Suspicious HH.EXE Execution — Detection Rule

Detects a suspicious execution of a Microsoft HTML Help (HH.exe)

Read the full analysis on IntelFusions