SymELAM.sys
SymELAM
Microsoft Corporation
It runs as a Windows 64-bit kernel mode device driver named “Symantec ELAM Driver”.
Publisher:
Symantec Corporation (signed by Microsoft Corporation)
Description:
Symantec ELAM
MD5:
42947647f71e9ef2167b42b372f1ddb7
SHA-1:
8955523eb5894a1ada50e1cfb2738e922a29ca34
SHA-256:
ae825b7dffae8bcf5598c512efaf5645c5a6c4dc90f8b3073a255223df3aaa4a
Scanner detections:
0 / 68
Status:
Clean (as of last analysis)
Whitelisted (by digital signature)
Analysis date:
5/14/2024 4:18:20 PM UTC (today)
File size:
22.9 KB (23,448 bytes)
Copyright:
Copyright (c) 2012 Symantec Corporation
Original file name:
SymELAM.sys
File type:
Driver (Win64 SYS)
Language:
English (United States)
Common path:
C:\Windows\System32\drivers\nisx64\1404000.028\symelam.sys
Authority:
Microsoft Corporation
Valid from:
4/11/2011 3:39:42 PM
Valid to:
7/11/2012 3:49:42 PM
Subject:
CN=Microsoft Windows Early Launch Anti-malware Publisher, OU=MOPR, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
Issuer:
CN=Microsoft Code Signing PCA 2010, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
Serial number:
6108217B000000000006
CTPH (ssdeep):
384:iVtRdkHnd4xgeE0HMSQEjdhA4MWRluqlL/:wRdkqxgLCM2S4MFqR
Driver
Display name:
Symantec ELAM Driver
Type:
Kernel device driver (KernelDriver)