Yeah, I have one that will induce a sandbox alert that then can open IE…I imagine it follows the idea that if something that is sandboxed executes something, then what it runs will also be in the sandbox.