Separate, disposable execution environment for accessing unverified content

A system comprising a display monitor, a network interface, computer processor, and a tangible computer memory storing computer-executable instructions that, when executed by the computer processor, cause the system to:

• receive a request to open unverified content from a remote e-mail server;
• determine, by an application resolver, that the unverified content is designated for opening in a disposable environment, wherein the application resolver is registered as a handler for the unverified content that meets particular criterion;
• cause the unverified content to be uploaded to a cloud file storage;
• automatically instruct a virtualization server to provision a temporary virtual machine in the disposable environment to open the content uploaded into the cloud file storage, wherein the application resolver resides on a user device physically separate from the disposable environment;
• receive a confirmation from the virtualization server that the temporary virtual machine in the disposable environment is ready to connect;
• launch a client agent configured to communicate through the network interface using at least a remote presentation protocol with the virtualization server;
• connect, through the network interface using the client agent, to the temporary virtual machine in the disposable environment;
• display, on the display monitor of the user device, an output resulting from opening of the unverified content at the temporary virtual machine in the disposable environment;
• terminate the connection with the temporary virtual machine in the disposable environment, including causing the virtualization server to destroy the temporary virtual machine and the disposable environment;
• and
• cause the virtualization server to delete the unverified content in the cloud file storage.

A system comprising a network interface, computer processor, and a tangible computer memory storing computer-executable instructions that, when executed by the computer processor, cause the system to:

• receive a request to open unverified content;
• cause the unverified content to be downloaded to the computer memory;
• instruct, by an orchestration service module, the provisioning of a temporary virtual machine in a disposable environment to open the downloaded unverified content, wherein the disposable environment is physically separate from an application resolver residing on a user device;
• send a confirmation to the user device that the temporary virtual machine in the disposable environment is ready to connect;
• connect the temporary virtual machine in the disposable environment through a network interface using at least a remote presentation protocol to a client agent in the user device;
• open the downloaded unverified content in the temporary virtual machine in the disposable environment;
• send an output resulting from opening of the downloaded unverified content at the temporary virtual machine in the disposable environment to the user device;
• terminate the connection with the client agent in the user device, including causing the temporary virtual machine to be destroyed;
• and
• delete the downloaded unverified content in the cloud file storage.