User interface with real-time visual playback along with synchronous textual analysis log display and event/time index for anomalous behavior detection in applications

An apparatus for detecting anomalous behavior by software under test that suggests a presence of malware, suspicious code or pernicious code, the apparatus comprising:

• a hardware processor;
• and
• a storage device communicatively coupled to the hardware processor, the storage device comprises logic that, when executed by the hardware processor, (i) conducts an analysis of operations of the software for an occurrence of one or more events, (ii) generates a plurality of display images corresponding to a display output produced by the operations of the software, and (iii) generates and displays, contemporaneously and synchronized with the plurality of display images, a textual log that illustrates the one or more events being monitored during the analysis of the operations of the software and whether an event of the one or more events corresponds to an anomalous behavior indicating that the software includes malware, suspicious code or pernicious code.

An apparatus for detecting anomalous behavior by an application software under test that suggests a presence of malware, suspicious code or pernicious code, the apparatus comprising:

• a hardware processor;
• and
• a storage device communicatively coupled to the hardware processor, the storage device to store logic that, when executed by the hardware processor, to (i) conduct an analysis of operations of the software for an occurrence of one or more events, (ii) generate a video of a display output produced by the operations of the software, (iii) generate and display, contemporaneously and synchronized with the video, a textual log including information associated with the one or more events, the textual log provides information as to (i) when each event of the one or more events occurs within an execution flow of the operations of the software and (ii) when each event corresponds to an anomalous behavior indicating that the software includes malware, suspicious code or pernicious code.