The sandbox environment has its own network and often no physical connection to production resources. The purpose of the sandbox is to execute malicious code and analyze it . Sometimes, this code could be a zero-day exploit where the malware’s effect and payload are unknown.