1. A virtual machine system for computer code behavior analysis, the virtual machine system having a software processor comprising: a behavior record storing behavior flags representative of computer code behavior observed by virtually executing the computer code under analysis within the virtual machine; a sequencer that stores a sequence in which behavior flags are set in the behavior record during virtual execution of the computer code under analysis; and simulated memory and a simulated operating system representative of a host real computer system, the computer code under analysis interacting with the simulated memory and the simulated operating system to generate the behavior flags; wherein the virtual machine passes data representative of the behavior record to the host real computer system prior to termination of the virtual machine.