11.11.2017 19.06.59 Application added to the Trusted group mcci+McciControlHost Application: mcci+McciControlHost Reason: KSN information Application path: C:\Program Files\Common Files\Motive\pcControlHost.exe Time: 11/11/2017 7:06 PM 11.11.2017 18.03.28 Application added to the Trusted group Paint Application: Paint Reason: analysis of digital signature Application path: C:\Windows\System32\mspaint.exe Time: 11/11/2017 6:03 PM 11.11.2017 17.58.59 Application added to the Trusted group TCP/IP Route Command Application: TCP/IP Route Command Reason: analysis of digital signature Application path: C:\Windows\System32\ROUTE.EXE Time: 11/11/2017 5:58 PM 11.11.2017 17.58.56 Application added to the Trusted group Diagnostics Troubleshooting Wizard Application: Diagnostics Troubleshooting Wizard Reason: analysis of digital signature Application path: C:\Windows\System32\msdt.exe Time: 11/11/2017 5:58 PM 11.11.2017 17.50.21 Update of databases and application modules Completed. Average download speed:: 175.80 KB/s Status:: Completed. Downloaded and updated:: 216.06 KB Total duration: 44 seconds Time: 11/11/2017 5:50 PM 11.11.2017 16.36.36 Search for application updates Search completed, no available updates Important updates available: 0 Recommended updates available: 0 Started: Automatically Status: Completed Time: 11/11/2017 4:36 PM 11.11.2017 16.10.36 Rootkit Scan No threats detected Detected: 0 Deleted: 0 Not disinfected: 0 Release date of databases used for scan: 11/11/2017 12:57 PM Total duration: 24 minutes, 35 seconds Completion time: 11/11/2017 4:35 PM 11.11.2017 15.49.07 Update of databases and application modules Completed. Average download speed:: 639.42 KB/s Status:: Completed. Downloaded and updated:: 1.94 MB Total duration: 25 seconds Time: 11/11/2017 3:49 PM 11.11.2017 15.42.02 Task started System Watcher Time: 11/11/2017 3:42 PM 11.11.2017 15.42.02 Task started Web Anti-Virus Time: 11/11/2017 3:42 PM 11.11.2017 15.42.02 Task started IM Anti-Virus Time: 11/11/2017 3:42 PM 11.11.2017 15.42.02 Task started Mail Anti-Virus Time: 11/11/2017 3:42 PM 11.11.2017 15.42.02 Task started Network Attack Blocker Time: 11/11/2017 3:42 PM 11.11.2017 15.40.36 Task started File Anti-Virus Time: 11/11/2017 3:40 PM 11.11.2017 15.40.36 Task started Firewall Time: 11/11/2017 3:40 PM 11.11.2017 15.40.36 Task started Application Control Time: 11/11/2017 3:40 PM 10.11.2017 11.10.22 Rootkit Scan (canceled) No threats detected Detected: 0 Deleted: 0 Not disinfected: 0 Release date of databases used for scan: 11/10/2017 6:07 AM Total duration: 1 day, 4 hours Completion time: 11/11/2017 3:40 PM 10.11.2017 10.57.03 Update of databases and application modules Completed. Average download speed:: 214.25 KB/s Status:: Completed. Downloaded and updated:: 1.57 MB Total duration: 1 minute, 41 seconds Time: 11/10/2017 10:57 AM 10.11.2017 10.52.16 Application added to the Trusted group Microsoft Malware Protection Signature Update Stub Application: Microsoft Malware Protection Signature Update Stub Reason: analysis of digital signature Application path: C:\Windows\Temp\{6E4033CF-FB7B-4D47-BB85-AE49103D4867}\MPSigStub.exe Time: 11/10/2017 10:52 AM 10.11.2017 10.52.15 Application added to the Trusted group AntiMalware Definition Update Application: AntiMalware Definition Update Reason: analysis of digital signature Application path: C:\Windows\SoftwareDistribution\Download\Install\mpas-d.exe Time: 11/10/2017 10:52 AM 10.11.2017 10.41.48 Task started Web Anti-Virus Time: 11/10/2017 10:41 AM 10.11.2017 10.41.48 Task started System Watcher Time: 11/10/2017 10:41 AM 10.11.2017 10.41.47 Task started Mail Anti-Virus Time: 11/10/2017 10:41 AM 10.11.2017 10.41.47 Task started Network Attack Blocker Time: 11/10/2017 10:41 AM 10.11.2017 10.41.47 Task started IM Anti-Virus Time: 11/10/2017 10:41 AM 10.11.2017 10.40.22 Task started File Anti-Virus Time: 11/10/2017 10:40 AM 10.11.2017 10.40.22 Task started Application Control Time: 11/10/2017 10:40 AM 10.11.2017 10.40.22 Task started Firewall Time: 11/10/2017 10:40 AM 09.11.2017 15.17.29 Update of databases and application modules Completed. Average download speed:: 343.35 KB/s Status:: Completed. Downloaded and updated:: 2.42 MB Total duration: 1 minute, 50 seconds Time: 11/9/2017 3:17 PM 09.11.2017 15.13.46 Application added to the Trusted group Adobe WebInstaller 15.0 Application: Adobe WebInstaller 15.0 Reason: analysis of digital signature Application path: C:\ProgramData\Adobe\ARM\{291AA914-A987-4CE9-BD63-AC0A92D435E5}\ServicesUpdater.exe Time: 11/9/2017 3:13 PM 09.11.2017 15.13.45 Application added to the Trusted group Adobe Reader and Acrobat Manager Helper Application: Adobe Reader and Acrobat Manager Helper Reason: analysis of digital signature Application path: C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARMHelper.exe Time: 11/9/2017 3:13 PM 09.11.2017 15.02.04 Task started System Watcher Time: 11/9/2017 3:02 PM 09.11.2017 15.02.04 Task started Web Anti-Virus Time: 11/9/2017 3:02 PM 09.11.2017 15.02.04 Task started Network Attack Blocker Time: 11/9/2017 3:02 PM 09.11.2017 15.02.04 Task started Mail Anti-Virus Time: 11/9/2017 3:02 PM 09.11.2017 15.02.04 Task started IM Anti-Virus Time: 11/9/2017 3:02 PM 09.11.2017 15.00.38 Task started Application Control Time: 11/9/2017 3:00 PM 09.11.2017 15.00.38 Task started Firewall Time: 11/9/2017 3:00 PM 09.11.2017 15.00.38 Task started File Anti-Virus Time: 11/9/2017 3:00 PM 08.11.2017 20.10.34 Full Scan No threats detected Detected: 0 Deleted: 0 Not disinfected: 0 Release date of databases used for scan: 11/8/2017 5:10 PM Total duration: 16 minutes, 12 seconds Completion time: 11/8/2017 8:26 PM 08.11.2017 20.07.45 Update of databases and application modules Completed. Average download speed:: 237.37 KB/s Status:: Completed. Downloaded and updated:: 432.84 KB Total duration: 20 seconds Time: 11/8/2017 8:07 PM 08.11.2017 17.45.53 Search for application updates Search completed, no available updates Important updates available: 0 Recommended updates available: 0 Started: Automatically Status: Completed Time: 11/8/2017 5:45 PM 08.11.2017 17.45.52 Update of databases and application modules No available update packages. Average download speed:: 73.83 KB/s Status:: No available update packages. Downloaded and updated:: 8.83 KB Total duration: 11 seconds Time: 11/8/2017 5:45 PM 08.11.2017 17.39.22 Application added to the Trusted group Microsoft Filter Loader Application: Microsoft Filter Loader Reason: analysis of digital signature Application path: C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\OFFICE16\FLTLDR.EXE Time: 11/8/2017 5:39 PM 08.11.2017 17.34.25 Application added to the Trusted group Microsoft Outlook Application: Microsoft Outlook Reason: analysis of digital signature Application path: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE Time: 11/8/2017 5:34 PM 08.11.2017 17.17.07 Update of databases and application modules Completed. Average download speed:: 120.74 KB/s Status:: Completed. Downloaded and updated:: 581.52 KB Total duration: 1 minute, 11 seconds Time: 11/8/2017 5:17 PM 08.11.2017 17.10.38 Application added to the Trusted group Microsoft Office Click-to-Run Client Application: Microsoft Office Click-to-Run Client Reason: analysis of digital signature Application path: C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe Time: 11/8/2017 5:10 PM 08.11.2017 17.10.33 Application added to the Trusted group Office Subscription Licensing Heartbeat Application: Office Subscription Licensing Heartbeat Reason: analysis of digital signature Application path: C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\OFFICE16\OLicenseHeartbeat.exe Time: 11/8/2017 5:10 PM 08.11.2017 14.57.12 Application added to the Trusted group Windows Activation Client Application: Windows Activation Client Reason: analysis of digital signature Application path: C:\Windows\System32\slui.exe Time: 11/8/2017 2:57 PM 08.11.2017 14.57.10 Application added to the Trusted group Windows Activation Technologies Service Application: Windows Activation Technologies Service Reason: analysis of digital signature Application path: C:\Windows\System32\Wat\WatAdminSvc.exe Time: 11/8/2017 2:57 PM 08.11.2017 14.54.11 Search for application updates Search completed, no available updates Important updates available: 0 Recommended updates available: 0 Started: Automatically Status: Completed Time: 11/8/2017 2:54 PM 08.11.2017 14.26.11 Rootkit Scan No threats detected Detected: 0 Deleted: 0 Not disinfected: 0 Release date of databases used for scan: 11/8/2017 8:22 AM Total duration: 27 minutes, 40 seconds Completion time: 11/8/2017 2:53 PM 08.11.2017 14.14.21 Application added to the Trusted group Microsoft Office Click-to-Run Integrator Application: Microsoft Office Click-to-Run Integrator Reason: analysis of digital signature Application path: C:\Program Files (x86)\Microsoft Office\root\Integration\Integrator.exe Time: 11/8/2017 2:14 PM 08.11.2017 14.14.03 Application added to the Trusted group Microsoft Office Click-to-Run (SxS) Application: Microsoft Office Click-to-Run (SxS) Reason: analysis of digital signature Application path: C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe Time: 11/8/2017 2:14 PM 08.11.2017 14.13.38 Update of databases and application modules Completed. Average download speed:: 174.77 KB/s Status:: Completed. Downloaded and updated:: 3.05 MB Total duration: 2 minutes, 26 seconds Time: 11/8/2017 2:13 PM 08.11.2017 14.12.05 Application added to the Trusted group Microsoft Office Click-to-Run (SxS) Application: Microsoft Office Click-to-Run (SxS) Reason: analysis of digital signature Application path: C:\Program Files\Common Files\Microsoft Shared\ClickToRun\Updates\16.0.8625.2121\OfficeClickToRun.exe Time: 11/8/2017 2:12 PM 08.11.2017 13.57.36 Task started Web Anti-Virus Time: 11/8/2017 1:57 PM 08.11.2017 13.57.36 Task started System Watcher Time: 11/8/2017 1:57 PM 08.11.2017 13.57.36 Task started IM Anti-Virus Time: 11/8/2017 1:57 PM 08.11.2017 13.57.36 Task started Network Attack Blocker Time: 11/8/2017 1:57 PM 08.11.2017 13.57.36 Task started Mail Anti-Virus Time: 11/8/2017 1:57 PM 08.11.2017 13.56.13 Application added to the Trusted group mcci+McciCMService Application: mcci+McciCMService Reason: KSN information Application path: C:\Program Files (x86)\Common Files\Motive\pcCMService.exe Time: 11/8/2017 1:56 PM 08.11.2017 13.56.10 Task started Firewall Time: 11/8/2017 1:56 PM 08.11.2017 13.56.10 Task started File Anti-Virus Time: 11/8/2017 1:56 PM 08.11.2017 13.56.10 Task started Application Control Time: 11/8/2017 1:56 PM 08.11.2017 13.52.39 Application added to the Trusted group mcci+McciContextHookShim Application: mcci+McciContextHookShim Reason: KSN information Application path: C:\Program Files (x86)\Common Files\Motive\pcContextHookShim.exe Time: 11/8/2017 1:52 PM 08.11.2017 13.52.18 Task started Web Anti-Virus Time: 11/8/2017 1:52 PM 08.11.2017 13.52.18 Task started System Watcher Time: 11/8/2017 1:52 PM 08.11.2017 13.52.17 Task started IM Anti-Virus Time: 11/8/2017 1:52 PM 08.11.2017 13.52.17 Task started Mail Anti-Virus Time: 11/8/2017 1:52 PM 08.11.2017 13.52.17 Task started Network Attack Blocker Time: 11/8/2017 1:52 PM 08.11.2017 13.50.53 Task started Firewall Time: 11/8/2017 1:50 PM 08.11.2017 13.50.53 Task started File Anti-Virus Time: 11/8/2017 1:50 PM 08.11.2017 13.50.53 Task started Application Control Time: 11/8/2017 1:50 PM 07.11.2017 15.29.06 Task started System Watcher Time: 11/7/2017 3:29 PM 07.11.2017 15.29.06 Task started Web Anti-Virus Time: 11/7/2017 3:29 PM 07.11.2017 15.29.06 Task started Network Attack Blocker Time: 11/7/2017 3:29 PM 07.11.2017 15.29.06 Task started Mail Anti-Virus Time: 11/7/2017 3:29 PM 07.11.2017 15.29.06 Task started IM Anti-Virus Time: 11/7/2017 3:29 PM 07.11.2017 15.27.41 Task started Application Control Time: 11/7/2017 3:27 PM 07.11.2017 15.27.41 Task started File Anti-Virus Time: 11/7/2017 3:27 PM 07.11.2017 15.27.41 Task started Firewall Time: 11/7/2017 3:27 PM 06.11.2017 17.48.34 Full Scan No threats detected Detected: 0 Deleted: 0 Not disinfected: 0 Release date of databases used for scan: 11/6/2017 1:15 PM Total duration: 15 minutes, 47 seconds Completion time: 11/6/2017 6:04 PM 06.11.2017 17.45.51 Suspicious action was blocked Console Window Host Action: Access memory of other processes Application: Console Window Host Application path: C:\Windows\System32\conhost.exe Time: 11/6/2017 5:45 PM 06.11.2017 17.45.51 Suspicious action was blocked Console Window Host Action: Read memory from other processes Application: Console Window Host Application path: C:\Windows\System32\conhost.exe Time: 11/6/2017 5:45 PM 06.11.2017 17.45.51 Suspicious action was blocked Console Window Host Action: Duplicate internal process handle Application: Console Window Host Application path: C:\Windows\System32\conhost.exe Time: 11/6/2017 5:45 PM 06.11.2017 17.45.51 Suspicious action was blocked Console Window Host Action: Perform code injection Application: Console Window Host Application path: C:\Windows\System32\conhost.exe Time: 11/6/2017 5:45 PM 06.11.2017 17.45.48 Suspicious action was blocked mcci+McciTrayApp Action: Hook incoming messages of the stream Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:45 PM 06.11.2017 17.45.48 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:45 PM 06.11.2017 17.45.48 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:45 PM 06.11.2017 17.45.48 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:45 PM 06.11.2017 17.45.48 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:45 PM 06.11.2017 17.45.48 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:45 PM 06.11.2017 17.45.48 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:45 PM 06.11.2017 17.45.47 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:45 PM 06.11.2017 17.45.47 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:45 PM 06.11.2017 17.45.47 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:45 PM 06.11.2017 17.45.47 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:45 PM 06.11.2017 17.45.47 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:45 PM 06.11.2017 17.45.47 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:45 PM 06.11.2017 17.45.32 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:45 PM 06.11.2017 17.45.32 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:45 PM 06.11.2017 17.45.32 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:45 PM 06.11.2017 17.45.32 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:45 PM 06.11.2017 17.45.32 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:45 PM 06.11.2017 17.45.32 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:45 PM 06.11.2017 17.45.32 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:45 PM 06.11.2017 17.45.32 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:45 PM 06.11.2017 17.45.32 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:45 PM 06.11.2017 17.45.32 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:45 PM 06.11.2017 17.45.32 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:45 PM 06.11.2017 17.45.32 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:45 PM 06.11.2017 17.45.02 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:45 PM 06.11.2017 17.45.02 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:45 PM 06.11.2017 17.45.02 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:45 PM 06.11.2017 17.45.02 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:45 PM 06.11.2017 17.45.02 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:45 PM 06.11.2017 17.45.02 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:45 PM 06.11.2017 17.45.02 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:45 PM 06.11.2017 17.45.02 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:45 PM 06.11.2017 17.45.02 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:45 PM 06.11.2017 17.45.02 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:45 PM 06.11.2017 17.45.02 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:45 PM 06.11.2017 17.45.02 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:45 PM 06.11.2017 17.44.40 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:44 PM 06.11.2017 17.44.40 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:44 PM 06.11.2017 17.44.40 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:44 PM 06.11.2017 17.44.40 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:44 PM 06.11.2017 17.44.40 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:44 PM 06.11.2017 17.44.40 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:44 PM 06.11.2017 17.44.40 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:44 PM 06.11.2017 17.44.40 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:44 PM 06.11.2017 17.44.40 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:44 PM 06.11.2017 17.44.40 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:44 PM 06.11.2017 17.44.40 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:44 PM 06.11.2017 17.44.40 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:44 PM 06.11.2017 17.44.26 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:44 PM 06.11.2017 17.44.26 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:44 PM 06.11.2017 17.44.26 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:44 PM 06.11.2017 17.44.26 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:44 PM 06.11.2017 17.44.26 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:44 PM 06.11.2017 17.44.26 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:44 PM 06.11.2017 17.44.26 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:44 PM 06.11.2017 17.44.26 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:44 PM 06.11.2017 17.44.26 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:44 PM 06.11.2017 17.44.26 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:44 PM 06.11.2017 17.44.26 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:44 PM 06.11.2017 17.44.26 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:44 PM 06.11.2017 17.44.08 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:44 PM 06.11.2017 17.44.08 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:44 PM 06.11.2017 17.44.08 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:44 PM 06.11.2017 17.44.08 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:44 PM 06.11.2017 17.44.08 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:44 PM 06.11.2017 17.44.08 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:44 PM 06.11.2017 17.44.08 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:44 PM 06.11.2017 17.44.08 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:44 PM 06.11.2017 17.44.08 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:44 PM 06.11.2017 17.44.08 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:44 PM 06.11.2017 17.44.08 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:44 PM 06.11.2017 17.44.08 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:44 PM 06.11.2017 17.43.54 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:43 PM 06.11.2017 17.43.54 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:43 PM 06.11.2017 17.43.54 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:43 PM 06.11.2017 17.43.54 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:43 PM 06.11.2017 17.43.54 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:43 PM 06.11.2017 17.43.54 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:43 PM 06.11.2017 17.43.54 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:43 PM 06.11.2017 17.43.54 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:43 PM 06.11.2017 17.43.54 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:43 PM 06.11.2017 17.43.54 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:43 PM 06.11.2017 17.43.54 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:43 PM 06.11.2017 17.43.54 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:43 PM 06.11.2017 17.43.21 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:43 PM 06.11.2017 17.43.21 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:43 PM 06.11.2017 17.43.21 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:43 PM 06.11.2017 17.43.21 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:43 PM 06.11.2017 17.43.21 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:43 PM 06.11.2017 17.43.21 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:43 PM 06.11.2017 17.43.21 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:43 PM 06.11.2017 17.43.21 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:43 PM 06.11.2017 17.43.21 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:43 PM 06.11.2017 17.43.21 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:43 PM 06.11.2017 17.43.21 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:43 PM 06.11.2017 17.43.21 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:43 PM 06.11.2017 17.43.16 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:43 PM 06.11.2017 17.43.16 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:43 PM 06.11.2017 17.43.16 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:43 PM 06.11.2017 17.43.16 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:43 PM 06.11.2017 17.43.16 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:43 PM 06.11.2017 17.43.16 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:43 PM 06.11.2017 17.43.16 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:43 PM 06.11.2017 17.43.16 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:43 PM 06.11.2017 17.43.16 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:43 PM 06.11.2017 17.43.16 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:43 PM 06.11.2017 17.43.16 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:43 PM 06.11.2017 17.43.16 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:43 PM 06.11.2017 17.42.30 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:42 PM 06.11.2017 17.42.30 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:42 PM 06.11.2017 17.42.30 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:42 PM 06.11.2017 17.42.30 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:42 PM 06.11.2017 17.42.30 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:42 PM 06.11.2017 17.42.30 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:42 PM 06.11.2017 17.42.30 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:42 PM 06.11.2017 17.42.30 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:42 PM 06.11.2017 17.42.30 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:42 PM 06.11.2017 17.42.30 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:42 PM 06.11.2017 17.42.30 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:42 PM 06.11.2017 17.42.30 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:42 PM 06.11.2017 17.41.30 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:41 PM 06.11.2017 17.41.30 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:41 PM 06.11.2017 17.41.30 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:41 PM 06.11.2017 17.41.30 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:41 PM 06.11.2017 17.41.30 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:41 PM 06.11.2017 17.41.30 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:41 PM 06.11.2017 17.41.29 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:41 PM 06.11.2017 17.41.29 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:41 PM 06.11.2017 17.41.29 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:41 PM 06.11.2017 17.41.29 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:41 PM 06.11.2017 17.41.29 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:41 PM 06.11.2017 17.41.29 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:41 PM 06.11.2017 17.41.17 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:41 PM 06.11.2017 17.41.17 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:41 PM 06.11.2017 17.41.17 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:41 PM 06.11.2017 17.41.17 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:41 PM 06.11.2017 17.41.17 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:41 PM 06.11.2017 17.41.17 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:41 PM 06.11.2017 17.41.17 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:41 PM 06.11.2017 17.41.17 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:41 PM 06.11.2017 17.41.17 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:41 PM 06.11.2017 17.41.17 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:41 PM 06.11.2017 17.41.17 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:41 PM 06.11.2017 17.41.17 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:41 PM 06.11.2017 17.41.10 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:41 PM 06.11.2017 17.41.10 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:41 PM 06.11.2017 17.41.10 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:41 PM 06.11.2017 17.41.10 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:41 PM 06.11.2017 17.41.10 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:41 PM 06.11.2017 17.41.10 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:41 PM 06.11.2017 17.41.10 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:41 PM 06.11.2017 17.41.10 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:41 PM 06.11.2017 17.41.10 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:41 PM 06.11.2017 17.41.10 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:41 PM 06.11.2017 17.41.10 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:41 PM 06.11.2017 17.41.10 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:41 PM 06.11.2017 17.40.53 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:40 PM 06.11.2017 17.40.53 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:40 PM 06.11.2017 17.40.53 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:40 PM 06.11.2017 17.40.53 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:40 PM 06.11.2017 17.40.53 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:40 PM 06.11.2017 17.40.53 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:40 PM 06.11.2017 17.40.53 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:40 PM 06.11.2017 17.40.53 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:40 PM 06.11.2017 17.40.53 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:40 PM 06.11.2017 17.40.53 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:40 PM 06.11.2017 17.40.53 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:40 PM 06.11.2017 17.40.53 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:40 PM 06.11.2017 17.40.48 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:40 PM 06.11.2017 17.40.48 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:40 PM 06.11.2017 17.40.48 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:40 PM 06.11.2017 17.40.48 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:40 PM 06.11.2017 17.40.48 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:40 PM 06.11.2017 17.40.48 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:40 PM 06.11.2017 17.40.48 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:40 PM 06.11.2017 17.40.48 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:40 PM 06.11.2017 17.40.48 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:40 PM 06.11.2017 17.40.48 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:40 PM 06.11.2017 17.40.48 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:40 PM 06.11.2017 17.40.48 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:40 PM 06.11.2017 17.40.26 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:40 PM 06.11.2017 17.40.26 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:40 PM 06.11.2017 17.40.26 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:40 PM 06.11.2017 17.40.26 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:40 PM 06.11.2017 17.40.26 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:40 PM 06.11.2017 17.40.26 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:40 PM 06.11.2017 17.40.26 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:40 PM 06.11.2017 17.40.26 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:40 PM 06.11.2017 17.40.26 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:40 PM 06.11.2017 17.40.26 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:40 PM 06.11.2017 17.40.26 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:40 PM 06.11.2017 17.40.26 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:40 PM 06.11.2017 17.40.20 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:40 PM 06.11.2017 17.40.20 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:40 PM 06.11.2017 17.40.20 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:40 PM 06.11.2017 17.40.20 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:40 PM 06.11.2017 17.40.20 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:40 PM 06.11.2017 17.40.20 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:40 PM 06.11.2017 17.40.20 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:40 PM 06.11.2017 17.40.20 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:40 PM 06.11.2017 17.40.20 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:40 PM 06.11.2017 17.40.20 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:40 PM 06.11.2017 17.40.20 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:40 PM 06.11.2017 17.40.20 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:40 PM 06.11.2017 17.38.02 Suspicious action was blocked Google Installer Action: Read memory from other processes Application: Google Installer Application path: C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Time: 11/6/2017 5:38 PM 06.11.2017 17.38.02 Suspicious action was blocked Google Installer Action: Read memory from other processes Application: Google Installer Application path: C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Time: 11/6/2017 5:38 PM 06.11.2017 17.38.02 Suspicious action was blocked Google Installer Action: Read memory from other processes Application: Google Installer Application path: C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Time: 11/6/2017 5:38 PM 06.11.2017 17.38.02 Suspicious action was blocked Google Installer Action: Read memory from other processes Application: Google Installer Application path: C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Time: 11/6/2017 5:38 PM 06.11.2017 17.38.02 Suspicious action was blocked Google Installer Action: Read memory from other processes Application: Google Installer Application path: C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Time: 11/6/2017 5:38 PM 06.11.2017 17.38.02 Suspicious action was blocked Google Installer Action: Read memory from other processes Application: Google Installer Application path: C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Time: 11/6/2017 5:38 PM 06.11.2017 17.38.01 Suspicious action was blocked Google Installer Action: Read memory from other processes Application: Google Installer Application path: C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Time: 11/6/2017 5:38 PM 06.11.2017 17.38.01 Suspicious action was blocked Google Installer Action: Read memory from other processes Application: Google Installer Application path: C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Time: 11/6/2017 5:38 PM 06.11.2017 17.38.01 Suspicious action was blocked Google Installer Action: Read memory from other processes Application: Google Installer Application path: C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Time: 11/6/2017 5:38 PM 06.11.2017 17.38.01 Suspicious action was blocked Google Installer Action: Read memory from other processes Application: Google Installer Application path: C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Time: 11/6/2017 5:38 PM 06.11.2017 17.38.01 Suspicious action was blocked Google Installer Action: Read memory from other processes Application: Google Installer Application path: C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Time: 11/6/2017 5:38 PM 06.11.2017 17.38.01 Suspicious action was blocked Google Installer Action: Read memory from other processes Application: Google Installer Application path: C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Time: 11/6/2017 5:38 PM 06.11.2017 17.35.40 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:35 PM 06.11.2017 17.35.40 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:35 PM 06.11.2017 17.35.40 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:35 PM 06.11.2017 17.35.40 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:35 PM 06.11.2017 17.35.40 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:35 PM 06.11.2017 17.35.40 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:35 PM 06.11.2017 17.35.39 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:35 PM 06.11.2017 17.35.39 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:35 PM 06.11.2017 17.35.39 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:35 PM 06.11.2017 17.35.39 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:35 PM 06.11.2017 17.35.39 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:35 PM 06.11.2017 17.35.39 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:35 PM 06.11.2017 17.35.32 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:35 PM 06.11.2017 17.35.32 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:35 PM 06.11.2017 17.35.32 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:35 PM 06.11.2017 17.35.32 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:35 PM 06.11.2017 17.35.32 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:35 PM 06.11.2017 17.35.32 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:35 PM 06.11.2017 17.35.32 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:35 PM 06.11.2017 17.35.32 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:35 PM 06.11.2017 17.35.32 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:35 PM 06.11.2017 17.35.32 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:35 PM 06.11.2017 17.35.32 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:35 PM 06.11.2017 17.35.32 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:35 PM 06.11.2017 17.33.03 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:33 PM 06.11.2017 17.33.03 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:33 PM 06.11.2017 17.33.03 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:33 PM 06.11.2017 17.33.03 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:33 PM 06.11.2017 17.33.03 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:33 PM 06.11.2017 17.33.03 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:33 PM 06.11.2017 17.33.03 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:33 PM 06.11.2017 17.33.03 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:33 PM 06.11.2017 17.33.03 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:33 PM 06.11.2017 17.33.03 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:33 PM 06.11.2017 17.33.03 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:33 PM 06.11.2017 17.33.03 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:33 PM 06.11.2017 17.32.57 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:32 PM 06.11.2017 17.32.57 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:32 PM 06.11.2017 17.32.57 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:32 PM 06.11.2017 17.32.57 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:32 PM 06.11.2017 17.32.57 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:32 PM 06.11.2017 17.32.57 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:32 PM 06.11.2017 17.32.57 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:32 PM 06.11.2017 17.32.57 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:32 PM 06.11.2017 17.32.57 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:32 PM 06.11.2017 17.32.57 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:32 PM 06.11.2017 17.32.57 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:32 PM 06.11.2017 17.32.57 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:32 PM 06.11.2017 17.32.51 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:32 PM 06.11.2017 17.32.51 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:32 PM 06.11.2017 17.32.51 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:32 PM 06.11.2017 17.32.51 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:32 PM 06.11.2017 17.32.51 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:32 PM 06.11.2017 17.32.51 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:32 PM 06.11.2017 17.32.51 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:32 PM 06.11.2017 17.32.51 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:32 PM 06.11.2017 17.32.51 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:32 PM 06.11.2017 17.32.51 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:32 PM 06.11.2017 17.32.51 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:32 PM 06.11.2017 17.32.51 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:32 PM 06.11.2017 17.32.46 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:32 PM 06.11.2017 17.32.46 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:32 PM 06.11.2017 17.32.46 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:32 PM 06.11.2017 17.32.46 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:32 PM 06.11.2017 17.32.46 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:32 PM 06.11.2017 17.32.46 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:32 PM 06.11.2017 17.32.46 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:32 PM 06.11.2017 17.32.46 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:32 PM 06.11.2017 17.32.46 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:32 PM 06.11.2017 17.32.46 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:32 PM 06.11.2017 17.32.46 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:32 PM 06.11.2017 17.32.46 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:32 PM 06.11.2017 17.31.59 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:31 PM 06.11.2017 17.31.59 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:31 PM 06.11.2017 17.31.59 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:31 PM 06.11.2017 17.31.59 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:31 PM 06.11.2017 17.31.59 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:31 PM 06.11.2017 17.31.59 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:31 PM 06.11.2017 17.31.59 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:31 PM 06.11.2017 17.31.59 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:31 PM 06.11.2017 17.31.59 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:31 PM 06.11.2017 17.31.59 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:31 PM 06.11.2017 17.31.59 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:31 PM 06.11.2017 17.31.59 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:31 PM 06.11.2017 17.31.21 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:31 PM 06.11.2017 17.31.21 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:31 PM 06.11.2017 17.31.21 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:31 PM 06.11.2017 17.31.21 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:31 PM 06.11.2017 17.31.21 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:31 PM 06.11.2017 17.31.21 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:31 PM 06.11.2017 17.31.21 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:31 PM 06.11.2017 17.31.21 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:31 PM 06.11.2017 17.31.21 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:31 PM 06.11.2017 17.31.21 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:31 PM 06.11.2017 17.31.21 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:31 PM 06.11.2017 17.31.21 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:31 PM 06.11.2017 17.27.57 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:27 PM 06.11.2017 17.27.57 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:27 PM 06.11.2017 17.27.57 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:27 PM 06.11.2017 17.27.57 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:27 PM 06.11.2017 17.27.57 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:27 PM 06.11.2017 17.27.57 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:27 PM 06.11.2017 17.27.57 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:27 PM 06.11.2017 17.27.57 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:27 PM 06.11.2017 17.27.57 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:27 PM 06.11.2017 17.27.57 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:27 PM 06.11.2017 17.27.57 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:27 PM 06.11.2017 17.27.57 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:27 PM 06.11.2017 17.27.51 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:27 PM 06.11.2017 17.27.51 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:27 PM 06.11.2017 17.27.51 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:27 PM 06.11.2017 17.27.51 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:27 PM 06.11.2017 17.27.51 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:27 PM 06.11.2017 17.27.51 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:27 PM 06.11.2017 17.27.51 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:27 PM 06.11.2017 17.27.51 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:27 PM 06.11.2017 17.27.51 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:27 PM 06.11.2017 17.27.51 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:27 PM 06.11.2017 17.27.51 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:27 PM 06.11.2017 17.27.51 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:27 PM 06.11.2017 17.27.41 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:27 PM 06.11.2017 17.27.41 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:27 PM 06.11.2017 17.27.41 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:27 PM 06.11.2017 17.27.41 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:27 PM 06.11.2017 17.27.41 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:27 PM 06.11.2017 17.27.41 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:27 PM 06.11.2017 17.27.41 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:27 PM 06.11.2017 17.27.41 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:27 PM 06.11.2017 17.27.41 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:27 PM 06.11.2017 17.27.41 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:27 PM 06.11.2017 17.27.41 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:27 PM 06.11.2017 17.27.41 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:27 PM 06.11.2017 17.27.36 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:27 PM 06.11.2017 17.27.36 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:27 PM 06.11.2017 17.27.36 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:27 PM 06.11.2017 17.27.36 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:27 PM 06.11.2017 17.27.36 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:27 PM 06.11.2017 17.27.36 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:27 PM 06.11.2017 17.27.36 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:27 PM 06.11.2017 17.27.36 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:27 PM 06.11.2017 17.27.36 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:27 PM 06.11.2017 17.27.36 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:27 PM 06.11.2017 17.27.36 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:27 PM 06.11.2017 17.27.36 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:27 PM 06.11.2017 17.27.15 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:27 PM 06.11.2017 17.27.15 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:27 PM 06.11.2017 17.27.15 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:27 PM 06.11.2017 17.27.15 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:27 PM 06.11.2017 17.27.15 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:27 PM 06.11.2017 17.27.15 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:27 PM 06.11.2017 17.27.15 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:27 PM 06.11.2017 17.27.15 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:27 PM 06.11.2017 17.27.15 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:27 PM 06.11.2017 17.27.15 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:27 PM 06.11.2017 17.27.15 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:27 PM 06.11.2017 17.27.15 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:27 PM 06.11.2017 17.27.12 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:27 PM 06.11.2017 17.27.12 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:27 PM 06.11.2017 17.27.12 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:27 PM 06.11.2017 17.27.12 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:27 PM 06.11.2017 17.27.12 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:27 PM 06.11.2017 17.27.12 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:27 PM 06.11.2017 17.27.12 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:27 PM 06.11.2017 17.27.12 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:27 PM 06.11.2017 17.27.12 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:27 PM 06.11.2017 17.27.12 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:27 PM 06.11.2017 17.27.12 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:27 PM 06.11.2017 17.27.12 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:27 PM 06.11.2017 17.27.06 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:27 PM 06.11.2017 17.27.06 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:27 PM 06.11.2017 17.27.06 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:27 PM 06.11.2017 17.27.06 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:27 PM 06.11.2017 17.27.06 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:27 PM 06.11.2017 17.27.05 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:27 PM 06.11.2017 17.27.05 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:27 PM 06.11.2017 17.27.05 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:27 PM 06.11.2017 17.27.05 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:27 PM 06.11.2017 17.27.05 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:27 PM 06.11.2017 17.27.05 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:27 PM 06.11.2017 17.27.05 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:27 PM 06.11.2017 17.20.19 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:20 PM 06.11.2017 17.20.19 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:20 PM 06.11.2017 17.20.19 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:20 PM 06.11.2017 17.20.19 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:20 PM 06.11.2017 17.20.19 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:20 PM 06.11.2017 17.20.19 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:20 PM 06.11.2017 17.20.19 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:20 PM 06.11.2017 17.20.19 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:20 PM 06.11.2017 17.20.19 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:20 PM 06.11.2017 17.20.19 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:20 PM 06.11.2017 17.20.19 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:20 PM 06.11.2017 17.20.19 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:20 PM 06.11.2017 17.20.12 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:20 PM 06.11.2017 17.20.12 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:20 PM 06.11.2017 17.20.12 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:20 PM 06.11.2017 17.20.12 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:20 PM 06.11.2017 17.20.12 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:20 PM 06.11.2017 17.20.12 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:20 PM 06.11.2017 17.20.12 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:20 PM 06.11.2017 17.20.12 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:20 PM 06.11.2017 17.20.12 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:20 PM 06.11.2017 17.20.12 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:20 PM 06.11.2017 17.20.12 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:20 PM 06.11.2017 17.20.12 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:20 PM 06.11.2017 17.17.59 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:17 PM 06.11.2017 17.17.59 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:17 PM 06.11.2017 17.17.59 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:17 PM 06.11.2017 17.17.59 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:17 PM 06.11.2017 17.17.59 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:17 PM 06.11.2017 17.17.59 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:17 PM 06.11.2017 17.17.59 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:17 PM 06.11.2017 17.17.59 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:17 PM 06.11.2017 17.17.59 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:17 PM 06.11.2017 17.17.59 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:17 PM 06.11.2017 17.17.59 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:17 PM 06.11.2017 17.17.59 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:17 PM 06.11.2017 17.14.17 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:14 PM 06.11.2017 17.14.17 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:14 PM 06.11.2017 17.14.17 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:14 PM 06.11.2017 17.14.17 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:14 PM 06.11.2017 17.14.17 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:14 PM 06.11.2017 17.14.17 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:14 PM 06.11.2017 17.14.17 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:14 PM 06.11.2017 17.14.17 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:14 PM 06.11.2017 17.14.17 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:14 PM 06.11.2017 17.14.17 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:14 PM 06.11.2017 17.14.17 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:14 PM 06.11.2017 17.14.17 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:14 PM 06.11.2017 17.13.26 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:13 PM 06.11.2017 17.13.26 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:13 PM 06.11.2017 17.13.26 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:13 PM 06.11.2017 17.13.26 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:13 PM 06.11.2017 17.13.26 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:13 PM 06.11.2017 17.13.26 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:13 PM 06.11.2017 17.13.26 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:13 PM 06.11.2017 17.13.26 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:13 PM 06.11.2017 17.13.26 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:13 PM 06.11.2017 17.13.26 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:13 PM 06.11.2017 17.13.26 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:13 PM 06.11.2017 17.13.26 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:13 PM 06.11.2017 17.08.39 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:08 PM 06.11.2017 17.08.39 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:08 PM 06.11.2017 17.08.39 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:08 PM 06.11.2017 17.08.39 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:08 PM 06.11.2017 17.08.39 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:08 PM 06.11.2017 17.08.39 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:08 PM 06.11.2017 17.08.39 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:08 PM 06.11.2017 17.08.39 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:08 PM 06.11.2017 17.08.39 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:08 PM 06.11.2017 17.08.39 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:08 PM 06.11.2017 17.08.39 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:08 PM 06.11.2017 17.08.39 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:08 PM 06.11.2017 17.07.50 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:07 PM 06.11.2017 17.07.50 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:07 PM 06.11.2017 17.07.50 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:07 PM 06.11.2017 17.07.50 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:07 PM 06.11.2017 17.07.50 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:07 PM 06.11.2017 17.07.50 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:07 PM 06.11.2017 17.07.50 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:07 PM 06.11.2017 17.07.50 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:07 PM 06.11.2017 17.07.50 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:07 PM 06.11.2017 17.07.50 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:07 PM 06.11.2017 17.07.50 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:07 PM 06.11.2017 17.07.50 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:07 PM 06.11.2017 17.07.01 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:07 PM 06.11.2017 17.07.01 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:07 PM 06.11.2017 17.07.01 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:07 PM 06.11.2017 17.07.01 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:07 PM 06.11.2017 17.07.01 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:07 PM 06.11.2017 17.07.01 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:07 PM 06.11.2017 17.07.01 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:07 PM 06.11.2017 17.07.01 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:07 PM 06.11.2017 17.07.01 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:07 PM 06.11.2017 17.07.01 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:07 PM 06.11.2017 17.07.01 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:07 PM 06.11.2017 17.07.01 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:07 PM 06.11.2017 17.06.46 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:06 PM 06.11.2017 17.06.46 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:06 PM 06.11.2017 17.06.46 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:06 PM 06.11.2017 17.06.46 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:06 PM 06.11.2017 17.06.46 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:06 PM 06.11.2017 17.06.46 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:06 PM 06.11.2017 17.06.46 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:06 PM 06.11.2017 17.06.46 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:06 PM 06.11.2017 17.06.46 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:06 PM 06.11.2017 17.06.46 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:06 PM 06.11.2017 17.06.46 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:06 PM 06.11.2017 17.06.46 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:06 PM 06.11.2017 17.06.34 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:06 PM 06.11.2017 17.06.34 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:06 PM 06.11.2017 17.06.34 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:06 PM 06.11.2017 17.06.34 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:06 PM 06.11.2017 17.06.34 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:06 PM 06.11.2017 17.06.34 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:06 PM 06.11.2017 17.06.34 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:06 PM 06.11.2017 17.06.34 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:06 PM 06.11.2017 17.06.34 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:06 PM 06.11.2017 17.06.34 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:06 PM 06.11.2017 17.06.34 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:06 PM 06.11.2017 17.06.34 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:06 PM 06.11.2017 17.06.07 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:06 PM 06.11.2017 17.06.07 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:06 PM 06.11.2017 17.06.07 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:06 PM 06.11.2017 17.06.07 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:06 PM 06.11.2017 17.06.07 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:06 PM 06.11.2017 17.06.07 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:06 PM 06.11.2017 17.06.07 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:06 PM 06.11.2017 17.06.07 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:06 PM 06.11.2017 17.06.07 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:06 PM 06.11.2017 17.06.07 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:06 PM 06.11.2017 17.06.07 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:06 PM 06.11.2017 17.06.07 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:06 PM 06.11.2017 17.05.51 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:05 PM 06.11.2017 17.05.51 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:05 PM 06.11.2017 17.05.51 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:05 PM 06.11.2017 17.05.51 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:05 PM 06.11.2017 17.05.51 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:05 PM 06.11.2017 17.05.51 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:05 PM 06.11.2017 17.05.51 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:05 PM 06.11.2017 17.05.51 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:05 PM 06.11.2017 17.05.51 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:05 PM 06.11.2017 17.05.51 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:05 PM 06.11.2017 17.05.51 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:05 PM 06.11.2017 17.05.51 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:05 PM 06.11.2017 17.05.41 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:05 PM 06.11.2017 17.05.41 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:05 PM 06.11.2017 17.05.41 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:05 PM 06.11.2017 17.05.41 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:05 PM 06.11.2017 17.05.41 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:05 PM 06.11.2017 17.05.41 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:05 PM 06.11.2017 17.05.41 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:05 PM 06.11.2017 17.05.41 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:05 PM 06.11.2017 17.05.41 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:05 PM 06.11.2017 17.05.41 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:05 PM 06.11.2017 17.05.41 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:05 PM 06.11.2017 17.05.41 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:05 PM 06.11.2017 17.05.34 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:05 PM 06.11.2017 17.05.34 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:05 PM 06.11.2017 17.05.34 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:05 PM 06.11.2017 17.05.34 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:05 PM 06.11.2017 17.05.34 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:05 PM 06.11.2017 17.05.34 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:05 PM 06.11.2017 17.05.34 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:05 PM 06.11.2017 17.05.34 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:05 PM 06.11.2017 17.05.34 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:05 PM 06.11.2017 17.05.34 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:05 PM 06.11.2017 17.05.34 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:05 PM 06.11.2017 17.05.34 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:05 PM 06.11.2017 17.05.29 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:05 PM 06.11.2017 17.05.29 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:05 PM 06.11.2017 17.05.29 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:05 PM 06.11.2017 17.05.29 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:05 PM 06.11.2017 17.05.29 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:05 PM 06.11.2017 17.05.29 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:05 PM 06.11.2017 17.05.29 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:05 PM 06.11.2017 17.05.29 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:05 PM 06.11.2017 17.05.29 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:05 PM 06.11.2017 17.05.29 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:05 PM 06.11.2017 17.05.29 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:05 PM 06.11.2017 17.05.29 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:05 PM 06.11.2017 17.02.30 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:02 PM 06.11.2017 17.02.30 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:02 PM 06.11.2017 17.02.30 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:02 PM 06.11.2017 17.02.30 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:02 PM 06.11.2017 17.02.30 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:02 PM 06.11.2017 17.02.30 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:02 PM 06.11.2017 17.02.30 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:02 PM 06.11.2017 17.02.30 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:02 PM 06.11.2017 17.02.30 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:02 PM 06.11.2017 17.02.30 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:02 PM 06.11.2017 17.02.30 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:02 PM 06.11.2017 17.02.30 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:02 PM 06.11.2017 17.02.16 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:02 PM 06.11.2017 17.02.16 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:02 PM 06.11.2017 17.02.16 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:02 PM 06.11.2017 17.02.16 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:02 PM 06.11.2017 17.02.16 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:02 PM 06.11.2017 17.02.16 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:02 PM 06.11.2017 17.02.16 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:02 PM 06.11.2017 17.02.16 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:02 PM 06.11.2017 17.02.16 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:02 PM 06.11.2017 17.02.16 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:02 PM 06.11.2017 17.02.16 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:02 PM 06.11.2017 17.02.16 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:02 PM 06.11.2017 17.02.07 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:02 PM 06.11.2017 17.02.07 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:02 PM 06.11.2017 17.02.07 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:02 PM 06.11.2017 17.02.07 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:02 PM 06.11.2017 17.02.07 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:02 PM 06.11.2017 17.02.07 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:02 PM 06.11.2017 17.02.07 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:02 PM 06.11.2017 17.02.07 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:02 PM 06.11.2017 17.02.07 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:02 PM 06.11.2017 17.02.07 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:02 PM 06.11.2017 17.02.07 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:02 PM 06.11.2017 17.02.07 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 5:02 PM 06.11.2017 16.59.01 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:59 PM 06.11.2017 16.59.01 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:59 PM 06.11.2017 16.59.01 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:59 PM 06.11.2017 16.59.01 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:59 PM 06.11.2017 16.59.01 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:59 PM 06.11.2017 16.59.01 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:59 PM 06.11.2017 16.59.01 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:59 PM 06.11.2017 16.59.01 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:59 PM 06.11.2017 16.59.01 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:59 PM 06.11.2017 16.59.01 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:59 PM 06.11.2017 16.59.01 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:59 PM 06.11.2017 16.59.01 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:59 PM 06.11.2017 16.56.52 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:56 PM 06.11.2017 16.56.52 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:56 PM 06.11.2017 16.56.52 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:56 PM 06.11.2017 16.56.52 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:56 PM 06.11.2017 16.56.52 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:56 PM 06.11.2017 16.56.52 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:56 PM 06.11.2017 16.56.52 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:56 PM 06.11.2017 16.56.52 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:56 PM 06.11.2017 16.56.52 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:56 PM 06.11.2017 16.56.52 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:56 PM 06.11.2017 16.56.52 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:56 PM 06.11.2017 16.56.52 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:56 PM 06.11.2017 16.55.34 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:55 PM 06.11.2017 16.55.34 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:55 PM 06.11.2017 16.55.34 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:55 PM 06.11.2017 16.55.34 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:55 PM 06.11.2017 16.55.34 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:55 PM 06.11.2017 16.55.34 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:55 PM 06.11.2017 16.55.34 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:55 PM 06.11.2017 16.55.34 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:55 PM 06.11.2017 16.55.34 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:55 PM 06.11.2017 16.55.34 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:55 PM 06.11.2017 16.55.34 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:55 PM 06.11.2017 16.55.34 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:55 PM 06.11.2017 16.52.38 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:52 PM 06.11.2017 16.52.38 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:52 PM 06.11.2017 16.52.38 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:52 PM 06.11.2017 16.52.38 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:52 PM 06.11.2017 16.52.38 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:52 PM 06.11.2017 16.52.38 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:52 PM 06.11.2017 16.52.38 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:52 PM 06.11.2017 16.52.38 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:52 PM 06.11.2017 16.52.38 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:52 PM 06.11.2017 16.52.38 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:52 PM 06.11.2017 16.52.38 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:52 PM 06.11.2017 16.52.38 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:52 PM 06.11.2017 16.52.22 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:52 PM 06.11.2017 16.52.22 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:52 PM 06.11.2017 16.52.22 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:52 PM 06.11.2017 16.52.22 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:52 PM 06.11.2017 16.52.22 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:52 PM 06.11.2017 16.52.22 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:52 PM 06.11.2017 16.52.22 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:52 PM 06.11.2017 16.52.22 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:52 PM 06.11.2017 16.52.22 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:52 PM 06.11.2017 16.52.22 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:52 PM 06.11.2017 16.52.22 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:52 PM 06.11.2017 16.52.22 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:52 PM 06.11.2017 16.52.00 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:52 PM 06.11.2017 16.52.00 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:52 PM 06.11.2017 16.52.00 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:52 PM 06.11.2017 16.52.00 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:52 PM 06.11.2017 16.52.00 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:52 PM 06.11.2017 16.52.00 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:52 PM 06.11.2017 16.52.00 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:52 PM 06.11.2017 16.52.00 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:52 PM 06.11.2017 16.52.00 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:52 PM 06.11.2017 16.52.00 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:52 PM 06.11.2017 16.52.00 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:52 PM 06.11.2017 16.52.00 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:52 PM 06.11.2017 16.51.50 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:51 PM 06.11.2017 16.51.50 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:51 PM 06.11.2017 16.51.50 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:51 PM 06.11.2017 16.51.50 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:51 PM 06.11.2017 16.51.50 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:51 PM 06.11.2017 16.51.50 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:51 PM 06.11.2017 16.51.50 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:51 PM 06.11.2017 16.51.50 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:51 PM 06.11.2017 16.51.50 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:51 PM 06.11.2017 16.51.50 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:51 PM 06.11.2017 16.51.50 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:51 PM 06.11.2017 16.51.50 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:51 PM 06.11.2017 16.51.45 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:51 PM 06.11.2017 16.51.45 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:51 PM 06.11.2017 16.51.45 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:51 PM 06.11.2017 16.51.45 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:51 PM 06.11.2017 16.51.45 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:51 PM 06.11.2017 16.51.45 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:51 PM 06.11.2017 16.51.45 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:51 PM 06.11.2017 16.51.45 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:51 PM 06.11.2017 16.51.45 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:51 PM 06.11.2017 16.51.45 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:51 PM 06.11.2017 16.51.45 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:51 PM 06.11.2017 16.51.45 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:51 PM 06.11.2017 16.50.17 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:50 PM 06.11.2017 16.50.17 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:50 PM 06.11.2017 16.50.17 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:50 PM 06.11.2017 16.50.17 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:50 PM 06.11.2017 16.50.17 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:50 PM 06.11.2017 16.50.17 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:50 PM 06.11.2017 16.50.17 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:50 PM 06.11.2017 16.50.17 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:50 PM 06.11.2017 16.50.17 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:50 PM 06.11.2017 16.50.17 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:50 PM 06.11.2017 16.50.17 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:50 PM 06.11.2017 16.50.17 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:50 PM 06.11.2017 16.50.02 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:50 PM 06.11.2017 16.50.02 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:50 PM 06.11.2017 16.50.02 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:50 PM 06.11.2017 16.50.02 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:50 PM 06.11.2017 16.50.02 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:50 PM 06.11.2017 16.50.02 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:50 PM 06.11.2017 16.50.02 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:50 PM 06.11.2017 16.50.02 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:50 PM 06.11.2017 16.50.02 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:50 PM 06.11.2017 16.50.02 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:50 PM 06.11.2017 16.50.02 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:50 PM 06.11.2017 16.50.02 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:50 PM 06.11.2017 16.49.57 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:49 PM 06.11.2017 16.49.57 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:49 PM 06.11.2017 16.49.57 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:49 PM 06.11.2017 16.49.57 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:49 PM 06.11.2017 16.49.57 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:49 PM 06.11.2017 16.49.57 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:49 PM 06.11.2017 16.49.57 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:49 PM 06.11.2017 16.49.57 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:49 PM 06.11.2017 16.49.57 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:49 PM 06.11.2017 16.49.57 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:49 PM 06.11.2017 16.49.57 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:49 PM 06.11.2017 16.49.57 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:49 PM 06.11.2017 16.49.54 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:49 PM 06.11.2017 16.49.54 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:49 PM 06.11.2017 16.49.54 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:49 PM 06.11.2017 16.49.54 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:49 PM 06.11.2017 16.49.54 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:49 PM 06.11.2017 16.49.54 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:49 PM 06.11.2017 16.49.47 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:49 PM 06.11.2017 16.49.47 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:49 PM 06.11.2017 16.49.47 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:49 PM 06.11.2017 16.49.47 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:49 PM 06.11.2017 16.49.47 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:49 PM 06.11.2017 16.49.47 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:49 PM 06.11.2017 16.49.47 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:49 PM 06.11.2017 16.49.47 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:49 PM 06.11.2017 16.49.47 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:49 PM 06.11.2017 16.49.47 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:49 PM 06.11.2017 16.49.47 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:49 PM 06.11.2017 16.49.47 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:49 PM 06.11.2017 16.49.36 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:49 PM 06.11.2017 16.49.36 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:49 PM 06.11.2017 16.49.36 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:49 PM 06.11.2017 16.49.36 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:49 PM 06.11.2017 16.49.36 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:49 PM 06.11.2017 16.49.36 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:49 PM 06.11.2017 16.49.35 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:49 PM 06.11.2017 16.49.35 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:49 PM 06.11.2017 16.49.35 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:49 PM 06.11.2017 16.49.35 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:49 PM 06.11.2017 16.49.35 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:49 PM 06.11.2017 16.49.35 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:49 PM 06.11.2017 16.48.19 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:48 PM 06.11.2017 16.48.19 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:48 PM 06.11.2017 16.48.19 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:48 PM 06.11.2017 16.48.19 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:48 PM 06.11.2017 16.48.19 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:48 PM 06.11.2017 16.48.19 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:48 PM 06.11.2017 16.48.19 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:48 PM 06.11.2017 16.48.19 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:48 PM 06.11.2017 16.48.19 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:48 PM 06.11.2017 16.48.19 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:48 PM 06.11.2017 16.48.19 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:48 PM 06.11.2017 16.48.19 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:48 PM 06.11.2017 16.47.50 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:47 PM 06.11.2017 16.47.50 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:47 PM 06.11.2017 16.47.50 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:47 PM 06.11.2017 16.47.50 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:47 PM 06.11.2017 16.47.50 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:47 PM 06.11.2017 16.47.50 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:47 PM 06.11.2017 16.47.50 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:47 PM 06.11.2017 16.47.50 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:47 PM 06.11.2017 16.47.50 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:47 PM 06.11.2017 16.47.50 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:47 PM 06.11.2017 16.47.50 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:47 PM 06.11.2017 16.47.50 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:47 PM 06.11.2017 16.45.41 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:45 PM 06.11.2017 16.45.41 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:45 PM 06.11.2017 16.45.41 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:45 PM 06.11.2017 16.45.41 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:45 PM 06.11.2017 16.45.41 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:45 PM 06.11.2017 16.45.41 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:45 PM 06.11.2017 16.45.41 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:45 PM 06.11.2017 16.45.41 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:45 PM 06.11.2017 16.45.41 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:45 PM 06.11.2017 16.45.41 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:45 PM 06.11.2017 16.45.41 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:45 PM 06.11.2017 16.45.41 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:45 PM 06.11.2017 16.45.10 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:45 PM 06.11.2017 16.45.10 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:45 PM 06.11.2017 16.45.10 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:45 PM 06.11.2017 16.45.10 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:45 PM 06.11.2017 16.45.10 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:45 PM 06.11.2017 16.45.10 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:45 PM 06.11.2017 16.45.10 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:45 PM 06.11.2017 16.45.10 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:45 PM 06.11.2017 16.45.10 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:45 PM 06.11.2017 16.45.10 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:45 PM 06.11.2017 16.45.10 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:45 PM 06.11.2017 16.45.10 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:45 PM 06.11.2017 16.42.45 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:42 PM 06.11.2017 16.42.45 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:42 PM 06.11.2017 16.42.45 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:42 PM 06.11.2017 16.42.45 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:42 PM 06.11.2017 16.42.45 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:42 PM 06.11.2017 16.42.45 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:42 PM 06.11.2017 16.42.45 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:42 PM 06.11.2017 16.42.45 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:42 PM 06.11.2017 16.42.45 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:42 PM 06.11.2017 16.42.45 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:42 PM 06.11.2017 16.42.45 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:42 PM 06.11.2017 16.42.45 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:42 PM 06.11.2017 16.41.56 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:41 PM 06.11.2017 16.41.56 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:41 PM 06.11.2017 16.41.56 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:41 PM 06.11.2017 16.41.56 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:41 PM 06.11.2017 16.41.56 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:41 PM 06.11.2017 16.41.56 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:41 PM 06.11.2017 16.41.56 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:41 PM 06.11.2017 16.41.56 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:41 PM 06.11.2017 16.41.56 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:41 PM 06.11.2017 16.41.56 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:41 PM 06.11.2017 16.41.56 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:41 PM 06.11.2017 16.41.56 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:41 PM 06.11.2017 16.41.50 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:41 PM 06.11.2017 16.41.50 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:41 PM 06.11.2017 16.41.50 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:41 PM 06.11.2017 16.41.50 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:41 PM 06.11.2017 16.41.50 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:41 PM 06.11.2017 16.41.50 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:41 PM 06.11.2017 16.41.50 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:41 PM 06.11.2017 16.41.50 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:41 PM 06.11.2017 16.41.50 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:41 PM 06.11.2017 16.41.50 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:41 PM 06.11.2017 16.41.50 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:41 PM 06.11.2017 16.41.50 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:41 PM 06.11.2017 16.41.20 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:41 PM 06.11.2017 16.41.20 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:41 PM 06.11.2017 16.41.20 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:41 PM 06.11.2017 16.41.20 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:41 PM 06.11.2017 16.41.20 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:41 PM 06.11.2017 16.41.20 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:41 PM 06.11.2017 16.41.20 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:41 PM 06.11.2017 16.41.20 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:41 PM 06.11.2017 16.41.20 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:41 PM 06.11.2017 16.41.20 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:41 PM 06.11.2017 16.41.20 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:41 PM 06.11.2017 16.41.20 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:41 PM 06.11.2017 16.41.17 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:41 PM 06.11.2017 16.41.17 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:41 PM 06.11.2017 16.41.17 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:41 PM 06.11.2017 16.41.17 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:41 PM 06.11.2017 16.41.17 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:41 PM 06.11.2017 16.41.17 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:41 PM 06.11.2017 16.41.17 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:41 PM 06.11.2017 16.41.17 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:41 PM 06.11.2017 16.41.17 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:41 PM 06.11.2017 16.41.17 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:41 PM 06.11.2017 16.41.17 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:41 PM 06.11.2017 16.41.17 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:41 PM 06.11.2017 16.41.09 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:41 PM 06.11.2017 16.41.09 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:41 PM 06.11.2017 16.41.09 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:41 PM 06.11.2017 16.41.09 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:41 PM 06.11.2017 16.41.09 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:41 PM 06.11.2017 16.41.09 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:41 PM 06.11.2017 16.41.09 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:41 PM 06.11.2017 16.41.09 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:41 PM 06.11.2017 16.41.09 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:41 PM 06.11.2017 16.41.09 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:41 PM 06.11.2017 16.41.09 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:41 PM 06.11.2017 16.41.09 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:41 PM 06.11.2017 16.40.22 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:40 PM 06.11.2017 16.40.22 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:40 PM 06.11.2017 16.40.22 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:40 PM 06.11.2017 16.40.22 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:40 PM 06.11.2017 16.40.22 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:40 PM 06.11.2017 16.40.22 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:40 PM 06.11.2017 16.40.22 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:40 PM 06.11.2017 16.40.22 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:40 PM 06.11.2017 16.40.22 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:40 PM 06.11.2017 16.40.22 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:40 PM 06.11.2017 16.40.22 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:40 PM 06.11.2017 16.40.22 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:40 PM 06.11.2017 16.39.47 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:39 PM 06.11.2017 16.39.47 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:39 PM 06.11.2017 16.39.47 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:39 PM 06.11.2017 16.39.47 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:39 PM 06.11.2017 16.39.47 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:39 PM 06.11.2017 16.39.47 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:39 PM 06.11.2017 16.39.47 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:39 PM 06.11.2017 16.39.47 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:39 PM 06.11.2017 16.39.47 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:39 PM 06.11.2017 16.39.47 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:39 PM 06.11.2017 16.39.47 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:39 PM 06.11.2017 16.39.47 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:39 PM 06.11.2017 16.39.38 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:39 PM 06.11.2017 16.39.38 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:39 PM 06.11.2017 16.39.38 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:39 PM 06.11.2017 16.39.38 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:39 PM 06.11.2017 16.39.38 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:39 PM 06.11.2017 16.39.38 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:39 PM 06.11.2017 16.39.38 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:39 PM 06.11.2017 16.39.38 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:39 PM 06.11.2017 16.39.38 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:39 PM 06.11.2017 16.39.38 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:39 PM 06.11.2017 16.39.38 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:39 PM 06.11.2017 16.39.38 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:39 PM 06.11.2017 16.39.09 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:39 PM 06.11.2017 16.39.09 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:39 PM 06.11.2017 16.39.09 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:39 PM 06.11.2017 16.39.09 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:39 PM 06.11.2017 16.39.09 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:39 PM 06.11.2017 16.39.09 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:39 PM 06.11.2017 16.39.09 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:39 PM 06.11.2017 16.39.09 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:39 PM 06.11.2017 16.39.09 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:39 PM 06.11.2017 16.39.09 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:39 PM 06.11.2017 16.39.09 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:39 PM 06.11.2017 16.39.09 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:39 PM 06.11.2017 16.38.52 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:38 PM 06.11.2017 16.38.52 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:38 PM 06.11.2017 16.38.52 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:38 PM 06.11.2017 16.38.52 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:38 PM 06.11.2017 16.38.52 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:38 PM 06.11.2017 16.38.52 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:38 PM 06.11.2017 16.38.52 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:38 PM 06.11.2017 16.38.52 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:38 PM 06.11.2017 16.38.52 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:38 PM 06.11.2017 16.38.52 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:38 PM 06.11.2017 16.38.52 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:38 PM 06.11.2017 16.38.52 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:38 PM 06.11.2017 16.36.29 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:36 PM 06.11.2017 16.36.29 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:36 PM 06.11.2017 16.36.29 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:36 PM 06.11.2017 16.36.29 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:36 PM 06.11.2017 16.36.29 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:36 PM 06.11.2017 16.36.29 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:36 PM 06.11.2017 16.36.29 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:36 PM 06.11.2017 16.36.29 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:36 PM 06.11.2017 16.36.29 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:36 PM 06.11.2017 16.36.29 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:36 PM 06.11.2017 16.36.29 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:36 PM 06.11.2017 16.36.29 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:36 PM 06.11.2017 16.36.21 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:36 PM 06.11.2017 16.36.21 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:36 PM 06.11.2017 16.36.21 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:36 PM 06.11.2017 16.36.21 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:36 PM 06.11.2017 16.36.21 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:36 PM 06.11.2017 16.36.21 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:36 PM 06.11.2017 16.36.21 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:36 PM 06.11.2017 16.36.21 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:36 PM 06.11.2017 16.36.21 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:36 PM 06.11.2017 16.36.21 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:36 PM 06.11.2017 16.36.21 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:36 PM 06.11.2017 16.36.21 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:36 PM 06.11.2017 16.35.57 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:35 PM 06.11.2017 16.35.57 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:35 PM 06.11.2017 16.35.57 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:35 PM 06.11.2017 16.35.57 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:35 PM 06.11.2017 16.35.57 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:35 PM 06.11.2017 16.35.57 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:35 PM 06.11.2017 16.35.57 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:35 PM 06.11.2017 16.35.57 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:35 PM 06.11.2017 16.35.57 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:35 PM 06.11.2017 16.35.57 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:35 PM 06.11.2017 16.35.57 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:35 PM 06.11.2017 16.35.57 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:35 PM 06.11.2017 16.35.51 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:35 PM 06.11.2017 16.35.51 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:35 PM 06.11.2017 16.35.51 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:35 PM 06.11.2017 16.35.51 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:35 PM 06.11.2017 16.35.51 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:35 PM 06.11.2017 16.35.51 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:35 PM 06.11.2017 16.35.51 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:35 PM 06.11.2017 16.35.51 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:35 PM 06.11.2017 16.35.51 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:35 PM 06.11.2017 16.35.51 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:35 PM 06.11.2017 16.35.51 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:35 PM 06.11.2017 16.35.51 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:35 PM 06.11.2017 16.35.31 Update of databases and application modules Completed. Average download speed:: 68.45 KB/s Status:: Completed. Downloaded and updated:: 282.87 KB Total duration: 1 minute, 3 seconds Time: 11/6/2017 4:35 PM 06.11.2017 16.34.52 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:34 PM 06.11.2017 16.34.52 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:34 PM 06.11.2017 16.34.52 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:34 PM 06.11.2017 16.34.52 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:34 PM 06.11.2017 16.34.52 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:34 PM 06.11.2017 16.34.52 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:34 PM 06.11.2017 16.34.52 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:34 PM 06.11.2017 16.34.52 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:34 PM 06.11.2017 16.34.52 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:34 PM 06.11.2017 16.34.52 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:34 PM 06.11.2017 16.34.52 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:34 PM 06.11.2017 16.34.52 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:34 PM 06.11.2017 16.34.08 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:34 PM 06.11.2017 16.34.08 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:34 PM 06.11.2017 16.34.08 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:34 PM 06.11.2017 16.34.08 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:34 PM 06.11.2017 16.34.08 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:34 PM 06.11.2017 16.34.08 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:34 PM 06.11.2017 16.34.08 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:34 PM 06.11.2017 16.34.08 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:34 PM 06.11.2017 16.34.08 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:34 PM 06.11.2017 16.34.08 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:34 PM 06.11.2017 16.34.08 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:34 PM 06.11.2017 16.34.08 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:34 PM 06.11.2017 16.33.58 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:33 PM 06.11.2017 16.33.58 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:33 PM 06.11.2017 16.33.58 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:33 PM 06.11.2017 16.33.58 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:33 PM 06.11.2017 16.33.58 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:33 PM 06.11.2017 16.33.58 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:33 PM 06.11.2017 16.33.58 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:33 PM 06.11.2017 16.33.58 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:33 PM 06.11.2017 16.33.58 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:33 PM 06.11.2017 16.33.58 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:33 PM 06.11.2017 16.33.58 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:33 PM 06.11.2017 16.33.58 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:33 PM 06.11.2017 16.33.53 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:33 PM 06.11.2017 16.33.53 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:33 PM 06.11.2017 16.33.53 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:33 PM 06.11.2017 16.33.53 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:33 PM 06.11.2017 16.33.53 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:33 PM 06.11.2017 16.33.53 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:33 PM 06.11.2017 16.33.53 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:33 PM 06.11.2017 16.33.53 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:33 PM 06.11.2017 16.33.53 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:33 PM 06.11.2017 16.33.53 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:33 PM 06.11.2017 16.33.53 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:33 PM 06.11.2017 16.33.53 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:33 PM 06.11.2017 16.33.46 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:33 PM 06.11.2017 16.33.46 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:33 PM 06.11.2017 16.33.46 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:33 PM 06.11.2017 16.33.46 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:33 PM 06.11.2017 16.33.46 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:33 PM 06.11.2017 16.33.46 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:33 PM 06.11.2017 16.33.46 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:33 PM 06.11.2017 16.33.46 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:33 PM 06.11.2017 16.33.46 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:33 PM 06.11.2017 16.33.46 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:33 PM 06.11.2017 16.33.46 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:33 PM 06.11.2017 16.33.46 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:33 PM 06.11.2017 16.33.37 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:33 PM 06.11.2017 16.33.37 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:33 PM 06.11.2017 16.33.37 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:33 PM 06.11.2017 16.33.37 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:33 PM 06.11.2017 16.33.37 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:33 PM 06.11.2017 16.33.37 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:33 PM 06.11.2017 16.33.37 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:33 PM 06.11.2017 16.33.37 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:33 PM 06.11.2017 16.33.37 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:33 PM 06.11.2017 16.33.37 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:33 PM 06.11.2017 16.33.37 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:33 PM 06.11.2017 16.33.37 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:33 PM 06.11.2017 16.33.33 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:33 PM 06.11.2017 16.33.33 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:33 PM 06.11.2017 16.33.33 Suspicious action was blocked mcci+McciTrayApp Action: Hook incoming messages of the stream Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:33 PM 06.11.2017 16.33.33 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:33 PM 06.11.2017 16.33.33 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:33 PM 06.11.2017 16.33.33 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:33 PM 06.11.2017 16.33.33 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:33 PM 06.11.2017 16.33.33 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:33 PM 06.11.2017 16.33.33 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:33 PM 06.11.2017 16.33.33 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:33 PM 06.11.2017 16.33.33 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:33 PM 06.11.2017 16.33.33 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:33 PM 06.11.2017 16.33.33 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:33 PM 06.11.2017 16.33.28 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:33 PM 06.11.2017 16.33.28 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:33 PM 06.11.2017 16.33.28 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:33 PM 06.11.2017 16.33.28 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:33 PM 06.11.2017 16.33.28 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:33 PM 06.11.2017 16.33.28 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:33 PM 06.11.2017 16.33.28 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:33 PM 06.11.2017 16.33.28 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:33 PM 06.11.2017 16.33.28 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:33 PM 06.11.2017 16.33.28 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:33 PM 06.11.2017 16.33.28 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:33 PM 06.11.2017 16.33.28 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:33 PM 06.11.2017 16.33.20 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:33 PM 06.11.2017 16.33.20 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:33 PM 06.11.2017 16.33.20 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:33 PM 06.11.2017 16.33.20 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:33 PM 06.11.2017 16.33.20 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:33 PM 06.11.2017 16.33.20 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:33 PM 06.11.2017 16.33.20 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:33 PM 06.11.2017 16.33.20 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:33 PM 06.11.2017 16.33.20 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:33 PM 06.11.2017 16.33.20 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:33 PM 06.11.2017 16.33.20 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:33 PM 06.11.2017 16.33.20 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:33 PM 06.11.2017 16.33.18 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:33 PM 06.11.2017 16.33.18 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:33 PM 06.11.2017 16.33.18 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:33 PM 06.11.2017 16.33.18 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:33 PM 06.11.2017 16.33.18 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:33 PM 06.11.2017 16.33.18 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:33 PM 06.11.2017 16.33.14 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:33 PM 06.11.2017 16.33.14 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:33 PM 06.11.2017 16.33.14 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:33 PM 06.11.2017 16.33.14 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:33 PM 06.11.2017 16.33.14 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:33 PM 06.11.2017 16.33.14 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:33 PM 06.11.2017 16.33.14 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:33 PM 06.11.2017 16.33.14 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:33 PM 06.11.2017 16.33.14 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:33 PM 06.11.2017 16.33.14 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:33 PM 06.11.2017 16.33.14 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:33 PM 06.11.2017 16.33.14 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:33 PM 06.11.2017 16.32.06 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:32 PM 06.11.2017 16.32.06 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:32 PM 06.11.2017 16.32.06 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:32 PM 06.11.2017 16.32.06 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:32 PM 06.11.2017 16.32.06 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:32 PM 06.11.2017 16.32.06 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:32 PM 06.11.2017 16.32.06 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:32 PM 06.11.2017 16.32.06 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:32 PM 06.11.2017 16.32.06 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:32 PM 06.11.2017 16.32.06 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:32 PM 06.11.2017 16.32.06 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:32 PM 06.11.2017 16.32.06 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:32 PM 06.11.2017 16.31.57 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:31 PM 06.11.2017 16.31.57 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:31 PM 06.11.2017 16.31.57 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:31 PM 06.11.2017 16.31.57 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:31 PM 06.11.2017 16.31.57 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:31 PM 06.11.2017 16.31.57 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:31 PM 06.11.2017 16.31.57 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:31 PM 06.11.2017 16.31.57 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:31 PM 06.11.2017 16.31.57 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:31 PM 06.11.2017 16.31.57 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:31 PM 06.11.2017 16.31.57 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:31 PM 06.11.2017 16.31.57 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:31 PM 06.11.2017 16.31.53 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:31 PM 06.11.2017 16.31.53 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:31 PM 06.11.2017 16.31.53 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:31 PM 06.11.2017 16.31.53 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:31 PM 06.11.2017 16.31.53 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:31 PM 06.11.2017 16.31.53 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:31 PM 06.11.2017 16.31.53 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:31 PM 06.11.2017 16.31.53 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:31 PM 06.11.2017 16.31.53 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:31 PM 06.11.2017 16.31.53 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:31 PM 06.11.2017 16.31.53 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:31 PM 06.11.2017 16.31.53 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:31 PM 06.11.2017 16.28.38 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:28 PM 06.11.2017 16.28.38 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:28 PM 06.11.2017 16.28.38 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:28 PM 06.11.2017 16.28.38 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:28 PM 06.11.2017 16.28.38 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:28 PM 06.11.2017 16.28.38 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:28 PM 06.11.2017 16.28.38 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:28 PM 06.11.2017 16.28.38 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:28 PM 06.11.2017 16.28.38 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:28 PM 06.11.2017 16.28.38 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:28 PM 06.11.2017 16.28.38 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:28 PM 06.11.2017 16.28.38 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:28 PM 06.11.2017 16.27.56 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:27 PM 06.11.2017 16.27.56 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:27 PM 06.11.2017 16.27.56 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:27 PM 06.11.2017 16.27.56 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:27 PM 06.11.2017 16.27.56 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:27 PM 06.11.2017 16.27.56 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:27 PM 06.11.2017 16.27.56 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:27 PM 06.11.2017 16.27.56 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:27 PM 06.11.2017 16.27.56 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:27 PM 06.11.2017 16.27.56 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:27 PM 06.11.2017 16.27.56 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:27 PM 06.11.2017 16.27.56 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:27 PM 06.11.2017 16.27.53 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:27 PM 06.11.2017 16.27.53 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:27 PM 06.11.2017 16.27.53 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:27 PM 06.11.2017 16.27.53 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:27 PM 06.11.2017 16.27.53 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:27 PM 06.11.2017 16.27.53 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:27 PM 06.11.2017 16.27.53 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:27 PM 06.11.2017 16.27.53 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:27 PM 06.11.2017 16.27.53 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:27 PM 06.11.2017 16.27.53 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:27 PM 06.11.2017 16.27.53 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:27 PM 06.11.2017 16.27.53 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:27 PM 06.11.2017 16.27.51 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:27 PM 06.11.2017 16.27.51 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:27 PM 06.11.2017 16.27.51 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:27 PM 06.11.2017 16.27.51 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:27 PM 06.11.2017 16.27.51 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:27 PM 06.11.2017 16.27.51 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:27 PM 06.11.2017 16.26.16 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:26 PM 06.11.2017 16.26.16 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:26 PM 06.11.2017 16.26.16 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:26 PM 06.11.2017 16.26.16 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:26 PM 06.11.2017 16.26.16 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:26 PM 06.11.2017 16.26.16 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:26 PM 06.11.2017 16.26.16 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:26 PM 06.11.2017 16.26.16 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:26 PM 06.11.2017 16.26.16 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:26 PM 06.11.2017 16.26.16 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:26 PM 06.11.2017 16.26.16 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:26 PM 06.11.2017 16.26.16 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:26 PM 06.11.2017 16.26.12 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:26 PM 06.11.2017 16.26.12 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:26 PM 06.11.2017 16.26.12 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:26 PM 06.11.2017 16.26.12 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:26 PM 06.11.2017 16.26.12 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:26 PM 06.11.2017 16.26.12 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:26 PM 06.11.2017 16.26.11 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:26 PM 06.11.2017 16.26.11 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:26 PM 06.11.2017 16.26.11 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:26 PM 06.11.2017 16.26.11 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:26 PM 06.11.2017 16.26.11 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:26 PM 06.11.2017 16.26.11 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:26 PM 06.11.2017 16.26.10 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:26 PM 06.11.2017 16.26.10 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:26 PM 06.11.2017 16.26.10 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:26 PM 06.11.2017 16.26.10 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:26 PM 06.11.2017 16.26.10 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:26 PM 06.11.2017 16.26.10 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:26 PM 06.11.2017 16.25.43 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:25 PM 06.11.2017 16.25.43 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:25 PM 06.11.2017 16.25.43 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:25 PM 06.11.2017 16.25.43 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:25 PM 06.11.2017 16.25.43 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:25 PM 06.11.2017 16.25.43 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:25 PM 06.11.2017 16.25.43 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:25 PM 06.11.2017 16.25.43 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:25 PM 06.11.2017 16.25.43 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:25 PM 06.11.2017 16.25.43 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:25 PM 06.11.2017 16.25.43 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:25 PM 06.11.2017 16.25.43 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:25 PM 06.11.2017 16.24.13 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:24 PM 06.11.2017 16.24.13 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:24 PM 06.11.2017 16.24.13 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:24 PM 06.11.2017 16.24.13 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:24 PM 06.11.2017 16.24.13 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:24 PM 06.11.2017 16.24.13 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:24 PM 06.11.2017 16.24.13 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:24 PM 06.11.2017 16.24.13 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:24 PM 06.11.2017 16.24.13 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:24 PM 06.11.2017 16.24.13 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:24 PM 06.11.2017 16.24.13 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:24 PM 06.11.2017 16.24.13 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:24 PM 06.11.2017 16.23.57 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:23 PM 06.11.2017 16.23.57 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:23 PM 06.11.2017 16.23.57 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:23 PM 06.11.2017 16.23.57 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:23 PM 06.11.2017 16.23.57 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:23 PM 06.11.2017 16.23.57 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:23 PM 06.11.2017 16.23.57 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:23 PM 06.11.2017 16.23.57 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:23 PM 06.11.2017 16.23.57 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:23 PM 06.11.2017 16.23.57 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:23 PM 06.11.2017 16.23.56 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:23 PM 06.11.2017 16.23.56 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:23 PM 06.11.2017 16.23.53 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:23 PM 06.11.2017 16.23.53 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:23 PM 06.11.2017 16.23.53 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:23 PM 06.11.2017 16.23.53 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:23 PM 06.11.2017 16.23.53 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:23 PM 06.11.2017 16.23.53 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:23 PM 06.11.2017 16.23.53 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:23 PM 06.11.2017 16.23.53 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:23 PM 06.11.2017 16.23.53 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:23 PM 06.11.2017 16.23.53 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:23 PM 06.11.2017 16.23.53 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:23 PM 06.11.2017 16.23.53 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:23 PM 06.11.2017 16.23.51 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:23 PM 06.11.2017 16.23.51 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:23 PM 06.11.2017 16.23.51 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:23 PM 06.11.2017 16.23.51 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:23 PM 06.11.2017 16.23.51 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:23 PM 06.11.2017 16.23.51 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:23 PM 06.11.2017 16.23.50 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:23 PM 06.11.2017 16.23.50 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:23 PM 06.11.2017 16.23.50 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:23 PM 06.11.2017 16.23.50 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:23 PM 06.11.2017 16.23.50 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:23 PM 06.11.2017 16.23.50 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:23 PM 06.11.2017 16.23.38 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:23 PM 06.11.2017 16.23.38 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:23 PM 06.11.2017 16.23.38 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:23 PM 06.11.2017 16.23.38 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:23 PM 06.11.2017 16.23.38 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:23 PM 06.11.2017 16.23.38 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:23 PM 06.11.2017 16.23.38 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:23 PM 06.11.2017 16.23.38 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:23 PM 06.11.2017 16.23.38 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:23 PM 06.11.2017 16.23.38 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:23 PM 06.11.2017 16.23.38 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:23 PM 06.11.2017 16.23.38 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:23 PM 06.11.2017 16.21.53 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:21 PM 06.11.2017 16.21.53 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:21 PM 06.11.2017 16.21.53 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:21 PM 06.11.2017 16.21.53 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:21 PM 06.11.2017 16.21.53 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:21 PM 06.11.2017 16.21.53 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:21 PM 06.11.2017 16.21.53 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:21 PM 06.11.2017 16.21.53 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:21 PM 06.11.2017 16.21.53 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:21 PM 06.11.2017 16.21.53 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:21 PM 06.11.2017 16.21.53 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:21 PM 06.11.2017 16.21.53 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:21 PM 06.11.2017 16.21.51 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:21 PM 06.11.2017 16.21.51 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:21 PM 06.11.2017 16.21.51 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:21 PM 06.11.2017 16.21.51 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:21 PM 06.11.2017 16.21.51 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:21 PM 06.11.2017 16.21.51 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:21 PM 06.11.2017 16.21.47 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:21 PM 06.11.2017 16.21.47 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:21 PM 06.11.2017 16.21.47 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:21 PM 06.11.2017 16.21.47 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:21 PM 06.11.2017 16.21.47 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:21 PM 06.11.2017 16.21.47 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:21 PM 06.11.2017 16.21.47 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:21 PM 06.11.2017 16.21.47 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:21 PM 06.11.2017 16.21.47 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:21 PM 06.11.2017 16.21.47 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:21 PM 06.11.2017 16.21.47 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:21 PM 06.11.2017 16.21.47 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:21 PM 06.11.2017 16.21.38 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:21 PM 06.11.2017 16.21.38 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:21 PM 06.11.2017 16.21.38 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:21 PM 06.11.2017 16.21.38 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:21 PM 06.11.2017 16.21.38 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:21 PM 06.11.2017 16.21.38 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:21 PM 06.11.2017 16.21.38 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:21 PM 06.11.2017 16.21.38 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:21 PM 06.11.2017 16.21.37 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:21 PM 06.11.2017 16.21.37 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:21 PM 06.11.2017 16.21.37 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:21 PM 06.11.2017 16.21.37 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:21 PM 06.11.2017 16.21.36 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:21 PM 06.11.2017 16.21.36 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:21 PM 06.11.2017 16.21.36 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:21 PM 06.11.2017 16.21.36 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:21 PM 06.11.2017 16.21.36 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:21 PM 06.11.2017 16.21.36 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:21 PM 06.11.2017 16.21.13 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:21 PM 06.11.2017 16.21.13 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:21 PM 06.11.2017 16.21.13 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:21 PM 06.11.2017 16.21.13 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:21 PM 06.11.2017 16.21.13 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:21 PM 06.11.2017 16.21.13 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:21 PM 06.11.2017 16.21.13 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:21 PM 06.11.2017 16.21.13 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:21 PM 06.11.2017 16.21.13 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:21 PM 06.11.2017 16.21.13 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:21 PM 06.11.2017 16.21.13 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:21 PM 06.11.2017 16.21.13 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:21 PM 06.11.2017 16.21.07 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:21 PM 06.11.2017 16.21.07 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:21 PM 06.11.2017 16.21.07 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:21 PM 06.11.2017 16.21.07 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:21 PM 06.11.2017 16.21.07 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:21 PM 06.11.2017 16.21.07 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:21 PM 06.11.2017 16.21.07 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:21 PM 06.11.2017 16.21.07 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:21 PM 06.11.2017 16.21.07 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:21 PM 06.11.2017 16.21.07 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:21 PM 06.11.2017 16.21.07 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:21 PM 06.11.2017 16.21.07 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:21 PM 06.11.2017 16.21.02 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:21 PM 06.11.2017 16.21.02 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:21 PM 06.11.2017 16.21.02 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:21 PM 06.11.2017 16.21.02 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:21 PM 06.11.2017 16.21.02 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:21 PM 06.11.2017 16.21.02 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:21 PM 06.11.2017 16.21.02 Suspicious action was blocked mcci+McciTrayApp Action: Hook incoming messages of the stream Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:21 PM 06.11.2017 16.21.02 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:21 PM 06.11.2017 16.21.02 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:21 PM 06.11.2017 16.21.02 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:21 PM 06.11.2017 16.21.02 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:21 PM 06.11.2017 16.21.02 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:21 PM 06.11.2017 16.21.02 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:21 PM 06.11.2017 16.20.51 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:20 PM 06.11.2017 16.20.51 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:20 PM 06.11.2017 16.20.51 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:20 PM 06.11.2017 16.20.51 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:20 PM 06.11.2017 16.20.51 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:20 PM 06.11.2017 16.20.51 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:20 PM 06.11.2017 16.20.51 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:20 PM 06.11.2017 16.20.51 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:20 PM 06.11.2017 16.20.51 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:20 PM 06.11.2017 16.20.51 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:20 PM 06.11.2017 16.20.51 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:20 PM 06.11.2017 16.20.51 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:20 PM 06.11.2017 16.20.38 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:20 PM 06.11.2017 16.20.38 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:20 PM 06.11.2017 16.20.38 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:20 PM 06.11.2017 16.20.38 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:20 PM 06.11.2017 16.20.38 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:20 PM 06.11.2017 16.20.38 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:20 PM 06.11.2017 16.20.38 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:20 PM 06.11.2017 16.20.38 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:20 PM 06.11.2017 16.20.38 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:20 PM 06.11.2017 16.20.38 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:20 PM 06.11.2017 16.20.38 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:20 PM 06.11.2017 16.20.38 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:20 PM 06.11.2017 16.20.36 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:20 PM 06.11.2017 16.20.36 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:20 PM 06.11.2017 16.20.36 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:20 PM 06.11.2017 16.20.36 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:20 PM 06.11.2017 16.20.36 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:20 PM 06.11.2017 16.20.36 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:20 PM 06.11.2017 16.19.20 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:19 PM 06.11.2017 16.19.20 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:19 PM 06.11.2017 16.19.20 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:19 PM 06.11.2017 16.19.20 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:19 PM 06.11.2017 16.19.20 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:19 PM 06.11.2017 16.19.20 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:19 PM 06.11.2017 16.19.20 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:19 PM 06.11.2017 16.19.20 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:19 PM 06.11.2017 16.19.20 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:19 PM 06.11.2017 16.19.20 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:19 PM 06.11.2017 16.19.20 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:19 PM 06.11.2017 16.19.20 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:19 PM 06.11.2017 16.19.11 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:19 PM 06.11.2017 16.19.11 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:19 PM 06.11.2017 16.19.11 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:19 PM 06.11.2017 16.19.11 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:19 PM 06.11.2017 16.19.11 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:19 PM 06.11.2017 16.19.11 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:19 PM 06.11.2017 16.19.11 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:19 PM 06.11.2017 16.19.11 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:19 PM 06.11.2017 16.19.11 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:19 PM 06.11.2017 16.19.11 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:19 PM 06.11.2017 16.19.11 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:19 PM 06.11.2017 16.19.11 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:19 PM 06.11.2017 16.11.40 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:11 PM 06.11.2017 16.11.40 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:11 PM 06.11.2017 16.11.40 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:11 PM 06.11.2017 16.11.40 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:11 PM 06.11.2017 16.11.40 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:11 PM 06.11.2017 16.11.40 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:11 PM 06.11.2017 16.11.40 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:11 PM 06.11.2017 16.11.40 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:11 PM 06.11.2017 16.11.40 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:11 PM 06.11.2017 16.11.40 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:11 PM 06.11.2017 16.11.40 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:11 PM 06.11.2017 16.11.40 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:11 PM 06.11.2017 16.11.38 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:11 PM 06.11.2017 16.11.38 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:11 PM 06.11.2017 16.11.38 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:11 PM 06.11.2017 16.11.38 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:11 PM 06.11.2017 16.11.38 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:11 PM 06.11.2017 16.11.38 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:11 PM 06.11.2017 16.11.38 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:11 PM 06.11.2017 16.11.38 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:11 PM 06.11.2017 16.11.38 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:11 PM 06.11.2017 16.11.38 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:11 PM 06.11.2017 16.11.38 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:11 PM 06.11.2017 16.11.38 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:11 PM 06.11.2017 16.11.32 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:11 PM 06.11.2017 16.11.32 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:11 PM 06.11.2017 16.11.32 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:11 PM 06.11.2017 16.11.32 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:11 PM 06.11.2017 16.11.32 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:11 PM 06.11.2017 16.11.32 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:11 PM 06.11.2017 16.11.32 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:11 PM 06.11.2017 16.11.32 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:11 PM 06.11.2017 16.11.32 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:11 PM 06.11.2017 16.11.32 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:11 PM 06.11.2017 16.11.32 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:11 PM 06.11.2017 16.11.32 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:11 PM 06.11.2017 16.11.30 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:11 PM 06.11.2017 16.11.30 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:11 PM 06.11.2017 16.11.30 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:11 PM 06.11.2017 16.11.30 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:11 PM 06.11.2017 16.11.30 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:11 PM 06.11.2017 16.11.30 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:11 PM 06.11.2017 16.11.30 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:11 PM 06.11.2017 16.11.30 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:11 PM 06.11.2017 16.11.30 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:11 PM 06.11.2017 16.11.30 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:11 PM 06.11.2017 16.11.30 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:11 PM 06.11.2017 16.11.30 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:11 PM 06.11.2017 16.11.27 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:11 PM 06.11.2017 16.11.27 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:11 PM 06.11.2017 16.11.27 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:11 PM 06.11.2017 16.11.27 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:11 PM 06.11.2017 16.11.27 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:11 PM 06.11.2017 16.11.27 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:11 PM 06.11.2017 16.11.27 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:11 PM 06.11.2017 16.11.27 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:11 PM 06.11.2017 16.11.27 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:11 PM 06.11.2017 16.11.27 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:11 PM 06.11.2017 16.11.27 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:11 PM 06.11.2017 16.11.27 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:11 PM 06.11.2017 16.11.20 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:11 PM 06.11.2017 16.11.20 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:11 PM 06.11.2017 16.11.20 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:11 PM 06.11.2017 16.11.20 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:11 PM 06.11.2017 16.11.20 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:11 PM 06.11.2017 16.11.20 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:11 PM 06.11.2017 16.11.20 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:11 PM 06.11.2017 16.11.20 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:11 PM 06.11.2017 16.11.20 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:11 PM 06.11.2017 16.11.20 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:11 PM 06.11.2017 16.11.20 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:11 PM 06.11.2017 16.11.20 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:11 PM 06.11.2017 16.11.17 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:11 PM 06.11.2017 16.11.17 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:11 PM 06.11.2017 16.11.17 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:11 PM 06.11.2017 16.11.17 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:11 PM 06.11.2017 16.11.17 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:11 PM 06.11.2017 16.11.17 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:11 PM 06.11.2017 16.11.17 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:11 PM 06.11.2017 16.11.17 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:11 PM 06.11.2017 16.11.17 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:11 PM 06.11.2017 16.11.17 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:11 PM 06.11.2017 16.11.17 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:11 PM 06.11.2017 16.11.17 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:11 PM 06.11.2017 16.10.54 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:10 PM 06.11.2017 16.10.54 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:10 PM 06.11.2017 16.10.54 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:10 PM 06.11.2017 16.10.54 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:10 PM 06.11.2017 16.10.54 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:10 PM 06.11.2017 16.10.54 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:10 PM 06.11.2017 16.10.54 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:10 PM 06.11.2017 16.10.54 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:10 PM 06.11.2017 16.10.54 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:10 PM 06.11.2017 16.10.54 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:10 PM 06.11.2017 16.10.54 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:10 PM 06.11.2017 16.10.54 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:10 PM 06.11.2017 16.10.44 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:10 PM 06.11.2017 16.10.44 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:10 PM 06.11.2017 16.10.44 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:10 PM 06.11.2017 16.10.44 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:10 PM 06.11.2017 16.10.44 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:10 PM 06.11.2017 16.10.44 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:10 PM 06.11.2017 16.10.44 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:10 PM 06.11.2017 16.10.44 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:10 PM 06.11.2017 16.10.44 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:10 PM 06.11.2017 16.10.44 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:10 PM 06.11.2017 16.10.44 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:10 PM 06.11.2017 16.10.44 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:10 PM 06.11.2017 16.10.41 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:10 PM 06.11.2017 16.10.41 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:10 PM 06.11.2017 16.10.41 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:10 PM 06.11.2017 16.10.41 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:10 PM 06.11.2017 16.10.41 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:10 PM 06.11.2017 16.10.41 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:10 PM 06.11.2017 16.10.37 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:10 PM 06.11.2017 16.10.37 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:10 PM 06.11.2017 16.10.37 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:10 PM 06.11.2017 16.10.37 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:10 PM 06.11.2017 16.10.37 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:10 PM 06.11.2017 16.10.37 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:10 PM 06.11.2017 16.10.37 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:10 PM 06.11.2017 16.10.37 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:10 PM 06.11.2017 16.10.37 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:10 PM 06.11.2017 16.10.37 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:10 PM 06.11.2017 16.10.37 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:10 PM 06.11.2017 16.10.37 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:10 PM 06.11.2017 16.10.35 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:10 PM 06.11.2017 16.10.35 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:10 PM 06.11.2017 16.10.35 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:10 PM 06.11.2017 16.10.35 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:10 PM 06.11.2017 16.10.35 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:10 PM 06.11.2017 16.10.35 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:10 PM 06.11.2017 16.10.12 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:10 PM 06.11.2017 16.10.12 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:10 PM 06.11.2017 16.10.12 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:10 PM 06.11.2017 16.10.12 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:10 PM 06.11.2017 16.10.12 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:10 PM 06.11.2017 16.10.12 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:10 PM 06.11.2017 16.10.12 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:10 PM 06.11.2017 16.10.12 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:10 PM 06.11.2017 16.10.12 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:10 PM 06.11.2017 16.10.12 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:10 PM 06.11.2017 16.10.12 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:10 PM 06.11.2017 16.10.12 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:10 PM 06.11.2017 16.10.10 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:10 PM 06.11.2017 16.10.10 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:10 PM 06.11.2017 16.10.10 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:10 PM 06.11.2017 16.10.10 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:10 PM 06.11.2017 16.10.10 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:10 PM 06.11.2017 16.10.10 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:10 PM 06.11.2017 16.09.53 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:09 PM 06.11.2017 16.09.53 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:09 PM 06.11.2017 16.09.53 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:09 PM 06.11.2017 16.09.53 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:09 PM 06.11.2017 16.09.53 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:09 PM 06.11.2017 16.09.53 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:09 PM 06.11.2017 16.09.52 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:09 PM 06.11.2017 16.09.52 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:09 PM 06.11.2017 16.09.52 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:09 PM 06.11.2017 16.09.52 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:09 PM 06.11.2017 16.09.52 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:09 PM 06.11.2017 16.09.52 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:09 PM 06.11.2017 16.09.51 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:09 PM 06.11.2017 16.09.51 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:09 PM 06.11.2017 16.09.51 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:09 PM 06.11.2017 16.09.51 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:09 PM 06.11.2017 16.09.51 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:09 PM 06.11.2017 16.09.51 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:09 PM 06.11.2017 16.09.32 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:09 PM 06.11.2017 16.09.32 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:09 PM 06.11.2017 16.09.32 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:09 PM 06.11.2017 16.09.32 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:09 PM 06.11.2017 16.09.32 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:09 PM 06.11.2017 16.09.32 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:09 PM 06.11.2017 16.09.32 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:09 PM 06.11.2017 16.09.32 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:09 PM 06.11.2017 16.09.32 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:09 PM 06.11.2017 16.09.32 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:09 PM 06.11.2017 16.09.32 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:09 PM 06.11.2017 16.09.32 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:09 PM 06.11.2017 16.08.17 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:08 PM 06.11.2017 16.08.17 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:08 PM 06.11.2017 16.08.17 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:08 PM 06.11.2017 16.08.17 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:08 PM 06.11.2017 16.08.17 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:08 PM 06.11.2017 16.08.17 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:08 PM 06.11.2017 16.08.17 Suspicious action was blocked mcci+McciTrayApp Action: Hook incoming messages of the stream Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:08 PM 06.11.2017 16.08.17 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:08 PM 06.11.2017 16.08.17 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:08 PM 06.11.2017 16.08.17 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:08 PM 06.11.2017 16.08.17 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:08 PM 06.11.2017 16.08.17 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:08 PM 06.11.2017 16.08.17 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:08 PM 06.11.2017 16.07.29 Suspicious action was blocked Malwarebytes Anti-Exploit 64bit tasks Action: Access memory of other processes Application: Malwarebytes Anti-Exploit 64bit tasks Application path: C:\Program Files (x86)\Malwarebytes Anti-Exploit\mbae64.exe Time: 11/6/2017 4:07 PM 06.11.2017 16.07.29 Suspicious action was blocked Malwarebytes Anti-Exploit 64bit tasks Action: Read memory from other processes Application: Malwarebytes Anti-Exploit 64bit tasks Application path: C:\Program Files (x86)\Malwarebytes Anti-Exploit\mbae64.exe Time: 11/6/2017 4:07 PM 06.11.2017 16.07.29 Suspicious action was blocked Malwarebytes Anti-Exploit 64bit tasks Action: Duplicate internal process handle Application: Malwarebytes Anti-Exploit 64bit tasks Application path: C:\Program Files (x86)\Malwarebytes Anti-Exploit\mbae64.exe Time: 11/6/2017 4:07 PM 06.11.2017 16.07.29 Suspicious action was blocked Malwarebytes Anti-Exploit 64bit tasks Action: Perform code injection Application: Malwarebytes Anti-Exploit 64bit tasks Application path: C:\Program Files (x86)\Malwarebytes Anti-Exploit\mbae64.exe Time: 11/6/2017 4:07 PM 06.11.2017 16.07.19 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:07 PM 06.11.2017 16.07.19 Suspicious action was blocked mcci+McciTrayApp Action: Hook incoming messages of the stream Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:07 PM 06.11.2017 16.07.19 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:07 PM 06.11.2017 16.07.19 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:07 PM 06.11.2017 16.07.19 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:07 PM 06.11.2017 16.07.19 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:07 PM 06.11.2017 16.07.19 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:07 PM 06.11.2017 16.07.19 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:07 PM 06.11.2017 16.07.19 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:07 PM 06.11.2017 16.07.19 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:07 PM 06.11.2017 16.07.19 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:07 PM 06.11.2017 16.06.26 Suspicious action was blocked mcci+McciTrayApp Action: Hook incoming messages of the stream Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:06 PM 06.11.2017 16.06.26 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:06 PM 06.11.2017 16.06.26 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:06 PM 06.11.2017 16.06.26 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:06 PM 06.11.2017 16.06.26 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:06 PM 06.11.2017 16.06.26 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:06 PM 06.11.2017 16.06.26 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:06 PM 06.11.2017 16.06.26 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:06 PM 06.11.2017 16.06.26 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:06 PM 06.11.2017 16.06.26 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:06 PM 06.11.2017 16.06.26 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:06 PM 06.11.2017 16.06.12 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:06 PM 06.11.2017 16.06.12 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:06 PM 06.11.2017 16.06.12 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:06 PM 06.11.2017 16.06.12 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:06 PM 06.11.2017 16.06.12 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:06 PM 06.11.2017 16.06.12 Suspicious action was blocked mcci+McciTrayApp Action: Hook incoming messages of the stream Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:06 PM 06.11.2017 16.06.12 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:06 PM 06.11.2017 16.06.12 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:06 PM 06.11.2017 16.06.12 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:06 PM 06.11.2017 16.06.12 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:06 PM 06.11.2017 16.06.12 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:06 PM 06.11.2017 16.05.41 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:05 PM 06.11.2017 16.05.41 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:05 PM 06.11.2017 16.05.41 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:05 PM 06.11.2017 16.05.41 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:05 PM 06.11.2017 16.05.41 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:05 PM 06.11.2017 16.05.41 Suspicious action was blocked mcci+McciTrayApp Action: Hook incoming messages of the stream Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:05 PM 06.11.2017 16.05.41 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:05 PM 06.11.2017 16.05.41 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:05 PM 06.11.2017 16.05.41 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:05 PM 06.11.2017 16.05.41 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:05 PM 06.11.2017 16.05.41 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:05 PM 06.11.2017 16.05.09 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:05 PM 06.11.2017 16.05.09 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:05 PM 06.11.2017 16.05.09 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:05 PM 06.11.2017 16.05.09 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:05 PM 06.11.2017 16.05.09 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:05 PM 06.11.2017 16.05.09 Suspicious action was blocked mcci+McciTrayApp Action: Hook incoming messages of the stream Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:05 PM 06.11.2017 16.05.09 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:05 PM 06.11.2017 16.05.09 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:05 PM 06.11.2017 16.05.09 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:05 PM 06.11.2017 16.05.09 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:05 PM 06.11.2017 16.05.09 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:05 PM 06.11.2017 16.05.05 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:05 PM 06.11.2017 16.05.05 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:05 PM 06.11.2017 16.05.05 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:05 PM 06.11.2017 16.05.05 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:05 PM 06.11.2017 16.05.05 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:05 PM 06.11.2017 16.05.05 Suspicious action was blocked mcci+McciTrayApp Action: Hook incoming messages of the stream Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:05 PM 06.11.2017 16.05.05 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:05 PM 06.11.2017 16.05.05 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:05 PM 06.11.2017 16.05.05 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:05 PM 06.11.2017 16.05.05 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:05 PM 06.11.2017 16.05.05 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:05 PM 06.11.2017 16.04.43 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:04 PM 06.11.2017 16.04.43 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:04 PM 06.11.2017 16.04.43 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:04 PM 06.11.2017 16.04.43 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:04 PM 06.11.2017 16.04.43 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:04 PM 06.11.2017 16.04.43 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:04 PM 06.11.2017 16.04.43 Suspicious action was blocked mcci+McciTrayApp Action: Hook incoming messages of the stream Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:04 PM 06.11.2017 16.04.43 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:04 PM 06.11.2017 16.04.43 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:04 PM 06.11.2017 16.04.43 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:04 PM 06.11.2017 16.04.43 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:04 PM 06.11.2017 16.04.43 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:04 PM 06.11.2017 16.04.43 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:04 PM 06.11.2017 16.04.08 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:04 PM 06.11.2017 16.04.08 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:04 PM 06.11.2017 16.04.08 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:04 PM 06.11.2017 16.04.08 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:04 PM 06.11.2017 16.04.08 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:04 PM 06.11.2017 16.04.08 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:04 PM 06.11.2017 16.04.08 Suspicious action was blocked mcci+McciTrayApp Action: Hook incoming messages of the stream Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:04 PM 06.11.2017 16.04.08 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:04 PM 06.11.2017 16.04.08 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:04 PM 06.11.2017 16.04.08 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:04 PM 06.11.2017 16.04.08 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:04 PM 06.11.2017 16.04.08 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:04 PM 06.11.2017 16.04.08 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:04 PM 06.11.2017 16.03.52 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:03 PM 06.11.2017 16.03.52 Suspicious action was blocked mcci+McciTrayApp Action: Hook incoming messages of the stream Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:03 PM 06.11.2017 16.03.52 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:03 PM 06.11.2017 16.03.52 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:03 PM 06.11.2017 16.03.52 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:03 PM 06.11.2017 16.03.52 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:03 PM 06.11.2017 16.03.52 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:03 PM 06.11.2017 16.03.52 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:03 PM 06.11.2017 16.03.52 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:03 PM 06.11.2017 16.03.52 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:03 PM 06.11.2017 16.03.52 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:03 PM 06.11.2017 16.03.52 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:03 PM 06.11.2017 16.03.52 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:03 PM 06.11.2017 16.03.43 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:03 PM 06.11.2017 16.03.43 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:03 PM 06.11.2017 16.03.43 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:03 PM 06.11.2017 16.03.43 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:03 PM 06.11.2017 16.03.43 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:03 PM 06.11.2017 16.03.43 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:03 PM 06.11.2017 16.03.43 Suspicious action was blocked mcci+McciTrayApp Action: Hook incoming messages of the stream Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:03 PM 06.11.2017 16.03.43 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:03 PM 06.11.2017 16.03.43 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:03 PM 06.11.2017 16.03.43 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:03 PM 06.11.2017 16.03.43 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:03 PM 06.11.2017 16.03.43 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:03 PM 06.11.2017 16.03.43 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:03 PM 06.11.2017 16.03.25 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:03 PM 06.11.2017 16.03.25 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:03 PM 06.11.2017 16.03.25 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:03 PM 06.11.2017 16.03.25 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:03 PM 06.11.2017 16.03.25 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:03 PM 06.11.2017 16.03.25 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:03 PM 06.11.2017 16.03.25 Suspicious action was blocked mcci+McciTrayApp Action: Hook incoming messages of the stream Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:03 PM 06.11.2017 16.03.25 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:03 PM 06.11.2017 16.03.25 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:03 PM 06.11.2017 16.03.25 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:03 PM 06.11.2017 16.03.25 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:03 PM 06.11.2017 16.03.25 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:03 PM 06.11.2017 16.03.25 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:03 PM 06.11.2017 16.03.08 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:03 PM 06.11.2017 16.03.08 Suspicious action was blocked mcci+McciTrayApp Action: Hook incoming messages of the stream Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:03 PM 06.11.2017 16.03.08 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:03 PM 06.11.2017 16.03.08 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:03 PM 06.11.2017 16.03.08 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:03 PM 06.11.2017 16.03.08 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:03 PM 06.11.2017 16.03.08 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:03 PM 06.11.2017 16.03.08 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:03 PM 06.11.2017 16.03.08 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:03 PM 06.11.2017 16.03.08 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:03 PM 06.11.2017 16.03.08 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:03 PM 06.11.2017 16.03.08 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:03 PM 06.11.2017 16.03.08 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:03 PM 06.11.2017 16.02.53 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:02 PM 06.11.2017 16.02.53 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:02 PM 06.11.2017 16.02.53 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:02 PM 06.11.2017 16.02.53 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:02 PM 06.11.2017 16.02.53 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:02 PM 06.11.2017 16.02.53 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:02 PM 06.11.2017 16.02.53 Suspicious action was blocked mcci+McciTrayApp Action: Hook incoming messages of the stream Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:02 PM 06.11.2017 16.02.53 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:02 PM 06.11.2017 16.02.53 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:02 PM 06.11.2017 16.02.53 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:02 PM 06.11.2017 16.02.53 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:02 PM 06.11.2017 16.02.53 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:02 PM 06.11.2017 16.02.53 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:02 PM 06.11.2017 16.02.38 Suspicious action was blocked mcci+McciTrayApp Action: Hook incoming messages of the stream Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:02 PM 06.11.2017 16.02.38 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:02 PM 06.11.2017 16.02.38 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:02 PM 06.11.2017 16.02.38 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:02 PM 06.11.2017 16.02.38 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:02 PM 06.11.2017 16.02.38 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:02 PM 06.11.2017 16.02.38 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:02 PM 06.11.2017 16.02.38 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:02 PM 06.11.2017 16.02.38 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:02 PM 06.11.2017 16.02.38 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:02 PM 06.11.2017 16.02.38 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:02 PM 06.11.2017 16.02.38 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:02 PM 06.11.2017 16.02.38 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:02 PM 06.11.2017 16.02.21 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:02 PM 06.11.2017 16.02.21 Suspicious action was blocked mcci+McciTrayApp Action: Hook incoming messages of the stream Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:02 PM 06.11.2017 16.02.21 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:02 PM 06.11.2017 16.02.21 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:02 PM 06.11.2017 16.02.21 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:02 PM 06.11.2017 16.02.21 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:02 PM 06.11.2017 16.02.21 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:02 PM 06.11.2017 16.02.21 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:02 PM 06.11.2017 16.02.21 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:02 PM 06.11.2017 16.02.21 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:02 PM 06.11.2017 16.02.21 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:02 PM 06.11.2017 16.02.21 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:02 PM 06.11.2017 16.02.21 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 4:02 PM 06.11.2017 16.02.17 Suspicious action was blocked Malwarebytes Anti-Exploit 64bit tasks Action: Access memory of other processes Application: Malwarebytes Anti-Exploit 64bit tasks Application path: C:\Program Files (x86)\Malwarebytes Anti-Exploit\mbae64.exe Time: 11/6/2017 4:02 PM 06.11.2017 16.02.17 Suspicious action was blocked Malwarebytes Anti-Exploit 64bit tasks Action: Read memory from other processes Application: Malwarebytes Anti-Exploit 64bit tasks Application path: C:\Program Files (x86)\Malwarebytes Anti-Exploit\mbae64.exe Time: 11/6/2017 4:02 PM 06.11.2017 16.02.17 Suspicious action was blocked Malwarebytes Anti-Exploit 64bit tasks Action: Duplicate internal process handle Application: Malwarebytes Anti-Exploit 64bit tasks Application path: C:\Program Files (x86)\Malwarebytes Anti-Exploit\mbae64.exe Time: 11/6/2017 4:02 PM 06.11.2017 16.02.17 Suspicious action was blocked Malwarebytes Anti-Exploit 64bit tasks Action: Perform code injection Application: Malwarebytes Anti-Exploit 64bit tasks Application path: C:\Program Files (x86)\Malwarebytes Anti-Exploit\mbae64.exe Time: 11/6/2017 4:02 PM 06.11.2017 16.00.03 Suspicious action was blocked Malwarebytes Anti-Exploit 64bit tasks Action: Access memory of other processes Application: Malwarebytes Anti-Exploit 64bit tasks Application path: C:\Program Files (x86)\Malwarebytes Anti-Exploit\mbae64.exe Time: 11/6/2017 4:00 PM 06.11.2017 16.00.03 Suspicious action was blocked Malwarebytes Anti-Exploit 64bit tasks Action: Read memory from other processes Application: Malwarebytes Anti-Exploit 64bit tasks Application path: C:\Program Files (x86)\Malwarebytes Anti-Exploit\mbae64.exe Time: 11/6/2017 4:00 PM 06.11.2017 16.00.03 Suspicious action was blocked Malwarebytes Anti-Exploit 64bit tasks Action: Duplicate internal process handle Application: Malwarebytes Anti-Exploit 64bit tasks Application path: C:\Program Files (x86)\Malwarebytes Anti-Exploit\mbae64.exe Time: 11/6/2017 4:00 PM 06.11.2017 16.00.03 Suspicious action was blocked Malwarebytes Anti-Exploit 64bit tasks Action: Perform code injection Application: Malwarebytes Anti-Exploit 64bit tasks Application path: C:\Program Files (x86)\Malwarebytes Anti-Exploit\mbae64.exe Time: 11/6/2017 4:00 PM 06.11.2017 15.57.30 Suspicious action was blocked mcci+McciTrayApp Action: Hook incoming messages of the stream Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:57 PM 06.11.2017 15.57.30 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:57 PM 06.11.2017 15.57.30 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:57 PM 06.11.2017 15.57.30 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:57 PM 06.11.2017 15.57.30 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:57 PM 06.11.2017 15.57.30 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:57 PM 06.11.2017 15.57.30 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:57 PM 06.11.2017 15.57.30 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:57 PM 06.11.2017 15.57.30 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:57 PM 06.11.2017 15.56.28 Suspicious action was blocked mcci+McciTrayApp Action: Hook incoming messages of the stream Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:56 PM 06.11.2017 15.56.28 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:56 PM 06.11.2017 15.56.28 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:56 PM 06.11.2017 15.56.28 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:56 PM 06.11.2017 15.56.28 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:56 PM 06.11.2017 15.56.28 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:56 PM 06.11.2017 15.56.28 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:56 PM 06.11.2017 15.56.28 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:56 PM 06.11.2017 15.56.28 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:56 PM 06.11.2017 15.55.25 Suspicious action was blocked mcci+McciTrayApp Action: Hook incoming messages of the stream Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:55 PM 06.11.2017 15.55.25 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:55 PM 06.11.2017 15.55.25 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:55 PM 06.11.2017 15.55.25 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:55 PM 06.11.2017 15.55.25 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:55 PM 06.11.2017 15.55.25 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:55 PM 06.11.2017 15.55.25 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:55 PM 06.11.2017 15.55.25 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:55 PM 06.11.2017 15.55.25 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:55 PM 06.11.2017 15.55.15 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:55 PM 06.11.2017 15.55.15 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:55 PM 06.11.2017 15.55.15 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:55 PM 06.11.2017 15.55.15 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:55 PM 06.11.2017 15.55.15 Suspicious action was blocked mcci+McciTrayApp Action: Hook incoming messages of the stream Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:55 PM 06.11.2017 15.55.15 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:55 PM 06.11.2017 15.55.15 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:55 PM 06.11.2017 15.55.15 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:55 PM 06.11.2017 15.55.15 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:55 PM 06.11.2017 15.55.11 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:55 PM 06.11.2017 15.55.11 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:55 PM 06.11.2017 15.55.11 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:55 PM 06.11.2017 15.55.11 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:55 PM 06.11.2017 15.55.11 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:55 PM 06.11.2017 15.55.11 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:55 PM 06.11.2017 15.55.11 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:55 PM 06.11.2017 15.55.11 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:55 PM 06.11.2017 15.55.05 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:55 PM 06.11.2017 15.55.05 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:55 PM 06.11.2017 15.55.05 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:55 PM 06.11.2017 15.55.05 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:55 PM 06.11.2017 15.55.04 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:55 PM 06.11.2017 15.55.04 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:55 PM 06.11.2017 15.55.04 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:55 PM 06.11.2017 15.55.04 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:55 PM 06.11.2017 15.55.01 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:55 PM 06.11.2017 15.55.01 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:55 PM 06.11.2017 15.55.01 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:55 PM 06.11.2017 15.55.01 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:55 PM 06.11.2017 15.55.01 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:55 PM 06.11.2017 15.55.01 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:55 PM 06.11.2017 15.55.01 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:55 PM 06.11.2017 15.55.01 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:55 PM 06.11.2017 15.54.56 Suspicious action was blocked mcci+McciTrayApp Action: Hook incoming messages of the stream Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:54 PM 06.11.2017 15.54.56 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:54 PM 06.11.2017 15.54.56 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:54 PM 06.11.2017 15.54.56 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:54 PM 06.11.2017 15.54.56 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:54 PM 06.11.2017 15.54.56 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:54 PM 06.11.2017 15.54.56 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:54 PM 06.11.2017 15.54.56 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:54 PM 06.11.2017 15.54.56 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:54 PM 06.11.2017 15.54.53 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:54 PM 06.11.2017 15.54.53 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:54 PM 06.11.2017 15.54.53 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:54 PM 06.11.2017 15.54.53 Suspicious action was blocked mcci+McciTrayApp Action: Hook incoming messages of the stream Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:54 PM 06.11.2017 15.54.53 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:54 PM 06.11.2017 15.54.53 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:54 PM 06.11.2017 15.54.53 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:54 PM 06.11.2017 15.54.53 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:54 PM 06.11.2017 15.54.53 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:54 PM 06.11.2017 15.54.51 Suspicious action was blocked Malwarebytes Anti-Exploit 64bit tasks Action: Access memory of other processes Application: Malwarebytes Anti-Exploit 64bit tasks Application path: C:\Program Files (x86)\Malwarebytes Anti-Exploit\mbae64.exe Time: 11/6/2017 3:54 PM 06.11.2017 15.54.51 Suspicious action was blocked Malwarebytes Anti-Exploit 64bit tasks Action: Read memory from other processes Application: Malwarebytes Anti-Exploit 64bit tasks Application path: C:\Program Files (x86)\Malwarebytes Anti-Exploit\mbae64.exe Time: 11/6/2017 3:54 PM 06.11.2017 15.54.51 Suspicious action was blocked Malwarebytes Anti-Exploit 64bit tasks Action: Duplicate internal process handle Application: Malwarebytes Anti-Exploit 64bit tasks Application path: C:\Program Files (x86)\Malwarebytes Anti-Exploit\mbae64.exe Time: 11/6/2017 3:54 PM 06.11.2017 15.54.51 Suspicious action was blocked Malwarebytes Anti-Exploit 64bit tasks Action: Perform code injection Application: Malwarebytes Anti-Exploit 64bit tasks Application path: C:\Program Files (x86)\Malwarebytes Anti-Exploit\mbae64.exe Time: 11/6/2017 3:54 PM 06.11.2017 15.54.50 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:54 PM 06.11.2017 15.54.50 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:54 PM 06.11.2017 15.54.50 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:54 PM 06.11.2017 15.54.50 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:54 PM 06.11.2017 15.54.50 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:54 PM 06.11.2017 15.54.50 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:54 PM 06.11.2017 15.54.50 Suspicious action was blocked Malwarebytes Anti-Exploit 64bit tasks Action: Access memory of other processes Application: Malwarebytes Anti-Exploit 64bit tasks Application path: C:\Program Files (x86)\Malwarebytes Anti-Exploit\mbae64.exe Time: 11/6/2017 3:54 PM 06.11.2017 15.54.50 Suspicious action was blocked Malwarebytes Anti-Exploit 64bit tasks Action: Read memory from other processes Application: Malwarebytes Anti-Exploit 64bit tasks Application path: C:\Program Files (x86)\Malwarebytes Anti-Exploit\mbae64.exe Time: 11/6/2017 3:54 PM 06.11.2017 15.54.50 Suspicious action was blocked Malwarebytes Anti-Exploit 64bit tasks Action: Duplicate internal process handle Application: Malwarebytes Anti-Exploit 64bit tasks Application path: C:\Program Files (x86)\Malwarebytes Anti-Exploit\mbae64.exe Time: 11/6/2017 3:54 PM 06.11.2017 15.54.50 Suspicious action was blocked Malwarebytes Anti-Exploit 64bit tasks Action: Perform code injection Application: Malwarebytes Anti-Exploit 64bit tasks Application path: C:\Program Files (x86)\Malwarebytes Anti-Exploit\mbae64.exe Time: 11/6/2017 3:54 PM 06.11.2017 15.54.50 Suspicious action was blocked Malwarebytes Anti-Exploit 64bit tasks Action: Access memory of other processes Application: Malwarebytes Anti-Exploit 64bit tasks Application path: C:\Program Files (x86)\Malwarebytes Anti-Exploit\mbae64.exe Time: 11/6/2017 3:54 PM 06.11.2017 15.54.50 Suspicious action was blocked Malwarebytes Anti-Exploit 64bit tasks Action: Read memory from other processes Application: Malwarebytes Anti-Exploit 64bit tasks Application path: C:\Program Files (x86)\Malwarebytes Anti-Exploit\mbae64.exe Time: 11/6/2017 3:54 PM 06.11.2017 15.54.50 Suspicious action was blocked Malwarebytes Anti-Exploit 64bit tasks Action: Duplicate internal process handle Application: Malwarebytes Anti-Exploit 64bit tasks Application path: C:\Program Files (x86)\Malwarebytes Anti-Exploit\mbae64.exe Time: 11/6/2017 3:54 PM 06.11.2017 15.54.50 Suspicious action was blocked Malwarebytes Anti-Exploit 64bit tasks Action: Perform code injection Application: Malwarebytes Anti-Exploit 64bit tasks Application path: C:\Program Files (x86)\Malwarebytes Anti-Exploit\mbae64.exe Time: 11/6/2017 3:54 PM 06.11.2017 15.54.48 Suspicious action was blocked Malwarebytes Anti-Exploit 64bit tasks Action: Access memory of other processes Application: Malwarebytes Anti-Exploit 64bit tasks Application path: C:\Program Files (x86)\Malwarebytes Anti-Exploit\mbae64.exe Time: 11/6/2017 3:54 PM 06.11.2017 15.54.48 Suspicious action was blocked Malwarebytes Anti-Exploit 64bit tasks Action: Read memory from other processes Application: Malwarebytes Anti-Exploit 64bit tasks Application path: C:\Program Files (x86)\Malwarebytes Anti-Exploit\mbae64.exe Time: 11/6/2017 3:54 PM 06.11.2017 15.54.48 Suspicious action was blocked Malwarebytes Anti-Exploit 64bit tasks Action: Duplicate internal process handle Application: Malwarebytes Anti-Exploit 64bit tasks Application path: C:\Program Files (x86)\Malwarebytes Anti-Exploit\mbae64.exe Time: 11/6/2017 3:54 PM 06.11.2017 15.54.48 Suspicious action was blocked Malwarebytes Anti-Exploit 64bit tasks Action: Perform code injection Application: Malwarebytes Anti-Exploit 64bit tasks Application path: C:\Program Files (x86)\Malwarebytes Anti-Exploit\mbae64.exe Time: 11/6/2017 3:54 PM 06.11.2017 15.06.51 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:06 PM 06.11.2017 15.06.51 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:06 PM 06.11.2017 15.06.49 Suspicious action was blocked Console Window Host Action: Access memory of other processes Application: Console Window Host Application path: C:\Windows\System32\conhost.exe Time: 11/6/2017 3:06 PM 06.11.2017 15.06.49 Suspicious action was blocked Console Window Host Action: Read memory from other processes Application: Console Window Host Application path: C:\Windows\System32\conhost.exe Time: 11/6/2017 3:06 PM 06.11.2017 15.06.49 Suspicious action was blocked Console Window Host Action: Duplicate internal process handle Application: Console Window Host Application path: C:\Windows\System32\conhost.exe Time: 11/6/2017 3:06 PM 06.11.2017 15.06.49 Suspicious action was blocked Console Window Host Action: Perform code injection Application: Console Window Host Application path: C:\Windows\System32\conhost.exe Time: 11/6/2017 3:06 PM 06.11.2017 15.06.47 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:06 PM 06.11.2017 15.06.47 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:06 PM 06.11.2017 15.06.47 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:06 PM 06.11.2017 15.06.47 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:06 PM 06.11.2017 15.06.47 Suspicious action was blocked mcci+McciTrayApp Action: Hook incoming messages of the stream Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:06 PM 06.11.2017 15.06.47 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:06 PM 06.11.2017 15.06.47 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:06 PM 06.11.2017 15.06.47 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:06 PM 06.11.2017 15.06.47 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:06 PM 06.11.2017 15.06.44 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:06 PM 06.11.2017 15.06.44 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:06 PM 06.11.2017 15.06.44 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:06 PM 06.11.2017 15.06.44 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:06 PM 06.11.2017 15.06.44 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:06 PM 06.11.2017 15.06.44 Suspicious action was blocked mcci+McciTrayApp Action: Hook incoming messages of the stream Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:06 PM 06.11.2017 15.06.44 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:06 PM 06.11.2017 15.06.44 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:06 PM 06.11.2017 15.06.44 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:06 PM 06.11.2017 15.06.44 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:06 PM 06.11.2017 15.06.44 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:06 PM 06.11.2017 15.06.39 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:06 PM 06.11.2017 15.06.39 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:06 PM 06.11.2017 15.06.39 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:06 PM 06.11.2017 15.06.39 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:06 PM 06.11.2017 15.06.39 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:06 PM 06.11.2017 15.06.39 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:06 PM 06.11.2017 15.06.39 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:06 PM 06.11.2017 15.06.39 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:06 PM 06.11.2017 15.06.39 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:06 PM 06.11.2017 15.06.39 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:06 PM 06.11.2017 15.06.09 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:06 PM 06.11.2017 15.06.09 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:06 PM 06.11.2017 15.06.09 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:06 PM 06.11.2017 15.06.09 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:06 PM 06.11.2017 15.06.09 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:06 PM 06.11.2017 15.06.09 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:06 PM 06.11.2017 15.06.09 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:06 PM 06.11.2017 15.06.09 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:06 PM 06.11.2017 15.06.09 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:06 PM 06.11.2017 15.06.09 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:06 PM 06.11.2017 15.05.17 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:05 PM 06.11.2017 15.05.17 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:05 PM 06.11.2017 15.05.17 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:05 PM 06.11.2017 15.05.17 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:05 PM 06.11.2017 15.05.17 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:05 PM 06.11.2017 15.05.17 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:05 PM 06.11.2017 15.05.17 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:05 PM 06.11.2017 15.05.17 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:05 PM 06.11.2017 15.05.17 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:05 PM 06.11.2017 15.05.17 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:05 PM 06.11.2017 15.05.11 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:05 PM 06.11.2017 15.05.11 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:05 PM 06.11.2017 15.05.11 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:05 PM 06.11.2017 15.05.11 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:05 PM 06.11.2017 15.05.11 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:05 PM 06.11.2017 15.05.11 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:05 PM 06.11.2017 15.05.11 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:05 PM 06.11.2017 15.05.11 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:05 PM 06.11.2017 15.05.11 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:05 PM 06.11.2017 15.05.11 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:05 PM 06.11.2017 15.05.08 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:05 PM 06.11.2017 15.05.08 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:05 PM 06.11.2017 15.05.08 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:05 PM 06.11.2017 15.05.08 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:05 PM 06.11.2017 15.05.08 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:05 PM 06.11.2017 15.05.08 Suspicious action was blocked mcci+McciTrayApp Action: Hook incoming messages of the stream Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:05 PM 06.11.2017 15.05.08 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:05 PM 06.11.2017 15.05.08 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:05 PM 06.11.2017 15.05.08 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:05 PM 06.11.2017 15.05.08 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:05 PM 06.11.2017 15.05.08 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:05 PM 06.11.2017 15.05.03 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:05 PM 06.11.2017 15.05.03 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:05 PM 06.11.2017 15.05.03 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:05 PM 06.11.2017 15.05.03 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:05 PM 06.11.2017 15.05.03 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:05 PM 06.11.2017 15.05.03 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:05 PM 06.11.2017 15.05.03 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:05 PM 06.11.2017 15.05.03 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:05 PM 06.11.2017 15.05.03 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:05 PM 06.11.2017 15.05.03 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:05 PM 06.11.2017 15.04.59 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:04 PM 06.11.2017 15.04.59 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:04 PM 06.11.2017 15.04.59 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:04 PM 06.11.2017 15.04.59 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:04 PM 06.11.2017 15.04.59 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:04 PM 06.11.2017 15.04.59 Suspicious action was blocked mcci+McciTrayApp Action: Hook incoming messages of the stream Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:04 PM 06.11.2017 15.04.59 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:04 PM 06.11.2017 15.04.59 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:04 PM 06.11.2017 15.04.59 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:04 PM 06.11.2017 15.04.59 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:04 PM 06.11.2017 15.04.59 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:04 PM 06.11.2017 15.04.55 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:04 PM 06.11.2017 15.04.55 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:04 PM 06.11.2017 15.04.55 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:04 PM 06.11.2017 15.04.55 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:04 PM 06.11.2017 15.04.55 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:04 PM 06.11.2017 15.04.55 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:04 PM 06.11.2017 15.04.55 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:04 PM 06.11.2017 15.04.55 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:04 PM 06.11.2017 15.04.55 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:04 PM 06.11.2017 15.04.55 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:04 PM 06.11.2017 15.04.55 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:04 PM 06.11.2017 15.04.55 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:04 PM 06.11.2017 15.04.50 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:04 PM 06.11.2017 15.04.50 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:04 PM 06.11.2017 15.04.50 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:04 PM 06.11.2017 15.04.50 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:04 PM 06.11.2017 15.04.50 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:04 PM 06.11.2017 15.04.50 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:04 PM 06.11.2017 15.04.50 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:04 PM 06.11.2017 15.04.50 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:04 PM 06.11.2017 15.04.50 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:04 PM 06.11.2017 15.04.50 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:04 PM 06.11.2017 15.04.50 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:04 PM 06.11.2017 15.04.50 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:04 PM 06.11.2017 15.04.45 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:04 PM 06.11.2017 15.04.45 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:04 PM 06.11.2017 15.04.45 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:04 PM 06.11.2017 15.04.45 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:04 PM 06.11.2017 15.04.45 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:04 PM 06.11.2017 15.04.45 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:04 PM 06.11.2017 15.04.29 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:04 PM 06.11.2017 15.04.29 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:04 PM 06.11.2017 15.04.29 Suspicious action was blocked mcci+McciTrayApp Action: Hook incoming messages of the stream Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:04 PM 06.11.2017 15.04.29 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:04 PM 06.11.2017 15.04.29 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:04 PM 06.11.2017 15.04.29 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:04 PM 06.11.2017 15.04.29 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:04 PM 06.11.2017 15.04.29 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:04 PM 06.11.2017 15.04.29 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:04 PM 06.11.2017 15.04.29 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:04 PM 06.11.2017 15.04.29 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:04 PM 06.11.2017 15.04.29 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:04 PM 06.11.2017 15.04.29 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:04 PM 06.11.2017 15.04.29 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:04 PM 06.11.2017 15.04.29 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:04 PM 06.11.2017 15.04.22 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:04 PM 06.11.2017 15.04.22 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:04 PM 06.11.2017 15.04.22 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:04 PM 06.11.2017 15.04.22 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:04 PM 06.11.2017 15.04.22 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:04 PM 06.11.2017 15.04.22 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:04 PM 06.11.2017 15.04.22 Suspicious action was blocked mcci+McciTrayApp Action: Hook incoming messages of the stream Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:04 PM 06.11.2017 15.04.22 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:04 PM 06.11.2017 15.04.22 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:04 PM 06.11.2017 15.04.22 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:04 PM 06.11.2017 15.04.22 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:04 PM 06.11.2017 15.04.22 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:04 PM 06.11.2017 15.04.22 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:04 PM 06.11.2017 15.04.22 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:04 PM 06.11.2017 15.04.22 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:04 PM 06.11.2017 15.04.10 Suspicious action was blocked mcci+McciTrayApp Action: Hook incoming messages of the stream Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:04 PM 06.11.2017 15.04.10 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:04 PM 06.11.2017 15.04.10 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:04 PM 06.11.2017 15.04.10 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:04 PM 06.11.2017 15.04.10 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:04 PM 06.11.2017 15.04.10 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:04 PM 06.11.2017 15.04.10 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:04 PM 06.11.2017 15.04.10 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:04 PM 06.11.2017 15.04.10 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:04 PM 06.11.2017 15.04.10 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:04 PM 06.11.2017 15.04.10 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:04 PM 06.11.2017 15.04.10 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:04 PM 06.11.2017 15.04.10 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:04 PM 06.11.2017 15.04.10 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:04 PM 06.11.2017 15.04.10 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:04 PM 06.11.2017 15.04.01 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:04 PM 06.11.2017 15.04.01 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:04 PM 06.11.2017 15.04.01 Suspicious action was blocked mcci+McciTrayApp Action: Hook incoming messages of the stream Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:04 PM 06.11.2017 15.04.01 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:04 PM 06.11.2017 15.04.01 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:04 PM 06.11.2017 15.04.01 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:04 PM 06.11.2017 15.04.01 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:04 PM 06.11.2017 15.04.01 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:04 PM 06.11.2017 15.04.01 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:04 PM 06.11.2017 15.04.01 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:04 PM 06.11.2017 15.04.01 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:04 PM 06.11.2017 15.04.01 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:04 PM 06.11.2017 15.04.01 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:04 PM 06.11.2017 15.04.01 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:04 PM 06.11.2017 15.04.01 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:04 PM 06.11.2017 15.03.57 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:03 PM 06.11.2017 15.03.57 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:03 PM 06.11.2017 15.03.57 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:03 PM 06.11.2017 15.03.57 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:03 PM 06.11.2017 15.03.57 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:03 PM 06.11.2017 15.03.57 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:03 PM 06.11.2017 15.03.57 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:03 PM 06.11.2017 15.03.57 Suspicious action was blocked mcci+McciTrayApp Action: Hook incoming messages of the stream Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:03 PM 06.11.2017 15.03.57 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:03 PM 06.11.2017 15.03.57 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:03 PM 06.11.2017 15.03.57 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:03 PM 06.11.2017 15.03.57 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:03 PM 06.11.2017 15.03.57 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:03 PM 06.11.2017 15.03.57 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:03 PM 06.11.2017 15.03.57 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:03 PM 06.11.2017 15.03.54 Suspicious action was blocked Malwarebytes Anti-Exploit 64bit tasks Action: Perform code injection Application: Malwarebytes Anti-Exploit 64bit tasks Application path: C:\Program Files (x86)\Malwarebytes Anti-Exploit\mbae64.exe Time: 11/6/2017 3:03 PM 06.11.2017 15.03.54 Suspicious action was blocked Malwarebytes Anti-Exploit 64bit tasks Action: Duplicate internal process handle Application: Malwarebytes Anti-Exploit 64bit tasks Application path: C:\Program Files (x86)\Malwarebytes Anti-Exploit\mbae64.exe Time: 11/6/2017 3:03 PM 06.11.2017 15.03.54 Suspicious action was blocked Malwarebytes Anti-Exploit 64bit tasks Action: Read memory from other processes Application: Malwarebytes Anti-Exploit 64bit tasks Application path: C:\Program Files (x86)\Malwarebytes Anti-Exploit\mbae64.exe Time: 11/6/2017 3:03 PM 06.11.2017 15.03.54 Suspicious action was blocked Malwarebytes Anti-Exploit 64bit tasks Action: Access memory of other processes Application: Malwarebytes Anti-Exploit 64bit tasks Application path: C:\Program Files (x86)\Malwarebytes Anti-Exploit\mbae64.exe Time: 11/6/2017 3:03 PM 06.11.2017 15.03.49 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:03 PM 06.11.2017 15.03.49 Suspicious action was blocked mcci+McciTrayApp Action: Hook incoming messages of the stream Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:03 PM 06.11.2017 15.03.49 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:03 PM 06.11.2017 15.03.49 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:03 PM 06.11.2017 15.03.49 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:03 PM 06.11.2017 15.03.49 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:03 PM 06.11.2017 15.03.49 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:03 PM 06.11.2017 15.03.49 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:03 PM 06.11.2017 15.03.49 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:03 PM 06.11.2017 15.03.49 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:03 PM 06.11.2017 15.03.49 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:03 PM 06.11.2017 15.03.49 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:03 PM 06.11.2017 15.03.49 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 3:03 PM 06.11.2017 15.03.47 Suspicious action was blocked Malwarebytes Anti-Exploit 64bit tasks Action: Access memory of other processes Application: Malwarebytes Anti-Exploit 64bit tasks Application path: C:\Program Files (x86)\Malwarebytes Anti-Exploit\mbae64.exe Time: 11/6/2017 3:03 PM 06.11.2017 15.03.47 Suspicious action was blocked Malwarebytes Anti-Exploit 64bit tasks Action: Read memory from other processes Application: Malwarebytes Anti-Exploit 64bit tasks Application path: C:\Program Files (x86)\Malwarebytes Anti-Exploit\mbae64.exe Time: 11/6/2017 3:03 PM 06.11.2017 15.03.47 Suspicious action was blocked Malwarebytes Anti-Exploit 64bit tasks Action: Duplicate internal process handle Application: Malwarebytes Anti-Exploit 64bit tasks Application path: C:\Program Files (x86)\Malwarebytes Anti-Exploit\mbae64.exe Time: 11/6/2017 3:03 PM 06.11.2017 15.03.47 Suspicious action was blocked Malwarebytes Anti-Exploit 64bit tasks Action: Perform code injection Application: Malwarebytes Anti-Exploit 64bit tasks Application path: C:\Program Files (x86)\Malwarebytes Anti-Exploit\mbae64.exe Time: 11/6/2017 3:03 PM 06.11.2017 14.59.11 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:59 PM 06.11.2017 14.59.11 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:59 PM 06.11.2017 14.59.11 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:59 PM 06.11.2017 14.59.11 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:59 PM 06.11.2017 14.59.11 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:59 PM 06.11.2017 14.59.11 Suspicious action was blocked mcci+McciTrayApp Action: Hook incoming messages of the stream Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:59 PM 06.11.2017 14.59.11 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:59 PM 06.11.2017 14.59.11 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:59 PM 06.11.2017 14.59.11 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:59 PM 06.11.2017 14.59.11 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:59 PM 06.11.2017 14.59.11 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:59 PM 06.11.2017 14.57.13 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:57 PM 06.11.2017 14.57.13 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:57 PM 06.11.2017 14.57.13 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:57 PM 06.11.2017 14.57.13 Suspicious action was blocked mcci+McciTrayApp Action: Hook incoming messages of the stream Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:57 PM 06.11.2017 14.57.13 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:57 PM 06.11.2017 14.57.13 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:57 PM 06.11.2017 14.57.13 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:57 PM 06.11.2017 14.57.13 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:57 PM 06.11.2017 14.57.13 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:57 PM 06.11.2017 14.57.13 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:57 PM 06.11.2017 14.57.13 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:57 PM 06.11.2017 14.57.10 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:57 PM 06.11.2017 14.57.10 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:57 PM 06.11.2017 14.57.10 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:57 PM 06.11.2017 14.57.10 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:57 PM 06.11.2017 14.57.10 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:57 PM 06.11.2017 14.57.10 Suspicious action was blocked mcci+McciTrayApp Action: Hook incoming messages of the stream Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:57 PM 06.11.2017 14.57.10 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:57 PM 06.11.2017 14.57.10 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:57 PM 06.11.2017 14.57.10 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:57 PM 06.11.2017 14.57.10 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:57 PM 06.11.2017 14.57.10 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:57 PM 06.11.2017 14.56.14 Suspicious action was blocked mcci+McciTrayApp Action: Hook incoming messages of the stream Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:56 PM 06.11.2017 14.56.14 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:56 PM 06.11.2017 14.56.14 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:56 PM 06.11.2017 14.56.14 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:56 PM 06.11.2017 14.56.14 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:56 PM 06.11.2017 14.56.14 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:56 PM 06.11.2017 14.56.14 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:56 PM 06.11.2017 14.56.14 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:56 PM 06.11.2017 14.56.14 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:56 PM 06.11.2017 14.56.14 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:56 PM 06.11.2017 14.56.14 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:56 PM 06.11.2017 14.56.11 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:56 PM 06.11.2017 14.56.11 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:56 PM 06.11.2017 14.56.11 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:56 PM 06.11.2017 14.56.11 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:56 PM 06.11.2017 14.56.11 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:56 PM 06.11.2017 14.56.11 Suspicious action was blocked mcci+McciTrayApp Action: Hook incoming messages of the stream Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:56 PM 06.11.2017 14.56.11 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:56 PM 06.11.2017 14.56.11 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:56 PM 06.11.2017 14.56.11 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:56 PM 06.11.2017 14.56.11 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:56 PM 06.11.2017 14.56.11 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:56 PM 06.11.2017 14.55.54 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:55 PM 06.11.2017 14.55.54 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:55 PM 06.11.2017 14.55.54 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:55 PM 06.11.2017 14.55.54 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:55 PM 06.11.2017 14.55.54 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:55 PM 06.11.2017 14.55.54 Suspicious action was blocked mcci+McciTrayApp Action: Hook incoming messages of the stream Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:55 PM 06.11.2017 14.55.54 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:55 PM 06.11.2017 14.55.54 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:55 PM 06.11.2017 14.55.54 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:55 PM 06.11.2017 14.55.54 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:55 PM 06.11.2017 14.55.54 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:55 PM 06.11.2017 14.55.49 Suspicious action was blocked mcci+McciTrayApp Action: Hook incoming messages of the stream Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:55 PM 06.11.2017 14.55.49 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:55 PM 06.11.2017 14.55.49 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:55 PM 06.11.2017 14.55.49 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:55 PM 06.11.2017 14.55.49 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:55 PM 06.11.2017 14.55.49 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:55 PM 06.11.2017 14.55.49 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:55 PM 06.11.2017 14.55.49 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:55 PM 06.11.2017 14.55.49 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:55 PM 06.11.2017 14.55.49 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:55 PM 06.11.2017 14.55.49 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:55 PM 06.11.2017 14.55.20 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:55 PM 06.11.2017 14.55.20 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:55 PM 06.11.2017 14.55.20 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:55 PM 06.11.2017 14.55.20 Suspicious action was blocked mcci+McciTrayApp Action: Hook incoming messages of the stream Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:55 PM 06.11.2017 14.55.20 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:55 PM 06.11.2017 14.55.20 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:55 PM 06.11.2017 14.55.20 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:55 PM 06.11.2017 14.55.20 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:55 PM 06.11.2017 14.55.20 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:55 PM 06.11.2017 14.55.20 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:55 PM 06.11.2017 14.55.20 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:55 PM 06.11.2017 14.54.58 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:54 PM 06.11.2017 14.54.58 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:54 PM 06.11.2017 14.54.58 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:54 PM 06.11.2017 14.54.58 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:54 PM 06.11.2017 14.54.58 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:54 PM 06.11.2017 14.54.58 Suspicious action was blocked mcci+McciTrayApp Action: Hook incoming messages of the stream Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:54 PM 06.11.2017 14.54.58 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:54 PM 06.11.2017 14.54.58 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:54 PM 06.11.2017 14.54.58 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:54 PM 06.11.2017 14.54.58 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:54 PM 06.11.2017 14.54.58 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:54 PM 06.11.2017 14.54.56 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:54 PM 06.11.2017 14.54.56 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:54 PM 06.11.2017 14.54.56 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:54 PM 06.11.2017 14.54.56 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:54 PM 06.11.2017 14.54.56 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:54 PM 06.11.2017 14.54.55 Suspicious action was blocked Malwarebytes Anti-Exploit 64bit tasks Action: Access memory of other processes Application: Malwarebytes Anti-Exploit 64bit tasks Application path: C:\Program Files (x86)\Malwarebytes Anti-Exploit\mbae64.exe Time: 11/6/2017 2:54 PM 06.11.2017 14.54.55 Suspicious action was blocked Malwarebytes Anti-Exploit 64bit tasks Action: Read memory from other processes Application: Malwarebytes Anti-Exploit 64bit tasks Application path: C:\Program Files (x86)\Malwarebytes Anti-Exploit\mbae64.exe Time: 11/6/2017 2:54 PM 06.11.2017 14.54.55 Suspicious action was blocked Malwarebytes Anti-Exploit 64bit tasks Action: Duplicate internal process handle Application: Malwarebytes Anti-Exploit 64bit tasks Application path: C:\Program Files (x86)\Malwarebytes Anti-Exploit\mbae64.exe Time: 11/6/2017 2:54 PM 06.11.2017 14.54.55 Suspicious action was blocked Malwarebytes Anti-Exploit 64bit tasks Action: Perform code injection Application: Malwarebytes Anti-Exploit 64bit tasks Application path: C:\Program Files (x86)\Malwarebytes Anti-Exploit\mbae64.exe Time: 11/6/2017 2:54 PM 06.11.2017 14.54.52 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:54 PM 06.11.2017 14.54.52 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:54 PM 06.11.2017 14.54.52 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:54 PM 06.11.2017 14.54.52 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:54 PM 06.11.2017 14.54.52 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:54 PM 06.11.2017 14.54.52 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:54 PM 06.11.2017 14.54.52 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:54 PM 06.11.2017 14.54.52 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:54 PM 06.11.2017 14.54.38 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:54 PM 06.11.2017 14.54.38 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:54 PM 06.11.2017 14.54.38 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:54 PM 06.11.2017 14.54.38 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:54 PM 06.11.2017 14.54.38 Suspicious action was blocked mcci+McciTrayApp Action: Hook incoming messages of the stream Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:54 PM 06.11.2017 14.54.37 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:54 PM 06.11.2017 14.54.37 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:54 PM 06.11.2017 14.54.37 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:54 PM 06.11.2017 14.54.37 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:54 PM 06.11.2017 14.54.31 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:54 PM 06.11.2017 14.54.31 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:54 PM 06.11.2017 14.54.31 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:54 PM 06.11.2017 14.54.31 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:54 PM 06.11.2017 14.54.31 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:54 PM 06.11.2017 14.54.31 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:54 PM 06.11.2017 14.54.31 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:54 PM 06.11.2017 14.54.31 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:54 PM 06.11.2017 14.54.21 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:54 PM 06.11.2017 14.54.21 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:54 PM 06.11.2017 14.54.21 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:54 PM 06.11.2017 14.54.21 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:54 PM 06.11.2017 14.54.21 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:54 PM 06.11.2017 14.54.21 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:54 PM 06.11.2017 14.54.21 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:54 PM 06.11.2017 14.54.21 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:54 PM 06.11.2017 14.54.11 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:54 PM 06.11.2017 14.54.11 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:54 PM 06.11.2017 14.54.11 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:54 PM 06.11.2017 14.54.11 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:54 PM 06.11.2017 14.54.11 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:54 PM 06.11.2017 14.54.11 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:54 PM 06.11.2017 14.54.11 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:54 PM 06.11.2017 14.54.11 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:54 PM 06.11.2017 14.53.55 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:53 PM 06.11.2017 14.53.55 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:53 PM 06.11.2017 14.53.55 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:53 PM 06.11.2017 14.53.55 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:53 PM 06.11.2017 14.53.55 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:53 PM 06.11.2017 14.53.55 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:53 PM 06.11.2017 14.53.55 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:53 PM 06.11.2017 14.53.55 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:53 PM 06.11.2017 14.53.53 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:53 PM 06.11.2017 14.53.53 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:53 PM 06.11.2017 14.53.53 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:53 PM 06.11.2017 14.53.53 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:53 PM 06.11.2017 14.53.48 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:53 PM 06.11.2017 14.53.48 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:53 PM 06.11.2017 14.53.48 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:53 PM 06.11.2017 14.53.48 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:53 PM 06.11.2017 14.53.48 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:53 PM 06.11.2017 14.53.48 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:53 PM 06.11.2017 14.53.48 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:53 PM 06.11.2017 14.53.48 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:53 PM 06.11.2017 14.53.45 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:53 PM 06.11.2017 14.53.45 Suspicious action was blocked mcci+McciTrayApp Action: Hook incoming messages of the stream Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:53 PM 06.11.2017 14.53.45 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:53 PM 06.11.2017 14.53.45 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:53 PM 06.11.2017 14.53.45 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:53 PM 06.11.2017 14.53.45 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:53 PM 06.11.2017 14.53.45 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:53 PM 06.11.2017 14.53.45 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:53 PM 06.11.2017 14.53.45 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:53 PM 06.11.2017 14.53.43 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:53 PM 06.11.2017 14.53.43 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:53 PM 06.11.2017 14.53.43 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:53 PM 06.11.2017 14.53.43 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:53 PM 06.11.2017 14.53.39 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:53 PM 06.11.2017 14.53.39 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:53 PM 06.11.2017 14.53.39 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:53 PM 06.11.2017 14.53.39 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:53 PM 06.11.2017 14.53.39 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:53 PM 06.11.2017 14.53.39 Suspicious action was blocked mcci+McciTrayApp Action: Hook incoming messages of the stream Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:53 PM 06.11.2017 14.53.39 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:53 PM 06.11.2017 14.53.39 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:53 PM 06.11.2017 14.53.39 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:53 PM 06.11.2017 14.53.39 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:53 PM 06.11.2017 14.53.39 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:53 PM 06.11.2017 14.53.29 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:53 PM 06.11.2017 14.53.29 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:53 PM 06.11.2017 14.53.29 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:53 PM 06.11.2017 14.53.29 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:53 PM 06.11.2017 14.53.29 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:53 PM 06.11.2017 14.53.29 Suspicious action was blocked mcci+McciTrayApp Action: Hook incoming messages of the stream Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:53 PM 06.11.2017 14.53.29 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:53 PM 06.11.2017 14.53.29 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:53 PM 06.11.2017 14.53.29 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:53 PM 06.11.2017 14.53.29 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:53 PM 06.11.2017 14.53.29 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:53 PM 06.11.2017 14.53.23 Suspicious action was blocked mcci+McciTrayApp Action: Hook incoming messages of the stream Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:53 PM 06.11.2017 14.53.23 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:53 PM 06.11.2017 14.53.23 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:53 PM 06.11.2017 14.53.23 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:53 PM 06.11.2017 14.53.23 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:53 PM 06.11.2017 14.53.23 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:53 PM 06.11.2017 14.53.23 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:53 PM 06.11.2017 14.53.23 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:53 PM 06.11.2017 14.53.23 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:53 PM 06.11.2017 14.53.23 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:53 PM 06.11.2017 14.53.23 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:53 PM 06.11.2017 14.53.19 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:53 PM 06.11.2017 14.53.19 Suspicious action was blocked mcci+McciTrayApp Action: Hook incoming messages of the stream Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:53 PM 06.11.2017 14.53.19 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:53 PM 06.11.2017 14.53.19 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:53 PM 06.11.2017 14.53.19 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:53 PM 06.11.2017 14.53.19 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:53 PM 06.11.2017 14.53.19 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:53 PM 06.11.2017 14.53.19 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:53 PM 06.11.2017 14.53.19 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:53 PM 06.11.2017 14.53.19 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:53 PM 06.11.2017 14.53.19 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:53 PM 06.11.2017 14.52.25 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:52 PM 06.11.2017 14.52.25 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:52 PM 06.11.2017 14.52.25 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:52 PM 06.11.2017 14.52.25 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:52 PM 06.11.2017 14.52.25 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:52 PM 06.11.2017 14.52.25 Suspicious action was blocked mcci+McciTrayApp Action: Hook incoming messages of the stream Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:52 PM 06.11.2017 14.52.25 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:52 PM 06.11.2017 14.52.25 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:52 PM 06.11.2017 14.52.25 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:52 PM 06.11.2017 14.52.25 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:52 PM 06.11.2017 14.52.25 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:52 PM 06.11.2017 14.51.23 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:51 PM 06.11.2017 14.51.23 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:51 PM 06.11.2017 14.51.23 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:51 PM 06.11.2017 14.51.23 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:51 PM 06.11.2017 14.51.23 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:51 PM 06.11.2017 14.51.23 Suspicious action was blocked mcci+McciTrayApp Action: Hook incoming messages of the stream Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:51 PM 06.11.2017 14.51.23 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:51 PM 06.11.2017 14.51.23 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:51 PM 06.11.2017 14.51.23 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:51 PM 06.11.2017 14.51.23 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:51 PM 06.11.2017 14.51.23 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:51 PM 06.11.2017 14.49.20 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:49 PM 06.11.2017 14.49.20 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:49 PM 06.11.2017 14.49.20 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:49 PM 06.11.2017 14.49.20 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:49 PM 06.11.2017 14.49.20 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:49 PM 06.11.2017 14.49.20 Suspicious action was blocked mcci+McciTrayApp Action: Hook incoming messages of the stream Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:49 PM 06.11.2017 14.49.20 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:49 PM 06.11.2017 14.49.20 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:49 PM 06.11.2017 14.49.20 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:49 PM 06.11.2017 14.49.20 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:49 PM 06.11.2017 14.49.20 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:49 PM 06.11.2017 14.49.02 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:49 PM 06.11.2017 14.49.02 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:49 PM 06.11.2017 14.49.02 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:49 PM 06.11.2017 14.49.02 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:49 PM 06.11.2017 14.49.02 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:49 PM 06.11.2017 14.49.02 Suspicious action was blocked mcci+McciTrayApp Action: Hook incoming messages of the stream Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:49 PM 06.11.2017 14.49.02 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:49 PM 06.11.2017 14.49.02 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:49 PM 06.11.2017 14.49.02 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:49 PM 06.11.2017 14.49.02 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:49 PM 06.11.2017 14.49.02 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:49 PM 06.11.2017 14.48.55 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:48 PM 06.11.2017 14.48.55 Suspicious action was blocked mcci+McciTrayApp Action: Hook incoming messages of the stream Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:48 PM 06.11.2017 14.48.55 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:48 PM 06.11.2017 14.48.55 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:48 PM 06.11.2017 14.48.55 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:48 PM 06.11.2017 14.48.55 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:48 PM 06.11.2017 14.48.55 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:48 PM 06.11.2017 14.48.55 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:48 PM 06.11.2017 14.48.55 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:48 PM 06.11.2017 14.48.55 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:48 PM 06.11.2017 14.48.55 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:48 PM 06.11.2017 14.48.27 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:48 PM 06.11.2017 14.48.27 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:48 PM 06.11.2017 14.48.27 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:48 PM 06.11.2017 14.48.27 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:48 PM 06.11.2017 14.48.27 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:48 PM 06.11.2017 14.48.27 Suspicious action was blocked mcci+McciTrayApp Action: Hook incoming messages of the stream Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:48 PM 06.11.2017 14.48.27 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:48 PM 06.11.2017 14.48.27 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:48 PM 06.11.2017 14.48.27 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:48 PM 06.11.2017 14.48.27 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:48 PM 06.11.2017 14.48.27 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:48 PM 06.11.2017 14.48.14 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:48 PM 06.11.2017 14.48.14 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:48 PM 06.11.2017 14.48.14 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:48 PM 06.11.2017 14.48.14 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:48 PM 06.11.2017 14.48.14 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:48 PM 06.11.2017 14.48.14 Suspicious action was blocked mcci+McciTrayApp Action: Hook incoming messages of the stream Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:48 PM 06.11.2017 14.48.14 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:48 PM 06.11.2017 14.48.14 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:48 PM 06.11.2017 14.48.14 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:48 PM 06.11.2017 14.48.14 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:48 PM 06.11.2017 14.48.14 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:48 PM 06.11.2017 14.48.04 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:48 PM 06.11.2017 14.48.04 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:48 PM 06.11.2017 14.48.04 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:48 PM 06.11.2017 14.48.04 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:48 PM 06.11.2017 14.48.04 Suspicious action was blocked mcci+McciTrayApp Action: Hook incoming messages of the stream Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:48 PM 06.11.2017 14.48.04 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:48 PM 06.11.2017 14.48.04 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:48 PM 06.11.2017 14.48.04 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:48 PM 06.11.2017 14.48.04 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:48 PM 06.11.2017 14.48.04 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:48 PM 06.11.2017 14.48.04 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:48 PM 06.11.2017 14.47.29 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:47 PM 06.11.2017 14.47.29 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:47 PM 06.11.2017 14.47.29 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:47 PM 06.11.2017 14.47.29 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:47 PM 06.11.2017 14.47.29 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:47 PM 06.11.2017 14.47.29 Suspicious action was blocked mcci+McciTrayApp Action: Hook incoming messages of the stream Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:47 PM 06.11.2017 14.47.29 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:47 PM 06.11.2017 14.47.29 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:47 PM 06.11.2017 14.47.29 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:47 PM 06.11.2017 14.47.29 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:47 PM 06.11.2017 14.47.29 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:47 PM 06.11.2017 14.47.18 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:47 PM 06.11.2017 14.47.18 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:47 PM 06.11.2017 14.47.18 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:47 PM 06.11.2017 14.47.18 Suspicious action was blocked mcci+McciTrayApp Action: Hook incoming messages of the stream Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:47 PM 06.11.2017 14.47.18 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:47 PM 06.11.2017 14.47.18 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:47 PM 06.11.2017 14.47.18 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:47 PM 06.11.2017 14.47.18 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:47 PM 06.11.2017 14.47.18 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:47 PM 06.11.2017 14.47.18 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:47 PM 06.11.2017 14.47.18 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:47 PM 06.11.2017 14.46.57 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:46 PM 06.11.2017 14.46.57 Suspicious action was blocked mcci+McciTrayApp Action: Hook incoming messages of the stream Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:46 PM 06.11.2017 14.46.57 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:46 PM 06.11.2017 14.46.57 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:46 PM 06.11.2017 14.46.57 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:46 PM 06.11.2017 14.46.57 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:46 PM 06.11.2017 14.46.57 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:46 PM 06.11.2017 14.46.57 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:46 PM 06.11.2017 14.46.57 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:46 PM 06.11.2017 14.46.57 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:46 PM 06.11.2017 14.46.57 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:46 PM 06.11.2017 14.46.55 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:46 PM 06.11.2017 14.46.55 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:46 PM 06.11.2017 14.46.55 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:46 PM 06.11.2017 14.46.55 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:46 PM 06.11.2017 14.46.55 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:46 PM 06.11.2017 14.46.55 Suspicious action was blocked mcci+McciTrayApp Action: Hook incoming messages of the stream Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:46 PM 06.11.2017 14.46.55 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:46 PM 06.11.2017 14.46.55 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:46 PM 06.11.2017 14.46.55 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:46 PM 06.11.2017 14.46.55 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:46 PM 06.11.2017 14.46.55 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:46 PM 06.11.2017 14.46.33 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:46 PM 06.11.2017 14.46.33 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:46 PM 06.11.2017 14.46.33 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:46 PM 06.11.2017 14.46.33 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:46 PM 06.11.2017 14.46.33 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:46 PM 06.11.2017 14.46.33 Suspicious action was blocked mcci+McciTrayApp Action: Hook incoming messages of the stream Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:46 PM 06.11.2017 14.46.33 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:46 PM 06.11.2017 14.46.33 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:46 PM 06.11.2017 14.46.33 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:46 PM 06.11.2017 14.46.33 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:46 PM 06.11.2017 14.46.33 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:46 PM 06.11.2017 14.45.53 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:45 PM 06.11.2017 14.45.53 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:45 PM 06.11.2017 14.45.53 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:45 PM 06.11.2017 14.45.53 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:45 PM 06.11.2017 14.45.53 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:45 PM 06.11.2017 14.45.53 Suspicious action was blocked mcci+McciTrayApp Action: Hook incoming messages of the stream Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:45 PM 06.11.2017 14.45.53 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:45 PM 06.11.2017 14.45.53 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:45 PM 06.11.2017 14.45.53 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:45 PM 06.11.2017 14.45.53 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:45 PM 06.11.2017 14.45.53 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:45 PM 06.11.2017 14.45.43 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:45 PM 06.11.2017 14.45.43 Suspicious action was blocked mcci+McciTrayApp Action: Hook incoming messages of the stream Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:45 PM 06.11.2017 14.45.43 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:45 PM 06.11.2017 14.45.43 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:45 PM 06.11.2017 14.45.43 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:45 PM 06.11.2017 14.45.43 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:45 PM 06.11.2017 14.45.43 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:45 PM 06.11.2017 14.45.43 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:45 PM 06.11.2017 14.45.43 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:45 PM 06.11.2017 14.45.43 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:45 PM 06.11.2017 14.45.43 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:45 PM 06.11.2017 14.45.39 Suspicious action was blocked Malwarebytes Anti-Exploit 64bit tasks Action: Access memory of other processes Application: Malwarebytes Anti-Exploit 64bit tasks Application path: C:\Program Files (x86)\Malwarebytes Anti-Exploit\mbae64.exe Time: 11/6/2017 2:45 PM 06.11.2017 14.45.39 Suspicious action was blocked Malwarebytes Anti-Exploit 64bit tasks Action: Read memory from other processes Application: Malwarebytes Anti-Exploit 64bit tasks Application path: C:\Program Files (x86)\Malwarebytes Anti-Exploit\mbae64.exe Time: 11/6/2017 2:45 PM 06.11.2017 14.45.39 Suspicious action was blocked Malwarebytes Anti-Exploit 64bit tasks Action: Duplicate internal process handle Application: Malwarebytes Anti-Exploit 64bit tasks Application path: C:\Program Files (x86)\Malwarebytes Anti-Exploit\mbae64.exe Time: 11/6/2017 2:45 PM 06.11.2017 14.45.39 Suspicious action was blocked Malwarebytes Anti-Exploit 64bit tasks Action: Perform code injection Application: Malwarebytes Anti-Exploit 64bit tasks Application path: C:\Program Files (x86)\Malwarebytes Anti-Exploit\mbae64.exe Time: 11/6/2017 2:45 PM 06.11.2017 14.45.33 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:45 PM 06.11.2017 14.45.33 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:45 PM 06.11.2017 14.45.33 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:45 PM 06.11.2017 14.45.33 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:45 PM 06.11.2017 14.45.33 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:45 PM 06.11.2017 14.45.33 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:45 PM 06.11.2017 14.45.33 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:45 PM 06.11.2017 14.45.33 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:45 PM 06.11.2017 14.45.02 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:45 PM 06.11.2017 14.45.02 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:45 PM 06.11.2017 14.45.02 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:45 PM 06.11.2017 14.45.02 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:45 PM 06.11.2017 14.45.02 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:45 PM 06.11.2017 14.45.02 Suspicious action was blocked mcci+McciTrayApp Action: Hook incoming messages of the stream Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:45 PM 06.11.2017 14.45.02 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:45 PM 06.11.2017 14.45.02 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:45 PM 06.11.2017 14.45.02 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:45 PM 06.11.2017 14.45.02 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:45 PM 06.11.2017 14.45.02 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:45 PM 06.11.2017 14.44.27 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:44 PM 06.11.2017 14.44.27 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:44 PM 06.11.2017 14.44.27 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:44 PM 06.11.2017 14.44.27 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:44 PM 06.11.2017 14.44.27 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:44 PM 06.11.2017 14.44.27 Suspicious action was blocked mcci+McciTrayApp Action: Hook incoming messages of the stream Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:44 PM 06.11.2017 14.44.27 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:44 PM 06.11.2017 14.44.27 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:44 PM 06.11.2017 14.44.27 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:44 PM 06.11.2017 14.44.27 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:44 PM 06.11.2017 14.44.27 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:44 PM 06.11.2017 14.44.23 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:44 PM 06.11.2017 14.44.23 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:44 PM 06.11.2017 14.44.23 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:44 PM 06.11.2017 14.44.23 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:44 PM 06.11.2017 14.44.23 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:44 PM 06.11.2017 14.44.23 Suspicious action was blocked mcci+McciTrayApp Action: Hook incoming messages of the stream Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:44 PM 06.11.2017 14.44.23 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:44 PM 06.11.2017 14.44.23 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:44 PM 06.11.2017 14.44.23 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:44 PM 06.11.2017 14.44.23 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:44 PM 06.11.2017 14.44.23 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:44 PM 06.11.2017 14.44.05 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:44 PM 06.11.2017 14.44.05 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:44 PM 06.11.2017 14.44.05 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:44 PM 06.11.2017 14.44.05 Suspicious action was blocked mcci+McciTrayApp Action: Hook incoming messages of the stream Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:44 PM 06.11.2017 14.44.05 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:44 PM 06.11.2017 14.44.05 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:44 PM 06.11.2017 14.44.05 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:44 PM 06.11.2017 14.44.05 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:44 PM 06.11.2017 14.44.05 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:44 PM 06.11.2017 14.44.05 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:44 PM 06.11.2017 14.44.05 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:44 PM 06.11.2017 14.43.56 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:43 PM 06.11.2017 14.43.56 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:43 PM 06.11.2017 14.43.56 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:43 PM 06.11.2017 14.43.56 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:43 PM 06.11.2017 14.43.56 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:43 PM 06.11.2017 14.43.56 Suspicious action was blocked mcci+McciTrayApp Action: Hook incoming messages of the stream Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:43 PM 06.11.2017 14.43.56 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:43 PM 06.11.2017 14.43.56 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:43 PM 06.11.2017 14.43.56 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:43 PM 06.11.2017 14.43.56 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:43 PM 06.11.2017 14.43.56 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:43 PM 06.11.2017 14.43.32 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:43 PM 06.11.2017 14.43.32 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:43 PM 06.11.2017 14.43.32 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:43 PM 06.11.2017 14.43.32 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:43 PM 06.11.2017 14.43.32 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:43 PM 06.11.2017 14.43.32 Suspicious action was blocked mcci+McciTrayApp Action: Hook incoming messages of the stream Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:43 PM 06.11.2017 14.43.32 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:43 PM 06.11.2017 14.43.32 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:43 PM 06.11.2017 14.43.32 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:43 PM 06.11.2017 14.43.32 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:43 PM 06.11.2017 14.43.32 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:43 PM 06.11.2017 14.43.27 Suspicious action was blocked mcci+McciTrayApp Action: Hook incoming messages of the stream Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:43 PM 06.11.2017 14.43.27 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:43 PM 06.11.2017 14.43.27 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:43 PM 06.11.2017 14.43.27 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:43 PM 06.11.2017 14.43.27 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:43 PM 06.11.2017 14.43.27 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:43 PM 06.11.2017 14.43.27 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:43 PM 06.11.2017 14.43.27 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:43 PM 06.11.2017 14.43.27 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:43 PM 06.11.2017 14.43.27 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:43 PM 06.11.2017 14.43.27 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:43 PM 06.11.2017 14.43.19 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:43 PM 06.11.2017 14.43.19 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:43 PM 06.11.2017 14.43.19 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:43 PM 06.11.2017 14.43.19 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:43 PM 06.11.2017 14.43.19 Suspicious action was blocked mcci+McciTrayApp Action: Hook incoming messages of the stream Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:43 PM 06.11.2017 14.43.19 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:43 PM 06.11.2017 14.43.19 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:43 PM 06.11.2017 14.43.19 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:43 PM 06.11.2017 14.43.19 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:43 PM 06.11.2017 14.43.19 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:43 PM 06.11.2017 14.43.19 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:43 PM 06.11.2017 14.43.19 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:43 PM 06.11.2017 14.43.19 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:43 PM 06.11.2017 14.43.16 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:43 PM 06.11.2017 14.43.16 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:43 PM 06.11.2017 14.43.16 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:43 PM 06.11.2017 14.43.16 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:43 PM 06.11.2017 14.43.16 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:43 PM 06.11.2017 14.43.16 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:43 PM 06.11.2017 14.43.16 Suspicious action was blocked mcci+McciTrayApp Action: Hook incoming messages of the stream Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:43 PM 06.11.2017 14.43.16 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:43 PM 06.11.2017 14.43.16 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:43 PM 06.11.2017 14.43.16 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:43 PM 06.11.2017 14.43.16 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:43 PM 06.11.2017 14.43.16 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:43 PM 06.11.2017 14.43.16 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:43 PM 06.11.2017 14.42.48 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:42 PM 06.11.2017 14.42.48 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:42 PM 06.11.2017 14.42.48 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:42 PM 06.11.2017 14.42.48 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:42 PM 06.11.2017 14.42.48 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:42 PM 06.11.2017 14.42.48 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:42 PM 06.11.2017 14.42.48 Suspicious action was blocked mcci+McciTrayApp Action: Hook incoming messages of the stream Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:42 PM 06.11.2017 14.42.48 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:42 PM 06.11.2017 14.42.48 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:42 PM 06.11.2017 14.42.48 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:42 PM 06.11.2017 14.42.48 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:42 PM 06.11.2017 14.42.48 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:42 PM 06.11.2017 14.42.48 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:42 PM 06.11.2017 14.42.45 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:42 PM 06.11.2017 14.42.45 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:42 PM 06.11.2017 14.42.45 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:42 PM 06.11.2017 14.42.45 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:42 PM 06.11.2017 14.42.45 Suspicious action was blocked mcci+McciTrayApp Action: Hook incoming messages of the stream Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:42 PM 06.11.2017 14.42.45 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:42 PM 06.11.2017 14.42.45 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:42 PM 06.11.2017 14.42.45 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:42 PM 06.11.2017 14.42.45 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:42 PM 06.11.2017 14.42.45 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:42 PM 06.11.2017 14.42.45 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:42 PM 06.11.2017 14.42.45 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:42 PM 06.11.2017 14.42.45 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:42 PM 06.11.2017 14.42.43 Suspicious action was blocked Malwarebytes Anti-Exploit 64bit tasks Action: Perform code injection Application: Malwarebytes Anti-Exploit 64bit tasks Application path: C:\Program Files (x86)\Malwarebytes Anti-Exploit\mbae64.exe Time: 11/6/2017 2:42 PM 06.11.2017 14.42.43 Suspicious action was blocked Malwarebytes Anti-Exploit 64bit tasks Action: Access memory of other processes Application: Malwarebytes Anti-Exploit 64bit tasks Application path: C:\Program Files (x86)\Malwarebytes Anti-Exploit\mbae64.exe Time: 11/6/2017 2:42 PM 06.11.2017 14.42.43 Suspicious action was blocked Malwarebytes Anti-Exploit 64bit tasks Action: Read memory from other processes Application: Malwarebytes Anti-Exploit 64bit tasks Application path: C:\Program Files (x86)\Malwarebytes Anti-Exploit\mbae64.exe Time: 11/6/2017 2:42 PM 06.11.2017 14.42.43 Suspicious action was blocked Malwarebytes Anti-Exploit 64bit tasks Action: Duplicate internal process handle Application: Malwarebytes Anti-Exploit 64bit tasks Application path: C:\Program Files (x86)\Malwarebytes Anti-Exploit\mbae64.exe Time: 11/6/2017 2:42 PM 06.11.2017 14.42.34 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:42 PM 06.11.2017 14.42.34 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:42 PM 06.11.2017 14.42.34 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:42 PM 06.11.2017 14.42.34 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:42 PM 06.11.2017 14.42.34 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:42 PM 06.11.2017 14.42.34 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:42 PM 06.11.2017 14.42.34 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:42 PM 06.11.2017 14.42.34 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:42 PM 06.11.2017 14.42.34 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:42 PM 06.11.2017 14.42.34 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:42 PM 06.11.2017 14.42.28 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:42 PM 06.11.2017 14.42.28 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:42 PM 06.11.2017 14.42.28 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:42 PM 06.11.2017 14.42.28 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:42 PM 06.11.2017 14.42.28 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:42 PM 06.11.2017 14.42.28 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:42 PM 06.11.2017 14.42.28 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:42 PM 06.11.2017 14.42.28 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:42 PM 06.11.2017 14.42.28 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:42 PM 06.11.2017 14.42.28 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:42 PM 06.11.2017 14.42.26 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:42 PM 06.11.2017 14.42.26 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:42 PM 06.11.2017 14.42.26 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:42 PM 06.11.2017 14.42.26 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:42 PM 06.11.2017 14.42.26 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:42 PM 06.11.2017 14.41.21 Suspicious action was blocked mcci+McciTrayApp Action: Hook incoming messages of the stream Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:41 PM 06.11.2017 14.41.21 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:41 PM 06.11.2017 14.41.21 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:41 PM 06.11.2017 14.41.21 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:41 PM 06.11.2017 14.41.21 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:41 PM 06.11.2017 14.41.21 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:41 PM 06.11.2017 14.41.21 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:41 PM 06.11.2017 14.41.21 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:41 PM 06.11.2017 14.41.21 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:41 PM 06.11.2017 14.41.21 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:41 PM 06.11.2017 14.41.21 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:41 PM 06.11.2017 14.41.18 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:41 PM 06.11.2017 14.41.18 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:41 PM 06.11.2017 14.41.18 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:41 PM 06.11.2017 14.41.18 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:41 PM 06.11.2017 14.41.18 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:41 PM 06.11.2017 14.41.18 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:41 PM 06.11.2017 14.41.18 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:41 PM 06.11.2017 14.41.18 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:41 PM 06.11.2017 14.41.18 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:41 PM 06.11.2017 14.41.18 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:41 PM 06.11.2017 14.41.14 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:41 PM 06.11.2017 14.41.14 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:41 PM 06.11.2017 14.41.14 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:41 PM 06.11.2017 14.41.14 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:41 PM 06.11.2017 14.41.14 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:41 PM 06.11.2017 14.41.14 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:41 PM 06.11.2017 14.41.14 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:41 PM 06.11.2017 14.41.14 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:41 PM 06.11.2017 14.41.14 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:41 PM 06.11.2017 14.41.14 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:41 PM 06.11.2017 14.41.11 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:41 PM 06.11.2017 14.41.11 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:41 PM 06.11.2017 14.41.11 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:41 PM 06.11.2017 14.41.11 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:41 PM 06.11.2017 14.41.11 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:41 PM 06.11.2017 14.41.11 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:41 PM 06.11.2017 14.41.11 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:41 PM 06.11.2017 14.41.11 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:41 PM 06.11.2017 14.41.11 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:41 PM 06.11.2017 14.41.11 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:41 PM 06.11.2017 14.40.54 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:40 PM 06.11.2017 14.40.54 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:40 PM 06.11.2017 14.40.54 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:40 PM 06.11.2017 14.40.54 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:40 PM 06.11.2017 14.40.54 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:40 PM 06.11.2017 14.40.54 Suspicious action was blocked mcci+McciTrayApp Action: Hook incoming messages of the stream Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:40 PM 06.11.2017 14.40.54 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:40 PM 06.11.2017 14.40.54 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:40 PM 06.11.2017 14.40.54 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:40 PM 06.11.2017 14.40.54 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:40 PM 06.11.2017 14.40.54 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:40 PM 06.11.2017 14.40.52 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:40 PM 06.11.2017 14.40.52 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:40 PM 06.11.2017 14.40.52 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:40 PM 06.11.2017 14.40.52 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:40 PM 06.11.2017 14.40.52 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:40 PM 06.11.2017 14.40.52 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:40 PM 06.11.2017 14.40.52 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:40 PM 06.11.2017 14.40.52 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:40 PM 06.11.2017 14.40.52 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:40 PM 06.11.2017 14.40.52 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:40 PM 06.11.2017 14.40.39 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:40 PM 06.11.2017 14.40.39 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:40 PM 06.11.2017 14.40.39 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:40 PM 06.11.2017 14.40.39 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:40 PM 06.11.2017 14.40.39 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:40 PM 06.11.2017 14.40.39 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:40 PM 06.11.2017 14.40.39 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:40 PM 06.11.2017 14.40.39 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:40 PM 06.11.2017 14.40.39 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:40 PM 06.11.2017 14.40.39 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:40 PM 06.11.2017 14.40.37 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:40 PM 06.11.2017 14.40.37 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:40 PM 06.11.2017 14.40.37 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:40 PM 06.11.2017 14.40.37 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:40 PM 06.11.2017 14.40.37 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:40 PM 06.11.2017 14.40.35 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:40 PM 06.11.2017 14.40.35 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:40 PM 06.11.2017 14.40.35 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:40 PM 06.11.2017 14.40.35 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:40 PM 06.11.2017 14.40.35 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:40 PM 06.11.2017 14.35.04 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:35 PM 06.11.2017 14.35.04 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:35 PM 06.11.2017 14.35.04 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:35 PM 06.11.2017 14.35.04 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:35 PM 06.11.2017 14.35.04 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:35 PM 06.11.2017 14.35.04 Suspicious action was blocked mcci+McciTrayApp Action: Hook incoming messages of the stream Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:35 PM 06.11.2017 14.35.04 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:35 PM 06.11.2017 14.35.04 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:35 PM 06.11.2017 14.35.04 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:35 PM 06.11.2017 14.35.04 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:35 PM 06.11.2017 14.35.04 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:35 PM 06.11.2017 14.34.31 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:34 PM 06.11.2017 14.34.31 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:34 PM 06.11.2017 14.34.31 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:34 PM 06.11.2017 14.34.31 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:34 PM 06.11.2017 14.34.31 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:34 PM 06.11.2017 14.34.31 Suspicious action was blocked mcci+McciTrayApp Action: Hook incoming messages of the stream Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:34 PM 06.11.2017 14.34.31 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:34 PM 06.11.2017 14.34.31 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:34 PM 06.11.2017 14.34.31 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:34 PM 06.11.2017 14.34.31 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:34 PM 06.11.2017 14.34.31 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:34 PM 06.11.2017 14.34.25 Suspicious action was blocked mcci+McciTrayApp Action: Hook incoming messages of the stream Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:34 PM 06.11.2017 14.34.25 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:34 PM 06.11.2017 14.34.25 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:34 PM 06.11.2017 14.34.25 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:34 PM 06.11.2017 14.34.25 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:34 PM 06.11.2017 14.34.25 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:34 PM 06.11.2017 14.34.25 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:34 PM 06.11.2017 14.34.25 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:34 PM 06.11.2017 14.34.25 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:34 PM 06.11.2017 14.34.25 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:34 PM 06.11.2017 14.34.25 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:34 PM 06.11.2017 14.33.28 Update of databases and application modules Completed. Average download speed:: 152.87 KB/s Status:: Completed. Downloaded and updated:: 415.72 KB Total duration: 1 minute Time: 11/6/2017 2:33 PM 06.11.2017 14.32.55 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:32 PM 06.11.2017 14.32.55 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:32 PM 06.11.2017 14.32.55 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:32 PM 06.11.2017 14.32.55 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:32 PM 06.11.2017 14.32.55 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:32 PM 06.11.2017 14.32.55 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:32 PM 06.11.2017 14.32.55 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:32 PM 06.11.2017 14.32.55 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:32 PM 06.11.2017 14.32.55 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:32 PM 06.11.2017 14.32.55 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:32 PM 06.11.2017 14.32.40 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:32 PM 06.11.2017 14.32.40 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:32 PM 06.11.2017 14.32.40 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:32 PM 06.11.2017 14.32.40 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:32 PM 06.11.2017 14.32.40 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:32 PM 06.11.2017 14.32.40 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:32 PM 06.11.2017 14.32.40 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:32 PM 06.11.2017 14.32.40 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:32 PM 06.11.2017 14.32.40 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:32 PM 06.11.2017 14.32.40 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:32 PM 06.11.2017 14.32.35 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:32 PM 06.11.2017 14.32.35 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:32 PM 06.11.2017 14.32.35 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:32 PM 06.11.2017 14.32.35 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:32 PM 06.11.2017 14.32.35 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:32 PM 06.11.2017 14.32.35 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:32 PM 06.11.2017 14.32.35 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:32 PM 06.11.2017 14.32.35 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:32 PM 06.11.2017 14.32.35 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:32 PM 06.11.2017 14.32.35 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:32 PM 06.11.2017 14.32.02 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:32 PM 06.11.2017 14.32.02 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:32 PM 06.11.2017 14.32.02 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:32 PM 06.11.2017 14.32.02 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:32 PM 06.11.2017 14.32.02 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:32 PM 06.11.2017 14.32.02 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:32 PM 06.11.2017 14.32.02 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:32 PM 06.11.2017 14.32.02 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:32 PM 06.11.2017 14.32.02 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:32 PM 06.11.2017 14.32.02 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:32 PM 06.11.2017 14.30.25 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:30 PM 06.11.2017 14.30.25 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:30 PM 06.11.2017 14.30.25 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:30 PM 06.11.2017 14.30.25 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:30 PM 06.11.2017 14.30.25 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:30 PM 06.11.2017 14.30.25 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:30 PM 06.11.2017 14.30.25 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:30 PM 06.11.2017 14.30.25 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:30 PM 06.11.2017 14.30.25 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:30 PM 06.11.2017 14.30.25 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:30 PM 06.11.2017 14.30.02 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:30 PM 06.11.2017 14.30.02 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:30 PM 06.11.2017 14.30.02 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:30 PM 06.11.2017 14.30.02 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:30 PM 06.11.2017 14.30.02 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:30 PM 06.11.2017 14.30.02 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:30 PM 06.11.2017 14.30.02 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:30 PM 06.11.2017 14.30.02 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:30 PM 06.11.2017 14.30.02 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:30 PM 06.11.2017 14.30.02 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:30 PM 06.11.2017 14.29.54 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:29 PM 06.11.2017 14.29.54 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:29 PM 06.11.2017 14.29.54 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:29 PM 06.11.2017 14.29.54 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:29 PM 06.11.2017 14.29.54 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:29 PM 06.11.2017 14.29.54 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:29 PM 06.11.2017 14.29.54 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:29 PM 06.11.2017 14.29.54 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:29 PM 06.11.2017 14.29.54 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:29 PM 06.11.2017 14.29.54 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:29 PM 06.11.2017 14.29.32 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:29 PM 06.11.2017 14.29.32 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:29 PM 06.11.2017 14.29.32 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:29 PM 06.11.2017 14.29.32 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:29 PM 06.11.2017 14.29.32 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:29 PM 06.11.2017 14.29.32 Suspicious action was blocked mcci+McciTrayApp Action: Hook incoming messages of the stream Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:29 PM 06.11.2017 14.29.32 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:29 PM 06.11.2017 14.29.32 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:29 PM 06.11.2017 14.29.32 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:29 PM 06.11.2017 14.29.32 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:29 PM 06.11.2017 14.29.32 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:29 PM 06.11.2017 14.29.25 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:29 PM 06.11.2017 14.29.25 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:29 PM 06.11.2017 14.29.25 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:29 PM 06.11.2017 14.29.25 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:29 PM 06.11.2017 14.29.25 Suspicious action was blocked mcci+McciTrayApp Action: Hook incoming messages of the stream Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:29 PM 06.11.2017 14.29.25 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:29 PM 06.11.2017 14.29.25 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:29 PM 06.11.2017 14.29.25 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:29 PM 06.11.2017 14.29.25 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:29 PM 06.11.2017 14.29.25 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:29 PM 06.11.2017 14.29.25 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:29 PM 06.11.2017 14.28.14 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:28 PM 06.11.2017 14.28.14 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:28 PM 06.11.2017 14.28.14 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:28 PM 06.11.2017 14.28.14 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:28 PM 06.11.2017 14.28.14 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:28 PM 06.11.2017 14.28.14 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:28 PM 06.11.2017 14.28.14 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:28 PM 06.11.2017 14.28.14 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:28 PM 06.11.2017 14.28.14 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:28 PM 06.11.2017 14.28.14 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:28 PM 06.11.2017 14.28.08 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:28 PM 06.11.2017 14.28.08 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:28 PM 06.11.2017 14.28.08 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:28 PM 06.11.2017 14.28.08 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:28 PM 06.11.2017 14.28.08 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:28 PM 06.11.2017 14.28.08 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:28 PM 06.11.2017 14.28.08 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:28 PM 06.11.2017 14.28.08 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:28 PM 06.11.2017 14.28.08 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:28 PM 06.11.2017 14.28.08 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:28 PM 06.11.2017 14.27.16 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:27 PM 06.11.2017 14.27.16 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:27 PM 06.11.2017 14.27.16 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:27 PM 06.11.2017 14.27.16 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:27 PM 06.11.2017 14.27.16 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:27 PM 06.11.2017 14.27.16 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:27 PM 06.11.2017 14.27.16 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:27 PM 06.11.2017 14.27.16 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:27 PM 06.11.2017 14.27.16 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:27 PM 06.11.2017 14.27.16 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:27 PM 06.11.2017 14.26.49 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:26 PM 06.11.2017 14.26.49 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:26 PM 06.11.2017 14.26.49 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:26 PM 06.11.2017 14.26.49 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:26 PM 06.11.2017 14.26.49 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:26 PM 06.11.2017 14.26.49 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:26 PM 06.11.2017 14.26.49 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:26 PM 06.11.2017 14.26.49 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:26 PM 06.11.2017 14.26.49 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:26 PM 06.11.2017 14.26.49 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:26 PM 06.11.2017 14.26.12 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:26 PM 06.11.2017 14.26.12 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:26 PM 06.11.2017 14.26.12 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:26 PM 06.11.2017 14.26.12 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:26 PM 06.11.2017 14.26.12 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:26 PM 06.11.2017 14.26.11 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:26 PM 06.11.2017 14.26.11 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:26 PM 06.11.2017 14.26.11 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:26 PM 06.11.2017 14.26.11 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:26 PM 06.11.2017 14.26.11 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:26 PM 06.11.2017 14.25.59 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:25 PM 06.11.2017 14.25.59 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:25 PM 06.11.2017 14.25.59 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:25 PM 06.11.2017 14.25.59 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:25 PM 06.11.2017 14.25.59 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:25 PM 06.11.2017 14.25.59 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:25 PM 06.11.2017 14.25.59 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:25 PM 06.11.2017 14.25.59 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:25 PM 06.11.2017 14.25.59 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:25 PM 06.11.2017 14.25.59 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:25 PM 06.11.2017 14.25.49 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:25 PM 06.11.2017 14.25.49 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:25 PM 06.11.2017 14.25.49 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:25 PM 06.11.2017 14.25.49 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:25 PM 06.11.2017 14.25.49 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:25 PM 06.11.2017 14.25.49 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:25 PM 06.11.2017 14.25.49 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:25 PM 06.11.2017 14.25.49 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:25 PM 06.11.2017 14.25.49 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:25 PM 06.11.2017 14.25.49 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:25 PM 06.11.2017 14.25.44 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:25 PM 06.11.2017 14.25.44 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:25 PM 06.11.2017 14.25.44 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:25 PM 06.11.2017 14.25.44 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:25 PM 06.11.2017 14.25.44 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:25 PM 06.11.2017 14.25.44 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:25 PM 06.11.2017 14.25.44 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:25 PM 06.11.2017 14.25.44 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:25 PM 06.11.2017 14.25.44 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:25 PM 06.11.2017 14.25.44 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:25 PM 06.11.2017 14.25.42 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:25 PM 06.11.2017 14.25.42 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:25 PM 06.11.2017 14.25.42 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:25 PM 06.11.2017 14.25.42 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:25 PM 06.11.2017 14.25.42 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:25 PM 06.11.2017 14.25.38 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:25 PM 06.11.2017 14.25.38 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:25 PM 06.11.2017 14.25.38 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:25 PM 06.11.2017 14.25.38 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:25 PM 06.11.2017 14.25.38 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:25 PM 06.11.2017 14.25.38 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:25 PM 06.11.2017 14.25.38 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:25 PM 06.11.2017 14.25.38 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:25 PM 06.11.2017 14.25.38 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:25 PM 06.11.2017 14.25.38 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:25 PM 06.11.2017 14.25.35 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:25 PM 06.11.2017 14.25.35 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:25 PM 06.11.2017 14.25.35 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:25 PM 06.11.2017 14.25.35 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:25 PM 06.11.2017 14.25.35 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:25 PM 06.11.2017 14.25.35 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:25 PM 06.11.2017 14.25.35 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:25 PM 06.11.2017 14.25.35 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:25 PM 06.11.2017 14.25.35 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:25 PM 06.11.2017 14.25.35 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:25 PM 06.11.2017 14.19.14 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:19 PM 06.11.2017 14.19.14 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:19 PM 06.11.2017 14.19.14 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:19 PM 06.11.2017 14.19.14 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:19 PM 06.11.2017 14.19.14 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:19 PM 06.11.2017 14.19.14 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:19 PM 06.11.2017 14.19.14 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:19 PM 06.11.2017 14.19.14 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:19 PM 06.11.2017 14.19.14 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:19 PM 06.11.2017 14.19.14 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:19 PM 06.11.2017 14.18.57 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:18 PM 06.11.2017 14.18.57 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:18 PM 06.11.2017 14.18.57 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:18 PM 06.11.2017 14.18.57 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:18 PM 06.11.2017 14.18.57 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:18 PM 06.11.2017 14.18.57 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:18 PM 06.11.2017 14.18.57 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:18 PM 06.11.2017 14.18.57 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:18 PM 06.11.2017 14.18.57 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:18 PM 06.11.2017 14.18.57 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:18 PM 06.11.2017 14.18.53 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:18 PM 06.11.2017 14.18.53 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:18 PM 06.11.2017 14.18.53 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:18 PM 06.11.2017 14.18.53 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:18 PM 06.11.2017 14.18.53 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:18 PM 06.11.2017 14.18.38 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:18 PM 06.11.2017 14.18.38 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:18 PM 06.11.2017 14.18.38 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:18 PM 06.11.2017 14.18.38 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:18 PM 06.11.2017 14.18.38 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:18 PM 06.11.2017 14.18.38 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:18 PM 06.11.2017 14.18.38 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:18 PM 06.11.2017 14.18.38 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:18 PM 06.11.2017 14.18.38 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:18 PM 06.11.2017 14.18.38 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:18 PM 06.11.2017 14.18.32 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:18 PM 06.11.2017 14.18.32 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:18 PM 06.11.2017 14.18.32 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:18 PM 06.11.2017 14.18.32 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:18 PM 06.11.2017 14.18.32 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:18 PM 06.11.2017 14.18.32 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:18 PM 06.11.2017 14.18.32 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:18 PM 06.11.2017 14.18.32 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:18 PM 06.11.2017 14.18.32 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:18 PM 06.11.2017 14.18.32 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:18 PM 06.11.2017 14.18.30 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:18 PM 06.11.2017 14.18.30 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:18 PM 06.11.2017 14.18.30 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:18 PM 06.11.2017 14.18.30 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:18 PM 06.11.2017 14.18.30 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:18 PM 06.11.2017 14.18.30 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:18 PM 06.11.2017 14.18.30 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:18 PM 06.11.2017 14.18.30 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:18 PM 06.11.2017 14.18.30 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:18 PM 06.11.2017 14.18.30 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:18 PM 06.11.2017 14.16.59 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:16 PM 06.11.2017 14.16.59 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:16 PM 06.11.2017 14.16.59 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:16 PM 06.11.2017 14.16.59 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:16 PM 06.11.2017 14.16.59 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:16 PM 06.11.2017 14.16.59 Suspicious action was blocked mcci+McciTrayApp Action: Hook incoming messages of the stream Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:16 PM 06.11.2017 14.16.59 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:16 PM 06.11.2017 14.16.59 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:16 PM 06.11.2017 14.16.59 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:16 PM 06.11.2017 14.16.59 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:16 PM 06.11.2017 14.16.59 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:16 PM 06.11.2017 14.13.24 Suspicious action was blocked mcci+McciTrayApp Action: Hook incoming messages of the stream Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:13 PM 06.11.2017 14.13.24 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:13 PM 06.11.2017 14.13.24 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:13 PM 06.11.2017 14.13.24 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:13 PM 06.11.2017 14.13.24 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:13 PM 06.11.2017 14.13.24 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:13 PM 06.11.2017 14.13.24 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:13 PM 06.11.2017 14.13.24 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:13 PM 06.11.2017 14.13.24 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:13 PM 06.11.2017 14.13.24 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:13 PM 06.11.2017 14.13.24 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:13 PM 06.11.2017 14.13.16 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:13 PM 06.11.2017 14.13.16 Suspicious action was blocked mcci+McciTrayApp Action: Hook incoming messages of the stream Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:13 PM 06.11.2017 14.13.16 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:13 PM 06.11.2017 14.13.16 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:13 PM 06.11.2017 14.13.16 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:13 PM 06.11.2017 14.13.16 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:13 PM 06.11.2017 14.13.16 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:13 PM 06.11.2017 14.13.16 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:13 PM 06.11.2017 14.13.16 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:13 PM 06.11.2017 14.13.16 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:13 PM 06.11.2017 14.13.16 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:13 PM 06.11.2017 14.11.43 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:11 PM 06.11.2017 14.11.43 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:11 PM 06.11.2017 14.11.43 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:11 PM 06.11.2017 14.11.43 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:11 PM 06.11.2017 14.11.43 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:11 PM 06.11.2017 14.11.43 Suspicious action was blocked mcci+McciTrayApp Action: Hook incoming messages of the stream Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:11 PM 06.11.2017 14.11.43 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:11 PM 06.11.2017 14.11.43 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:11 PM 06.11.2017 14.11.43 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:11 PM 06.11.2017 14.11.43 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:11 PM 06.11.2017 14.11.43 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:11 PM 06.11.2017 14.11.19 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:11 PM 06.11.2017 14.11.19 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:11 PM 06.11.2017 14.11.19 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:11 PM 06.11.2017 14.11.19 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:11 PM 06.11.2017 14.11.19 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:11 PM 06.11.2017 14.11.19 Suspicious action was blocked mcci+McciTrayApp Action: Hook incoming messages of the stream Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:11 PM 06.11.2017 14.11.19 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:11 PM 06.11.2017 14.11.19 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:11 PM 06.11.2017 14.11.19 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:11 PM 06.11.2017 14.11.19 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:11 PM 06.11.2017 14.11.19 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:11 PM 06.11.2017 14.10.42 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:10 PM 06.11.2017 14.10.42 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:10 PM 06.11.2017 14.10.42 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:10 PM 06.11.2017 14.10.42 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:10 PM 06.11.2017 14.10.42 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:10 PM 06.11.2017 14.10.42 Suspicious action was blocked mcci+McciTrayApp Action: Hook incoming messages of the stream Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:10 PM 06.11.2017 14.10.42 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:10 PM 06.11.2017 14.10.42 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:10 PM 06.11.2017 14.10.42 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:10 PM 06.11.2017 14.10.42 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:10 PM 06.11.2017 14.10.42 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:10 PM 06.11.2017 14.10.39 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:10 PM 06.11.2017 14.10.39 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:10 PM 06.11.2017 14.10.39 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:10 PM 06.11.2017 14.10.39 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:10 PM 06.11.2017 14.10.39 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:10 PM 06.11.2017 14.10.39 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:10 PM 06.11.2017 14.10.39 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:10 PM 06.11.2017 14.10.39 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:10 PM 06.11.2017 14.10.39 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:10 PM 06.11.2017 14.10.39 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:10 PM 06.11.2017 14.10.36 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:10 PM 06.11.2017 14.10.36 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:10 PM 06.11.2017 14.10.36 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:10 PM 06.11.2017 14.10.36 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:10 PM 06.11.2017 14.10.36 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:10 PM 06.11.2017 14.10.35 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:10 PM 06.11.2017 14.10.35 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:10 PM 06.11.2017 14.10.35 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:10 PM 06.11.2017 14.10.35 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:10 PM 06.11.2017 14.10.35 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:10 PM 06.11.2017 14.10.32 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:10 PM 06.11.2017 14.10.32 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:10 PM 06.11.2017 14.10.32 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:10 PM 06.11.2017 14.10.32 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:10 PM 06.11.2017 14.10.32 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:10 PM 06.11.2017 14.10.32 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:10 PM 06.11.2017 14.10.32 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:10 PM 06.11.2017 14.10.32 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:10 PM 06.11.2017 14.10.32 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:10 PM 06.11.2017 14.10.32 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:10 PM 06.11.2017 14.10.29 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:10 PM 06.11.2017 14.10.29 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:10 PM 06.11.2017 14.10.29 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:10 PM 06.11.2017 14.10.29 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:10 PM 06.11.2017 14.10.29 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:10 PM 06.11.2017 14.10.29 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:10 PM 06.11.2017 14.10.29 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:10 PM 06.11.2017 14.10.29 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:10 PM 06.11.2017 14.10.29 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:10 PM 06.11.2017 14.10.29 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:10 PM 06.11.2017 14.10.27 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:10 PM 06.11.2017 14.10.27 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:10 PM 06.11.2017 14.10.27 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:10 PM 06.11.2017 14.10.27 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:10 PM 06.11.2017 14.10.27 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:10 PM 06.11.2017 14.10.14 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:10 PM 06.11.2017 14.10.14 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:10 PM 06.11.2017 14.10.14 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:10 PM 06.11.2017 14.10.14 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:10 PM 06.11.2017 14.10.14 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:10 PM 06.11.2017 14.10.14 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:10 PM 06.11.2017 14.10.14 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:10 PM 06.11.2017 14.10.14 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:10 PM 06.11.2017 14.10.14 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:10 PM 06.11.2017 14.10.14 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:10 PM 06.11.2017 14.10.08 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:10 PM 06.11.2017 14.10.08 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:10 PM 06.11.2017 14.10.08 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:10 PM 06.11.2017 14.10.08 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:10 PM 06.11.2017 14.10.08 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:10 PM 06.11.2017 14.10.08 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:10 PM 06.11.2017 14.10.08 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:10 PM 06.11.2017 14.10.08 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:10 PM 06.11.2017 14.10.08 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:10 PM 06.11.2017 14.10.08 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:10 PM 06.11.2017 14.07.32 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:07 PM 06.11.2017 14.07.32 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:07 PM 06.11.2017 14.07.32 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:07 PM 06.11.2017 14.07.32 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:07 PM 06.11.2017 14.07.32 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:07 PM 06.11.2017 14.07.32 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:07 PM 06.11.2017 14.07.32 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:07 PM 06.11.2017 14.07.32 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:07 PM 06.11.2017 14.07.32 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:07 PM 06.11.2017 14.07.32 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:07 PM 06.11.2017 14.07.19 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:07 PM 06.11.2017 14.07.19 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:07 PM 06.11.2017 14.07.19 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:07 PM 06.11.2017 14.07.19 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:07 PM 06.11.2017 14.07.19 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:07 PM 06.11.2017 14.07.19 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:07 PM 06.11.2017 14.07.19 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:07 PM 06.11.2017 14.07.19 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:07 PM 06.11.2017 14.07.19 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:07 PM 06.11.2017 14.07.19 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:07 PM 06.11.2017 14.07.12 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:07 PM 06.11.2017 14.07.12 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:07 PM 06.11.2017 14.07.12 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:07 PM 06.11.2017 14.07.12 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:07 PM 06.11.2017 14.07.12 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:07 PM 06.11.2017 14.07.12 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:07 PM 06.11.2017 14.07.12 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:07 PM 06.11.2017 14.07.12 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:07 PM 06.11.2017 14.07.12 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:07 PM 06.11.2017 14.07.12 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:07 PM 06.11.2017 14.04.26 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:04 PM 06.11.2017 14.04.26 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:04 PM 06.11.2017 14.04.26 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:04 PM 06.11.2017 14.04.26 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:04 PM 06.11.2017 14.04.26 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:04 PM 06.11.2017 14.04.26 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:04 PM 06.11.2017 14.04.26 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:04 PM 06.11.2017 14.04.26 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:04 PM 06.11.2017 14.04.26 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:04 PM 06.11.2017 14.04.26 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 2:04 PM 06.11.2017 13.58.02 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:58 PM 06.11.2017 13.58.02 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:58 PM 06.11.2017 13.58.02 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:58 PM 06.11.2017 13.58.02 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:58 PM 06.11.2017 13.58.02 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:58 PM 06.11.2017 13.58.02 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:58 PM 06.11.2017 13.58.02 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:58 PM 06.11.2017 13.58.02 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:58 PM 06.11.2017 13.58.02 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:58 PM 06.11.2017 13.58.02 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:58 PM 06.11.2017 13.57.49 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:57 PM 06.11.2017 13.57.49 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:57 PM 06.11.2017 13.57.49 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:57 PM 06.11.2017 13.57.49 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:57 PM 06.11.2017 13.57.49 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:57 PM 06.11.2017 13.57.49 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:57 PM 06.11.2017 13.57.49 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:57 PM 06.11.2017 13.57.49 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:57 PM 06.11.2017 13.57.49 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:57 PM 06.11.2017 13.57.49 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:57 PM 06.11.2017 13.56.51 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:56 PM 06.11.2017 13.56.51 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:56 PM 06.11.2017 13.56.51 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:56 PM 06.11.2017 13.56.51 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:56 PM 06.11.2017 13.56.51 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:56 PM 06.11.2017 13.56.51 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:56 PM 06.11.2017 13.56.51 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:56 PM 06.11.2017 13.56.51 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:56 PM 06.11.2017 13.56.51 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:56 PM 06.11.2017 13.56.51 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:56 PM 06.11.2017 13.56.36 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:56 PM 06.11.2017 13.56.36 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:56 PM 06.11.2017 13.56.36 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:56 PM 06.11.2017 13.56.36 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:56 PM 06.11.2017 13.56.36 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:56 PM 06.11.2017 13.56.35 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:56 PM 06.11.2017 13.56.35 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:56 PM 06.11.2017 13.56.35 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:56 PM 06.11.2017 13.56.35 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:56 PM 06.11.2017 13.56.35 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:56 PM 06.11.2017 13.56.27 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:56 PM 06.11.2017 13.56.27 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:56 PM 06.11.2017 13.56.27 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:56 PM 06.11.2017 13.56.27 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:56 PM 06.11.2017 13.56.27 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:56 PM 06.11.2017 13.56.27 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:56 PM 06.11.2017 13.56.27 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:56 PM 06.11.2017 13.56.27 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:56 PM 06.11.2017 13.56.27 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:56 PM 06.11.2017 13.56.27 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:56 PM 06.11.2017 13.54.47 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:54 PM 06.11.2017 13.54.47 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:54 PM 06.11.2017 13.54.47 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:54 PM 06.11.2017 13.54.47 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:54 PM 06.11.2017 13.54.47 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:54 PM 06.11.2017 13.54.47 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:54 PM 06.11.2017 13.54.47 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:54 PM 06.11.2017 13.54.47 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:54 PM 06.11.2017 13.54.47 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:54 PM 06.11.2017 13.54.47 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:54 PM 06.11.2017 13.54.42 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:54 PM 06.11.2017 13.54.42 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:54 PM 06.11.2017 13.54.42 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:54 PM 06.11.2017 13.54.42 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:54 PM 06.11.2017 13.54.42 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:54 PM 06.11.2017 13.54.42 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:54 PM 06.11.2017 13.54.42 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:54 PM 06.11.2017 13.54.42 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:54 PM 06.11.2017 13.54.42 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:54 PM 06.11.2017 13.54.42 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:54 PM 06.11.2017 13.54.29 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:54 PM 06.11.2017 13.54.29 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:54 PM 06.11.2017 13.54.29 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:54 PM 06.11.2017 13.54.29 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:54 PM 06.11.2017 13.54.29 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:54 PM 06.11.2017 13.54.29 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:54 PM 06.11.2017 13.54.29 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:54 PM 06.11.2017 13.54.29 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:54 PM 06.11.2017 13.54.29 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:54 PM 06.11.2017 13.54.29 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:54 PM 06.11.2017 13.54.09 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:54 PM 06.11.2017 13.54.09 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:54 PM 06.11.2017 13.54.09 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:54 PM 06.11.2017 13.54.09 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:54 PM 06.11.2017 13.54.09 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:54 PM 06.11.2017 13.54.08 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:54 PM 06.11.2017 13.54.08 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:54 PM 06.11.2017 13.54.08 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:54 PM 06.11.2017 13.54.08 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:54 PM 06.11.2017 13.54.08 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:54 PM 06.11.2017 13.53.55 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:53 PM 06.11.2017 13.53.55 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:53 PM 06.11.2017 13.53.55 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:53 PM 06.11.2017 13.53.55 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:53 PM 06.11.2017 13.53.55 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:53 PM 06.11.2017 13.53.55 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:53 PM 06.11.2017 13.53.55 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:53 PM 06.11.2017 13.53.55 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:53 PM 06.11.2017 13.53.55 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:53 PM 06.11.2017 13.53.55 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:53 PM 06.11.2017 13.52.41 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:52 PM 06.11.2017 13.52.41 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:52 PM 06.11.2017 13.52.41 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:52 PM 06.11.2017 13.52.41 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:52 PM 06.11.2017 13.52.41 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:52 PM 06.11.2017 13.52.41 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:52 PM 06.11.2017 13.52.41 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:52 PM 06.11.2017 13.52.41 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:52 PM 06.11.2017 13.52.41 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:52 PM 06.11.2017 13.52.41 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:52 PM 06.11.2017 13.52.04 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:52 PM 06.11.2017 13.52.04 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:52 PM 06.11.2017 13.52.04 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:52 PM 06.11.2017 13.52.04 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:52 PM 06.11.2017 13.52.04 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:52 PM 06.11.2017 13.52.04 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:52 PM 06.11.2017 13.52.04 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:52 PM 06.11.2017 13.52.04 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:52 PM 06.11.2017 13.52.04 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:52 PM 06.11.2017 13.52.04 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:52 PM 06.11.2017 13.51.41 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:51 PM 06.11.2017 13.51.41 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:51 PM 06.11.2017 13.51.41 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:51 PM 06.11.2017 13.51.41 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:51 PM 06.11.2017 13.51.41 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:51 PM 06.11.2017 13.51.41 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:51 PM 06.11.2017 13.51.41 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:51 PM 06.11.2017 13.51.41 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:51 PM 06.11.2017 13.51.41 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:51 PM 06.11.2017 13.51.41 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:51 PM 06.11.2017 13.51.15 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:51 PM 06.11.2017 13.51.15 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:51 PM 06.11.2017 13.51.15 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:51 PM 06.11.2017 13.51.15 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:51 PM 06.11.2017 13.51.15 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:51 PM 06.11.2017 13.51.15 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:51 PM 06.11.2017 13.51.15 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:51 PM 06.11.2017 13.51.15 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:51 PM 06.11.2017 13.51.15 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:51 PM 06.11.2017 13.51.15 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:51 PM 06.11.2017 13.51.11 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:51 PM 06.11.2017 13.51.11 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:51 PM 06.11.2017 13.51.11 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:51 PM 06.11.2017 13.51.11 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:51 PM 06.11.2017 13.51.11 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:51 PM 06.11.2017 13.51.11 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:51 PM 06.11.2017 13.51.11 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:51 PM 06.11.2017 13.51.11 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:51 PM 06.11.2017 13.51.11 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:51 PM 06.11.2017 13.51.11 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:51 PM 06.11.2017 13.51.09 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:51 PM 06.11.2017 13.51.09 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:51 PM 06.11.2017 13.51.09 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:51 PM 06.11.2017 13.51.09 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:51 PM 06.11.2017 13.51.09 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:51 PM 06.11.2017 13.51.07 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:51 PM 06.11.2017 13.51.07 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:51 PM 06.11.2017 13.51.07 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:51 PM 06.11.2017 13.51.07 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:51 PM 06.11.2017 13.51.07 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:51 PM 06.11.2017 13.44.37 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:44 PM 06.11.2017 13.44.37 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:44 PM 06.11.2017 13.44.37 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:44 PM 06.11.2017 13.44.37 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:44 PM 06.11.2017 13.44.37 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:44 PM 06.11.2017 13.44.37 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:44 PM 06.11.2017 13.44.37 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:44 PM 06.11.2017 13.44.37 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:44 PM 06.11.2017 13.44.37 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:44 PM 06.11.2017 13.44.37 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:44 PM 06.11.2017 13.42.29 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:42 PM 06.11.2017 13.42.29 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:42 PM 06.11.2017 13.42.29 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:42 PM 06.11.2017 13.42.29 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:42 PM 06.11.2017 13.42.29 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:42 PM 06.11.2017 13.42.29 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:42 PM 06.11.2017 13.42.29 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:42 PM 06.11.2017 13.42.29 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:42 PM 06.11.2017 13.42.29 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:42 PM 06.11.2017 13.42.29 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:42 PM 06.11.2017 13.42.06 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:42 PM 06.11.2017 13.42.06 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:42 PM 06.11.2017 13.42.06 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:42 PM 06.11.2017 13.42.06 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:42 PM 06.11.2017 13.42.06 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:42 PM 06.11.2017 13.42.06 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:42 PM 06.11.2017 13.42.06 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:42 PM 06.11.2017 13.42.06 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:42 PM 06.11.2017 13.42.06 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:42 PM 06.11.2017 13.42.06 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:42 PM 06.11.2017 13.41.07 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:41 PM 06.11.2017 13.41.07 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:41 PM 06.11.2017 13.41.07 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:41 PM 06.11.2017 13.41.07 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:41 PM 06.11.2017 13.41.07 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:41 PM 06.11.2017 13.41.07 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:41 PM 06.11.2017 13.41.07 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:41 PM 06.11.2017 13.41.07 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:41 PM 06.11.2017 13.41.07 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:41 PM 06.11.2017 13.41.07 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:41 PM 06.11.2017 13.41.05 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:41 PM 06.11.2017 13.41.05 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:41 PM 06.11.2017 13.41.05 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:41 PM 06.11.2017 13.41.05 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:41 PM 06.11.2017 13.41.05 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:41 PM 06.11.2017 13.41.02 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:41 PM 06.11.2017 13.41.02 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:41 PM 06.11.2017 13.41.02 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:41 PM 06.11.2017 13.41.02 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:41 PM 06.11.2017 13.41.02 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:41 PM 06.11.2017 13.41.02 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:41 PM 06.11.2017 13.41.02 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:41 PM 06.11.2017 13.41.02 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:41 PM 06.11.2017 13.41.02 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:41 PM 06.11.2017 13.41.02 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:41 PM 06.11.2017 13.40.05 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:40 PM 06.11.2017 13.40.05 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:40 PM 06.11.2017 13.40.05 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:40 PM 06.11.2017 13.40.05 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:40 PM 06.11.2017 13.40.05 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:40 PM 06.11.2017 13.40.05 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:40 PM 06.11.2017 13.40.05 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:40 PM 06.11.2017 13.40.05 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:40 PM 06.11.2017 13.40.05 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:40 PM 06.11.2017 13.40.05 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:40 PM 06.11.2017 13.39.58 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:39 PM 06.11.2017 13.39.58 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:39 PM 06.11.2017 13.39.58 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:39 PM 06.11.2017 13.39.58 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:39 PM 06.11.2017 13.39.58 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:39 PM 06.11.2017 13.39.58 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:39 PM 06.11.2017 13.39.58 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:39 PM 06.11.2017 13.39.58 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:39 PM 06.11.2017 13.39.58 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:39 PM 06.11.2017 13.39.58 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:39 PM 06.11.2017 13.39.55 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:39 PM 06.11.2017 13.39.55 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:39 PM 06.11.2017 13.39.55 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:39 PM 06.11.2017 13.39.55 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:39 PM 06.11.2017 13.39.55 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:39 PM 06.11.2017 13.39.55 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:39 PM 06.11.2017 13.39.55 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:39 PM 06.11.2017 13.39.55 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:39 PM 06.11.2017 13.39.55 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:39 PM 06.11.2017 13.39.55 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:39 PM 06.11.2017 13.34.33 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:34 PM 06.11.2017 13.34.33 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:34 PM 06.11.2017 13.34.33 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:34 PM 06.11.2017 13.34.33 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:34 PM 06.11.2017 13.34.33 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:34 PM 06.11.2017 13.34.33 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:34 PM 06.11.2017 13.34.33 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:34 PM 06.11.2017 13.34.33 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:34 PM 06.11.2017 13.34.33 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:34 PM 06.11.2017 13.34.33 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:34 PM 06.11.2017 13.34.27 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:34 PM 06.11.2017 13.34.27 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:34 PM 06.11.2017 13.34.27 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:34 PM 06.11.2017 13.34.27 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:34 PM 06.11.2017 13.34.27 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:34 PM 06.11.2017 13.34.27 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:34 PM 06.11.2017 13.34.27 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:34 PM 06.11.2017 13.34.27 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:34 PM 06.11.2017 13.34.27 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:34 PM 06.11.2017 13.34.27 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:34 PM 06.11.2017 13.34.23 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:34 PM 06.11.2017 13.34.23 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:34 PM 06.11.2017 13.34.23 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:34 PM 06.11.2017 13.34.23 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:34 PM 06.11.2017 13.34.23 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:34 PM 06.11.2017 13.34.23 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:34 PM 06.11.2017 13.34.23 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:34 PM 06.11.2017 13.34.23 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:34 PM 06.11.2017 13.34.23 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:34 PM 06.11.2017 13.34.23 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:34 PM 06.11.2017 13.34.18 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:34 PM 06.11.2017 13.34.18 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:34 PM 06.11.2017 13.34.18 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:34 PM 06.11.2017 13.34.18 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:34 PM 06.11.2017 13.34.18 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:34 PM 06.11.2017 13.34.17 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:34 PM 06.11.2017 13.34.17 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:34 PM 06.11.2017 13.34.17 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:34 PM 06.11.2017 13.34.17 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:34 PM 06.11.2017 13.34.17 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:34 PM 06.11.2017 13.33.20 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:33 PM 06.11.2017 13.33.20 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:33 PM 06.11.2017 13.33.20 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:33 PM 06.11.2017 13.33.20 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:33 PM 06.11.2017 13.33.20 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:33 PM 06.11.2017 13.33.20 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:33 PM 06.11.2017 13.33.20 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:33 PM 06.11.2017 13.33.20 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:33 PM 06.11.2017 13.33.20 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:33 PM 06.11.2017 13.33.20 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:33 PM 06.11.2017 13.33.18 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:33 PM 06.11.2017 13.33.18 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:33 PM 06.11.2017 13.33.18 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:33 PM 06.11.2017 13.33.18 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:33 PM 06.11.2017 13.33.18 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:33 PM 06.11.2017 13.33.13 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:33 PM 06.11.2017 13.33.13 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:33 PM 06.11.2017 13.33.13 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:33 PM 06.11.2017 13.33.13 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:33 PM 06.11.2017 13.33.13 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:33 PM 06.11.2017 13.33.13 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:33 PM 06.11.2017 13.33.13 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:33 PM 06.11.2017 13.33.13 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:33 PM 06.11.2017 13.33.13 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:33 PM 06.11.2017 13.33.13 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:33 PM 06.11.2017 13.31.59 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:31 PM 06.11.2017 13.31.59 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:31 PM 06.11.2017 13.31.59 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:31 PM 06.11.2017 13.31.59 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:31 PM 06.11.2017 13.31.59 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:31 PM 06.11.2017 13.31.59 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:31 PM 06.11.2017 13.31.59 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:31 PM 06.11.2017 13.31.59 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:31 PM 06.11.2017 13.31.59 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:31 PM 06.11.2017 13.31.59 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:31 PM 06.11.2017 13.31.14 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:31 PM 06.11.2017 13.31.14 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:31 PM 06.11.2017 13.31.14 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:31 PM 06.11.2017 13.31.14 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:31 PM 06.11.2017 13.31.14 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:31 PM 06.11.2017 13.31.14 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:31 PM 06.11.2017 13.31.14 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:31 PM 06.11.2017 13.31.14 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:31 PM 06.11.2017 13.31.14 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:31 PM 06.11.2017 13.31.14 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:31 PM 06.11.2017 13.31.08 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:31 PM 06.11.2017 13.31.08 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:31 PM 06.11.2017 13.31.08 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:31 PM 06.11.2017 13.31.08 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:31 PM 06.11.2017 13.31.08 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:31 PM 06.11.2017 13.31.08 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:31 PM 06.11.2017 13.31.08 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:31 PM 06.11.2017 13.31.08 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:31 PM 06.11.2017 13.31.08 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:31 PM 06.11.2017 13.31.08 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:31 PM 06.11.2017 13.30.49 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:30 PM 06.11.2017 13.30.49 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:30 PM 06.11.2017 13.30.49 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:30 PM 06.11.2017 13.30.49 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:30 PM 06.11.2017 13.30.49 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:30 PM 06.11.2017 13.30.49 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:30 PM 06.11.2017 13.30.49 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:30 PM 06.11.2017 13.30.49 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:30 PM 06.11.2017 13.30.49 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:30 PM 06.11.2017 13.30.49 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:30 PM 06.11.2017 13.30.35 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:30 PM 06.11.2017 13.30.35 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:30 PM 06.11.2017 13.30.35 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:30 PM 06.11.2017 13.30.35 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:30 PM 06.11.2017 13.30.35 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:30 PM 06.11.2017 13.30.35 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:30 PM 06.11.2017 13.30.35 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:30 PM 06.11.2017 13.30.35 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:30 PM 06.11.2017 13.30.35 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:30 PM 06.11.2017 13.30.35 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:30 PM 06.11.2017 13.30.29 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:30 PM 06.11.2017 13.30.29 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:30 PM 06.11.2017 13.30.29 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:30 PM 06.11.2017 13.30.29 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:30 PM 06.11.2017 13.30.29 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:30 PM 06.11.2017 13.30.29 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:30 PM 06.11.2017 13.30.29 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:30 PM 06.11.2017 13.30.29 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:30 PM 06.11.2017 13.30.29 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:30 PM 06.11.2017 13.30.29 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:30 PM 06.11.2017 13.30.27 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:30 PM 06.11.2017 13.30.27 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:30 PM 06.11.2017 13.30.27 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:30 PM 06.11.2017 13.30.27 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:30 PM 06.11.2017 13.30.27 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:30 PM 06.11.2017 13.30.22 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:30 PM 06.11.2017 13.30.22 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:30 PM 06.11.2017 13.30.22 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:30 PM 06.11.2017 13.30.22 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:30 PM 06.11.2017 13.30.22 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:30 PM 06.11.2017 13.30.22 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:30 PM 06.11.2017 13.30.22 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:30 PM 06.11.2017 13.30.22 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:30 PM 06.11.2017 13.30.22 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:30 PM 06.11.2017 13.30.22 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:30 PM 06.11.2017 13.30.18 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:30 PM 06.11.2017 13.30.18 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:30 PM 06.11.2017 13.30.18 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:30 PM 06.11.2017 13.30.18 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:30 PM 06.11.2017 13.30.18 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:30 PM 06.11.2017 13.30.16 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:30 PM 06.11.2017 13.30.16 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:30 PM 06.11.2017 13.30.16 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:30 PM 06.11.2017 13.30.16 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:30 PM 06.11.2017 13.30.16 Suspicious action was blocked mcci+McciTrayApp Action: Hook incoming messages of the stream Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:30 PM 06.11.2017 13.30.16 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:30 PM 06.11.2017 13.30.16 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:30 PM 06.11.2017 13.30.16 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:30 PM 06.11.2017 13.30.16 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:30 PM 06.11.2017 13.30.16 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:30 PM 06.11.2017 13.30.16 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:30 PM 06.11.2017 13.30.11 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:30 PM 06.11.2017 13.30.11 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:30 PM 06.11.2017 13.30.11 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:30 PM 06.11.2017 13.30.11 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:30 PM 06.11.2017 13.30.11 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:30 PM 06.11.2017 13.30.11 Suspicious action was blocked mcci+McciTrayApp Action: Hook incoming messages of the stream Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:30 PM 06.11.2017 13.30.11 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:30 PM 06.11.2017 13.30.11 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:30 PM 06.11.2017 13.30.11 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:30 PM 06.11.2017 13.30.11 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:30 PM 06.11.2017 13.30.11 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:30 PM 06.11.2017 13.30.09 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:30 PM 06.11.2017 13.30.09 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:30 PM 06.11.2017 13.30.09 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:30 PM 06.11.2017 13.30.09 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:30 PM 06.11.2017 13.30.09 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:30 PM 06.11.2017 13.30.09 Suspicious action was blocked mcci+McciTrayApp Action: Hook incoming messages of the stream Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:30 PM 06.11.2017 13.30.09 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:30 PM 06.11.2017 13.30.09 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:30 PM 06.11.2017 13.30.09 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:30 PM 06.11.2017 13.30.09 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:30 PM 06.11.2017 13.30.09 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:30 PM 06.11.2017 13.30.02 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:30 PM 06.11.2017 13.30.02 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:30 PM 06.11.2017 13.30.02 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:30 PM 06.11.2017 13.30.02 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:30 PM 06.11.2017 13.30.02 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:30 PM 06.11.2017 13.30.02 Suspicious action was blocked mcci+McciTrayApp Action: Hook incoming messages of the stream Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:30 PM 06.11.2017 13.30.02 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:30 PM 06.11.2017 13.30.02 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:30 PM 06.11.2017 13.30.02 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:30 PM 06.11.2017 13.30.02 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:30 PM 06.11.2017 13.30.02 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:30 PM 06.11.2017 13.29.55 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:29 PM 06.11.2017 13.29.55 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:29 PM 06.11.2017 13.29.55 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:29 PM 06.11.2017 13.29.55 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:29 PM 06.11.2017 13.29.55 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:29 PM 06.11.2017 13.29.55 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:29 PM 06.11.2017 13.29.55 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:29 PM 06.11.2017 13.29.55 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:29 PM 06.11.2017 13.29.55 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:29 PM 06.11.2017 13.29.55 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:29 PM 06.11.2017 13.29.28 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:29 PM 06.11.2017 13.29.28 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:29 PM 06.11.2017 13.29.28 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:29 PM 06.11.2017 13.29.28 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:29 PM 06.11.2017 13.29.28 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:29 PM 06.11.2017 13.29.28 Suspicious action was blocked mcci+McciTrayApp Action: Hook incoming messages of the stream Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:29 PM 06.11.2017 13.29.28 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:29 PM 06.11.2017 13.29.28 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:29 PM 06.11.2017 13.29.28 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:29 PM 06.11.2017 13.29.28 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:29 PM 06.11.2017 13.29.28 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:29 PM 06.11.2017 13.29.01 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:29 PM 06.11.2017 13.29.01 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:29 PM 06.11.2017 13.29.01 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:29 PM 06.11.2017 13.29.01 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:29 PM 06.11.2017 13.29.01 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:29 PM 06.11.2017 13.29.01 Suspicious action was blocked mcci+McciTrayApp Action: Hook incoming messages of the stream Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:29 PM 06.11.2017 13.29.01 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:29 PM 06.11.2017 13.29.01 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:29 PM 06.11.2017 13.29.01 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:29 PM 06.11.2017 13.29.01 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:29 PM 06.11.2017 13.29.01 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:29 PM 06.11.2017 13.28.59 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:28 PM 06.11.2017 13.28.59 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:28 PM 06.11.2017 13.28.59 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:28 PM 06.11.2017 13.28.59 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:28 PM 06.11.2017 13.28.59 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:28 PM 06.11.2017 13.28.52 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:28 PM 06.11.2017 13.28.52 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:28 PM 06.11.2017 13.28.52 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:28 PM 06.11.2017 13.28.52 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:28 PM 06.11.2017 13.28.52 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:28 PM 06.11.2017 13.28.52 Suspicious action was blocked mcci+McciTrayApp Action: Hook incoming messages of the stream Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:28 PM 06.11.2017 13.28.52 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:28 PM 06.11.2017 13.28.52 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:28 PM 06.11.2017 13.28.52 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:28 PM 06.11.2017 13.28.52 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:28 PM 06.11.2017 13.28.52 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:28 PM 06.11.2017 13.28.38 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:28 PM 06.11.2017 13.28.38 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:28 PM 06.11.2017 13.28.38 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:28 PM 06.11.2017 13.28.38 Suspicious action was blocked mcci+McciTrayApp Action: Hook incoming messages of the stream Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:28 PM 06.11.2017 13.28.38 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:28 PM 06.11.2017 13.28.38 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:28 PM 06.11.2017 13.28.38 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:28 PM 06.11.2017 13.28.38 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:28 PM 06.11.2017 13.28.38 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:28 PM 06.11.2017 13.28.38 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:28 PM 06.11.2017 13.28.38 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:28 PM 06.11.2017 13.28.28 Suspicious action was blocked Malwarebytes Anti-Exploit 64bit tasks Action: Read memory from other processes Application: Malwarebytes Anti-Exploit 64bit tasks Application path: C:\Program Files (x86)\Malwarebytes Anti-Exploit\mbae64.exe Time: 11/6/2017 1:28 PM 06.11.2017 13.28.28 Suspicious action was blocked Malwarebytes Anti-Exploit 64bit tasks Action: Duplicate internal process handle Application: Malwarebytes Anti-Exploit 64bit tasks Application path: C:\Program Files (x86)\Malwarebytes Anti-Exploit\mbae64.exe Time: 11/6/2017 1:28 PM 06.11.2017 13.28.28 Suspicious action was blocked Malwarebytes Anti-Exploit 64bit tasks Action: Perform code injection Application: Malwarebytes Anti-Exploit 64bit tasks Application path: C:\Program Files (x86)\Malwarebytes Anti-Exploit\mbae64.exe Time: 11/6/2017 1:28 PM 06.11.2017 13.28.28 Suspicious action was blocked Malwarebytes Anti-Exploit 64bit tasks Action: Access memory of other processes Application: Malwarebytes Anti-Exploit 64bit tasks Application path: C:\Program Files (x86)\Malwarebytes Anti-Exploit\mbae64.exe Time: 11/6/2017 1:28 PM 06.11.2017 13.27.24 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:27 PM 06.11.2017 13.27.24 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:27 PM 06.11.2017 13.27.24 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:27 PM 06.11.2017 13.27.24 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:27 PM 06.11.2017 13.27.24 Suspicious action was blocked mcci+McciTrayApp Action: Hook incoming messages of the stream Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:27 PM 06.11.2017 13.27.24 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:27 PM 06.11.2017 13.27.24 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:27 PM 06.11.2017 13.27.24 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:27 PM 06.11.2017 13.27.24 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:27 PM 06.11.2017 13.27.17 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:27 PM 06.11.2017 13.27.17 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:27 PM 06.11.2017 13.27.17 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:27 PM 06.11.2017 13.27.17 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:27 PM 06.11.2017 13.27.17 Suspicious action was blocked mcci+McciTrayApp Action: Hook incoming messages of the stream Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:27 PM 06.11.2017 13.27.17 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:27 PM 06.11.2017 13.27.17 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:27 PM 06.11.2017 13.27.17 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:27 PM 06.11.2017 13.27.17 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:27 PM 06.11.2017 13.27.11 Suspicious action was blocked mcci+McciTrayApp Action: Hook incoming messages of the stream Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:27 PM 06.11.2017 13.27.11 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:27 PM 06.11.2017 13.27.11 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:27 PM 06.11.2017 13.27.11 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:27 PM 06.11.2017 13.27.11 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:27 PM 06.11.2017 13.27.11 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:27 PM 06.11.2017 13.27.11 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:27 PM 06.11.2017 13.27.11 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:27 PM 06.11.2017 13.27.11 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:27 PM 06.11.2017 13.27.07 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:27 PM 06.11.2017 13.27.07 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:27 PM 06.11.2017 13.27.07 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:27 PM 06.11.2017 13.27.07 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:27 PM 06.11.2017 13.27.07 Suspicious action was blocked mcci+McciTrayApp Action: Hook incoming messages of the stream Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:27 PM 06.11.2017 13.27.07 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:27 PM 06.11.2017 13.27.07 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:27 PM 06.11.2017 13.27.07 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:27 PM 06.11.2017 13.27.07 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:27 PM 06.11.2017 13.26.33 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:26 PM 06.11.2017 13.26.33 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:26 PM 06.11.2017 13.26.33 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:26 PM 06.11.2017 13.26.33 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:26 PM 06.11.2017 13.26.33 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:26 PM 06.11.2017 13.26.33 Suspicious action was blocked mcci+McciTrayApp Action: Hook incoming messages of the stream Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:26 PM 06.11.2017 13.26.33 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:26 PM 06.11.2017 13.26.33 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:26 PM 06.11.2017 13.26.33 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:26 PM 06.11.2017 13.26.33 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:26 PM 06.11.2017 13.26.33 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:26 PM 06.11.2017 13.24.14 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:24 PM 06.11.2017 13.24.14 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:24 PM 06.11.2017 13.24.14 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:24 PM 06.11.2017 13.24.14 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:24 PM 06.11.2017 13.24.14 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:24 PM 06.11.2017 13.24.14 Suspicious action was blocked mcci+McciTrayApp Action: Hook incoming messages of the stream Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:24 PM 06.11.2017 13.24.14 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:24 PM 06.11.2017 13.24.14 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:24 PM 06.11.2017 13.24.14 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:24 PM 06.11.2017 13.24.14 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:24 PM 06.11.2017 13.24.14 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:24 PM 06.11.2017 13.24.10 Suspicious action was blocked Malwarebytes Anti-Exploit 64bit tasks Action: Access memory of other processes Application: Malwarebytes Anti-Exploit 64bit tasks Application path: C:\Program Files (x86)\Malwarebytes Anti-Exploit\mbae64.exe Time: 11/6/2017 1:24 PM 06.11.2017 13.24.10 Suspicious action was blocked Malwarebytes Anti-Exploit 64bit tasks Action: Read memory from other processes Application: Malwarebytes Anti-Exploit 64bit tasks Application path: C:\Program Files (x86)\Malwarebytes Anti-Exploit\mbae64.exe Time: 11/6/2017 1:24 PM 06.11.2017 13.24.10 Suspicious action was blocked Malwarebytes Anti-Exploit 64bit tasks Action: Duplicate internal process handle Application: Malwarebytes Anti-Exploit 64bit tasks Application path: C:\Program Files (x86)\Malwarebytes Anti-Exploit\mbae64.exe Time: 11/6/2017 1:24 PM 06.11.2017 13.24.10 Suspicious action was blocked Malwarebytes Anti-Exploit 64bit tasks Action: Perform code injection Application: Malwarebytes Anti-Exploit 64bit tasks Application path: C:\Program Files (x86)\Malwarebytes Anti-Exploit\mbae64.exe Time: 11/6/2017 1:24 PM 06.11.2017 13.23.00 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:23 PM 06.11.2017 13.23.00 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:23 PM 06.11.2017 13.23.00 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:23 PM 06.11.2017 13.23.00 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:23 PM 06.11.2017 13.23.00 Suspicious action was blocked mcci+McciTrayApp Action: Hook incoming messages of the stream Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:23 PM 06.11.2017 13.23.00 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:23 PM 06.11.2017 13.23.00 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:23 PM 06.11.2017 13.23.00 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:23 PM 06.11.2017 13.23.00 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:23 PM 06.11.2017 13.22.15 Suspicious action was blocked mcci+McciTrayApp Action: Hook incoming messages of the stream Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:22 PM 06.11.2017 13.22.15 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:22 PM 06.11.2017 13.22.15 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:22 PM 06.11.2017 13.22.15 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:22 PM 06.11.2017 13.22.15 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:22 PM 06.11.2017 13.22.14 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:22 PM 06.11.2017 13.22.14 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:22 PM 06.11.2017 13.22.14 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:22 PM 06.11.2017 13.22.14 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:22 PM 06.11.2017 13.22.13 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:22 PM 06.11.2017 13.22.13 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:22 PM 06.11.2017 13.22.13 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:22 PM 06.11.2017 13.22.13 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:22 PM 06.11.2017 13.22.08 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:22 PM 06.11.2017 13.22.08 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:22 PM 06.11.2017 13.22.08 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:22 PM 06.11.2017 13.22.08 Suspicious action was blocked mcci+McciTrayApp Action: Hook incoming messages of the stream Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:22 PM 06.11.2017 13.22.08 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:22 PM 06.11.2017 13.22.08 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:22 PM 06.11.2017 13.22.08 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:22 PM 06.11.2017 13.22.08 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:22 PM 06.11.2017 13.22.08 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:22 PM 06.11.2017 13.21.14 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:21 PM 06.11.2017 13.21.14 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:21 PM 06.11.2017 13.21.14 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:21 PM 06.11.2017 13.21.14 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:21 PM 06.11.2017 13.21.14 Suspicious action was blocked mcci+McciTrayApp Action: Hook incoming messages of the stream Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:21 PM 06.11.2017 13.21.14 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:21 PM 06.11.2017 13.21.14 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:21 PM 06.11.2017 13.21.14 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:21 PM 06.11.2017 13.21.14 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:21 PM 06.11.2017 13.21.05 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:21 PM 06.11.2017 13.21.05 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:21 PM 06.11.2017 13.21.05 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:21 PM 06.11.2017 13.21.05 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:21 PM 06.11.2017 13.21.05 Suspicious action was blocked mcci+McciTrayApp Action: Hook incoming messages of the stream Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:21 PM 06.11.2017 13.21.05 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:21 PM 06.11.2017 13.21.05 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:21 PM 06.11.2017 13.21.05 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:21 PM 06.11.2017 13.21.05 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:21 PM 06.11.2017 13.20.59 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:20 PM 06.11.2017 13.20.59 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:20 PM 06.11.2017 13.20.59 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:20 PM 06.11.2017 13.20.59 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:20 PM 06.11.2017 13.20.59 Suspicious action was blocked mcci+McciTrayApp Action: Hook incoming messages of the stream Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:20 PM 06.11.2017 13.20.59 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:20 PM 06.11.2017 13.20.59 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:20 PM 06.11.2017 13.20.59 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:20 PM 06.11.2017 13.20.59 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:20 PM 06.11.2017 13.20.50 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:20 PM 06.11.2017 13.20.50 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:20 PM 06.11.2017 13.20.50 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:20 PM 06.11.2017 13.20.50 Suspicious action was blocked mcci+McciTrayApp Action: Hook incoming messages of the stream Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:20 PM 06.11.2017 13.20.50 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:20 PM 06.11.2017 13.20.50 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:20 PM 06.11.2017 13.20.50 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:20 PM 06.11.2017 13.20.49 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:20 PM 06.11.2017 13.20.49 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:20 PM 06.11.2017 13.20.30 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:20 PM 06.11.2017 13.20.30 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:20 PM 06.11.2017 13.20.30 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:20 PM 06.11.2017 13.20.30 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:20 PM 06.11.2017 13.20.30 Suspicious action was blocked mcci+McciTrayApp Action: Hook incoming messages of the stream Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:20 PM 06.11.2017 13.20.30 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:20 PM 06.11.2017 13.20.30 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:20 PM 06.11.2017 13.20.30 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:20 PM 06.11.2017 13.20.30 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:20 PM 06.11.2017 13.20.22 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:20 PM 06.11.2017 13.20.22 Suspicious action was blocked mcci+McciTrayApp Action: Hook incoming messages of the stream Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:20 PM 06.11.2017 13.20.22 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:20 PM 06.11.2017 13.20.22 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:20 PM 06.11.2017 13.20.22 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:20 PM 06.11.2017 13.20.22 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:20 PM 06.11.2017 13.20.22 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:20 PM 06.11.2017 13.20.22 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:20 PM 06.11.2017 13.20.22 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:20 PM 06.11.2017 13.20.17 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:20 PM 06.11.2017 13.20.17 Suspicious action was blocked mcci+McciTrayApp Action: Hook incoming messages of the stream Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:20 PM 06.11.2017 13.20.17 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:20 PM 06.11.2017 13.20.17 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:20 PM 06.11.2017 13.20.17 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:20 PM 06.11.2017 13.20.17 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:20 PM 06.11.2017 13.20.17 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:20 PM 06.11.2017 13.20.17 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:20 PM 06.11.2017 13.20.17 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:20 PM 06.11.2017 13.19.13 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:19 PM 06.11.2017 13.19.13 Suspicious action was blocked mcci+McciTrayApp Action: Hook incoming messages of the stream Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:19 PM 06.11.2017 13.19.13 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:19 PM 06.11.2017 13.19.13 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:19 PM 06.11.2017 13.19.13 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:19 PM 06.11.2017 13.19.13 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:19 PM 06.11.2017 13.19.13 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:19 PM 06.11.2017 13.19.13 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:19 PM 06.11.2017 13.19.13 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:19 PM 06.11.2017 13.19.09 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:19 PM 06.11.2017 13.19.09 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:19 PM 06.11.2017 13.19.09 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:19 PM 06.11.2017 13.19.09 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:19 PM 06.11.2017 13.19.09 Suspicious action was blocked mcci+McciTrayApp Action: Hook incoming messages of the stream Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:19 PM 06.11.2017 13.19.09 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:19 PM 06.11.2017 13.19.09 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:19 PM 06.11.2017 13.19.09 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:19 PM 06.11.2017 13.19.09 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:19 PM 06.11.2017 13.19.07 Suspicious action was blocked Malwarebytes Anti-Exploit 64bit tasks Action: Read memory from other processes Application: Malwarebytes Anti-Exploit 64bit tasks Application path: C:\Program Files (x86)\Malwarebytes Anti-Exploit\mbae64.exe Time: 11/6/2017 1:19 PM 06.11.2017 13.19.07 Suspicious action was blocked Malwarebytes Anti-Exploit 64bit tasks Action: Duplicate internal process handle Application: Malwarebytes Anti-Exploit 64bit tasks Application path: C:\Program Files (x86)\Malwarebytes Anti-Exploit\mbae64.exe Time: 11/6/2017 1:19 PM 06.11.2017 13.19.07 Suspicious action was blocked Malwarebytes Anti-Exploit 64bit tasks Action: Perform code injection Application: Malwarebytes Anti-Exploit 64bit tasks Application path: C:\Program Files (x86)\Malwarebytes Anti-Exploit\mbae64.exe Time: 11/6/2017 1:19 PM 06.11.2017 13.19.07 Suspicious action was blocked Malwarebytes Anti-Exploit 64bit tasks Action: Access memory of other processes Application: Malwarebytes Anti-Exploit 64bit tasks Application path: C:\Program Files (x86)\Malwarebytes Anti-Exploit\mbae64.exe Time: 11/6/2017 1:19 PM 06.11.2017 13.19.07 Suspicious action was blocked Malwarebytes Anti-Exploit 64bit tasks Action: Access memory of other processes Application: Malwarebytes Anti-Exploit 64bit tasks Application path: C:\Program Files (x86)\Malwarebytes Anti-Exploit\mbae64.exe Time: 11/6/2017 1:19 PM 06.11.2017 13.19.07 Suspicious action was blocked Malwarebytes Anti-Exploit 64bit tasks Action: Read memory from other processes Application: Malwarebytes Anti-Exploit 64bit tasks Application path: C:\Program Files (x86)\Malwarebytes Anti-Exploit\mbae64.exe Time: 11/6/2017 1:19 PM 06.11.2017 13.19.07 Suspicious action was blocked Malwarebytes Anti-Exploit 64bit tasks Action: Duplicate internal process handle Application: Malwarebytes Anti-Exploit 64bit tasks Application path: C:\Program Files (x86)\Malwarebytes Anti-Exploit\mbae64.exe Time: 11/6/2017 1:19 PM 06.11.2017 13.19.07 Suspicious action was blocked Malwarebytes Anti-Exploit 64bit tasks Action: Perform code injection Application: Malwarebytes Anti-Exploit 64bit tasks Application path: C:\Program Files (x86)\Malwarebytes Anti-Exploit\mbae64.exe Time: 11/6/2017 1:19 PM 06.11.2017 13.19.07 Suspicious action was blocked Malwarebytes Anti-Exploit 64bit tasks Action: Access memory of other processes Application: Malwarebytes Anti-Exploit 64bit tasks Application path: C:\Program Files (x86)\Malwarebytes Anti-Exploit\mbae64.exe Time: 11/6/2017 1:19 PM 06.11.2017 13.19.07 Suspicious action was blocked Malwarebytes Anti-Exploit 64bit tasks Action: Read memory from other processes Application: Malwarebytes Anti-Exploit 64bit tasks Application path: C:\Program Files (x86)\Malwarebytes Anti-Exploit\mbae64.exe Time: 11/6/2017 1:19 PM 06.11.2017 13.19.07 Suspicious action was blocked Malwarebytes Anti-Exploit 64bit tasks Action: Duplicate internal process handle Application: Malwarebytes Anti-Exploit 64bit tasks Application path: C:\Program Files (x86)\Malwarebytes Anti-Exploit\mbae64.exe Time: 11/6/2017 1:19 PM 06.11.2017 13.19.07 Suspicious action was blocked Malwarebytes Anti-Exploit 64bit tasks Action: Perform code injection Application: Malwarebytes Anti-Exploit 64bit tasks Application path: C:\Program Files (x86)\Malwarebytes Anti-Exploit\mbae64.exe Time: 11/6/2017 1:19 PM 06.11.2017 13.19.03 Suspicious action was blocked Malwarebytes Anti-Exploit 64bit tasks Action: Access memory of other processes Application: Malwarebytes Anti-Exploit 64bit tasks Application path: C:\Program Files (x86)\Malwarebytes Anti-Exploit\mbae64.exe Time: 11/6/2017 1:19 PM 06.11.2017 13.19.03 Suspicious action was blocked Malwarebytes Anti-Exploit 64bit tasks Action: Read memory from other processes Application: Malwarebytes Anti-Exploit 64bit tasks Application path: C:\Program Files (x86)\Malwarebytes Anti-Exploit\mbae64.exe Time: 11/6/2017 1:19 PM 06.11.2017 13.19.03 Suspicious action was blocked Malwarebytes Anti-Exploit 64bit tasks Action: Duplicate internal process handle Application: Malwarebytes Anti-Exploit 64bit tasks Application path: C:\Program Files (x86)\Malwarebytes Anti-Exploit\mbae64.exe Time: 11/6/2017 1:19 PM 06.11.2017 13.19.03 Suspicious action was blocked Malwarebytes Anti-Exploit 64bit tasks Action: Perform code injection Application: Malwarebytes Anti-Exploit 64bit tasks Application path: C:\Program Files (x86)\Malwarebytes Anti-Exploit\mbae64.exe Time: 11/6/2017 1:19 PM 06.11.2017 13.19.00 Suspicious action was blocked Malwarebytes Anti-Exploit 64bit tasks Action: Access memory of other processes Application: Malwarebytes Anti-Exploit 64bit tasks Application path: C:\Program Files (x86)\Malwarebytes Anti-Exploit\mbae64.exe Time: 11/6/2017 1:19 PM 06.11.2017 13.19.00 Suspicious action was blocked Malwarebytes Anti-Exploit 64bit tasks Action: Read memory from other processes Application: Malwarebytes Anti-Exploit 64bit tasks Application path: C:\Program Files (x86)\Malwarebytes Anti-Exploit\mbae64.exe Time: 11/6/2017 1:19 PM 06.11.2017 13.19.00 Suspicious action was blocked Malwarebytes Anti-Exploit 64bit tasks Action: Duplicate internal process handle Application: Malwarebytes Anti-Exploit 64bit tasks Application path: C:\Program Files (x86)\Malwarebytes Anti-Exploit\mbae64.exe Time: 11/6/2017 1:19 PM 06.11.2017 13.19.00 Suspicious action was blocked Malwarebytes Anti-Exploit 64bit tasks Action: Perform code injection Application: Malwarebytes Anti-Exploit 64bit tasks Application path: C:\Program Files (x86)\Malwarebytes Anti-Exploit\mbae64.exe Time: 11/6/2017 1:19 PM 06.11.2017 13.18.59 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:18 PM 06.11.2017 13.18.59 Suspicious action was blocked mcci+McciTrayApp Action: Read memory from other processes Application: mcci+McciTrayApp Application path: C:\Program Files\ATT\8.5.0.48\ma\bin\pcTrayApp.exe Time: 11/6/2017 1:18 PM 06.11.2017 12.58.28 Search for application updates Search completed, no available updates Important updates available: 0 Recommended updates available: 0 Started: Automatically Status: Completed Time: 11/6/2017 12:58 PM 06.11.2017 12.57.28 Rootkit Scan No threats detected Detected: 0 Deleted: 0 Not disinfected: 0 Release date of databases used for scan: 11/6/2017 6:45 AM Total duration: 24 minutes, 34 seconds Completion time: 11/6/2017 1:22 PM 06.11.2017 12.32.12 Update of databases and application modules Completed. Average download speed:: 1.01 MB/s Status:: Completed. Downloaded and updated:: 4.08 MB Total duration: 28 seconds Time: 11/6/2017 12:32 PM 06.11.2017 12.28.54 Task started Web Anti-Virus Time: 11/6/2017 12:28 PM 06.11.2017 12.28.54 Task started System Watcher Time: 11/6/2017 12:28 PM 06.11.2017 12.28.53 Task started Network Attack Blocker Time: 11/6/2017 12:28 PM 06.11.2017 12.28.53 Task started IM Anti-Virus Time: 11/6/2017 12:28 PM 06.11.2017 12.28.53 Task started Mail Anti-Virus Time: 11/6/2017 12:28 PM 06.11.2017 12.27.28 Task started File Anti-Virus Time: 11/6/2017 12:27 PM 06.11.2017 12.27.28 Task started Application Control Time: 11/6/2017 12:27 PM 06.11.2017 12.27.28 Task started Firewall Time: 11/6/2017 12:27 PM 04.11.2017 00.06.31 Full Scan No threats detected Detected: 0 Deleted: 0 Not disinfected: 0 Release date of databases used for scan: 11/3/2017 2:43 PM Total duration: 15 minutes, 54 seconds Completion time: 11/4/2017 12:22 AM 04.11.2017 00.04.57 Update of databases and application modules Completed. Average download speed:: 217.47 KB/s Status:: Completed. Downloaded and updated:: 125.42 KB Total duration: 13 seconds Time: 11/4/2017 12:04 AM 03.11.2017 23.06.14 Update of databases and application modules Completed. Average download speed:: 77.55 KB/s Status:: Completed. Downloaded and updated:: 142.29 KB Total duration: 57 seconds Time: 11/3/2017 11:06 PM 03.11.2017 22.53.17 Search for application updates Search completed, no available updates Important updates available: 0 Recommended updates available: 0 Started: Automatically Status: Completed Time: 11/3/2017 10:53 PM 03.11.2017 22.23.42 Task started Web Anti-Virus Time: 11/3/2017 10:23 PM 03.11.2017 22.23.42 Task started System Watcher Time: 11/3/2017 10:23 PM 03.11.2017 22.23.42 Task started Network Attack Blocker Time: 11/3/2017 10:23 PM 03.11.2017 22.23.42 Task started IM Anti-Virus Time: 11/3/2017 10:23 PM 03.11.2017 22.23.42 Task started Mail Anti-Virus Time: 11/3/2017 10:23 PM 03.11.2017 22.22.17 Task started Firewall Time: 11/3/2017 10:22 PM 03.11.2017 22.22.17 Task started File Anti-Virus Time: 11/3/2017 10:22 PM 03.11.2017 22.22.17 Task started Application Control Time: 11/3/2017 10:22 PM 03.11.2017 22.00.26 Search for application updates Search completed, no available updates Important updates available: 0 Recommended updates available: 0 Started: Automatically Status: Completed Time: 11/3/2017 10:00 PM 03.11.2017 21.55.49 Application added to the Trusted group c:\windows\system32\services.msc Application: c:\windows\system32\services.msc Reason: analysis of digital signature Application path: c:\windows\system32\services.msc Time: 11/3/2017 9:55 PM 03.11.2017 21.49.54 Application added to the Trusted group Revo Uninstaller Application: Revo Uninstaller Reason: KSN information Application path: C:\Program Files\VS Revo Group\Revo Uninstaller\RevoUnin.exe Time: 11/3/2017 9:49 PM 03.11.2017 21.49.45 Application added to the Trusted group Setup/Uninstall Application: Setup/Uninstall Reason: KSN information Application path: C:\Users\JB\AppData\Local\Temp\is-E9EDQ.tmp\VSUSetup.tmp Time: 11/3/2017 9:49 PM 03.11.2017 21.49.45 Application added to the Trusted group Revo Uninstaller Application: Revo Uninstaller Reason: KSN information Application path: C:\Users\JB\AppData\Local\Temp\VSUSetup.exe Time: 11/3/2017 9:49 PM 03.11.2017 21.49.33 Application added to the Trusted group Revo Uninstaller Application: Revo Uninstaller Reason: KSN information Application path: C:\Program Files\VS Revo Group\Revo Uninstaller\RevoUnin.exe Time: 11/3/2017 9:49 PM 03.11.2017 21.43.50 Application added to the Trusted group Notepad Application: Notepad Reason: analysis of digital signature Application path: C:\Windows\SysWOW64\notepad.exe Time: 11/3/2017 9:43 PM 03.11.2017 21.43.11 Application added to the Low Restricted group Windows Event Viewer - Reports from 1 to 20 of the last events or between two dates. Application: Windows Event Viewer - Reports from 1 to 20 of the last events or between two dates. Reason: according to calculated rating Application path: C:\Users\JB\Desktop\VEW(1).exe Time: 11/3/2017 9:43 PM 03.11.2017 21.35.35 Application added to the Trusted group System Integrity Check and Repair Application: System Integrity Check and Repair Reason: analysis of digital signature Application path: C:\Windows\System32\sfc.exe Time: 11/3/2017 9:35 PM 03.11.2017 21.29.50 Task started System Watcher Time: 11/3/2017 9:29 PM 03.11.2017 21.29.50 Task started Web Anti-Virus Time: 11/3/2017 9:29 PM 03.11.2017 21.29.50 Task started IM Anti-Virus Time: 11/3/2017 9:29 PM 03.11.2017 21.29.50 Task started Network Attack Blocker Time: 11/3/2017 9:29 PM 03.11.2017 21.29.50 Task started Mail Anti-Virus Time: 11/3/2017 9:29 PM 03.11.2017 21.28.26 Task started Firewall Time: 11/3/2017 9:28 PM 03.11.2017 21.28.26 Task started File Anti-Virus Time: 11/3/2017 9:28 PM 03.11.2017 21.28.26 Task started Application Control Time: 11/3/2017 9:28 PM 03.11.2017 21.04.42 Update of databases and application modules Completed. Average download speed:: 116.67 KB/s Status:: Completed. Downloaded and updated:: 602.01 KB Total duration: 1 minute, 44 seconds Time: 11/3/2017 9:04 PM 03.11.2017 20.54.06 Application added to the Trusted group BTWUIExt Application: BTWUIExt Reason: analysis of digital signature Application path: C:\Program Files\WIDCOMM\Bluetooth Software\BTWUIExt.exe Time: 11/3/2017 8:54 PM 03.11.2017 16.44.30 Rootkit Scan No threats detected Detected: 0 Deleted: 0 Not disinfected: 0 Release date of databases used for scan: 11/3/2017 11:20 AM Total duration: 4 hours, 9 minutes Completion time: 11/3/2017 8:54 PM 03.11.2017 16.37.56 Selective Scan No threats detected Detected: 0 Deleted: 0 Not disinfected: 0 Release date of databases used for scan: 11/3/2017 11:20 AM Total duration: 4 seconds Completion time: 11/3/2017 4:38 PM 03.11.2017 16.30.36 Update of databases and application modules Completed. Average download speed:: 123.21 KB/s Status:: Completed. Downloaded and updated:: 252.02 KB Total duration: 1 minute, 5 seconds Time: 11/3/2017 4:30 PM 03.11.2017 14.22.52 Search for application updates Search completed, no available updates Important updates available: 0 Recommended updates available: 0 Started: Automatically Status: Completed Time: 11/3/2017 2:22 PM 03.11.2017 14.07.37 Update of databases and application modules Completed. Average download speed:: 276.81 KB/s Status:: Completed. Downloaded and updated:: 2.45 MB Total duration: 1 minute, 40 seconds Time: 11/3/2017 2:07 PM 03.11.2017 13.55.02 Application added to the Trusted group Microsoft Malware Protection Signature Update Stub Application: Microsoft Malware Protection Signature Update Stub Reason: analysis of digital signature Application path: C:\Windows\Temp\{B61D0936-F5FF-4113-BED5-ABF4D2CF2E05}\MPSigStub.exe Time: 11/3/2017 1:55 PM 03.11.2017 13.55.02 Application added to the Trusted group AntiMalware Definition Update Application: AntiMalware Definition Update Reason: analysis of digital signature Application path: C:\Windows\SoftwareDistribution\Download\Install\mpas-fe_bd.exe Time: 11/3/2017 1:55 PM 03.11.2017 13.52.18 Task started System Watcher Time: 11/3/2017 1:52 PM 03.11.2017 13.52.18 Task started Web Anti-Virus Time: 11/3/2017 1:52 PM 03.11.2017 13.52.18 Task started Network Attack Blocker Time: 11/3/2017 1:52 PM 03.11.2017 13.52.18 Task started IM Anti-Virus Time: 11/3/2017 1:52 PM 03.11.2017 13.52.18 Task started Mail Anti-Virus Time: 11/3/2017 1:52 PM 03.11.2017 13.50.52 Task started Application Control Time: 11/3/2017 1:50 PM 03.11.2017 13.50.52 Task started File Anti-Virus Time: 11/3/2017 1:50 PM 03.11.2017 13.50.52 Task started Firewall Time: 11/3/2017 1:50 PM 02.11.2017 19.42.10 Selective Scan No threats detected Detected: 0 Deleted: 0 Not disinfected: 0 Release date of databases used for scan: 11/2/2017 9:08 AM Total duration: 5 seconds Completion time: 11/2/2017 7:42 PM 02.11.2017 18.04.14 Update of databases and application modules Completed. Average download speed:: 76.89 KB/s Status:: Completed. Downloaded and updated:: 102.91 KB Total duration: 52 seconds Time: 11/2/2017 6:04 PM 02.11.2017 17.21.22 Application added to the Trusted group MobileBackup Application: MobileBackup Reason: analysis of digital signature Application path: C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileBackup.exe Time: 11/2/2017 5:21 PM 02.11.2017 17.06.09 Application added to the Trusted group ATH.exe Application: ATH.exe Reason: analysis of digital signature Application path: C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\ATH.exe Time: 11/2/2017 5:06 PM 02.11.2017 17.05.31 Application added to the Trusted group MobileDeviceHelper Application: MobileDeviceHelper Reason: analysis of digital signature Application path: C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceHelper.exe Time: 11/2/2017 5:05 PM 02.11.2017 17.05.30 Application added to the Trusted group iTunes Application: iTunes Reason: analysis of digital signature Application path: C:\Program Files\iTunes\iTunes.exe Time: 11/2/2017 5:05 PM 02.11.2017 17.05.08 Application added to the Trusted group iTunesHelper Application: iTunesHelper Reason: analysis of digital signature Application path: C:\Program Files\iTunes\iTunesHelper.exe Time: 11/2/2017 5:05 PM 02.11.2017 17.05.02 Application added to the Trusted group iPod Service Application: iPod Service Reason: analysis of digital signature Application path: C:\Program Files\iPod\bin\iPodService.exe Time: 11/2/2017 5:05 PM 02.11.2017 17.03.45 Application added to the Trusted group Apple Installer (Elevated) Application: Apple Installer (Elevated) Reason: analysis of digital signature Application path: C:\Users\JB\AppData\Local\Apple\Apple Software Update\SetupAdmin.exe Time: 11/2/2017 5:03 PM 02.11.2017 17.03.43 Application added to the Trusted group MobileDeviceService Application: MobileDeviceService Reason: analysis of digital signature Application path: C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe Time: 11/2/2017 5:03 PM 02.11.2017 17.00.24 Application added to the Trusted group Standalone Updater Application: Standalone Updater Reason: analysis of digital signature Application path: C:\Users\JB\AppData\Local\Microsoft\OneDrive\onedrivestandaloneupdater.exe Time: 11/2/2017 5:00 PM 02.11.2017 16.16.32 Rootkit Scan No threats detected Detected: 0 Deleted: 0 Not disinfected: 0 Release date of databases used for scan: 11/2/2017 9:08 AM Total duration: 47 minutes, 43 seconds Completion time: 11/2/2017 5:04 PM 02.11.2017 16.02.31 Update of databases and application modules Completed. Average download speed:: 252.60 KB/s Status:: Completed. Downloaded and updated:: 411.97 KB Total duration: 59 seconds Time: 11/2/2017 4:02 PM 02.11.2017 15.55.56 Application added to the Trusted group Microsoft OneDrive Application: Microsoft OneDrive Reason: analysis of digital signature Application path: C:\Users\JB\AppData\Local\Microsoft\OneDrive\OneDrive.exe Time: 11/2/2017 3:55 PM 02.11.2017 15.55.55 Application added to the Trusted group Microsoft OneDrive Configuration Application Application: Microsoft OneDrive Configuration Application Reason: analysis of digital signature Application path: C:\Users\JB\AppData\Local\Microsoft\OneDrive\17.3.7076.1026\FileSyncConfig.exe Time: 11/2/2017 3:55 PM 02.11.2017 15.55.16 Application added to the Trusted group Microsoft OneDrive Setup Application: Microsoft OneDrive Setup Reason: analysis of digital signature Application path: C:\Users\JB\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exe Time: 11/2/2017 3:55 PM 02.11.2017 15.55.02 Application added to the Trusted group Microsoft OneDrive Application: Microsoft OneDrive Reason: analysis of digital signature Application path: C:\Users\JB\AppData\Local\Microsoft\OneDrive\OneDrive.exe Time: 11/2/2017 3:55 PM 02.11.2017 15.55.02 Application added to the Trusted group Microsoft OneDrive Configuration Application Application: Microsoft OneDrive Configuration Application Reason: analysis of digital signature Application path: C:\Users\JB\AppData\Local\Microsoft\OneDrive\17.3.7074.1023\FileSyncConfig.exe Time: 11/2/2017 3:55 PM 02.11.2017 15.54.22 Application added to the Trusted group Microsoft OneDrive Setup Application: Microsoft OneDrive Setup Reason: KSN information Application path: C:\Users\JB\AppData\Local\Microsoft\OneDrive\StandaloneUpdater\OneDriveSetup.exe Time: 11/2/2017 3:54 PM 02.11.2017 11.31.44 Search for application updates Search completed, no available updates Important updates available: 0 Recommended updates available: 0 Started: Automatically Status: Completed Time: 11/2/2017 11:31 AM 02.11.2017 11.16.43 Update of databases and application modules Completed. Average download speed:: 108.87 KB/s Status:: Completed. Downloaded and updated:: 1.95 MB Total duration: 1 minute, 58 seconds Time: 11/2/2017 11:16 AM 02.11.2017 11.01.09 Task started Web Anti-Virus Time: 11/2/2017 11:01 AM 02.11.2017 11.01.09 Task started System Watcher Time: 11/2/2017 11:01 AM 02.11.2017 11.01.09 Task started Network Attack Blocker Time: 11/2/2017 11:01 AM 02.11.2017 11.01.09 Task started Mail Anti-Virus Time: 11/2/2017 11:01 AM 02.11.2017 11.01.09 Task started IM Anti-Virus Time: 11/2/2017 11:01 AM 02.11.2017 10.59.44 Task started Application Control Time: 11/2/2017 10:59 AM 02.11.2017 10.59.44 Task started Firewall Time: 11/2/2017 10:59 AM 02.11.2017 10.59.44 Task started File Anti-Virus Time: 11/2/2017 10:59 AM 01.11.2017 18.47.34 Application added to the Trusted group Firefox Application: Firefox Reason: KSN information Application path: C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe Time: 11/1/2017 6:47 PM 01.11.2017 18.47.34 Application added to the Trusted group Firefox Software Updater Application: Firefox Software Updater Reason: KSN information Application path: C:\Program Files (x86)\Mozilla Firefox\updater.exe Time: 11/1/2017 6:47 PM 01.11.2017 18.47.34 Application added to the Trusted group Plugin Container for Firefox Application: Plugin Container for Firefox Reason: KSN information Application path: C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe Time: 11/1/2017 6:47 PM 01.11.2017 18.47.33 Application added to the Trusted group QBFD Application: QBFD Reason: analysis of digital signature Application path: C:\Program Files (x86)\Common Files\Intuit\QuickBooks\QBFD.exe Time: 11/1/2017 6:47 PM 01.11.2017 18.47.31 Application added to the Trusted group Microsoft OneNote Application: Microsoft OneNote Reason: analysis of digital signature Application path: C:\Program Files (x86)\Microsoft Office\root\Office16\onenote.exe Time: 11/1/2017 6:47 PM 01.11.2017 18.47.29 Application added to the Trusted group Office Source Engine Application: Office Source Engine Reason: analysis of digital signature Application path: C:\Program Files (x86)\Common Files\microsoft shared\source engine\ose.exe Time: 11/1/2017 6:47 PM 01.11.2017 18.47.28 Application added to the Trusted group Microsoft Excel Application: Microsoft Excel Reason: analysis of digital signature Application path: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE Time: 11/1/2017 6:47 PM 01.11.2017 18.47.28 Application added to the Trusted group Send to OneNote Tool Application: Send to OneNote Tool Reason: analysis of digital signature Application path: C:\Program Files (x86)\Microsoft Office\root\Office16\ONENOTEM.EXE Time: 11/1/2017 6:47 PM 01.11.2017 18.47.28 Application added to the Trusted group Microsoft PowerPoint Application: Microsoft PowerPoint Reason: analysis of digital signature Application path: C:\Program Files (x86)\Microsoft Office\root\Office16\POWERPNT.EXE Time: 11/1/2017 6:47 PM 01.11.2017 17.05.24 Update of databases and application modules Completed. Average download speed:: 84.38 KB/s Status:: Completed. Downloaded and updated:: 315.44 KB Total duration: 58 seconds Time: 11/1/2017 5:05 PM 01.11.2017 15.04.17 Update of databases and application modules Completed. Average download speed:: 91.97 KB/s Status:: Completed. Downloaded and updated:: 253.41 KB Total duration: 52 seconds Time: 11/1/2017 3:04 PM 01.11.2017 14.46.25 Rootkit Scan No threats detected Detected: 0 Deleted: 0 Not disinfected: 0 Release date of databases used for scan: 11/1/2017 7:45 AM Total duration: 24 minutes, 48 seconds Completion time: 11/1/2017 3:11 PM 01.11.2017 14.09.25 SSL connection with invalid certificate detected Connection terminated Time: 11/1/2017 2:09 PM Certificate error: Self-signed certificate 01.11.2017 13.17.25 Search for application updates Search completed, no available updates Important updates available: 0 Recommended updates available: 0 Started: Automatically Status: Completed Time: 11/1/2017 1:17 PM 01.11.2017 13.03.16 Update of databases and application modules Completed. Average download speed:: 226.04 KB/s Status:: Completed. Downloaded and updated:: 1.63 MB Total duration: 1 minute, 50 seconds Time: 11/1/2017 1:03 PM 01.11.2017 12.47.49 Task started System Watcher Time: 11/1/2017 12:47 PM 01.11.2017 12.47.49 Task started Web Anti-Virus Time: 11/1/2017 12:47 PM 01.11.2017 12.47.49 Task started Network Attack Blocker Time: 11/1/2017 12:47 PM 01.11.2017 12.47.49 Task started IM Anti-Virus Time: 11/1/2017 12:47 PM 01.11.2017 12.47.49 Task started Mail Anti-Virus Time: 11/1/2017 12:47 PM 01.11.2017 12.46.25 Task started Application Control Time: 11/1/2017 12:46 PM 01.11.2017 12.46.25 Task started File Anti-Virus Time: 11/1/2017 12:46 PM 01.11.2017 12.46.25 Task started Firewall Time: 11/1/2017 12:46 PM 31.10.2017 17.25.10 Full Scan No threats detected Detected: 0 Deleted: 0 Not disinfected: 0 Release date of databases used for scan: 10/31/2017 1:39 PM Total duration: 14 minutes, 43 seconds Completion time: 10/31/2017 5:39 PM 31.10.2017 17.24.10 Update of databases and application modules Completed. Average download speed:: 100.71 KB/s Status:: Completed. Downloaded and updated:: 809.88 KB Total duration: 1 minute, 7 seconds Time: 10/31/2017 5:24 PM 31.10.2017 17.04.36 Application added to the Trusted group Aut2Exe Application: Aut2Exe Reason: KSN information Application path: C:\Windows\mod_frst.exe Time: 10/31/2017 5:04 PM 31.10.2017 17.04.34 Application added to the Trusted group Boot Configuration Data Editor Application: Boot Configuration Data Editor Reason: analysis of digital signature Application path: c:\windows\system32\bcdedit.exe Time: 10/31/2017 5:04 PM 31.10.2017 17.04.05 Application added to the Trusted group c:\windows\erunt.exe Application: c:\windows\erunt.exe Reason: KSN information Application path: c:\windows\erunt.exe Time: 10/31/2017 5:04 PM 31.10.2017 17.04.04 Application added to the Trusted group Farbar Recovery Scan Tool Application: Farbar Recovery Scan Tool Reason: KSN information Application path: C:\Users\JB\Desktop\FRST64.exe Time: 10/31/2017 5:04 PM 31.10.2017 16.31.18 Application added to the Trusted group Find String (QGREP) Utility Application: Find String (QGREP) Utility Reason: analysis of digital signature Application path: C:\Windows\System32\findstr.exe Time: 10/31/2017 4:31 PM 31.10.2017 16.18.30 Application added to the Trusted group System Integrity Check and Repair Application: System Integrity Check and Repair Reason: analysis of digital signature Application path: C:\Windows\winsxs\amd64_microsoft-windows-wrp-integrity-client_31bf3856ad364e35_6.1.7600.16385_none_8733bee404f7386c\sfc.exe Time: 10/31/2017 4:18 PM 31.10.2017 15.22.05 Update of databases and application modules Completed. Average download speed:: 355.93 KB/s Status:: Completed. Downloaded and updated:: 457.46 KB Total duration: 57 seconds Time: 10/31/2017 3:22 PM 31.10.2017 15.08.03 Search for application updates Search completed, no available updates Important updates available: 0 Recommended updates available: 0 Started: Automatically Status: Completed Time: 10/31/2017 3:08 PM 31.10.2017 15.07.52 Application for your attention detected HP Setup Application: HP Setup Version: 9.1.15453.4066 Vendor: Hewlett-Packard Company Time: 10/31/2017 3:07 PM 31.10.2017 15.07.52 Application for your attention detected Samsung Data Migration Application: Samsung Data Migration Version: 3.0 Vendor: Samsung Time: 10/31/2017 3:07 PM 31.10.2017 15.07.52 Application for your attention detected Speccy Application: Speccy Version: 1.30 Vendor: Piriform Time: 10/31/2017 3:07 PM 31.10.2017 15.07.52 Application for your attention detected SpeedFan (remove only) Application: SpeedFan (remove only) Version: Vendor: Time: 10/31/2017 3:07 PM 31.10.2017 15.07.52 Application for your attention detected 7-Zip 17.01 beta (x64) Application: 7-Zip 17.01 beta (x64) Version: 17.01 beta Vendor: Igor Pavlov Time: 10/31/2017 3:07 PM 31.10.2017 15.04.57 Selective Scan No threats detected Detected: 0 Deleted: 0 Not disinfected: 0 Release date of databases used for scan: 10/31/2017 9:57 AM Total duration: 4 seconds Completion time: 10/31/2017 3:05 PM 31.10.2017 14.46.03 Rootkit Scan No threats detected Detected: 0 Deleted: 0 Not disinfected: 0 Release date of databases used for scan: 10/31/2017 9:57 AM Total duration: 20 minutes, 59 seconds Completion time: 10/31/2017 3:07 PM 31.10.2017 14.17.29 Task started Web Anti-Virus Time: 10/31/2017 2:17 PM 31.10.2017 14.17.29 Task started System Watcher Time: 10/31/2017 2:17 PM 31.10.2017 14.17.29 Task started IM Anti-Virus Time: 10/31/2017 2:17 PM 31.10.2017 14.17.29 Task started Mail Anti-Virus Time: 10/31/2017 2:17 PM 31.10.2017 14.17.29 Task started Network Attack Blocker Time: 10/31/2017 2:17 PM 31.10.2017 14.16.03 Task started Application Control Time: 10/31/2017 2:16 PM 31.10.2017 14.16.03 Task started File Anti-Virus Time: 10/31/2017 2:16 PM 31.10.2017 14.16.03 Task started Firewall Time: 10/31/2017 2:16 PM 31.10.2017 14.13.36 Task started Application Control Time: 10/31/2017 2:13 PM 31.10.2017 14.13.36 Task started File Anti-Virus Time: 10/31/2017 2:13 PM 31.10.2017 14.13.36 Task started Firewall Time: 10/31/2017 2:13 PM 31.10.2017 13.20.26 Update of databases and application modules Completed. Average download speed:: 137.65 KB/s Status:: Completed. Downloaded and updated:: 1.72 MB Total duration: 2 minutes, 17 seconds Time: 10/31/2017 1:20 PM 31.10.2017 13.07.35 Application added to the Trusted group Microsoft Malware Protection Signature Update Stub Application: Microsoft Malware Protection Signature Update Stub Reason: analysis of digital signature Application path: C:\Windows\Temp\{43072116-E31B-4125-AFF7-333DEA1DB340}\MPSigStub.exe Time: 10/31/2017 1:07 PM 31.10.2017 13.07.34 Application added to the Trusted group AntiMalware Definition Update Application: AntiMalware Definition Update Reason: analysis of digital signature Application path: C:\Windows\SoftwareDistribution\Download\Install\mpas-d.exe Time: 10/31/2017 1:07 PM 31.10.2017 13.04.34 Task started System Watcher Time: 10/31/2017 1:04 PM 31.10.2017 13.04.34 Task started Web Anti-Virus Time: 10/31/2017 1:04 PM 31.10.2017 13.04.33 Task started IM Anti-Virus Time: 10/31/2017 1:04 PM 31.10.2017 13.04.33 Task started Mail Anti-Virus Time: 10/31/2017 1:04 PM 31.10.2017 13.04.33 Task started Network Attack Blocker Time: 10/31/2017 1:04 PM 31.10.2017 13.03.08 Task started File Anti-Virus Time: 10/31/2017 1:03 PM 31.10.2017 13.03.08 Task started Application Control Time: 10/31/2017 1:03 PM 31.10.2017 13.03.08 Task started Firewall Time: 10/31/2017 1:03 PM 30.10.2017 19.05.59 Full Scan No threats detected Detected: 0 Deleted: 0 Not disinfected: 0 Release date of databases used for scan: 10/30/2017 12:19 PM Total duration: 13 minutes, 55 seconds Completion time: 10/30/2017 7:19 PM 30.10.2017 19.04.28 Application added to the Trusted group Web DAV Client DLL Application: Web DAV Client DLL Reason: analysis of digital signature Application path: c:\windows\system32\davclnt.dll Time: 10/30/2017 7:04 PM 30.10.2017 18.58.31 Task started System Watcher Time: 10/30/2017 6:58 PM 30.10.2017 18.58.31 Task started Web Anti-Virus Time: 10/30/2017 6:58 PM 30.10.2017 18.58.31 Task started IM Anti-Virus Time: 10/30/2017 6:58 PM 30.10.2017 18.58.31 Task started Mail Anti-Virus Time: 10/30/2017 6:58 PM 30.10.2017 18.58.31 Task started Network Attack Blocker Time: 10/30/2017 6:58 PM 30.10.2017 18.57.06 Task started Application Control Time: 10/30/2017 6:57 PM 30.10.2017 18.57.06 Task started Firewall Time: 10/30/2017 6:57 PM 30.10.2017 18.57.06 Task started File Anti-Virus Time: 10/30/2017 6:57 PM 30.10.2017 18.50.21 Update of databases and application modules Completed. Average download speed:: 406.07 KB/s Status:: Completed. Downloaded and updated:: 94.01 KB Total duration: 13 seconds Time: 10/30/2017 6:50 PM 30.10.2017 18.38.13 Task started Web Anti-Virus Time: 10/30/2017 6:38 PM 30.10.2017 18.38.13 Task started System Watcher Time: 10/30/2017 6:38 PM 30.10.2017 18.38.13 Task started Network Attack Blocker Time: 10/30/2017 6:38 PM 30.10.2017 18.38.13 Task started Mail Anti-Virus Time: 10/30/2017 6:38 PM 30.10.2017 18.38.13 Task started IM Anti-Virus Time: 10/30/2017 6:38 PM 30.10.2017 18.36.48 Task started Application Control Time: 10/30/2017 6:36 PM 30.10.2017 18.36.48 Task started Firewall Time: 10/30/2017 6:36 PM 30.10.2017 18.36.48 Task started File Anti-Virus Time: 10/30/2017 6:36 PM 30.10.2017 18.35.05 Task started Web Anti-Virus Time: 10/30/2017 6:35 PM 30.10.2017 18.35.05 Task started System Watcher Time: 10/30/2017 6:35 PM 30.10.2017 18.35.04 Task started Mail Anti-Virus Time: 10/30/2017 6:35 PM 30.10.2017 18.35.04 Task started IM Anti-Virus Time: 10/30/2017 6:35 PM 30.10.2017 18.35.04 Task started Network Attack Blocker Time: 10/30/2017 6:35 PM 30.10.2017 18.33.40 Task started Application Control Time: 10/30/2017 6:33 PM 30.10.2017 18.33.40 Task started Firewall Time: 10/30/2017 6:33 PM 30.10.2017 18.33.40 Task started File Anti-Virus Time: 10/30/2017 6:33 PM 30.10.2017 18.31.47 Task started Web Anti-Virus Time: 10/30/2017 6:31 PM 30.10.2017 18.31.47 Task started System Watcher Time: 10/30/2017 6:31 PM 30.10.2017 18.31.47 Task started IM Anti-Virus Time: 10/30/2017 6:31 PM 30.10.2017 18.31.47 Task started Network Attack Blocker Time: 10/30/2017 6:31 PM 30.10.2017 18.31.47 Task started Mail Anti-Virus Time: 10/30/2017 6:31 PM 30.10.2017 18.30.21 Task started File Anti-Virus Time: 10/30/2017 6:30 PM 30.10.2017 18.30.21 Task started Firewall Time: 10/30/2017 6:30 PM 30.10.2017 18.30.21 Task started Application Control Time: 10/30/2017 6:30 PM 30.10.2017 18.25.37 Task started System Watcher Time: 10/30/2017 6:25 PM 30.10.2017 18.25.37 Task started Web Anti-Virus Time: 10/30/2017 6:25 PM 30.10.2017 18.25.36 Task started Mail Anti-Virus Time: 10/30/2017 6:25 PM 30.10.2017 18.25.36 Task started Network Attack Blocker Time: 10/30/2017 6:25 PM 30.10.2017 18.25.36 Task started IM Anti-Virus Time: 10/30/2017 6:25 PM 30.10.2017 18.24.11 Task started Application Control Time: 10/30/2017 6:24 PM 30.10.2017 18.24.11 Task started Firewall Time: 10/30/2017 6:24 PM 30.10.2017 18.24.11 Task started File Anti-Virus Time: 10/30/2017 6:24 PM 30.10.2017 18.15.45 Application added to the Trusted group System Applet for the Control Panel Application: System Applet for the Control Panel Reason: analysis of digital signature Application path: c:\windows\system32\sysdm.cpl Time: 10/30/2017 6:15 PM 30.10.2017 18.12.03 Task started System Watcher Time: 10/30/2017 6:12 PM 30.10.2017 18.12.03 Task started Web Anti-Virus Time: 10/30/2017 6:12 PM 30.10.2017 18.12.03 Task started IM Anti-Virus Time: 10/30/2017 6:12 PM 30.10.2017 18.12.03 Task started Mail Anti-Virus Time: 10/30/2017 6:12 PM 30.10.2017 18.12.03 Task started Network Attack Blocker Time: 10/30/2017 6:12 PM 30.10.2017 18.10.38 Task started File Anti-Virus Time: 10/30/2017 6:10 PM 30.10.2017 18.10.38 Task started Application Control Time: 10/30/2017 6:10 PM 30.10.2017 18.10.38 Task started Firewall Time: 10/30/2017 6:10 PM 30.10.2017 18.09.34 Update of databases and application modules Completed. Average download speed:: 94.24 KB/s Status:: Completed. Downloaded and updated:: 235.91 KB Total duration: 57 seconds Time: 10/30/2017 6:09 PM 30.10.2017 18.06.37 Search for application updates Search completed, no available updates Important updates available: 0 Recommended updates available: 0 Started: Automatically Status: Completed Time: 10/30/2017 6:06 PM 30.10.2017 18.05.48 Application for your attention detected Product Improvement Study for HP Officejet Pro 8610 Application: Product Improvement Study for HP Officejet Pro 8610 Version: 32.3.198.49673 Vendor: Hewlett-Packard Co. Time: 10/30/2017 6:05 PM 30.10.2017 17.59.04 Application added to the Trusted group Extension CLSID Verification Host Application: Extension CLSID Verification Host Reason: analysis of digital signature Application path: C:\Windows\System32\verclsid.exe Time: 10/30/2017 5:59 PM 30.10.2017 16.55.06 Application added to the Trusted group mcci+McciControlHost Application: mcci+McciControlHost Reason: analysis of digital signature Application path: C:\Program Files\Common Files\Motive\pcControlHost.exe Time: 10/30/2017 4:55 PM 30.10.2017 16.55.05 Application added to the Low Restricted group mcci+McciBrowser Application: mcci+McciBrowser Reason: according to calculated rating Application path: C:\Program Files (x86)\ATT\8.5.0.48\ma\bin\pcBrowser.exe Time: 10/30/2017 4:55 PM 30.10.2017 16.07.42 Update of databases and application modules Completed. Average download speed:: 114.48 KB/s Status:: Completed. Downloaded and updated:: 332.56 KB Total duration: 1 minute, 4 seconds Time: 10/30/2017 4:07 PM 30.10.2017 14.28.11 Application added to the Trusted group Microsoft Word Application: Microsoft Word Reason: analysis of digital signature Application path: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE Time: 10/30/2017 2:28 PM 30.10.2017 14.25.09 Application added to the Trusted group Microsoft Outlook Application: Microsoft Outlook Reason: analysis of digital signature Application path: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE Time: 10/30/2017 2:25 PM 30.10.2017 14.06.11 Search for application updates Search completed, no available updates Important updates available: 0 Recommended updates available: 0 Started: Automatically Status: Completed Time: 10/30/2017 2:06 PM 30.10.2017 14.06.11 Update of databases and application modules Completed. Average download speed:: 720.90 KB/s Status:: Completed. Downloaded and updated:: 242.94 KB Total duration: 13 seconds Time: 10/30/2017 2:06 PM 30.10.2017 13.45.44 Application for your attention detected Adblock Plus for IE (32-bit and 64-bit) Application: Adblock Plus for IE (32-bit and 64-bit) Version: 1.6 Vendor: Eyeo GmbH Time: 10/30/2017 1:45 PM 30.10.2017 13.44.32 Rootkit Scan (canceled) No threats detected Detected: 0 Deleted: 0 Not disinfected: 0 Release date of databases used for scan: 10/30/2017 9:22 AM Total duration: 21 minutes, 21 seconds Completion time: 10/30/2017 2:05 PM 30.10.2017 13.31.49 Update of databases and application modules Completed. Average download speed:: 236.18 KB/s Status:: Completed. Downloaded and updated:: 2.21 MB Total duration: 2 minutes, 17 seconds Time: 10/30/2017 1:31 PM 30.10.2017 13.23.47 Application added to the Trusted group Office Subscription Licensing Heartbeat Application: Office Subscription Licensing Heartbeat Reason: analysis of digital signature Application path: C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\OFFICE16\OLicenseHeartbeat.exe Time: 10/30/2017 1:23 PM 30.10.2017 13.23.32 Application added to the Trusted group Standalone Updater Application: Standalone Updater Reason: analysis of digital signature Application path: C:\Users\JB\AppData\Local\Microsoft\OneDrive\OneDriveStandaloneUpdater.exe Time: 10/30/2017 1:23 PM 30.10.2017 13.15.00 Task started Web Anti-Virus Time: 10/30/2017 1:15 PM 30.10.2017 13.15.00 Task started System Watcher Time: 10/30/2017 1:15 PM 30.10.2017 13.14.59 Task started IM Anti-Virus Time: 10/30/2017 1:14 PM 30.10.2017 13.14.59 Task started Mail Anti-Virus Time: 10/30/2017 1:14 PM 30.10.2017 13.14.59 Task started Network Attack Blocker Time: 10/30/2017 1:14 PM 30.10.2017 13.13.34 Task started Application Control Time: 10/30/2017 1:13 PM 30.10.2017 13.13.34 Task started Firewall Time: 10/30/2017 1:13 PM 30.10.2017 13.13.34 Task started File Anti-Virus Time: 10/30/2017 1:13 PM 28.10.2017 17.58.26 Application added to the Trusted group Microsoft Office Click-to-Run Client Application: Microsoft Office Click-to-Run Client Reason: analysis of digital signature Application path: C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe Time: 10/28/2017 5:58 PM 28.10.2017 17.45.29 Full Scan No threats detected Detected: 0 Deleted: 0 Not disinfected: 0 Release date of databases used for scan: 10/28/2017 2:07 PM Total duration: 15 minutes, 12 seconds Completion time: 10/28/2017 6:00 PM 28.10.2017 17.41.05 Selective Scan No threats detected Detected: 0 Deleted: 0 Not disinfected: 0 Release date of databases used for scan: 10/28/2017 2:07 PM Total duration: 4 seconds Completion time: 10/28/2017 5:41 PM 28.10.2017 17.21.06 Update of databases and application modules Completed. Average download speed:: 100.50 KB/s Status:: Completed. Downloaded and updated:: 248.30 KB Total duration: 1 minute, 2 seconds Time: 10/28/2017 5:21 PM 28.10.2017 15.41.04 Rootkit Scan No threats detected Detected: 0 Deleted: 0 Not disinfected: 0 Release date of databases used for scan: 10/28/2017 11:21 AM Total duration: 22 minutes, 9 seconds Completion time: 10/28/2017 4:03 PM 28.10.2017 15.19.55 Update of databases and application modules Completed. Average download speed:: 107.12 KB/s Status:: Completed. Downloaded and updated:: 240.07 KB Total duration: 51 seconds Time: 10/28/2017 3:19 PM 28.10.2017 14.01.04 Application added to the Trusted group AutoBackupEXE MFC Application Application: AutoBackupEXE MFC Application Reason: analysis of digital signature Application path: C:\Program Files (x86)\Intuit\QuickBooks 2018\AutoBackupEXE.exe Time: 10/28/2017 2:01 PM 28.10.2017 13.44.04 Search for application updates Search completed, no available updates Important updates available: 0 Recommended updates available: 0 Started: Automatically Status: Completed Time: 10/28/2017 1:44 PM 28.10.2017 13.30.42 Application added to the Trusted group Microsoft Office Click-to-Run (SxS) Application: Microsoft Office Click-to-Run (SxS) Reason: analysis of digital signature Application path: C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe Time: 10/28/2017 1:30 PM 28.10.2017 13.29.19 Application added to the Trusted group Microsoft Office Click-to-Run (SxS) Application: Microsoft Office Click-to-Run (SxS) Reason: analysis of digital signature Application path: C:\Program Files\Common Files\Microsoft Shared\ClickToRun\Updates\16.0.8528.2147\OfficeClickToRun.exe Time: 10/28/2017 1:29 PM 28.10.2017 13.21.48 Application added to the Trusted group QuickBooks Application Application: QuickBooks Application Reason: analysis of digital signature Application path: C:\Program Files (x86)\Intuit\QuickBooks 2018\QBW32Pro.exe Time: 10/28/2017 1:21 PM 28.10.2017 13.18.13 Update of databases and application modules Completed. Average download speed:: 220.68 KB/s Status:: Completed. Downloaded and updated:: 419.04 KB Total duration: 34 seconds Time: 10/28/2017 1:18 PM 28.10.2017 13.17.26 Update of databases and application modules Not all components were updated. Average download speed:: 304.36 KB/s Status:: Not all components were updated. Downloaded and updated:: 1.92 MB Total duration: 44 seconds Time: 10/28/2017 1:17 PM 28.10.2017 13.14.29 Task started System Watcher Time: 10/28/2017 1:14 PM 28.10.2017 13.14.29 Task started Web Anti-Virus Time: 10/28/2017 1:14 PM 28.10.2017 13.14.29 Task started Network Attack Blocker Time: 10/28/2017 1:14 PM 28.10.2017 13.14.29 Task started IM Anti-Virus Time: 10/28/2017 1:14 PM 28.10.2017 13.14.29 Task started Mail Anti-Virus Time: 10/28/2017 1:14 PM 28.10.2017 13.13.04 Task started Application Control Time: 10/28/2017 1:13 PM 28.10.2017 13.13.04 Task started File Anti-Virus Time: 10/28/2017 1:13 PM 28.10.2017 13.13.04 Task started Firewall Time: 10/28/2017 1:13 PM 27.10.2017 17.59.22 Full Scan No threats detected Detected: 0 Deleted: 0 Not disinfected: 0 Release date of databases used for scan: 10/27/2017 1:11 PM Total duration: 15 minutes, 39 seconds Completion time: 10/27/2017 6:15 PM 27.10.2017 17.51.03 Application added to the Trusted group QuickBooks 2018 Application: QuickBooks 2018 Reason: analysis of digital signature Application path: C:\Program Files (x86)\Common Files\Intuit\QuickBooks\QBCFMonitorService.exe Time: 10/27/2017 5:51 PM 27.10.2017 17.51.01 Application added to the Trusted group QuickBooks Utility Application Application: QuickBooks Utility Application Reason: analysis of digital signature Application path: C:\Program Files (x86)\Intuit\QuickBooks 2018\DBManagerExe.exe Time: 10/27/2017 5:51 PM 27.10.2017 17.50.59 Application added to the Trusted group QBMsgMgr Module Application: QBMsgMgr Module Reason: analysis of digital signature Application path: C:\Program Files (x86)\Common Files\Intuit\QuickBooks\QBUpdate\QBMsgMgr.exe Time: 10/27/2017 5:50 PM 27.10.2017 17.50.59 Application added to the Trusted group QuickBooks Application: QuickBooks Reason: analysis of digital signature Application path: C:\Program Files (x86)\Intuit\QuickBooks 2018\QBW32.EXE Time: 10/27/2017 5:50 PM 27.10.2017 17.50.52 Application added to the Trusted group C:\Program Files (x86)\Intuit\QuickBooks 2018\ScheduledTaskCreator.exe Application: C:\Program Files (x86)\Intuit\QuickBooks 2018\ScheduledTaskCreator.exe Reason: analysis of digital signature Application path: C:\Program Files (x86)\Intuit\QuickBooks 2018\ScheduledTaskCreator.exe Time: 10/27/2017 5:50 PM 27.10.2017 17.50.52 Application added to the Trusted group SQL Anywhere Command File Hiding Utility Application: SQL Anywhere Command File Hiding Utility Reason: KSN information Application path: C:\Users\JB\AppData\Local\Temp\dbfhide.exe Time: 10/27/2017 5:50 PM 27.10.2017 17.50.50 Application added to the Trusted group IntuitSyncManager Application: IntuitSyncManager Reason: analysis of digital signature Application path: C:\Program Files (x86)\Common Files\Intuit\Sync\IntuitSyncManager.exe Time: 10/27/2017 5:50 PM 27.10.2017 17.50.46 Application added to the Trusted group InstallShield (R) 64-bit Setup Engine Application: InstallShield (R) 64-bit Setup Engine Reason: analysis of digital signature Application path: C:\Users\JB\AppData\Local\Temp\{C3BFDFAA-23C9-41CC-809A-AF6BBC989342}\ISBEW64.exe Time: 10/27/2017 5:50 PM 27.10.2017 17.50.45 Application added to the Trusted group QuickBooks Automatic Update Application: QuickBooks Automatic Update Reason: analysis of digital signature Application path: C:\Program Files (x86)\Common Files\Intuit\QuickBooks\QBUpdate\qbupdate.exe Time: 10/27/2017 5:50 PM 27.10.2017 17.50.45 Application added to the Trusted group QuickBooks Assistance Application Application: QuickBooks Assistance Application Reason: analysis of digital signature Application path: C:\Program Files (x86)\Intuit\QuickBooks 2018\QBHelp.exe Time: 10/27/2017 5:50 PM 27.10.2017 17.50.44 Application added to the Trusted group QuickBooks Assistance Library Application: QuickBooks Assistance Library Reason: analysis of digital signature Application path: c:\program files (x86)\intuit\quickbooks 2018\helpinterfaces.dll Time: 10/27/2017 5:50 PM 27.10.2017 17.50.44 Application added to the Trusted group QuickBooks Library Application: QuickBooks Library Reason: analysis of digital signature Application path: c:\program files (x86)\intuit\quickbooks 2018\msgdbaddin.dll Time: 10/27/2017 5:50 PM 27.10.2017 17.50.43 Application added to the Trusted group QuickBooks Library Application: QuickBooks Library Reason: analysis of digital signature Application path: c:\program files (x86)\intuit\quickbooks 2018\rcnfndrequesthandler.dll Time: 10/27/2017 5:50 PM 27.10.2017 17.50.42 Application added to the Trusted group QuickBooks Library Application: QuickBooks Library Reason: analysis of digital signature Application path: c:\program files (x86)\intuit\quickbooks 2018\qbprefs.dll Time: 10/27/2017 5:50 PM 27.10.2017 17.50.41 Application added to the Trusted group QuickBooks Library Application: QuickBooks Library Reason: analysis of digital signature Application path: c:\program files (x86)\intuit\quickbooks 2018\icwrapper.dll Time: 10/27/2017 5:50 PM 27.10.2017 17.50.41 Application added to the Trusted group QuickBooks Library Application: QuickBooks Library Reason: analysis of digital signature Application path: c:\program files (x86)\common files\intuit\quickbooks\qfill.dll Time: 10/27/2017 5:50 PM 27.10.2017 17.50.40 Application added to the Trusted group QuickBooks Library Application: QuickBooks Library Reason: analysis of digital signature Application path: c:\program files (x86)\common files\intuit\quickbooks\storageclasses.dll Time: 10/27/2017 5:50 PM 27.10.2017 17.50.40 Application added to the Trusted group QuickBooks Library Application: QuickBooks Library Reason: analysis of digital signature Application path: c:\program files (x86)\common files\intuit\quickbooks\graphseriescol.dll Time: 10/27/2017 5:50 PM 27.10.2017 17.50.40 Application added to the Trusted group QuickBooks Library Application: QuickBooks Library Reason: analysis of digital signature Application path: c:\program files (x86)\common files\intuit\quickbooks\comevtbroadcaster.dll Time: 10/27/2017 5:50 PM 27.10.2017 17.49.57 Application added to the Trusted group QuickBooks program update Application: QuickBooks program update Reason: analysis of digital signature Application path: C:\ProgramData\Intuit\QuickBooks 2018\Components\DownloadQB28\Patch\qbpatch2.exe Time: 10/27/2017 5:49 PM 27.10.2017 17.49.54 Application added to the Trusted group C:\ProgramData\Intuit\QuickBooks 2018\Components\DownloadQB28\Patch\qbpatch.exe Application: C:\ProgramData\Intuit\QuickBooks 2018\Components\DownloadQB28\Patch\qbpatch.exe Reason: analysis of digital signature Application path: C:\ProgramData\Intuit\QuickBooks 2018\Components\DownloadQB28\Patch\qbpatch.exe Time: 10/27/2017 5:49 PM 27.10.2017 17.40.24 Selective Scan No threats detected Detected: 0 Deleted: 0 Not disinfected: 0 Release date of databases used for scan: 10/27/2017 1:11 PM Total duration: 4 seconds Completion time: 10/27/2017 5:40 PM 27.10.2017 17.28.47 Update of databases and application modules Completed. Average download speed:: 141.81 KB/s Status:: Completed. Downloaded and updated:: 453.44 KB Total duration: 1 minute, 7 seconds Time: 10/27/2017 5:28 PM 27.10.2017 15.43.47 Application added to the Trusted group Microsoft OneNote Application: Microsoft OneNote Reason: analysis of digital signature Application path: C:\Program Files (x86)\Microsoft Office\root\Office16\ONENOTE.EXE Time: 10/27/2017 3:43 PM 27.10.2017 15.41.40 Search for application updates Search completed, no available updates Important updates available: 0 Recommended updates available: 0 Started: Automatically Status: Completed Time: 10/27/2017 3:41 PM 27.10.2017 15.40.40 Rootkit Scan No threats detected Detected: 0 Deleted: 0 Not disinfected: 0 Release date of databases used for scan: 10/27/2017 10:30 AM Total duration: 27 minutes, 16 seconds Completion time: 10/27/2017 4:07 PM 27.10.2017 15.40.11 Application added to the Trusted group Firefox Application: Firefox Reason: KSN information Application path: C:\Program Files (x86)\Mozilla Firefox\pingsender.exe Time: 10/27/2017 3:40 PM 27.10.2017 15.39.25 Application added to the Trusted group Firefox Application: Firefox Reason: KSN information Application path: C:\Program Files (x86)\Mozilla Firefox\firefox.exe Time: 10/27/2017 3:39 PM 27.10.2017 15.39.25 Application added to the Trusted group Firefox Application: Firefox Reason: KSN information Application path: C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice_tmp.exe Time: 10/27/2017 3:39 PM 27.10.2017 15.39.24 Application added to the Trusted group Firefox Helper Application: Firefox Helper Reason: KSN information Application path: C:\Program Files (x86)\Mozilla Firefox\uninstall\helper.exe Time: 10/27/2017 3:39 PM 27.10.2017 15.39.21 Application added to the Trusted group Firefox Software Updater Application: Firefox Software Updater Reason: KSN information Application path: C:\Program Files (x86)\Mozilla Maintenance Service\update\updater.exe Time: 10/27/2017 3:39 PM 27.10.2017 15.39.21 Application added to the Trusted group Firefox Application: Firefox Reason: KSN information Application path: C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe Time: 10/27/2017 3:39 PM 27.10.2017 15.39.21 Application added to the Trusted group Firefox Software Updater Application: Firefox Software Updater Reason: KSN information Application path: C:\Program Files (x86)\Mozilla Firefox\updater.exe Time: 10/27/2017 3:39 PM 27.10.2017 15.26.58 Update of databases and application modules Completed. Average download speed:: 127.03 KB/s Status:: Completed. Downloaded and updated:: 763.14 KB Total duration: 1 minute, 18 seconds Time: 10/27/2017 3:26 PM 27.10.2017 15.12.05 Task started Web Anti-Virus Time: 10/27/2017 3:12 PM 27.10.2017 15.12.05 Task started System Watcher Time: 10/27/2017 3:12 PM 27.10.2017 15.12.05 Task started IM Anti-Virus Time: 10/27/2017 3:12 PM 27.10.2017 15.12.05 Task started Network Attack Blocker Time: 10/27/2017 3:12 PM 27.10.2017 15.12.05 Task started Mail Anti-Virus Time: 10/27/2017 3:12 PM 27.10.2017 15.10.40 Task started Application Control Time: 10/27/2017 3:10 PM 27.10.2017 15.10.40 Task started Firewall Time: 10/27/2017 3:10 PM 27.10.2017 15.10.40 Task started File Anti-Virus Time: 10/27/2017 3:10 PM 27.10.2017 11.27.35 Application added to the Trusted group Microsoft Malware Protection Signature Update Stub Application: Microsoft Malware Protection Signature Update Stub Reason: analysis of digital signature Application path: C:\Windows\Temp\{768C728F-8716-4783-9084-7007198C65B9}\MPSigStub.exe Time: 10/27/2017 11:27 AM 27.10.2017 11.27.35 Application added to the Trusted group AntiMalware Definition Update Application: AntiMalware Definition Update Reason: analysis of digital signature Application path: C:\Windows\SoftwareDistribution\Download\Install\mpas-fe_bd.exe Time: 10/27/2017 11:27 AM 27.10.2017 11.23.58 Task started System Watcher Time: 10/27/2017 11:23 AM 27.10.2017 11.23.58 Task started Web Anti-Virus Time: 10/27/2017 11:23 AM 27.10.2017 11.23.58 Task started IM Anti-Virus Time: 10/27/2017 11:23 AM 27.10.2017 11.23.58 Task started Network Attack Blocker Time: 10/27/2017 11:23 AM 27.10.2017 11.23.58 Task started Mail Anti-Virus Time: 10/27/2017 11:23 AM 27.10.2017 11.22.33 Task started File Anti-Virus Time: 10/27/2017 11:22 AM 27.10.2017 11.22.33 Task started Application Control Time: 10/27/2017 11:22 AM 27.10.2017 11.22.33 Task started Firewall Time: 10/27/2017 11:22 AM 26.10.2017 19.17.43 Rootkit Scan (canceled) No threats detected Detected: 0 Deleted: 0 Not disinfected: 0 Release date of databases used for scan: 10/26/2017 4:32 PM Total duration: 16 hours, 5 minutes Completion time: 10/27/2017 11:22 AM 26.10.2017 19.08.00 Full Scan No threats detected Detected: 0 Deleted: 0 Not disinfected: 0 Release date of databases used for scan: 10/26/2017 4:32 PM Total duration: 9 minutes, 42 seconds Completion time: 10/26/2017 7:17 PM 26.10.2017 18.53.24 Full Scan (canceled) No threats detected Detected: 0 Deleted: 0 Not disinfected: 0 Release date of databases used for scan: 10/26/2017 4:32 PM Total duration: 14 minutes, 34 seconds Completion time: 10/26/2017 7:07 PM 26.10.2017 18.52.49 Update of databases and application modules Completed. Average download speed:: 401.02 KB/s Status:: Completed. Downloaded and updated:: 759.49 KB Total duration: 24 seconds Time: 10/26/2017 6:52 PM 26.10.2017 18.49.45 Application added to the Trusted group Microsoft Windows Media Configuration Utility Application: Microsoft Windows Media Configuration Utility Reason: analysis of digital signature Application path: C:\Program Files (x86)\Windows Media Player\setup_wm.exe Time: 10/26/2017 6:49 PM 26.10.2017 18.42.18 Application added to the Trusted group Adobe® Flash® Player Installer/Uninstaller 27.0 r0 Application: Adobe® Flash® Player Installer/Uninstaller 27.0 r0 Reason: KSN information Application path: C:\Windows\System32\Macromed\Flash\FlashUtil64_27_0_0_183_ActiveX.exe Time: 10/26/2017 6:42 PM 26.10.2017 18.42.01 Task started System Watcher Time: 10/26/2017 6:42 PM 26.10.2017 18.42.01 Task started Web Anti-Virus Time: 10/26/2017 6:42 PM 26.10.2017 18.42.01 Task started IM Anti-Virus Time: 10/26/2017 6:42 PM 26.10.2017 18.42.01 Task started Network Attack Blocker Time: 10/26/2017 6:42 PM 26.10.2017 18.42.01 Task started Mail Anti-Virus Time: 10/26/2017 6:42 PM 26.10.2017 18.40.36 Task started Application Control Time: 10/26/2017 6:40 PM 26.10.2017 18.40.36 Task started File Anti-Virus Time: 10/26/2017 6:40 PM 26.10.2017 18.40.36 Task started Firewall Time: 10/26/2017 6:40 PM 26.10.2017 13.08.53 Search for application updates Search completed, no available updates Important updates available: 0 Recommended updates available: 0 Started: Automatically Status: Completed Time: 10/26/2017 1:08 PM 26.10.2017 12.54.01 Update of databases and application modules Completed. Average download speed:: 102.99 KB/s Status:: Completed. Downloaded and updated:: 1.94 MB Total duration: 2 minutes, 8 seconds Time: 10/26/2017 12:54 PM 26.10.2017 12.46.56 Application added to the Trusted group Adobe® Flash® Player Installer/Uninstaller 27.0 r0 Application: Adobe® Flash® Player Installer/Uninstaller 27.0 r0 Reason: analysis of digital signature Application path: C:\Windows\SysWOW64\Macromed\Temp\{593CCB8C-5885-439E-A96F-75EB47B815AD}\InstallFlashPlayer.exe Time: 10/26/2017 12:46 PM 26.10.2017 12.46.56 Application added to the Trusted group Adobe® Flash® Player Installer/Uninstaller 27.0 r0 Application: Adobe® Flash® Player Installer/Uninstaller 27.0 r0 Reason: analysis of digital signature Application path: C:\Windows\SysWOW64\FlashPlayerInstaller.exe Time: 10/26/2017 12:46 PM 26.10.2017 12.38.19 Task started Web Anti-Virus Time: 10/26/2017 12:38 PM 26.10.2017 12.38.18 Task started System Watcher Time: 10/26/2017 12:38 PM 26.10.2017 12.38.18 Task started IM Anti-Virus Time: 10/26/2017 12:38 PM 26.10.2017 12.38.18 Task started Mail Anti-Virus Time: 10/26/2017 12:38 PM 26.10.2017 12.38.18 Task started Network Attack Blocker Time: 10/26/2017 12:38 PM 26.10.2017 12.36.53 Task started Firewall Time: 10/26/2017 12:36 PM 26.10.2017 12.36.53 Task started File Anti-Virus Time: 10/26/2017 12:36 PM 26.10.2017 12.36.53 Task started Application Control Time: 10/26/2017 12:36 PM 25.10.2017 15.47.29 Application added to the Trusted group Adobe® Flash® Player Update Service 27.0 r0 Application: Adobe® Flash® Player Update Service 27.0 r0 Reason: KSN information Application path: C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe Time: 10/25/2017 3:47 PM 25.10.2017 15.47.19 Application added to the Trusted group Adobe® Flash® Player Installer/Uninstaller 27.0 r0 Application: Adobe® Flash® Player Installer/Uninstaller 27.0 r0 Reason: analysis of digital signature Application path: C:\Windows\SysWOW64\Macromed\Temp\{D5FADF1C-67F1-4D3C-8C22-DF8CE2C5BB6A}\InstallFlashPlayer.exe Time: 10/25/2017 3:47 PM 25.10.2017 15.47.18 Application added to the Trusted group Adobe® Flash® Player Installer/Uninstaller 27.0 r0 Application: Adobe® Flash® Player Installer/Uninstaller 27.0 r0 Reason: analysis of digital signature Application path: C:\Windows\SysWOW64\FlashPlayerInstaller.exe Time: 10/25/2017 3:47 PM 25.10.2017 15.42.06 Full Scan No threats detected Detected: 0 Deleted: 0 Not disinfected: 0 Release date of databases used for scan: 10/25/2017 1:15 PM Total duration: 17 minutes, 37 seconds Completion time: 10/25/2017 3:59 PM 25.10.2017 15.38.16 Rootkit Scan No threats detected Detected: 0 Deleted: 0 Not disinfected: 0 Release date of databases used for scan: 10/25/2017 1:15 PM Total duration: 11 minutes, 34 seconds Completion time: 10/25/2017 3:49 PM 25.10.2017 15.21.43 Application added to the Trusted group Quickbooks Web Connector Application: Quickbooks Web Connector Reason: KSN information Application path: C:\Program Files (x86)\Common Files\Intuit\QuickBooks\QBWebConnector\QBWebConnector.exe Time: 10/25/2017 3:21 PM 25.10.2017 15.20.22 Application added to the Trusted group Microsoft OneDrive Application: Microsoft OneDrive Reason: analysis of digital signature Application path: C:\Users\JB\AppData\Local\Microsoft\OneDrive\OneDrive.exe Time: 10/25/2017 3:20 PM 25.10.2017 15.20.21 Application added to the Trusted group Microsoft OneDrive Configuration Application Application: Microsoft OneDrive Configuration Application Reason: analysis of digital signature Application path: C:\Users\JB\AppData\Local\Microsoft\OneDrive\17.3.7073.1013\FileSyncConfig.exe Time: 10/25/2017 3:20 PM 25.10.2017 15.19.40 Application added to the Trusted group Microsoft OneDrive Setup Application: Microsoft OneDrive Setup Reason: KSN information Application path: C:\Users\JB\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exe Time: 10/25/2017 3:19 PM 25.10.2017 15.19.18 Application added to the Trusted group Microsoft OneDrive Application: Microsoft OneDrive Reason: analysis of digital signature Application path: C:\Users\JB\AppData\Local\Microsoft\OneDrive\OneDrive.exe Time: 10/25/2017 3:19 PM 25.10.2017 15.19.17 Application added to the Trusted group Microsoft OneDrive Configuration Application Application: Microsoft OneDrive Configuration Application Reason: analysis of digital signature Application path: C:\Users\JB\AppData\Local\Microsoft\OneDrive\17.3.6998.0830\FileSyncConfig.exe Time: 10/25/2017 3:19 PM 25.10.2017 15.18.36 Application added to the Trusted group Microsoft OneDrive Setup Application: Microsoft OneDrive Setup Reason: KSN information Application path: C:\Users\JB\AppData\Local\Microsoft\OneDrive\StandaloneUpdater\OneDriveSetup.exe Time: 10/25/2017 3:18 PM 25.10.2017 15.18.22 Application added to the Trusted group Standalone Updater Application: Standalone Updater Reason: analysis of digital signature Application path: C:\Users\JB\AppData\Local\Microsoft\OneDrive\OneDriveStandaloneUpdater.exe Time: 10/25/2017 3:18 PM 25.10.2017 15.10.42 Update of databases and application modules Completed. Average download speed:: 791.41 KB/s Status:: Completed. Downloaded and updated:: 1.63 MB Total duration: 24 seconds Time: 10/25/2017 3:10 PM 25.10.2017 15.09.42 Task started Web Anti-Virus Time: 10/25/2017 3:09 PM 25.10.2017 15.09.42 Task started System Watcher Time: 10/25/2017 3:09 PM 25.10.2017 15.09.41 Task started Mail Anti-Virus Time: 10/25/2017 3:09 PM 25.10.2017 15.09.41 Task started Network Attack Blocker Time: 10/25/2017 3:09 PM 25.10.2017 15.09.41 Task started IM Anti-Virus Time: 10/25/2017 3:09 PM 25.10.2017 15.08.16 Task started Application Control Time: 10/25/2017 3:08 PM 25.10.2017 15.08.16 Task started File Anti-Virus Time: 10/25/2017 3:08 PM 25.10.2017 15.08.16 Task started Firewall Time: 10/25/2017 3:08 PM 24.10.2017 16.45.26 Update of databases and application modules Completed. Average download speed:: 70.78 KB/s Status:: Completed. Downloaded and updated:: 458.15 KB Total duration: 1 minute, 5 seconds Time: 10/24/2017 4:45 PM 24.10.2017 14.43.29 Update of databases and application modules Completed. Average download speed:: 94.51 KB/s Status:: Completed. Downloaded and updated:: 298.51 KB Total duration: 1 minute, 7 seconds Time: 10/24/2017 2:43 PM 24.10.2017 13.29.21 Search for application updates Search completed, no available updates Important updates available: 0 Recommended updates available: 0 Started: Automatically Status: Completed Time: 10/24/2017 1:29 PM 24.10.2017 13.13.21 Application added to the Trusted group Firefox Application: Firefox Reason: KSN information Application path: C:\Program Files (x86)\Mozilla Firefox\pingsender.exe Time: 10/24/2017 1:13 PM 24.10.2017 13.10.21 Rootkit Scan No threats detected Detected: 0 Deleted: 0 Not disinfected: 0 Release date of databases used for scan: 10/24/2017 6:56 AM Total duration: 18 minutes, 45 seconds Completion time: 10/24/2017 1:29 PM 24.10.2017 13.07.26 Application added to the Trusted group ffcert Application: ffcert Reason: analysis of digital signature Application path: C:\Program Files (x86)\Kaspersky Lab\Kaspersky Small Office Security 17.0.0\x64\ffcert.exe Time: 10/24/2017 1:07 PM 24.10.2017 13.07.26 Application added to the Trusted group Firefox Application: Firefox Reason: KSN information Application path: C:\Program Files (x86)\Mozilla Firefox\firefox.exe Time: 10/24/2017 1:07 PM 24.10.2017 13.07.26 Application added to the Trusted group Firefox Application: Firefox Reason: KSN information Application path: C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice_tmp.exe Time: 10/24/2017 1:07 PM 24.10.2017 13.07.25 Application added to the Trusted group Firefox Helper Application: Firefox Helper Reason: KSN information Application path: C:\Program Files (x86)\Mozilla Firefox\uninstall\helper.exe Time: 10/24/2017 1:07 PM 24.10.2017 13.07.20 Application added to the Trusted group Firefox Software Updater Application: Firefox Software Updater Reason: KSN information Application path: C:\Program Files (x86)\Mozilla Maintenance Service\update\updater.exe Time: 10/24/2017 1:07 PM 24.10.2017 13.01.01 Application added to the Trusted group AutoBackupEXE MFC Application Application: AutoBackupEXE MFC Application Reason: analysis of digital signature Application path: C:\Program Files (x86)\Intuit\QuickBooks 2018\AutoBackupEXE.exe Time: 10/24/2017 1:01 PM 24.10.2017 12.46.11 Application added to the Trusted group QuickBooks Assistance Application Application: QuickBooks Assistance Application Reason: analysis of digital signature Application path: C:\Program Files (x86)\Intuit\QuickBooks 2018\QBHelp.exe Time: 10/24/2017 12:46 PM 24.10.2017 12.45.16 Application added to the Trusted group QuickBooks Application Application: QuickBooks Application Reason: analysis of digital signature Application path: C:\Program Files (x86)\Intuit\QuickBooks 2018\QBW32Pro.exe Time: 10/24/2017 12:45 PM 24.10.2017 12.42.37 Application added to the Trusted group IBuEngHost Application: IBuEngHost Reason: analysis of digital signature Application path: C:\Program Files (x86)\Common Files\Intuit\DataProtect\IBuEngHost.exe Time: 10/24/2017 12:42 PM 24.10.2017 12.41.54 Update of databases and application modules Completed. Average download speed:: 326.37 KB/s Status:: Completed. Downloaded and updated:: 1.13 MB Total duration: 28 seconds Time: 10/24/2017 12:41 PM 24.10.2017 12.41.46 Task started Web Anti-Virus Time: 10/24/2017 12:41 PM 24.10.2017 12.41.46 Task started System Watcher Time: 10/24/2017 12:41 PM 24.10.2017 12.41.45 Task started Network Attack Blocker Time: 10/24/2017 12:41 PM 24.10.2017 12.41.45 Task started IM Anti-Virus Time: 10/24/2017 12:41 PM 24.10.2017 12.41.45 Task started Mail Anti-Virus Time: 10/24/2017 12:41 PM 24.10.2017 12.40.20 Task started Application Control Time: 10/24/2017 12:40 PM 24.10.2017 12.40.20 Task started File Anti-Virus Time: 10/24/2017 12:40 PM 24.10.2017 12.40.20 Task started Firewall Time: 10/24/2017 12:40 PM 23.10.2017 20.23.53 Full Scan No threats detected Detected: 0 Deleted: 0 Not disinfected: 0 Release date of databases used for scan: 10/23/2017 5:41 PM Total duration: 13 minutes, 1 second Completion time: 10/23/2017 8:36 PM 23.10.2017 20.21.03 Full Scan (canceled) No threats detected Detected: 0 Deleted: 0 Not disinfected: 0 Release date of databases used for scan: 10/23/2017 5:41 PM Total duration: 2 minutes, 48 seconds Completion time: 10/23/2017 8:23 PM 23.10.2017 20.17.06 Task started Web Anti-Virus Time: 10/23/2017 8:17 PM 23.10.2017 20.17.05 Task started System Watcher Time: 10/23/2017 8:17 PM 23.10.2017 20.17.05 Task started Network Attack Blocker Time: 10/23/2017 8:17 PM 23.10.2017 20.17.05 Task started Mail Anti-Virus Time: 10/23/2017 8:17 PM 23.10.2017 20.17.05 Task started IM Anti-Virus Time: 10/23/2017 8:17 PM 23.10.2017 20.16.08 Application added to the Trusted group Intuit Data Protect Application: Intuit Data Protect Reason: analysis of digital signature Application path: C:\Program Files (x86)\Common Files\Intuit\DataProtect\IntuitDataProtect.exe Time: 10/23/2017 8:16 PM 23.10.2017 20.15.41 Task started Application Control Time: 10/23/2017 8:15 PM 23.10.2017 20.15.41 Task started File Anti-Virus Time: 10/23/2017 8:15 PM 23.10.2017 20.15.41 Task started Firewall Time: 10/23/2017 8:15 PM 23.10.2017 20.04.15 Full Scan (canceled) No threats detected Detected: 0 Deleted: 0 Not disinfected: 0 Release date of databases used for scan: 10/23/2017 5:41 PM Total duration: 11 minutes, 48 seconds Completion time: 10/23/2017 8:16 PM 23.10.2017 20.04.08 Full Scan (canceled) No threats detected Detected: 0 Deleted: 0 Not disinfected: 0 Release date of databases used for scan: 10/23/2017 5:41 PM Total duration: 5 seconds Completion time: 10/23/2017 8:04 PM 23.10.2017 20.04.02 Update of databases and application modules Completed. Average download speed:: 534.04 KB/s Status:: Completed. Downloaded and updated:: 331.04 KB Total duration: 17 seconds Time: 10/23/2017 8:04 PM 23.10.2017 19.54.04 Selective Scan No threats detected Detected: 0 Deleted: 0 Not disinfected: 0 Release date of databases used for scan: 10/23/2017 11:17 AM Total duration: 3 seconds Completion time: 10/23/2017 7:54 PM 23.10.2017 18.11.07 Update of databases and application modules Completed. Average download speed:: 38.34 KB/s Status:: Completed. Downloaded and updated:: 83.44 KB Total duration: 1 minute Time: 10/23/2017 6:11 PM 23.10.2017 16.55.48 Application added to the Trusted group AXLBridge Module Application: AXLBridge Module Reason: analysis of digital signature Application path: C:\Program Files (x86)\Common Files\Intuit\QuickBooks\axlbridge.exe Time: 10/23/2017 4:55 PM 23.10.2017 16.55.43 Application added to the Trusted group QBMsgMgr Module Application: QBMsgMgr Module Reason: analysis of digital signature Application path: C:\Program Files (x86)\Common Files\Intuit\QuickBooks\QBUpdate\QBMsgMgr.exe Time: 10/23/2017 4:55 PM 23.10.2017 16.53.51 Application added to the Trusted group Intuit Personal Database Manager Application: Intuit Personal Database Manager Reason: KSN information Application path: C:\Program Files (x86)\Intuit\QuickBooks 2018\QBDBMgr.exe Time: 10/23/2017 4:53 PM 23.10.2017 16.53.48 Application added to the Trusted group QuickBooks Automatic Update Application: QuickBooks Automatic Update Reason: analysis of digital signature Application path: C:\Program Files (x86)\Common Files\Intuit\QuickBooks\QBUpdate\qbupdate.exe Time: 10/23/2017 4:53 PM 23.10.2017 16.53.48 Application added to the Trusted group QuickBooks Application: QuickBooks Reason: analysis of digital signature Application path: C:\Program Files (x86)\Intuit\QuickBooks 2018\QBW32.EXE Time: 10/23/2017 4:53 PM 23.10.2017 16.53.48 Application added to the Trusted group Intuit Network Database Manager Application: Intuit Network Database Manager Reason: KSN information Application path: C:\Program Files (x86)\Intuit\QuickBooks 2018\QBDBMgrN.exe Time: 10/23/2017 4:53 PM 23.10.2017 16.53.48 Application added to the Trusted group QuickBooks 2018 Application: QuickBooks 2018 Reason: analysis of digital signature Application path: C:\Program Files (x86)\Common Files\Intuit\QuickBooks\QBCFMonitorService.exe Time: 10/23/2017 4:53 PM 23.10.2017 16.53.48 Application added to the Trusted group QBIDPService Application: QBIDPService Reason: analysis of digital signature Application path: C:\Program Files (x86)\Common Files\Intuit\DataProtect\QBIDPService.exe Time: 10/23/2017 4:53 PM 23.10.2017 16.53.48 Task started Web Anti-Virus Time: 10/23/2017 4:53 PM 23.10.2017 16.53.48 Task started System Watcher Time: 10/23/2017 4:53 PM 23.10.2017 16.53.48 Task started IM Anti-Virus Time: 10/23/2017 4:53 PM 23.10.2017 16.53.48 Task started Mail Anti-Virus Time: 10/23/2017 4:53 PM 23.10.2017 16.53.48 Task started Application Control Time: 10/23/2017 4:53 PM 23.10.2017 16.53.48 Task started Network Attack Blocker Time: 10/23/2017 4:53 PM 23.10.2017 16.53.48 Task started File Anti-Virus Time: 10/23/2017 4:53 PM 23.10.2017 16.53.48 Task started Firewall Time: 10/23/2017 4:53 PM 23.10.2017 16.46.09 Task stopped Firewall Time: 10/23/2017 4:46 PM 23.10.2017 16.46.09 Task stopped Web Anti-Virus Time: 10/23/2017 4:46 PM 23.10.2017 16.46.09 Task stopped Application Control Time: 10/23/2017 4:46 PM 23.10.2017 16.46.09 Task stopped File Anti-Virus Time: 10/23/2017 4:46 PM 23.10.2017 16.46.09 Task stopped System Watcher Time: 10/23/2017 4:46 PM 23.10.2017 16.46.09 Task stopped Network Attack Blocker Time: 10/23/2017 4:46 PM 23.10.2017 16.46.09 Task stopped Mail Anti-Virus Time: 10/23/2017 4:46 PM 23.10.2017 16.46.09 Task stopped IM Anti-Virus Time: 10/23/2017 4:46 PM 23.10.2017 16.45.47 Application added to the Trusted group Setup.exe Application: Setup.exe Reason: analysis of digital signature Application path: C:\Users\JB\AppData\Local\Temp\Pro_us28r1\QBooks\setup.exe Time: 10/23/2017 4:45 PM 23.10.2017 16.45.47 Application added to the Trusted group C:\Users\JB\AppData\Local\Temp\Pro_us28r1\Setup.exe Application: C:\Users\JB\AppData\Local\Temp\Pro_us28r1\Setup.exe Reason: analysis of digital signature Application path: C:\Users\JB\AppData\Local\Temp\Pro_us28r1\Setup.exe Time: 10/23/2017 4:45 PM 23.10.2017 16.44.30 Application added to the Trusted group QuickBooks Financial Software PRO Series 2018 R1 Application: QuickBooks Financial Software PRO Series 2018 R1 Reason: analysis of digital signature Application path: C:\Users\JB\Desktop\QuickBooksPro2018.exe Time: 10/23/2017 4:44 PM 23.10.2017 16.43.07 Search for application updates Search completed, no available updates Important updates available: 0 Recommended updates available: 0 Started: Automatically Status: Completed Time: 10/23/2017 4:43 PM 23.10.2017 16.40.23 Application added to the Trusted group Download Manager ActiveX Control Application: Download Manager ActiveX Control Reason: KSN information Application path: C:\Program Files (x86)\Akamai\Download Manager\Manager.exe Time: 10/23/2017 4:40 PM 23.10.2017 16.40.20 Application added to the Trusted group C:\Users\JB\Desktop\Setup_QuickBooksPro2018.exe Application: C:\Users\JB\Desktop\Setup_QuickBooksPro2018.exe Reason: analysis of digital signature Application path: C:\Users\JB\Desktop\Setup_QuickBooksPro2018.exe Time: 10/23/2017 4:40 PM 23.10.2017 16.35.45 Selective Scan No threats detected Detected: 0 Deleted: 0 Not disinfected: 0 Release date of databases used for scan: 10/23/2017 11:17 AM Total duration: 4 seconds Completion time: 10/23/2017 4:35 PM 23.10.2017 16.31.55 Application added to the Trusted group Microsoft OneDrive Configuration Application Application: Microsoft OneDrive Configuration Application Reason: analysis of digital signature Application path: C:\Users\JB\AppData\Local\Microsoft\OneDrive\17.3.6743.1212\FileSyncConfig.exe Time: 10/23/2017 4:31 PM 23.10.2017 16.31.30 Application added to the Trusted group Microsoft OneDrive Setup Application: Microsoft OneDrive Setup Reason: KSN information Application path: C:\Program Files (x86)\Microsoft Office\root\Integration\OneDriveSetup.exe Time: 10/23/2017 4:31 PM 23.10.2017 16.28.54 Application added to the Trusted group C:\Program Files (x86)\Microsoft Office\root\Office16\PerfBoost.exe Application: C:\Program Files (x86)\Microsoft Office\root\Office16\PerfBoost.exe Reason: analysis of digital signature Application path: C:\Program Files (x86)\Microsoft Office\root\Office16\PerfBoost.exe Time: 10/23/2017 4:28 PM 23.10.2017 16.22.41 Application added to the Trusted group Windows PowerShell Application: Windows PowerShell Reason: analysis of digital signature Application path: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe Time: 10/23/2017 4:22 PM 23.10.2017 16.22.38 Application added to the Trusted group Microsoft Office Application: Microsoft Office Reason: analysis of digital signature Application path: C:\Users\JB\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\38H8CEUF\Setup.X86.en-US_O365HomePremRetail_06ebef90-3de9-4582-98b8-f7661e977add_TX_PR_.exe Time: 10/23/2017 4:22 PM 23.10.2017 16.15.29 Application added to the Trusted group Windows PowerShell Application: Windows PowerShell Reason: analysis of digital signature Application path: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Time: 10/23/2017 4:15 PM 23.10.2017 16.14.44 Application added to the Trusted group Office Source Engine Application: Office Source Engine Reason: analysis of digital signature Application path: C:\Windows\Temp\ose00000.exe Time: 10/23/2017 4:14 PM 23.10.2017 16.14.44 Application added to the Trusted group Office Source Engine Application: Office Source Engine Reason: analysis of digital signature Application path: C:\Program Files (x86)\Common Files\microsoft shared\Source Engine\OSE.EXE Time: 10/23/2017 4:14 PM 23.10.2017 16.14.35 Application added to the Trusted group Microsoft Office Click-to-Run Integrator Application: Microsoft Office Click-to-Run Integrator Reason: analysis of digital signature Application path: C:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\integrator.exe Time: 10/23/2017 4:14 PM 23.10.2017 16.12.31 Task started Web Anti-Virus Time: 10/23/2017 4:12 PM 23.10.2017 16.12.31 Task started System Watcher Time: 10/23/2017 4:12 PM 23.10.2017 16.12.30 Task started Network Attack Blocker Time: 10/23/2017 4:12 PM 23.10.2017 16.12.30 Task started IM Anti-Virus Time: 10/23/2017 4:12 PM 23.10.2017 16.12.30 Task started Mail Anti-Virus Time: 10/23/2017 4:12 PM 23.10.2017 16.11.07 Task started Application Control Time: 10/23/2017 4:11 PM 23.10.2017 16.11.07 Task started Firewall Time: 10/23/2017 4:11 PM 23.10.2017 16.11.07 Task started File Anti-Virus Time: 10/23/2017 4:11 PM 23.10.2017 16.10.00 Application added to the Trusted group SQL Anywhere Command File Hiding Utility Application: SQL Anywhere Command File Hiding Utility Reason: KSN information Application path: C:\Users\JB\AppData\Local\Temp\dbfhide.exe Time: 10/23/2017 4:10 PM 23.10.2017 16.09.59 Application added to the Trusted group QBCA64 Application Application: QBCA64 Application Reason: KSN information Application path: C:\Windows\Installer\MSID468.tmp Time: 10/23/2017 4:09 PM 23.10.2017 16.09.56 Application added to the Trusted group InstallShield (R) 64-bit Setup Engine Application: InstallShield (R) 64-bit Setup Engine Reason: analysis of digital signature Application path: C:\Users\JB\AppData\Local\Temp\{F8F9D02A-591C-41FC-832B-C4F6F040E80B}\ISBEW64.exe Time: 10/23/2017 4:09 PM 23.10.2017 16.09.51 Application added to the Trusted group QuickBooks Assistance Application Application: QuickBooks Assistance Application Reason: analysis of digital signature Application path: C:\Program Files (x86)\Intuit\QuickBooks 2015\QBHelp.exe Time: 10/23/2017 4:09 PM 23.10.2017 16.09.19 Update of databases and application modules Completed. Average download speed:: 157.37 KB/s Status:: Completed. Downloaded and updated:: 159.27 KB Total duration: 45 seconds Time: 10/23/2017 4:09 PM 23.10.2017 15.35.31 Application added to the Trusted group Microsoft Word Application: Microsoft Word Reason: analysis of digital signature Application path: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE Time: 10/23/2017 3:35 PM 23.10.2017 15.28.09 Application added to the Trusted group Microsoft Filter Loader Application: Microsoft Filter Loader Reason: analysis of digital signature Application path: C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesCommonX86\Microsoft Shared\OFFICE16\FLTLDR.EXE Time: 10/23/2017 3:28 PM 23.10.2017 14.08.27 Update of databases and application modules Completed. Average download speed:: 101.17 KB/s Status:: Completed. Downloaded and updated:: 327.28 KB Total duration: 1 minute, 6 seconds Time: 10/23/2017 2:08 PM 23.10.2017 12.50.33 Application for your attention detected HP Setup Application: HP Setup Version: 9.1.15453.4066 Vendor: Hewlett-Packard Company Time: 10/23/2017 12:50 PM 23.10.2017 12.20.20 Search for application updates Search completed, no available updates Important updates available: 0 Recommended updates available: 0 Started: Automatically Status: Completed Time: 10/23/2017 12:20 PM 23.10.2017 12.19.20 Rootkit Scan No threats detected Detected: 0 Deleted: 0 Not disinfected: 0 Release date of databases used for scan: 10/23/2017 5:14 AM Total duration: 30 minutes, 8 seconds Completion time: 10/23/2017 12:49 PM 23.10.2017 12.06.25 Update of databases and application modules Completed. Average download speed:: 192.65 KB/s Status:: Completed. Downloaded and updated:: 1.95 MB Total duration: 2 minutes, 4 seconds Time: 10/23/2017 12:06 PM 23.10.2017 11.50.45 Task started Web Anti-Virus Time: 10/23/2017 11:50 AM 23.10.2017 11.50.45 Task started System Watcher Time: 10/23/2017 11:50 AM 23.10.2017 11.50.45 Task started Mail Anti-Virus Time: 10/23/2017 11:50 AM 23.10.2017 11.50.45 Task started Network Attack Blocker Time: 10/23/2017 11:50 AM 23.10.2017 11.50.45 Task started IM Anti-Virus Time: 10/23/2017 11:50 AM 23.10.2017 11.49.20 Task started Firewall Time: 10/23/2017 11:49 AM 23.10.2017 11.49.20 Task started File Anti-Virus Time: 10/23/2017 11:49 AM 23.10.2017 11.49.20 Task started Application Control Time: 10/23/2017 11:49 AM 20.10.2017 18.29.45 Update of databases and application modules Completed. Average download speed:: 100.39 KB/s Status:: Completed. Downloaded and updated:: 379.59 KB Total duration: 1 minute, 10 seconds Time: 10/20/2017 6:29 PM 20.10.2017 18.20.53 Application added to the Trusted group Internet Low-Mic Utility Tool Application: Internet Low-Mic Utility Tool Reason: analysis of digital signature Application path: C:\Windows\winsxs\amd64_microsoft-windows-ie-ielowutil_31bf3856ad364e35_11.2.9600.18816_none_e8a11096866a094a\ielowutil.exe Time: 10/20/2017 6:20 PM 20.10.2017 15.36.58 Update of databases and application modules Completed. Average download speed:: 72.00 KB/s Status:: Completed. Downloaded and updated:: 265.75 KB Total duration: 48 seconds Time: 10/20/2017 3:36 PM 20.10.2017 15.26.13 Application added to the Trusted group Microsoft Outlook Application: Microsoft Outlook Reason: analysis of digital signature Application path: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE Time: 10/20/2017 3:26 PM 20.10.2017 13.35.14 Update of databases and application modules Completed. Average download speed:: 23.97 KB/s Status:: Completed. Downloaded and updated:: 76.18 KB Total duration: 1 minute, 4 seconds Time: 10/20/2017 1:35 PM 20.10.2017 11.33.52 Update of databases and application modules Completed. Average download speed:: 176.71 KB/s Status:: Completed. Downloaded and updated:: 1.09 MB Total duration: 1 minute, 42 seconds Time: 10/20/2017 11:33 AM 20.10.2017 11.23.46 Application added to the Trusted group Office Subscription Licensing Heartbeat Application: Office Subscription Licensing Heartbeat Reason: analysis of digital signature Application path: C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesCommonX86\Microsoft Shared\OFFICE16\OLicenseHeartbeat.exe Time: 10/20/2017 11:23 AM 20.10.2017 11.22.39 Application added to the Trusted group prnntfy DLL Application: prnntfy DLL Reason: analysis of digital signature Application path: c:\windows\system32\prnntfy.dll Time: 10/20/2017 11:22 AM 20.10.2017 11.13.46 Application added to the Trusted group Microsoft Office Click-to-Run Client Application: Microsoft Office Click-to-Run Client Reason: analysis of digital signature Application path: C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe Time: 10/20/2017 11:13 AM 19.10.2017 18.11.04 Search for application updates Search completed, no available updates Important updates available: 0 Recommended updates available: 0 Started: Automatically Status: Completed Time: 10/19/2017 6:11 PM 19.10.2017 17.44.04 Rootkit Scan No threats detected Detected: 0 Deleted: 0 Not disinfected: 0 Release date of databases used for scan: 10/19/2017 9:35 AM Total duration: 26 minutes, 16 seconds Completion time: 10/19/2017 6:10 PM 19.10.2017 17.33.04 Application added to the Trusted group Microsoft Office Click-to-Run Integrator Application: Microsoft Office Click-to-Run Integrator Reason: analysis of digital signature Application path: C:\Program Files (x86)\Microsoft Office\root\Integration\Integrator.exe Time: 10/19/2017 5:33 PM 19.10.2017 17.32.48 Application added to the Trusted group Microsoft Office Click-to-Run (SxS) Application: Microsoft Office Click-to-Run (SxS) Reason: analysis of digital signature Application path: C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe Time: 10/19/2017 5:32 PM 19.10.2017 17.29.59 Application added to the Trusted group Microsoft Office Click-to-Run (SxS) Application: Microsoft Office Click-to-Run (SxS) Reason: analysis of digital signature Application path: C:\Program Files\Common Files\Microsoft Shared\ClickToRun\Updates\16.0.8528.2139\OfficeClickToRun.exe Time: 10/19/2017 5:29 PM 19.10.2017 17.18.18 Application added to the Trusted group Microsoft Malware Protection Signature Update Stub Application: Microsoft Malware Protection Signature Update Stub Reason: analysis of digital signature Application path: C:\Windows\Temp\{A102E8C2-E675-4729-B048-1706FA4FBE6D}\MPSigStub.exe Time: 10/19/2017 5:18 PM 19.10.2017 17.18.17 Application added to the Trusted group AntiMalware Definition Update Application: AntiMalware Definition Update Reason: analysis of digital signature Application path: C:\Windows\SoftwareDistribution\Download\Install\mpas-d.exe Time: 10/19/2017 5:18 PM 19.10.2017 17.15.29 Task started Web Anti-Virus Time: 10/19/2017 5:15 PM 19.10.2017 17.15.29 Task started System Watcher Time: 10/19/2017 5:15 PM 19.10.2017 17.15.29 Task started IM Anti-Virus Time: 10/19/2017 5:15 PM 19.10.2017 17.15.29 Task started Network Attack Blocker Time: 10/19/2017 5:15 PM 19.10.2017 17.15.29 Task started Mail Anti-Virus Time: 10/19/2017 5:15 PM 19.10.2017 17.15.22 Update of databases and application modules Completed. Average download speed:: 215.47 KB/s Status:: Completed. Downloaded and updated:: 1016.02 KB Total duration: 28 seconds Time: 10/19/2017 5:15 PM 19.10.2017 17.14.04 Task started Firewall Time: 10/19/2017 5:14 PM 19.10.2017 17.14.04 Task started Application Control Time: 10/19/2017 5:14 PM 19.10.2017 17.14.04 Task started File Anti-Virus Time: 10/19/2017 5:14 PM 18.10.2017 20.52.07 Selective Scan No threats detected Detected: 0 Deleted: 0 Not disinfected: 0 Release date of databases used for scan: 10/18/2017 6:04 PM Total duration: 2 seconds Completion time: 10/18/2017 8:52 PM 18.10.2017 20.45.13 Update of databases and application modules Completed. Average download speed:: 128.08 KB/s Status:: Completed. Downloaded and updated:: 470.57 KB Total duration: 1 minute, 3 seconds Time: 10/18/2017 8:45 PM 18.10.2017 18.37.01 Idle Scan No threats detected Detected: 0 Deleted: 0 Not disinfected: 0 Release date of databases used for scan: 10/18/2017 11:04 AM Total duration: 3 minutes, 18 seconds Completion time: 10/18/2017 6:40 PM 18.10.2017 18.29.00 Update of databases and application modules Completed. Average download speed:: 34.13 KB/s Status:: Completed. Downloaded and updated:: 106.52 KB Total duration: 59 seconds Time: 10/18/2017 6:29 PM 18.10.2017 17.07.14 Search for application updates Search completed, no available updates Important updates available: 0 Recommended updates available: 0 Started: Automatically Status: Completed Time: 10/18/2017 5:07 PM 18.10.2017 16.00.08 Update of databases and application modules Completed. Average download speed:: 13.41 KB/s Status:: Completed. Downloaded and updated:: 39.38 KB Total duration: 1 minute Time: 10/18/2017 4:00 PM 18.10.2017 15.45.33 Task started Web Anti-Virus Time: 10/18/2017 3:45 PM 18.10.2017 15.45.33 Task started System Watcher Time: 10/18/2017 3:45 PM 18.10.2017 15.45.33 Task started Mail Anti-Virus Time: 10/18/2017 3:45 PM 18.10.2017 15.45.33 Task started Network Attack Blocker Time: 10/18/2017 3:45 PM 18.10.2017 15.45.33 Task started IM Anti-Virus Time: 10/18/2017 3:45 PM 18.10.2017 15.44.07 Task started Application Control Time: 10/18/2017 3:44 PM 18.10.2017 15.44.07 Task started Firewall Time: 10/18/2017 3:44 PM 18.10.2017 15.44.07 Task started File Anti-Virus Time: 10/18/2017 3:44 PM 18.10.2017 15.21.31 Rootkit Scan (canceled) No threats detected Detected: 0 Deleted: 0 Not disinfected: 0 Release date of databases used for scan: 10/18/2017 11:04 AM Total duration: 22 minutes, 59 seconds Completion time: 10/18/2017 3:44 PM 18.10.2017 14.50.50 Application for your attention detected HP Setup Application: HP Setup Version: 9.1.15453.4066 Vendor: Hewlett-Packard Company Time: 10/18/2017 2:50 PM 18.10.2017 14.50.31 Search for application updates Search completed, no available updates Important updates available: 0 Recommended updates available: 0 Started: Automatically Status: Completed Time: 10/18/2017 2:50 PM 18.10.2017 14.36.34 Update of databases and application modules Completed. Average download speed:: 99.89 KB/s Status:: Completed. Downloaded and updated:: 1.39 MB Total duration: 2 minutes, 3 seconds Time: 10/18/2017 2:36 PM 18.10.2017 14.20.56 Task started Web Anti-Virus Time: 10/18/2017 2:20 PM 18.10.2017 14.20.56 Task started System Watcher Time: 10/18/2017 2:20 PM 18.10.2017 14.20.56 Task started Network Attack Blocker Time: 10/18/2017 2:20 PM 18.10.2017 14.20.56 Task started Mail Anti-Virus Time: 10/18/2017 2:20 PM 18.10.2017 14.20.56 Task started IM Anti-Virus Time: 10/18/2017 2:20 PM 18.10.2017 14.19.31 Task started Application Control Time: 10/18/2017 2:19 PM 18.10.2017 14.19.31 Task started Firewall Time: 10/18/2017 2:19 PM 18.10.2017 14.19.31 Task started File Anti-Virus Time: 10/18/2017 2:19 PM 18.10.2017 01.54.01 Full Scan No threats detected Detected: 0 Deleted: 0 Not disinfected: 0 Release date of databases used for scan: 10/17/2017 1:32 PM Total duration: 13 minutes, 39 seconds Completion time: 10/18/2017 2:07 AM 18.10.2017 01.53.52 Update of databases and application modules Completed. Average download speed:: 72.57 KB/s Status:: Completed. Downloaded and updated:: 27.25 KB Total duration: 13 seconds Time: 10/18/2017 1:53 AM 18.10.2017 01.35.55 Application for your attention detected Adblock Plus for IE (32-bit and 64-bit) Application: Adblock Plus for IE (32-bit and 64-bit) Version: 1.6 Vendor: Eyeo GmbH Time: 10/18/2017 1:35 AM 18.10.2017 01.34.42 Search for application updates Search completed, no available updates Important updates available: 0 Recommended updates available: 0 Started: Automatically Status: Completed Time: 10/18/2017 1:34 AM 18.10.2017 01.22.28 Selective Scan No threats detected Detected: 0 Deleted: 0 Not disinfected: 0 Release date of databases used for scan: 10/17/2017 1:32 PM Total duration: 3 seconds Completion time: 10/18/2017 1:22 AM 18.10.2017 00.36.22 Update of databases and application modules Completed. Average download speed:: 24.80 KB/s Status:: Completed. Downloaded and updated:: 15.05 KB Total duration: 40 seconds Time: 10/18/2017 12:36 AM 17.10.2017 22.50.43 Search for application updates Search completed, no available updates Important updates available: 0 Recommended updates available: 0 Started: Automatically Status: Completed Time: 10/17/2017 10:50 PM 17.10.2017 22.35.29 Update of databases and application modules Completed. Average download speed:: 45.00 KB/s Status:: Completed. Downloaded and updated:: 200.12 KB Total duration: 47 seconds Time: 10/17/2017 10:35 PM 17.10.2017 22.21.05 Task started System Watcher Time: 10/17/2017 10:21 PM 17.10.2017 22.21.05 Task started Web Anti-Virus Time: 10/17/2017 10:21 PM 17.10.2017 22.21.04 Task started Network Attack Blocker Time: 10/17/2017 10:21 PM 17.10.2017 22.21.04 Task started IM Anti-Virus Time: 10/17/2017 10:21 PM 17.10.2017 22.21.04 Task started Mail Anti-Virus Time: 10/17/2017 10:21 PM 17.10.2017 22.19.42 Task started File Anti-Virus Time: 10/17/2017 10:19 PM 17.10.2017 22.19.42 Task started Application Control Time: 10/17/2017 10:19 PM 17.10.2017 22.19.42 Task started Firewall Time: 10/17/2017 10:19 PM 17.10.2017 17.42.04 Application for your attention detected Adblock Plus for IE (32-bit and 64-bit) Application: Adblock Plus for IE (32-bit and 64-bit) Version: 1.6 Vendor: Eyeo GmbH Time: 10/17/2017 5:42 PM 17.10.2017 17.40.47 Search for application updates Search completed, no available updates Important updates available: 0 Recommended updates available: 0 Started: Automatically Status: Completed Time: 10/17/2017 5:40 PM 17.10.2017 17.37.51 Application added to the Trusted group Setup Installer Application: Setup Installer Reason: analysis of digital signature Application path: C:\9bf3417946c83276f1e01183\Setup.exe Time: 10/17/2017 5:37 PM 17.10.2017 17.37.47 Application added to the Trusted group Box Stub Application: Box Stub Reason: analysis of digital signature Application path: C:\Windows\SoftwareDistribution\Download\Install\ndp46-kb4041778-x64.exe Time: 10/17/2017 5:37 PM 17.10.2017 17.31.31 Selective Scan No threats detected Detected: 0 Deleted: 0 Not disinfected: 0 Release date of databases used for scan: 10/17/2017 1:32 PM Total duration: 3 seconds Completion time: 10/17/2017 5:31 PM 17.10.2017 16.53.41 Update of databases and application modules Completed. Average download speed:: 109.78 KB/s Status:: Completed. Downloaded and updated:: 331.48 KB Total duration: 54 seconds Time: 10/17/2017 4:53 PM 17.10.2017 15.21.47 Search for application updates Search completed, no available updates Important updates available: 0 Recommended updates available: 0 Started: Automatically Status: Completed Time: 10/17/2017 3:21 PM 17.10.2017 15.20.47 Rootkit Scan No threats detected Detected: 0 Deleted: 0 Not disinfected: 0 Release date of databases used for scan: 10/17/2017 8:21 AM Total duration: 22 minutes, 44 seconds Completion time: 10/17/2017 3:43 PM 17.10.2017 14.57.58 Application added to the Trusted group Adobe® Flash® Player Installer/Uninstaller 27.0 r0 Application: Adobe® Flash® Player Installer/Uninstaller 27.0 r0 Reason: KSN information Application path: C:\Windows\System32\Macromed\Flash\FlashUtil64_27_0_0_170_ActiveX.exe Time: 10/17/2017 2:57 PM 17.10.2017 14.52.18 Update of databases and application modules Completed. Average download speed:: 126.73 KB/s Status:: Completed. Downloaded and updated:: 70.34 KB Total duration: 16 seconds Time: 10/17/2017 2:52 PM 17.10.2017 14.52.12 Task started System Watcher Time: 10/17/2017 2:52 PM 17.10.2017 14.52.12 Task started Web Anti-Virus Time: 10/17/2017 2:52 PM 17.10.2017 14.52.12 Task started Mail Anti-Virus Time: 10/17/2017 2:52 PM 17.10.2017 14.52.12 Task started Network Attack Blocker Time: 10/17/2017 2:52 PM 17.10.2017 14.52.12 Task started IM Anti-Virus Time: 10/17/2017 2:52 PM 17.10.2017 14.50.46 Task started File Anti-Virus Time: 10/17/2017 2:50 PM 17.10.2017 14.50.46 Task started Firewall Time: 10/17/2017 2:50 PM 17.10.2017 14.50.46 Task started Application Control Time: 10/17/2017 2:50 PM 17.10.2017 12.47.00 Application added to the Trusted group Adobe® Flash® Player Update Service 27.0 r0 Application: Adobe® Flash® Player Update Service 27.0 r0 Reason: KSN information Application path: C:\Windows\SysWOW64\macromed\flash\FlashPlayerUpdateService.exe Time: 10/17/2017 12:47 PM 17.10.2017 12.38.45 Update of databases and application modules Completed. Average download speed:: 98.33 KB/s Status:: Completed. Downloaded and updated:: 1.16 MB Total duration: 1 minute, 37 seconds Time: 10/17/2017 12:38 PM 17.10.2017 12.26.27 Application added to the Trusted group Microsoft Malware Protection Signature Update Stub Application: Microsoft Malware Protection Signature Update Stub Reason: analysis of digital signature Application path: C:\Windows\Temp\{D4F5CE8A-2C15-4141-8CA9-87C965DF3DBA}\MPSigStub.exe Time: 10/17/2017 12:26 PM 17.10.2017 12.26.27 Application added to the Trusted group AntiMalware Definition Update Application: AntiMalware Definition Update Reason: analysis of digital signature Application path: C:\Windows\SoftwareDistribution\Download\Install\mpas-d.exe Time: 10/17/2017 12:26 PM 17.10.2017 12.23.33 Task started Web Anti-Virus Time: 10/17/2017 12:23 PM 17.10.2017 12.23.32 Task started System Watcher Time: 10/17/2017 12:23 PM 17.10.2017 12.23.32 Task started IM Anti-Virus Time: 10/17/2017 12:23 PM 17.10.2017 12.23.32 Task started Mail Anti-Virus Time: 10/17/2017 12:23 PM 17.10.2017 12.23.32 Task started Network Attack Blocker Time: 10/17/2017 12:23 PM 17.10.2017 12.22.07 Task started Application Control Time: 10/17/2017 12:22 PM 17.10.2017 12.22.07 Task started File Anti-Virus Time: 10/17/2017 12:22 PM 17.10.2017 12.22.07 Task started Firewall Time: 10/17/2017 12:22 PM 16.10.2017 20.01.32 Full Scan No threats detected Detected: 0 Deleted: 0 Not disinfected: 0 Release date of databases used for scan: 10/16/2017 3:51 PM Total duration: 13 minutes, 32 seconds Completion time: 10/16/2017 8:15 PM 16.10.2017 20.01.03 Update of databases and application modules Completed. Average download speed:: 24.84 KB/s Status:: Completed. Downloaded and updated:: 35.63 KB Total duration: 17 seconds Time: 10/16/2017 8:01 PM 16.10.2017 18.08.09 Update of databases and application modules Completed. Average download speed:: 26.95 KB/s Status:: Completed. Downloaded and updated:: 203.94 KB Total duration: 1 minute, 7 seconds Time: 10/16/2017 6:08 PM 16.10.2017 17.11.54 Application added to the Trusted group Microsoft Word Application: Microsoft Word Reason: analysis of digital signature Application path: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE Time: 10/16/2017 5:11 PM 16.10.2017 17.02.58 Update of databases and application modules Completed. Average download speed:: 52.31 KB/s Status:: Completed. Downloaded and updated:: 93.60 KB Total duration: 56 seconds Time: 10/16/2017 5:02 PM 16.10.2017 16.21.23 Application added to the Trusted group Adobe® Flash® Player Installer/Uninstaller 27.0 r0 Application: Adobe® Flash® Player Installer/Uninstaller 27.0 r0 Reason: analysis of digital signature Application path: C:\Windows\System32\Macromed\Flash\FlashUtil64_27_0_0_170_ActiveX.exe Time: 10/16/2017 4:21 PM 16.10.2017 15.29.31 Application added to the Trusted group Microsoft Outlook Application: Microsoft Outlook Reason: analysis of digital signature Application path: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE Time: 10/16/2017 3:29 PM 16.10.2017 15.01.18 Update of databases and application modules Completed. Average download speed:: 144.11 KB/s Status:: Completed. Downloaded and updated:: 445.02 KB Total duration: 1 minute, 2 seconds Time: 10/16/2017 3:01 PM 16.10.2017 15.00.56 Application added to the Trusted group Office Subscription Licensing Heartbeat Application: Office Subscription Licensing Heartbeat Reason: analysis of digital signature Application path: C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesCommonX86\Microsoft Shared\OFFICE16\OLicenseHeartbeat.exe Time: 10/16/2017 3:00 PM 16.10.2017 15.00.54 Application added to the Trusted group Microsoft Office Click-to-Run Client Application: Microsoft Office Click-to-Run Client Reason: analysis of digital signature Application path: C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe Time: 10/16/2017 3:00 PM 16.10.2017 14.50.56 Application added to the Trusted group Adobe® Flash® Player Installer/Uninstaller 27.0 r0 Application: Adobe® Flash® Player Installer/Uninstaller 27.0 r0 Reason: analysis of digital signature Application path: C:\Windows\SysWOW64\Macromed\Temp\{416DE44D-E3A7-43FC-9724-10E92C8C9C50}\InstallFlashPlayer.exe Time: 10/16/2017 2:50 PM 16.10.2017 14.50.56 Application added to the Trusted group Adobe® Flash® Player Installer/Uninstaller 27.0 r0 Application: Adobe® Flash® Player Installer/Uninstaller 27.0 r0 Reason: analysis of digital signature Application path: C:\Windows\SysWOW64\FlashPlayerInstaller.exe Time: 10/16/2017 2:50 PM 16.10.2017 13.54.13 Search for application updates Search completed, no available updates Important updates available: 0 Recommended updates available: 0 Started: Automatically Status: Completed Time: 10/16/2017 1:54 PM 16.10.2017 13.47.08 Application added to the Trusted group Adobe® Flash® Player Update Service 27.0 r0 Application: Adobe® Flash® Player Update Service 27.0 r0 Reason: analysis of digital signature Application path: C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe Time: 10/16/2017 1:47 PM 16.10.2017 13.47.05 Application added to the Trusted group Adobe® Flash® Player Installer/Uninstaller 27.0 r0 Application: Adobe® Flash® Player Installer/Uninstaller 27.0 r0 Reason: analysis of digital signature Application path: C:\Windows\SysWOW64\Macromed\Temp\{6334D5E2-4249-44F6-99CD-ACF2A835E9C1}\InstallFlashPlayer.exe Time: 10/16/2017 1:47 PM 16.10.2017 13.47.04 Application added to the Trusted group Adobe® Flash® Player Installer/Uninstaller 27.0 r0 Application: Adobe® Flash® Player Installer/Uninstaller 27.0 r0 Reason: analysis of digital signature Application path: C:\Windows\SysWOW64\FlashPlayerInstaller.exe Time: 10/16/2017 1:47 PM 16.10.2017 13.29.26 Application for your attention detected HP Setup Application: HP Setup Version: 9.1.15453.4066 Vendor: Hewlett-Packard Company Time: 10/16/2017 1:29 PM 16.10.2017 13.28.13 Rootkit Scan No threats detected Detected: 0 Deleted: 0 Not disinfected: 0 Release date of databases used for scan: 10/16/2017 9:26 AM Total duration: 25 minutes, 23 seconds Completion time: 10/16/2017 1:53 PM 16.10.2017 13.14.28 Application added to the Trusted group Windows Problem Reporting Application: Windows Problem Reporting Reason: analysis of digital signature Application path: C:\Windows\SysWOW64\wermgr.exe Time: 10/16/2017 1:14 PM 16.10.2017 13.14.06 Application added to the Trusted group Microsoft Office Click-to-Run (SxS) Application: Microsoft Office Click-to-Run (SxS) Reason: analysis of digital signature Application path: C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe Time: 10/16/2017 1:14 PM 16.10.2017 13.13.01 Application added to the Trusted group Microsoft Office Click-to-Run (SxS) Application: Microsoft Office Click-to-Run (SxS) Reason: analysis of digital signature Application path: C:\Program Files\Common Files\Microsoft Shared\ClickToRun\Updates\16.0.8431.2107\OfficeClickToRun.exe Time: 10/16/2017 1:13 PM 16.10.2017 13.03.28 Application added to the Trusted group Dism Host Servicing Process Application: Dism Host Servicing Process Reason: analysis of digital signature Application path: C:\Windows\Temp\14D387FF-02FD-4496-9F2A-3D3268B72A78\DismHost.exe Time: 10/16/2017 1:03 PM 16.10.2017 13.00.15 Update of databases and application modules Completed. Average download speed:: 665.67 KB/s Status:: Completed. Downloaded and updated:: 3.32 MB Total duration: 31 seconds Time: 10/16/2017 1:00 PM 16.10.2017 12.58.39 Task started System Watcher Time: 10/16/2017 12:58 PM 16.10.2017 12.58.39 Task started Web Anti-Virus Time: 10/16/2017 12:58 PM 16.10.2017 12.58.39 Task started IM Anti-Virus Time: 10/16/2017 12:58 PM 16.10.2017 12.58.39 Task started Mail Anti-Virus Time: 10/16/2017 12:58 PM 16.10.2017 12.58.39 Task started Network Attack Blocker Time: 10/16/2017 12:58 PM 16.10.2017 12.57.16 Application added to the Trusted group Registry Console Tool Application: Registry Console Tool Reason: KSN information Application path: c:\windows\system32\reg.exe Time: 10/16/2017 12:57 PM 16.10.2017 12.57.14 Task started Firewall Time: 10/16/2017 12:57 PM 16.10.2017 12.57.14 Task started File Anti-Virus Time: 10/16/2017 12:57 PM 16.10.2017 12.57.14 Task started Application Control Time: 10/16/2017 12:57 PM 13.10.2017 13.13.33 Search for application updates Search completed, no available updates Important updates available: 0 Recommended updates available: 0 Started: Automatically Status: Completed Time: 10/13/2017 1:13 PM 13.10.2017 12.41.33 Rootkit Scan No threats detected Detected: 0 Deleted: 0 Not disinfected: 0 Release date of databases used for scan: 10/12/2017 9:56 PM Total duration: 23 minutes, 42 seconds Completion time: 10/13/2017 1:05 PM 13.10.2017 12.41.32 Application added to the Trusted group Kaspersky Anti-Virus Application: Kaspersky Anti-Virus Reason: analysis of digital signature Application path: C:\Program Files (x86)\Kaspersky Lab\Kaspersky Small Office Security 17.0.0\avpuimain.dll Time: 10/13/2017 12:41 PM 13.10.2017 12.30.44 Application added to the Trusted group Kaspersky Anti-Virus Mail Checker Outlook Plug-In Application: Kaspersky Anti-Virus Mail Checker Outlook Plug-In Reason: analysis of digital signature Application path: c:\program files (x86)\kaspersky lab\kaspersky small office security 17.0.0\x64\mcou.dll Time: 10/13/2017 12:30 PM 13.10.2017 12.30.44 Application added to the Trusted group Kaspersky Anti-Virus Mail Checker Outlook Plug-In Application: Kaspersky Anti-Virus Mail Checker Outlook Plug-In Reason: analysis of digital signature Application path: c:\program files (x86)\kaspersky lab\kaspersky small office security 17.0.0\mcou.dll Time: 10/13/2017 12:30 PM 13.10.2017 12.30.44 Application added to the Trusted group Kaspersky OfficeAntivirus Component Application: Kaspersky OfficeAntivirus Component Reason: analysis of digital signature Application path: c:\program files (x86)\kaspersky lab\kaspersky small office security 17.0.0\x64\office_antivirus.dll Time: 10/13/2017 12:30 PM 13.10.2017 12.30.44 Application added to the Trusted group Kaspersky OfficeAntivirus Component Application: Kaspersky OfficeAntivirus Component Reason: analysis of digital signature Application path: c:\program files (x86)\kaspersky lab\kaspersky small office security 17.0.0\office_antivirus.dll Time: 10/13/2017 12:30 PM 13.10.2017 12.30.43 Application added to the Trusted group Microsoft(C) Register Server Application: Microsoft(C) Register Server Reason: analysis of digital signature Application path: C:\Windows\winsxs\amd64_microsoft-windows-regsvr32_31bf3856ad364e35_6.1.7600.16385_none_d44c0ef849349ed9\regsvr32.exe Time: 10/13/2017 12:30 PM 13.10.2017 12.30.42 Application added to the Trusted group Light Plugin Extension Registrar Application: Light Plugin Extension Registrar Reason: analysis of digital signature Application path: C:\Program Files (x86)\Kaspersky Lab\Kaspersky Small Office Security 17.0.0\plugins-setup.exe Time: 10/13/2017 12:30 PM 13.10.2017 12.30.35 Update of databases and application modules Completed. Average download speed:: 442.46 KB/s Status:: Completed. Downloaded and updated:: 3.71 MB Total duration: 2 minutes, 2 seconds Time: 10/13/2017 12:30 PM 13.10.2017 12.19.49 Application added to the Trusted group Microsoft Malware Protection Signature Update Stub Application: Microsoft Malware Protection Signature Update Stub Reason: analysis of digital signature Application path: C:\Windows\Temp\{5D527785-BAC4-4258-8D6F-588EBC7C6D3D}\MPSigStub.exe Time: 10/13/2017 12:19 PM 13.10.2017 12.19.49 Application added to the Trusted group AntiMalware Definition Update Application: AntiMalware Definition Update Reason: analysis of digital signature Application path: C:\Windows\SoftwareDistribution\Download\Install\mpas-d.exe Time: 10/13/2017 12:19 PM 13.10.2017 12.19.37 Application added to the Trusted group Windows Update Application: Windows Update Reason: analysis of digital signature Application path: C:\Windows\winsxs\amd64_microsoft-windows-w..wsupdateclient-core_31bf3856ad364e35_7.6.7601.23806_none_e7f9247b7e2c4dfd\wuauclt.exe Time: 10/13/2017 12:19 PM 13.10.2017 12.09.04 Application added to the Trusted group Microsoft Compatibility Telemetry Application: Microsoft Compatibility Telemetry Reason: analysis of digital signature Application path: C:\Windows\winsxs\amd64_microsoft-windows-a..xperience-inventory_31bf3856ad364e35_6.1.7601.23799_none_e8a78896fed0ce31\CompatTelRunner.exe Time: 10/13/2017 12:09 PM 13.10.2017 12.09.03 Application added to the Trusted group Microsoft Windows Diagnostics Tracking Runner Application: Microsoft Windows Diagnostics Tracking Runner Reason: analysis of digital signature Application path: C:\Windows\winsxs\amd64_microsoft-windows-a..xperience-inventory_31bf3856ad364e35_6.1.7601.23699_none_e8a786b0fed0d10a\diagtrackrunner.exe Time: 10/13/2017 12:09 PM