hardware abstraction layer and this process can be high for many reasons. Was there any other processes going up? How long did hal stay up? Do you have a standalone X670 or a stack? What kind of traffic/activities were happening during the time hal was high?
Those questions might give us some insight on what was happening during that time.