¿Para qué sirve la dll rtpm.dll?

Remote TPM Library

Dependencias de la dll rtpm.dll


Microsoft (R) COFF/PE Dumper Version 14.16.27034.0
Copyright (C) Microsoft Corporation.  All rights reserved.


Dump of file C:\Windows\System32\rtpm.dll

File Type: DLL

  Image has the following dependencies:

    msvcrt.dll
    bcrypt.dll
    api-ms-win-core-heap-l1-1-0.dll
    api-ms-win-core-heap-l2-1-0.dll
    api-ms-win-core-errorhandling-l1-1-0.dll
    api-ms-win-core-synch-l1-2-0.dll
    api-ms-win-core-profile-l1-1-0.dll
    api-ms-win-core-processthreads-l1-1-0.dll
    api-ms-win-core-sysinfo-l1-1-0.dll
    api-ms-win-core-rtlsupport-l1-1-0.dll
    api-ms-win-core-synch-l1-1-0.dll
    api-ms-win-core-handle-l1-1-0.dll
    ntdll.dll
    tbs.dll

  Summary

        1000 .data
        1000 .pdata
        3000 .rdata
        1000 .reloc
        1000 .rsrc
        D000 .text

Funciones que tiene la dll rtpm.dll


1    0 000010E0 AttFreeMem
2    1 00001280 AttRtpmAcceptContext
3    2 00001160 AttRtpmCloseInitiator
4    3 00001230 AttRtpmCloseTarget
5    4 000011E0 AttRtpmCompletePCRRead
6    5 00001170 AttRtpmContinueContext
7    6 00001120 AttRtpmCreateInitiator
8    7 00001290 AttRtpmCreateServerKey
9    8 000011F0 AttRtpmCreateTarget
10    9 00001180 AttRtpmInitiatePCRRead
11    A 00001280 RtpmAcceptContext
12    B 00001160 RtpmCloseInitiator
13    C 00001770 RtpmClosePcrCollection
14    D 00001230 RtpmCloseTarget
15    E 000014A0 RtpmCompleteCreateKey
16    F 000011E0 RtpmCompletePCRRead
17   10 00001660 RtpmCompleteSeal
18   11 00001170 RtpmContinueContext
19   12 00001430 RtpmCreateInitiator
20   13 00001740 RtpmCreatePcrCollection
21   14 000018C0 RtpmCreateTarget
22   15 000017D0 RtpmExtendPcr
23   16 000017F0 RtpmGetPcrSelectionData
24   17 00001890 RtpmHashAndExtendPcr
25   18 00001440 RtpmInitiateCreateKey
26   19 00001180 RtpmInitiatePCRRead
27   1A 000015E0 RtpmInitiateSeal
28   1B 000017B0 RtpmReadPcr
29   1C 00001790 RtpmSetPcr

Información avanzada sobre funciones que tiene la dll rtpm.dll


Microsoft (R) COFF/PE Dumper Version 14.16.27034.0
Copyright (C) Microsoft Corporation.  All rights reserved.


Dump of file C:\Windows\System32\rtpm.dll

File Type: DLL

  Section contains the following exports for rtpm.dll

    00000000 characteristics
    C1942B51 time date stamp
        0.00 version
           1 ordinal base
          29 number of functions
          29 number of names

    ordinal hint RVA      name

          1    0 000010E0 AttFreeMem
          2    1 00001280 AttRtpmAcceptContext
          3    2 00001160 AttRtpmCloseInitiator
          4    3 00001230 AttRtpmCloseTarget
          5    4 000011E0 AttRtpmCompletePCRRead
          6    5 00001170 AttRtpmContinueContext
          7    6 00001120 AttRtpmCreateInitiator
          8    7 00001290 AttRtpmCreateServerKey
          9    8 000011F0 AttRtpmCreateTarget
         10    9 00001180 AttRtpmInitiatePCRRead
         11    A 00001280 RtpmAcceptContext
         12    B 00001160 RtpmCloseInitiator
         13    C 00001770 RtpmClosePcrCollection
         14    D 00001230 RtpmCloseTarget
         15    E 000014A0 RtpmCompleteCreateKey
         16    F 000011E0 RtpmCompletePCRRead
         17   10 00001660 RtpmCompleteSeal
         18   11 00001170 RtpmContinueContext
         19   12 00001430 RtpmCreateInitiator
         20   13 00001740 RtpmCreatePcrCollection
         21   14 000018C0 RtpmCreateTarget
         22   15 000017D0 RtpmExtendPcr
         23   16 000017F0 RtpmGetPcrSelectionData
         24   17 00001890 RtpmHashAndExtendPcr
         25   18 00001440 RtpmInitiateCreateKey
         26   19 00001180 RtpmInitiatePCRRead
         27   1A 000015E0 RtpmInitiateSeal
         28   1B 000017B0 RtpmReadPcr
         29   1C 00001790 RtpmSetPcr

  Summary

        1000 .data
        1000 .pdata
        3000 .rdata
        1000 .reloc
        1000 .rsrc
        D000 .text

Integridad de la dll rtpm.dll



Algorithm       Hash                                                                   Path                                         
---------       ----                                                                   ----                                         
SHA256          11F25BEEB790C95DCC9734F78D94A0176D62F7DC6F423A445A57C733E3B9C23F       C:\Windows\System32\rtpm.dll                 


Detalles sobre el fichero dll rtpm.dll




PSPath            : Microsoft.PowerShell.Core\FileSystem::C:\Windows\System32\rtpm.dll
PSParentPath      : Microsoft.PowerShell.Core\FileSystem::C:\Windows\System32
PSChildName       : rtpm.dll
PSDrive           : C
PSProvider        : Microsoft.PowerShell.Core\FileSystem
PSIsContainer     : False
Mode              : -a----
VersionInfo       : File:             C:\Windows\System32\rtpm.dll
                    InternalName:     rtpm.dll
                    OriginalFilename: rtpm.dll
                    FileVersion:      10.0.19041.1 (WinBuild.160101.0800)
                    FileDescription:  Remote TPM Library
                    Product:          Microsoft® Windows® Operating System
                    ProductVersion:   10.0.19041.1
                    Debug:            False
                    Patched:          False
                    PreRelease:       False
                    PrivateBuild:     False
                    SpecialBuild:     False
                    Language:         Inglés (Estados Unidos)
                    
BaseName          : rtpm
Target            : {C:\Windows\WinSxS\amd64_microsoft-windows-remoteattestation-rtpm_31bf3856ad364e35_10.0.19041.1_none_c1c79268d9a
                    c9f69\rtpm.dll}
LinkType          : HardLink
Name              : rtpm.dll
Length            : 77624
DirectoryName     : C:\Windows\System32
Directory         : C:\Windows\System32
IsReadOnly        : False
Exists            : True
FullName          : C:\Windows\System32\rtpm.dll
Extension         : .dll
CreationTime      : 07/12/2019 10:10:18
CreationTimeUtc   : 07/12/2019 9:10:18
LastAccessTime    : 03/12/2020 14:48:29
LastAccessTimeUtc : 03/12/2020 13:48:29
LastWriteTime     : 07/12/2019 17:05:53
LastWriteTimeUtc  : 07/12/2019 16:05:53
Attributes        : Archive



Procesos que utilizan la dll rtpm.dll