1. A system for exploit detection by detecting heap spray in memory, comprising: a processor configured to: execute a program in a virtual environment; and detect heap spray in memory while executing the program in the virtual environment, comprising to: for each newly allocated block of memory of a plurality of allocated blocks allocated during the execution of the program, compare a sequence of bytes of the each newly allocated block of memory with a predetermined sequence of bytes; count a number of allocated blocks of the plurality of allocated blocks having the sequence of bytes match the predetermined sequence of bytes; and in the event that the number of allocated blocks of the plurality of allocated blocks having the sequence of bytes match the predetermined sequence of bytes exceeds a first threshold, determine the program is performing the heap spray in memory; and a memory coupled to the processor and configured to provide the processor with instructions.