RCO: Process Hollowing

See Process Hollowing's documentation here