Kimsuky: hh.exe Launches Malicious .CHM File for Initial Access
Detects the execution of Microsoft HTML Help (hh.exe) with a .chm file in the command line. Adversaries often use Compiled HTML files (.chm) to conceal malicious code and bypass security controls, as they can execute scripts or launch other payloads when opened.
Cortex XDR
