Add prisma's Sandbox awareness via user behavior

[knowmalware]

https://gitlab.com/brn1337/sandbox-detection-user-behaviour

A technique to evade sandboxes by identifying real user behavior in a short and reliable way.

The assumption underlying the success of this technique is that Sanbox won't run other softwares to avoid overlapping behaviours, but real users do!

The code takes a screenshot each time the user click, then using the root-mean-square difference compares the images, if the images are actually different the click was a meaningful action. If a minimum tolerance between multiple comparisions is exceeded the evil code is executed.