Need help- Why there is network connection
Hi,
Before we install any software in our system within Gilead organization, we do the software security assessment. During our assessment for " UCSF ChimeraX v1.1", we found below external network connection is being made.
1. Connection to 13.107.4.52 on tcp/80 (www.msftconnecttest.com)
* Why the network connection is being made and what is the reason behind it? * Is there any sorts of data transfer is being happened from the user system, if yes then what kind of data are being transferred? * Is there any settings in the application to disable the network connections? * If users can use the software to export/import data. Is there any cloud service associated with this?
It would be of great help if you can kindly give a clarity for the above network connection ASAP.
Regards, Siddhartha
AFAIK, Chimera does not connect to that URL. You would have to provide details about what you were doing in Chimera when this connection occurred for me to help any further.
--Eric
On Apr 13, 2021, at 6:54 AM, Siddhartha Pradhan (Contractor) siddhartha.pradhan1@gilead.com wrote:
Hi,
Before we install any software in our system within Gilead organization, we do the software security assessment. During our assessment for " UCSF ChimeraX v1.1", we found below external network connection is being made.
Connection to 13.107.4.52 on tcp/80 (www.msftconnecttest.com http://www.msftconnecttest.com/)
• Why the network connection is being made and what is the reason behind it? • Is there any sorts of data transfer is being happened from the user system, if yes then what kind of data are being transferred? • Is there any settings in the application to disable the network connections? • If users can use the software to export/import data. Is there any cloud service associated with this?
It would be of great help if you can kindly give a clarity for the above network connection ASAP.
Regards, Siddhartha
Chimera-users mailing list: Chimera-users@cgl.ucsf.edu mailto:Chimera-users@cgl.ucsf.edu Manage subscription: https://plato.cgl.ucsf.edu/mailman/listinfo/chimera-users https://plato.cgl.ucsf.edu/mailman/listinfo/chimera-users
I see now that this question pertains to ChimeraX. There is a "chimerax-users" list for questions pertaining to ChimeraX. At any rate, the answer is the same: AFAIK ChimeraX does not connect to that URL. Were you simply starting ChimeraX when this connection occurred?
--Eric
On Apr 13, 2021, at 8:38 AM, Eric Pettersen pett@cgl.ucsf.edu wrote:
AFAIK, Chimera does not connect to that URL. You would have to provide details about what you were doing in Chimera when this connection occurred for me to help any further.
--Eric
On Apr 13, 2021, at 6:54 AM, Siddhartha Pradhan (Contractor) <siddhartha.pradhan1@gilead.com mailto:siddhartha.pradhan1@gilead.com> wrote:
Hi,
Before we install any software in our system within Gilead organization, we do the software security assessment. During our assessment for " UCSF ChimeraX v1.1", we found below external network connection is being made.
Connection to 13.107.4.52 on tcp/80 (www.msftconnecttest.com http://www.msftconnecttest.com/)
• Why the network connection is being made and what is the reason behind it? • Is there any sorts of data transfer is being happened from the user system, if yes then what kind of data are being transferred? • Is there any settings in the application to disable the network connections? • If users can use the software to export/import data. Is there any cloud service associated with this?
It would be of great help if you can kindly give a clarity for the above network connection ASAP.
Regards, Siddhartha
Chimera-users mailing list: Chimera-users@cgl.ucsf.edu mailto:Chimera-users@cgl.ucsf.edu Manage subscription: https://plato.cgl.ucsf.edu/mailman/listinfo/chimera-users https://plato.cgl.ucsf.edu/mailman/listinfo/chimera-users
Chimera-users mailing list: Chimera-users@cgl.ucsf.edu Manage subscription: https://plato.cgl.ucsf.edu/mailman/listinfo/chimera-users
Hi Eric,
Good day!! Thanks much for the email.
We use “Carbon Black” tool to find the network connections of particular application.
We got this connection from “werfault.exe” which is a child process of chimera.exe.
Please find the attached screenshot for your reference.
Hope this helps.
Let us know in case any queries.
Regards, Siddhartha
From: Eric Pettersen pett@cgl.ucsf.edu Sent: Tuesday, April 13, 2021 9:08 PM To: Siddhartha Pradhan (Contractor) siddhartha.pradhan1@gilead.com Cc: Chimera chimera-users@cgl.ucsf.edu Subject: [EXTERNAL] Re: [Chimera-users] Need help- Why there is network connection
AFAIK, Chimera does not connect to that URL. You would have to provide details about what you were doing in Chimera when this connection occurred for me to help any further.
--Eric
On Apr 13, 2021, at 6:54 AM, Siddhartha Pradhan (Contractor) <siddhartha.pradhan1@gilead.commailto:siddhartha.pradhan1@gilead.com> wrote:
Hi,
Before we install any software in our system within Gilead organization, we do the software security assessment. During our assessment for " UCSF ChimeraX v1.1", we found below external network connection is being made.
1. Connection to 13.107.4.52https://urldefense.com/v3/__http:/13.107.4.52__;!!Dq7g1IpY!zXmXqV_hu8JQE3MNrgYdN4nMu05GdFqoHmwl8ebTLusxtjEk9L0OrhbfrAUDPwpwf1WF0NY$ on tcp/80 (www.msftconnecttest.comhttps://urldefense.com/v3/__http:/www.msftconnecttest.com/__;!!Dq7g1IpY!zXmXqV_hu8JQE3MNrgYdN4nMu05GdFqoHmwl8ebTLusxtjEk9L0OrhbfrAUDPwpwhsZZNHo$)
• Why the network connection is being made and what is the reason behind it? • Is there any sorts of data transfer is being happened from the user system, if yes then what kind of data are being transferred? • Is there any settings in the application to disable the network connections? • If users can use the software to export/import data. Is there any cloud service associated with this?
It would be of great help if you can kindly give a clarity for the above network connection ASAP.
Regards, Siddhartha
_______________________________________________ Chimera-users mailing list: Chimera-users@cgl.ucsf.edumailto:Chimera-users@cgl.ucsf.edu Manage subscription: https://plato.cgl.ucsf.edu/mailman/listinfo/chimera-usershttps://urldefense.com/v3/__https:/plato.cgl.ucsf.edu/mailman/listinfo/chimera-users__;!!Dq7g1IpY!zXmXqV_hu8JQE3MNrgYdN4nMu05GdFqoHmwl8ebTLusxtjEk9L0OrhbfrAUDPwpwAARZCow$
Hi Siddhartha, Any cursory amount of googling would have revealed that werfault.exe is Windows Error Reporting and has nothing to do with Chimera per se: About WER - Win32 apps | Microsoft Docs https://docs.microsoft.com/en-us/windows/win32/wer/about-wer
--Eric
On Apr 13, 2021, at 11:22 PM, Siddhartha Pradhan (Contractor) siddhartha.pradhan1@gilead.com wrote:
Hi Eric,
Good day!! Thanks much for the email.
We use “Carbon Black” tool to find the network connections of particular application.
We got this connection from “werfault.exe” which is a child process of chimera.exe.
Please find the attached screenshot for your reference.
Hope this helps.
Let us know in case any queries.
Regards, Siddhartha
From: Eric Pettersen pett@cgl.ucsf.edu Sent: Tuesday, April 13, 2021 9:08 PM To: Siddhartha Pradhan (Contractor) siddhartha.pradhan1@gilead.com Cc: Chimera chimera-users@cgl.ucsf.edu Subject: [EXTERNAL] Re: [Chimera-users] Need help- Why there is network connection
AFAIK, Chimera does not connect to that URL. You would have to provide details about what you were doing in Chimera when this connection occurred for me to help any further.
--Eric
On Apr 13, 2021, at 6:54 AM, Siddhartha Pradhan (Contractor) <siddhartha.pradhan1@gilead.com mailto:siddhartha.pradhan1@gilead.com> wrote:
Hi,
Before we install any software in our system within Gilead organization, we do the software security assessment. During our assessment for " UCSF ChimeraX v1.1", we found below external network connection is being made.
Connection to 13.107.4.52 https://urldefense.com/v3/__http:/13.107.4.52__;!!Dq7g1IpY!zXmXqV_hu8JQE3MNrgYdN4nMu05GdFqoHmwl8ebTLusxtjEk9L0OrhbfrAUDPwpwf1WF0NY$ on tcp/80 (www.msftconnecttest.com https://urldefense.com/v3/__http:/www.msftconnecttest.com/__;!!Dq7g1IpY!zXmXqV_hu8JQE3MNrgYdN4nMu05GdFqoHmwl8ebTLusxtjEk9L0OrhbfrAUDPwpwhsZZNHo$)
• Why the network connection is being made and what is the reason behind it? • Is there any sorts of data transfer is being happened from the user system, if yes then what kind of data are being transferred? • Is there any settings in the application to disable the network connections? • If users can use the software to export/import data. Is there any cloud service associated with this?
It would be of great help if you can kindly give a clarity for the above network connection ASAP.
Regards, Siddhartha
Chimera-users mailing list: Chimera-users@cgl.ucsf.edu mailto:Chimera-users@cgl.ucsf.edu Manage subscription: https://plato.cgl.ucsf.edu/mailman/listinfo/chimera-users https://urldefense.com/v3/__https:/plato.cgl.ucsf.edu/mailman/listinfo/chimera-users__;!!Dq7g1IpY!zXmXqV_hu8JQE3MNrgYdN4nMu05GdFqoHmwl8ebTLusxtjEk9L0OrhbfrAUDPwpwAARZCow$
<Werfault.PNG>
participants (2)
-
Eric Pettersen
-
Siddhartha Pradhan (Contractor)