1. A computerized method comprising: receiving, by a network device, an object for analysis; conducting, by the network device, a first analysis to determine whether the object is configured to invoke reflection operations at run-time; and responsive to the network device determining that the object is configured to invoke reflection operations at run-time, conducting a second analysis within one or more virtual machines to determine whether the object is deemed to be malicious.