F5F Stay Refreshed Software Operating Systems lsass.exe shows over 30,000 active connections after two days.

lsass.exe shows over 30,000 active connections after two days.

lsass.exe shows over 30,000 active connections after two days.

T
thiagogastal27
Member
Find
53
09-22-2016, 05:18 PM
#1
While examining the reasons, I notice numerous entries labeled "Semaphore" without further information. After restarting the PC and waiting eight hours, the output continues to display increasing numbers. It seems the process is growing in size over time. I've also observed that after ten hours, the count reaches a higher value, suggesting ongoing activity. The system logs indicate multiple events and threads, with some entries showing high values for handles and timers. It appears that the process is expanding, possibly due to background operations or resource usage.
Reply
Reply
T
thiagogastal27
09-22-2016, 05:18 PM #1

While examining the reasons, I notice numerous entries labeled "Semaphore" without further information. After restarting the PC and waiting eight hours, the output continues to display increasing numbers. It seems the process is growing in size over time. I've also observed that after ten hours, the count reaches a higher value, suggesting ongoing activity. The system logs indicate multiple events and threads, with some entries showing high values for handles and timers. It appears that the process is expanding, possibly due to background operations or resource usage.

Reply
Reply
S
STQZ
Member
Find
162
10-09-2016, 03:54 PM
#2
Have you tackled this problem before? The same concern exists here.
Reply
Reply
S
STQZ
10-09-2016, 03:54 PM #2

Have you tackled this problem before? The same concern exists here.

Reply
Reply
_
_MinezPlays_
Member
Find
183
10-09-2016, 07:27 PM
#3
It serves local security needs, covering tasks like admin access—such as prompting for a password when accessing user accounts. It also activates during service startup, seeking security authority approval. For details, examine your event viewer and search the 'security' folder for a catalog of running objects. While you can't pinpoint exact token associations, the viewer provides additional context.
Reply
Reply
_
_MinezPlays_
10-09-2016, 07:27 PM #3

It serves local security needs, covering tasks like admin access—such as prompting for a password when accessing user accounts. It also activates during service startup, seeking security authority approval. For details, examine your event viewer and search the 'security' folder for a catalog of running objects. While you can't pinpoint exact token associations, the viewer provides additional context.

Reply
Reply