But something strange happened now running the leaktest in the three ways you suggested: this time I did not receive the alert asking for elevated privileges. Any possible explanation for this behavior?
Elevation alerts won't be displayed when sandbox is disabled (point 3).
Elevation alert did not appear on point 1 and 2 because those ways forced clt.exe to run sandboxed.
Point 1 reproduce a general scenario where an unrecognized/untrusted file (cmd.exe\clt.bat) run another executable (clt.exe). In such case the latter executable (clt.exe) will be automatically sandboxed without virtualization
(automatic sandoxing would happen even if the latter was an application on Comodo's list of safe files )
Point 2 force sandboxing using context menu. In such case file/registry virtualization is enabled as well. (Thus some tests did incorrectly appear as vulnerable
Point 3 use D+ and should be able to pass all CLT tests but I too had Coat occasionally fail on V4
without apparent reason. Rebooting windows and testing CLT with sandbox disabled increase the chance yo pass Coat as well but finger crossed this glitch will be solved in time.
About PhysicalMemory: perhaps you got onto another glitch. (2nd run cause failed Leaktests in sandbox if the 1s run was elevated
) You could take that test again after a reboot.
About DDE: Not sure if sandbox is meant to block it.You could try to reboot and test it again.
You can find additional information about the sandbox in Introduction to the Sandbox
and more in How the Comodo Sandbox works
ATM I'm running CIS with sandbox enabled but I still undecided.