Virtual Process

When an executable file exists only in the virtual file system, creating a process from it requires a special approach.
BoxedApp creates such a process using a stub executable — a real EXE file that serves only as a temporary container.

The SDK calls CreateProcess with the CREATE_SUSPENDED flag to start the stub process in a suspended state.
Then, instead of executing the stub’s own code, BoxedApp maps the virtual EXE into the process memory, replaces the entry point, and transfers control to the virtual executable.

This way, the virtual EXE runs entirely from memory as if it were a regular process, but without ever existing on disk.
A virtual process is always attached to a virtual environment, since it originates from a virtual file.
BoxedApp automatically selects an appropriate stub executable, typically from the Windows system directory.