home

trgui.exe

Check Point Endpoint Connect

Check Point Software Technologies Ltd.

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘Check Point Endpoint Connect’.
Publisher:
Check Point Software Technologies  (signed by Check Point Software Technologies Ltd.)

Product:
Check Point Endpoint Connect

Description:
Check Point Endpoint Connect GUI

Version:
0000

MD5:
90f219c6ff7facc486bbb60dd12e4630

SHA-1:
643bde91b820b7a90e5ddf740266af236e1ff919

SHA-256:
4fdb04a983fc87a7f439c9070c6f2a4aa6a35993f64b18b3ea1dc0e11bc0bb0e

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/25/2024 5:56:49 AM UTC  (today)

File size:
609.4 KB (624,016 bytes)

Product version:
NGX R72

Copyright:
© 2005-2009 Copyright Check Point Software Technologies Ltd

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\checkpoint\endpoint security\endpoint connect\trgui.exe

Digital Signature
Signed by:
Check Point Software Technologies Ltd.

Authority:
VeriSign, Inc.

Valid from:
4/8/2009 2:00:00 AM

Valid to:
4/29/2010 1:59:59 AM

Subject:
CN=Check Point Software Technologies Ltd., OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Check Point Software Technologies Ltd., L=Ramat-Gan, S=Ramat-Gan, C=IL

Issuer:
CN=VeriSign Class 3 Code Signing 2004 CA, OU=Terms of use at https://www.verisign.com/rpa (c)04, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
70A491353493AF1CAF19817A97C8E816

File PE Metadata
Compilation timestamp:
2/11/2010 3:06:32 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

Entry address:
0x56BBD

Entry point:
55, 8B, EC, 6A, FF, 68, D8, AC, 46, 00, 68, FC, 6E, 45, 00, 64, A1, 00, 00, 00, 00, 50, 64, 89, 25, 00, 00, 00, 00, 83, EC, 68, 53, 56, 57, 89, 65, E8, 33, DB, 89, 5D, FC, 6A, 02, FF, 15, 30, 21, 46, 00, 59, 83, 0D, AC, 46, 49, 00, FF, 83, 0D, B0, 46, 49, 00, FF, FF, 15, 34, 21, 46, 00, 8B, 0D, 84, 46, 49, 00, 89, 08, FF, 15, 38, 21, 46, 00, 8B, 0D, 80, 46, 49, 00, 89, 08, A1, 3C, 21, 46, 00, 8B, 00, A3, A8, 46, 49, 00, E8, BD, 02, 00, 00, 39, 1D, F0, 44, 49, 00, 75, 0C, 68, E6, 6E, 45, 00, FF, 15, 40, 21...
 
[+]

Developed / compiled with:
Microsoft Visual C++ v6.0

Code size:
388 KB (397,312 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
Check Point Endpoint Connect

Command:
"C:\Program Files\checkpoint\endpoint security\endpoint connect\trgui.exe"


Scan trgui.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.