1. A method for dynamically determining an execution environment in a system having a plurality of execution environments including a first execution environment and a sandbox execution environment, the method comprising: receiving an executable application over a network connection; performing behavioral analysis, prior to execution of the executable application, on the executable application; determining an initial execution environment as a function of the behavioral analysis; if the behavioral analysis indicates sandboxed execution for the initial execution environment, performing a first load for execution of the executable application within the sandbox execution environment; if the behavioral analysis indicates other than sandboxed execution for the initial execution environment, performing a first load for execution of the executable application within the first execution environment; collecting behavioral characteristics of the executable application as it is executed in response to the first load in the initial execution environment; and performing behavioral analysis on the collected behavioral characteristics to determine whether the execution of the executable application should be moved from the initial execution environment to a secondary execution environment while the executable application is still executing in response to the first load, wherein only one of the initial execution environment and the secondary execution environment is the sandboxed execution environment.