Should I block it?

No, this file is 100% safe to run.

VersionsAdditional versions 0.66% 1.32% 0.66% 1.32% 0.66% 0.66% 25.00% 7.24% 11.84% 31.58% 18.42% 0.66%


PE structurePE file structure

Show functions
Import table
GetModuleFileNameW, GetLastError, GetCurrentProcess, GetCurrentThread, DisableThreadLibraryCalls, GetCommandLineW, GetProcAddress, GetModuleHandleA, VirtualProtect, CreateEventW, CreateThread, GetCurrentProcessId, FreeLibrary, VirtualAlloc, VirtualFree, GetModuleHandleW, LoadLibraryW, FormatMessageW, GetCurrentThreadId, OutputDebugStringW, LocalFree, EncodePointer, DecodePointer, GetSystemTimeAsFileTime, GetTimeZoneInformation, GetCommandLineA, RaiseException, TerminateProcess, UnhandledExceptionFilter, SetUnhandledExceptionFilter, IsDebuggerPresent, HeapFree, HeapAlloc, IsProcessorFeaturePresent, GetCPInfo, InterlockedIncrement, InterlockedDecrement, GetACP, GetOEMCP, IsValidCodePage, TlsAlloc, TlsGetValue, TlsSetValue, TlsFree, SetLastError, RtlUnwind, Sleep, HeapSize, ExitProcess, WriteFile, GetStdHandle, GetLocaleInfoW, GetStringTypeW, WideCharToMultiByte, SetHandleCount, InitializeCriticalSectionAndSpinCount, GetFileType, GetStartupInfoW, DeleteCriticalSection, GetModuleFileNameA, FreeEnvironmentStringsW, GetEnvironmentStringsW, HeapCreate, HeapDestroy, QueryPerformanceCounter, GetTickCount, LeaveCriticalSection, FatalAppExitA, EnterCriticalSection, LCMapStringW, MultiByteToWideChar, GetUserDefaultLCID, GetLocaleInfoA, EnumSystemLocalesA, IsValidLocale, HeapReAlloc, SetConsoleCtrlHandler, InterlockedExchange, SetFilePointer, GetConsoleCP, GetConsoleMode, SetStdHandle, WriteConsoleW, CompareStringW, SetEnvironmentVariableA, CreateFileW, CloseHandle, FlushFileBuffers, SetEndOfFile, ReadFile, InitializeCriticalSection, FlushInstructionCache, GetModuleHandleExW, lstrlenW, IsBadCodePtr, IsBadReadPtr, IsWow64Process, GetVersionExW, GetSystemInfo, GetProcessHeap, CreateRemoteThread
RtlImageNtHeader, LdrUnlockLoaderLock, RtlCompareUnicodeString, LdrLockLoaderLock, RtlSetLastWin32Error, RtlGetLastWin32Error, ZwQueryInformationThread, ZwQueryVirtualMemory, LdrGetDllHandle, LdrLoadDll, LdrUnloadDll, LdrAddRefDll, LdrGetProcedureAddress, RtlAppendUnicodeStringToString, RtlFreeAnsiString, RtlUnicodeStringToAnsiString, RtlDeleteCriticalSection, RtlInitializeCriticalSection, RtlEnterCriticalSection, RtlLeaveCriticalSection
Export table


BASH by Symantec Corporation (Signed)

Remove UMEngx86.dll
MD5:   c081e991f6c1b0351fe0da9a34d05063
SHA1:   78987a0de731d7b09e2d3c765596f579405750b6

What is UMEngx86.dll?

SONAR Engine is part of Norton Internet Security, a PC program that provides malware prevention and removal during subscription period and uses signatures and heuristics to identify viruses, trojans and other malware. Norton Internet Security features include a email spam filtering, personal firewall, and phishing protection.


umengx86.dll is loaded as dynamic link library that runs in the context of a process. The file is digitally signed by Symantec Corporation which was issued by the VeriSign certificate authority (CA).


File name:umengx86.dll
Publisher:Symantec Corporation
Product name:BASH
Description:SONAR Engine
Typical file path:C:\ProgramData\norton\{0c55c096-0f1d-4f28-aaa2-85ef591126e7}\nis_20.0.0.136\definitions\bashdefs\20121106.001\umengx86.dll
File version:
Size:192.93 KB (197,560 bytes)
Build date:9/21/2013 4:11 AM
Issued to:Symantec Corporation
Authority (CA):VeriSign
Effective date:Monday, August 9, 2010
Digital DNA
File packed:No
More details

Windows OS versionsDistribution by Windows OS

OS versiondistribution
Windows 7 Home Premium 32.45%
Windows 8 21.19%
Windows 8 Pro 11.26%
Windows Vista Home Premium 8.61%
Microsoft Windows XP 7.28%
Windows 7 Ultimate 4.64%
Windows 7 Professional 3.97%
Windows 8 Pro with Media Center 3.97%
Windows 8 Enterprise 1.32%
Windows Vista Business 1.32%
Windows Se7en Titan 0.66%
Windows Developer Preview 0.66%
Windows 8 Single Language 0.66%
Windows 7 Home Basic 0.66%
Windows 7 Starter 0.66%
Windows Vista Home Basic 0.66%

Distribution by countryDistribution by country

United States installs about 71.14% of BASH.

OEM distributionDistribution by PC manufacturer

PC Manufacturerdistribution
Hewlett-Packard 33.58%
Toshiba 22.39%
Acer 14.18%
Dell 10.45%
Sony 4.48%
ASUS 4.48%
Intel 2.99%
Lenovo 1.49%
American Megatrends 1.49%
Samsung 0.75%
Should I remove It? Clean your PC of unwanted adware, toolbars and bloatware.

Download it for FREE