Dynamic malware analysis of a url using a browser executed in an instrumented virtual machine environment

A system, comprising:

• a processor;
• and
• a memory coupled with the processor, wherein the memory is configured to provide the processor with instructions which when executed cause the processor to:
• receive a Uniform Resource Locator (URL) sample for dynamic malware analysis using a browser executed in an instrumented virtual machine environment executed on the processor;
• and
• dynamically determine a period of time allocated for performing the dynamic malware analysis of the URL sample using the browser executed in the instrumented virtual machine environment, wherein the URL sample is rendered using the browser executed in the instrumented virtual machine environment and monitored using the instrumented virtual machine environment for the period of time allocated for performing the dynamic malware analysis of the URL sample, wherein the determining of the period of time allocated for performing the dynamic malware analysis of the URL sample comprises to:
• perform the following:
• A) generate a message when a registered event of the URL sample is completed;
• B) generate a User Interface (UI) event without delay to trigger one or more functions that are triggered in response to one or more UI events, the one or more functions being associated with the URL sample;
• or
• C) a combination thereof.

A method, comprising:

• receiving a Uniform Resource Locator (URL) sample for dynamic malware analysis using a browser executed in an instrumented virtual machine environment executed on a processor;
• and
• dynamically determining a period of time allocated for performing the dynamic malware analysis of the URL sample using the browser executed in the instrumented virtual machine environment, wherein the URL sample is rendered using the browser executed in the instrumented virtual machine environment and monitored using the instrumented virtual machine environment for the period of time allocated for performing the dynamic malware analysis of the URL sample, wherein the determining of the period of time allocated for performing the dynamic malware analysis of the URL sample comprises:
• performing the following:
• A) generating a message when a registered event of the URL sample is completed;
• B) generating a User Interface (UI) event without delay to trigger one or more functions that are triggered in response to one or more UI events, the one or more functions being associated with the URL sample;
• or
• C) a combination thereof.

A computer program product being embodied in a non-transitory, tangible computer readable storage medium and comprising computer instructions for:

• receiving a Uniform Resource Locator (URL) sample for dynamic malware analysis using a browser executed in an instrumented virtual machine environment executed on a processor;
• and
• dynamically determining a period of time allocated for performing the dynamic malware analysis of the URL sample using the browser executed in the instrumented virtual machine environment, wherein the URL sample is rendered using the browser executed in the instrumented virtual machine environment and monitored using the instrumented virtual machine environment for the period of time allocated for performing the dynamic malware analysis of the URL sample, wherein the determining of the period of time allocated for performing the dynamic malware analysis of the URL sample comprises:
• performing the following:
• A) generating a message when a registered event of the URL sample is completed;
• B) generating a User Interface (UI) event without delay to trigger one or more functions that are triggered in response to one or more UI events, the one or more functions being associated with the URL sample;
• or
• C) a combination thereof.