[hyperman1]

You can start a windows process in a paused state, then inject some code in it, pause or destroy the main thread, create your own thread, then unpause the process. The result would look a lot like this.

What you gain from it is another question. The injected code could do its malware thing first, then start the real program?

As the rootkit is on the internet, presumably you could read it. But I'm not going to touch it with a 10 meter pole.