Should I block it?

No, this file is 100% safe to run.

VersionsAdditional versions 0.66% 1.32% 0.66% 1.32% 0.66% 0.66% 25.00% 7.24% 11.84% 31.58% 18.42% 0.66%


PE structurePE file structure

Show functions
Import table
GetModuleFileNameW, GetLastError, GetCurrentProcess, GetCurrentThread, DisableThreadLibraryCalls, GetCommandLineW, GetProcAddress, GetModuleHandleA, VirtualProtect, CreateEventW, CreateThread, GetCurrentProcessId, FreeLibrary, VirtualAlloc, VirtualFree, GetModuleHandleW, LoadLibraryW, FormatMessageW, GetCurrentThreadId, OutputDebugStringW, LocalFree, EncodePointer, DecodePointer, GetSystemTimeAsFileTime, GetTimeZoneInformation, GetCommandLineA, RaiseException, TerminateProcess, UnhandledExceptionFilter, SetUnhandledExceptionFilter, IsDebuggerPresent, HeapFree, HeapAlloc, IsProcessorFeaturePresent, GetCPInfo, InterlockedIncrement, InterlockedDecrement, GetACP, GetOEMCP, IsValidCodePage, TlsAlloc, TlsGetValue, TlsSetValue, TlsFree, SetLastError, RtlUnwind, Sleep, HeapSize, ExitProcess, WriteFile, GetStdHandle, GetLocaleInfoW, GetStringTypeW, WideCharToMultiByte, SetHandleCount, InitializeCriticalSectionAndSpinCount, GetFileType, GetStartupInfoW, DeleteCriticalSection, GetModuleFileNameA, FreeEnvironmentStringsW, GetEnvironmentStringsW, HeapCreate, HeapDestroy, QueryPerformanceCounter, GetTickCount, LeaveCriticalSection, FatalAppExitA, EnterCriticalSection, LCMapStringW, MultiByteToWideChar, GetUserDefaultLCID, GetLocaleInfoA, EnumSystemLocalesA, IsValidLocale, HeapReAlloc, SetConsoleCtrlHandler, InterlockedExchange, SetFilePointer, GetConsoleCP, GetConsoleMode, SetStdHandle, WriteConsoleW, CompareStringW, SetEnvironmentVariableA, CreateFileW, CloseHandle, FlushFileBuffers, SetEndOfFile, ReadFile, InitializeCriticalSection, FlushInstructionCache, GetModuleHandleExW, lstrlenW, IsBadCodePtr, IsBadReadPtr, IsWow64Process, GetVersionExW, GetSystemInfo, GetProcessHeap, CreateRemoteThread
RtlImageNtHeader, LdrUnlockLoaderLock, RtlCompareUnicodeString, LdrLockLoaderLock, RtlSetLastWin32Error, RtlGetLastWin32Error, ZwQueryInformationThread, ZwQueryVirtualMemory, LdrGetDllHandle, LdrLoadDll, LdrUnloadDll, LdrAddRefDll, LdrGetProcedureAddress, RtlAppendUnicodeStringToString, RtlFreeAnsiString, RtlUnicodeStringToAnsiString, RtlDeleteCriticalSection, RtlInitializeCriticalSection, RtlEnterCriticalSection, RtlLeaveCriticalSection
Export table


BASH by Symantec Corporation (Signed)

Remove UMEngx86.dll
MD5:   0be284de2976b5a240fd777b3ea7dc34
SHA1:   33e5d54ec776fef06beca37a59749b45f0e349f4

What is UMEngx86.dll?

SONAR Engine is part of Norton Internet Security, a PC program that provides malware prevention and removal during subscription period and uses signatures and heuristics to identify viruses, trojans and other malware. Norton Internet Security features include a email spam filtering, personal firewall, and phishing protection.


umengx86.dll is loaded as dynamic link library that runs in the context of a process. The file is digitally signed by Symantec Corporation which was issued by the VeriSign certificate authority (CA).


File name:umengx86.dll
Publisher:Symantec Corporation
Product name:BASH
Description:SONAR Engine
Typical file path:C:\ProgramData\norton\{0c55c096-0f1d-4f28-aaa2-85ef591126e7}\nis_20.0.0.136\definitions\bashdefs\20121106.001\umengx86.dll
File version:
Size:192.93 KB (197,560 bytes)
Build date:8/13/2013 1:08 AM
Issued to:Symantec Corporation
Authority (CA):VeriSign
Effective date:Monday, August 9, 2010
Digital DNA
File packed:No
More details

Windows OS versionsDistribution by Windows OS

OS versiondistribution
Windows 7 Home Premium 32.45%
Windows 8 21.19%
Windows 8 Pro 11.26%
Windows Vista Home Premium 8.61%
Microsoft Windows XP 7.28%
Windows 7 Ultimate 4.64%
Windows 7 Professional 3.97%
Windows 8 Pro with Media Center 3.97%
Windows 8 Enterprise 1.32%
Windows Vista Business 1.32%
Windows Se7en Titan 0.66%
Windows Developer Preview 0.66%
Windows 8 Single Language 0.66%
Windows 7 Home Basic 0.66%
Windows 7 Starter 0.66%
Windows Vista Home Basic 0.66%

Distribution by countryDistribution by country

United States installs about 71.14% of BASH.

OEM distributionDistribution by PC manufacturer

PC Manufacturerdistribution
Hewlett-Packard 33.58%
Toshiba 22.39%
Acer 14.18%
Dell 10.45%
Sony 4.48%
ASUS 4.48%
Intel 2.99%
Lenovo 1.49%
American Megatrends 1.49%
Samsung 0.75%
Should I remove It? Clean your PC of unwanted adware, toolbars and bloatware.

Download it for FREE