Avatar for Username

Search Support

Avoid support scams. We will never ask you to call or text a phone number or share personal information. Please report suspicious activity using the “Report Abuse” option.

Learn More

This thread was archived. Jei jums reikia pagalbos, užduokite naują klausimą.

XDR reporting excessive failed connections

  • Atsakymų nėra
  • 0 have this problem
  • 3 views
3m1l10
3m1l10
more options

I'm receiving an alert from Cortex XDR, that Firefox is attempting to connect to multiple unknown connections over a short period of time. I've had Cortex XDR installed for over a year with no similar alerts, so I think something has changed recently. The following command is what it's flagging:

"\"C:\\Program Files\\Mozilla Firefox\\firefox.exe\" -contentproc --channel=\"26172.1.1434727046\\628648578\" -parentBuildID 20221110173214 -prefsHandle 2492 -prefMapHandle 2488 -prefsLen 35134 -prefMapSize 246036 -win32kLockedDown -appDir \"C:\\Program Files\\Mozilla Firefox\\browser\" - {79f67c07-73ef-4100-9816-3ba50906aa4a} 26172 \"\\\\.\\pipe\\gecko-crash-server-pipe.26172\" 2500 184ffa35558 socket",

This alert has appeared several times over the past week, so it's not just a one-off. Any idea what this command is doing?

Thank you.

I'm receiving an alert from Cortex XDR, that Firefox is attempting to connect to multiple unknown connections over a short period of time. I've had Cortex XDR installed for over a year with no similar alerts, so I think something has changed recently. The following command is what it's flagging: "\"C:\\Program Files\\Mozilla Firefox\\firefox.exe\" -contentproc --channel=\"26172.1.1434727046\\628648578\" -parentBuildID 20221110173214 -prefsHandle 2492 -prefMapHandle 2488 -prefsLen 35134 -prefMapSize 246036 -win32kLockedDown -appDir \"C:\\Program Files\\Mozilla Firefox\\browser\" - {79f67c07-73ef-4100-9816-3ba50906aa4a} 26172 \"\\\\.\\pipe\\gecko-crash-server-pipe.26172\" 2500 184ffa35558 socket", This alert has appeared several times over the past week, so it's not just a one-off. Any idea what this command is doing? Thank you.