Should I block it?

No, this file is 100% safe to run.

Additional versions

15.5.0.23	25.00%
15.0.0.58	50.00%
14.2.0.29	25.00%

Relationships

PE file structure

Show functions

Import table

advapi32.dll

RegQueryValueExA, GetUserNameW, RegQueryValueExW, RegOpenKeyExW, RegCloseKey, RegOpenKeyExA

kernel32.dll

InterlockedExchange, DisableThreadLibraryCalls, InterlockedIncrement, InterlockedDecrement, FreeLibrary, LoadLibraryW, lstrcatW, GetLastError, GetTempPathW, GetPrivateProfileStringW, GetProcAddress, lstrlenW, LoadLibraryExW, LocalAlloc, FormatMessageW, GetFileAttributesW, GetModuleHandleW, SetThreadPriority, GetTickCount, RaiseException, InitializeCriticalSection, WaitForSingleObject, lstrcpyA, lstrlenA, LoadLibraryExA, CloseHandle, WriteFile, ReadFile, GetFileSize, CreateFileW, SetFilePointer, GlobalAlloc, GlobalFree, FileTimeToSystemTime, LocalFileTimeToFileTime, SystemTimeToFileTime, SetFileAttributesW, GetFileAttributesExW, GetSystemTime, GetSystemTimeAsFileTime, GetCurrentProcessId, GetCurrentThreadId, QueryPerformanceCounter, ExitProcess, GetProcessHeap, LocalFree, FindResourceExW, FindResourceW, LoadResource, LockResource, DeleteCriticalSection, SizeofResource, HeapSize, HeapReAlloc, HeapFree, HeapAlloc, HeapDestroy, LeaveCriticalSection, EnterCriticalSection, GetVersionExA, LoadLibraryA, UnmapViewOfFile, MapViewOfFile, CreateFileMappingW, GetTempFileNameW, lstrcmpiW, MultiByteToWideChar, GetModuleFileNameW, GetModuleHandleA, IsDebuggerPresent, SetUnhandledExceptionFilter, UnhandledExceptionFilter, GetCurrentProcess, TerminateProcess, InterlockedCompareExchange, Sleep, GetThreadLocale, GetLocaleInfoA, GetACP

msvcp71.dll

DllMain

msvcp80.dll

DllMain

msvcr71.dll

DllMain

msvcr80.dll

DllMain

ole32.dll

CoCreateGuid, CoCreateInstance, CoTaskMemFree, CoTaskMemRealloc, CoTaskMemAlloc

shell32.dll

SHGetSpecialFolderPathA

shlwapi.dll

PathAddBackslashW, PathAppendW, PathRemoveBackslashA, PathAddBackslashA

user32.dll

GetSystemMetrics, wsprintfA, wsprintfW, CharNextW, UnregisterClassA

Export table

GetFactory

GetObjectCount

AVSubmit.dll

Norton AntiVirus by Symantec Corporation (Signed)

Remove AVSubmit.dll

Version:	15.5.0.23
MD5:	fdf7fb1aa42f4440230d7ef385bb6a22
SHA1:	4640aaa50a755ebd0042da00819b5c03f707443a
SHA256:	cad1864670f625186c695d472f8c4d7079a343555ce33c9fdc5ea7abbd418b06

Overview

avsubmit.dll is loaded as dynamic link library that runs in the context of a process. This is typically installed with the program Norton AntiVirus (Symantec Corporation) published by Symantec Corporation. The file is digitally signed by Symantec Corporation which was issued by the VeriSign certificate authority (CA).

Details

File name:	avsubmit.dll
Publisher:	Symantec Corporation
Product name:	Norton AntiVirus
Description:	Norton AntiVirus AnitVirus Submission Module
Typical file path:	C:\Program Files\norton internet security\norton antivirus\avsubmit.dll
File version:	15.5.0.23
Product version:	15.5.0
Size:	297.35 KB (304,488 bytes)
Certificate
Issued to:	Symantec Corporation
Authority (CA):	VeriSign
Effective date:	Sunday, September 10, 2006
Expiration date:	Saturday, November 24, 2007
Digital DNA
PE subsystem:	Windows GUI
File packed:	No
Code language:	Microsoft Visual C++ 7.1
.NET CLR:	No

More details

Programs

The following program will install this file

Norton AntiVirus Symantec Corporation

Symantec Corporation

11% remove

“Basic antivirus protection that stops viruses and spyware, so you can safely go online and share. Five patented layers of protection quickly and accurately detect and eliminate viruses and spyware. Protects your privacy and prevents your passwords and identity from being stolen when you surf the Web. Deep clean your PC – our powerful Threat-Removal Layer targets and scrubs out aggressive, hard-to-remove infections that less sophisticate...”