SgrmEnclave_secure.dll
  - File Path: C:\Windows\system32\SgrmEnclave_secure.dll
- Description: System Guard Runtime Monitor Enclave
Hashes
  
    
      | Type | Hash | 
  
  
    
      | MD5 | DFE557C5C893DED27D7BA7467F87304E | 
    
      | SHA1 | 38AA2FDEF51AF66DF54933AA6A92FD20B9333338 | 
    
      | SHA256 | CD231BF3CB2251C376CF2BC0D7F7A67EB1634426A3877FA9A49EEB2DE8B1B2D8 | 
    
      | SHA384 | 3C4DE4EB4704718A25BFE5964CA5B0866DBCAB438FA1F240EBE03BC66B6F3E84EB6CEC6E611C24756F4CA8DCC9265496 | 
    
      | SHA512 | 0D903DDD29FE7669DE1AC806FE21A5E892AD26E64ACF34DF6E189482BE9E43550430CABA69B6B156BB884D8CA9BE3732F3F6BEAC378BE80F1A89805D13143FA6 | 
    
      | SSDEEP | 6144:SD97+j62HgI6CpAL8NC+Z8W1zYQ5kXvhR/We4UnKbDB+Q:Soj62H16gka8W1Z5O/WnZXL | 
    
      | IMP | D0EC6DC6FDB16199A7AA0B0A0A4D5C0B | 
    
      | PESHA1 | EF98C16BE2E43B36F23E70C8002C1767F2C5A9FC | 
    
      | PE256 | 710DA415A28FA1E5C410A6E2C362876CBCBF0F3656F256EF3B8506A3832C5948 | 
  
DLL Exports:
  
    
      | Function Name | Ordinal | Type | 
  
  
    
      | EngHostInitialize | 8 | Exported Function | 
    
      | EngHostGetSessionReport | 7 | Exported Function | 
    
      | EngHostNotify | 9 | Exported Function | 
    
      | EngHostShutdown | 11 | Exported Function | 
    
      | EngHostReinitialize | 10 | Exported Function | 
    
      | EngHostGetSessionCertificate | 6 | Exported Function | 
    
      | EngHostCreateAttestationClient | 2 | Exported Function | 
    
      | EngHostAttest | 1 | Exported Function | 
    
      | EngHostDestroyAttestationClient | 3 | Exported Function | 
    
      | EngHostGetRuntimeReport | 5 | Exported Function | 
    
      | EngHostDispatchThread | 4 | Exported Function | 
  
Signature
  - Status: Signature verified.
- Serial: 330000026551AE1BBD005CBFBD000000000265
- Thumbprint: E168609353F30FF2373157B4EB8CD519D07A2BFF
- Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
- Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  - Original Filename: SgrmEnclave.dll
- Product Name: Microsoft Windows Operating System
- Company Name: Microsoft Corporation
- File Version: 10.0.19041.488 (WinBuild.160101.0800)
- Product Version: 10.0.19041.488
- Language: English (United States)
- Legal Copyright:  Microsoft Corporation. All rights reserved.
- Machine Type: 64-bit
File Scan
  - VirusTotal Detections: 0/69
- VirusTotal Link: https://www.virustotal.com/gui/file/cd231bf3cb2251c376cf2bc0d7f7a67eb1634426a3877fa9a49eeb2de8b1b2d8/detection/
MIT License. Copyright (c) 2020-2021 Strontic.