abe_decrypt.dll loaded into Chromium browser process (CrySome credential theft)

Duo Tech@duotech

•updated Jul 9, 2026•3•0•5

Detects the loading of 'abe_decrypt.dll' into Google Chrome or Microsoft Edge browser processes. This behavior is highly irregular and often associated with browser-based malware, credential theft, or injection attempts to intercept browser data.