: Automated sandboxes like ANY.RUN have noted behaviors such as modifying system certificates and reading environment values during execution.