Process Hollowing

The Process Hollowing module replaces a target process with a new executable image stored on the Virtual File System (VF S) or local computer. This module currently supports native applications only.