Jump to content

Process Hollowing: Revision history

Diff selection: Mark the radio buttons of the revisions to compare and hit enter or the button at the bottom.
Legend: (cur) = difference with latest revision, (prev) = difference with preceding revision, m = minor edit.

12 April 2025

  • curprev 09:1609:16, 12 April 2025 SanzSkuy talk contribs 9,960 bytes +40 No edit summary
  • curprev 09:1409:14, 12 April 2025 SanzSkuy talk contribs 9,920 bytes 0 No edit summary
  • curprev 09:1209:12, 12 April 2025 SanzSkuy talk contribs 9,920 bytes +9,920 Created page with "Process Hollowing adalah salah satu teknik code injection yang menggantikan isi memori process yang sah dengan executable milik malware. Hal ini dilakukan setelah proses sah (misalnya svchost.exe) dijalankan dalam mode ''suspended'', lalu executable proses tersebut dikosongkan (dihilangkan dari memori), dan diisi dengan executable malware, yang nantinya akan dijalankan dengan “identitas” process sah tersebut. '''Contoh Kasus''' Misal Malware membuat process baru..."
Retrieved from "https://wiki.haidhi.my.id/wiki/index.php/Process_Hollowing"