ChromEggscalator: regsvr32 chromelevator.ocx/mscom.ocx Load Followed by Chrome Credential Extraction Sequence

Duo Tech@duotech

•updated Jul 24, 2026•0•0•2

Detects regsvr32 loading chromelevator.ocx/mscom.ocx followed by the ChromEggscalator credential-extraction command sequence.