I have some files in the sandbox which one I believe is comodo’s and the others of the operating system is it normal or is a bug?
[attachment deleted by admin]
When an application is run in the sandbox then Comodo will also launch cmdvirth.exe in the sandbox which in turn needs svchost.exe. So this is completely normal.
Also if any sanboxed application executes a trusted application that trusted application will also be sandboxed. So if an unknown executable is sandboxed and runs say firefox, firefox will in turn be sandboxed.