esentutl

MITRE

Malware Type:
Tool

First seen:
Unknown

Last seen:
Unknown

Details:

[esentutl](https://attack.mitre.org/software/S0404) is a command-line tool that provides database utilities for the Windows Extensible Storage Engine.(Citation: Microsoft Esentutl)

Associated Techniques (6)

ID	ATT&CK	Tactics
T1003.003	NTDS	-
T1005	Data from Local System	-
T1006	Direct Volume Access	-
T1105	Ingress Tool Transfer	-
T1564.004	NTFS File Attributes	-
T1570	Lateral Tool Transfer	-

Aliases (105)

esentutl.exe esentutl.exe esentutl.exe esentutl.exe esentutl.exe esentutl.exe esentutl.exe esentutl.exe esentutl.exe esentutl.exe esentutl.exe esentutl.exe esentutl.exe esentutl.exe esentutl.exe esentutl.exe esentutl.exe esentutl.exe esentutl.exe esentutl.exe esentutl.exe esentutl.exe esentutl.exe esentutl.exe esentutl.exe esentutl.exe esentutl.exe esentutl.exe esentutl.exe esentutl.exe esentutl.exe esentutl.exe esentutl.exe esentutl.exe esentutl.exe esentutl.exe esentutl.exe esentutl.exe esentutl.exe esentutl.exe esentutl.exe esentutl.exe esentutl.exe esentutl.exe esentutl.exe esentutl.exe esentutl.exe esentutl.exe esentutl.exe esentutl.exe esentutl.exe esentutl.exe esentutl.exe esentutl.exe esentutl.exe esentutl.exe esentutl.exe esentutl.exe esentutl.exe esentutl.exe esentutl.exe esentutl.exe esentutl.exe esentutl.exe esentutl.exe esentutl.exe esentutl.exe esentutl.exe esentutl.exe esentutl.exe esentutl.exe esentutl.exe esentutl.exe esentutl.exe esentutl.exe esentutl.exe esentutl.exe esentutl.exe esentutl.exe esentutl.exe esentutl.exe esentutl.exe esentutl.exe esentutl.exe esentutl.exe esentutl.exe esentutl.exe esentutl.exe esentutl.exe esentutl.exe esentutl.exe esentutl.exe esentutl.exe esentutl.exe esentutl.exe esentutl.exe esentutl.exe esentutl.exe esentutl.exe esentutl.exe esentutl.exe esentutl.exe esentutl.exe esentutl.exe esentutl.exe

Used by Actors (3)

Chimera
Unknown

INC Ransom
Unknown

menuPass
Unknown

Metadata

ID:	765
Created:	13/01/2026 17:48
Updated:	06/03/2026 16:00