wa_3rd_party_host_64.exe

by Various
Application Support

Summary

WatchGuard/Third-party Host (64-bit) - hosts third-party integration modules for a security or management platform.

wa_3rd_party_host_64.exe is the 438th most commonly executed Windows program in EchoTrail's dataset, observed 15,442 times across enterprise environments. It typically runs from C:\Program Files\Palo Alto Networks\GlobalProtect and it is most often launched by PanGpHipMp.exe.

438th
most commonly executed Windows program
15,442
observed executions
medium
statistical confidence

Behavior

Top Paths

  • C:\Program Files\Palo Alto Networks\GlobalProtect90.4%
  • C:\ProgramData\...5.6%
  • C:\Program Files\Palo Alto Networks\GlobalProtect202207073.77%
  • C:\Program Files (x86)\LogMeIn\x640.23%
  • C:\Program Files\CCleaner0.01%

Top Hashes (SHA256)

  • df8986c95bf481d2ff04c7002b028bc443d851bf87445d8e7d24c19144e031c847.54%
  • 354dde38618560ae02290bb5830d738c1b5aefb07eb507d16820150eaa331e4a46%
  • 9ba7e43caf5e3734db8dae46efbc8058ab56ac1f6bdec853c45f546bace05c352.92%
  • 9d7a6751997c99ca4f732222129b4b7e9939e58879615f817928fa1c9f7820522.68%
  • 3b5dc6990a617fb5fbc28d19b312beb39f888c24d17909f27f91c60815a145070.57%
  • eb1409ed1e670f75df8d8d1d48c29b88cd59ded4225b3c117bc434832204c4700.23%
  • 8872ada3a2338cf8dbe46cb46f14f1ea07c733da882ed1213a72a57ae5fb01160.06%
  • 0687f06acd282165703e8ec6ed537bc8ad8a5e4fdb98713d491e9ac35346f61c0.01%

Process Ancestry

Top Parents

Top Children

Rare or environment-specific process names are omitted from ancestry tables. Percentages are of all observed relationships.

Ask Rocky about wa_3rd_party_host_64.exe

Rocky answers questions about wa_3rd_party_host_64.exe grounded in this same dataset — free, no account needed.

Need this data programmatically? The Rocky API includes 500 free lookups a month. Or just ask Rocky.

Data from EchoTrail's dataset of ~346M Windows process executions. Last extracted 2026-08-04.