Should I block it?

No, this file is 100% safe to run.

VersionsAdditional versions 0.66% 1.32% 0.66% 1.32% 0.66% 0.66% 25.00% 7.24% 11.84% 31.58% 18.42% 0.66%


PE structurePE file structure

Show functions
Import table
GetModuleFileNameW, GetLastError, GetCurrentProcess, GetCurrentThread, DisableThreadLibraryCalls, GetCommandLineW, GetProcAddress, GetModuleHandleA, VirtualProtect, CreateEventW, CreateThread, GetCurrentProcessId, FreeLibrary, VirtualAlloc, VirtualFree, GetModuleHandleW, LoadLibraryW, FormatMessageW, GetCurrentThreadId, OutputDebugStringW, LocalFree, EncodePointer, DecodePointer, GetSystemTimeAsFileTime, GetTimeZoneInformation, GetCommandLineA, RaiseException, TerminateProcess, UnhandledExceptionFilter, SetUnhandledExceptionFilter, IsDebuggerPresent, HeapFree, HeapAlloc, IsProcessorFeaturePresent, GetCPInfo, InterlockedIncrement, InterlockedDecrement, GetACP, GetOEMCP, IsValidCodePage, TlsAlloc, TlsGetValue, TlsSetValue, TlsFree, SetLastError, RtlUnwind, Sleep, HeapSize, ExitProcess, WriteFile, GetStdHandle, GetLocaleInfoW, GetStringTypeW, WideCharToMultiByte, SetHandleCount, InitializeCriticalSectionAndSpinCount, GetFileType, GetStartupInfoW, DeleteCriticalSection, GetModuleFileNameA, FreeEnvironmentStringsW, GetEnvironmentStringsW, HeapCreate, HeapDestroy, QueryPerformanceCounter, GetTickCount, LeaveCriticalSection, FatalAppExitA, EnterCriticalSection, LCMapStringW, MultiByteToWideChar, GetUserDefaultLCID, GetLocaleInfoA, EnumSystemLocalesA, IsValidLocale, HeapReAlloc, SetConsoleCtrlHandler, InterlockedExchange, SetFilePointer, GetConsoleCP, GetConsoleMode, SetStdHandle, WriteConsoleW, CompareStringW, SetEnvironmentVariableA, CreateFileW, CloseHandle, FlushFileBuffers, SetEndOfFile, ReadFile, InitializeCriticalSection, FlushInstructionCache, GetModuleHandleExW, lstrlenW, IsBadCodePtr, IsBadReadPtr, IsWow64Process, GetVersionExW, GetSystemInfo, GetProcessHeap, CreateRemoteThread
RtlImageNtHeader, LdrUnlockLoaderLock, RtlCompareUnicodeString, LdrLockLoaderLock, RtlSetLastWin32Error, RtlGetLastWin32Error, ZwQueryInformationThread, ZwQueryVirtualMemory, LdrGetDllHandle, LdrLoadDll, LdrUnloadDll, LdrAddRefDll, LdrGetProcedureAddress, RtlAppendUnicodeStringToString, RtlFreeAnsiString, RtlUnicodeStringToAnsiString, RtlDeleteCriticalSection, RtlInitializeCriticalSection, RtlEnterCriticalSection, RtlLeaveCriticalSection
Export table


BASH by Symantec Corporation (Signed)

Remove UMEngx86.dll
MD5:   934d5dceea2da142958ff2f26fc4fb83
SHA1:   a709b57aba24f13cdd9166ad90127b5899f0cc39
SHA256:   85ca4a1ac3f1feb9f6dd7f7a3582a0404bf9da08462702bd775c61bb5338ed28

What is UMEngx86.dll?

SONAR Engine is part of Norton Internet Security, a PC program that provides malware prevention and removal during subscription period and uses signatures and heuristics to identify viruses, trojans and other malware. Norton Internet Security features include a email spam filtering, personal firewall, and phishing protection.


umengx86.dll is loaded as dynamic link library that runs in the context of a process. The file is digitally signed by Symantec Corporation which was issued by the VeriSign certificate authority (CA).


File name:umengx86.dll
Publisher:Symantec Corporation
Product name:BASH
Description:SONAR Engine
Typical file path:C:\ProgramData\norton\{0c55c096-0f1d-4f28-aaa2-85ef591126e7}\nis_20.0.0.136\definitions\bashdefs\20121106.001\umengx86.dll
File version:
Size:192.93 KB (197,560 bytes)
Build date:8/27/2013 7:32 AM
Issued to:Symantec Corporation
Authority (CA):VeriSign
Effective date:Monday, August 9, 2010
Digital DNA
File packed:No
More details

Windows OS versionsDistribution by Windows OS

OS versiondistribution
Windows 7 Home Premium 32.45%
Windows 8 21.19%
Windows 8 Pro 11.26%
Windows Vista Home Premium 8.61%
Microsoft Windows XP 7.28%
Windows 7 Ultimate 4.64%
Windows 7 Professional 3.97%
Windows 8 Pro with Media Center 3.97%
Windows 8 Enterprise 1.32%
Windows Vista Business 1.32%
Windows Se7en Titan 0.66%
Windows Developer Preview 0.66%
Windows 8 Single Language 0.66%
Windows 7 Home Basic 0.66%
Windows 7 Starter 0.66%
Windows Vista Home Basic 0.66%

Distribution by countryDistribution by country

United States installs about 71.14% of BASH.

OEM distributionDistribution by PC manufacturer

PC Manufacturerdistribution
Hewlett-Packard 33.58%
Toshiba 22.39%
Acer 14.18%
Dell 10.45%
Sony 4.48%
ASUS 4.48%
Intel 2.99%
Lenovo 1.49%
American Megatrends 1.49%
Samsung 0.75%
Should I remove It? Clean your PC of unwanted adware, toolbars and bloatware.

Download it for FREE