SymELAM.sys
SymELAM
Microsoft Corporation
It runs as a Windows 64-bit kernel mode device driver named “Symantec ELAM Driver”.
Publisher:
Symantec Corporation (signed by Microsoft Corporation)
Description:
Symantec ELAM
MD5:
02f3073c3933190dfd24bc35800172b4
SHA-1:
fe9b53ed6e4b38fa320fdcb431c11f6697f96e87
SHA-256:
365c945ecb485455e113a4cd6b429311c29ac2d94393ceb78940c401f93d54f8
Scanner detections:
0 / 68
Status:
Clean (as of last analysis)
Whitelisted (by digital signature)
Analysis date:
4/19/2024 4:10:48 AM UTC (today)
File size:
21 KB (21,520 bytes)
Copyright:
Copyright (c) 2012 Symantec Corporation
Original file name:
SymELAM.sys
File type:
Driver (Win64 SYS)
Language:
English (United States)
Common path:
C:\Windows\System32\drivers\nis\1501000.012\symelam.sys
Authority:
Microsoft Corporation
Valid from:
7/10/2012 12:14:38 AM
Valid to:
10/10/2013 12:14:38 AM
Subject:
CN=Microsoft Windows Early Launch Anti-malware Publisher, OU=MOPR, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
Issuer:
CN=Microsoft Code Signing PCA 2010, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
Serial number:
33000000148E97BFE6C9F875AB000000000014
CTPH (ssdeep):
384:qffN3zUj86fQEjps3BU+/r+wUJKlCk2mek:qF64e+/C5ZY
Driver
Display name:
Symantec ELAM Driver
Type:
Kernel device driver (KernelDriver)