persistence-info.github.io

View on GitHub

.chm helper DLL

Location:

HKCU\Software\Microsoft\HtmlHelp Author

Classification:

Criteria Value
Permissions User
Security context User
Persistence type Registry
Code type DLL
Launch type User initiated1
Impact Non-destructive
OS Version All OS versions
Dependencies OS only
Toolset Scriptable

Description:

The DLL of your choice will be loaded anytime the old-school .chm file is opened.

References:

https://www.hexacorn.com/blog/2018/04/22/beyond-good-ol-run-key-part-76/

Credits:

@Hexacorn

See also:

hhctrl.ocx

Remarks:

  1. Happens when user opens a .chm fileĀ