¿Para qué sirve la dll SgrmEnclave.dll?

System Guard Runtime Monitor Enclave

Dependencias de la dll SgrmEnclave.dll


Microsoft (R) COFF/PE Dumper Version 14.16.27034.0
Copyright (C) Microsoft Corporation.  All rights reserved.


Dump of file C:\Windows\System32\SgrmEnclave.dll

File Type: DLL

  Image has the following dependencies:

    msvcp_win.dll
    api-ms-win-crt-runtime-l1-1-0.dll
    api-ms-win-crt-private-l1-1-0.dll
    api-ms-win-crt-string-l1-1-0.dll
    api-ms-win-core-heap-l1-1-0.dll
    api-ms-win-core-errorhandling-l1-1-0.dll
    api-ms-win-core-processthreads-l1-1-0.dll
    api-ms-win-core-localization-l1-2-0.dll
    api-ms-win-core-debug-l1-1-0.dll
    api-ms-win-core-synch-l1-1-0.dll
    bcrypt.dll
    api-ms-win-core-psapi-l1-1-0.dll
    api-ms-win-core-rtlsupport-l1-1-0.dll
    api-ms-win-core-processthreads-l1-1-1.dll
    api-ms-win-core-profile-l1-1-0.dll
    api-ms-win-core-sysinfo-l1-1-0.dll
    api-ms-win-core-interlocked-l1-1-0.dll
    api-ms-win-core-libraryloader-l1-2-0.dll
    api-ms-win-core-string-l1-1-0.dll
    ntdll.dll
    api-ms-win-crt-time-l1-1-0.dll
    api-ms-win-core-handle-l1-1-0.dll
    api-ms-win-crt-math-l1-1-0.dll

  Summary

        4000 .data
        5000 .pdata
       11000 .rdata
        1000 .reloc
        1000 .rsrc
       47000 .text
        2000 PAGE
        4000 PAGECONS
        1000 PAGEDATA

Funciones que tiene la dll SgrmEnclave.dll


1    0 0000EF10 EngHostAttest
2    1 0000EBB0 EngHostCreateAttestationClient
3    2 0000ED50 EngHostDestroyAttestationClient
4    3 0000DBF0 EngHostDispatchThread
5    4 0000DFE0 EngHostGetRuntimeReport
6    5 0000EA80 EngHostGetSessionCertificate
7    6 0000DEB0 EngHostGetSessionReport
8    7 0000D2C0 EngHostInitialize
9    8 0000DD90 EngHostNotify
10    9 0000D590 EngHostReinitialize
11    A 0000DB20 EngHostShutdown

Información avanzada sobre funciones que tiene la dll SgrmEnclave.dll


Microsoft (R) COFF/PE Dumper Version 14.16.27034.0
Copyright (C) Microsoft Corporation.  All rights reserved.


Dump of file C:\Windows\System32\SgrmEnclave.dll

File Type: DLL

  Section contains the following exports for SgrmEnclave.dll

    00000000 characteristics
    56BA6523 time date stamp
        0.00 version
           1 ordinal base
          11 number of functions
          11 number of names

    ordinal hint RVA      name

          1    0 0000EF10 EngHostAttest
          2    1 0000EBB0 EngHostCreateAttestationClient
          3    2 0000ED50 EngHostDestroyAttestationClient
          4    3 0000DBF0 EngHostDispatchThread
          5    4 0000DFE0 EngHostGetRuntimeReport
          6    5 0000EA80 EngHostGetSessionCertificate
          7    6 0000DEB0 EngHostGetSessionReport
          8    7 0000D2C0 EngHostInitialize
          9    8 0000DD90 EngHostNotify
         10    9 0000D590 EngHostReinitialize
         11    A 0000DB20 EngHostShutdown

  Summary

        4000 .data
        5000 .pdata
       11000 .rdata
        1000 .reloc
        1000 .rsrc
       47000 .text
        2000 PAGE
        4000 PAGECONS
        1000 PAGEDATA

Integridad de la dll SgrmEnclave.dll



Algorithm       Hash                                                                   Path                                         
---------       ----                                                                   ----                                         
SHA256          ED38ADFFDE4F1A980E72F2CC13E96A04F236E1A2A0A54430563D74E9F5424AE1       C:\Windows\System32\SgrmEnclave.dll          


Detalles sobre el fichero dll SgrmEnclave.dll




PSPath            : Microsoft.PowerShell.Core\FileSystem::C:\Windows\System32\SgrmEnclave.dll
PSParentPath      : Microsoft.PowerShell.Core\FileSystem::C:\Windows\System32
PSChildName       : SgrmEnclave.dll
PSDrive           : C
PSProvider        : Microsoft.PowerShell.Core\FileSystem
PSIsContainer     : False
Mode              : -a----
VersionInfo       : File:             C:\Windows\System32\SgrmEnclave.dll
                    InternalName:     SgrmEnclave
                    OriginalFilename: SgrmEnclave.dll
                    FileVersion:      10.0.19041.546 (WinBuild.160101.0800)
                    FileDescription:  System Guard Runtime Monitor Enclave
                    Product:          Microsoft® Windows® Operating System
                    ProductVersion:   10.0.19041.546
                    Debug:            False
                    Patched:          False
                    PreRelease:       False
                    PrivateBuild:     False
                    SpecialBuild:     False
                    Language:         Inglés (Estados Unidos)
                    
BaseName          : SgrmEnclave
Target            : {C:\Windows\WinSxS\amd64_security-octagon-enclave_31bf3856ad364e35_10.0.19041.546_none_2f1f334ec22a40db\SgrmEncl
                    ave.dll}
LinkType          : HardLink
Name              : SgrmEnclave.dll
Length            : 416864
DirectoryName     : C:\Windows\System32
Directory         : C:\Windows\System32
IsReadOnly        : False
Exists            : True
FullName          : C:\Windows\System32\SgrmEnclave.dll
Extension         : .dll
CreationTime      : 21/11/2020 8:47:21
CreationTimeUtc   : 21/11/2020 7:47:21
LastAccessTime    : 03/12/2020 15:12:04
LastAccessTimeUtc : 03/12/2020 14:12:04
LastWriteTime     : 21/11/2020 8:47:21
LastWriteTimeUtc  : 21/11/2020 7:47:21
Attributes        : Archive



Procesos que utilizan la dll SgrmEnclave.dll