Sandbox detection for the masses: leak, abuse, test