MozillaZine

{972ce4c6-7e08-4474-a285-3208198ce6fd}.xpi file type

User Help for Mozilla Firefox
Diorser

User avatar
 
Posts: 934
Joined: June 22nd, 2005, 6:57 am

Post Posted December 3rd, 2017, 1:19 pm

Hello,

In linux (and windows), can be found this xpi file which is the light theme [addon theme panel].

/usr/lib/firefox-addons/extensions/{972ce4c6-7e08-4474-a285-3208198ce6fd}.xpi
C:\program files\mozilla firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}.xpi

This file is not a "normal" zip or tar file and cannot be open.

What is the exact file type of this xpi ?

Thanks.

http://www.freefixer.com/library/file/% ... pi-228376/
https://www.threatfixer.com/remove-972c ... ce6fd-xpi/

Frank Lion

User avatar
 
Posts: 20029
Joined: April 23rd, 2004, 6:59 pm
Location: ... The Exorcist....United Kingdom

Post Posted December 3rd, 2017, 2:00 pm


To the idiot, like in your links, anything with a long GUID is automatically dangerous malware.

However, since 2004, the above GUID is that of the Firefox default theme.
Metal Lion latest SeaMonkey & Thunderbird Themes - Sea Monkey and Silver Sea Monkey
"The only thing necessary for the triumph of evil, is for good men to do nothing." - Edmund Burke (attrib.)

malliz
Folder@Home

User avatar
 
Posts: 43493
Joined: December 7th, 2002, 4:34 am
Location: Australia

Post Posted December 3rd, 2017, 2:03 pm

:D Some free Spyware sites that helpfully install Viruses for you I see.
What sort of man would put a known criminal in charge of a major branch of government? Apart from, say, the average voter.
"Terry Pratchett"

Gingerbread Man

User avatar
 
Posts: 7738
Joined: January 30th, 2007, 10:55 am

Post Posted December 3rd, 2017, 2:07 pm

Hello,

Diorser wrote:This file is not a "normal" zip or tar file and cannot be open.

Create a copy of the file on your desktop, then rename it from *.xpi to *.zip. I have no trouble opening it with either File Explorer or WinRAR.

Diorser

User avatar
 
Posts: 934
Joined: June 22nd, 2005, 6:57 am

Post Posted December 3rd, 2017, 2:32 pm

May be for windows, or with a closed version of winrar ?
For linux, this xpi is special and cannot be open (not a "normal" xpi).
Could someone confirm he can open {972ce4c6-7e08-4474-a285-3208198ce6fd}.xpi on linux ?
If yes, please run this and report the exact file type.

Code: Select all
file {972ce4c6-7e08-4474-a285-3208198ce6fd}.xpi

the-edmeister

User avatar
 
Posts: 32081
Joined: February 25th, 2003, 12:51 am
Location: Chicago, IL, USA

Post Posted December 3rd, 2017, 2:57 pm

I use 7-Zip and "tell" Windows to use that application to open to open .xpi files, so 7-Zip appears in the Windows contextual menu when I right-click that file type in Windows.



.
A mind is a terrible thing to waste. Mine has wandered off and I'm out looking for it.

malliz
Folder@Home

User avatar
 
Posts: 43493
Joined: December 7th, 2002, 4:34 am
Location: Australia

Post Posted December 3rd, 2017, 3:03 pm

http://www.7-zip.org/download.html
Looks like there is a Linux version
What sort of man would put a known criminal in charge of a major branch of government? Apart from, say, the average voter.
"Terry Pratchett"

Brummelchen
 
Posts: 3576
Joined: March 19th, 2005, 10:51 am

Post Posted December 3rd, 2017, 3:09 pm

it contains a manifest and install.rdf, investigating too much in it as its a default firefox file you should not touch.
not linux but i could open the xpi in windows (from "firefox-57.0.1.tar.bz2"), not the same content.

Windows
Code: Select all
Offset      0  1  2  3  4  5  6  7   8  9  A  B  C  D  E  F

00000000   00 00 00 00 50 4B 01 02  14 00 0A 00 00 00 00 00       PK         
00000010   00 00 21 3C 30 1C 3F 4A  A7 07 00 00 A7 07 00 00     !<0 ?J§   §   
00000020   0F 00 00 00 00 00 00 00  00 00 00 00 00 00 90 00                   
00000030   00 00 63 68 72 6F 6D 65  2E 6D 61 6E 69 66 65 73     chrome.manifes
00000040   74 50 4B 01 02 14 00 0A  00 00 00 00 00 00 00 21   tPK            !
00000050   3C 8F 7E 23 C0 73 05 00  00 73 05 00 00 0B 00 00   < ~#Às   s     
00000060   00 00 00 00 00 00 00 00  00 00 00 64 08 00 00 69              d   i
00000070   6E 73 74 61 6C 6C 2E 72  64 66 50 4B 05 06 00 00   nstall.rdfPK   
00000080   00 00 02 00 02 00 76 00  00 00 04 00 00 00 00 00         v         
00000090   50 4B 03 04 0A 00 00 00  00 00 00 00 21 3C 30 1C   PK          !<0

linux
Code: Select all
Offset      0  1  2  3  4  5  6  7   8  9  A  B  C  D  E  F

00000000   00 00 00 00 50 4B 01 02  14 00 0A 00 00 00 00 00       PK         
00000010   00 00 21 3C C1 EB 49 21  BE 02 00 00 BE 02 00 00     !<ÁëI!¾   ¾   
00000020   0F 00 00 00 00 00 00 00  00 00 00 00 00 00 90 00                   
00000030   00 00 63 68 72 6F 6D 65  2E 6D 61 6E 69 66 65 73     chrome.manifes
00000040   74 50 4B 01 02 14 00 0A  00 00 00 00 00 00 00 21   tPK            !
00000050   3C 8F 7E 23 C0 73 05 00  00 73 05 00 00 0B 00 00   < ~#Às   s     
00000060   00 00 00 00 00 00 00 00  00 00 00 7B 03 00 00 69              {   i
00000070   6E 73 74 61 6C 6C 2E 72  64 66 50 4B 05 06 00 00   nstall.rdfPK   
00000080   00 00 02 00 02 00 76 00  00 00 04 00 00 00 00 00         v         
00000090   50 4B 03 04 0A 00 00 00  00 00 00 00 21 3C C1 EB   PK          !<Áë


you are using winrar v5 latest?
anyhow 7zip should open it too.

Diorser

User avatar
 
Posts: 934
Joined: June 22nd, 2005, 6:57 am

Post Posted December 3rd, 2017, 3:18 pm

7zip give some indication only. Different file types are included in 7zip. Windows 7zip can include closed winrar version.
Only linux can report exact file type.

A normal xpi file will report:
Code: Select all
extension.xpi => Zip archive data, at least v2.0 to extract

{972ce4c6-7e08-4474-a285-3208198ce6fd}.xpi: nothing.
Waiting for a linux user confirmation.
There is so much noise about this file that I wonder why it seems so "special".

Brummelchen
 
Posts: 3576
Joined: March 19th, 2005, 10:51 am

Post Posted December 3rd, 2017, 3:50 pm

btw may i ask you why it is important for you to have closer look in it?

firefox 44 -> folder with that name, 3 files: manifest, rdf, png
firefox 48 -> xpi file with that name, 2 files: manifest, rdf

when it may be special under linux it is for security reason. they packed the omni.ja for testing purpose with an unknown (own) lz4 algorithm but dropped it. JA was JAR before and JAR = special form of ZIP = able to open for malware.

Diorser

User avatar
 
Posts: 934
Joined: June 22nd, 2005, 6:57 am

Post Posted December 3rd, 2017, 4:00 pm

{972ce4c6-7e08-4474-a285-3208198ce6fd}.xpi is totally useless in Linux, and I remove it.
If you read this , it seems some windows users wonder why this theme file seems so "special".
To satisfy my curiosity.

malliz
Folder@Home

User avatar
 
Posts: 43493
Joined: December 7th, 2002, 4:34 am
Location: Australia

Post Posted December 3rd, 2017, 4:02 pm

For petes sake its the default theme unwrap yourself from the tinfoil and go for a walk
What sort of man would put a known criminal in charge of a major branch of government? Apart from, say, the average voter.
"Terry Pratchett"

mightyglydd

User avatar
 
Posts: 9198
Joined: November 4th, 2006, 7:07 pm
Location: Hollywood Ca.

Post Posted December 3rd, 2017, 4:14 pm

Probably get a better response here...

viewtopic.php?f=22&t=3008069
#KeepFightingMichael

Brummelchen
 
Posts: 3576
Joined: March 19th, 2005, 10:51 am

Post Posted December 3rd, 2017, 4:17 pm

If you read this

i read too much of such trash sites - and all suggest spyhunter as THE solution.
freefixer/threatfixer are two of 1000++ not valuable sites selling spyhunter with lies.

i can not tell you if that file was target for malware in the past - it never happend to me.
but running the next update firefox will restore this file again - weather it is used or deletable.
firefox also notice if it was modified (installation files) - in that case it will load the complete installation setup (for the update) instead the difference as archive.

Diorser

User avatar
 
Posts: 934
Joined: June 22nd, 2005, 6:57 am

Post Posted December 3rd, 2017, 4:32 pm

I did not notice it before, but all these extensions or so called "features" have the same file type.

Code: Select all
/usr/lib/firefox/browser/features

activity-stream@mozilla.org.xpi  e10srollout@mozilla.org.xpi  followonsearch@mozilla.com.xpi  onboarding@mozilla.org.xpi   shield-recipe-client@mozilla.org.xpi
aushelper@mozilla.org.xpi   firefox@getpocket.com.xpi   formautofill@mozilla.org.xpi    screenshots@mozilla.org.xpi  webcompat@mozilla.org.xpi

Linux p7zip p7zip-rar cannot open them (at least from Debian).
I do not have windows to confirm they can be open, but feedback from a linux user would be welcome with a simple command:
Code: Select all
file extension.xpi

Return to Firefox Support


Who is online

Users browsing this forum: makaiguy and 10 guests