cmdagent access internet for long periods when no computer activity

I recently updated to the latest Firewall. For the first time, I have implemented the Sandbox. Also, for the first time, I see cmdagent connecting to on both TCP and UDP ports for long periods of time when the computer is on but not in use. I am running in safe mode and have had no intrusion attempts or unrecognized files. What gives?

It’s Comodo.