Clever DLL execution for malware analysis in sandbox systems