Detecting Trojans using a sandbox