Malware can hide in the frame buffer at modern resolutions. They could keep a full copy of it and each frame transition too.