Antivirus heuristics depend on behavioral analysis: detecting memory allocations for irregular rendering or unexpected polymorphic state transitions. - Parker Core Knowledge