Versions

1.0.10.0	50.72%
1.0.9.0	44.93%
1.0.7.0	4.35%

There are 3 versions of hpwa_service.exe in the wild, the latest version being 1.0.10.0. It is started as a Windows Service with the name 'HP Wireless Assistant Service' and described as “This service monitors the wireless devices in this computer and allows the HP Wireless Assistant application to turn devices on and off.”. . In addition, it is run under the context of the SYSTEM account with extensive privileges (the administrator accounts have the same privileges). The average file size is about 101.55 KB. The file is a digitally signed and issued to Hewlett-Packard Company by VeriSign. Some variations of the file have been seen to be installed with the program HP Wireless Assistant from Hewlett-Packard. The executable is a .NET framework assembly utilizing the CLR. During the process's lifecycle, the typical CPU resource utilization is less than 0.01%, the average private memory consumption is about 44.64 MB. Addionally, typically read and write I/O disk operations is about 10.29 KB per minute for reads and 129 Bytes per minute for writes.