Esentutl Steals Browser Information

SigmaHQ Detections@sigmaHQ

•updated Aug 28, 2025•0•0•0

One way Qbot steals sensitive information is by extracting browser data from Internet Explorer and Microsoft Edge by using the built-in utility esentutl.exe