Antivirus tools provided reasonable protection against viruses, unlike previous generations that were simple and low-volume. Modern malware uses new techniques, such as exploits. An attacker can exploit a vulnerability in legitimate software to cause abnormal behavior. An attack that exploits an unknown software vulnerability is called a zero-day or 0-day attack. Before sandboxing, there was no effective way to stop it. A malware sandbox is a system that restricts an application's actions, such as opening Word documents, to an isolated environment. The sandbox examines the dynamic behavior and interactions of applications in a pseudo-user environment to uncover malicious intent.