Affinity appears to be trying to inject code accordion to my firewall HIPS and I would like to know why

[JGansett]

Hello,

Recently on checking the log in the Host Intrusion Protection System of my firewall (Vipre), it is indicating Affinity has at some point attempted to inject code and references  Affinity crashpad_handler.exe pad.  Curious as to what this is and why the firewall is blocking it.

 

It has occurred with Publisher, Photo and Designer, all are the latest versions.  It's not like it happens all the time, and from the description it would seem it happens if there is a program crash.

Thank you very much,

Jim Avedisian

-email address removed-

Edited October 4, 2023 by Lee_T
email address removed

[Dan C]

Hi JGansett,

This is just a false positive. The crash handler is just a process that does as it describes, handles crashes by writing logs and closing the software correctly, there's no "code injection" or anything like that.

I can't see there being an issue blocking this process if you wish to though.

Lee

 

[JGansett]

I kind of figured that but wasn't sure.  The firewall blocked it by default.  I wasn't even aware of that as it sent no notification.  Does it send the crash report home to Affinity?  If so, it could be useful and I may unblock it.

Thanks for the reply

JGansett

[Dan C]

Yes, there is an option to send a crash report to us directly to help future development and you are safe to unblock it.

Lee