True or false, why?

A packed file's data cannot be seen in plain sight, but if we let it run, everything is expected to be unpacked in its process space.

To unpack a file, we need to dump the whole memory then extract theexecutable's process image to a file.

Volatility can be used to unpack an executable file without memory dumping.

The packed executable file has a different PE header and stub from that of the original host file.