hprest.exe running .dll in background

[vinogba]

We have a ProLiant BL460c Gen9 running on Windows 2012 R2 Datacenter.

We have noticed that hprest.exe is running the following .dll in the background.

Any idea how is this triggered and why is hprest.exe tring to run these .dlls?

c:\windows\temp\_mei21446\_ssl.pyd

c:\windows\temp\_mei147645\pythoncom27.dll

[Siddhartha_M]

Hello Vinogba,

If you have a s/w contract please log a case with HPE MS team. Else you need to engage MS team to directly investigae as it's a OS related issue and not a H/W break fix issue.

I am an HPE employee.

Regards,

[Jimmy Vance]

---

@vinogba wrote:

We have a ProLiant BL460c Gen9 running on Windows 2012 R2 Datacenter.

We have noticed that hprest.exe is running the following .dll in the background.

Any idea how is this triggered and why is hprest.exe tring to run these .dlls?

c:\windows\temp\_mei21446\_ssl.pyd

c:\windows\temp\_mei147645\pythoncom27.dll

---

Here is what happens on Windows when you run hprest/ilorest:

• Execute hprest.exe or ilorest.exe
• The tool creates a temporary directory ex: c:\windows\temp\_meixxxxxxxx (where xxxxxxxx is a random number)
• The tool extracts the contents of the zip payload(Python runtimes, compiled hprest/ilorest code, etc.) to that temporary directory.
• The tool launches the hprest/ilorest Python code using the Python runtime.
• When the Python code terminates, it returns control back to the stub program(hprest.exe or ilorest.exe). The stub then delete the temporary directory and terminates.

The DLL files that are running in the temp directory are part of the Python runtime that hprest/ilorest use.

[Walter Egli]

Hello Jimmy

Thanks for the explanation. (I was already afraid when I found this files in Windows\temp after our Virus attack last Week.)

My question to that. On our HP ML350 G9 the hprest.exe  will automatically started every about 6 Minutes. Over and over again.
Is that like this??

Best regards from Switzerland

Walter Egli