value:  Azorult can decrypt the payload into memory create a new suspended process of itself then inject a decrypted payload to the new process and resume new process execution. 
name: Process Injection: Process Hollowing