the context of a legitimate process whose image is the executable file brought in by the attacker. DLL SideLoading is very popular among attackers because it lets them take advantage of DLL Search Order Hijacking