Golden Pass-ta-key - memory scraping aimed at chrome.exe (SDS extraction)

Ankit Mehta@Secvyn

•updated Aug 6, 2026•1•0•14

Detects potential memory scraping or credential dumping attempts targeting the Google Chrome process (chrome.exe). The rule monitors for command-line arguments involving known dump utilities ('MiniDump', 'procdump', 'rundll32') or the use of 'comsvcs.dll', which is commonly used to dump process memory, specifically when targeted against a browser process.