Trend Micro Apex One™
English - Windows - 32-bit / 64-bit
Patch 3 - Server Build 8358 and Agent Build 8358
GM release documentation: http://docs.trendmicro.com
Patch/SP release documentation: http://www.trendmicro.com/download
TIP: Register online with Trend Micro within 30 days of installation to continue downloading new pattern files and product updates from the Trend Micro website. Register during installation or online at: https://clp.trendmicro.com/FullRegistration?T=TM
1. Patch Release Information
Resolved Known Issues
This Patch resolves the following issue(s):
The Apex One Web Reputation feature cannot block websites in the Microsoft™ Edge™ Chromium web browser.
Solution
This Patch resolves the issue by enabling Apex One to support the Edge Chromium web browser.
The Trend Micro Data Loss Prevention™ (DLP) module generates two violation logs for a single Webmail action.
Solution
This hotfix updates the DLP module to resolve this issue.
Procedure
To configure the Sync mode cache (for blocking action) setting:
- Install this hotfix (see "Installation")
- Open the "dlp.ini" file in the "\PCCSRV\Private\" folder on the OfficeScan server.
- Under the "Configure" section, manually add the following setting.
- [Configure]
- SYNC_MODE_FILE_CACHE=true
- Save the changes and close the file.
- Open the OfficeScan web console and click "Agents > Agent Management > Select domains or agents > Settings > DLP settings".
- Click "Save" to deploy the settings to agents.
- The OfficeScan server deploys the settings to OfficeScan agents.
The Apex One firewall service may block the connection to version 2.4.8 of OpenVPN.
Solution
This hotfix updates the Apex One Security Agent program to resolve this issue.
Enhancements
The following enhancements are included in this Patch:
Security Agents can prevent ransomware attacks that leverage a vulnerability in the Encrypting File System (EFS) for Windows.
This Patch removes the "Exclude the Apex One server database folder from Real-time Scan" option from the "Security Settings" tab on the "Global Agent Settings" page of the Apex One web console since Apex One no longer uses Codebase database.
Apex One supports Security Agent installation on the Windows 10 May 2020 Update (20H1).
The Apex One server and Security Agents collect Windows event logs related to critical system events (move Security Agent, uninstall Security Agent, reset password) and sends the logs to Apex Central Product Auditing Event logs.
The Unload and Uninstall Security Agent feature includes enhanced password complexity requirements for better security.
Files Included in This Release
A. Files for Current Issue(s)
-------------------------------------------------------------------
Filename Build Number
------------------------------ ------------
Apex One\PCCSRV\Admin\Utility\EdgeServer\*.*
Apex One\PCCSRV\Admin\Utility\SQL\*.*
Apex One\PCCSRV\Pccnt\Disk1\*.*
Apex One\PCCSRV
-------------------------------------------------------------------
autopcc.exe 14.0.0.8358
autopcc.msg *
autopccp.exe 14.0.0.8358
cgiresutf8.dll 14.0.0.8358
cgishare.dll 14.0.0.8358
cpprest141_2_10.dll *
datfhs.dll 14.0.0.8286
dzip32.dll 3.0.0.15
flowcontrol.dll 14.0.0.8358
libcurl.dll 7.66.0.0
libeay32.dll 1.0.2.21
libnetctrl.dll 14.0.0.8286
loadhttp.dll 14.0.0.8286
microsoft.web.administration.dll 10.0.14393.0
ofcpfwcommon.dll 14.0.0.8286
ofcshare.dll 14.0.0.8358
ofcsvcconfig.exe 14.0.0.8358
ofcupd.exe 14.0.0.8358
ofc_loadhttp.dll 14.0.0.8286
osf_iproduct.xml *
pccwfwmo.dll 14.0.0.8286
readme.htm *
setcgitimeout.exe 14.0.0.8358
sqlite3.dll *
ssleay32.dll 1.0.2.21
svcmgr.dll 14.0.0.8358
svrsetupscloudtool.exe 14.0.0.8358
svrsvcsetup.exe 14.0.0.8358
svrsvcsetup_64x.exe 14.0.0.8358
svrunirc.dll 14.0.0.8358
timestring.dll 14.0.0.8286
timestring_64x.dll 14.0.0.8286
tmcfwapi.dll 5.83.0.1064
tmicfgapi.dll 1.11.0.1012
tmnotify.dll 1.5.0.1051
vsapi32.dll 12.0.0.1008
Apex One\PCCSRV\
-------------------------------------------------------------------
agentsdk.dll 6.2.0.1385
Apex One\PCCSRV\Admin\
-------------------------------------------------------------------
tmxfalcon.cfg *
tsc.exe 7.5.0.1137
tsc64.exe 7.5.0.1137
Apex One\PCCSRV\Admin\Utility\EdgeServer\
-------------------------------------------------------------------
0x0409.ini *
data1.cab *
data1.hdr *
data2.cab *
issetup.dll 22.0.0.330
layout.bin *
setup.exe 14.0.8358.0
setup.ini *
setup.inx *
Apex One\PCCSRV\Admin\Utility\EdgeServer\\issetupprerequisites
-------------------------------------------------------------------
microsoft .net framework 4.6.1 full.prq *
microsoft visual cplusplus 2017 update 3 redistributable package (x64).prq *
microsoft visual cplusplus 2017 update 3 redistributable package (x86).prq *
Apex One\PCCSRV\Admin\Utility\EdgeServer\\issetupprerequisites\{08d3160a-c6c5-4c8a-8920-d30b1a28bb23}
-------------------------------------------------------------------
vc_redist.x86.exe 14.13.26020.0
Apex One\PCCSRV\Admin\Utility\EdgeServer\\issetupprerequisites\{40beac6a-420f-4f8f-930d-6506d05bdd3c}
-------------------------------------------------------------------
vc_redist.x64.exe 14.13.26020.0
Apex One\PCCSRV\Admin\Utility\EdgeServer\\issetupprerequisites\{506a420f-1f74-4371-9e84-eff365724daa}
-------------------------------------------------------------------
ndp461-kb3102436-x86-x64-allos-enu.exe 4.6.1055.0
Apex One\PCCSRV\Admin\Utility\PLM\
-------------------------------------------------------------------
setup.exe 2.5.5041.0
Apex One\PCCSRV\Admin\Utility\SQL\
-------------------------------------------------------------------
dotnetfx461.exe 4.6.1055.0
installcfgfile.ini *
libeay32.dll 1.0.2.21
libsqldatabaseupgrade.dll 14.0.0.8358
ofcsqlsetup.ini *
oscedbt.exe 14.0.0.8358
setschemaver.bat *
setupsqlexpress.bat *
sqlschemaver.ini *
sqlschemaver.ini.new *
sqltxfr.exe 14.0.0.8358
ssleay32.dll 1.0.2.21
timestring.dll 14.0.0.8286
tmnotify.dll 1.5.0.1051
uninstallcfgfile.ini *
upgradesqlschema.bat *
zlib.dll 1.31.0.1708
Apex One\PCCSRV\Admin\Utility\SQL\\upgrade
-------------------------------------------------------------------
libmssqldb.dacpac *
libmssqldb.dll 13.0.0.0
libmssqldbazure.dacpac *
libmssqldbazure.dll 13.0.0.0
placeholder.txt *
Apex One\PCCSRV\Admin\Utility\SQL\\upgrade\10.91.1619
-------------------------------------------------------------------
10.91.1619-superlab-libmssqldb.dacpac *
master.dacpac *
placeholder.txt *
preupdate.sql *
Apex One\PCCSRV\Admin\Utility\SQL\\upgrade\10.92.1038
-------------------------------------------------------------------
10.92.1038-ib-libmssqldb.dacpac *
master.dacpac *
placeholder.txt *
Apex One\PCCSRV\Admin\Utility\SQL\\upgrade\10.93.1026
-------------------------------------------------------------------
10.93.1026-eb-libmssqldb.dacpac *
master.dacpac *
placeholder.txt *
preupdate.sql *
Apex One\PCCSRV\Admin\Utility\SQL\\upgrade\11.0.1028
-------------------------------------------------------------------
11.0.1028-gm-libmssqldb.dacpac *
master.dacpac *
placeholder.txt *
preupdate.sql *
Apex One\PCCSRV\Admin\Utility\SQL\\upgrade\11.0.2799
-------------------------------------------------------------------
11.0.2799-ib-libmssqldb.dacpac *
master.dacpac *
placeholder.txt *
Apex One\PCCSRV\Admin\Utility\SQL\\upgrade\11.0.2849
-------------------------------------------------------------------
11.0.2849-eb-libmssqldb.dacpac *
master.dacpac *
placeholder.txt *
Apex One\PCCSRV\Admin\Utility\SQL\\upgrade\11.0.2995
-------------------------------------------------------------------
11.0.2995-gm-libmssqldb.dacpac *
master.dacpac *
placeholder.txt *
Apex One\PCCSRV\Admin\Utility\SQL\\upgrade\11.0.4150
-------------------------------------------------------------------
11.0.4150-gm-libmssqldb.dacpac *
master.dacpac *
placeholder.txt *
Apex One\PCCSRV\Admin\Utility\SQL\\upgrade\11.95.1084
-------------------------------------------------------------------
11.95.1084-superlab-libmssqldb.dacpac *
placeholder.txt *
Apex One\PCCSRV\Admin\Utility\SQL\\upgrade\11.96.1004
-------------------------------------------------------------------
11.96.1004-ib-libmssqldb.dacpac *
placeholder.txt *
Apex One\PCCSRV\Admin\Utility\SQL\\upgrade\11.97.1033
-------------------------------------------------------------------
11.97.1033-eb-libmssqldb.dacpac *
placeholder.txt *
Apex One\PCCSRV\Admin\Utility\SQL\\upgrade\12.0.1222
-------------------------------------------------------------------
12.0.1222-gm-libmssqldb.dacpac *
placeholder.txt *
Apex One\PCCSRV\Admin\Utility\SQL\\upgrade\12.0.1406
-------------------------------------------------------------------
12.0.1406-gm-libmssqldb.dacpac *
placeholder.txt *
Apex One\PCCSRV\Admin\Utility\iServicePackage\OSF_Extension\Client\x64\
-------------------------------------------------------------------
osfext_iacclient_x64.dll 3.0.0.3025
osfext_iatasclient_x64.dll 1.7.0.1045
osfext_iesclient_x64.dll 3.5.0.1144
osfext_ivpclient_x64.dll 3.0.0.2723
Apex One\PCCSRV\Admin\Utility\iServicePackage\OSF_Extension\Client\x86\
-------------------------------------------------------------------
osfext_iacclient.dll 3.0.0.3025
osfext_iatasclient.dll 1.7.0.1045
osfext_iesclient.dll 3.5.0.1144
osfext_ivpclient.dll 3.0.0.2723
Apex One\PCCSRV\Admin\Utility\iServicePackage\OSF_Extension\Server\iAC\
-------------------------------------------------------------------
osfext_iaccmagent.dll 3.0.0.3025
osfext_iacmasterservice.dll 3.0.0.3025
Apex One\PCCSRV\Admin\Utility\iServicePackage\OSF_Extension\Server\iAC\x64\
-------------------------------------------------------------------
osfext_iaccmagent.dll 3.0.0.3025
osfext_iacmasterservice.dll 3.0.0.3025
Apex One\PCCSRV\Admin\Utility\iServicePackage\OSF_Extension\Server\iATAS\
-------------------------------------------------------------------
osfext_iatascmagent.dll 1.7.0.1045
osfext_iatasmasterservice.dll 1.7.0.1045
Apex One\PCCSRV\Admin\Utility\iServicePackage\OSF_Extension\Server\iATAS\x64\
-------------------------------------------------------------------
osfext_iatascmagent.dll 1.7.0.1044
osfext_iatasmasterservice.dll 1.7.0.1044
Apex One\PCCSRV\Admin\Utility\iServicePackage\OSF_Extension\Server\iES\
-------------------------------------------------------------------
osfext_iescmagent.dll 3.0.0.1592
osfext_iesmasterservice.dll 3.0.0.1592
Apex One\PCCSRV\Admin\Utility\iServicePackage\OSF_Extension\Server\iES\x64\
-------------------------------------------------------------------
osfext_iescmagent.dll 3.0.0.1592
osfext_iesmasterservice.dll 3.0.0.1592
Apex One\PCCSRV\Admin\Utility\iServicePackage\OSF_Extension\Server\iVP\
-------------------------------------------------------------------
osfext_ivpcmagent.dll 3.0.0.2723
osfext_ivpmasterservice.dll 3.0.0.2723
Apex One\PCCSRV\Admin\Utility\iServicePackage\OSF_Extension\Server\iVP\x64\
-------------------------------------------------------------------
osfext_ivpcmagent.dll 3.0.0.2723
osfext_ivpmasterservice.dll 3.0.0.2723
Apex One\PCCSRV\CmAgent\
-------------------------------------------------------------------
productui.zip *
Apex One\PCCSRV\Download\Engine\
-------------------------------------------------------------------
bmservice_x32.sig *
bmservice_x32.zip *
bmservice_x64.sig *
bmservice_x64.zip *
bmdriver_x32.sig *
bmdriver_x32.zip *
bmdriver_x64.sig *
bmdriver_x64.zip *
falcon32.sig *
falcon32.zip *
falcon64.sig *
falcon64.zip *
xhldr_x64.sig *
xhldr_x64.zip *
xhldr_x86.sig *
xhldr_x86.zip *
tsc.sig *
tsc.zip *
tsc64.sig *
tsc64.zip *
tmebc32.sig *
tmebc32.zip *
tmebc64.sig *
tmebc64.zip *
engv_amd64_ntkd.sig *
engv_amd64_ntkd.zip *
eng_ntkd.sig *
eng_ntkd.zip *
Apex One\PCCSRV\Download\Pattern\
-------------------------------------------------------------------
tmumhv2.zip *
falconcfg.zip *
tmgd.sig *
tmgd.zip *
tmgd64.sig *
tmgd64.zip *
trendxv.sig *
trendxv.zip *
Apex One\PCCSRV\Download\Product\
-------------------------------------------------------------------
dlplite.sig *
dlplite.zip *
dlplite_3rdparty.sig *
dlplite_3rdparty.zip *
dlplite_3rdparty_x64.sig *
dlplite_3rdparty_x64.zip *
dlplite_common.sig *
dlplite_common.zip *
dlplite_common_x64.sig *
dlplite_common_x64.zip *
dlplite_x64.sig *
dlplite_x64.zip *
libdlppatchagent.sig *
libdlppatchagent.zip *
libdlppatchagent_64x.sig *
libdlppatchagent_64x.zip *
Apex One\PCCSRV\Download\engine\ssapi32_v6\
-------------------------------------------------------------------
ssapi32.sig *
ssapi32.zip *
Apex One\PCCSRV\Download\engine\ssapi64_v6\
-------------------------------------------------------------------
ssapi64.sig *
ssapi64.zip *
Apex One\PCCSRV\Engine\
-------------------------------------------------------------------
saegiscounters.man *
tmaegissysevt.dll 2.98.0.1430
tmbmcli.dll 2.98.0.1430
tmbmsrv.exe 2.98.0.1430
tmcomeng.dll 2.98.0.1430
tmengdrv.dll 2.98.0.1430
tmpem.dll 2.98.0.1430
tmsysevt.dll 8.53.0.1046
tmwlutil.dll 2.98.0.1430
tmxfalcon.dll 1.7.0.1028
tmcfwapi.dll 5.83.0.1064
tmhash.dll 5.83.0.1064
tmpfw.exe 5.83.0.1064
tmpfwapi.dll 5.83.0.1064
tmpfwrul.dll 5.83.0.1064
ssapi32.dll 6.2.1.4035
tmamsiprovider.dll 8.53.0.1046
tmsysevt.dll 8.53.0.1046
Apex One\PCCSRV\Engine\CCSF\TrxHandler\
-------------------------------------------------------------------
trxhandler.dll 1.100.0.1073
Apex One\PCCSRV\Engine\X64\
-------------------------------------------------------------------
tmxfalcon.dll 1.7.0.1028
tmcfwapi.dll 5.83.0.1064
tmhash.dll 5.83.0.1064
tmpfw.exe 5.83.0.1064
tmpfwapi.dll 5.83.0.1064
tmpfwrul.dll 5.83.0.1064
tsc64.exe 7.5.0.1137
ssapi64.dll 6.2.1.4035
Apex One\PCCSRV\Engine\X64\CCSF\TrxHandler\
-------------------------------------------------------------------
trxhandler.dll 1.100.0.1073
Apex One\PCCSRV\Engine\x64\
-------------------------------------------------------------------
saegiscounters.man *
tmaegissysevt.dll 2.98.0.1430
tmbmcli.dll 2.98.0.1430
tmbmsrv.exe 2.98.0.1430
tmcomeng.dll 2.98.0.1430
tmengdrv.dll 2.98.0.1430
tmpem.dll 2.98.0.1430
tmsysevt.dll 8.53.0.1046
tmwlutil.dll 2.98.0.1430
tmamsiprovider64.dll 8.53.0.1046
tmsysevt.dll 8.53.0.1046
Apex One\PCCSRV\LWCS\
-------------------------------------------------------------------
aucfg.ini *
au_wrs.exe 3.1.0.2039
build.exe 2.86.0.1023
bwlistmgmt.exe 3.1.0.2039
bwlistsearch.exe 3.1.0.2039
cccaupdate.exe 3.1.0.2039
cert5.db *
ciuas32.dll 1.0.0.2075
ciussi32.dll 2.0.0.2074
icrcauapi.dll 2.5.0.1115
libbwlistfilter.dll 3.1.0.2039
libcurl.dll 7.66.0.0
libeay32.dll 1.0.2.21
liblwtpciu32.dll 1.0.0.1005
lwcsctrl.exe 3.1.0.2039
lwcsservice.exe 3.1.0.2039
migratebwlist.exe 3.1.0.2039
patch.exe 2.86.0.1023
patchbld.dll 12.21.0.0
patchw32.dll 12.21.0.0
pcre.dll *
perflwcsperfmonmgr.dll 3.1.0.2039
perflwcsperfmonmgr.ini *
placeholder.txt *
ssleay32.dll 1.0.2.21
sym_perflwcsperfmonmgr.h *
tmufeng.dll 5.0.0.1001
tmupdate.dll 2.86.0.1023
x500.db *
zlib1.dll 1.2.4.0
Apex One\PCCSRV\PccNT\Drv\
-------------------------------------------------------------------
tmcomm.cat *
tmcomm.inf *
tmcomm.sys 8.20.0.1040
tmebc.cat *
tmebc.inf *
tmebc32.sys 1.5.0.1045
Apex One\PCCSRV\PccNT\Drv\x64\
-------------------------------------------------------------------
tmcomm.cat *
tmcomm.inf *
tmcomm.sys 8.20.0.1040
tmebc.cat *
tmebc.inf *
tmebc64.sys 1.5.0.1045
Apex One\PCCSRV\Pccnt\
-------------------------------------------------------------------
aoshtml.zip *
aoshtml.zip.cat *
Apex One\PCCSRV\Pccnt\Common\
-------------------------------------------------------------------
osfext_iacclient.dll 3.0.0.3025
osfext_iatasclient.dll 1.7.0.1045
osfext_iesclient.dll 3.5.0.1144
osfext_ivpclient.dll 3.0.0.2723
tmcfwapi.dll 5.83.0.1064
tmfphcex.exe 5.83.0.1064
tmhash.dll 5.83.0.1064
tmpfw.exe 5.83.0.1064
tmpfwapi.dll 5.83.0.1064
tmpfwctl.dll 5.83.0.1064
tmpfwctl_xp.dll 5.83.0.1064
tmpfwrul.dll 5.83.0.1064
tmwfpapi.dll 5.83.0.1064
crc0filter.dll 2.83.0.1026
icrchdler.dll 2.83.0.1026
libcurl.dll 7.66.0.0
libeay32.dll 1.0.2.21
ssleay32.dll 1.0.2.21
tmeectv.dll 3.5.0.1017
tmeesent.dll 3.5.0.1017
salperfcounters.man *
tmopcfg.dll 5.1.0.1028
tmopcfscan.dll 5.1.0.1028
tmopctl.dll 5.1.0.1028
tmopdbg.dll 5.1.0.1028
tmoppecertpin.dll 5.1.0.1028
tmoppeevts.dll 5.1.0.1028
tmoppehosf.dll 5.1.0.1028
tmoppepdp.dll 5.1.0.1028
tmoppesal.dll 5.1.0.1028
tmoppessf.dll 5.1.0.1028
tmoppeurlf.dll 5.1.0.1028
tmoppevs.dll 5.1.0.1028
tmopphdns.dll 5.1.0.1028
tmopphhttp.dll 5.1.0.1028
tmopphhttp2.dll 5.1.0.1028
tmopphpop3.dll 5.1.0.1028
tmopphsmtp.dll 5.1.0.1028
tmopphsocks.dll 5.1.0.1028
tmopphsvrhello.dll 5.1.0.1028
tmopplgadp.dll 5.1.0.1028
tmopsent.dll 5.1.0.1028
tmopsmhttp.dll 5.1.0.1028
tmopsmmail.dll 5.1.0.1028
tmopsmproxy.dll 5.1.0.1028
tmopsmsvrhello.dll 5.1.0.1028
tmosprey.reg *
urlfperfcounters.man *
Apex One\PCCSRV\Pccnt\Disk1\
-------------------------------------------------------------------
0x0409.ini *
data1.cab *
data1.hdr *
data2.cab *
install.exe 6.70.0.0
issetup.dll 22.0.0.330
layout.bin *
setup.ini *
setup.inx *
setup.iss *
Apex One\PCCSRV\Pccnt\Drv\
-------------------------------------------------------------------
tmnciesc.cat *
tmnciesc.inf *
tmnciesc.sys 3.0.0.1071
tmactmon.cat *
tmactmon.inf *
tmactmon.sys 2.98.0.1421
tmevtmgr.cat *
tmevtmgr.inf *
tmevtmgr.sys 2.98.0.1421
tmlwf.cat *
tmlwf.inf *
tmlwf.sys 5.83.0.1063
tmwfp.cat *
tmwfp.inf *
tmwfp.sys 5.83.0.1063
tmlwfins.exe 5.83.0.1063
tmwfpins.exe 5.83.0.1063
tmfilter.sys 12.200.0.1019
tmpcw.man *
tmpreflt.inf *
tmpreflt.sys 12.200.0.1019
tmxpflt.inf *
tmxpflt.sys 12.200.0.1019
vsapint.inf *
vsapint.sys 12.200.0.1019
tmeevw.cat *
tmeevw.inf *
tmeevw.sys 3.5.0.1017
tmusa.cat *
tmusa.inf *
tmusa.sys 5.1.0.1010
Apex One\PCCSRV\Pccnt\Drv\X64\
-------------------------------------------------------------------
tmnciesc.cat *
tmnciesc.inf *
tmnciesc.sys 3.0.0.1071
tmactmon.cat *
tmactmon.inf *
tmactmon.sys 2.98.0.1421
tmevtmgr.cat *
tmevtmgr.inf *
tmevtmgr.sys 2.98.0.1421
tmlwf.cat *
tmlwf.inf *
tmlwf.sys 5.83.0.1063
tmwfp.cat *
tmwfp.inf *
tmwfp.sys 5.83.0.1063
tmlwfins.exe 5.83.0.1063
tmwfpins.exe 5.83.0.1063
tmpcw.man *
tmpreflt.inf *
tmpreflt.sys 12.200.0.1019
tmxpflt.inf *
tmxpflt.sys 12.200.0.1019
vsapint.inf *
vsapint.sys 12.200.0.1019
tmeevw.cat *
tmeevw.inf *
tmeevw.sys 3.5.0.1017
tmusa.cat *
tmusa.inf *
tmusa.sys 5.1.0.1010
Apex One\PCCSRV\Pccnt\Win64\X64\
-------------------------------------------------------------------
osfext_iacclient_x64.dll 3.0.0.3025
osfext_iatasclient_x64.dll 1.7.0.1045
osfext_iesclient_x64.dll 3.5.0.1144
osfext_ivpclient_x64.dll 3.0.0.2723
tmcfwapi.dll 5.83.0.1064
tmfphcex.exe 5.83.0.1064
tmhash.dll 5.83.0.1064
tmpfw.exe 5.83.0.1064
tmpfwapi.dll 5.83.0.1064
tmpfwctl.dll 5.83.0.1064
tmpfwctl_xp.dll 5.83.0.1064
tmpfwrul.dll 5.83.0.1064
tmwfpapi.dll 5.83.0.1064
crc0filter.dll 2.83.0.1026
icrchdler.dll 2.83.0.1026
libcurl.dll 7.66.0.0
libeay32.dll 1.0.2.21
ssleay32.dll 1.0.2.21
tmeectv.dll 3.5.0.1017
tmeesent.dll 3.5.0.1017
salperfcounters.man *
tmopcfg.dll 5.1.0.1028
tmopcfscan.dll 5.1.0.1028
tmopctl.dll 5.1.0.1028
tmopdbg.dll 5.1.0.1028
tmoppecertpin.dll 5.1.0.1028
tmoppeevts.dll 5.1.0.1028
tmoppehosf.dll 5.1.0.1028
tmoppepdp.dll 5.1.0.1028
tmoppesal.dll 5.1.0.1028
tmoppessf.dll 5.1.0.1028
tmoppeurlf.dll 5.1.0.1028
tmoppevs.dll 5.1.0.1028
tmopphdns.dll 5.1.0.1028
tmopphhttp.dll 5.1.0.1028
tmopphhttp2.dll 5.1.0.1028
tmopphpop3.dll 5.1.0.1028
tmopphsmtp.dll 5.1.0.1028
tmopphsocks.dll 5.1.0.1028
tmopphsvrhello.dll 5.1.0.1028
tmopplgadp.dll 5.1.0.1028
tmopsent.dll 5.1.0.1028
tmopsmhttp.dll 5.1.0.1028
tmopsmmail.dll 5.1.0.1028
tmopsmproxy.dll 5.1.0.1028
tmopsmsvrhello.dll 5.1.0.1028
urlfperfcounters.man *
Apex One\PCCSRV\SRS\
-------------------------------------------------------------------
libapricotlog.dll 3.1.0.2039
libcurl.dll 7.66.0.0
libeay32.dll 1.0.2.21
makecert.exe 10.0.17134.12
placeholder.txt *
relayrulehandler.dll 3.1.0.2039
relayruleperfcounter.dll 3.1.0.2039
relayserviceperfcounter.dll 3.1.0.2039
srscli.exe 3.1.0.2039
srservice.exe 3.1.0.2039
ssleay32.dll 1.0.2.21
zlib1.dll 1.2.4.0
Apex One\PCCSRV\WSS\
-------------------------------------------------------------------
aucfg.ini *
au_frs.exe 3.1.0.2039
bsdiff.exe *
build.exe 2.86.0.1023
cert5.db *
ciuas32.dll 1.0.0.2075
ciussi32.dll 2.0.0.2074
cpuctrl.exe 3.1.0.2039
genbfdiff.exe 3.1.0.2039
gencrcdiff.exe 3.1.0.2039
icrcauapi.dll 2.5.0.1115
icrcservice.exe 3.1.0.2039
liblwtpciu32.dll 1.0.0.1005
makebf.exe 3.1.0.2039
makecert.exe 10.0.17134.12
patch.exe 2.86.0.1023
patchbld.dll 12.21.0.0
patchw32.dll 12.21.0.0
perfwssperfmonmgr.dll 3.1.0.2039
perfwssperfmonmgr.ini *
placeholder.txt *
spsc.dll 2.7.0.1098
spscserverapi.dll 2.7.0.1098
sym_perfwssperfmonmgr.h *
tmupdate.dll 2.86.0.1023
unzip.exe *
vsapi32.dll 9.800.0.1009
x500.db *
Apex One\PCCSRV\WSS\\spsc\activeupdate
-------------------------------------------------------------------
placeholder.txt *
Apex One\PCCSRV\WSS\\spsc\bin
-------------------------------------------------------------------
activeindex.exe 2.7.0.1098
attributetool.exe 2.7.0.1098
bfgen.exe 2.7.0.1098
bsdiffgen.exe 2.7.0.1098
cpuctrl.exe 2.7.0.1098
crcdiffgen.exe 2.7.0.1098
crczdiffgen.exe 2.7.0.1098
crczdiffgenfromcrcz.exe 2.7.0.1098
crczgen.exe 2.7.0.1098
crczmerge.exe 2.7.0.1098
dbintegrity.exe 2.7.0.1098
fullmarkhelper.exe 2.7.0.1098
icrcauapi.dll 2.7.0.1098
importmanager.exe 2.7.0.1098
loglevelsetter.exe 2.7.0.1098
ptncheck.exe 2.7.0.1098
ptnclean.exe 2.7.0.1098
rwconfig.py *
spsc.dll 2.7.0.1098
spscserverapi.dll 2.7.0.1098
switchdb.exe 2.7.0.1098
tbldiffgen.exe 2.7.0.1098
tblmodifier.exe 2.7.0.1098
updatepattern.exe 2.7.0.1098
Apex One\PCCSRV\WSS\\spsc\conf
-------------------------------------------------------------------
attr *
cdt.conf *
db1 *
db2 *
patch.list *
snmpd.conf *
spsc.conf *
spsc_activeindex_log.properties *
spsc_api_conf.ini *
spsc_attributetool_log.properties *
spsc_bfgen_log.properties *
spsc_bsdiffgen_log.properties *
spsc_cpuctrl_log.properties *
spsc_cpulimitexecutor_log.properties *
spsc_crc0diffgen_log.properties *
spsc_crc0gen_log.properties *
spsc_crcdiffgen_log.properties *
spsc_crczdiffgenfromcrcz_log.properties *
spsc_crczmerge_log.properties *
spsc_dbintegrity_log.properties *
spsc_dopatching_log.properties *
spsc_dumptools_log.properties *
spsc_fullmarkhelper_log.properties *
spsc_importmanager_log.properties *
spsc_leveldb_tool_log.properties *
spsc_libspscserverapi_log.properties *
spsc_libspsc_log.properties *
spsc_loglevelsetter_log.properties *
spsc_postgresctrl_log.properties *
spsc_ptncheck_log.properties *
spsc_ptnclean_log.properties *
spsc_snmp.conf *
spsc_sps_mib_log.properties *
spsc_switchdb_log.properties *
spsc_tbldiffgen_log.properties *
spsc_tblmodifier_log.properties *
spsc_updatepattern_log.properties *
update_pattern_conf.ini *
Apex One\PCCSRV\WSS\\spsc\data\tmp
-------------------------------------------------------------------
placeholder.txt *
Apex One\PCCSRV\WSS\\spsc\data\update_history
-------------------------------------------------------------------
placeholder.txt *
Apex One\PCCSRV\WSS\\spsc\lib
-------------------------------------------------------------------
placeholder.txt *
Apex One\PCCSRV\WSS\\spsc\log
-------------------------------------------------------------------
placeholder.txt *
Apex One\PCCSRV\WSS\\spsc\patterns\bf
-------------------------------------------------------------------
placeholder.txt *
Apex One\PCCSRV\WSS\\spsc\patterns\bsdiff
-------------------------------------------------------------------
placeholder.txt *
Apex One\PCCSRV\WSS\\spsc\patterns\crcdiff
-------------------------------------------------------------------
placeholder.txt *
Apex One\PCCSRV\WSS\\spsc\patterns\crcz
-------------------------------------------------------------------
placeholder.txt *
Apex One\PCCSRV\WSS\\spsc\patterns\crczdiff
-------------------------------------------------------------------
placeholder.txt *
Apex One\PCCSRV\WSS\\spsc\patterns\crczdiff_cache
-------------------------------------------------------------------
placeholder.txt *
Apex One\PCCSRV\WSS\\spsc\patterns\itbl
-------------------------------------------------------------------
placeholder.txt *
Apex One\PCCSRV\WSS\\spsc\patterns\itbl2
-------------------------------------------------------------------
placeholder.txt *
Apex One\PCCSRV\WSS\\spsc\patterns\itbldiff
-------------------------------------------------------------------
placeholder.txt *
Apex One\PCCSRV\WSS\\spsc\patterns\tmcss_cache
-------------------------------------------------------------------
placeholder.txt *
Apex One\PCCSRV\WSS\\spsc\patterns\tmp
-------------------------------------------------------------------
placeholder.txt *
Apex One\PCCSRV\WSS\\spsc\private
-------------------------------------------------------------------
spsc.pem *
Apex One\PCCSRV\WSS\\spsc\support
-------------------------------------------------------------------
attr *
bsdiff.exe *
cdt.py *
create_attr_table.sql *
create_crc_table.sql *
db1 *
db2 *
dumpbsdifffolder.py *
logmerge.py *
Apex One\PCCSRV\WSS\\spsc\support\leveldb_emptydb_enc
-------------------------------------------------------------------
000003.log *
current *
lock *
log *
manifest-000002 *
Apex One\PCCSRV\WSS\\spsc\support\leveldb_emptydb_noenc
-------------------------------------------------------------------
000003.log *
current *
lock *
log *
manifest-000002 *
Apex One\PCCSRV\Web_OSCE\osf\bin\
-------------------------------------------------------------------
cgiresutf8.dll 14.0.0.8358
liblogclient4net.dll 14.0.0.8358
libosfcmdhdlradapter64.dll 14.0.0.8358
libosfdata.dll 14.0.0.8358
libosfutilhelper.dll 14.0.0.8358
libosfverifylogincookie64.dll 14.0.0.8358
libosfwebconfighelper.dll 14.0.0.8358
libosfwebsvchandler.dll 14.0.0.8358
libutilcommon.dll 14.0.0.8358
microsoft.practices.enterpriselibrary.transientfaulthandling.dll6.0.1304.0
microsoft.web.administration.dll 6.1.7601.17514
newtonsoft.json.dll 10.0.2.20802
osfwebservices.dll 14.0.0.8358
osf_datalayer.dll 14.0.0.8358
system.net.http.formatting.dll 5.2.30128.0
system.web.http.dll 5.2.30128.0
system.web.http.webhost.dll 5.2.30128.0
timestring_64x.dll 14.0.0.8286
Apex One\PCCSRV\admin
-------------------------------------------------------------------
clientrollback.exe 14.0.0.8358
infocollector.exe 14.0.0.8286
installdownloader.exe 14.0.0.8358
instntres.dll 14.0.0.8358
instreg.exe 14.0.0.8286
loadhttp.dll 14.0.0.8286
ofc_loadhttp.dll 14.0.0.8286
oscetsclog.dll 14.0.0.8286
rollbackagent.dll 14.0.0.8358
rollbackagent_64x.dll 14.0.0.8358
setupman.dll 14.0.0.8358
setupusr.dll 14.0.0.8358
setupusr.exe 14.0.0.8358
svcmgr.dll 14.0.0.8358
svcrunap.exe 14.0.0.8358
timestring.dll 14.0.0.8286
tmdbg20.dll 14.0.0.8286
tmgd.ptn *
tmgd64.ptn *
tmun *
tmuninst.dll 14.0.0.8286
tmuninst.exe 14.0.0.8286
tmuninst.ptn *
tmuninst_as.ptn *
tmun_as *
tsc.exe 7.5.0.1137
tsc64.exe 7.5.0.1137
vsapi32.dll 12.0.0.1008
vsapi64.dll 12.0.0.1008
wizard.exe 14.0.0.8286
wizard_64x.exe 14.0.0.8286
Apex One\PCCSRV\admin\utility\certificatemanager
-------------------------------------------------------------------
certificatemanager.exe 14.0.0.8358
timestring.dll 14.0.0.8286
Apex One\PCCSRV\admin\utility\clientpackager
-------------------------------------------------------------------
clientmsisetup_msi *
clnextor.exe 14.0.0.8358
clnpack.exe 14.0.0.8358
clnpack.ini *
flowcontrol.dll 14.0.0.8358
ofcpfwcommon.dll 14.0.0.8286
suctool.exe 14.0.0.8358
timestring.dll 14.0.0.8286
tmcfwapi.dll 5.83.0.1064
vsapi32.dll 12.0.0.1008
Apex One\PCCSRV\admin\utility\domainscheduledupdate
-------------------------------------------------------------------
dsu_convert.exe 14.0.0.8358
Apex One\PCCSRV\admin\utility\enableprogramupgrade
-------------------------------------------------------------------
enableprogramupgrade.exe 14.0.0.8358
Apex One\PCCSRV\admin\utility\gatewaysettingsimporter
-------------------------------------------------------------------
gsimporter.exe 14.0.0.8358
Apex One\PCCSRV\admin\utility\imgsetup
-------------------------------------------------------------------
imgsetup.exe 14.0.0.8358
Apex One\PCCSRV\admin\utility\ipxfer
-------------------------------------------------------------------
ipxfer.exe 14.0.0.8286
ipxfer_x64.exe 14.0.0.8286
Apex One\PCCSRV\admin\utility\ispsinstaller
-------------------------------------------------------------------
ispsinstaller.exe *
Apex One\PCCSRV\admin\utility\listdeviceinfo
-------------------------------------------------------------------
listdeviceinfo.exe 6.2.0.1249
Apex One\PCCSRV\admin\utility\messagequeue
-------------------------------------------------------------------
liboscemsmq.dll 14.0.0.8358
mqtool.exe 14.0.0.8358
Apex One\PCCSRV\admin\utility\osceresetpw
-------------------------------------------------------------------
osceresetpw.exe 14.0.0.8358
Apex One\PCCSRV\admin\utility\policyexporttool
-------------------------------------------------------------------
apexonesettingsexporttool.exe 14.0.0.8358
cgiresutf8.dll 14.0.0.8358
servermigrationtool.ex_ 14.0.0.8358
timestring.dll 14.0.0.8286
Apex One\PCCSRV\admin\utility\saasstoragemgr
-------------------------------------------------------------------
edcryp.net4.dll 14.0.0.8358
liblogclient4net.dll 14.0.0.8358
microsoft.windowsazure.storage.dll 4.3.0.0
newtonsoft.json.dll 10.0.3.21018
newtonsoft.json.xml *
ofcasmgr.exe 14.0.0.8358
ofcasmgr.exe.config *
Apex One\PCCSRV\admin\utility\servermigrationtool
-------------------------------------------------------------------
cgiocommon.dll 14.0.0.8358
cgiresutf8.dll 14.0.0.8358
ofcpfwcommon.dll 14.0.0.8286
servermigrationtool.exe 14.0.0.8358
srec.ex_ 14.0.0.8358
timestring.dll 14.0.0.8286
Apex One\PCCSRV\admin\utility\spnsxfr
-------------------------------------------------------------------
spnsxfr.exe 14.0.0.8358
Apex One\PCCSRV\admin\utility\svrtune
-------------------------------------------------------------------
svrtune.exe 14.0.0.8358
Apex One\PCCSRV\admin\utility\systemhealthvalidator
-------------------------------------------------------------------
officescannapshv_x64.exe 4.1.100.1332
officescannapshv_x86.exe 4.1.100.1332
Apex One\PCCSRV\admin\utility\tcachegen
-------------------------------------------------------------------
tcachegen.exe 14.0.0.8358
tcachegencli.exe 14.0.0.8358
tcachegencli_x64.exe 14.0.0.8358
tcachegen_x64.exe 14.0.0.8358
Apex One\PCCSRV\admin\utility\tmvs
-------------------------------------------------------------------
datfhs.dll 14.0.0.8286
libeay32.dll 1.0.2.21
loadhttp.dll 14.0.0.8286
ssleay32.dll 1.0.2.21
tmdbg20.dll 14.0.0.8286
tmnotify.dll 1.5.0.1051
tmvs.exe 14.0.0.8358
Apex One\PCCSRV\admin\utility\touch
-------------------------------------------------------------------
tmtouch.exe 14.0.0.8286
Apex One\PCCSRV\admin\utility\vsencrypt
-------------------------------------------------------------------
vsapi32.dll 12.0.0.1008
vsencode.exe 14.0.0.8358
Apex One\PCCSRV\ccsf\module\atse
-------------------------------------------------------------------
trendxl.115 *
trendxv.121 *
Apex One\PCCSRV\cmagent
-------------------------------------------------------------------
cgiresutf8.dll 14.0.0.8358
datfhs.dll 14.0.0.8286
en_i18n.dll 5.0.0.2363
en_utility.dll 5.0.0.2363
libcurl.dll 7.66.0.0
libeay32.dll 1.0.2.20
libosfextensionloader.dll 14.0.0.8358
libperfosceperfmonmgr.dll 14.0.0.8358
libperfosceperfmonmgr_x64.dll 14.0.0.8358
ofccmagent.exe 14.0.0.8358
osfagent.dll 14.0.0.8286
productlibrary.dll 14.0.0.8358
ssleay32.dll 1.0.2.20
timestring.dll 14.0.0.8286
tmufeng.dll 3.91.0.1022
trendaprwrapperdll.dll 5.0.0.2363
Apex One\PCCSRV\download
-------------------------------------------------------------------
clnpack_files.xml *
Apex One\PCCSRV\osf_extension\iac
-------------------------------------------------------------------
osfext_iaccmagent.dll 3.0.0.3025
osfext_iacmasterservice.dll 3.0.0.3025
Apex One\PCCSRV\osf_extension\iac\x64
-------------------------------------------------------------------
osfext_iaccmagent.dll 3.0.0.3025
osfext_iacmasterservice.dll 3.0.0.3025
Apex One\PCCSRV\osf_extension\iatas
-------------------------------------------------------------------
osfext_iatascmagent.dll 1.7.0.1045
osfext_iatasmasterservice.dll 1.7.0.1045
Apex One\PCCSRV\osf_extension\iatas\x64
-------------------------------------------------------------------
osfext_iatascmagent.dll 1.7.0.1044
osfext_iatasmasterservice.dll 1.7.0.1044
Apex One\PCCSRV\osf_extension\ies
-------------------------------------------------------------------
osfext_iescmagent.dll 3.0.0.1592
osfext_iesmasterservice.dll 3.0.0.1592
Apex One\PCCSRV\osf_extension\ies\x64
-------------------------------------------------------------------
osfext_iescmagent.dll 3.0.0.1592
osfext_iesmasterservice.dll 3.0.0.1592
Apex One\PCCSRV\osf_extension\ivp
-------------------------------------------------------------------
osfext_ivpcmagent.dll 3.0.0.2723
osfext_ivpmasterservice.dll 3.0.0.2723
Apex One\PCCSRV\osf_extension\ivp\x64
-------------------------------------------------------------------
osfext_ivpcmagent.dll 3.0.0.2723
osfext_ivpmasterservice.dll 3.0.0.2723
Apex One\PCCSRV\pccnt
-------------------------------------------------------------------
aoshtml.zip.cat *
clientconsole.zip *
clientconsole.zip.cat *
clienthelp.zip *
clienthelp.zip.cat *
libcntprodres.dll 14.0.0.8286
ntmonres.dll 14.0.0.8358
ntrmvrc.dll 14.0.0.8358
ntrtscan.exe 14.0.0.8286
ntsvcres.dll 14.0.0.8358
pccntres.dll 14.0.0.8358
readme.txt *
svcmgr.dll 14.0.0.8358
tmnotify.dll 1.5.0.1051
Apex One\PCCSRV\pccnt\common
-------------------------------------------------------------------
7z.dll 18.5.0.0
7z.exe 18.5.0.0
apricotcbrulehandler.dll 2.0.0.1049
apricotmanagermodule.dll 2.0.0.1049
ccsf_ptn.zip *
ccsf_ptn.zip.cat *
ccsf_win32.zip *
ccsf_win32.zip.cat *
comprmv.exe 14.0.0.8286
datfhs.dll 14.0.0.8286
dcexif32.dll 14.0.0.8286
dwiotrapnt.dll 14.0.0.8286
fcwofieui.dll 14.0.0.8286
filebrowsingrulehandler.dll 2.0.0.1049
flowcontrol.dll 14.0.0.8358
lib7zwrapper.dll 14.0.0.8286
libapricotlog.dll 2.0.0.1049
libcnttmpollingmodule.dll 14.0.0.8286
libnetctrl.dll 14.0.0.8286
libosf.dll 14.0.0.8286
libtmcav.dll 14.0.0.8286
libuaprefltr.dll 14.0.0.8286
libwfpnetworkisolation.dll 14.0.0.8286
libzipunzipdll.dll 14.0.0.8286
loadhttp.dll 14.0.0.8286
logserver.exe 14.0.0.8286
ntrmv.exe 14.0.0.8286
ofccccaupdate.exe 14.0.0.8286
ofcpfwcommon.dll 14.0.0.8286
ofcpfwsvc.dll 14.0.0.8286
ofcpfwsvc.exe 14.0.0.8286
ofcpipc.dll 14.0.0.8286
ofcpluginapi.dll 14.0.0.8286
ofcpluginmain.dll 14.0.0.8286
ofcplugintray.dll 14.0.0.8286
ofc_loadhttp.dll 14.0.0.8286
officescantouch.exe 14.0.0.8286
osceprot.dll 14.0.0.8286
osfagent.dll 14.0.0.8286
pccnt.exe 14.0.0.8286
pccntmon.exe 14.0.0.8286
pccntupd.exe 14.0.0.8286
pccwfwmo.dll 14.0.0.8286
pwd.dll 14.0.0.8286
salperfcounters.man *
spywareresource.dll 14.0.0.8286
supportconnector.exe 14.0.0.8286
surrogatetmlisten.exe 14.0.0.8286
tmcfwapi.dll 5.83.0.1064
tmdshell.dll 14.0.0.8286
tmeectv.dll 3.5.0.1017
tmeesent.dll 3.5.0.1017
tmfphcex.exe 5.83.0.1064
tmhash.dll 5.83.0.1064
tmlisten.exe 14.0.0.8286
tmlistenshare.dll 14.0.0.8286
tmnapshainfo.dll 14.0.0.8286
tmntupgd.exe 14.0.0.8286
tmopcfg.dll 5.1.0.1028
tmopcfscan.dll 5.1.0.1028
tmopctl.dll 5.1.0.1028
tmopdbg.dll 5.1.0.1028
tmopp.dll 14.0.0.8286
tmoppecertpin.dll 5.1.0.1028
tmoppeevts.dll 5.1.0.1028
tmoppehosf.dll 5.1.0.1028
tmoppepdp.dll 5.1.0.1028
tmoppesal.dll 5.1.0.1028
tmoppessf.dll 5.1.0.1028
tmoppeurlf.dll 5.1.0.1028
tmoppevs.dll 5.1.0.1028
tmopphdns.dll 5.1.0.1028
tmopphhttp.dll 5.1.0.1028
tmopphhttp2.dll 5.1.0.1028
tmopphpop3.dll 5.1.0.1028
tmopphsmtp.dll 5.1.0.1028
tmopphsocks.dll 5.1.0.1028
tmopphsvrhello.dll 5.1.0.1028
tmopplgadp.dll 5.1.0.1028
tmopsent.dll 5.1.0.1028
tmopsmhttp.dll 5.1.0.1028
tmopsmmail.dll 5.1.0.1028
tmopsmproxy.dll 5.1.0.1028
tmopsmsvrhello.dll 5.1.0.1028
tmpac.dll 14.0.0.8286
tmpfw.exe 5.83.0.1064
tmpfwapi.dll 5.83.0.1064
tmpfwctl.dll 5.83.0.1064
tmpfwctl_xp.dll 5.83.0.1064
tmpfwrul.dll 5.83.0.1064
tmsock.dll 14.0.0.8286
tmssclient.exe 14.0.0.8286
tmufeng.dll 3.91.0.1022
tmwatchdog.dll 14.0.0.8286
tmwatchdog.exe 14.0.0.8286
tmwfpapi.dll 5.83.0.1064
updguide.exe 14.0.0.8286
upgrade.exe 14.0.0.8286
urlfperfcounters.man *
utiljsonhandle.dll 14.0.0.8286
utilpfwinstcondchecker.exe 14.0.0.8286
wofielauncher.exe 14.0.0.8286
xpupg.exe 14.0.0.8286
Apex One\PCCSRV\pccnt\win64\x64
-------------------------------------------------------------------
7z.dll 18.5.0.0
7z.exe 18.5.0.0
apricotcbrulehandler.dll 2.0.0.1049
apricotmanagermodule.dll 2.0.0.1049
ccsf_x64.zip *
ccsf_x64.zip.cat *
comprmv.exe 14.0.0.8286
datfhs.dll 14.0.0.8286
dcexif64.dll 14.0.0.8286
fcwofieui.dll 14.0.0.8286
filebrowsingrulehandler.dll 2.0.0.1049
flowcontrol_64x.dll 14.0.0.8358
instreg.exe 14.0.0.8286
lib7zwrapper_64x.dll 14.0.0.8286
libapricotlog.dll 2.0.0.1049
libcntprodres_64x.dll 14.0.0.8286
libcnttmpollingmodule_64x.dll 14.0.0.8286
libnetctrl_64x.dll 14.0.0.8286
libosf_64x.dll 14.0.0.8286
libtmcav_64x.dll 14.0.0.8286
libuaprefltr.dll 14.0.0.8286
libwfpnetworkisolation_x64.dll 14.0.0.8286
libzipunzipdll_64x.dll 14.0.0.8286
loadhttp_64x.dll 14.0.0.8286
ntrmv.exe 14.0.0.8286
ntrtscan.exe 14.0.0.8286
ofccccaupdate.exe 14.0.0.8286
ofcpfwcommon_64x.dll 14.0.0.8286
ofcpfwsvc.exe 14.0.0.8286
ofcpfwsvc_64x.dll 14.0.0.8286
ofcpipc_64x.dll 14.0.0.8286
ofcpluginapi_64x.dll 14.0.0.8286
ofcpluginmain_64x.dll 14.0.0.8286
ofcplugintray_64x.dll 14.0.0.8286
ofc_loadhttp_64x.dll 14.0.0.8286
osceprot_64x.dll 14.0.0.8286
oscetsclog_64x.dll 14.0.0.8286
osfagent_64x.dll 14.0.0.8286
pccnt.exe 14.0.0.8286
pccntmon.exe 14.0.0.8286
pccntupd.exe 14.0.0.8286
pccwfwmo_64x.dll 14.0.0.8286
pwd_64x.dll 14.0.0.8286
salperfcounters.man *
spywareresource_64x.dll 14.0.0.8286
supportconnector.exe 14.0.0.8286
surrogatetmlisten.exe 14.0.0.8286
timestring_64x.dll 14.0.0.8286
tmcfwapi.dll 5.83.0.1064
tmdbg20_64x.dll 14.0.0.8286
tmdshell_64x.dll 14.0.0.8286
tmeectv.dll 3.5.0.1017
tmeesent.dll 3.5.0.1017
tmfphcex.exe 5.83.0.1064
tmhash.dll 5.83.0.1064
tmlisten.exe 14.0.0.8286
tmlistenshare_64x.dll 14.0.0.8286
tmnapshainfo.dll 14.0.0.8286
tmnotify.dll 1.5.0.1051
tmopcfg.dll 5.1.0.1028
tmopcfscan.dll 5.1.0.1028
tmopctl.dll 5.1.0.1028
tmopdbg.dll 5.1.0.1028
tmoppecertpin.dll 5.1.0.1028
tmoppeevts.dll 5.1.0.1028
tmoppehosf.dll 5.1.0.1028
tmoppepdp.dll 5.1.0.1028
tmoppesal.dll 5.1.0.1028
tmoppessf.dll 5.1.0.1028
tmoppeurlf.dll 5.1.0.1028
tmoppevs.dll 5.1.0.1028
tmopphdns.dll 5.1.0.1028
tmopphhttp.dll 5.1.0.1028
tmopphhttp2.dll 5.1.0.1028
tmopphpop3.dll 5.1.0.1028
tmopphsmtp.dll 5.1.0.1028
tmopphsocks.dll 5.1.0.1028
tmopphsvrhello.dll 5.1.0.1028
tmopplgadp.dll 5.1.0.1028
tmopp_64x.dll 14.0.0.8286
tmopsent.dll 5.1.0.1028
tmopsmhttp.dll 5.1.0.1028
tmopsmmail.dll 5.1.0.1028
tmopsmproxy.dll 5.1.0.1028
tmopsmsvrhello.dll 5.1.0.1028
tmpac_64x.dll 14.0.0.8286
tmpfw.exe 5.83.0.1064
tmpfwapi.dll 5.83.0.1064
tmpfwctl.dll 5.83.0.1064
tmpfwctl_xp.dll 5.83.0.1064
tmpfwrul.dll 5.83.0.1064
tmsock_64x.dll 14.0.0.8286
tmssclient.exe 14.0.0.8286
tmufeng.dll 3.91.0.1022
tmwatchdog.dll 14.0.0.8286
tmwatchdog.exe 14.0.0.8286
tmwfpapi.dll 5.83.0.1064
updguide.exe 14.0.0.8286
upgrade.exe 14.0.0.8286
urlfperfcounters.man *
utiljsonhandle_64x.dll 14.0.0.8286
utilpfwinstcondchecker.exe 14.0.0.8286
wofielauncher.exe 14.0.0.8286
xpupg.exe 14.0.0.8286
zlibwapi.dll 1.2.11.1002
Apex One\PCCSRV\private
-------------------------------------------------------------------
dlpclc.xml *
Apex One\PCCSRV\private\certificate
-------------------------------------------------------------------
certtool.exe 14.0.0.8358
edcryp.net4.dll 14.0.0.8358
libeay32.dll 1.0.2.20
openssl.exe *
ssleay32.dll 1.0.2.20
Apex One\PCCSRV\private\logserver
-------------------------------------------------------------------
7z.dll 18.5.0.0
7z.exe 18.5.0.0
logserver.exe 14.0.0.8286
ofcpipc.dll 14.0.0.8286
tmdbg20.dll 14.0.0.8286
tmdbg20ex.dll 14.0.0.8286
Apex One\PCCSRV\web\service
-------------------------------------------------------------------
7z.dll 18.5.0.0
aosproxy.exe 14.0.0.8358
atse32.dll 12.0.0.1008
atse64.dll 12.0.0.1008
build64.exe 2.86.0.2050
cgiocommon.dll 14.0.0.8358
cgires.dll 14.0.0.8358
cgiresutf8.dll 14.0.0.8358
cgishare.dll 14.0.0.8358
ciuas64.dll 1.0.0.2075
ciussi64.dll 2.0.0.2074
cmdhlclient.dll 14.0.0.8358
cmdhoconsole.dll 14.0.0.8358
cme_dll.dll 6.2.0.1329
cme_vxe_dll_static.dll 6.2.0.1329
cpprest141_2_10.dll *
datfhs.dll 14.0.0.8286
dbserver.exe 14.0.0.8358
edcryp.dll 14.0.0.8358
edcryp.net4.dll 14.0.0.8358
expapply64.dll 8.4.2.0
expbuild64.dll 8.4.2.0
flowcontrol.dll 14.0.0.8358
flowcontrol_64x.dll 14.0.0.8358
icrcauapi.dll 2.5.0.1115
lib7zwrapper.dll 14.0.0.8286
lib7zwrapper_64x.dll 14.0.0.8286
libcmdapiddadll.dll 14.0.0.8358
libcmdhndlrclientv2.dll 14.0.0.8358
libcmdhndlrconsolev2.dll 14.0.0.8358
libcmdhndlrdda.dll 14.0.0.8358
libcmdhndlrsa.dll 14.0.0.8358
libcsocclient.dll 14.0.0.8358
libcurl.dll 7.66.0.0
libcurl_ofc.dll 7.66.0.0
libdlog.dll 14.0.0.8286
libeay32.dll 1.0.2.21
liblogclient4net.dll 14.0.0.8358
libloghandler.dll 14.0.0.8358
liblwtpciu64.dll 1.0.0.1005
liboscemsmq.dll 14.0.0.8358
liboscemsmq64.dll 14.0.0.8358
libosfeventadapter.dll 14.0.0.8358
libosfextensionloader.dll 14.0.0.8358
libosfextensionloader64.dll 14.0.0.8358
libosfsvcclient.dll 14.0.0.8358
libperfodamperfmonmgr.dll 14.0.0.8358
libperfodamperfmonmgr_x64.dll 14.0.0.8358
libperfosceperfmonmgr.dll 14.0.0.8358
libperfosceperfmonmgr_x64.dll 14.0.0.8358
libutilcommon.dll 14.0.0.8358
loadhttp.dll 14.0.0.8286
loadhttp_64x.dll 14.0.0.8286
logaccessor.exe 14.0.0.8358
logagent.dll 14.0.0.8358
logcache.dll 14.0.0.8358
mqtool.exe 14.0.0.8358
ntsvcres.dll 14.0.0.8358
ofccccaupdate.exe 14.0.0.8286
ofcdbbackup.exe 14.0.0.8358
ofcddasvr.exe 14.0.0.8358
ofcdownload.dll 14.0.0.8358
ofchotfix.exe 14.0.0.8358
ofclogreceiversvc.exe 14.0.0.8358
ofcnotify.dll 14.0.0.8358
ofcnotifyqueue.dll 14.0.0.8358
ofcpfwcommon.dll 14.0.0.8286
ofcpfwcommon_64x.dll 14.0.0.8286
ofcpurgelog.dll 14.0.0.8358
ofcservice.exe 14.0.0.8358
ofcshare.dll 14.0.0.8358
ofcupdate.exe 14.0.0.8358
ofc_loadhttp.dll 14.0.0.8286
ofc_loadhttp_64x.dll 14.0.0.8286
osceintegrationservice.exe 14.0.0.8358
osfagent.dll 14.0.0.8286
osfagent_64x.dll 14.0.0.8286
patch64.exe 2.86.0.2050
patchw64.dll 12.22.0.0
pbld64.dll 12.20.0.0
psmc64.dll 8.4.2.0
pwd.dll 14.0.0.8286
pwd_64x.dll 14.0.0.8286
spywareresource.dll 14.0.0.8286
spywareresource_64x.dll 14.0.0.8286
sqlite3.dll *
ssleay32.dll 1.0.2.21
svcmgr.dll 14.0.0.8358
timestring.dll 14.0.0.8286
timestring_64x.dll 14.0.0.8286
tmnotify.dll 1.5.0.1051
tmprapit.dll 1.2.0.1131
tmprapi_nsmb_mt.dll 1.0.0.1007
tmupdate64.dll 2.86.0.2050
vdiinfo.exe 14.0.0.8358
verconn.exe 14.0.0.8358
vsapi32.dll 12.0.0.1008
vsapi64.dll 12.0.0.1008
zlibwapi.dll 1.2.11.1002
Apex One\PCCSRV\web\service\netfx35
-------------------------------------------------------------------
edcryp.dll 14.0.0.8358
logaccessor.exe 14.0.0.8358
Apex One\PCCSRV\web\service\netfx4
-------------------------------------------------------------------
edcryp.net4.dll 14.0.0.8358
logaccessor.net4.exe 14.0.0.8358
Apex One\PCCSRV\web_console\cgi
-------------------------------------------------------------------
cgiwebupdate.ini *
Apex One\PCCSRV\web_osce\web\cgi
-------------------------------------------------------------------
cgicheckip.exe 14.0.0.8358
cgiexportinfo.exe 14.0.0.8358
cgigetclient.exe 14.0.0.8358
cgiimportinfo.exe 14.0.0.8358
cgilog.exe 14.0.0.8358
cgiocommon.dll 14.0.0.8358
cgionclientcfg.exe 14.0.0.8358
cgionclose.exe 14.0.0.8358
cgionmscfg.exe 14.0.0.8358
cgionpscfg.exe 14.0.0.8358
cgionqueryclientbindport.exe 14.0.0.8358
cgionrtcfg.exe 14.0.0.8358
cgionscan.exe 14.0.0.8358
cgionspeciallog.exe 14.0.0.8358
cgionstart.exe 14.0.0.8358
cgionunst.exe 14.0.0.8358
cgirecvfile.exe 14.0.0.8358
cgires.dll 14.0.0.8358
cgiresutf8.dll 14.0.0.8358
cgirqalertmsg.exe 14.0.0.8358
cgirqhotfix.exe 14.0.0.8358
cgishare.dll 14.0.0.8358
fcgiofcdda.exe 14.0.0.8358
flowcontrol.dll 14.0.0.8358
flowcontrol_64x.dll 14.0.0.8358
isapiclient.dll 14.0.0.8358
isapiclientx64.dll 14.0.0.8358
isapiclientx86.dll 14.0.0.8358
jdknotify.exe 14.0.0.8358
libcurl.dll 7.66.0.0
libeay32.dll 1.0.2.21
loadhttp.dll 14.0.0.8286
ofcpfwcommon.dll 14.0.0.8286
ofcpfwcommon_64x.dll 14.0.0.8286
pwd.dll 14.0.0.8286
ssleay32.dll 1.0.2.21
sso_pkihelper.dll 5.0.0.2363
timestring.dll 14.0.0.8286
timestring_64x.dll 14.0.0.8286
vsapi32.dll 12.0.0.1008
vsapi64.dll 12.0.0.1008
zlibwapi.dll 1.2.11.1002
Apex One\PCCSRV\web_osce\web\clientutility
-------------------------------------------------------------------
ofcescvpack.exe 14.0.0.8358
Apex One\PCCSRV\web_osce\web_console\cgi
-------------------------------------------------------------------
cgiauthmanagement.exe 14.0.0.8358
cgichkmasterpwd.exe 14.0.0.8358
cgicmdnotify.exe 5.0.0.2363
cgiocommon.dll 14.0.0.8358
cgires.dll 14.0.0.8358
cgiresutf8.dll 14.0.0.8358
cgishare.dll 14.0.0.8358
cgishowactivedirectory.exe 14.0.0.8358
cgishowcav.exe 14.0.0.8358
cgishowclientadm.exe 14.0.0.8358
cgishowcompliancereport.exe 14.0.0.8358
cgishowdlp.exe 14.0.0.8358
cgishowlogs.exe 14.0.0.8358
cgishownotify.exe 14.0.0.8358
cgishowopp.exe 14.0.0.8358
cgishowpfw.exe 14.0.0.8358
cgishowserveradm.exe 14.0.0.8358
cgishowsummary.exe 14.0.0.8358
cgishowupdate.exe 14.0.0.8358
cgishowvdi.exe 14.0.0.8358
cgishowwssadmin.exe 14.0.0.8358
cgiturnlog.exe 14.0.0.8358
cgiwebupdate.exe 14.0.0.8358
ddaisapifilter.dll 14.0.0.8358
ddaisapifilter64.dll 14.0.0.8358
fcgiofcdda.exe 14.0.0.8358
flowcontrol.dll 14.0.0.8358
libcurl.dll 7.66.0.0
libeay32.dll 1.0.2.21
loadhttp.dll 14.0.0.8286
ofcpfwcommon.dll 14.0.0.8286
pwd.dll 14.0.0.8286
ssleay32.dll 1.0.2.21
sso_pkihelper.dll 5.0.0.2363
timestring.dll 14.0.0.8286
tmcfwapi.dll 5.83.0.1064
tmnotify.dll 1.5.0.1051
trendaprwrapperdll.dll 5.0.0.2363
vsapi32.dll 12.0.0.1008
Apex One\PCCSRV\web_osce\web_console\html\ad_integration
-------------------------------------------------------------------
ad_integration.htm *
client_grouping.htm *
edit_sorting_rules.htm *
Apex One\PCCSRV\web_osce\web_console\html\aegis
-------------------------------------------------------------------
data_protection.htm *
device_control.htm *
Apex One\PCCSRV\web_osce\web_console\html\auth
-------------------------------------------------------------------
admin_account_domain.htm *
admin_account_info.htm *
admin_account_menu.htm *
Apex One\PCCSRV\web_osce\web_console\html\behavior_monitoring
-------------------------------------------------------------------
bm_settings.htm *
Apex One\PCCSRV\web_osce\web_console\html\clientmag
-------------------------------------------------------------------
client_cfg_privileage.htm *
client_cfg_wtp.htm *
client_globalsetting.htm *
client_list_2.htm *
client_move.htm *
client_ofsc_services.htm *
client_policy_import_preview.htm *
client_searchwindow.htm *
Apex One\PCCSRV\web_osce\web_console\html\cloud_service
-------------------------------------------------------------------
scan_ip_range_edit.htm *
Apex One\PCCSRV\web_osce\web_console\html\common
-------------------------------------------------------------------
ajax.js *
ln_common.js *
ln_pfw.js *
page_init.js *
setting.summary.js *
setting.vdi.js *
settings.logs.js *
trend-ui-opt_list.js *
Apex One\PCCSRV\web_osce\web_console\html\common\css
-------------------------------------------------------------------
index.css *
l10n-style.css *
Apex One\PCCSRV\web_osce\web_console\html\common\l10n
-------------------------------------------------------------------
l10n.aegis.js *
l10n.behavior_monitoring.js *
l10n.clientmag.js *
l10n.global.js *
l10n.logs.js *
l10n.pfw.js *
l10n.root.js *
l10n.vdi.js *
Apex One\PCCSRV\web_osce\web_console\html\common\settings
-------------------------------------------------------------------
setting.addon.js *
setting.ad_integration.js *
setting.aegis.js *
setting.behavior_monitoring.js *
setting.clientmag.js *
setting.cloud_service.js *
setting.compliance_report.js *
setting.dlp.js *
setting.logon.js *
setting.logs.js *
setting.menu.js *
setting.notify.js *
setting.outbreak.js *
setting.pfw.js *
setting.rba.js *
setting.root.js *
setting.serveradm.js *
setting.update.js *
setting.vdi.js *
Apex One\PCCSRV\web_osce\web_console\html\common\util
-------------------------------------------------------------------
common.js *
Apex One\PCCSRV\web_osce\web_console\html\compliance_report
-------------------------------------------------------------------
compliance_report.htm *
installing_computers.htm *
Apex One\PCCSRV\web_osce\web_console\html\dlp
-------------------------------------------------------------------
dlp_compliance_tpl_addedit_v2.htm *
dlp_display_ac.htm *
dlp_entities_addedit.htm *
dlp_listentities.htm *
dlp_listfileattr.htm *
dlp_listkeywords.htm *
dlp_listtemplates.htm *
dlp_settings.htm *
Apex One\PCCSRV\web_osce\web_console\html\help\webhelp
-------------------------------------------------------------------
using-authentication.html *
Apex One\PCCSRV\web_osce\web_console\html\logs
-------------------------------------------------------------------
logs_ccca.htm *
logs_delete.htm *
logs_fa_file_view.htm *
logs_pfw.htm *
logs_pfw_view.htm *
logs_spyware.htm *
logs_websecurity.htm *
logs_widget_dlp_top_violation.htm *
log_maintenance.htm *
Apex One\PCCSRV\web_osce\web_console\html\notify
-------------------------------------------------------------------
notify_standardalert.htm *
Apex One\PCCSRV\web_osce\web_console\html\outbreak
-------------------------------------------------------------------
opp_deny_write.htm *
opp_port_blocking.htm *
opp_port_blocking_add.htm *
opp_port_blocking_edit.htm *
opp_restore.htm *
opp_shared_folder.htm *
Apex One\PCCSRV\web_osce\web_console\html\pfw
-------------------------------------------------------------------
policy_edit.htm *
policy_list.htm *
profile_edit.htm *
profile_list.htm *
Apex One\PCCSRV\web_osce\web_console\html\root
-------------------------------------------------------------------
about.htm *
atxenc.cab *
help_start.htm *
index.htm *
menu.html *
top.htm *
turn_debug_onoff.htm *
Apex One\PCCSRV\web_osce\web_console\html\serveradm
-------------------------------------------------------------------
server_cmagent_saas.htm *
server_console_settings.htm *
server_migration.htm *
server_proxy.htm *
Apex One\PCCSRV\web_osce\web_console\html\summary
-------------------------------------------------------------------
summary_top10_osce.htm *
Apex One\PCCSRV\web_osce\web_console\html\tools
-------------------------------------------------------------------
tools_admin_clients.htm *
Apex One\PCCSRV\web_osce\web_console\html\update
-------------------------------------------------------------------
client_deployment_automatic.htm *
client_deployment_manual.htm *
update_rollback.htm *
Apex One\PCCSRV\web_osce\web_console\html\vdi
-------------------------------------------------------------------
vdi_display_ac.htm *
Apex One\PCCSRV\web_osce\web_console\remoteinstallcgi
-------------------------------------------------------------------
cgigetntclient.exe 14.0.0.8358
cgigetntdomain.exe 14.0.0.8358
cgiocommon.dll 14.0.0.8358
cgiremoteinstall.exe 14.0.0.8358
cgires.dll 14.0.0.8358
cgiresutf8.dll 14.0.0.8358
cgishare.dll 14.0.0.8358
libcurl.dll 7.66.0.0
libeay32.dll 1.0.2.21
loadhttp.dll 14.0.0.8286
setupman.dll 14.0.0.8358
svcmgr.dll 14.0.0.8358
svcrunap.exe 14.0.0.8358
timestring.dll 14.0.0.8286
tmdbg20.dll 14.0.0.8286
vsapi32.dll 12.0.0.1008
vsapi64.dll 12.0.0.1008
wizard.exe 14.0.0.8286
wizard_64x.exe 14.0.0.8286
bin
-------------------------------------------------------------------
backupenhance.ini *
cgiresutf8.dll 14.0.0.8358
cgishare.dll 14.0.0.8358
check_mmc.bat *
check_msxml6.bat *
check_php.bat *
cmagentctrl.dll 2.53.0.1015
commandline.dll 2.7.82.0
convert_ver2dec.bat *
cvefixer.exe *
dacframework_x64.msi *
data1.cab *
data1.hdr *
databasemigrate.dll 14.0.0.8358
delete_chart_files.bat *
dzip32.dll 3.0.0.15
hfsetuppsscript.bat *
hfsetuppsscript.ps1 *
hotfixdetectiontool.exe 14.0.0.8358
hotfixtool.exe 14.0.0.8358
installmsxml6.bat *
libeay32.dll 1.0.2.21
libnetctrl.dll 14.0.0.8286
loadhttp.dll 14.0.0.8286
msxml6.msi *
msxml6_x64.msi *
ofcshare.dll 14.0.0.8358
pccwfwmo.dll 1.0.0.1002
posttmpatch.exe *
replacewidgetxml.bat *
setratingserver.exe *
setup.inx *
starttmsm.bat *
stopprocess.bat *
stopprocess.ps1 *
stoptmsm.bat *
svrsetup.dll 14.0.0.8358
svrsvcsetup.exe 14.0.0.8358
svrsvcsetup_64x.exe 14.0.0.8358
tmicfgapi.dll 1.11.0.1012
turn_logsvr.bat *
update_jdk.bat *
update_jdk.ps1 *
vsapi32.dll 12.0.0.1008
web_setting.bat *
zlib.dll 1.31.0.1708
zlibwapi.dll 1.2.11.1002
bin\logserver
-------------------------------------------------------------------
7z.dll 18.5.0.0
7z.exe 18.5.0.0
logserver.exe 14.0.0.8286
ofcdebug.ini *
ofcdebugex.ini *
ofcpipc.dll 14.0.0.8286
tmdbg20.dll 14.0.0.8286
iac
-------------------------------------------------------------------
placeholder.txt *
run.bat *
iac\iachotfix\agentpackage
-------------------------------------------------------------------
hfx_iac.zip *
hfx_iac.zip.cat *
hfx_iac_x64.zip *
hfx_iac_x64.zip.cat *
instupg_iac.zip *
instupg_iac.zip.cat *
instupg_iac_x64.zip *
instupg_iac_x64.zip.cat *
iserviceinst.ini *
iserviceupd.ini *
iac\iachotfix\serverpackage
-------------------------------------------------------------------
config.xml *
databaseonpremises.dacpac *
databasesaas.dacpac *
icsharpcode.sharpziplib.dll 0.86.0.518
microsoft.web.administration.dll 6.1.7601.17514
newtonsoft.json.dll 9.0.1.19813
tmaccore.dll 3.0.0.3015
tmacosce.dll 3.0.0.3015
tmacpersistence.dll 3.0.0.3015
tmacutility.dll 3.0.0.3015
tmiacsetup.exe 3.0.0.3015
tmiacsvc.exe 3.0.0.3015
version.ini *
iac\iachotfix\serverpackage\web\acserverwebapp
-------------------------------------------------------------------
global.asax *
web.config *
iac\iachotfix\serverpackage\web\acserverwebapp\bin
-------------------------------------------------------------------
acserverwebapp.dll 3.0.0.3015
icsharpcode.sharpziplib.dll 0.86.0.518
newtonsoft.json.dll 9.0.1.19813
system.net.http.formatting.dll 5.2.30128.0
system.web.http.dll 5.2.30128.0
system.web.http.webhost.dll 5.2.30128.0
tmacutility.dll 3.0.0.3015
iac\iachotfix\serverpackage\web\osfchannel
-------------------------------------------------------------------
global.asax *
web.config *
iac\iachotfix\serverpackage\web\osfchannel\bin
-------------------------------------------------------------------
icsharpcode.sharpziplib.dll 0.86.0.518
newtonsoft.json.dll 9.0.1.19813
osfchannel.dll 3.0.0.3015
system.net.http.formatting.dll 5.2.30128.0
system.web.http.dll 5.2.30128.0
system.web.http.webhost.dll 5.2.30128.0
tmacutility.dll 3.0.0.3015
iatas
-------------------------------------------------------------------
placeholder.txt *
run.bat *
iatas\iatashotfix\agentpackage
-------------------------------------------------------------------
dlliataspatchagent.zip *
dlliataspatchagent_x64.zip *
iatas\iatashotfix\agentpackage\atas_agent_hotfix_x64
-------------------------------------------------------------------
atasagent.exe 1.7.0.1045
datfhs.dll 14.0.0.5092
hc_help.dll 1.64.0.1067
libeay32.dll 1.0.2.16
libexpatw.dll *
ofcpipc_64x.dll 14.0.0.5092
osfagent_64x.dll 14.0.0.5092
iatas\iatashotfix\agentpackage\atas_agent_hotfix_x86
-------------------------------------------------------------------
atasagent.exe 1.7.0.1045
datfhs.dll 14.0.0.5092
hc_help.dll 1.64.0.1067
libeay32.dll 1.0.2.16
libexpatw.dll *
ofcpipc.dll 14.0.0.5092
osfagent.dll 14.0.0.5092
iatas\iatashotfix\agentpackage\atas_agent_x64
-------------------------------------------------------------------
atasagent.exe 1.7.0.1045
datfhs.dll 14.0.0.5092
hc_help.dll 1.64.0.1067
libeay32.dll 1.0.2.16
libexpatw.dll *
ofcpipc_64x.dll 14.0.0.5092
osfagent_64x.dll 14.0.0.5092
iatas\iatashotfix\agentpackage\atas_agent_x64\apthealthcheckup
-------------------------------------------------------------------
aptcheck64.exe 1.64.0.1067
aptptn_10002500.zip *
iatas\iatashotfix\agentpackage\atas_agent_x64\newcomponent
-------------------------------------------------------------------
aptptn_10002500.zip *
iatas\iatashotfix\agentpackage\atas_agent_x86
-------------------------------------------------------------------
atasagent.exe 1.7.0.1045
datfhs.dll 14.0.0.5092
hc_help.dll 1.64.0.1067
libeay32.dll 1.0.2.16
libexpatw.dll *
ofcpipc.dll 14.0.0.5092
osfagent.dll 14.0.0.5092
iatas\iatashotfix\agentpackage\atas_agent_x86\apthealthcheckup
-------------------------------------------------------------------
aptcheck32.exe 1.64.0.1067
aptptn_10002500.zip *
iatas\iatashotfix\agentpackage\atas_agent_x86\newcomponent
-------------------------------------------------------------------
aptptn_10002500.zip *
iatas\iatashotfix\bin
-------------------------------------------------------------------
atas_forensicmanager.exe 1.7.0.1045
atas_messagereceiver.exe 1.7.0.1045
atas_service.exe 1.7.0.1045
libcurl.dll 7.66.0.0
sisv3.dll 1.7.0.1045
trend.ddak.pr.dll 1.7.0.1045
trend.sis.utility.dll 1.7.0.1045
trendosf.dll 1.7.0.1045
iatas\iatashotfix\setup
-------------------------------------------------------------------
curlsharp.dll 1.0.6737.23568
endector.dll 1.7.0.1045
iatassetup.exe 1.7.0.1045
iatassetup.exe.config *
ionic.zip.dll 1.9.1.8
log4net.dll 1.2.11.0
microsoft.web.administration.dll 10.0.14393.0
newtonsoft.json.dll 5.0.6.16206
trend.sis.utility.dll 1.7.0.1045
trendatasactiveupdate.dll 1.7.0.1045
ies
-------------------------------------------------------------------
placeholder.txt *
run.bat *
ies\ieshotfix
-------------------------------------------------------------------
commondefinition.dll 3.0.0.1592
config.dll 3.0.0.1592
config.xml *
cryptography.dll 3.0.0.1592
debugmsg.dll 3.0.0.1592
excp4rcc.xml *
google.protocolbuffers.dll 2.4.1.555
google.protocolbuffers.serialization.dll 2.4.1.555
icsharpcode.sharpziplib.dll 0.86.0.518
log4net.config *
log4net.dll 1.2.15.0
mefplugininterfaces.dll 3.0.0.1592
mefpluginmgr.dll 3.0.0.1592
newtonsoft.json.dll 8.0.2.19309
pattern_info.txt *
pipelines.sockets.unofficial.dll 1.0.7.56431
protobuflist.dll 3.0.0.1592
remoteobject.dll 3.0.0.1592
stackexchange.redis.dll 2.0.519.65453
svg.dll 2.2.1.39233
system.buffers.dll 4.6.25519.3
system.diagnostics.performancecounter.dll 4.6.26515.6
system.io.pipelines.dll 4.6.26814.2
system.memory.dll 4.6.26606.5
system.numerics.vectors.dll 4.6.25519.3
system.runtime.compilerservices.unsafe.dll *
system.threading.channels.dll 4.6.26515.6
system.threading.tasks.extensions.dll 4.6.26606.5
tmslcore.dll 3.0.0.1592
tmufeclient.dll 3.0.0.1592
tmufeng.dll 3.91.0.1006
trendmicroendpointsensorservice.exe 3.0.0.1592
trendmicroendpointsensorservice.exe.config *
utility.dll 3.0.0.1592
webcommunication.dll 3.0.0.1592
ies\ieshotfix\agentpackage
-------------------------------------------------------------------
instupg_ies.zip *
instupg_ies.zip.cat *
instupg_ies_x64.zip *
instupg_ies_x64.zip.cat *
iserviceinst.ini *
iserviceupd.ini *
osfext_iesclient.dll 3.5.0.1144
osfext_iesclient_x64.dll 3.5.0.1144
ies\ieshotfix\cmdtool\ioctool
-------------------------------------------------------------------
ioctool.exe 3.0.0.1592
mandiantioc.xsd *
openioc.xsd *
ies\ieshotfix\cmdtool\yara
-------------------------------------------------------------------
yara.exe *
ies\ieshotfix\plugins
-------------------------------------------------------------------
agentstorage.dll 3.0.0.1592
attackdiscoverymanager.dll 3.0.0.1592
bifmanager.dll 3.0.0.1592
commandmanager.dll 3.0.0.1592
filemanager.dll 3.0.0.1592
pluginutil.dll 3.0.0.1592
policymanager.dll 3.0.0.1592
scanmanager.dll 3.0.0.1592
servermanager.dll 3.0.0.1592
servermetaquery.dll 3.0.0.1592
servermetastorage.dll 3.0.0.1592
taskmanager.dll 3.0.0.1592
tmufemanager.dll 3.0.0.1592
wineventlogmanager.dll 3.0.0.1592
ies\ieshotfix\plugins\dbschema\onpremise
-------------------------------------------------------------------
agentstorage.dacpac *
bifmanager.dacpac *
commandmanager.dacpac *
filemanager.dacpac *
policymanager.dacpac *
scanmanager.dacpac *
servermanager.dacpac *
servermetastorage.dacpac *
taskmanager.dacpac *
ies\ieshotfix\plugins\dbschema\saas
-------------------------------------------------------------------
agentstorage.dacpac *
bifmanager.dacpac *
commandmanager.dacpac *
filemanager.dacpac *
policymanager.dacpac *
scanmanager.dacpac *
servermanager.dacpac *
servermetastorage.dacpac *
taskmanager.dacpac *
ies\ieshotfix\pr\x64
-------------------------------------------------------------------
libcurl.dll 7.66.0.0
libeay32.dll 1.0.2.20
ssleay32.dll 1.0.2.20
tmprapi.dll 1.2.0.1158
zlibwapi.dll 1.2.11.0
ies\ieshotfix\pr\x86
-------------------------------------------------------------------
libcurl.dll 7.66.0.0
libeay32.dll 1.0.2.20
ssleay32.dll 1.0.2.20
tmprapi.dll 1.2.0.1162
zlibwapi.dll 1.2.11.0
ies\ieshotfix\setup
-------------------------------------------------------------------
config.dll 3.0.0.1592
cryptography.dll 3.0.0.1592
debugmsg.dll 3.0.0.1592
google.protocolbuffers.dll 2.4.1.555
google.protocolbuffers.serialization.dll 2.4.1.555
log4net.config *
log4net.dll 1.2.15.0
newtonsoft.json.dll 8.0.2.19309
redis-x64-3.0.504.msi *
setup.exe 3.0.0.1592
setup.exe.config *
utility.dll 3.0.0.1592
ies\ieshotfix\tool
-------------------------------------------------------------------
config.xml *
debugmsg.dll 3.0.0.1592
log4net.config *
log4net.dll 1.2.15.0
trendmicroendpointsensorhelper.exe 3.0.0.1592
ies\ieshotfix\web\consolechannel
-------------------------------------------------------------------
config.xml *
log4net.config *
web.config *
ies\ieshotfix\web\consolechannel\bin
-------------------------------------------------------------------
apihelper.dll 3.0.0.1592
apirouting.dll 3.0.0.1592
commondefinition.dll 3.0.0.1592
config.dll 3.0.0.1592
consolechannel.dll 3.0.0.1592
debugmsg.dll 3.0.0.1592
google.protocolbuffers.dll 2.4.1.555
google.protocolbuffers.serialization.dll 2.4.1.555
icsharpcode.sharpziplib.dll 0.86.0.518
log4net.dll 1.2.15.0
newtonsoft.json.dll 8.0.2.19309
newtonsoft.json.schema.dll 2.0.2.19309
protobuflist.dll 3.0.0.1592
remoteobject.dll 3.0.0.1592
svg.dll 2.2.1.39233
utility.dll 3.0.0.1592
ies\ieshotfix\web\fastlanechannel
-------------------------------------------------------------------
config.xml *
log4net.config *
web.config *
ies\ieshotfix\web\fastlanechannel\bin
-------------------------------------------------------------------
apihelper.dll 3.0.0.1592
apirouting.dll 3.0.0.1592
commondefinition.dll 3.0.0.1592
debugmsg.dll 3.0.0.1592
fastlanechannel.dll 3.0.0.1592
google.protocolbuffers.dll 2.4.1.555
google.protocolbuffers.serialization.dll 2.4.1.555
icsharpcode.sharpziplib.dll 0.86.0.518
log4net.dll 1.2.15.0
newtonsoft.json.dll 8.0.2.19309
newtonsoft.json.schema.dll 2.0.2.19309
protobuflist.dll 3.0.0.1592
remoteobject.dll 3.0.0.1592
svg.dll 2.2.1.39233
utility.dll 3.0.0.1592
ies\ieshotfix\web\osfchannel
-------------------------------------------------------------------
config.xml *
log4net.config *
web.config *
ies\ieshotfix\web\osfchannel\bin
-------------------------------------------------------------------
apihelper.dll 3.0.0.1592
apirouting.dll 3.0.0.1592
commondefinition.dll 3.0.0.1592
config.dll 3.0.0.1592
debugmsg.dll 3.0.0.1592
google.protocolbuffers.dll 2.4.1.555
google.protocolbuffers.serialization.dll 2.4.1.555
icsharpcode.sharpziplib.dll 0.86.0.518
log4net.dll 1.2.15.0
newtonsoft.json.dll 8.0.2.19309
newtonsoft.json.schema.dll 2.0.2.19309
osfchannel.dll 3.0.0.1592
protobuflist.dll 3.0.0.1592
remoteobject.dll 3.0.0.1592
svg.dll 2.2.1.39233
utility.dll 3.0.0.1592
ies\ieshotfix\xslt
-------------------------------------------------------------------
diskioc-filter.xslt *
invscan-to-table.xslt *
invscan-transform-specified.xslt *
invscan-transform.xslt *
ioc-filter.xslt *
native-ioc-filter.xslt *
quickinvioc-filter.xslt *
sweepioc-filter.xslt *
xml-to-detaillist.xslt *
xml2json.xsl *
ivp
-------------------------------------------------------------------
placeholder.txt *
run.bat *
ivp\ivphotfix
-------------------------------------------------------------------
ivpserverinstaller.exe 3.0.0.2732
ivp\ivphotfix\agentpackage
-------------------------------------------------------------------
hfx_ivp.zip *
hfx_ivp.zip.cat *
hfx_ivp_x64.zip *
hfx_ivp_x64.zip.cat *
instupg_ivp.zip *
instupg_ivp.zip.cat *
instupg_ivp_x64.zip *
instupg_ivp_x64.zip.cat *
iserviceinst.ini *
iserviceupd.ini *
openjdk
-------------------------------------------------------------------
bundledjava.zip *
B. Network Traffic Required in Deployment
-------------------------------------------------------------------
Estimated size (in terms of bandwidth) of deployed agent files
in this hotfix.
- 32-bit agent total = 295.7 MB
- 64-bit agent total = 304.1 MB
2. Documentation Set
To download or view electronic versions of the documentation set for this product, go to http://docs.trendmicro.com
- Online Help: The Online Help contains an overview of features and key concepts, and information on configuring and maintaining the product.
To access the Online Help, go to http://docs.trendmicro.com
- Installation Guide (IG): The Installation Guide contains information on requirements and procedures for installing and deploying the product.
- Administrator's Guide (AG): The Administrator's Guide contains an overview of features and key concepts, and information on configuring and maintaining the product.
- Getting Started Guide (GSG): The Getting Started Guide contains product overview, installation planning, installation and configuration instructions, and basic information intended to get the product 'up and running'.
- Support Portal: The Support Portal contains information on troubleshooting and resolving known issues.
- To access the Support Portal, go to http://success.trendmicro.com
3. System Requirements
4. Installation
Installing
To install:
- Copy the Patch executable file to a temporary folder on the server, for example, "C:\temp".
- Double-click the file. The modules are automatically copied to the correct destination.
This Patch installation package automatically rolls back the Apex One server to its previous configuration if there are problems during installation. If you encounter problems after installation, do a manual rollback.
Uninstalling
To manually roll back to the previous build:
- Locate the backup folder that the Patch package created in the "\PCCSRV\Backup\Patch3_B8358" directory.
- Stop the Apex One Master Service.
- Stop the Apex One Apex Central Agent Service.
- Copy the backup modules to the original folders.
- Start the Apex One Apex Central Agent Service.
- Start the Apex One Master Service.
5. Post-installation Configuration
No post-installation steps are required.
NOTE: Trend Micro recommends that you update your scan engine and virus pattern files immediately after installing the product.
6. Known Issues
Known issues in this release:
The user or account name in ADE detection may be empty.
The signer info of the ADE detection may not be found.
7. Release History
Prior Hotfixes
Only this Patch was tested for this release. Prior hotfixes were tested at the time of their release.A directory traversal vulnerability may allow an attacker to modify arbitrary files on the product's management console.
Solution
This critical patch updates the Apex One server program to remove the vulnerability.
Changes in the Google API prevents Data Loss Prevention™ (DLP) from detecting sensitive information sent through Gmail in Google Chrome 73.
Solution
This hotfix resolves the issue by enabling the DLP module to support the "Http/Https" and "Open file dialog" functionality in Google Chrome 73.
The tmlisten service stops unexpectedly when users add an NIC description in the Personal Firewall (PFW) profile and deploy the profile to agents.
Solution
This hotfix updates the Apex One Security Agent program to resolve the issue.
The Smart Scan Pattern of File Reputation Services occupies a large amount of disk space on the Apex One server.
Solution
This hotfix updates the Apex One server program to resolve this issue.
When users install Apex One and use a domain account to connect to the database, the installation will not be able to create a database and iES will not be installed successfully.
Solution
This hotfix updates the impersonate method to solve this issue.
When the Apex One environment runs an sqlpackage older that 2016 or one that contains both x86 and x64 versions of version 2016, iES will not be able to create the database because of an incompatible sqlpackage version.
Solution
This hotfix resolves the issue by enabling the installer to prioritize the x64 version of the sqlpackage during installation.
When a user starts a Security Agent outside the corporate network, the Security Agent does not communicate on Online status to the Edge Relay Server.
Solution
This hotfix updates Security Agent program to send an Online status to the Edge Relay Server as soon as the Security Agent program starts.
The Apex One Application Control lockdown feature does not work after users switch to a different user account.
Solution
This hotfix ensures that the feature works normally.
This hotfix updates the DLP template to reduce the performance impact of Apex One.
The Security Agent program may become corrupted when users install it from the MSI installation package (Windows Installer) using the wrong command in the command line.
Solution
This critical patch enables the Apex One security agent installation to abort the MSI installation process if it encounters an unexpected command.
An issue related to the Microsoft™ Excel™ files with macro content cannot be saved to a network shared folder from an endpoint, some Microsoft Excel temp files cannot be deleted after trying to save the files.
Solution
This critical patch updates the Apex One security agent program to resolve this issue.
This critical patch enables the Apex One security agent program to support Microsoft Windows™ 10 (version 1903) May 2019 Update.
An unquoted service path enumeration vulnerability may allow an attacker administrator privileges to the Apex One security agent service.
Solution
This hotfix updates the Apex One security agent program to remove the vulnerability.
Coexisting Apex One security agents cannot set the server information of the Smart Protection Service Proxy correctly. When this happens, the coexisting agents do not send query requests through the Smart Protection Service proxy but directly to the Trend Micro Smart Protection Network instead. This may cause a connection issue if the agents cannot connect to the Internet.
Solution
This hotfix updates the Apex One security agent program to resolve the issue.
The installation status on the "Agent Installation Progress" page of the Apex One web console is inaccurate.
Solution
This hotfix updates the Apex One server program to resolve this issue.
A specific keyword triggers the DLP template that does not have any criteria specified.
Solution
This hotfix updates the DLP template to resolve this issue.
The Connection Status (Online/Offline) of an agent on the web console changes each time a user logs on or off from the client computer.
Solution
This hotfix updates the Apex One agent program to resolve the issue.
Attempting to restart or stop the WMI service (winmgmt) is unsuccessful on endpoints with the Security Agent installed. The tmlisten service of the Security Agent has a dependency with the WMI service.
Solution
This hotfix updates the Security Agent program to remove the WMI service dependency.
When the Apex One server registers to the Apex Central server, the Apex One Master Service may stop unexpectedly because of an empty private key.
Solution
This hotfix updates the Apex One server program to ensure that it can handle an empty public/private key.
An "Error ID: 420" occurs while the Apex One Endpoint Sensor policy is deployed and the "Unable to get the registered server list. There are no registered servers." error appears on the Apex Central "Preliminary Investigation" page.
Solution
This hotfix helps prevent the Apex One Endpoint Sensor Advanced Threat Assessment Service from being corrupted when Endpoint Sensor is installed using Trend Micro Apex One Installer Maintenance Mode.
Users cannot export the Application Control criteria in Microsoft™ Internet Explorer™ or the Edge web browser.
Solution
This hotfix updates the Apex Central files to resolve this issue.
When the "Do not allow users to access the Security Agent console from the system tray or Windows Start menu setting" option is enabled on the Apex One web console, the Apex One Security Agent console cannot be accessed while "PccNT.exe" is running.
Solution
This hotfix updates a parameter in "wofielauncher.exe" to resolve the issue.
The Vulnerability Protection server service start up fails on platforms that disable Transport Layer Security (TLS) 1.0.
Solution
This hotfix updates the Vulnerability Protection server to prevent the TLS version issue.
Vulnerability Protection causes unusual CPU usage on some workstations and servers.
Solution
This hotfix modifies the Vulnerability Protection service to prevent unusual CPU usage.
This hotfix adds a dynamic share key for Apex One security agents in the encryption and decryption algorithm.
This hotfix adds new Regular Expressions to the Trend Micro Data Loss Prevention™ (DLP) Data Identifiers.
This hotfix updates the Apex Central files to display more information about the Application Control violation log entries.
NOTE: This feature requires the installation of Apex Central hotfix 3919 or above.
Security Agents with the Behavior Monitoring program inspection feature enabled may cause Adobe Acrobat/Reader to stop unexpectedly.
Solution
This hotfix updates the program inspection feature to resolve this issue.
When users attempt to configure the Device Control settings on an Apex One Security Agent by deploying a policy from the Apex Central web console, the Device Control settings cannot be applied on the agent if Data Loss Prevention™ (DLP) is not enabled on the agent.
Solution
This hotfix updates the Apex One server program to resolve this issue.
If the activation (AC) key is deployed after its expiration date has been extended, the ES service will still receive the original expiration date.
Solution
This hotfix ensures that the ES service will receive the AC key's new expiration date.
The Endpoint Sensor may purge the Root Cause Analysis results by mistake when Apex Central is managing more than one Apex One server.
Solution
This hotfix resolves the issue.
In rare instances, the Endpoint Sensor may receive the investigation results from an agent at the same time that the same agent is being uninstalled. When this happens, the Endpoint Sensor may not be able to send all the results back to TIC.
Solution
This hotfix prevents this issue.
An issue related to the Microsoft™ Monitoring Agent may cause the Apex One Endpoint Sensor Advanced Threat Assessment Service application pool to stop unexpectedly after installing the Apex One server.
Solution
This hotfix prevents the Apex One Endpoint Sensor Advanced Threat Assessment Service compatibility issue with the Microsoft Monitoring Agent.
There is a typographical error in the "Type the full program path" hint on the "Behavior Monitoring Settings" page of the Apex One web console.
Solution
This hotfix updates the Apex One server files to correct the error.
An issue causes Apex One security agent remote installation to fail.
Solution
This hotfix updates the Apex One server program to resolve this issue.
An issue prevents the Data Loss Prevention™ (DLP) license from being deployed from Apex Central to Apex One.
Solution
This hotfix adds support for the DLP AC key type to solve this issue.
An access denied error related to a certain component prevents the Trend Micro Advanced Threat Assessment Service (ATAS) from starting successfully.
Solution
This hotfix resolves the error so ATAS can start normally.
The operating system may stop responding when users switch both the Scan Engine (VSAPI) and the Endpoint Sensor to debug mode at the same time using the Case Diagnostic Tool (CDT).
Solution
This hotfix resolves the issue by ensuring that CDT works normally when both VSAPI and Endpoint Sensor are enabled.
An Apex One agent that runs on Windows 7 and automatically detects proxy settings will not be able to connect to the Apex One server.
Solution
This hotfix resolves the issue by updating the Apex One agent program to ensure that it can retrieve the correct proxy configuration.
When the agents call "cgiOnScan.exe" and fails, the system keeps resending the request without waiting. This issue generates lots of records in the IIS log.
Solution
This hotfix updates the Apex One agent program to wait for few seconds before retrying.
This hotfix enables Apex One to send "Dropped" and "Accepted" action results in firewall violation logs to Apex Central. This ensures that both action results display normally on Apex Central instead of being displayed as "unknown".
TmListen stops unexpectedly when the Apex One agent queries Suspicious Object (SO) information that contains a null notify setting.
Solution
This critical patch updates Apex One agent program to resolve the issue.
On the 64-bit Microsoft ™ Windows ™ 10 platform, an error occurs while running a 64-bit debug script in Microsoft Visual Studio 2017.
Solution
This critical patch updates the Behavior Monitoring Module to prevent the error.
The Apex One server may not be able to register to the Apex Central server if the TLS 1.2 protocol is enabled on Apex One servers only.
Solution
This critical patch updates the Apex One server program to resolve this issue.
Procedure
To apply the solution:
- Install this critical patch (see "Installation").
- Open the "Agent.ini" file in the "\PCCSRV\CmAgent\" folder on the Apex One server installation directory using a text editor.
- Under the "Network" section, manually modify the value of the following key.
- [Network]
- SSL_Cipher_List=ECDHE-RSA-AES256-GCM-SHA384
- Save the changes and close the file.
- Unregister from the Apex Central server.
- Register the Apex Central again.
The Apex One server tool "IpXfer.exe" cannot run properly when the Apex One Security Agent is offline.
Solution
This critical patch updates Apex One server tools to resolve this issue.
The Apex One server updates the timestamp of the Last Spyware Scan (Manual) according to the last connection establishment time.
Solution
This critical patch updates the Apex One server program to ensure that the last Spyware Scan (Manual) time is updated accurately.
When users create a "Setup" installer package for the Apex One security agent using Agent Packager, the Vulnerability Protection and Application Control agent installers are not included by default.
Solution
This critical patch updates the Apex One server program to ensure that the Agent Packager includes both installers in the Apex One security agent "Setup" installer package.
The digital signature of some DLP files are expired.
Solution
This critical patch updates the DLP module to update the digital signatures.
The DLP module does not work on the Microsoft Edge web browser.
Solution
This critical patch updates the DLP module to resolve this issue.
Procedure
To enable Apex One security agents to block sensitive information on the Edge web browser.
- Install this critical patch (see "Installation").
- Open the "dlp.ini" file in the "\PCCSRV\Private\" folder on the Apex One server.
- Under the "Configure" section, manually add the following key and value.
- [Configure]
- ENABLE_DYNAMIC_CODE_POLICY=true
- Save the changes and close the file.
- Open the Apex One web console and click "Agents > Agent Management > Select domains or agents > Settings > DLP settings".
- Click "Save" to deploy the settings to agents. The Apex One server deploys the settings to Apex One agents and adds the following key in the "dsa.pro" file in the "\Windows\System32\dgagent\" folder:
- enable_dynamic_code_policy=true
Users cannot expand the domains or add spyware/greyware detections into the approve list on the Apex One server web console.
Solution
This critical patch updates the Apex One server files to resolve this issue.
Duplicate Apex One agents appear in the Microsoft Windows Startup console.
Solution
This critical patch updates the Apex One server programs to resolve this issue.
When the trust permission of the Application Control Criteria is set to "Inheritable execution rights", the criteria information remains on the Apex One Security Agent database after users remove the criteria from the policy setting.
Solution
This critical patch ensures that the criteria information can be removed normally from Apex One Security Agents.
In rare situations, the Apex One Vulnerability Protection program uses up a huge amount of memory when processing a large number of Intrusion Prevention logs.
Solution
This critical patch prevents the high memory usage issue when the Apex One Vulnerability Protection program processes a large number of Intrusion Prevention logs.
The Apex One server does not send the policy information to Apex Central after deploying a policy.
Solution
This issue updates the Apex One server program to resolve this issue.
An access denied error related to a certain component prevents the Trend Micro Advanced Threat Assessment Service (ATAS) from starting successfully.
Solution
This critical patch resolves the error so ATAS can start normally.
An issue related to the Microsoft™ Monitoring Agent may cause the Apex One Endpoint Sensor Advanced Threat Assessment Service application pool to stop unexpectedly after installing the Apex One server.
Solution
This critical patch prevents the Apex One Endpoint Sensor Advanced Threat Assessment Service compatibility issue with the Microsoft Monitoring Agent.
An "Error ID: 420" occurs while the Apex One Endpoint Sensor policy is deployed and the "Unable to get the registered server list. There are no registered servers." error appears on the Apex Central "Preliminary Investigation" page.
Solution
This critical patch helps prevent the Apex One Endpoint Sensor Advanced Threat Assessment Service from being corrupted when Endpoint Sensor is installed using Trend Micro Apex One Installer Maintenance Mode.
The Trend Micro Vulnerability Protection Service cannot start while processing a specific certificate.
Solution
This critical patch updates the Apex One Vulnerability Protection server to prevent the certificate processing error.
This critical patch updates some Apex One files to detect inconsistent certifications from the Microsoft Management Console certificate store. If it detects an inconsistency, Apex One will automatically recover the authentication file (OfcIPCer.dat) from the Microsoft Management Console certificate store on the Apex One server.
During license key deployment, Endpoint Sensor may not be able to receive the product key and storage key properties.
Solution
This hotfix improves the Apex One server's key deployment mechanism to solve this issue.
Some Security Agents may be unable to retrieve new policy settings from the Apex Central server.
Solution
This hotfix purges old policy records from the policy tracking table to fix this issue.
The Endpoint Sensor on Apex One agents may not be able to calculate the hash value of a specific process which can prevent the terminate process function from terminating the process.
Solution
This hotfix updates the Endpoint Sensor hash calculation mechanism to resolve this issue.
The Endpoint Sensor feature has been enhanced to only monitor and record memory "Read" events for the lsaas.exe process. All other "Read" events are ignored. In addition, a cache has been implemented for processes that open the memory "Write" event to avoid recording duplicated events that may cause a resource issue on the endpoint.
The "Active Directory Integration" page may expose the credential key when the page is opened with developer tools on a web browser.
Solution
This hotfix updates the Apex One server program to remove the vulnerability.
When the Trend Micro Data Loss Prevention™ (DLP) service is enabled on Apex One security agent computers, Google Chrome version 75 and higher versions may stop unexpectedly while accessing certain URLs.
Solution
This hotfix updates the DLP module to resolve this issue.
On the web console, "Advanced Search" from "Agents > Agent Management" page yields inaccurate results when the "Restart Required" is enabled and both "Update" and "Cleanup" options are selected.
Solution
This hotfix updates the Apex One server program to resolve the problem.
In Microsoft™ Windows™ 10, the new system process "MemCompression" may incorrectly trigger a false detection for violating the Device Access Control (DAC) policies.
Solution
This hotfix updates the DAC policies to prevent the false alarms.
Users are able to change to a password that contains German Umlaut characters but will not be allowed to log in to the web console after the change. The pop-up error message is not triggered that prevents from saving invalid password.
Solution
This hotfix updates the server program to ensure that the corresponding pop-up error message that prevents users from saving invalid passwords is triggered correctly.
When users deploy an agent policy to enable or disable the Endpoint Sensor feature while registering or unregistering from the TIC at the same time, the policy deployment will fail.
Solution
This hotfix updates the policy deployment mechanism to solve the policy conflict issue.
After a hotfix is applied, the pattern version and last update time of "Certified Safe Software pattern" are reset to "0", and as a result, the wrong pattern information appears on the Apex Central dashboard.
Solution
This hotfix updates the Apex One server files to resolve this issue.
This hotfix integrates an Antimalware Scan Interface (AMSI) for suspicious PowerShell detection to the Endpoint Sensor.
The device control function does not work if the policy is deployed for a specific user and the username contains Hebrew characters.
Solution
This hotfix updates Apex One security agent program to resolve the issue.
The Smart Scan Service may behave abnormally on Apex One Security Agents when multiple proxy servers have been configured for each protocol (HTTP, Secure, FTP, Socks) in the Microsoft™ Internet Explorer™.
Solution
This hotfix updates the Apex One Security Agent program to ensure that the Smart Scan Service works normally when multiple proxy servers are configured for Internet Explorer.
Users may not be able to activate managed product licenses (Application Control, Endpoint Sensor, Vulnerability Protection) or may not be able to send the enhanced security policies to Security Agents across the network successfully when managing the Apex One server from the Apex Central web console. This happens because the specified Microsoft Windows™ account that manages the existing Apex One SQL database does not have sufficient web service framework access permissions.
Solution
This hotfix resolves the issue by updating the SQL Server Database Configuration Tool to add the Windows account to the IIS_IUSRS group to obtain the correct permissions.
Procedure
To add the Windows account to the IIS_IUSRS group to obtain the correct permissions:
- Install this hotfix (see "Installation").
- On the Apex One server computer, browse to "<Server installation folder>\PCCSRV\Admin\Utility\SQL".
- Double-click "SQLTxfr.exe" to run the tool.
- Provide the authentication credentials of the Windows account for the SQL Server database. IMPORTANT: The user account must belong to the local administrator group or Active Directory (AD) built-in administrator.
- Click "Start" to apply the configuration changes.
Users may not be able to activate managed product licenses (Application Control, Endpoint Sensor, Vulnerability Protection) or may not be able to send the enhanced security policies to Security Agents across the network successfully when managing the Apex One server from the Apex Central web console. This happens because:
- The specified Windows account that manages the existing Apex One SQL database changes the logon credentials used to connect to the existing database.
- Users change the Authentication Type of the existing Apex One SQL database from "Windows Account" to "SQL Server Account".
Solution
This hotfix updates the SQL Server Database Configuration Tool to ensure that the Apex One server uses the correct authentication credentials for the SQL Server database.
Procedure
To ensure that the Apex One server uses the correct authentication credentials for the SQL Server database:
- Install this hotfix (see "Installation").
- On the Apex One server computer, browse to "<Server installation folder>\PCCSRV\Admin\Utility\SQL".
- Double-click "SQLTxfr.exe" to run the tool.
- Provide the authentication credentials for the SQL Server database. IMPORTANT: The user account must belong to the local administrator group or AD built-in administrator.
- Click "Start" to apply the configuration changes.
This hotfix improves the accuracy of the Apex One Application Control version reporting to Apex Central.
The Apex One Security Agent service stops responding while starting after Apex One Hotfix 1141 is applied.
Solution
This hotfix updates the Apex One security agent program to resolve this issue.
An issue prevents users from successfully installing the Application Control agent on endpoints with Chinese computer names.
Solution
This hotfix resolves the issue so the Application Control can be installed successfully on affected endpoints.
The information in the "action" column on Data Loss Prevention™ (DLP) logs in Apex One server is not consistent with the corresponding information in the DLP logs on Apex Central server.
Solution
This hotfix resolves the issue by modifying the wording in the "action" column in DLP logs on both the Apex One server and agents.
An issue prevents the Trend Micro Advanced Threat Assessment Service from starting successfully.
Solution
This hotfix resolves the issue.
Garbled characters may appear in syslog if the language setting of the operating system contains Big-5 characters.
Solution
This hotfix resolves the issue.
The Apex One Endpoint Sensor cannot detect the dump of lsass.exe (Local Security Authority Process).
Solution
This hotfix resolves this issue by adding hooking points for event correlation to detect the suspicious attack behavior.
Advanced Threat Assessment has a new process that collects additional information.
After a built-in Active Directory (AD) user group, for example "Administrators", is added in the "User Accounts" settings, and users login to Apex One using an AD account in this group, the Apex One console will not display any user or domain in "Agent Management" view.
Solution
This hotfix updates Apex One server program to resolve the issue.
This hotfix enables Apex One to support Microsoft Windows 8.0.
NOTE: If the security agent has been installed on Windows 8.0, it will be registered to the Apex One server after it restarts.
This hotfix updates the Trend Micro Data Loss Prevention™ (DLP) module to ensure that it can block drag-and-drop file operations in Google Chrome 76 and 77.
In certain environments, the Behavior Monitoring feature may add the "csrss.exe" file to the kernel exception later than expected which can then cause an interoperability issue that can trigger security agent computers to stop unexpectedly.
Solution
This hotfix updates the Behavior Monitoring module and enables users to configure the Behavior Monitoring feature to add "csrss.exe" to the kernel exception earlier to prevent the interoperability issue.
Procedure
To apply and deploy the solution globally:
- Install this hotfix (see "Installation").
- Open the "ofcscan.ini" file in the "\PCCSRV\" folder on the Apex One server installation directory.
- Under the "Global Setting" section, manually add the "AegisAsyncCsrssEvent" key and set its value to "1".
- [Global Setting]
- AegisAsyncCsrssEvent=1
- Save the changes and close the file.
- Open the Apex One web console and go to the "Agents > Global Agent Settings" screen.
- Click "Save" to deploy the setting to agents. The Apex One server deploys the command to security agents and adds the following registry entry on all security agent computers:
- Path: HKEY_LOCAL_MACHINE\SOFTWARE\TrendMicro\AEGIS
- Key: AsyncCsrssEvent
- Type: DWORD
- Value: 1
- Restart the security agent
Enhanced security policies may not be sent to Security Agents across the network successfully when users manage the Apex One server from the Apex Central web console. This happens when the Apex One SQL database is installed on a Microsoft™ SQL Server that users a collation method other than the default "SQL_Latin1_General_CP1_CI_AS".
Solution
This hotfix updates the Apex One server program to resolve this issue.
This hotfix enables users to query the OSFWebApp web service status through the "svrsvcsetup.exe" tool using the following command on the Apex One server command prompt.
svrsvcsetup.exe -testosfwebapp
This hotfix enables users to search for multiple agents on the "Agent Management" page by specifying multiple agent names in the "Search for endpoints" text box.
NOTES:
- Use a blank character " " delimiter to separate each agent name in the "Search for endpoints" text box.
- The field supports wildcard characters. Use a question mark "?" to represent a single character and an asterisk "*" to represent several characters.
- The field supports a maximum of 256 characters.
A directory traversal vulnerability may allow an attacker to log on to the Apex One Management Console as a root user.
Solution
This critical patch updates the Apex One server program to remove the vulnerability.
A command injection vulnerability may allow an attacker to extract files from an arbitrary zip file to the specific folder in Apex One server.
Solution
This critical patch updates the Apex One server program to remove the vulnerability.
This hotfix provides a way to delay Application Control hooking events while an endpoint computer starts up.
Procedure
To apply this solution:
- Install this hotfix (see "Installation").
- Unload the Apex One security agent.
- Open the registry editor, add the following key, and specify the preferred time delay in minutes:
- Key: HKEY_LOCAL_MACHINE\SOFTWARE\TrendMicro\iACAgent\DelayLoadAC
- Type: DWORD
- Valid Range: 0-10 (min)
- Restart the Apex One security agent.
The Apex One security agent does not send the "Logon User" information to the Apex One server when the Apex One server restricts the user's access to the security agent console only from the system tray or from the Microsoft™ Windows™ "Start" menu.
Solution
This hotfix updates the Apex One security agent program to ensure that Apex One security agents send the "Logon User" information to the Apex One server under the scenario described above.
The Apex One Endpoint Sensor receives several user mode events that can prevent Microsoft™ RemoteApp from updating the event source.
Solution
The Apex One Endpoint Sensor changes the event source from User mode to kernel mode to resolve this issue.
The Export Info Tool stops unexpectedly when querying virus logs.
Solution
This hotfix updates the Apex One server program to resolve the issue.
Users may not be able to activate managed product licenses (Application Control, Endpoint Sensor, Vulnerability Protection) across the network successfully when managing the Apex One server from the Apex Central web console. This happens because the Apex One server does not handle the license key string properly.
Solution
This hotfix updates the Apex One server program to resolve this issue.
The Apex One NT Listener service (TmListen.exe) may cause a high CPU usage issue on security agents.
Procedure
To apply and deploy the solution globally:
- Install this hotfix (see "Installation").
- Open the "Ofcscan.ini" file in the "\PCCSRV" folder of the Apex One server installation directory using a text editor.
- Under the "Global Setting" section, manually add the following key and set its value to "1".
- [Global Setting]
- IgnoreScanIncompleteFlagFromServer=1
- Save the changes and close the file.
- Open the Apex One Web console and go to the "Agents > Global Agent Settings" screen.
- Click "Save" to deploy the setting to agents. The Apex One server deploys the command to Apex One agents and adds the following registry entry on all Apex One agent endpoints:
- Path: HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\TrendMicro\PC-cillinNTCorp\CurrentVersion\URL Filtering
- Key: IgnoreScanIncompleteFlagFromServer
- Type: DWORD
- Value: 1
The Trend Micro Vulnerability Scanner (TMVS) cannot perform remote installation when the logon account password includes special characters.
Solution
This hotfix updates TMVS to resolve this issue.
On the Apex One web console, users may be able to view the user account that have just been logged out by pressing the back button of the web browser.
Solution
This hotfix updates the Apex One server program to prevent this issue from occurring.
On the Apex One web console, the "PHPSESSID" and "wf_CSRF_token" cookies are the same for every logon session.
Solution
This hotfix ensures that the widget framework generates new "PHPSESSID" and "wf_CSRF_token" cookies for each new logon session.
An issue prevents the Apex One server from deploying the following settings to Apex One security agents properly.
Under the "Privileges and Other Settings > Other Settings".
- Do not allow users to access the Security Agent console from the system tray or Windows Start menu
Solution
This hotfix updates the Apex One server program to resolve the issue.
The maximum supported character length of the following registry key on Apex One security agents may be insufficient to save the proxy exceptions list.
- [HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\TrendMicro\PC-cillinNTCorp\CurrentVersion]
- WinProxySpecifiedProxyBypass
Solution
This hotfix extends the registry key's maximum supported character length to resolve this issue.
A performance issue occurs on Apex One agent computers because a module generates a large number of logs.
Solution
This hotfix updates the user mode event related module to version 8.5.2065 to solve the issue.
The Apex One Predictive Machine Learning feature may prevent users from running scripts through a third-party application normally.
Solution
This hotfix provides a way for users to make and edit a list of approved programs to run with deferred scanning by Predictive Machine Learning to prevent these issues.
Procedure
To create and edit the list of approved programs to run with deferred scanning by Predictive Machine Learning:
- Install this hotfix (see "Installation").
- Open the "Ofcscan.ini" file in the "\PCCSRV\" folder on the Apex One server installation directory.
- Under the "Global Setting" section, manually add the following keys and specify each approved program separately.
- [Global Setting]
- DS_ProcessCount=the number of programs in the approved list, supports any integer from 1 to 1000
- DS_ProcessName000=process name of the approved program, where "000" notes the first item on the list
For example:
- [Global Setting]
- DS_ProcessCount=2
- DS_ProcessName000=cscript.exe
- DS_ProcessName001=wscript.exe
- Save the changes and close the file.
- Open the Apex One web console and go to the "Agents > Global Agent Settings" screen.
- Click "Save" to deploy the setting to agents. The Apex One server deploys the command to security agents and adds the following entries of TXS.ini on all security agent computers:
- [TrendX_Settings]
- DS_ProcessCount=2
- DS_ProcessName000="The encrypted string of the preferred program"
- DS_ProcessName001="The encrypted string of the preferred program"
The Apex One Vulnerability Protection service cannot start successfully on the Turkish version of the Microsoft™ Windows™ server platform because it uses the all caps version of the database column name, "SYSTEMVERSİONID".
Solution
This patch updates the database column name in the Apex One Vulnerability Protection server to "SystemVersionID" to resolve this issue.
A program on an endpoint triggers the Behavior Monitoring module.
Solution
This patch adds a command related to the program to the exception list to solve this issue.
Procedure
To apply and deploy the solution globally:
- Install this patch (see "Installation").
- Open the "ofcscan.ini" file in the "\PCCSRV\" folder on the Apex One server installation directory.
- Under the "Global Setting" section, manually add the following keys and values.
- [Global Setting]
- AegisSPSetCMDCount=1
- AegisSPSetCMDSubImagePath0=C:\Windows\System32\cmd.exe
- AegisSPSetCMDImagePath0=certutil.exe
- AegisSPSetCMDCmdLine0=-urlcache-splithttpzip*
- AegisSPSetCMDAct0=0
- Save the changes and close the file.
- Open the Apex One web console and go to the "Agents > Global Agent Settings" screen.
- Click "Save" to deploy the settings to agents. The Apex One server deploys the command to security agents and adds the following registry entries on all security agent computers:
- Path: HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\TrendMicro\PC-cillinNTCorp\CurrentVersion\AEGIS
- Key: AegisSPSetCMDCount
- Type: DWORD
- Value: 1
- Path: HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\TrendMicro\PC-cillinNTCorp\CurrentVersion\AEGIS
- Key: AegisSPSetCMDSubImagePath0
- Type: REG_SZ
- Value: C:\Windows\System32\cmd.exe
- Path: HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\TrendMicro\PC-cillinNTCorp\CurrentVersion\AEGIS
- Key: AegisSPSetCMDCmdLine0
- Type: REG_SZ
- Value: -urlcache-splithttpzip*
- Path: HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\TrendMicro\PC-cillinNTCorp\CurrentVersion\AEGIS
- Key: AegisSPSetCMDImagePath0
- Type: REG_SZ
- Value: certutil.exe
- Path: HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\TrendMicro\PC-cillinNTCorp\CurrentVersion\AEGIS
- Key: AegisSPSetCMDAct0
- Type: DWORD
- Value: 0
- Restart the security agent
This patch enables the Apex One security agent program to support Microsoft Windows™ 10 (version 1909) November 2019 Update.
This patch adds a mechanism that can help reduce the probability of errors during Apex One server and Apex One security agent updates.
On computers with low specifications, the Application Control agent may run into performance issues when several applications installed on the computer match the Application Control criteria.
Solution
This hotfix helps prevent the performance issues by enabling the Application Control agent to store matched applications in the criteria cache after these applications run for the first time.
A "Failed to get server certificate." error appears on the installation log during Advanced Threat Assessment Service installation.
Solution
This hotfix resolves the error so the Advanced Threat Assessment Service can be installed successfully.
The real-time scan exception settings from the Apex One security agent are restored unexpectedly after an Apex One security agent update.
Solution
This hotfix updates the Apex One security agent program to preserve the current real-time scan exception settings after an Apex One security agent update.
The Apex One agent keeps track of un-scanned files but does not send the information to the server, so users do not see the information on the Apex One server.
This hotfix enables Apex One agents to upload un-scanned file logs to the "C:\Program Files (x86)\Trend Micro\Apex One\PCCSRV\Log\UnScanFile" folder on the server.
When administrators set the Internet proxy settings from the browser, the Apex One Security proxy always applies the Internet proxy settings to update components from the Trend Micro Global ActiveUpdate server instead of the Apex One server.
Solution
This hotfix enables the Security Agent console to allow administrators the option to choose and apply "Use Windows Internet Options Settings" when updating components.
By default, the system does not apply and update components from the Apex One server.
The Application Control agent service is dependent on some Microsoft™ Windows™ services. If some Windows services are not running, the system does not start the Application Control agent service.
Solution
This hotfix resolves the Application Control agent service dependency issue. After applying this hotfix, the Application Control agent service starts some Windows services automatically as it is starts up.
The system cannot successfully install the Application Control server if the SQL server contains a semi-colon (";") in its password.
Solution
This hotfix resolves this issue so that the system can install the Application Control server successfully.
Data Loss Prevention™ (DLP) feature may slow down the performance of certain web applications on the Apex One Security agent.
Solution
This hotfix updates the DLP module to resolve this issue.
NOTE: Please refer to the following link for the steps to manually set the monitored websites if customer need: https://success.trendmicro.com/intkb/solution/1120248
The 3rd-party ICE WebStart program cannot be launched while the Apex One Firewall service is running.
Solution
This hotfix updates the Trend Micro Apex One Firewall components and provides a way to prevent this issue from occurring.
Procedure
To enable the new settings:
- Install this hotfix (see "Installation").
- Open the "Ofcscan.ini" file in the "\PCCSRV\" folder of the Apex One server installation directory using a text editor.
- Under the "Global Setting" section, manually add the following key and set its value to "256".
- [Global Setting]
- PFW_KEventMaxCount=256
- Save the changes and close the file.
- Open the Apex One web console and go to the "Agents > Global Agent Settings" screen.
- Click "Save" to deploy the setting to agents. The Apex One server deploys the command to Apex One agents and adds the following registry entry on all Apex One agent endpoints:
- Path: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\tmWfp\Parameters
- Key: KEventMaxCount
- Type: REG_DWORD
- Value: 256 (0x100)
- Restart the Apex One agent machines.
The Apex One Behavior Monitoring feature may prevent users from opening Microsoft Office applications normally and may cause high CPU usage issues on protected computers.
Solution
This hotfix updates the Apex One agent program to resolve this issue.
Procedure
To apply and deploy the solution globally:
- Install this hotfix (see "Installation").
- Open the "ofcscan.ini" file in the "\PCCSRV\" folder on the Apex One server installation directory.
- Under the "Global Setting" section, manually add the "UnregUMHEventList" key and set its value to "140".
- [Global Setting]
- UnregUMHEventList=140
- Save the changes and close the file.
- Open the Apex One web console and go to the "Agents > Global Agent Settings" screen.
- Click "Save" to deploy the setting to agents. The Apex One server deploys the command to security agents and adds the following registry entry on all security agent computers:
- Path:
- For x64 platforms: HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\TrendMicro\PC-cillinNTCorp\CurrentVersion\AEGIS\
- For x86 platforms: HKEY_LOCAL_MACHINE\SOFTWARE\TrendMicro\PC-cillinNTCorp\CurrentVersion\AEGIS\
- Key: UnregUMHEventList
- Type: String
- Value: "The encrypted string with the prefix !CRYPTEX!"
- Restart the Apex One security agent.
This hotfix enables the Apex One server to download the list of approved mobile devices and USB storage devices from the Device Control settings in the Apex Central server and to deploy the list to Apex One security agents.
Procedure
To configure Apex One server to download and deploy the Device Control approved list of mobile devices and USB storage devices from the Apex Central server to all Apex One security agents:
- Run the Device List Tool (listDeviceInfo.exe) to retrieve the device information. The tool provides Vendor, Model, Serial ID, and Device information for each device.
- Make a Device Control approved list in CSV file format specifying the Vendor, Model, Serial ID, and Device information of mobile devices and USB storage devices.
For example:
- 05AC,12A8,35AD13C948ECD47904B2B7AD4D5E8AFBF4C70C48,Mobile Devices
- ADATA,DC1A,285252344010000C,USB Storage Devices
NOTE: The "Device" field is optional, if there is no device type listed in the CSV file, it will be treated as "USB Storage Devices".
- Copy the CSV file to the Apex Central server in the "\Trend Micro\Control Manager\WebUI\WebApp\widget\repository\widgetPool\product\OSCE\" folder and rename the CSV file as "dc_dev_exception.csv".
NOTE: Users can import the Device Control approved list from the "Policies > Policy Resources > Device Control Allowed Devices" page of the Apex Central console.
- Deploy an Apex One Security Agent policy with Device Control setting to agents from the Apex Central console. All agents will receive the approved list.
NOTE: On the Apex One server, users can check the "DC_GLOBAL_DEV_EXCEPTION" section in "dlp.ini" file under the "\PCCSRV\Private" folder.
For example:
- [DC_GLOBAL_DEV_EXCEPTION]
- DevExceptionGlobalCount=2
- DevExceptionGlobal_00000000= VendorName,Model,serialNo,1(USB Storage Devices)
- DevExceptionGlobal_00000001=VendorName,Model,serialNo,2097152(Mobile Devices)
On the Apex One security agent, users can check the "dc_in.xml" and "dc_out.xml" file under the "\Security Agent\dlplite" folder.
For example:
- <usbException exceptionDeviceType="0x00000001"(USB Storage Devices) serialNo="xxxxxxxx" model=" xxxxxxxx " vendorName="xxxxxxxx "/>
- <usbException exceptionDeviceType="0x00200000"(Mobile Devices) serialNo=" xxxxxxxx " model=" xxxxxxxx " vendorName="xxxxxxxx "/>
This hotfix removes the "Enable debug log" check box from the "Debug Log Setting" window in the Apex One console.
Apex One security agents may encounter a blue screen of death (BSOD) when the Osprey kernel file (tmusa.sys) is unloaded unexpectedly.
Solution
This critical patch updates the Trend Micro EagleEye Driver to resolve this issue.
A high CPU usage issue occurs on the Apex One server computer.
Solution
This critical patch updates the Attack Discovery pattern to help prevent the high CPU usage issue on the Apex One server computer.
The PowerShell command line sometimes automatically converts uppercase characters to lowercase.
Solution
This critical patch ensures that the PowerShell command line does not automatically convert uppercase characters to lowercase.
A potential process communication risk in the security agent exists in the Apex One server.
Solution
This critical patch updates the Apex One server program to remove this vulnerability.
A potential file deletion issue with system privileges exists via a Directory Traversal vulnerability in security agents.
Solution
This critical patch updates the Apex One server program to remove this vulnerability.
A potential issue with file uploads exists via a Directory Traversal vulnerability in security agents.
Solution
This critical patch updates the Apex One server program to remove this vulnerability.
The "Plug-ins" page does not display normally when users Single Sign-On (SSO) to the Apex One web console from the Apex Central web console.
Solution
This critical patch updates the Apex One server files to resolve this issue.
This critical patch integrates Windows Antimalware Scan Interface (AMSI) with Apex One to improve protection against malicious scripts.
Procedure
To enable the new settings:
- Install this critical patch (see "Installation").
- Open the Apex One web console and go to the "Agent > agent management" page.
- Right-click to select the specific domain or agents and go to the "Settings > Behavior Monitoring Settings" screen.
- Tick the "Enable program inspection to detect and block compromised executable files" and "Terminate programs that exhibit abnormal behavior associated with exploit attacks".
- Save the changes.
- The Apex One server deploys the following registry entry on the selected security agent computers:
- Path:
- For x64 platforms: HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\TrendMicro\PC-cillinNTCorp\CurrentVersion\AEGIS\
- For x86 platforms: HKEY_LOCAL_MACHINE\SOFTWARE\TrendMicro\PC-cillinNTCorp\CurrentVersion\AEGIS\
- Key: EnableUMH / EnableUMHExploit
- Type: REG_DWORD
- Value: 1 (0x00000001)
This critical patch enhances the security of the Server Migration Tool.
This critical patch updates the program update checking logic on Apex One security agents to help ensure that only authentic program updates are applied.
This critical patch adds Endpoint Sensor features by enabling the use of on-premises Apex Central to manage on-premises Apex One servers. This enhancement requires users to upgrade on-premises Apex One servers to Build 2117 and on-premises Apex Central servers to Build 4363 or any higher build.
An issue prevents the Application Control agent service from initializing the Digital Signature Pattern (tmwlchk.ptn) in lockdown mode. Application Control needs this pattern to determine which applications are from trusted Trend Micro vendors to be able to allow these applications to run from a protected computer.
Solution
This hotfix updates the Application Control files to resolve this issue.
Executable files take a long time to launch on network drives when the Behavior Monitoring service is enabled.
Solution
This hotfix updates the Behavior Monitoring module to resolve this interoperability issue.
Procedure
To apply and deploy the solution globally:
- Install this hotfix (see "Installation").
- Open the "Ofcscan.ini" file in the "\PCCSRV\" folder of the Apex One server installation directory using a text editor.
- Under the "Global Setting" section, manually add the following key and set its value to "1".
- [Global Setting]
- AegisSkipNotificationEvent=1
- AegisSkipCreateProcessWithCmdLineEvent=1
- Save the changes and close the file.
- Open the Apex One web console and go to the "Agents > Global Agent Settings" screen.
- Click "Save" to deploy the setting to agents. The Apex One server deploys the command to security agents and adds the following registry entry on all security agent endpoints:
- Path: HKEY_LOCAL_MACHINE\SOFTWARE\TrendMicro\AEGIS
- Key: SkipNotificationEvent
- Key: SkipCreateProcessWithCmdLineEvent
- Type: DWORD
- Value: 1
The Apex One firewall service may block the connection to version 12.1.51.19 of the Citrix Gateway.
Solution
This hotfix updates the Apex One security agent program to ensure that the firewall policy exception list works normally.
The exceed unmanaged agents IP ranges logs cannot be displayed when there are more than 201 sets of IP ranges.
Solution
This hotfix updates the Apex One server program to resolve this issue.
An issue prevents Apex One security agents from updating the Data Loss Prevention™ (DLP) policy successfully.
Solution
This hotfix updates the DLP module to resolve this issue.
The DLP service triggers an alert on a single instance of Movement Reference Number (MRN) when sending as an email.
Solution
This hotfix updates the DLP module to resolve this issue.
The link on the Apex One server dashboard notification redirects to an unavailable website.
Solution
This hotfix updates the Apex One server HTML files to ensure that the link redirects to the correct website.
Security Agents should use the configured Smart Protection Service Proxy settings when querying Smart Protection sources for the Predictive Machine Learning and the Behavior Monitoring features. However, Security Agents still use the proxy settings configured in Microsoft™ Internet Explorer™ to access the network even when the Smart Protection Service Proxy is enabled.
Solution
This hotfix updates the Apex One agent program to resolve this issue.
An Apex One agent installed on Microsoft Windows™ Server 2016 may appear "Offline" on the Apex One web console. This happens because the HTTPS communication port of the agent cannot be successfully initialized for listening while the protected computer starts.
Solution
This hotfix updates the Apex One agent program to prevent this issue from occurring.
An ADOexception error appears in Apex One server's Event Viewer logs when the Apex One Database Service encounters an exception because an invalid GUID was sent to the SQL server.
Solution
This hotfix updates the Apex One server program to resolve this issue.
If OfficeScan 11.0 or OfficeScan XG Agent (before Service Pack 1) is upgraded to Apex One Agent, clients will not be able to establish a connection to the server because the agent now uses HTTP communication but the server incorrectly recognizes it as HTTPS. As a result, the client appears offline on the web console.
Solution
This hotfix updates the Apex One program to resolve this issue.
The ASE setting on the agent side switches to "0" unexpectedly.
Solution
This hotfix updates the Apex One security agent program to prevent this issue.
This hotfix extends the validity of Microsoft certificates for some expired DLP drivers.
The Apex One Behavior Monitoring feature may use up a huge amount of memory on certain protected computers.
Solution
This patch updates the Behavior Monitoring module to resolve this issue.
The following two issues related to the Apex One Data Protection Service may occur on protected computers:
- Users may have trouble accessing the https://fast.com website.
- Agents cannot connect to VPN through the Cisco AnyConnect Secure Mobility Client.
Solution
This patch updates the Data Loss Prevention™ (DLP) module to resolve this issue.
The DLP module cannot properly block users from uploading file attachments on endpoints running Microsoft™ Windows™ 10 Redstone 5 (version 1809).
Solution
This patch updates the DLP module to resolve this issue.
This patch applies updates to improve the security of Apex One server operations.
This patch enables users to configure Apex One to use a customized OfcOSFWebApp certificate.
Procedure
To configure Apex One to use a customized OfcOSFWebApp certificate:
- Install this patch (see "Installation").
- Open the "ofcscan.ini" file in the "\PCCSRV\" folder on the Apex One server installation directory.
- Under the "INI_SERVER_SECTION" section, manually add the "CN_OSFWebApp=" key and specify the customized certificate.
- [INI_SERVER_SECTION]
- CN_OSFWebApp=customized CN
- Save the changes and close the file.
NOTE: Please contact Trend Micro Support for the procedures to adding a customized OfcOSFWebApp certificate.
The update source for the Integrated Smart Protection Server is automatically set to "Trend Micro Apex Central" in the "Apex Central" settings page.
Solution
This hotfix updates the Apex One server program to resolve this issue.
An exception error triggers the Apex One Master Service to stop unexpectedly while extracting a pattern file from a compressed file.
Solution
This hotfix updates the Apex One server program to enable it to handle the exception.
The Vulnerability Protection (VP) policy cannot be deployed because the Apex One VP agent program does not support customized installation paths (C:).
Solution
This hotfix updates the Apex One VP agent program to support customized installation paths.
It may take a long time to log on to Apex One security agent computers after start up.
Solution
This hotfix allows users to set the following three drivers that are related to the Virus Scan Engine to "on-demand start" on the Apex One security agent:
- TmFilter.sys
- TmPreFilter.sys
- VSApiNt.sys
Procedure
To set the three drivers related to Virus Scan Engine to "on-demand start" on Apex One security agents:
- Install this hotfix (see "Installation").
- Open the "ofcscan.ini" file in the "\PCCSRV\" folder on the Apex One server installation directory.
- Under the "Global Setting" section, manually add the following key and set its value to "1".
- [Global Setting]
- VSAPIServiceStartOnDemand=1 NOTE: To disable the setting, set this key to "0". The three drivers will be set to the default action "automatic start".
- Save the changes and close the file.
- Open the Apex One web console and go to the "Agents > Global Agent Settings" screen.
- Click "Save" to deploy the setting to agents. The Apex One server deploys the command to Apex One security agents and changes the following registry values from "2" (default) to "3" on all Apex One security agent computers:
- Path: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\TmFilter
- Key: Start
- Type: DWORD
- Value: 3
- Path: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\TmPreFilter
- Key: Start
- Type: DWORD
- Value: 3
- Path: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\VSApiNt
- Key: Start
- Type: DWORD
- Value: 3
- Restart the Apex One security agent computers.
Third-party applications may experience a performance issue when Behavior Monitoring is enabled on the Security Agent.
Solution
This hotfix updates the Behavior Monitoring module to resolve this issue.
After synchronizing Active Directory domains, some selected groups on the "Unmanaged Endpoints > Active Directory / IP Address Scope" screen are no longer selected.
Solution
This hotfix updates the Apex One server program to resolve this issue.
The attack discovery rule for "Winlogon execute sethc" triggers too many alerts.
Solution
This hotfix updates the rule to minimize alerts.
Endpoint Sensor returns an "upload file format incorrect" error if the YARA rule uses the hash module.
Solution
This hotfix updates the YARA library in both the server and agent program to resolve this issue.
Users may encounter a "Windows upgrade failed" error on an Apex One agent computer running on the Microsoft™ Windows™ 10 platform. This happens when the Apex One agent ever acted as an Update Agent (UA) and some existing files match the blocking software range in Microsoft Windows.
Solution
This hotfix updates the Apex One agent program and adds a folder checking mechanism to resolve the issue.
The Behavior Monitoring program inspection feature still blocks certain applications on Apex One security agent computers even after users have added these applications into the Trusted Programs List or the approved list of the Behavior Monitoring Exceptions on security agents.
Solution
This hotfix updates the Apex One security agent program to resolve this issue.
The "The To field must be between 1 to 256 characters." error message displays on the "Administration > Notifications > Administrator > Email" tab when users click on the "Save" button after ticking the following options in the Virus/Malware Detections, Spyware/Grayware Detections, or C&C Callbacks section.
- Enable notification via email
- Send notifications to users with agent tree domain permissions
Solution
This hotfix updates the Apex One server program to prevent the error and ensure that users can update and save the notification settings normally.
Apex One may not be able to download the Web Blocking List component from smart protection sources because the Trend Micro Local Web Classification Server service stops unexpectedly.
Solution
This hotfix updates the Apex One server program to resolve this issue.
The Trend Micro Data Loss Prevention™ (DLP) service does not work normally in Google Chrome and Microsoft Internet Explorer™ with HTTPS.
Solution
This hotfix updates the DLP module to resolve this issue.
In the Traditional Chinese version, garbled characters appear in the exported CSV file of DLP logs.
Solution
This hotfix updates the Apex One server program to resolve this issue.
The Apex One Master Service may stop unexpectedly because the allocated memory was not released properly.
Solution
This hotfix updates the Apex One server program to resolve this issue.
After Patch 2146 is applied, users encounter an error while manually deleting logs from the "Log Criteria" on the "Agents > Agent Management > Logs > Delete Logs" and "Logs > Agents > Security Risks > Delete Logs" pages.
Solution
This hotfix updates the Apex One server program to resolve this issue.
This hotfix allows the Apex One agent to bypass the proxy settings when connecting to the Apex One server if it detects a proxy exception. This hotfix also improves the duration of manual updates on Apex One agents.
This hotfix provides a way to configure Apex One to keep track of when USB storage devices are plugged into Apex One security agent computers. The logs can be queried in the Device Control violations on the Apex Central web console. These events are also recorded in the "UsbInsert_yyyymmdd.log" file on the Apex One server "\PCCSRV\Log" folder.
NOTES:
- The logs in the "UsbInsert_yyyymmdd.log" file will appear in the following format: [Timestamp] [Log Generation Time] [Agent GUID] [Computer Name] [Action] [USB:Vendor:Model:Serial ID]
- The "UsbInsert_yyyymmdd.log" file will be deleted regularly according to the "Logs to Delete" and "Log Deletion Schedule" settings in the "Log Maintenance" page on the Apex One web console. You need to ensure that the "Enable scheduled deletion of logs" feature is enabled with the “Device Control Logs” log type selected.
Procedure
To configure Apex One to keep track of when USB storage devices are plugged into Apex One security agent computers:
- Install this hotfix (see "Installation").
- Open the "ofcscan.ini" file in the "\PCCSRV\" folder on the Apex One server installation directory.
- Under the "Global Setting" section, manually add the following key and set its value to "1".
- [Global Setting]
- EnableUsbLogging=1
NOTE: To disable the setting, set this key to "0".
- Save the changes and close the file.
- Open the Apex One web console and go to the "Agents > Global Agent Settings" screen.
- Click "Save" to deploy the setting to agents. The Apex One server deploys the command to Apex One security agents and adds the following registry entry on all Apex One security agent computers:
- Path:
- 32-bit: \HKEY_LOCAL_MACHINE\SOFTWARE\TrendMicro\PC-cillinNTCorp\CurrentVersion\DlpLite
- 64-bit: \HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\TrendMicro\PC-cillinNTCorp\CurrentVersion\DlpLite
- Key: EnableUsbLogging
- Type: DWORD
- Value: 1
Microsoft™ Windows™ updates take longer to complete and use up more CPU resources on computers where the Apex One on-prem agent program is installed.
Solution
This hotfix updates the Apex One security agent program to resolve this issue.
A buffer overrun issue prevents users from uninstalling the German version of the Apex One Security Agent successfully.
Solution
This hotfix resolves the buffer overrun issue.
When OfficeScan XG agents are migrated from an OfficeScan XG server to an Apex One server, the agent upgrade process may encounter a looping issue which prevents the agent program from upgrading to Apex One.
Solution
This hotfix resolves the issue by ensuring that the Apex One server program handles legacy files properly.
When users upgrade OfficeScan 11 agents to Apex One agents using an upgrade package generated by the Agent Packager tool, some files under the agent installation folder are not updated.
Solution
This hotfix updates the Apex One server program to ensure that the Agent Packager includes all the necessary binaries in the Apex One security agent "Setup" installer package.
Under certain extreme conditions, the CRC full pattern update process goes into an endless loop and causes a high CPU usage issue.
Solution
This hotfix adds a new iCRC engine in Apex One to resolve this issue.
When disabling Windows Defender, the Apex One agent program always checks whether it is still running or has stopped. If it is still running, the Apex One agent calls the API to disable it and displays a "Restart Required" message on the Apex One agent console.
Solution
This hotfix updates the Apex One agent program to remove this checking mechanism so it does not trigger the "Restart Required" message on the Apex One agent console.
This hotfix provides a way to prevent Apex One from applying the settings of a new domain on automatically grouped agents. This means that when a group of agents are transferred to a new domain, the agents will retain the existing policy settings instead of following the settings of the new domain.
Procedure
To prevent Apex One from applying the settings of a new domain on automatically grouped agents:
- Install this hotfix (see "Installation").
- Open the "ofcscan.ini" file in the "\PCCSRV\" folder on the Apex One server installation directory.
- Under the "Global Setting" section, manually add the "SkipApplyNewDomainSettings" key and set its value to "1".
- [Global Setting]
- SkipApplyNewDomainSettings=1
- Save the changes and close the file.
NOTE: After applying this key, security agents that were automatically moved to new domains will not apply the settings of the new domain and will retain the existing policy settings.
After upgrading to Apex One Patch 2 Build 2146 and any higher version, users cannot register Apex One successfully to Trend Micro Apex Central™ using certificates.
Solution
After applying the hotfix, users can successfully register Apex One to Apex Central using certificates.
Endpoints with "VMware Airwatch Tunnel" connected may experience a performance issue with web browsers due to a signature issue with the Windows Antimalware Scan Interface (AMSI) integration feature.
Solution
This hotfix updates the signature on the AMSI provider to resolve this issue.
An issue prevents the Security Risk Detections Over Time Widget from working normally.
Solution
This hotfix updates the Upgrade SQL Schema to resolve the issue so the Security Risk Detections Over Time Widget works normally.
A manual update may take an unusually long time to complete when launched by right-clicking the Security Agent icon in the Windows Task Bar and then selecting "Update Now".
Solution
This hotfix updates the Apex One server program to resolve this issue.
The following message appears on the notification panel of the Apex One Dashboard even when the Apex One server has already registered to an Apex Central server.
"Apex Central recommended. Your product license includes additional security features managed directly from the Apex Central console. Integrate with Apex Central to start using Vulnerability Protection and Application Control."
Solution
This hotfix updates the Apex One server program to resolve this issue.
The Apex One Predictive Machine Learning (PML) feature may prevent users from running scripts to write files normally.
Solution
This hotfix resolves the issue by allowing PML to follow the Real-time Scan Exclusion settings to bypass certain file I/O events that are hooked by the Behavior Monitoring module.
Sometimes, enhanced security policies cannot be sent to Security Agents across the network successfully when the Apex One server is managed from the Apex Central web console. This may happen when some settings on the Microsoft Internet Information Service (IIS) Application Server Manager have not been set properly. However, there are no relevant debug logs for tracing this issue.
Solution
This hotfix updates the Apex One server program to enhance debug log visibility for this issue.
If the "Enable CVE exploit scanning for files downloaded through web and email channels" option of the Real-time Scan Settings is enabled, users may experience high CPU usage issues on protected computers when an on-demand Manual Scan, Scan Now, or Scheduled Scan starts.
Solution
This hotfix updates the Apex One security agent program to resolve the issue.
A restart is required to complete updates for certain drivers. This hotfix enables administrators to configure how frequent the "Restart Computer" notification pops up on the agent console.
Procedure
To set the interval and number of times of "Restart Computer" notification which is popped up from agent console.
- Install this hotfix (see "Installation").
- Open the "ofcscan.ini" file in the "\PCCSRV\" folder of the Apex One server installation directory using a text editor.
- Under the "Global Setting" section, manually add the following keys and set a preferred value for each.
- [Global Setting]
- EnableUserDefinedPopupNotify=1, to disable the feature, set this key to "0".
- UserDefinedPopupCount=X, the "Restart Computer" notification will pop up X times before users restart the computer, supports any integer from 1. NOTE: When administrators modify and re-deploy these three keys to the security agent or when the agent is reloaded, the number of times the "Restart Computer" notification pops up will be reset to zero.
- UserDefinedPopupNotifyIntervalMinute=Y, the "Restart Computer" notification will pop up about every Y minutes before users restart the computer, supports any integer from 1.
For example, to set the "Restart Computer" notification to popup every 30 minutes up to three times when ignored by the user, set:
- [Global Setting]
- EnableUserDefinedPopupNotify=1
- UserDefinedPopupCount=3
- UserDefinedPopupNotifyIntervalMinute=30
- Save the changes and close the file.
- Open the Apex One web console and go to the "Agents > Global Agent Settings" screen.
- Click "Save" to deploy the setting to agents. The Apex One server deploys the command to security agents and adds the following registry entry on all security agent computers:
- Path:
- For x64 platforms: HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\TrendMicro\PC-cillinNTCorp\CurrentVersion\Misc.\
- For x86 platforms: HKEY_LOCAL_MACHINE\SOFTWARE\TrendMicro\PC-cillinNTCorp\CurrentVersion\Misc.\
- Key: EnableUserDefinedPopupNotify
- Type: DWORD
- Value: 1
- Key: UserDefinedPopupNotifyCount
- Type: DWORD
- Value: X
- Key: UserDefinedPopupNotifyIntervalMinute
- Type: DWORD
- Value: Y
Except for the administrator account created during installation, user account passwords for the web console can be updated even when users have provided the wrong current password.
Solution
This hotfix updates the Apex One server program to remove the vulnerability.
When users set "bypass_itunes_nonstor_usb_dc=true" in the "dlp.ini" file of the Apex One server, they should be able to charge an iPhone on a Microsoft Windows™ 10 computer even when the device is set to "Block" Mobile Devices under the Device Control settings but users should not be able to access the iPhone. However, users can still access the iPhone under this configuration.
Solution
This hotfix updates the Data Protection module to ensure that when "bypass_itunes_nonstor_usb_dc=true", users may be able to charge an iPhone but not access it.
When the DLP service is enabled on Apex One security agent computers, Google Chrome 80 and higher versions may stop unexpectedly while users upload file attachments in Webmail.
Solution
This hotfix updates the DLP module to resolve this issue and enable it to block the upload of file attachments in Webmail on Google Chrome.
This hotfix updates the Apex One Security Agent program to allow users to disable the system balloon notification.
Procedure
To disable the system balloon notification:
- Install this hotfix (see "Installation").
- Open the "Ofcscan.ini" file in the "\PCCSRV\" folder on the Apex One server installation directory.
- Under the "Global Setting" section, manually add the following keys and values.
- [Global Settings]
- SkipBalloonNum=x, the number of notifications to disable
- SkipBalloonID0=yyy, balloon ID of the first notification
- SkipBalloonID1=zzz, balloon ID of the next notification
NOTE: Specify the balloon IDs of each notification to be disabled.
For example, to disable the following three notifications, set:
- [Global Setting]
- SkipBalloonNum=3
- SkipBalloonID0=101
- SkipBalloonID2=102
- SkipBalloonID3=103
- Save the changes and close the file.
- Open the Apex One web console and go to the "Agents > Global Agent Settings" screen.
- Click "Save" to deploy the setting to clients. The Apex One server deploys the command to Security Agent and adds the following registry entry on all Security Agent computers:
- Path: HKEY_LOCAL_MACHINE\SOFTWARE\TrendMicro \PC-cillinNTCorp\CurrentVersion\Misc.
- Key: SkipBalloonNum
- Type: DWORD
- Value: x
- Path: HKEY_LOCAL_MACHINE\SOFTWARE\TrendMicro \PC-cillinNTCorp\CurrentVersion\Misc.
- Key: SkipBalloonID0
- Type: DWORD
- Value: yyy
This hotfix updates the Apex One Master Service to change the callback address token in C&C callback alert email notifications from "http/https" to "hxxp/hxxps".
Procedure
To apply the solution:
- Install this hotfix (see "Installation").
- Open the "ofcserver.ini" file in the "\PCCSRV\Private" folder in the Apex One server installation directory.
- Under the "CCCA" section, manually add the following key and set it to "1":
- [CCCA]
- EnabledReplaceURL=1
- Save the changes and close the file.
- Restart the Apex One Master Service
This hotfix adds the "UK: RD&E Hospital Number" field to the DLP module rule template.
8. Contact Information
Contact Trend Micro via fax, phone, and email, or visit our website to download evaluation copies of Trend Micro products.
https://www.trendmicro.com/en_us/contact.html
NOTE: This information is subject to change without notice.
9. About Trend Micro
As a global leader in IT security, Trend Micro develops innovative security solutions that make the world safe for businesses and consumers to exchange digital information.
Copyright 2020, Trend Micro Incorporated. All rights reserved.
Trend Micro, the t-ball logo, OfficeScan, Trend Micro Security (for Mac), Control Manager, Trend Micro Apex One, and Trend Micro Apex Central are trademarks of Trend Micro Incorporated and are registered in some jurisdictions. All other product or company names may be trademarks or registered trademarks of their owners.
10. License Agreement
Third-party licensing agreements can be viewed:
- By selecting the "About" option in the application user interface
- By referring to the "Legal" page of the Administrator's Guide