COMODO detect virus only after open file(not always!!)

Firstly, sorry for my mistakes.
Secondly i would like to know why comodo detects virus in file only after open(it happened the first time)

I downloaded file(i knew that is infected, i checked it and comodo didn’t found anything.

I decided to run this file in the sandbox…

COMODO detected a virus inside the file after opening

COMODO screaming about a virus inside the file after opening

And then he detects a file as a virus

But why so late?Why not after scan?

Sorry for my mistakes :slight_smile:

not late, what you noticed is the cloud AV part of comodo. What happens is that it does not have a signature on your computer for the files but when you try to run it, CIS automatically checks with the servers and it had a signature for it there.