"Hi everyone,
I found a Windows shortcut file (.lnk) on my computer that points to Oracle Cloud sa-vinhedo-1 Object Storage. When inspecting the file's metadata, I noticed it is calling the Firefox executable with the following arguments:
"C:\Program Files\Mozilla Firefox\firefox.exe" -taskbar-tab [ID] -new-window "https://objectstorage.sa-vinhedo-1.oraclecloud.com" -profile [Profile Path]
It also includes a custom icon stored in my Firefox profile's taskbartabs\icons folder.
My questions:
1 - I didn't manually install any Oracle software. How did Firefox create this shortcut?
2 - Is this a feature of Progressive Web Apps (PWA) or "Site as an App" that might have been triggered by a website I visited?
3 - Could this be a sign of a malicious site trying to force a shortcut into my Taskbar/Start Menu, or is it a standard Firefox behavior for certain cloud-based services?
I want to make sure my browser hasn't been hijacked. Thanks for any clarification!"
