nplastpass.exe

by LastPass/GoTo
Security Tool

Summary

LastPass Native Plugin - browser native messaging host for LastPass password manager.

nplastpass.exe is the 770th most commonly executed Windows program in EchoTrail's dataset, observed 4,270 times across enterprise environments. It typically runs from C:\Program Files (x86)\LastPass and it is most often launched by cmd.exe.

770th
most commonly executed Windows program
4,270
observed executions
low
statistical confidence

Behavior

Top Paths

  • C:\Program Files (x86)\LastPass100%

Top Hashes (SHA256)

  • 836cf5e487aeb85722b9ddf68c41fb394177358236b1a49b620397e182ab987395.32%
  • dbcbf14e6ef91950586966c1deadeae0cd8bb14687801258b75a28a4346c95224.68%

Process Ancestry

Top Grandparents

Top Parents

Rare or environment-specific process names are omitted from ancestry tables. Percentages are of all observed relationships.

Ask Rocky about nplastpass.exe

Rocky answers questions about nplastpass.exe grounded in this same dataset — free, no account needed.

Need this data programmatically? The Rocky API includes 500 free lookups a month. Or just ask Rocky.

Data from EchoTrail's dataset of ~346M Windows process executions. Last extracted 2026-08-04.