SymELAM.sys

SymELAM

Microsoft Corporation

It runs as a Windows 64-bit kernel mode device driver named “Symantec ELAM Driver”.
Publisher:
Symantec Corporation  (signed by Microsoft Corporation)

Product:
SymELAM

Description:
Symantec ELAM

Version:
1.0.0.111

MD5:
40d7124fb57eb208e3dd56a73545fb64

SHA-1:
56582819bc88e3799c68cf40188f6721951a35c4

SHA-256:
e765cab8cdfd60856e768fe19c96a2227ad228c49715945cc789495f5482a755

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)
Whitelisted  (by digital signature)

Analysis date:
5/10/2024 7:13:43 AM UTC  (today)

File size:
20.9 KB (21,400 bytes)

Product version:
1.0

Copyright:
Copyright (c) 2012 Symantec Corporation

Original file name:
SymELAM.sys

File type:
Driver (Win64 SYS)

Language:
English (United States)

Common path:
C:\Windows\System32\drivers\n360\1404000.028\symelam.sys

Digital Signature
Authority:
Microsoft Corporation

Valid from:
4/11/2011 4:39:42 PM

Valid to:
7/11/2012 4:49:42 PM

Subject:
CN=Microsoft Windows Early Launch Anti-malware Publisher, OU=MOPR, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Issuer:
CN=Microsoft Code Signing PCA 2010, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Serial number:
6108217B000000000006

File PE Metadata
OS bitness:
Win64

CTPH (ssdeep):
192:7IjFffN3tUmMc2jj8U5oRt5aQEjps57C6BYMBYnMDltuhWFptCVWQ43Whv7qnaj5:2ffN3zUj86fQEjps3BU+/uMWd7lXN7au

Driver
Display name:
Symantec ELAM Driver

Service name:
SymELAM

Type:
Kernel device driver (KernelDriver)