Hello, On my malware testin produre with fantastic FF by @tnodir, i came across Control.exe (control panel) openwith.exe curl.exe explorer.exe cscript wscipt powershell 5/7 I made a FF rule for those, they can run, but not connectin outside. Any child processes made are also terminated by FF.
Don't forget, there's sly malware out there that just copies those (and/or) more and renames them into a different folder/directory. I don't know much about FF whether it blocks name/path only or if it can block connections-in-out by name, path AND HASH.
all those are legit tools or program. if they came across with malware on your system, then the origin problem is not FF and blocking this tools - its the malware! i dont like such finger pointing to innocent tools.
