a/3ae620e9b1c30a6e60c33daee48c147ae45a4a86.jpeg)

---

<div class="post-metadata">

### Author: ![Leo](https://resource.dopus.com/user_avatar/resource.dopus.com/leo/32/69732_2.png) [@Leo](https://resource.dopus.com/u/Leo)
#### Post date: [July 24, 2026, 5:46pm UTC](https://resource.dopus.com/t/drag-drop-from-firefox-also-creates-zone-identifier-file/60091/9 "2026-07-24T17:46:21Z")

</div>

Very odd that Firefox is adding it even for shortcuts to pages, not just downloads.

That makes me wonder if this is just a bug in Firefox. No other browser does that and it doesn't really make sense for a zone identifier to be added to a .URL shortcut (the URL it points to tells you the zone).

---

<div class="post-metadata">

### Author: ![sadicus](https://resource.dopus.com/letter_avatar_proxy/v4/letter/s/43a26b/32.png) [@sadicus](https://resource.dopus.com/u/sadicus)
#### Post date: [July 24, 2026, 5:55pm UTC](https://resource.dopus.com/t/drag-drop-from-firefox-also-creates-zone-identifier-file/60091/10 "2026-07-24T17:55:55Z")

</div>

so this is happening to other people and not a PC virus?

---

<div class="post-metadata">

### Author: ![Leo](https://resource.dopus.com/user_avatar/resource.dopus.com/leo/32/69732_2.png) [@Leo](https://resource.dopus.com/u/Leo)
#### Post date: [July 27, 2026, 6:44am UTC](https://resource.dopus.com/t/drag-drop-from-firefox-also-creates-zone-identifier-file/60091/11 "2026-07-27T06:44:41Z")

</div>

We’ll have a workaround for this in the next update.

---

<div class="post-metadata">

### Author: ![GaiaStevef](https://resource.dopus.com/user_avatar/resource.dopus.com/gaiastevef/32/69830_2.png) [@GaiaStevef](https://resource.dopus.com/u/GaiaStevef)
#### Post date: [August 4, 2026, 6:41pm UTC](https://resource.dopus.com/t/drag-drop-from-firefox-also-creates-zone-identifier-file/60091/12 "2026-08-04T18:41:10Z")

</div>

Looks like Firefox fixed the issue in today's 153.0.3 update.

Per the release notes;

"Fixed Internet shortcuts dragged from Firefox to the desktop being marked as untrusted on Windows, which caused a security warning every time they were opened. (Bug 2056865)"
