SgrmEnclave_secure.dll

  • File Path: C:\Windows\system32\SgrmEnclave_secure.dll
  • Description: System Guard Runtime Monitor Enclave

Hashes

Type Hash
MD5 DFE557C5C893DED27D7BA7467F87304E
SHA1 38AA2FDEF51AF66DF54933AA6A92FD20B9333338
SHA256 CD231BF3CB2251C376CF2BC0D7F7A67EB1634426A3877FA9A49EEB2DE8B1B2D8
SHA384 3C4DE4EB4704718A25BFE5964CA5B0866DBCAB438FA1F240EBE03BC66B6F3E84EB6CEC6E611C24756F4CA8DCC9265496
SHA512 0D903DDD29FE7669DE1AC806FE21A5E892AD26E64ACF34DF6E189482BE9E43550430CABA69B6B156BB884D8CA9BE3732F3F6BEAC378BE80F1A89805D13143FA6
SSDEEP 6144:SD97+j62HgI6CpAL8NC+Z8W1zYQ5kXvhR/We4UnKbDB+Q:Soj62H16gka8W1Z5O/WnZXL
IMP D0EC6DC6FDB16199A7AA0B0A0A4D5C0B
PESHA1 EF98C16BE2E43B36F23E70C8002C1767F2C5A9FC
PE256 710DA415A28FA1E5C410A6E2C362876CBCBF0F3656F256EF3B8506A3832C5948

DLL Exports:

Function Name Ordinal Type
EngHostInitialize 8 Exported Function
EngHostGetSessionReport 7 Exported Function
EngHostNotify 9 Exported Function
EngHostShutdown 11 Exported Function
EngHostReinitialize 10 Exported Function
EngHostGetSessionCertificate 6 Exported Function
EngHostCreateAttestationClient 2 Exported Function
EngHostAttest 1 Exported Function
EngHostDestroyAttestationClient 3 Exported Function
EngHostGetRuntimeReport 5 Exported Function
EngHostDispatchThread 4 Exported Function

Signature

  • Status: Signature verified.
  • Serial: 330000026551AE1BBD005CBFBD000000000265
  • Thumbprint: E168609353F30FF2373157B4EB8CD519D07A2BFF
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: SgrmEnclave.dll
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.19041.488 (WinBuild.160101.0800)
  • Product Version: 10.0.19041.488
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 64-bit

File Scan

  • VirusTotal Detections: 0/69
  • VirusTotal Link: https://www.virustotal.com/gui/file/cd231bf3cb2251c376cf2bc0d7f7a67eb1634426a3877fa9a49eeb2de8b1b2d8/detection/

MIT License. Copyright (c) 2020 Strontic.