Launcher for setting analysis environment variations for malware detection

A non-transitory storage medium including software that, when executed by one or more hardware processors, perform operations for automatically analyzing an object for malware, the non-transitory storage medium comprising:

• a first software component that, when executed by the one or more hardware processors, generates one or more virtual machines including at least a first virtual machine;
• a launcher logic that, when executed by the one or more hardware processors, configures a processing framework for use by the first virtual machine, the processing framework includes a plurality of different application and plug-in combinations selected based on a type of the object and operating concurrently with each other within the first virtual machine to produce results and is configured by the launching logic based on one or more parameters associated with the object provided to the first virtual machine for analysis;
• and
• a second software component that, when execution by the one or more hardware processors, is configured to classify the object as part of a potential malicious attack or benign based on the results of monitoring one or more behaviors associated with the processing of the object by at least one or more of the plurality of different application and plug-in combinations.

A computerized method for automatically analyzing an object for malware comprising:

• running a virtual machine within an electronic device;
• analyzing an object by a processing framework including a plurality of processes operating within the virtual machine, each of the plurality of processes being configured with different application and plug-in combinations based on a type of the object and operating concurrently to produce results including information associated with behaviors of the object observed during execution of the object;
• and
• classifying the object as part of a potential malicious attack or benign based on the results of monitoring one or more behaviors associated with the processing of the object by at least the different application and plug-in combinations,
• wherein the processing framework is configured based on one or more parameters associated with the object provided to the virtual machine for analysis.