hh.exe
Summary
hh.exe is the executable that launches Microsoft's HTML Help program. It is a legitimate built-in Windows program and runs when a Windows compiled help file (.chm) is opened.
hh.exe is the 4357th most commonly executed Windows program in EchoTrail's dataset, observed 27 times across enterprise environments. It typically runs from C:\Windows and it is most often launched by explorer.exe.
Behavior
Top Paths
- C:\Windows92.59%
- C:\Windows\SysWOW647.41%
Top Hashes (SHA256)
- 71d890df1b06757543b785459411b430dc672b824f20f726c3ced56de357346e43.48%
- 541cf382a5c029a4350db338767df5f0da775c8e060e8ef0d9e3a9286040fda117.39%
- 0209f862aa595e9e155644830f380e9753dc58357967ef8252fa2fc7ea717c7e8.7%
- 308b97761a8b59409eeba0ed4ce1c24f6b3c81801358296f19e607348c5aa8cb8.7%
- 65c2b472d2f5c29b9f3b16ef803a85419c0c0a4088c128c96733584ae40179194.35%
- 6a21fe5bf30f52f15fd3526fab24fc2c3176b16462c66e87d0e51d7a448d465f4.35%
- 85518d00317a597dc83ee3fb78743538b9444664273bd592df16603d2c3e4c284.35%
- 9d57cf26a3ec99e5fa778597f0d7083c22890b58a68fbcad0c1b6da3a9caa3a94.35%
- eb63fd45ed7ec773eccaf0f20d44bc9b4ed0a3e01779d62321b1da954a0f6eb84.35%
Process Ancestry
Top Grandparents
- explorer.exe47.83%
- userinit.exe47.83%
- chrome.exe4.35%
Top Parents
- explorer.exe48.15%
- cmd.exe14.81%
- 7zFM.exe3.7%
- chrome.exe3.7%
- javaw.exe3.7%
- WINWORD.EXE3.7%
Rare or environment-specific process names are omitted from ancestry tables. Percentages are of all observed relationships.
Ask Rocky about hh.exe
Rocky answers questions about hh.exe grounded in this same dataset — free, no account needed.
Need this data programmatically? The Rocky API includes 500 free lookups a month. Or just ask Rocky.
Data from EchoTrail's dataset of ~346M Windows process executions. Last extracted 2026-08-04.