Well I am having issues myself, but it's very bizarre.
I am using the following script:
http://goo.gl/XJv0UU
Winstrings is simply the strings.exe from SysInternals, a Win version of strings, as strings -10 from above was taking forever in Cygwin. Also I did two grep lines because for some reason in hex, sometimes the token is before "Connection succeeded" while other times it seems to be after, instead.
It works perfectly on my Win 7 64-bit desktop, tested at least 5 times.
Yet if I try it on my XP Pro 32-bit, Laptop Win 8 64-bit, or my Vista 64-bit, they all fail.
Something seems to be failing at the dump of Firefox because opening the said dumps in HxD definitely does not show the token.
I am just confused how the exact same script and even using the exact same baby-cygwin on each PC would cause such behavior.
EDIT: It appears that I simply wasn't providing enough sleep between dump and kill Firefox, which was causing it to sometimes get the token and sometimes not, but it still once in a while doesn't get the token. I hope to find a more consistent approach as this will cause serious issues with scheduled recordings.