Process Hollowing

A code injection technique where a legitimate process is created in a suspended state, its memory is replaced with malicious code, and then resumed.