9/10/2024 11:03:52 AM 
 [12576] userinit.exe
Process id 12576
Execution details Elevated
Image file path \Device\HarddiskVolume3\Windows\System32\userinit.exe
9/10/2024 11:03:52 AM 
 [13384] explorer.exe
Process id 13384
Execution details Token elevation: Limited, Integrity level: Medium
Image file path C:\Windows\explorer.exe
Image file SHA1 76f97eff97bccdc4a4b33531e8152cbcd6c23cbf
Image file creation time Aug 26, 2024 9:25:49 AM
Image file last modification time Aug 26, 2024 9:25:49 AM
PE metadata explorer.exe
User AzureAD\AXXXnXXXXXXX
9/10/2024 2:01:03 PM 
 [16668] floorp.exe
Command line "floorp.exe" 
Process id 16668
Execution details Token elevation: Limited, Integrity level: Medium
Image file path C:\Program Files\Ablaze Floorp\floorp.exe
Image file SHA1 7d486d3c8ce8e887486df6efae6a82fa75ed15fd
Image file creation time Sep 9, 2024 9:57:46 AM
Image file last modification time Sep 10, 2024 9:51:53 AM
PE metadata floorp.exe
User AzureAD\AXXXnXXXXXXX
9/10/2024 2:01:03 PM 
 [27148] floorp.exe
Command line "floorp.exe"
Process id 27148
Execution details Token elevation: Limited, Integrity level: Medium
Image file path C:\Program Files\Ablaze Floorp\floorp.exe
Image file SHA1 7d486d3c8ce8e887486df6efae6a82fa75ed15fd
Image file creation time Sep 9, 2024 9:57:46 AM
Image file last modification time Sep 10, 2024 9:51:53 AM
PE metadata floorp.exe
User AzureAD\AXXXnXXXXXXX
9/10/2024 2:01:04 PM 
 [2636] floorp.exe -contentproc --channel=1984 -parentBuildID 20240908033729 -prefsHandle 1952 -prefMapHandle 1928 -prefsLen 34453 -prefMapSize 265716 -appDir "C:\Program Files\Ablaze Floorp\browser" - {46c45bfd-985d-4b19-b802-647e8ccea042} 27148  gpu
Command line "floorp.exe" -contentproc --channel=1984 -parentBuildID 20240908033729 -prefsHandle 1952 -prefMapHandle 1928 -prefsLen 34453 -prefMapSize 265716 -appDir "C:\Program Files\Ablaze Floorp\browser" - {46c45bfd-985d-4b19-b802-647e8ccea042} 27148  gpu
Process id 2636
Execution details Token elevation: Limited, Integrity level: Low
Image file path C:\Program Files\Ablaze Floorp\floorp.exe
Image file SHA1 7d486d3c8ce8e887486df6efae6a82fa75ed15fd
Image file creation time Sep 9, 2024 9:57:46 AM
Image file last modification time Sep 10, 2024 9:51:53 AM
PE metadata floorp.exe
User AzureAD\AXXXnXXXXXXX
9/10/2024 2:01:04 PM 
 [4260] floorp.exe -contentproc --channel=2336 -parentBuildID 20240908033729 -prefsHandle 2328 -prefMapHandle 2324 -prefsLen 34453 -prefMapSize 265716 -win32kLockedDown -appDir "C:\Program Files\Ablaze Floorp\browser" - {70db7c5c-41e1-47f4-ba28-ff61e8753ebb} 27148  socket
Command line "floorp.exe" -contentproc --channel=2336 -parentBuildID 20240908033729 -prefsHandle 2328 -prefMapHandle 2324 -prefsLen 34453 -prefMapSize 265716 -win32kLockedDown -appDir "C:\Program Files\Ablaze Floorp\browser" - {70db7c5c-41e1-47f4-ba28-ff61e8753ebb} 27148  socket
Process id 4260
Execution details Token elevation: Limited, Integrity level: Low
Image file path C:\Program Files\Ablaze Floorp\floorp.exe
Image file SHA1 7d486d3c8ce8e887486df6efae6a82fa75ed15fd
Image file creation time Sep 9, 2024 9:57:46 AM
Image file last modification time Sep 10, 2024 9:51:53 AM
PE metadata floorp.exe
User AzureAD\AXXXnXXXXXXX
9/10/2024 2:01:04 PM 
 [24676] floorp.exe -contentproc --channel=2976 -childID 1 -isForBrowser -prefsHandle 2968 -prefMapHandle 2964 -prefsLen 35239 -prefMapSize 265716 -jsInitHandle 1488 -jsInitLen 234780 -parentBuildID 20240908033729 -win32kLockedDown -appDir "C:\Program Files\Ablaze Floorp\browser" - {f4bfe5a1-b2a7-4373-bd30-68f2fb8e9591} 27148  tab
Command line "floorp.exe" -contentproc --channel=2976 -childID 1 -isForBrowser -prefsHandle 2968 -prefMapHandle 2964 -prefsLen 35239 -prefMapSize 265716 -jsInitHandle 1488 -jsInitLen 234780 -parentBuildID 20240908033729 -win32kLockedDown -appDir "C:\Program Files\Ablaze Floorp\browser" - {f4bfe5a1-b2a7-4373-bd30-68f2fb8e9591} 27148  tab
Process id 24676
Execution details Token elevation: Limited, Integrity level: Low
Image file path C:\Program Files\Ablaze Floorp\floorp.exe
Image file SHA1 7d486d3c8ce8e887486df6efae6a82fa75ed15fd
Image file creation time Sep 9, 2024 9:57:46 AM
Image file last modification time Sep 10, 2024 9:51:53 AM
PE metadata floorp.exe
User AzureAD\AXXXnXXXXXXX
9/10/2024 2:01:05 PM 
 [13700] floorp.exe -contentproc --channel=4636 -childID 2 -isForBrowser -prefsHandle 4628 -prefMapHandle 4624 -prefsLen 41048 -prefMapSize 265716 -jsInitHandle 1488 -jsInitLen 234780 -parentBuildID 20240908033729 -win32kLockedDown -appDir "C:\Program Files\Ablaze Floorp\browser" - {ff12bb68-b71a-4690-b26c-9ce2b02b6f1d} 27148  tab
Command line "floorp.exe" -contentproc --channel=4636 -childID 2 -isForBrowser -prefsHandle 4628 -prefMapHandle 4624 -prefsLen 41048 -prefMapSize 265716 -jsInitHandle 1488 -jsInitLen 234780 -parentBuildID 20240908033729 -win32kLockedDown -appDir "C:\Program Files\Ablaze Floorp\browser" - {ff12bb68-b71a-4690-b26c-9ce2b02b6f1d} 27148  tab
Process id 13700
Execution details Token elevation: Limited, Integrity level: Low
Image file path C:\Program Files\Ablaze Floorp\floorp.exe
Image file SHA1 7d486d3c8ce8e887486df6efae6a82fa75ed15fd
Image file creation time Sep 9, 2024 9:57:46 AM
Image file last modification time Sep 10, 2024 9:51:53 AM
PE metadata floorp.exe
User AzureAD\AXXXnXXXXXXX
9/10/2024 2:01:05 PM 
 [12700] floorp.exe -contentproc --channel=3452 -parentBuildID 20240908033729 -sandboxingKind 0 -prefsHandle 5484 -prefMapHandle 5384 -prefsLen 41142 -prefMapSize 265716 -win32kLockedDown -appDir "C:\Program Files\Ablaze Floorp\browser" - {f4416012-7a27-40b6-90e6-cbe22611832e} 27148  utility
Command line "floorp.exe" -contentproc --channel=3452 -parentBuildID 20240908033729 -sandboxingKind 0 -prefsHandle 5484 -prefMapHandle 5384 -prefsLen 41142 -prefMapSize 265716 -win32kLockedDown -appDir "C:\Program Files\Ablaze Floorp\browser" - {f4416012-7a27-40b6-90e6-cbe22611832e} 27148  utility
Process id 12700
Execution details Token elevation: Limited, Integrity level: Low
Image file path C:\Program Files\Ablaze Floorp\floorp.exe
Image file SHA1 7d486d3c8ce8e887486df6efae6a82fa75ed15fd
Image file creation time Sep 9, 2024 9:57:46 AM
Image file last modification time Sep 10, 2024 9:51:53 AM
PE metadata floorp.exe
User AzureAD\AXXXnXXXXXXX
9/10/2024 2:01:05 PM 
 [5444] floorp.exe -contentproc --channel=4956 -childID 3 -isForBrowser -prefsHandle 5576 -prefMapHandle 4580 -prefsLen 35459 -prefMapSize 265716 -jsInitHandle 1488 -jsInitLen 234780 -parentBuildID 20240908033729 -win32kLockedDown -appDir "C:\Program Files\Ablaze Floorp\browser" - {b611957d-b40a-4f04-aa4e-64f9696747f4} 27148  tab
Command line "floorp.exe" -contentproc --channel=4956 -childID 3 -isForBrowser -prefsHandle 5576 -prefMapHandle 4580 -prefsLen 35459 -prefMapSize 265716 -jsInitHandle 1488 -jsInitLen 234780 -parentBuildID 20240908033729 -win32kLockedDown -appDir "C:\Program Files\Ablaze Floorp\browser" - {b611957d-b40a-4f04-aa4e-64f9696747f4} 27148  tab
Process id 5444
Execution details Token elevation: Limited, Integrity level: Low
Image file path C:\Program Files\Ablaze Floorp\floorp.exe
Image file SHA1 7d486d3c8ce8e887486df6efae6a82fa75ed15fd
Image file creation time Sep 9, 2024 9:57:46 AM
Image file last modification time Sep 10, 2024 9:51:53 AM
PE metadata floorp.exe
User AzureAD\AXXXnXXXXXXX
9/10/2024 2:01:05 PM 
 [5348] floorp.exe -contentproc --channel=5808 -childID 4 -isForBrowser -prefsHandle 5528 -prefMapHandle 3476 -prefsLen 35459 -prefMapSize 265716 -jsInitHandle 1488 -jsInitLen 234780 -parentBuildID 20240908033729 -win32kLockedDown -appDir "C:\Program Files\Ablaze Floorp\browser" - {9e8515bf-8453-4b99-8f48-f83ce0a7dd75} 27148  tab
Command line "floorp.exe" -contentproc --channel=5808 -childID 4 -isForBrowser -prefsHandle 5528 -prefMapHandle 3476 -prefsLen 35459 -prefMapSize 265716 -jsInitHandle 1488 -jsInitLen 234780 -parentBuildID 20240908033729 -win32kLockedDown -appDir "C:\Program Files\Ablaze Floorp\browser" - {9e8515bf-8453-4b99-8f48-f83ce0a7dd75} 27148  tab
Process id 5348
Execution details Token elevation: Limited, Integrity level: Low
Image file path C:\Program Files\Ablaze Floorp\floorp.exe
Image file SHA1 7d486d3c8ce8e887486df6efae6a82fa75ed15fd
Image file creation time Sep 9, 2024 9:57:46 AM
Image file last modification time Sep 10, 2024 9:51:53 AM
PE metadata floorp.exe
User AzureAD\AXXXnXXXXXXX
9/10/2024 2:01:05 PM 
 [18180] floorp.exe -contentproc --channel=5888 -childID 5 -isForBrowser -prefsHandle 5876 -prefMapHandle 5872 -prefsLen 35459 -prefMapSize 265716 -jsInitHandle 1488 -jsInitLen 234780 -parentBuildID 20240908033729 -win32kLockedDown -appDir "C:\Program Files\Ablaze Floorp\browser" - {5853d824-cdef-47e1-bede-cc2840e64a02} 27148  tab
Command line "floorp.exe" -contentproc --channel=5888 -childID 5 -isForBrowser -prefsHandle 5876 -prefMapHandle 5872 -prefsLen 35459 -prefMapSize 265716 -jsInitHandle 1488 -jsInitLen 234780 -parentBuildID 20240908033729 -win32kLockedDown -appDir "C:\Program Files\Ablaze Floorp\browser" - {5853d824-cdef-47e1-bede-cc2840e64a02} 27148  tab
Process id 18180
Execution details Token elevation: Limited, Integrity level: Low
Image file path C:\Program Files\Ablaze Floorp\floorp.exe
Image file SHA1 7d486d3c8ce8e887486df6efae6a82fa75ed15fd
Image file creation time Sep 9, 2024 9:57:46 AM
Image file last modification time Sep 10, 2024 9:51:53 AM
PE metadata floorp.exe
User AzureAD\AXXXnXXXXXXX
9/10/2024 2:01:06 PM 
 [27416] 1Password-BrowserSupport.exe C:\Users\AXXXnXXXXXXX\AppData\Local\1Password\app\8\browser_support_manifest_firefox.json {d634138d-c276-4fc8-924b-40a0ea21d284}
Command line 1Password-BrowserSupport.exe C:\Users\AXXXnXXXXXXX\AppData\Local\1Password\app\8\browser_support_manifest_firefox.json {d634138d-c276-4fc8-924b-40a0ea21d284}
Process id 27416
Execution details Token elevation: Limited, Integrity level: Medium
Image file path C:\Users\AXXXnXXXXXXX\AppData\Local\1Password\app\8\1Password-BrowserSupport.exe
Image file SHA1 8bb84d1b24bbcc6629f44be328a71f70aefe2fcb
Image file creation time Sep 9, 2024 8:39:06 AM
Image file last modification time Sep 9, 2024 8:39:06 AM
PE metadata 1Password-BrowserSupport.exe
User AzureAD\AXXXnXXXXXXX
9/10/2024 2:01:44 PM 
 [19748] 1Password-BrowserSupport.exe C:\Users\AXXXnXXXXXXX\AppData\Local\1Password\app\8\browser_support_manifest_firefox.json {d634138d-c276-4fc8-924b-40a0ea21d284}
Command line 1Password-BrowserSupport.exe C:\Users\AXXXnXXXXXXX\AppData\Local\1Password\app\8\browser_support_manifest_firefox.json {d634138d-c276-4fc8-924b-40a0ea21d284}
Process id 19748
Execution details Token elevation: Limited, Integrity level: Medium
Image file path C:\Users\AXXXnXXXXXXX\AppData\Local\1Password\app\8\1Password-BrowserSupport.exe
Image file SHA1 8bb84d1b24bbcc6629f44be328a71f70aefe2fcb
Image file creation time Sep 9, 2024 8:39:06 AM
Image file last modification time Sep 9, 2024 8:39:06 AM
PE metadata 1Password-BrowserSupport.exe
User AzureAD\AXXXnXXXXXXX
9/10/2024 2:01:50 PM 
 [25960] floorp.exe -contentproc --channel=6472 -childID 6 -isForBrowser -prefsHandle 6500 -prefMapHandle 6496 -prefsLen 35496 -prefMapSize 265716 -jsInitHandle 1488 -jsInitLen 234780 -parentBuildID 20240908033729 -win32kLockedDown -appDir "C:\Program Files\Ablaze Floorp\browser" - {067e3e03-fc0f-4547-9f3a-4a219191d64e} 27148  tab
Command line "floorp.exe" -contentproc --channel=6472 -childID 6 -isForBrowser -prefsHandle 6500 -prefMapHandle 6496 -prefsLen 35496 -prefMapSize 265716 -jsInitHandle 1488 -jsInitLen 234780 -parentBuildID 20240908033729 -win32kLockedDown -appDir "C:\Program Files\Ablaze Floorp\browser" - {067e3e03-fc0f-4547-9f3a-4a219191d64e} 27148  tab
Process id 25960
Execution details Token elevation: Limited, Integrity level: Low
Image file path C:\Program Files\Ablaze Floorp\floorp.exe
Image file SHA1 7d486d3c8ce8e887486df6efae6a82fa75ed15fd
Image file creation time Sep 9, 2024 9:57:46 AM
Image file last modification time Sep 10, 2024 9:51:53 AM
PE metadata floorp.exe
User AzureAD\AXXXnXXXXXXX
9/10/2024 2:01:51 PM 
 [14516] 1Password-BrowserSupport.exe C:\Users\AXXXnXXXXXXX\AppData\Local\1Password\app\8\browser_support_manifest_firefox.json {d634138d-c276-4fc8-924b-40a0ea21d284}
Command line 1Password-BrowserSupport.exe C:\Users\AXXXnXXXXXXX\AppData\Local\1Password\app\8\browser_support_manifest_firefox.json {d634138d-c276-4fc8-924b-40a0ea21d284}
Process id 14516
Execution details Token elevation: Limited, Integrity level: Medium
Image file path C:\Users\AXXXnXXXXXXX\AppData\Local\1Password\app\8\1Password-BrowserSupport.exe
Image file SHA1 8bb84d1b24bbcc6629f44be328a71f70aefe2fcb
Image file creation time Sep 9, 2024 8:39:06 AM
Image file last modification time Sep 9, 2024 8:39:06 AM
PE metadata 1Password-BrowserSupport.exe
User AzureAD\AXXXnXXXXXXX
9/10/2024 2:03:00 PM 
 [26596] 1Password-BrowserSupport.exe C:\Users\AXXXnXXXXXXX\AppData\Local\1Password\app\8\browser_support_manifest_firefox.json {d634138d-c276-4fc8-924b-40a0ea21d284}
Command line 1Password-BrowserSupport.exe C:\Users\AXXXnXXXXXXX\AppData\Local\1Password\app\8\browser_support_manifest_firefox.json {d634138d-c276-4fc8-924b-40a0ea21d284}
Process id 26596
Execution details Token elevation: Limited, Integrity level: Medium
Image file path C:\Users\AXXXnXXXXXXX\AppData\Local\1Password\app\8\1Password-BrowserSupport.exe
Image file SHA1 8bb84d1b24bbcc6629f44be328a71f70aefe2fcb
Image file creation time Sep 9, 2024 8:39:06 AM
Image file last modification time Sep 9, 2024 8:39:06 AM
PE metadata 1Password-BrowserSupport.exe
User AzureAD\AXXXnXXXXXXX
9/10/2024 2:03:03 PM 
 [18584] 1Password-BrowserSupport.exe C:\Users\AXXXnXXXXXXX\AppData\Local\1Password\app\8\browser_support_manifest_firefox.json {d634138d-c276-4fc8-924b-40a0ea21d284}
Command line 1Password-BrowserSupport.exe C:\Users\AXXXnXXXXXXX\AppData\Local\1Password\app\8\browser_support_manifest_firefox.json {d634138d-c276-4fc8-924b-40a0ea21d284}
Process id 18584
Execution details Token elevation: Limited, Integrity level: Medium
Image file path C:\Users\AXXXnXXXXXXX\AppData\Local\1Password\app\8\1Password-BrowserSupport.exe
Image file SHA1 8bb84d1b24bbcc6629f44be328a71f70aefe2fcb
Image file creation time Sep 9, 2024 8:39:06 AM
Image file last modification time Sep 9, 2024 8:39:06 AM
PE metadata 1Password-BrowserSupport.exe
User AzureAD\AXXXnXXXXXXX
9/10/2024 2:03:04 PM 
 [11720] 1Password-BrowserSupport.exe C:\Users\AXXXnXXXXXXX\AppData\Local\1Password\app\8\browser_support_manifest_firefox.json {d634138d-c276-4fc8-924b-40a0ea21d284}
Command line 1Password-BrowserSupport.exe C:\Users\AXXXnXXXXXXX\AppData\Local\1Password\app\8\browser_support_manifest_firefox.json {d634138d-c276-4fc8-924b-40a0ea21d284}
Process id 11720
Execution details Token elevation: Limited, Integrity level: Medium
Image file path C:\Users\AXXXnXXXXXXX\AppData\Local\1Password\app\8\1Password-BrowserSupport.exe
Image file SHA1 8bb84d1b24bbcc6629f44be328a71f70aefe2fcb
Image file creation time Sep 9, 2024 8:39:06 AM
Image file last modification time Sep 9, 2024 8:39:06 AM
PE metadata 1Password-BrowserSupport.exe
User AzureAD\AXXXnXXXXXXX
9/10/2024 2:03:04 PM 
 [24720] floorp.exe -contentproc --channel=8284 -childID 7 -isForBrowser -prefsHandle 8376 -prefMapHandle 8380 -prefsLen 35496 -prefMapSize 265716 -jsInitHandle 1488 -jsInitLen 234780 -parentBuildID 20240908033729 -win32kLockedDown -appDir "C:\Program Files\Ablaze Floorp\browser" - {8abcaf2f-e3ab-408e-9ba1-86e0c2f25a63} 27148  tab
Command line "floorp.exe" -contentproc --channel=8284 -childID 7 -isForBrowser -prefsHandle 8376 -prefMapHandle 8380 -prefsLen 35496 -prefMapSize 265716 -jsInitHandle 1488 -jsInitLen 234780 -parentBuildID 20240908033729 -win32kLockedDown -appDir "C:\Program Files\Ablaze Floorp\browser" - {8abcaf2f-e3ab-408e-9ba1-86e0c2f25a63} 27148  tab
Process id 24720
Execution details Token elevation: Limited, Integrity level: Low
Image file path C:\Program Files\Ablaze Floorp\floorp.exe
Image file SHA1 7d486d3c8ce8e887486df6efae6a82fa75ed15fd
Image file creation time Sep 9, 2024 9:57:46 AM
Image file last modification time Sep 10, 2024 9:51:53 AM
PE metadata floorp.exe
User AzureAD\AXXXnXXXXXXX
9/10/2024 2:03:04 PM 
 [12152] floorp.exe -contentproc --channel=9128 -childID 8 -isForBrowser -prefsHandle 9144 -prefMapHandle 9176 -prefsLen 35496 -prefMapSize 265716 -jsInitHandle 1488 -jsInitLen 234780 -parentBuildID 20240908033729 -win32kLockedDown -appDir "C:\Program Files\Ablaze Floorp\browser" - {82d2ec5a-e465-4d6a-ba9e-47c5ebd8b087} 27148  tab
Command line "floorp.exe" -contentproc --channel=9128 -childID 8 -isForBrowser -prefsHandle 9144 -prefMapHandle 9176 -prefsLen 35496 -prefMapSize 265716 -jsInitHandle 1488 -jsInitLen 234780 -parentBuildID 20240908033729 -win32kLockedDown -appDir "C:\Program Files\Ablaze Floorp\browser" - {82d2ec5a-e465-4d6a-ba9e-47c5ebd8b087} 27148  tab
Process id 12152
Execution details Token elevation: Limited, Integrity level: Low
Image file path C:\Program Files\Ablaze Floorp\floorp.exe
Image file SHA1 7d486d3c8ce8e887486df6efae6a82fa75ed15fd
Image file creation time Sep 9, 2024 9:57:46 AM
Image file last modification time Sep 10, 2024 9:51:53 AM
PE metadata floorp.exe
User AzureAD\AXXXnXXXXXXX
9/10/2024 2:03:04 PM 
 [7296] floorp.exe -contentproc --channel=9652 -childID 9 -isForBrowser -prefsHandle 9524 -prefMapHandle 9532 -prefsLen 35496 -prefMapSize 265716 -jsInitHandle 1488 -jsInitLen 234780 -parentBuildID 20240908033729 -win32kLockedDown -appDir "C:\Program Files\Ablaze Floorp\browser" - {88b98c3f-00ef-4122-80b6-679591a0e731} 27148  tab
Command line "floorp.exe" -contentproc --channel=9652 -childID 9 -isForBrowser -prefsHandle 9524 -prefMapHandle 9532 -prefsLen 35496 -prefMapSize 265716 -jsInitHandle 1488 -jsInitLen 234780 -parentBuildID 20240908033729 -win32kLockedDown -appDir "C:\Program Files\Ablaze Floorp\browser" - {88b98c3f-00ef-4122-80b6-679591a0e731} 27148  tab
Process id 7296
Execution details Token elevation: Limited, Integrity level: Low
Image file path C:\Program Files\Ablaze Floorp\floorp.exe
Image file SHA1 7d486d3c8ce8e887486df6efae6a82fa75ed15fd
Image file creation time Sep 9, 2024 9:57:46 AM
Image file last modification time Sep 10, 2024 9:51:53 AM
PE metadata floorp.exe
User AzureAD\AXXXnXXXXXXX
9/10/2024 2:03:20 PM 
 [11364] 1Password-BrowserSupport.exe C:\Users\AXXXnXXXXXXX\AppData\Local\1Password\app\8\browser_support_manifest_firefox.json {d634138d-c276-4fc8-924b-40a0ea21d284}
Command line 1Password-BrowserSupport.exe C:\Users\AXXXnXXXXXXX\AppData\Local\1Password\app\8\browser_support_manifest_firefox.json {d634138d-c276-4fc8-924b-40a0ea21d284}
Process id 11364
Execution details Token elevation: Limited, Integrity level: Medium
Image file path C:\Users\AXXXnXXXXXXX\AppData\Local\1Password\app\8\1Password-BrowserSupport.exe
Image file SHA1 8bb84d1b24bbcc6629f44be328a71f70aefe2fcb
Image file creation time Sep 9, 2024 8:39:06 AM
Image file last modification time Sep 9, 2024 8:39:06 AM
PE metadata 1Password-BrowserSupport.exe
User AzureAD\AXXXnXXXXXXX
9/10/2024 2:03:20 PM 
 [10496] 1Password-BrowserSupport.exe C:\Users\AXXXnXXXXXXX\AppData\Local\1Password\app\8\browser_support_manifest_firefox.json {d634138d-c276-4fc8-924b-40a0ea21d284}
Command line 1Password-BrowserSupport.exe C:\Users\AXXXnXXXXXXX\AppData\Local\1Password\app\8\browser_support_manifest_firefox.json {d634138d-c276-4fc8-924b-40a0ea21d284}
Process id 10496
Execution details Token elevation: Limited, Integrity level: Medium
Image file path C:\Users\AXXXnXXXXXXX\AppData\Local\1Password\app\8\1Password-BrowserSupport.exe
Image file SHA1 8bb84d1b24bbcc6629f44be328a71f70aefe2fcb
Image file creation time Sep 9, 2024 8:39:06 AM
Image file last modification time Sep 9, 2024 8:39:06 AM
PE metadata 1Password-BrowserSupport.exe
User AzureAD\AXXXnXXXXXXX
9/10/2024 2:03:20 PM 
 [18712] floorp.exe -contentproc --channel=10844 -childID 10 -isForBrowser -prefsHandle 1400 -prefMapHandle 10968 -prefsLen 35496 -prefMapSize 265716 -jsInitHandle 1488 -jsInitLen 234780 -parentBuildID 20240908033729 -win32kLockedDown -appDir "C:\Program Files\Ablaze Floorp\browser" - {730fb2db-7c0e-4c8a-97be-76feeac16ac9} 27148  tab
Command line "floorp.exe" -contentproc --channel=10844 -childID 10 -isForBrowser -prefsHandle 1400 -prefMapHandle 10968 -prefsLen 35496 -prefMapSize 265716 -jsInitHandle 1488 -jsInitLen 234780 -parentBuildID 20240908033729 -win32kLockedDown -appDir "C:\Program Files\Ablaze Floorp\browser" - {730fb2db-7c0e-4c8a-97be-76feeac16ac9} 27148  tab
Process id 18712
Execution details Token elevation: Limited, Integrity level: Low
Image file path C:\Program Files\Ablaze Floorp\floorp.exe
Image file SHA1 7d486d3c8ce8e887486df6efae6a82fa75ed15fd
Image file creation time Sep 9, 2024 9:57:46 AM
Image file last modification time Sep 10, 2024 9:51:53 AM
PE metadata floorp.exe
User AzureAD\AXXXnXXXXXXX
9/10/2024 2:03:20 PM 
 [23820] floorp.exe -contentproc --channel=11432 -childID 11 -isForBrowser -prefsHandle 11676 -prefMapHandle 11508 -prefsLen 35496 -prefMapSize 265716 -jsInitHandle 1488 -jsInitLen 234780 -parentBuildID 20240908033729 -win32kLockedDown -appDir "C:\Program Files\Ablaze Floorp\browser" - {67fec50c-2ce8-4694-964a-750d717937d0} 27148  tab
Command line "floorp.exe" -contentproc --channel=11432 -childID 11 -isForBrowser -prefsHandle 11676 -prefMapHandle 11508 -prefsLen 35496 -prefMapSize 265716 -jsInitHandle 1488 -jsInitLen 234780 -parentBuildID 20240908033729 -win32kLockedDown -appDir "C:\Program Files\Ablaze Floorp\browser" - {67fec50c-2ce8-4694-964a-750d717937d0} 27148  tab
Process id 23820
Execution details Token elevation: Limited, Integrity level: Low
Image file path C:\Program Files\Ablaze Floorp\floorp.exe
Image file SHA1 7d486d3c8ce8e887486df6efae6a82fa75ed15fd
Image file creation time Sep 9, 2024 9:57:46 AM
Image file last modification time Sep 10, 2024 9:51:53 AM
PE metadata floorp.exe
User AzureAD\AXXXnXXXXXXX
9/10/2024 2:03:22 PM 
 [21076] 1Password-BrowserSupport.exe C:\Users\AXXXnXXXXXXX\AppData\Local\1Password\app\8\browser_support_manifest_firefox.json {d634138d-c276-4fc8-924b-40a0ea21d284}
Command line 1Password-BrowserSupport.exe C:\Users\AXXXnXXXXXXX\AppData\Local\1Password\app\8\browser_support_manifest_firefox.json {d634138d-c276-4fc8-924b-40a0ea21d284}
Process id 21076
Execution details Token elevation: Limited, Integrity level: Medium
Image file path C:\Users\AXXXnXXXXXXX\AppData\Local\1Password\app\8\1Password-BrowserSupport.exe
Image file SHA1 8bb84d1b24bbcc6629f44be328a71f70aefe2fcb
Image file creation time Sep 9, 2024 8:39:06 AM
Image file last modification time Sep 9, 2024 8:39:06 AM
PE metadata 1Password-BrowserSupport.exe
User AzureAD\AXXXnXXXXXXX
9/10/2024 2:03:24 PM 
 [4024] floorp.exe -contentproc --channel=11048 -childID 12 -isForBrowser -prefsHandle 12536 -prefMapHandle 12540 -prefsLen 35496 -prefMapSize 265716 -jsInitHandle 1488 -jsInitLen 234780 -parentBuildID 20240908033729 -win32kLockedDown -appDir "C:\Program Files\Ablaze Floorp\browser" - {b6c207c0-f76d-4561-95dc-3361094ee363} 27148  tab
Command line "floorp.exe" -contentproc --channel=11048 -childID 12 -isForBrowser -prefsHandle 12536 -prefMapHandle 12540 -prefsLen 35496 -prefMapSize 265716 -jsInitHandle 1488 -jsInitLen 234780 -parentBuildID 20240908033729 -win32kLockedDown -appDir "C:\Program Files\Ablaze Floorp\browser" - {b6c207c0-f76d-4561-95dc-3361094ee363} 27148  tab
Process id 4024
Execution details Token elevation: Limited, Integrity level: Low
Image file path C:\Program Files\Ablaze Floorp\floorp.exe
Image file SHA1 7d486d3c8ce8e887486df6efae6a82fa75ed15fd
Image file creation time Sep 9, 2024 9:57:46 AM
Image file last modification time Sep 10, 2024 9:51:53 AM
PE metadata floorp.exe
User AzureAD\AXXXnXXXXXXX
9/10/2024 2:03:24 PM 
 [12124] floorp.exe -contentproc --channel=10936 -childID 13 -isForBrowser -prefsHandle 10832 -prefMapHandle 11384 -prefsLen 35496 -prefMapSize 265716 -jsInitHandle 1488 -jsInitLen 234780 -parentBuildID 20240908033729 -win32kLockedDown -appDir "C:\Program Files\Ablaze Floorp\browser" - {35486b9e-4081-4fd8-b51d-45153d864d33} 27148  tab
Command line "floorp.exe" -contentproc --channel=10936 -childID 13 -isForBrowser -prefsHandle 10832 -prefMapHandle 11384 -prefsLen 35496 -prefMapSize 265716 -jsInitHandle 1488 -jsInitLen 234780 -parentBuildID 20240908033729 -win32kLockedDown -appDir "C:\Program Files\Ablaze Floorp\browser" - {35486b9e-4081-4fd8-b51d-45153d864d33} 27148  tab
Process id 12124
Execution details Token elevation: Limited, Integrity level: Low
Image file path C:\Program Files\Ablaze Floorp\floorp.exe
Image file SHA1 7d486d3c8ce8e887486df6efae6a82fa75ed15fd
Image file creation time Sep 9, 2024 9:57:46 AM
Image file last modification time Sep 10, 2024 9:51:53 AM
PE metadata floorp.exe
User AzureAD\AXXXnXXXXXXX
9/10/2024 2:03:25 PM 
 [19624] 1Password-BrowserSupport.exe C:\Users\AXXXnXXXXXXX\AppData\Local\1Password\app\8\browser_support_manifest_firefox.json {d634138d-c276-4fc8-924b-40a0ea21d284}
Command line 1Password-BrowserSupport.exe C:\Users\AXXXnXXXXXXX\AppData\Local\1Password\app\8\browser_support_manifest_firefox.json {d634138d-c276-4fc8-924b-40a0ea21d284}
Process id 19624
Execution details Token elevation: Limited, Integrity level: Medium
Image file path C:\Users\AXXXnXXXXXXX\AppData\Local\1Password\app\8\1Password-BrowserSupport.exe
Image file SHA1 8bb84d1b24bbcc6629f44be328a71f70aefe2fcb
Image file creation time Sep 9, 2024 8:39:06 AM
Image file last modification time Sep 9, 2024 8:39:06 AM
PE metadata 1Password-BrowserSupport.exe
User AzureAD\AXXXnXXXXXXX
9/10/2024 2:03:25 PM 
 [23380] 1Password-BrowserSupport.exe C:\Users\AXXXnXXXXXXX\AppData\Local\1Password\app\8\browser_support_manifest_firefox.json {d634138d-c276-4fc8-924b-40a0ea21d284}
Command line 1Password-BrowserSupport.exe C:\Users\AXXXnXXXXXXX\AppData\Local\1Password\app\8\browser_support_manifest_firefox.json {d634138d-c276-4fc8-924b-40a0ea21d284}
Process id 23380
Execution details Token elevation: Limited, Integrity level: Medium
Image file path C:\Users\AXXXnXXXXXXX\AppData\Local\1Password\app\8\1Password-BrowserSupport.exe
Image file SHA1 8bb84d1b24bbcc6629f44be328a71f70aefe2fcb
Image file creation time Sep 9, 2024 8:39:06 AM
Image file last modification time Sep 9, 2024 8:39:06 AM
PE metadata 1Password-BrowserSupport.exe
User AzureAD\AXXXnXXXXXXX
9/10/2024 2:03:36 PM 
 [25156] 1Password-BrowserSupport.exe C:\Users\AXXXnXXXXXXX\AppData\Local\1Password\app\8\browser_support_manifest_firefox.json {d634138d-c276-4fc8-924b-40a0ea21d284}
Command line 1Password-BrowserSupport.exe C:\Users\AXXXnXXXXXXX\AppData\Local\1Password\app\8\browser_support_manifest_firefox.json {d634138d-c276-4fc8-924b-40a0ea21d284}
Process id 25156
Execution details Token elevation: Limited, Integrity level: Medium
Image file path C:\Users\AXXXnXXXXXXX\AppData\Local\1Password\app\8\1Password-BrowserSupport.exe
Image file SHA1 8bb84d1b24bbcc6629f44be328a71f70aefe2fcb
Image file creation time Sep 9, 2024 8:39:06 AM
Image file last modification time Sep 9, 2024 8:39:06 AM
PE metadata 1Password-BrowserSupport.exe
User AzureAD\AXXXnXXXXXXX
9/10/2024 2:03:37 PM 
 [4180] 1Password-BrowserSupport.exe C:\Users\AXXXnXXXXXXX\AppData\Local\1Password\app\8\browser_support_manifest_firefox.json {d634138d-c276-4fc8-924b-40a0ea21d284}
Command line 1Password-BrowserSupport.exe C:\Users\AXXXnXXXXXXX\AppData\Local\1Password\app\8\browser_support_manifest_firefox.json {d634138d-c276-4fc8-924b-40a0ea21d284}
Process id 4180
Execution details Token elevation: Limited, Integrity level: Medium
Image file path C:\Users\AXXXnXXXXXXX\AppData\Local\1Password\app\8\1Password-BrowserSupport.exe
Image file SHA1 8bb84d1b24bbcc6629f44be328a71f70aefe2fcb
Image file creation time Sep 9, 2024 8:39:06 AM
Image file last modification time Sep 9, 2024 8:39:06 AM
PE metadata 1Password-BrowserSupport.exe
User AzureAD\AXXXnXXXXXXX
9/10/2024 2:03:37 PM 
 [19504] floorp.exe -contentproc --channel=13744 -childID 14 -isForBrowser -prefsHandle 13872 -prefMapHandle 13932 -prefsLen 35496 -prefMapSize 265716 -jsInitHandle 1488 -jsInitLen 234780 -parentBuildID 20240908033729 -win32kLockedDown -appDir "C:\Program Files\Ablaze Floorp\browser" - {d5a223f9-7beb-413c-a8d7-dd1aeb9c7805} 27148  tab
Command line "floorp.exe" -contentproc --channel=13744 -childID 14 -isForBrowser -prefsHandle 13872 -prefMapHandle 13932 -prefsLen 35496 -prefMapSize 265716 -jsInitHandle 1488 -jsInitLen 234780 -parentBuildID 20240908033729 -win32kLockedDown -appDir "C:\Program Files\Ablaze Floorp\browser" - {d5a223f9-7beb-413c-a8d7-dd1aeb9c7805} 27148  tab
Process id 19504
Execution details Token elevation: Limited, Integrity level: Low
Image file path C:\Program Files\Ablaze Floorp\floorp.exe
Image file SHA1 7d486d3c8ce8e887486df6efae6a82fa75ed15fd
Image file creation time Sep 9, 2024 9:57:46 AM
Image file last modification time Sep 10, 2024 9:51:53 AM
PE metadata floorp.exe
User AzureAD\AXXXnXXXXXXX
9/10/2024 2:03:37 PM 
 [27580] floorp.exe -contentproc --channel=12260 -childID 15 -isForBrowser -prefsHandle 12268 -prefMapHandle 12276 -prefsLen 35496 -prefMapSize 265716 -jsInitHandle 1488 -jsInitLen 234780 -parentBuildID 20240908033729 -win32kLockedDown -appDir "C:\Program Files\Ablaze Floorp\browser" - {be95ad16-02d9-4c44-9c93-75bf86b594de} 27148  tab
Command line "floorp.exe" -contentproc --channel=12260 -childID 15 -isForBrowser -prefsHandle 12268 -prefMapHandle 12276 -prefsLen 35496 -prefMapSize 265716 -jsInitHandle 1488 -jsInitLen 234780 -parentBuildID 20240908033729 -win32kLockedDown -appDir "C:\Program Files\Ablaze Floorp\browser" - {be95ad16-02d9-4c44-9c93-75bf86b594de} 27148  tab
Process id 27580
Execution details Token elevation: Limited, Integrity level: Low
Image file path C:\Program Files\Ablaze Floorp\floorp.exe
Image file SHA1 7d486d3c8ce8e887486df6efae6a82fa75ed15fd
Image file creation time Sep 9, 2024 9:57:46 AM
Image file last modification time Sep 10, 2024 9:51:53 AM
PE metadata floorp.exe
User AzureAD\AXXXnXXXXXXX
9/10/2024 2:03:42 PM 
 [25912] 1Password-BrowserSupport.exe C:\Users\AXXXnXXXXXXX\AppData\Local\1Password\app\8\browser_support_manifest_firefox.json {d634138d-c276-4fc8-924b-40a0ea21d284}
Command line 1Password-BrowserSupport.exe C:\Users\AXXXnXXXXXXX\AppData\Local\1Password\app\8\browser_support_manifest_firefox.json {d634138d-c276-4fc8-924b-40a0ea21d284}
Process id 25912
Execution details Token elevation: Limited, Integrity level: Medium
Image file path C:\Users\AXXXnXXXXXXX\AppData\Local\1Password\app\8\1Password-BrowserSupport.exe
Image file SHA1 8bb84d1b24bbcc6629f44be328a71f70aefe2fcb
Image file creation time Sep 9, 2024 8:39:06 AM
Image file last modification time Sep 9, 2024 8:39:06 AM
PE metadata 1Password-BrowserSupport.exe
User AzureAD\AXXXnXXXXXXX
9/10/2024 2:03:45 PM 
 [25868] 1Password-BrowserSupport.exe C:\Users\AXXXnXXXXXXX\AppData\Local\1Password\app\8\browser_support_manifest_firefox.json {d634138d-c276-4fc8-924b-40a0ea21d284}
Command line 1Password-BrowserSupport.exe C:\Users\AXXXnXXXXXXX\AppData\Local\1Password\app\8\browser_support_manifest_firefox.json {d634138d-c276-4fc8-924b-40a0ea21d284}
Process id 25868
Execution details Token elevation: Limited, Integrity level: Medium
Image file path C:\Users\AXXXnXXXXXXX\AppData\Local\1Password\app\8\1Password-BrowserSupport.exe
Image file SHA1 8bb84d1b24bbcc6629f44be328a71f70aefe2fcb
Image file creation time Sep 9, 2024 8:39:06 AM
Image file last modification time Sep 9, 2024 8:39:06 AM
PE metadata 1Password-BrowserSupport.exe
User AzureAD\AXXXnXXXXXXX
9/10/2024 2:03:46 PM 
 [11448] 1Password-BrowserSupport.exe C:\Users\AXXXnXXXXXXX\AppData\Local\1Password\app\8\browser_support_manifest_firefox.json {d634138d-c276-4fc8-924b-40a0ea21d284}
Command line 1Password-BrowserSupport.exe C:\Users\AXXXnXXXXXXX\AppData\Local\1Password\app\8\browser_support_manifest_firefox.json {d634138d-c276-4fc8-924b-40a0ea21d284}
Process id 11448
Execution details Token elevation: Limited, Integrity level: Medium
Image file path C:\Users\AXXXnXXXXXXX\AppData\Local\1Password\app\8\1Password-BrowserSupport.exe
Image file SHA1 8bb84d1b24bbcc6629f44be328a71f70aefe2fcb
Image file creation time Sep 9, 2024 8:39:06 AM
Image file last modification time Sep 9, 2024 8:39:06 AM
PE metadata 1Password-BrowserSupport.exe
User AzureAD\AXXXnXXXXXXX
9/10/2024 2:03:47 PM 
 [23416] 1Password-BrowserSupport.exe C:\Users\AXXXnXXXXXXX\AppData\Local\1Password\app\8\browser_support_manifest_firefox.json {d634138d-c276-4fc8-924b-40a0ea21d284}
Command line 1Password-BrowserSupport.exe C:\Users\AXXXnXXXXXXX\AppData\Local\1Password\app\8\browser_support_manifest_firefox.json {d634138d-c276-4fc8-924b-40a0ea21d284}
Process id 23416
Execution details Token elevation: Limited, Integrity level: Medium
Image file path C:\Users\AXXXnXXXXXXX\AppData\Local\1Password\app\8\1Password-BrowserSupport.exe
Image file SHA1 8bb84d1b24bbcc6629f44be328a71f70aefe2fcb
Image file creation time Sep 9, 2024 8:39:06 AM
Image file last modification time Sep 9, 2024 8:39:06 AM
PE metadata 1Password-BrowserSupport.exe
User AzureAD\AXXXnXXXXXXX
9/10/2024 2:03:48 PM 
 [4832] floorp.exe -contentproc --channel=11076 -childID 16 -isForBrowser -prefsHandle 8920 -prefMapHandle 8904 -prefsLen 35496 -prefMapSize 265716 -jsInitHandle 1488 -jsInitLen 234780 -parentBuildID 20240908033729 -win32kLockedDown -appDir "C:\Program Files\Ablaze Floorp\browser" - {0f8f8dca-5f3c-4013-a6f2-121577303ebf} 27148  tab
Command line "floorp.exe" -contentproc --channel=11076 -childID 16 -isForBrowser -prefsHandle 8920 -prefMapHandle 8904 -prefsLen 35496 -prefMapSize 265716 -jsInitHandle 1488 -jsInitLen 234780 -parentBuildID 20240908033729 -win32kLockedDown -appDir "C:\Program Files\Ablaze Floorp\browser" - {0f8f8dca-5f3c-4013-a6f2-121577303ebf} 27148  tab
Process id 4832
Execution details Token elevation: Limited, Integrity level: Low
Image file path C:\Program Files\Ablaze Floorp\floorp.exe
Image file SHA1 7d486d3c8ce8e887486df6efae6a82fa75ed15fd
Image file creation time Sep 9, 2024 9:57:46 AM
Image file last modification time Sep 10, 2024 9:51:53 AM
PE metadata floorp.exe
User AzureAD\AXXXnXXXXXXX
9/10/2024 2:04:11 PM 
 [5804] 1Password-BrowserSupport.exe C:\Users\AXXXnXXXXXXX\AppData\Local\1Password\app\8\browser_support_manifest_firefox.json {d634138d-c276-4fc8-924b-40a0ea21d284}
Command line 1Password-BrowserSupport.exe C:\Users\AXXXnXXXXXXX\AppData\Local\1Password\app\8\browser_support_manifest_firefox.json {d634138d-c276-4fc8-924b-40a0ea21d284}
Process id 5804
Execution details Token elevation: Limited, Integrity level: Medium
Image file path C:\Users\AXXXnXXXXXXX\AppData\Local\1Password\app\8\1Password-BrowserSupport.exe
Image file SHA1 8bb84d1b24bbcc6629f44be328a71f70aefe2fcb
Image file creation time Sep 9, 2024 8:39:06 AM
Image file last modification time Sep 9, 2024 8:39:06 AM
PE metadata 1Password-BrowserSupport.exe
User AzureAD\AXXXnXXXXXXX
9/10/2024 2:04:23 PM 
 [20756] 1Password-BrowserSupport.exe C:\Users\AXXXnXXXXXXX\AppData\Local\1Password\app\8\browser_support_manifest_firefox.json {d634138d-c276-4fc8-924b-40a0ea21d284}
Command line 1Password-BrowserSupport.exe C:\Users\AXXXnXXXXXXX\AppData\Local\1Password\app\8\browser_support_manifest_firefox.json {d634138d-c276-4fc8-924b-40a0ea21d284}
Process id 20756
Execution details Token elevation: Limited, Integrity level: Medium
Image file path C:\Users\AXXXnXXXXXXX\AppData\Local\1Password\app\8\1Password-BrowserSupport.exe
Image file SHA1 8bb84d1b24bbcc6629f44be328a71f70aefe2fcb
Image file creation time Sep 9, 2024 8:39:06 AM
Image file last modification time Sep 9, 2024 8:39:06 AM
PE metadata 1Password-BrowserSupport.exe
User AzureAD\AXXXnXXXXXXX
9/10/2024 2:04:25 PM 
 [19568] 1Password-BrowserSupport.exe C:\Users\AXXXnXXXXXXX\AppData\Local\1Password\app\8\browser_support_manifest_firefox.json {d634138d-c276-4fc8-924b-40a0ea21d284}
Command line 1Password-BrowserSupport.exe C:\Users\AXXXnXXXXXXX\AppData\Local\1Password\app\8\browser_support_manifest_firefox.json {d634138d-c276-4fc8-924b-40a0ea21d284}
Process id 19568
Execution details Token elevation: Limited, Integrity level: Medium
Image file path C:\Users\AXXXnXXXXXXX\AppData\Local\1Password\app\8\1Password-BrowserSupport.exe
Image file SHA1 8bb84d1b24bbcc6629f44be328a71f70aefe2fcb
Image file creation time Sep 9, 2024 8:39:06 AM
Image file last modification time Sep 9, 2024 8:39:06 AM
PE metadata 1Password-BrowserSupport.exe
User AzureAD\AXXXnXXXXXXX
9/10/2024 2:04:26 PM 
 [26164] floorp.exe -contentproc --channel=14488 -childID 17 -isForBrowser -prefsHandle 8908 -prefMapHandle 9328 -prefsLen 35496 -prefMapSize 265716 -jsInitHandle 1488 -jsInitLen 234780 -parentBuildID 20240908033729 -win32kLockedDown -appDir "C:\Program Files\Ablaze Floorp\browser" - {f7d87dd3-cb8a-420d-b5a0-70399fa31bab} 27148  tab
Command line "floorp.exe" -contentproc --channel=14488 -childID 17 -isForBrowser -prefsHandle 8908 -prefMapHandle 9328 -prefsLen 35496 -prefMapSize 265716 -jsInitHandle 1488 -jsInitLen 234780 -parentBuildID 20240908033729 -win32kLockedDown -appDir "C:\Program Files\Ablaze Floorp\browser" - {f7d87dd3-cb8a-420d-b5a0-70399fa31bab} 27148  tab
Process id 26164
Execution details Token elevation: Limited, Integrity level: Low
Image file path C:\Program Files\Ablaze Floorp\floorp.exe
Image file SHA1 7d486d3c8ce8e887486df6efae6a82fa75ed15fd
Image file creation time Sep 9, 2024 9:57:46 AM
Image file last modification time Sep 10, 2024 9:51:53 AM
PE metadata floorp.exe
User AzureAD\AXXXnXXXXXXX
9/10/2024 2:05:27 PM 
 [22944] 1Password-BrowserSupport.exe C:\Users\AXXXnXXXXXXX\AppData\Local\1Password\app\8\browser_support_manifest_firefox.json {d634138d-c276-4fc8-924b-40a0ea21d284}
Command line 1Password-BrowserSupport.exe C:\Users\AXXXnXXXXXXX\AppData\Local\1Password\app\8\browser_support_manifest_firefox.json {d634138d-c276-4fc8-924b-40a0ea21d284}
Process id 22944
Execution details Token elevation: Limited, Integrity level: Medium
Image file path C:\Users\AXXXnXXXXXXX\AppData\Local\1Password\app\8\1Password-BrowserSupport.exe
Image file SHA1 8bb84d1b24bbcc6629f44be328a71f70aefe2fcb
Image file creation time Sep 9, 2024 8:39:06 AM
Image file last modification time Sep 9, 2024 8:39:06 AM
PE metadata 1Password-BrowserSupport.exe
User AzureAD\AXXXnXXXXXXX
9/10/2024 2:05:28 PM 
 [9376] floorp.exe -contentproc --channel=16824 -childID 18 -isForBrowser -prefsHandle 16816 -prefMapHandle 16808 -prefsLen 35496 -prefMapSize 265716 -jsInitHandle 1488 -jsInitLen 234780 -parentBuildID 20240908033729 -win32kLockedDown -appDir "C:\Program Files\Ablaze Floorp\browser" - {0cb22aca-0ddb-463a-89ff-004546e3d843} 27148  tab
Command line "floorp.exe" -contentproc --channel=16824 -childID 18 -isForBrowser -prefsHandle 16816 -prefMapHandle 16808 -prefsLen 35496 -prefMapSize 265716 -jsInitHandle 1488 -jsInitLen 234780 -parentBuildID 20240908033729 -win32kLockedDown -appDir "C:\Program Files\Ablaze Floorp\browser" - {0cb22aca-0ddb-463a-89ff-004546e3d843} 27148  tab
Process id 9376
Execution details Token elevation: Limited, Integrity level: Low
Image file path C:\Program Files\Ablaze Floorp\floorp.exe
Image file SHA1 7d486d3c8ce8e887486df6efae6a82fa75ed15fd
Image file creation time Sep 9, 2024 9:57:46 AM
Image file last modification time Sep 10, 2024 9:51:53 AM
PE metadata floorp.exe
User AzureAD\AXXXnXXXXXXX
9/10/2024 2:05:29 PM 
 [26676] 1Password-BrowserSupport.exe C:\Users\AXXXnXXXXXXX\AppData\Local\1Password\app\8\browser_support_manifest_firefox.json {d634138d-c276-4fc8-924b-40a0ea21d284}
Command line 1Password-BrowserSupport.exe C:\Users\AXXXnXXXXXXX\AppData\Local\1Password\app\8\browser_support_manifest_firefox.json {d634138d-c276-4fc8-924b-40a0ea21d284}
Process id 26676
Execution details Token elevation: Limited, Integrity level: Medium
Image file path C:\Users\AXXXnXXXXXXX\AppData\Local\1Password\app\8\1Password-BrowserSupport.exe
Image file SHA1 8bb84d1b24bbcc6629f44be328a71f70aefe2fcb
Image file creation time Sep 9, 2024 8:39:06 AM
Image file last modification time Sep 9, 2024 8:39:06 AM
PE metadata 1Password-BrowserSupport.exe
User AzureAD\AXXXnXXXXXXX
9/10/2024 2:05:30 PM 
 [17144] floorp.exe -contentproc --channel=18884 -childID 19 -isForBrowser -prefsHandle 18912 -prefMapHandle 18916 -prefsLen 35496 -prefMapSize 265716 -jsInitHandle 1488 -jsInitLen 234780 -parentBuildID 20240908033729 -win32kLockedDown -appDir "C:\Program Files\Ablaze Floorp\browser" - {c72a888e-f118-432e-9ea8-0a8ad9a6e7f3} 27148  tab
Command line "floorp.exe" -contentproc --channel=18884 -childID 19 -isForBrowser -prefsHandle 18912 -prefMapHandle 18916 -prefsLen 35496 -prefMapSize 265716 -jsInitHandle 1488 -jsInitLen 234780 -parentBuildID 20240908033729 -win32kLockedDown -appDir "C:\Program Files\Ablaze Floorp\browser" - {c72a888e-f118-432e-9ea8-0a8ad9a6e7f3} 27148  tab
Process id 17144
Execution details Token elevation: Limited, Integrity level: Low
Image file path C:\Program Files\Ablaze Floorp\floorp.exe
Image file SHA1 7d486d3c8ce8e887486df6efae6a82fa75ed15fd
Image file creation time Sep 9, 2024 9:57:46 AM
Image file last modification time Sep 10, 2024 9:51:53 AM
PE metadata floorp.exe
User AzureAD\AXXXnXXXXXXX
9/10/2024 2:05:30 PM 
 [17616] floorp.exe -contentproc --channel=14148 -childID 20 -isForBrowser -prefsHandle 11812 -prefMapHandle 17556 -prefsLen 35496 -prefMapSize 265716 -jsInitHandle 1488 -jsInitLen 234780 -parentBuildID 20240908033729 -win32kLockedDown -appDir "C:\Program Files\Ablaze Floorp\browser" - {14f621cd-0d8d-42ea-931a-3f2a8baa59ce} 27148  tab
Command line "floorp.exe" -contentproc --channel=14148 -childID 20 -isForBrowser -prefsHandle 11812 -prefMapHandle 17556 -prefsLen 35496 -prefMapSize 265716 -jsInitHandle 1488 -jsInitLen 234780 -parentBuildID 20240908033729 -win32kLockedDown -appDir "C:\Program Files\Ablaze Floorp\browser" - {14f621cd-0d8d-42ea-931a-3f2a8baa59ce} 27148  tab
Process id 17616
Execution details Token elevation: Limited, Integrity level: Low
Image file path C:\Program Files\Ablaze Floorp\floorp.exe
Image file SHA1 7d486d3c8ce8e887486df6efae6a82fa75ed15fd
Image file creation time Sep 9, 2024 9:57:46 AM
Image file last modification time Sep 10, 2024 9:51:53 AM
PE metadata floorp.exe
User AzureAD\AXXXnXXXXXXX
9/10/2024 2:05:30 PM 
 [9636] 1Password-BrowserSupport.exe C:\Users\AXXXnXXXXXXX\AppData\Local\1Password\app\8\browser_support_manifest_firefox.json {d634138d-c276-4fc8-924b-40a0ea21d284}
Command line 1Password-BrowserSupport.exe C:\Users\AXXXnXXXXXXX\AppData\Local\1Password\app\8\browser_support_manifest_firefox.json {d634138d-c276-4fc8-924b-40a0ea21d284}
Process id 9636
Execution details Token elevation: Limited, Integrity level: Medium
Image file path C:\Users\AXXXnXXXXXXX\AppData\Local\1Password\app\8\1Password-BrowserSupport.exe
Image file SHA1 8bb84d1b24bbcc6629f44be328a71f70aefe2fcb
Image file creation time Sep 9, 2024 8:39:06 AM
Image file last modification time Sep 9, 2024 8:39:06 AM
PE metadata 1Password-BrowserSupport.exe
User AzureAD\AXXXnXXXXXXX
9/10/2024 2:05:30 PM 
 [13696] 1Password-BrowserSupport.exe C:\Users\AXXXnXXXXXXX\AppData\Local\1Password\app\8\browser_support_manifest_firefox.json {d634138d-c276-4fc8-924b-40a0ea21d284}
Command line 1Password-BrowserSupport.exe C:\Users\AXXXnXXXXXXX\AppData\Local\1Password\app\8\browser_support_manifest_firefox.json {d634138d-c276-4fc8-924b-40a0ea21d284}
Process id 13696
Execution details Token elevation: Limited, Integrity level: Medium
Image file path C:\Users\AXXXnXXXXXXX\AppData\Local\1Password\app\8\1Password-BrowserSupport.exe
Image file SHA1 8bb84d1b24bbcc6629f44be328a71f70aefe2fcb
Image file creation time Sep 9, 2024 8:39:06 AM
Image file last modification time Sep 9, 2024 8:39:06 AM
PE metadata 1Password-BrowserSupport.exe
User AzureAD\AXXXnXXXXXXX
9/10/2024 2:27:53 PM 
 [25676] 1Password-BrowserSupport.exe C:\Users\AXXXnXXXXXXX\AppData\Local\1Password\app\8\browser_support_manifest_firefox.json {d634138d-c276-4fc8-924b-40a0ea21d284}
Command line 1Password-BrowserSupport.exe C:\Users\AXXXnXXXXXXX\AppData\Local\1Password\app\8\browser_support_manifest_firefox.json {d634138d-c276-4fc8-924b-40a0ea21d284}
Process id 25676
Execution details Token elevation: Limited, Integrity level: Medium
Image file path C:\Users\AXXXnXXXXXXX\AppData\Local\1Password\app\8\1Password-BrowserSupport.exe
Image file SHA1 8bb84d1b24bbcc6629f44be328a71f70aefe2fcb
Image file creation time Sep 9, 2024 8:39:06 AM
Image file last modification time Sep 9, 2024 8:39:06 AM
PE metadata 1Password-BrowserSupport.exe
User AzureAD\AXXXnXXXXXXX
9/10/2024 2:28:00 PM 
 [7176] 1Password-BrowserSupport.exe C:\Users\AXXXnXXXXXXX\AppData\Local\1Password\app\8\browser_support_manifest_firefox.json {d634138d-c276-4fc8-924b-40a0ea21d284}
Command line 1Password-BrowserSupport.exe C:\Users\AXXXnXXXXXXX\AppData\Local\1Password\app\8\browser_support_manifest_firefox.json {d634138d-c276-4fc8-924b-40a0ea21d284}
Process id 7176
Execution details Token elevation: Limited, Integrity level: Medium
Image file path C:\Users\AXXXnXXXXXXX\AppData\Local\1Password\app\8\1Password-BrowserSupport.exe
Image file SHA1 8bb84d1b24bbcc6629f44be328a71f70aefe2fcb
Image file creation time Sep 9, 2024 8:39:06 AM
Image file last modification time Sep 9, 2024 8:39:06 AM
PE metadata 1Password-BrowserSupport.exe
User AzureAD\AXXXnXXXXXXX
9/10/2024 2:28:00 PM 
 [7856] floorp.exe -contentproc --channel=69696 -childID 21 -isForBrowser -prefsHandle 69320 -prefMapHandle 70604 -prefsLen 35496 -prefMapSize 265716 -jsInitHandle 1488 -jsInitLen 234780 -parentBuildID 20240908033729 -win32kLockedDown -appDir "C:\Program Files\Ablaze Floorp\browser" - {addbceca-8448-498e-aaee-201b7ec9199a} 27148  tab
Command line "floorp.exe" -contentproc --channel=69696 -childID 21 -isForBrowser -prefsHandle 69320 -prefMapHandle 70604 -prefsLen 35496 -prefMapSize 265716 -jsInitHandle 1488 -jsInitLen 234780 -parentBuildID 20240908033729 -win32kLockedDown -appDir "C:\Program Files\Ablaze Floorp\browser" - {addbceca-8448-498e-aaee-201b7ec9199a} 27148  tab
Process id 7856
Execution details Token elevation: Limited, Integrity level: Low
Image file path C:\Program Files\Ablaze Floorp\floorp.exe
Image file SHA1 7d486d3c8ce8e887486df6efae6a82fa75ed15fd
Image file creation time Sep 9, 2024 9:57:46 AM
Image file last modification time Sep 10, 2024 9:51:53 AM
PE metadata floorp.exe
User AzureAD\AXXXnXXXXXXX
9/10/2024 2:28:02 PM 
 [22540] floorp.exe -contentproc --channel=62112 -childID 22 -isForBrowser -prefsHandle 69840 -prefMapHandle 69880 -prefsLen 35496 -prefMapSize 265716 -jsInitHandle 1488 -jsInitLen 234780 -parentBuildID 20240908033729 -win32kLockedDown -appDir "C:\Program Files\Ablaze Floorp\browser" - {d8c84eec-72ce-4068-be29-8f59b9e7e361} 27148  tab
Command line "floorp.exe" -contentproc --channel=62112 -childID 22 -isForBrowser -prefsHandle 69840 -prefMapHandle 69880 -prefsLen 35496 -prefMapSize 265716 -jsInitHandle 1488 -jsInitLen 234780 -parentBuildID 20240908033729 -win32kLockedDown -appDir "C:\Program Files\Ablaze Floorp\browser" - {d8c84eec-72ce-4068-be29-8f59b9e7e361} 27148  tab
Process id 22540
Execution details Token elevation: Limited, Integrity level: Low
Image file path C:\Program Files\Ablaze Floorp\floorp.exe
Image file SHA1 7d486d3c8ce8e887486df6efae6a82fa75ed15fd
Image file creation time Sep 9, 2024 9:57:46 AM
Image file last modification time Sep 10, 2024 9:51:53 AM
PE metadata floorp.exe
User AzureAD\AXXXnXXXXXXX
9/10/2024 2:28:03 PM 
 [21076] floorp.exe -contentproc --channel=83448 -childID 23 -isForBrowser -prefsHandle 18688 -prefMapHandle 18308 -prefsLen 35496 -prefMapSize 265716 -jsInitHandle 1488 -jsInitLen 234780 -parentBuildID 20240908033729 -win32kLockedDown -appDir "C:\Program Files\Ablaze Floorp\browser" - {886aa6e1-c8cb-41c4-aa2d-888f7edfe0a8} 27148  tab
Command line "floorp.exe" -contentproc --channel=83448 -childID 23 -isForBrowser -prefsHandle 18688 -prefMapHandle 18308 -prefsLen 35496 -prefMapSize 265716 -jsInitHandle 1488 -jsInitLen 234780 -parentBuildID 20240908033729 -win32kLockedDown -appDir "C:\Program Files\Ablaze Floorp\browser" - {886aa6e1-c8cb-41c4-aa2d-888f7edfe0a8} 27148  tab
Process id 21076
Execution details Token elevation: Limited, Integrity level: Low
Image file path C:\Program Files\Ablaze Floorp\floorp.exe
Image file SHA1 7d486d3c8ce8e887486df6efae6a82fa75ed15fd
Image file creation time Sep 9, 2024 9:57:46 AM
Image file last modification time Sep 10, 2024 9:51:53 AM
PE metadata floorp.exe
User AzureAD\AXXXnXXXXXXX
9/10/2024 2:28:03 PM 
 [3064] 1Password-BrowserSupport.exe C:\Users\AXXXnXXXXXXX\AppData\Local\1Password\app\8\browser_support_manifest_firefox.json {d634138d-c276-4fc8-924b-40a0ea21d284}
Command line 1Password-BrowserSupport.exe C:\Users\AXXXnXXXXXXX\AppData\Local\1Password\app\8\browser_support_manifest_firefox.json {d634138d-c276-4fc8-924b-40a0ea21d284}
Process id 3064
Execution details Token elevation: Limited, Integrity level: Medium
Image file path C:\Users\AXXXnXXXXXXX\AppData\Local\1Password\app\8\1Password-BrowserSupport.exe
Image file SHA1 8bb84d1b24bbcc6629f44be328a71f70aefe2fcb
Image file creation time Sep 9, 2024 8:39:06 AM
Image file last modification time Sep 9, 2024 8:39:06 AM
PE metadata 1Password-BrowserSupport.exe
User AzureAD\AXXXnXXXXXXX
9/10/2024 2:28:15 PM 
 [18760] floorp.exe -contentproc --channel=70608 -childID 24 -isForBrowser -prefsHandle 84544 -prefMapHandle 71584 -prefsLen 35496 -prefMapSize 265716 -jsInitHandle 1488 -jsInitLen 234780 -parentBuildID 20240908033729 -win32kLockedDown -appDir "C:\Program Files\Ablaze Floorp\browser" - {387b3406-b81e-4473-8259-20e35d631709} 27148  tab
Command line "floorp.exe" -contentproc --channel=70608 -childID 24 -isForBrowser -prefsHandle 84544 -prefMapHandle 71584 -prefsLen 35496 -prefMapSize 265716 -jsInitHandle 1488 -jsInitLen 234780 -parentBuildID 20240908033729 -win32kLockedDown -appDir "C:\Program Files\Ablaze Floorp\browser" - {387b3406-b81e-4473-8259-20e35d631709} 27148  tab
Process id 18760
Execution details Token elevation: Limited, Integrity level: Low
Image file path C:\Program Files\Ablaze Floorp\floorp.exe
Image file SHA1 7d486d3c8ce8e887486df6efae6a82fa75ed15fd
Image file creation time Sep 9, 2024 9:57:46 AM
Image file last modification time Sep 10, 2024 9:51:53 AM
PE metadata floorp.exe
User AzureAD\AXXXnXXXXXXX
9/10/2024 2:28:15 PM 
 [27560] floorp.exe -contentproc --channel=73300 -childID 25 -isForBrowser -prefsHandle 73268 -prefMapHandle 82852 -prefsLen 35496 -prefMapSize 265716 -jsInitHandle 1488 -jsInitLen 234780 -parentBuildID 20240908033729 -win32kLockedDown -appDir "C:\Program Files\Ablaze Floorp\browser" - {ab83156d-4708-4b91-bb74-55106b64204d} 27148  tab
Command line "floorp.exe" -contentproc --channel=73300 -childID 25 -isForBrowser -prefsHandle 73268 -prefMapHandle 82852 -prefsLen 35496 -prefMapSize 265716 -jsInitHandle 1488 -jsInitLen 234780 -parentBuildID 20240908033729 -win32kLockedDown -appDir "C:\Program Files\Ablaze Floorp\browser" - {ab83156d-4708-4b91-bb74-55106b64204d} 27148  tab
Process id 27560
Execution details Token elevation: Limited, Integrity level: Low
Image file path C:\Program Files\Ablaze Floorp\floorp.exe
Image file SHA1 7d486d3c8ce8e887486df6efae6a82fa75ed15fd
Image file creation time Sep 9, 2024 9:57:46 AM
Image file last modification time Sep 10, 2024 9:51:53 AM
PE metadata floorp.exe
User AzureAD\AXXXnXXXXXXX
9/10/2024 2:28:18 PM 
 [26604] 1Password-BrowserSupport.exe C:\Users\AXXXnXXXXXXX\AppData\Local\1Password\app\8\browser_support_manifest_firefox.json {d634138d-c276-4fc8-924b-40a0ea21d284}
Command line 1Password-BrowserSupport.exe C:\Users\AXXXnXXXXXXX\AppData\Local\1Password\app\8\browser_support_manifest_firefox.json {d634138d-c276-4fc8-924b-40a0ea21d284}
Process id 26604
Execution details Token elevation: Limited, Integrity level: Medium
Image file path C:\Users\AXXXnXXXXXXX\AppData\Local\1Password\app\8\1Password-BrowserSupport.exe
Image file SHA1 8bb84d1b24bbcc6629f44be328a71f70aefe2fcb
Image file creation time Sep 9, 2024 8:39:06 AM
Image file last modification time Sep 9, 2024 8:39:06 AM
PE metadata 1Password-BrowserSupport.exe
User AzureAD\AXXXnXXXXXXX
9/10/2024 2:28:19 PM 
 [6432] floorp.exe -contentproc --channel=85228 -childID 26 -isForBrowser -prefsHandle 81848 -prefMapHandle 73300 -prefsLen 35496 -prefMapSize 265716 -jsInitHandle 1488 -jsInitLen 234780 -parentBuildID 20240908033729 -win32kLockedDown -appDir "C:\Program Files\Ablaze Floorp\browser" - {aef77349-8046-4f51-915b-4e892b503dbe} 27148  tab
Command line "floorp.exe" -contentproc --channel=85228 -childID 26 -isForBrowser -prefsHandle 81848 -prefMapHandle 73300 -prefsLen 35496 -prefMapSize 265716 -jsInitHandle 1488 -jsInitLen 234780 -parentBuildID 20240908033729 -win32kLockedDown -appDir "C:\Program Files\Ablaze Floorp\browser" - {aef77349-8046-4f51-915b-4e892b503dbe} 27148  tab
Process id 6432
Execution details Token elevation: Limited, Integrity level: Low
Image file path C:\Program Files\Ablaze Floorp\floorp.exe
Image file SHA1 7d486d3c8ce8e887486df6efae6a82fa75ed15fd
Image file creation time Sep 9, 2024 9:57:46 AM
Image file last modification time Sep 10, 2024 9:51:53 AM
PE metadata floorp.exe
User AzureAD\AXXXnXXXXXXX
9/10/2024 2:28:22 PM 
 [444] tinfoil_driver.exe
Command line "tinfoil_driver.exe" 
Process id 444
Execution details Token elevation: Limited, Integrity level: Medium
Image file path C:\Users\AXXXnXXXXXXX\Downloads\tinfoil_driver.exe
Image file SHA1 c7efcb061c09bc41e20e2dc7cc8369dc39e63376
Image file creation time Sep 10, 2024 2:28:13 PM
Image file last modification time Sep 10, 2024 2:28:15 PM
PE metadata tinfoil_driver.exe
User AzureAD\AXXXnXXXXXXX
9/10/2024 2:28:35 PM 
 [27148] floorp.exe moved file nut.exe
SHA1 1b1bb6125717d585984f8918127cb2a2392038e5
Source file path C:\Users\AXXXnXXXXXXX\Downloads\nut.QXdq4tzp.exe.part
Size 102 MB
Is PE True
Creation time Sep 10, 2024 2:28:16 PM
Last modified time Sep 10, 2024 2:28:35 PM
Destination file path C:\Users\AXXXnXXXXXXX\Downloads\nut.exe
PE metadata nut.exe
Mark of the web Internet
Monitored keystrokes New Detected Low
9/10/2024 2:28:42 PM 
 [8044] tinfoil_driver.exe
Command line "tinfoil_driver.exe" 
Process id 8044
Execution details Token elevation: Full, Integrity level: High
Image file path C:\Users\AXXXnXXXXXXX\Downloads\tinfoil_driver.exe
Image file SHA1 c7efcb061c09bc41e20e2dc7cc8369dc39e63376
Image file creation time Sep 10, 2024 2:28:13 PM
Image file last modification time Sep 10, 2024 2:28:15 PM
PE metadata tinfoil_driver.exe
User AzureAD\AXXXnXXXXXXX
9/10/2024 2:29:02 PM 
 [24404] 1Password-BrowserSupport.exe C:\Users\AXXXnXXXXXXX\AppData\Local\1Password\app\8\browser_support_manifest_firefox.json {d634138d-c276-4fc8-924b-40a0ea21d284}
Command line 1Password-BrowserSupport.exe C:\Users\AXXXnXXXXXXX\AppData\Local\1Password\app\8\browser_support_manifest_firefox.json {d634138d-c276-4fc8-924b-40a0ea21d284}
Process id 24404
Execution details Token elevation: Limited, Integrity level: Medium
Image file path C:\Users\AXXXnXXXXXXX\AppData\Local\1Password\app\8\1Password-BrowserSupport.exe
Image file SHA1 8bb84d1b24bbcc6629f44be328a71f70aefe2fcb
Image file creation time Sep 9, 2024 8:39:06 AM
Image file last modification time Sep 9, 2024 8:39:06 AM
PE metadata 1Password-BrowserSupport.exe
User AzureAD\AXXXnXXXXXXX
9/10/2024 2:31:14 PM 
 [15604] 1Password-BrowserSupport.exe C:\Users\AXXXnXXXXXXX\AppData\Local\1Password\app\8\browser_support_manifest_firefox.json {d634138d-c276-4fc8-924b-40a0ea21d284}
Command line 1Password-BrowserSupport.exe C:\Users\AXXXnXXXXXXX\AppData\Local\1Password\app\8\browser_support_manifest_firefox.json {d634138d-c276-4fc8-924b-40a0ea21d284}
Process id 15604
Execution details Token elevation: Limited, Integrity level: Medium
Image file path C:\Users\AXXXnXXXXXXX\AppData\Local\1Password\app\8\1Password-BrowserSupport.exe
Image file SHA1 8bb84d1b24bbcc6629f44be328a71f70aefe2fcb
Image file creation time Sep 9, 2024 8:39:06 AM
Image file last modification time Sep 9, 2024 8:39:06 AM
PE metadata 1Password-BrowserSupport.exe
User AzureAD\AXXXnXXXXXXX
9/10/2024 2:31:17 PM 
 [13316] floorp.exe -contentproc --channel=32948 -childID 27 -isForBrowser -prefsHandle 80800 -prefMapHandle 81540 -prefsLen 35496 -prefMapSize 265716 -jsInitHandle 1488 -jsInitLen 234780 -parentBuildID 20240908033729 -win32kLockedDown -appDir "C:\Program Files\Ablaze Floorp\browser" - {8a068d96-455c-428f-9fad-7a34925de5ee} 27148  tab
Command line "floorp.exe" -contentproc --channel=32948 -childID 27 -isForBrowser -prefsHandle 80800 -prefMapHandle 81540 -prefsLen 35496 -prefMapSize 265716 -jsInitHandle 1488 -jsInitLen 234780 -parentBuildID 20240908033729 -win32kLockedDown -appDir "C:\Program Files\Ablaze Floorp\browser" - {8a068d96-455c-428f-9fad-7a34925de5ee} 27148  tab
Process id 13316
Execution details Token elevation: Limited, Integrity level: Low
Image file path C:\Program Files\Ablaze Floorp\floorp.exe
Image file SHA1 7d486d3c8ce8e887486df6efae6a82fa75ed15fd
Image file creation time Sep 9, 2024 9:57:46 AM
Image file last modification time Sep 10, 2024 9:51:53 AM
PE metadata floorp.exe
User AzureAD\AXXXnXXXXXXX
9/10/2024 2:31:17 PM 
 [23000] floorp.exe -contentproc --channel=101284 -childID 28 -isForBrowser -prefsHandle 101276 -prefMapHandle 101272 -prefsLen 35496 -prefMapSize 265716 -jsInitHandle 1488 -jsInitLen 234780 -parentBuildID 20240908033729 -win32kLockedDown -appDir "C:\Program Files\Ablaze Floorp\browser" - {deb7bf2f-df05-4efa-b953-624ca0015ed8} 27148  tab
Command line "floorp.exe" -contentproc --channel=101284 -childID 28 -isForBrowser -prefsHandle 101276 -prefMapHandle 101272 -prefsLen 35496 -prefMapSize 265716 -jsInitHandle 1488 -jsInitLen 234780 -parentBuildID 20240908033729 -win32kLockedDown -appDir "C:\Program Files\Ablaze Floorp\browser" - {deb7bf2f-df05-4efa-b953-624ca0015ed8} 27148  tab
Process id 23000
Execution details Token elevation: Limited, Integrity level: Low
Image file path C:\Program Files\Ablaze Floorp\floorp.exe
Image file SHA1 7d486d3c8ce8e887486df6efae6a82fa75ed15fd
Image file creation time Sep 9, 2024 9:57:46 AM
Image file last modification time Sep 10, 2024 9:51:53 AM
PE metadata floorp.exe
User AzureAD\AXXXnXXXXXXX
9/10/2024 2:31:18 PM 
 [16820] 1Password-BrowserSupport.exe C:\Users\AXXXnXXXXXXX\AppData\Local\1Password\app\8\browser_support_manifest_firefox.json {d634138d-c276-4fc8-924b-40a0ea21d284}
Command line 1Password-BrowserSupport.exe C:\Users\AXXXnXXXXXXX\AppData\Local\1Password\app\8\browser_support_manifest_firefox.json {d634138d-c276-4fc8-924b-40a0ea21d284}
Process id 16820
Execution details Token elevation: Limited, Integrity level: Medium
Image file path C:\Users\AXXXnXXXXXXX\AppData\Local\1Password\app\8\1Password-BrowserSupport.exe
Image file SHA1 8bb84d1b24bbcc6629f44be328a71f70aefe2fcb
Image file creation time Sep 9, 2024 8:39:06 AM
Image file last modification time Sep 9, 2024 8:39:06 AM
PE metadata 1Password-BrowserSupport.exe
User AzureAD\AXXXnXXXXXXX
9/10/2024 2:31:18 PM 
 [20156] floorp.exe -contentproc --channel=60312 -parentBuildID 20240908033729 -prefsHandle 99492 -prefMapHandle 99480 -prefsLen 41202 -prefMapSize 265716 -appDir "C:\Program Files\Ablaze Floorp\browser" - {96b85d4e-972e-4e00-a791-dcf4a995f7bf} 27148  rdd
Command line "floorp.exe" -contentproc --channel=60312 -parentBuildID 20240908033729 -prefsHandle 99492 -prefMapHandle 99480 -prefsLen 41202 -prefMapSize 265716 -appDir "C:\Program Files\Ablaze Floorp\browser" - {96b85d4e-972e-4e00-a791-dcf4a995f7bf} 27148  rdd
Process id 20156
Execution details Token elevation: Limited, Integrity level: Low
Image file path C:\Program Files\Ablaze Floorp\floorp.exe
Image file SHA1 7d486d3c8ce8e887486df6efae6a82fa75ed15fd
Image file creation time Sep 9, 2024 9:57:46 AM
Image file last modification time Sep 10, 2024 9:51:53 AM
PE metadata floorp.exe
User AzureAD\AXXXnXXXXXXX
9/10/2024 2:31:18 PM 
 [14044] floorp.exe -contentproc --channel=76816 -parentBuildID 20240908033729 -sandboxingKind 1 -prefsHandle 99508 -prefMapHandle 99924 -prefsLen 41202 -prefMapSize 265716 -win32kLockedDown -appDir "C:\Program Files\Ablaze Floorp\browser" - {6916479b-14a2-4f91-85bb-c6c3ea6f619a} 27148  utility
Command line "floorp.exe" -contentproc --channel=76816 -parentBuildID 20240908033729 -sandboxingKind 1 -prefsHandle 99508 -prefMapHandle 99924 -prefsLen 41202 -prefMapSize 265716 -win32kLockedDown -appDir "C:\Program Files\Ablaze Floorp\browser" - {6916479b-14a2-4f91-85bb-c6c3ea6f619a} 27148  utility
Process id 14044
Execution details Token elevation: Limited, Integrity level: Low
Image file path C:\Program Files\Ablaze Floorp\floorp.exe
Image file SHA1 7d486d3c8ce8e887486df6efae6a82fa75ed15fd
Image file creation time Sep 9, 2024 9:57:46 AM
Image file last modification time Sep 10, 2024 9:51:53 AM
PE metadata floorp.exe
User AzureAD\AXXXnXXXXXXX
9/10/2024 2:31:19 PM 
 [8916] floorp.exe -contentproc --channel=24192 -childID 29 -isForBrowser -prefsHandle 32044 -prefMapHandle 73756 -prefsLen 35496 -prefMapSize 265716 -jsInitHandle 1488 -jsInitLen 234780 -parentBuildID 20240908033729 -win32kLockedDown -appDir "C:\Program Files\Ablaze Floorp\browser" - {85d60019-f3a9-468c-b9cb-476793d15090} 27148  tab
Command line "floorp.exe" -contentproc --channel=24192 -childID 29 -isForBrowser -prefsHandle 32044 -prefMapHandle 73756 -prefsLen 35496 -prefMapSize 265716 -jsInitHandle 1488 -jsInitLen 234780 -parentBuildID 20240908033729 -win32kLockedDown -appDir "C:\Program Files\Ablaze Floorp\browser" - {85d60019-f3a9-468c-b9cb-476793d15090} 27148  tab
Process id 8916
Execution details Token elevation: Limited, Integrity level: Low
Image file path C:\Program Files\Ablaze Floorp\floorp.exe
Image file SHA1 7d486d3c8ce8e887486df6efae6a82fa75ed15fd
Image file creation time Sep 9, 2024 9:57:46 AM
Image file last modification time Sep 10, 2024 9:51:53 AM
PE metadata floorp.exe
User AzureAD\AXXXnXXXXXXX
9/10/2024 2:31:56 PM 
 [4180] 1Password-BrowserSupport.exe C:\Users\AXXXnXXXXXXX\AppData\Local\1Password\app\8\browser_support_manifest_firefox.json {d634138d-c276-4fc8-924b-40a0ea21d284}
Command line 1Password-BrowserSupport.exe C:\Users\AXXXnXXXXXXX\AppData\Local\1Password\app\8\browser_support_manifest_firefox.json {d634138d-c276-4fc8-924b-40a0ea21d284}
Process id 4180
Execution details Token elevation: Limited, Integrity level: Medium
Image file path C:\Users\AXXXnXXXXXXX\AppData\Local\1Password\app\8\1Password-BrowserSupport.exe
Image file SHA1 8bb84d1b24bbcc6629f44be328a71f70aefe2fcb
Image file creation time Sep 9, 2024 8:39:06 AM
Image file last modification time Sep 9, 2024 8:39:06 AM
PE metadata 1Password-BrowserSupport.exe
User AzureAD\AXXXnXXXXXXX
9/10/2024 2:32:54 PM 
 [17596] floorp.exe -contentproc --channel=17160 -childID 30 -isForBrowser -prefsHandle 109024 -prefMapHandle 47440 -prefsLen 35496 -prefMapSize 265716 -jsInitHandle 1488 -jsInitLen 234780 -parentBuildID 20240908033729 -win32kLockedDown -appDir "C:\Program Files\Ablaze Floorp\browser" - {e109ce36-e999-46cb-ad65-a2692466336e} 27148  tab
Command line "floorp.exe" -contentproc --channel=17160 -childID 30 -isForBrowser -prefsHandle 109024 -prefMapHandle 47440 -prefsLen 35496 -prefMapSize 265716 -jsInitHandle 1488 -jsInitLen 234780 -parentBuildID 20240908033729 -win32kLockedDown -appDir "C:\Program Files\Ablaze Floorp\browser" - {e109ce36-e999-46cb-ad65-a2692466336e} 27148  tab
Process id 17596
Execution details Token elevation: Limited, Integrity level: Low
Image file path C:\Program Files\Ablaze Floorp\floorp.exe
Image file SHA1 7d486d3c8ce8e887486df6efae6a82fa75ed15fd
Image file creation time Sep 9, 2024 9:57:46 AM
Image file last modification time Sep 10, 2024 9:51:53 AM
PE metadata floorp.exe
User AzureAD\AXXXnXXXXXXX
9/10/2024 2:32:54 PM 
 [15880] floorp.exe -contentproc --channel=75964 -childID 31 -isForBrowser -prefsHandle 112696 -prefMapHandle 112676 -prefsLen 35496 -prefMapSize 265716 -jsInitHandle 1488 -jsInitLen 234780 -parentBuildID 20240908033729 -win32kLockedDown -appDir "C:\Program Files\Ablaze Floorp\browser" - {79eb7ca4-85d5-4cf5-acae-8cae541cadf8} 27148  tab
Command line "floorp.exe" -contentproc --channel=75964 -childID 31 -isForBrowser -prefsHandle 112696 -prefMapHandle 112676 -prefsLen 35496 -prefMapSize 265716 -jsInitHandle 1488 -jsInitLen 234780 -parentBuildID 20240908033729 -win32kLockedDown -appDir "C:\Program Files\Ablaze Floorp\browser" - {79eb7ca4-85d5-4cf5-acae-8cae541cadf8} 27148  tab
Process id 15880
Execution details Token elevation: Limited, Integrity level: Low
Image file path C:\Program Files\Ablaze Floorp\floorp.exe
Image file SHA1 7d486d3c8ce8e887486df6efae6a82fa75ed15fd
Image file creation time Sep 9, 2024 9:57:46 AM
Image file last modification time Sep 10, 2024 9:51:53 AM
PE metadata floorp.exe
User AzureAD\AXXXnXXXXXXX
9/10/2024 2:32:57 PM 
 [27592] floorp.exe -contentproc --channel=123244 -childID 32 -isForBrowser -prefsHandle 122888 -prefMapHandle 122900 -prefsLen 35496 -prefMapSize 265716 -jsInitHandle 1488 -jsInitLen 234780 -parentBuildID 20240908033729 -win32kLockedDown -appDir "C:\Program Files\Ablaze Floorp\browser" - {86849edc-b0ba-4b7b-b79a-12c6a0d8076b} 27148  tab
Command line "floorp.exe" -contentproc --channel=123244 -childID 32 -isForBrowser -prefsHandle 122888 -prefMapHandle 122900 -prefsLen 35496 -prefMapSize 265716 -jsInitHandle 1488 -jsInitLen 234780 -parentBuildID 20240908033729 -win32kLockedDown -appDir "C:\Program Files\Ablaze Floorp\browser" - {86849edc-b0ba-4b7b-b79a-12c6a0d8076b} 27148  tab
Process id 27592
Execution details Token elevation: Limited, Integrity level: Low
Image file path C:\Program Files\Ablaze Floorp\floorp.exe
Image file SHA1 7d486d3c8ce8e887486df6efae6a82fa75ed15fd
Image file creation time Sep 9, 2024 9:57:46 AM
Image file last modification time Sep 10, 2024 9:51:53 AM
PE metadata floorp.exe
User AzureAD\AXXXnXXXXXXX
9/10/2024 2:34:06 PM 
 [15656] 1Password-BrowserSupport.exe C:\Users\AXXXnXXXXXXX\AppData\Local\1Password\app\8\browser_support_manifest_firefox.json {d634138d-c276-4fc8-924b-40a0ea21d284}
Command line 1Password-BrowserSupport.exe C:\Users\AXXXnXXXXXXX\AppData\Local\1Password\app\8\browser_support_manifest_firefox.json {d634138d-c276-4fc8-924b-40a0ea21d284}
Process id 15656
Execution details Token elevation: Limited, Integrity level: Medium
Image file path C:\Users\AXXXnXXXXXXX\AppData\Local\1Password\app\8\1Password-BrowserSupport.exe
Image file SHA1 8bb84d1b24bbcc6629f44be328a71f70aefe2fcb
Image file creation time Sep 9, 2024 8:39:06 AM
Image file last modification time Sep 9, 2024 8:39:06 AM
PE metadata 1Password-BrowserSupport.exe
User AzureAD\AXXXnXXXXXXX
9/10/2024 2:34:33 PM 
 [26396] 1Password-BrowserSupport.exe C:\Users\AXXXnXXXXXXX\AppData\Local\1Password\app\8\browser_support_manifest_firefox.json {d634138d-c276-4fc8-924b-40a0ea21d284}
Command line 1Password-BrowserSupport.exe C:\Users\AXXXnXXXXXXX\AppData\Local\1Password\app\8\browser_support_manifest_firefox.json {d634138d-c276-4fc8-924b-40a0ea21d284}
Process id 26396
Execution details Token elevation: Limited, Integrity level: Medium
Image file path C:\Users\AXXXnXXXXXXX\AppData\Local\1Password\app\8\1Password-BrowserSupport.exe
Image file SHA1 8bb84d1b24bbcc6629f44be328a71f70aefe2fcb
Image file creation time Sep 9, 2024 8:39:06 AM
Image file last modification time Sep 9, 2024 8:39:06 AM
PE metadata 1Password-BrowserSupport.exe
User AzureAD\AXXXnXXXXXXX
9/10/2024 2:34:35 PM 
 [9972] floorp.exe -contentproc --channel=100296 -childID 33 -isForBrowser -prefsHandle 115592 -prefMapHandle 109132 -prefsLen 35496 -prefMapSize 265716 -jsInitHandle 1488 -jsInitLen 234780 -parentBuildID 20240908033729 -win32kLockedDown -appDir "C:\Program Files\Ablaze Floorp\browser" - {8cd74e98-45be-4b46-a110-93aac6a65bdd} 27148  tab
Command line "floorp.exe" -contentproc --channel=100296 -childID 33 -isForBrowser -prefsHandle 115592 -prefMapHandle 109132 -prefsLen 35496 -prefMapSize 265716 -jsInitHandle 1488 -jsInitLen 234780 -parentBuildID 20240908033729 -win32kLockedDown -appDir "C:\Program Files\Ablaze Floorp\browser" - {8cd74e98-45be-4b46-a110-93aac6a65bdd} 27148  tab
Process id 9972
Execution details Token elevation: Limited, Integrity level: Low
Image file path C:\Program Files\Ablaze Floorp\floorp.exe
Image file SHA1 7d486d3c8ce8e887486df6efae6a82fa75ed15fd
Image file creation time Sep 9, 2024 9:57:46 AM
Image file last modification time Sep 10, 2024 9:51:53 AM
PE metadata floorp.exe
User AzureAD\AXXXnXXXXXXX
9/10/2024 2:35:24 PM 
 [20292] 1Password-BrowserSupport.exe C:\Users\AXXXnXXXXXXX\AppData\Local\1Password\app\8\browser_support_manifest_firefox.json {d634138d-c276-4fc8-924b-40a0ea21d284}
Command line 1Password-BrowserSupport.exe C:\Users\AXXXnXXXXXXX\AppData\Local\1Password\app\8\browser_support_manifest_firefox.json {d634138d-c276-4fc8-924b-40a0ea21d284}
Process id 20292
Execution details Token elevation: Limited, Integrity level: Medium
Image file path C:\Users\AXXXnXXXXXXX\AppData\Local\1Password\app\8\1Password-BrowserSupport.exe
Image file SHA1 8bb84d1b24bbcc6629f44be328a71f70aefe2fcb
Image file creation time Sep 9, 2024 8:39:06 AM
Image file last modification time Sep 9, 2024 8:39:06 AM
PE metadata 1Password-BrowserSupport.exe
User AzureAD\AXXXnXXXXXXX
9/10/2024 2:35:25 PM 
 [18712] 1Password-BrowserSupport.exe C:\Users\AXXXnXXXXXXX\AppData\Local\1Password\app\8\browser_support_manifest_firefox.json {d634138d-c276-4fc8-924b-40a0ea21d284}
Command line 1Password-BrowserSupport.exe C:\Users\AXXXnXXXXXXX\AppData\Local\1Password\app\8\browser_support_manifest_firefox.json {d634138d-c276-4fc8-924b-40a0ea21d284}
Process id 18712
Execution details Token elevation: Limited, Integrity level: Medium
Image file path C:\Users\AXXXnXXXXXXX\AppData\Local\1Password\app\8\1Password-BrowserSupport.exe
Image file SHA1 8bb84d1b24bbcc6629f44be328a71f70aefe2fcb
Image file creation time Sep 9, 2024 8:39:06 AM
Image file last modification time Sep 9, 2024 8:39:06 AM
PE metadata 1Password-BrowserSupport.exe
User AzureAD\AXXXnXXXXXXX
9/10/2024 2:36:44 PM 
 [22868] 1Password-BrowserSupport.exe C:\Users\AXXXnXXXXXXX\AppData\Local\1Password\app\8\browser_support_manifest_firefox.json {d634138d-c276-4fc8-924b-40a0ea21d284}
Command line 1Password-BrowserSupport.exe C:\Users\AXXXnXXXXXXX\AppData\Local\1Password\app\8\browser_support_manifest_firefox.json {d634138d-c276-4fc8-924b-40a0ea21d284}
Process id 22868
Execution details Token elevation: Limited, Integrity level: Medium
Image file path C:\Users\AXXXnXXXXXXX\AppData\Local\1Password\app\8\1Password-BrowserSupport.exe
Image file SHA1 8bb84d1b24bbcc6629f44be328a71f70aefe2fcb
Image file creation time Sep 9, 2024 8:39:06 AM
Image file last modification time Sep 9, 2024 8:39:06 AM
PE metadata 1Password-BrowserSupport.exe
User AzureAD\AXXXnXXXXXXX
9/10/2024 2:36:48 PM 
 [25016] floorp.exe -contentproc --channel=117216 -childID 34 -isForBrowser -prefsHandle 42096 -prefMapHandle 69352 -prefsLen 35496 -prefMapSize 265716 -jsInitHandle 1488 -jsInitLen 234780 -parentBuildID 20240908033729 -win32kLockedDown -appDir "C:\Program Files\Ablaze Floorp\browser" - {6c67ae0f-6912-4d34-9c0a-b3b7132178c3} 27148  tab
Command line "floorp.exe" -contentproc --channel=117216 -childID 34 -isForBrowser -prefsHandle 42096 -prefMapHandle 69352 -prefsLen 35496 -prefMapSize 265716 -jsInitHandle 1488 -jsInitLen 234780 -parentBuildID 20240908033729 -win32kLockedDown -appDir "C:\Program Files\Ablaze Floorp\browser" - {6c67ae0f-6912-4d34-9c0a-b3b7132178c3} 27148  tab
Process id 25016
Execution details Token elevation: Limited, Integrity level: Low
Image file path C:\Program Files\Ablaze Floorp\floorp.exe
Image file SHA1 7d486d3c8ce8e887486df6efae6a82fa75ed15fd
Image file creation time Sep 9, 2024 9:57:46 AM
Image file last modification time Sep 10, 2024 9:51:53 AM
PE metadata floorp.exe
User AzureAD\AXXXnXXXXXXX
9/10/2024 2:36:48 PM 
 [2460] 1Password-BrowserSupport.exe C:\Users\AXXXnXXXXXXX\AppData\Local\1Password\app\8\browser_support_manifest_firefox.json {d634138d-c276-4fc8-924b-40a0ea21d284}
Command line 1Password-BrowserSupport.exe C:\Users\AXXXnXXXXXXX\AppData\Local\1Password\app\8\browser_support_manifest_firefox.json {d634138d-c276-4fc8-924b-40a0ea21d284}
Process id 2460
Execution details Token elevation: Limited, Integrity level: Medium
Image file path C:\Users\AXXXnXXXXXXX\AppData\Local\1Password\app\8\1Password-BrowserSupport.exe
Image file SHA1 8bb84d1b24bbcc6629f44be328a71f70aefe2fcb
Image file creation time Sep 9, 2024 8:39:06 AM
Image file last modification time Sep 9, 2024 8:39:06 AM
PE metadata 1Password-BrowserSupport.exe
User AzureAD\AXXXnXXXXXXX
9/10/2024 2:36:50 PM 
 [25500] 1Password-BrowserSupport.exe C:\Users\AXXXnXXXXXXX\AppData\Local\1Password\app\8\browser_support_manifest_firefox.json {d634138d-c276-4fc8-924b-40a0ea21d284}
Command line 1Password-BrowserSupport.exe C:\Users\AXXXnXXXXXXX\AppData\Local\1Password\app\8\browser_support_manifest_firefox.json {d634138d-c276-4fc8-924b-40a0ea21d284}
Process id 25500
Execution details Token elevation: Limited, Integrity level: Medium
Image file path C:\Users\AXXXnXXXXXXX\AppData\Local\1Password\app\8\1Password-BrowserSupport.exe
Image file SHA1 8bb84d1b24bbcc6629f44be328a71f70aefe2fcb
Image file creation time Sep 9, 2024 8:39:06 AM
Image file last modification time Sep 9, 2024 8:39:06 AM
PE metadata 1Password-BrowserSupport.exe
User AzureAD\AXXXnXXXXXXX
9/10/2024 2:36:51 PM 
 [25992] floorp.exe -contentproc --channel=128520 -childID 35 -isForBrowser -prefsHandle 121400 -prefMapHandle 125688 -prefsLen 35496 -prefMapSize 265716 -jsInitHandle 1488 -jsInitLen 234780 -parentBuildID 20240908033729 -win32kLockedDown -appDir "C:\Program Files\Ablaze Floorp\browser" - {ead577f5-e355-41c5-8bc8-8aa05f10ed6f} 27148  tab
Command line "floorp.exe" -contentproc --channel=128520 -childID 35 -isForBrowser -prefsHandle 121400 -prefMapHandle 125688 -prefsLen 35496 -prefMapSize 265716 -jsInitHandle 1488 -jsInitLen 234780 -parentBuildID 20240908033729 -win32kLockedDown -appDir "C:\Program Files\Ablaze Floorp\browser" - {ead577f5-e355-41c5-8bc8-8aa05f10ed6f} 27148  tab
Process id 25992
Execution details Token elevation: Limited, Integrity level: Low
Image file path C:\Program Files\Ablaze Floorp\floorp.exe
Image file SHA1 7d486d3c8ce8e887486df6efae6a82fa75ed15fd
Image file creation time Sep 9, 2024 9:57:46 AM
Image file last modification time Sep 10, 2024 9:51:53 AM
PE metadata floorp.exe
User AzureAD\AXXXnXXXXXXX
9/10/2024 2:36:51 PM 
 [22728] floorp.exe -contentproc --channel=134488 -childID 36 -isForBrowser -prefsHandle 75912 -prefMapHandle 119472 -prefsLen 35496 -prefMapSize 265716 -jsInitHandle 1488 -jsInitLen 234780 -parentBuildID 20240908033729 -win32kLockedDown -appDir "C:\Program Files\Ablaze Floorp\browser" - {c67f14aa-b662-412f-96b7-c453a41f09a9} 27148  tab
Command line "floorp.exe" -contentproc --channel=134488 -childID 36 -isForBrowser -prefsHandle 75912 -prefMapHandle 119472 -prefsLen 35496 -prefMapSize 265716 -jsInitHandle 1488 -jsInitLen 234780 -parentBuildID 20240908033729 -win32kLockedDown -appDir "C:\Program Files\Ablaze Floorp\browser" - {c67f14aa-b662-412f-96b7-c453a41f09a9} 27148  tab
Process id 22728
Execution details Token elevation: Limited, Integrity level: Low
Image file path C:\Program Files\Ablaze Floorp\floorp.exe
Image file SHA1 7d486d3c8ce8e887486df6efae6a82fa75ed15fd
Image file creation time Sep 9, 2024 9:57:46 AM
Image file last modification time Sep 10, 2024 9:51:53 AM
PE metadata floorp.exe
User AzureAD\AXXXnXXXXXXX
9/10/2024 2:36:51 PM 
 [26584] 1Password-BrowserSupport.exe C:\Users\AXXXnXXXXXXX\AppData\Local\1Password\app\8\browser_support_manifest_firefox.json {d634138d-c276-4fc8-924b-40a0ea21d284}
Command line 1Password-BrowserSupport.exe C:\Users\AXXXnXXXXXXX\AppData\Local\1Password\app\8\browser_support_manifest_firefox.json {d634138d-c276-4fc8-924b-40a0ea21d284}
Process id 26584
Execution details Token elevation: Limited, Integrity level: Medium
Image file path C:\Users\AXXXnXXXXXXX\AppData\Local\1Password\app\8\1Password-BrowserSupport.exe
Image file SHA1 8bb84d1b24bbcc6629f44be328a71f70aefe2fcb
Image file creation time Sep 9, 2024 8:39:06 AM
Image file last modification time Sep 9, 2024 8:39:06 AM
PE metadata 1Password-BrowserSupport.exe
User AzureAD\AXXXnXXXXXXX
9/10/2024 2:36:53 PM 
 [26036] 1Password-BrowserSupport.exe C:\Users\AXXXnXXXXXXX\AppData\Local\1Password\app\8\browser_support_manifest_firefox.json {d634138d-c276-4fc8-924b-40a0ea21d284}
Command line 1Password-BrowserSupport.exe C:\Users\AXXXnXXXXXXX\AppData\Local\1Password\app\8\browser_support_manifest_firefox.json {d634138d-c276-4fc8-924b-40a0ea21d284}
Process id 26036
Execution details Token elevation: Limited, Integrity level: Medium
Image file path C:\Users\AXXXnXXXXXXX\AppData\Local\1Password\app\8\1Password-BrowserSupport.exe
Image file SHA1 8bb84d1b24bbcc6629f44be328a71f70aefe2fcb
Image file creation time Sep 9, 2024 8:39:06 AM
Image file last modification time Sep 9, 2024 8:39:06 AM
PE metadata 1Password-BrowserSupport.exe
User AzureAD\AXXXnXXXXXXX
9/10/2024 2:28:40 PM 
 [27356] nut.exe
Command line "nut.exe" 
Process id 27356
Execution details Token elevation: Limited, Integrity level: Medium
Image file path C:\Users\AXXXnXXXXXXX\Downloads\nut.exe
Image file SHA1 1b1bb6125717d585984f8918127cb2a2392038e5
Image file creation time Sep 10, 2024 2:28:16 PM
Image file last modification time Sep 10, 2024 2:28:35 PM
PE metadata nut.exe
User AzureAD\AXXXnXXXXXXX
9/10/2024 2:28:42 PM 
 [27356] nut.exe created file python37.dll
SHA1 62989fccc089f70cc3994a3352dfb222e8a07023
Path C:\Users\AXXXnXXXXXXX\AppData\Local\Temp\_MEI273562\python37.dll
Size 3 MB
Is PE True
Last modified time Sep 10, 2024 2:28:42 PM
PE metadata python37.dll
Possible theft of passwords and other sensitive web browser information New Detected Medium
9/10/2024 2:28:44 PM 
 [17144] nut.exe
Command line "nut.exe" 
Process id 17144
Execution details Token elevation: Limited, Integrity level: Medium
Image file path C:\Users\AXXXnXXXXXXX\Downloads\nut.exe
Image file SHA1 1b1bb6125717d585984f8918127cb2a2392038e5
Image file creation time Sep 10, 2024 2:28:16 PM
Image file last modification time Sep 10, 2024 2:28:35 PM
PE metadata nut.exe
User AzureAD\AXXXnXXXXXXX
9/10/2024 2:28:47 PM 
 [17144] nut.exe loaded image sqlite3.dll
SHA1 f040b9a51f22ae79e1eb2b96dd8e0f1c378c5363
Path C:\Users\AXXXnXXXXXXX\AppData\Local\Temp\_MEI273562\sqlite3.dll
Size 1 MB
Is PE True
Creation time Sep 10, 2024 2:28:43 PM
Last modified time Sep 10, 2024 2:28:43 PM
PE metadata sqlite3.dll
Possible theft of passwords and other sensitive web browser information New Detected Medium
9/10/2024 2:32:46 PM 
 [17144] nut.exe loaded image vaultcli.dll
SHA1 7cb8ffc1a4a5b6a6bcf4404f13ab2178e7cdf835
Path C:\Windows\System32\vaultcli.dll
Size 360 KB
Is PE True
Creation time May 23, 2024 10:23:16 AM
Last modified time May 23, 2024 10:23:16 AM
PE metadata vaultcli.dll
Possible theft of passwords and other sensitive web browser information New Detected Medium
9/10/2024 2:33:06 PM 
 nut.exe set a hook of type WH_KEYBOARD to monitor user keystrokes
Hook type WH_KEYBOARD
Mitre techniques T1056.001: Keylogging
Loaded library explorerframe.dll
Monitored keystrokes New Detected Low