That was their point, yes. These tools treat anything they see malware do as a potential signal of malware, without any consideration of what the activity is. O

That was their point, yes. These tools treat anything they see malware do as a potential signal of malware, without any consideration of what the activity is. Obviously they're not actually going to flag "running on a CPU" as a sign of malware, but it's a pretty reasonable parody of their methodology.