09-01-2021 01:16 AM
wa_3rd_party_host_x.exe is known as OESIS V4 SDK and it is developed by OPSWAT Inc for X-bit softwares/OS.
These two binaries are part of OPSWAT and wa_3rd_party_host.exe WMI System calls for Windows updates check.
The Palo Alto GlobalProtect App uses the OPSWAT platform for detecting installed anti-malware products, anti-malware definition version, and for collecting other host information. OPSWAT is used in GlobalProtect for Windows, macOS, and Linux hosts.
The collected HIP data can then be utilized to enforce security policies based on HIP match profile. If binaries are detected as malware then you must whitelist it for proper functionality.
