Some further information:

1. Multiple instances can be started and via task manager affinity can be set to a specific core.

2. Screen of application can be resized and should then fill the new screen, this allows the thread to do more pixel processing and consume more cpu time to try and detect more fine grained time slices/interrupts, though spyware might detect higher cpu usage and stay dormant.

The affinity experiment is quite interesting to see what operations/events like mouse events get executed on what core !

Bye,
Skybuck.