SymELAM.sys

SymELAM

Microsoft Corporation

It runs as a Windows 64-bit kernel mode device driver named “Symantec ELAM Driver”.
Publisher:
Symantec Corporation  (signed by Microsoft Corporation)

Product:
SymELAM

Description:
Symantec ELAM

Version:
1.0.0.111

MD5:
02f3073c3933190dfd24bc35800172b4

SHA-1:
fe9b53ed6e4b38fa320fdcb431c11f6697f96e87

SHA-256:
365c945ecb485455e113a4cd6b429311c29ac2d94393ceb78940c401f93d54f8

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)
Whitelisted  (by digital signature)

Analysis date:
4/19/2024 4:10:48 AM UTC  (today)

File size:
21 KB (21,520 bytes)

Product version:
1.0

Copyright:
Copyright (c) 2012 Symantec Corporation

Original file name:
SymELAM.sys

File type:
Driver (Win64 SYS)

Language:
English (United States)

Common path:
C:\Windows\System32\drivers\nis\1501000.012\symelam.sys

Digital Signature
Authority:
Microsoft Corporation

Valid from:
7/10/2012 12:14:38 AM

Valid to:
10/10/2013 12:14:38 AM

Subject:
CN=Microsoft Windows Early Launch Anti-malware Publisher, OU=MOPR, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Issuer:
CN=Microsoft Code Signing PCA 2010, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Serial number:
33000000148E97BFE6C9F875AB000000000014

File PE Metadata
OS bitness:
Win64

CTPH (ssdeep):
384:qffN3zUj86fQEjps3BU+/r+wUJKlCk2mek:qF64e+/C5ZY

Driver
Display name:
Symantec ELAM Driver

Service name:
SymELAM

Type:
Kernel device driver (KernelDriver)