wa_3rd_party_host_32.exe
Summary
WatchGuard/Third-party Host (32-bit) - hosts third-party integration modules for a security or management platform.
wa_3rd_party_host_32.exe is the 428th most commonly executed Windows program in EchoTrail's dataset, observed 16,022 times across enterprise environments. It typically runs from C:\Program Files\Palo Alto Networks\GlobalProtect and it is most often launched by PanGpHipMp.exe.
Behavior
Top Paths
- C:\Program Files\Palo Alto Networks\GlobalProtect90.18%
- C:\ProgramData\...5.5%
- C:\Program Files\Palo Alto Networks\GlobalProtect202207073.63%
- C:\Program Files (x86)\LogMeIn\x640.6%
- C:\Program Files (x86)\Common Files\Juniper Networks\TNC Client Plugin\OPSWAT0.07%
- C:\Users\...0.02%
- C:\Program Files\CCleaner0.01%
Top Hashes (SHA256)
- 96c1508eb587d71c1b993509a74d6fe6f3cf6549c8f44fea91cc38b74622f9a246.05%
- b770b2e8a2041e67644e900ddeb427fe39289f5c9d8c314fd2fc789e023b6c1e44.3%
- a1d63f5d461c8d4cd49f7eb18ca38322226b352eec6b331a848bd8c0efd687db2.91%
- 32dc71c5fb8658831c1c56b66e78ae85a54f21823b2e21605268f61442e9a5312.85%
- 4ce276b7580c9fc700285c6b64562de6f139dc20dffb4a6f06cad00bdcbdfacf2.58%
- 01acba78d23a2f879a05a0ae980d682230897745bcb45333a65a0e3e5e1bc1d40.56%
- 2f08ca052b0f29a2ee0b46718a5ab20ba18f9b5acd9678038368bb50dccad5940.43%
- d1104962f7cb90aca687fc34c6dece172d96c39e1e4fa25bedafc3b7f87d53b20.17%
- de985ec032c39786f8ae997e756e0f2203139f0e33d31de43f1230b8820311650.06%
- 74e32fa83f0ab1c572998ae5b096c5146c90c3791aad518c6b3d382eb29dd5960.05%
Process Ancestry
Top Grandparents
- PanGPS.exe96.99%
- dsAccessService.exe2.26%
Top Parents
- PanGpHipMp.exe91.36%
- pluggablesvc.exe5.5%
- PanGpHip.exe2.4%
- LogMeIn.exe0.6%
- dsAccessService.exe0.07%
- CCleaner64.exe0.01%
Top Children
- netsh.exe92.8%
- conhost.exe6.67%
- WerFault.exe0.42%
- whoami.exe0.08%
- ipconfig.exe0.02%
- cmd.exe<0.01%
Rare or environment-specific process names are omitted from ancestry tables. Percentages are of all observed relationships.
Ask Rocky about wa_3rd_party_host_32.exe
Rocky answers questions about wa_3rd_party_host_32.exe grounded in this same dataset — free, no account needed.
Need this data programmatically? The Rocky API includes 500 free lookups a month. Or just ask Rocky.
Data from EchoTrail's dataset of ~346M Windows process executions. Last extracted 2026-08-04.