A method for analyzing a target object in a computing device comprising a plurality of computing resources including computing hardware and an operating system executing on the computing hardware, and a plurality of objects including executable objects stored in the computing hardware, the method comprising: identifying (410, 420) a first set of attributes of the target object, wherein the first set of attributes comprises attributes having values that are common among a class of objects, the class of objects being defined based on predefined criteria of similarity with the target object; identifying (410, 420) a second set of attributes of the target object, wherein the second set of attributes comprises attributes having values that are variable among the class of objects; subsequent to identifying the first set of attributes, computing a first hash of at least the first set of attributes, the first hash being computed according to a first hashing algorithm that is sensitive to variations in the first set of attributes among the class of objects; subsequent to identifying the second set of attributes, computing a second hash of at least the second set of attributes, the second hash being computed according to a second hashing algorithm that is insensitive to variations in the second set of attributes among the class of objects; generating an aggregate representation of the target object that is based on the first hash and the second hash; comparing the aggregate representation of the target object against at least one reference aggregate representation of one or more reference objects to produce a comparison result; and determining, based on the comparison result, whether the target object is similar to the one or more reference objects. identifying (410, 420) a first set of attributes of the target object, wherein the first set of attributes comprises attributes having values that are common among a class of objects, the class of objects being defined based on predefined criteria of similarity with the target object; identifying (410, 420) a second set of attributes of the target object, wherein the second set of attributes comprises attributes having values that are variable among the class of objects; subsequent to identifying the first set of attributes, computing a first hash of at least the first set of attributes, the first hash being computed according to a first hashing algorithm that is sensitive to variations in the first set of attributes among the class of objects; subsequent to identifying the second set of attributes, computing a second hash of at least the second set of attributes, the second hash being computed according to a second hashing algorithm that is insensitive to variations in the second set of attributes among the class of objects; generating an aggregate representation of the target object that is based on the first hash and the second hash; comparing the aggregate representation of the target object against at least one reference aggregate representation of one or more reference objects to produce a comparison result; and determining, based on the comparison result, whether the target object is similar to the one or more reference objects.