@JackKeeley_ @mdhardeman @MalwareTechBlog Your intuition seems to be correct.