SymELAM.sys

SymELAM

Microsoft Corporation

It runs as a Windows 64-bit kernel mode device driver named “Symantec ELAM Driver”.
Publisher:
Symantec Corporation  (signed by Microsoft Corporation)

Product:
SymELAM

Description:
Symantec ELAM

Version:
1.0.0.111

MD5:
42947647f71e9ef2167b42b372f1ddb7

SHA-1:
8955523eb5894a1ada50e1cfb2738e922a29ca34

SHA-256:
ae825b7dffae8bcf5598c512efaf5645c5a6c4dc90f8b3073a255223df3aaa4a

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)
Whitelisted  (by digital signature)

Analysis date:
5/14/2024 4:18:20 PM UTC  (today)

File size:
22.9 KB (23,448 bytes)

Product version:
1.0

Copyright:
Copyright (c) 2012 Symantec Corporation

Original file name:
SymELAM.sys

File type:
Driver (Win64 SYS)

Language:
English (United States)

Common path:
C:\Windows\System32\drivers\nisx64\1404000.028\symelam.sys

Digital Signature
Authority:
Microsoft Corporation

Valid from:
4/11/2011 3:39:42 PM

Valid to:
7/11/2012 3:49:42 PM

Subject:
CN=Microsoft Windows Early Launch Anti-malware Publisher, OU=MOPR, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Issuer:
CN=Microsoft Code Signing PCA 2010, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Serial number:
6108217B000000000006

File PE Metadata
OS bitness:
Win64

CTPH (ssdeep):
384:iVtRdkHnd4xgeE0HMSQEjdhA4MWRluqlL/:wRdkqxgLCM2S4MFqR

Driver
Display name:
Symantec ELAM Driver

Service name:
SymELAM

Type:
Kernel device driver (KernelDriver)