Avatar for Username

Pesquisar no apoio

Evite burlas no apoio. Nunca iremos solicitar que telefone ou envie uma mensagem de texto para um número de telefone ou que partilhe informações pessoais. Por favor, reporte atividades suspeitas utilizando a opção "Reportar abuso".

Learn More

Esta discussão foi arquivada. Se precisar de ajuda, por favor, coloque uma nova questão.

XDR reporting excessive failed connections

  • Nenhuma resposta
  • 0 têm este problema
  • 6 visualizações
3m1l10
3m1l10
more options

I'm receiving an alert from Cortex XDR, that Firefox is attempting to connect to multiple unknown connections over a short period of time. I've had Cortex XDR installed for over a year with no similar alerts, so I think something has changed recently. The following command is what it's flagging:

"\"C:\\Program Files\\Mozilla Firefox\\firefox.exe\" -contentproc --channel=\"26172.1.1434727046\\628648578\" -parentBuildID 20221110173214 -prefsHandle 2492 -prefMapHandle 2488 -prefsLen 35134 -prefMapSize 246036 -win32kLockedDown -appDir \"C:\\Program Files\\Mozilla Firefox\\browser\" - {79f67c07-73ef-4100-9816-3ba50906aa4a} 26172 \"\\\\.\\pipe\\gecko-crash-server-pipe.26172\" 2500 184ffa35558 socket",

This alert has appeared several times over the past week, so it's not just a one-off. Any idea what this command is doing?

Thank you.

I'm receiving an alert from Cortex XDR, that Firefox is attempting to connect to multiple unknown connections over a short period of time. I've had Cortex XDR installed for over a year with no similar alerts, so I think something has changed recently. The following command is what it's flagging: "\"C:\\Program Files\\Mozilla Firefox\\firefox.exe\" -contentproc --channel=\"26172.1.1434727046\\628648578\" -parentBuildID 20221110173214 -prefsHandle 2492 -prefMapHandle 2488 -prefsLen 35134 -prefMapSize 246036 -win32kLockedDown -appDir \"C:\\Program Files\\Mozilla Firefox\\browser\" - {79f67c07-73ef-4100-9816-3ba50906aa4a} 26172 \"\\\\.\\pipe\\gecko-crash-server-pipe.26172\" 2500 184ffa35558 socket", This alert has appeared several times over the past week, so it's not just a one-off. Any idea what this command is doing? Thank you.