NEGui.exe
by Various
Endpoint Management
Summary
NE GUI - network/endpoint management GUI component.
NEGui.exe is the 967th most commonly executed Windows program in EchoTrail's dataset, observed 2,286 times across enterprise environments. It typically runs from C:\Program Files (x86)\SonicWALL\SSL-VPN\NetExtender and it is most often launched by explorer.exe.
967th
most commonly executed Windows program
2,286
observed executions
low
statistical confidence
Behavior
Top Paths
- C:\Program Files (x86)\SonicWALL\SSL-VPN\NetExtender100%
Top Hashes (SHA256)
- 86f17451f18a7035dc9a9eba380e8c3e877960f13fee93eb0965b30ea9ae3f2127.58%
- 101b3d6d1157b92f3cbcad01190e7cd4ab4a67a6b6f76c280d762cb9bc50bf8015.32%
- c16aca5ac3d7544024a46aa86f663d002061535f3c5ce05881df16fe2850105513.31%
- cbd2ad188a5c9e3ff8fc2bd7b70206612c7143467dc196f0ac5c43d000fe9e7d10.25%
- 38205ff47b429951b858df097e8eca1845909b4d8cbf172db4e783b8243771478.27%
- 14065b6689b4a10e331c7f8b8f1951c6a9f190ee527b48c5cf08aca7d280b4716.17%
- f1821164230604711880fff4c5e6593d72c4a2ff1a7d9beea45e058c0ca43bff5.17%
- 45c55c00e4ed98b22a1672b911d3df7e1f64448b9090aad211663c61e739d3bb4.33%
- a90e515e59e41e3ce2a6ef0c5c0039668273e4d7ad259a07cbacd29bacbbf0dc4.12%
- f3120d67ce7ac43ade3a1e10c81b04f918861d995d5597191126ab9e877249202.36%
Process Ancestry
Top Grandparents
- userinit.exe80.97%
- explorer.exe17.94%
- chrome.exe0.27%
- svchost.exe0.14%
- winlogon.exe0.14%
- iexplore.exe0.09%
- NEGui.exe0.09%
- browser_broker.exe0.05%
Top Parents
- explorer.exe82.06%
- runonce.exe16.81%
- msiexec.exe0.39%
- RuntimeBroker.exe0.13%
- iexplore.exe0.04%
- rasautou.exe0.04%
Rare or environment-specific process names are omitted from ancestry tables. Percentages are of all observed relationships.
Ask Rocky about NEGui.exe
Rocky answers questions about NEGui.exe grounded in this same dataset — free, no account needed.
Need this data programmatically? The Rocky API includes 500 free lookups a month. Or just ask Rocky.
Data from EchoTrail's dataset of ~346M Windows process executions. Last extracted 2026-08-04.