home

permissions.sqlite

WordWizard WFP Driver x64

Word Wizard

The file permissions.sqlite by Word Wizard has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat. It is installed within the Mozilla Firefox web browser as part of an addin/plugin.
Publisher:
WordWizard  (signed by Word Wizard)

Product:
WordWizard WFP Driver x64

Version:
1.10.0.24

MD5:
6fd1664ab51c31f130d6a47611583e23

SHA-1:
605f9b209d2c4d4c88ccfb9b6e54119b84f5d5b1

SHA-256:
df75f6178a985e262e15eb72a2049431cd685659abf477dd73d9e57c9c387330

Scanner detections:
1 / 68

Status:
Potentially unwanted

Analysis date:
7/29/2025 11:39:11 PM UTC  (a few moments ago)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.Vitruvian.WordWiza (M)
16.7.13.1

File size:
64 KB (65,536 bytes)

Product version:
1.10.0.24

Copyright:
Copyright (C) 2015

Original file name:
netfilter2.sys

Common path:
C:\users\{user}\appdata\roaming\mozilla\firefox\profiles\{user}.default\permissions.sqlite

Digital Signature
Signed by:
Word Wizard

Authority:
GlobalSign nv-sa

Valid from:
6/25/2015 6:00:43 PM

Valid to:
6/25/2017 6:00:43 PM

Subject:
E=support@wordwizardapp.com, CN=Word Wizard, O=Word Wizard, L=San Diego, S=California, C=US

Issuer:
CN=GlobalSign CodeSigning CA - G2, O=GlobalSign nv-sa, C=BE

Serial number:
11212D17F47A12F123E1298195592C44B835

File PE Metadata
Compilation timestamp:
6/11/2015 8:36:32 AM

OS version:
6.2

OS bitness:
Win64

Subsystem:
Native (none required)

Linker version:
11.0

CTPH (ssdeep):
768:J1uLnjaYiX/w5UOrFYcmHOeEZZ4XYuL54PEE9L9VSFhd9QqG93yz/kh1P79h2lC6:JqvkRLW4XYuL57E0QZyz/kPRDQ

Entry address:
0x9BC0

Entry point:
48, 89, 5C, 24, 08, 57, 48, 83, EC, 20, 48, 8B, DA, 48, 8B, F9, E8, 33, 44, 00, 00, 48, 8B, D3, 48, 8B, CF, 48, 8B, 5C, 24, 30, 48, 83, C4, 20, 5F, E9, 16, DB, FF, FF, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, 66, 66, 0F, 1F, 84, 00, 00, 00, 00, 00, 48, 3B, 0D, 09, 25, 00, 00, 75, 12, 48, C1, C1, 10, 66, F7, C1, FF, FF, 75, 03, C2, 00, 00, 48, C1, C9, 10, E9, 08, 00, 00, 00, CC, CC, CC, CC, CC, CC, CC, CC, B9, 02, 00, 00, 00, CD, 29, CC, CC, CC, CC, CC, CC, CC, CC, CC, B9, 08, 00, 00, 00, CD, 29, CC...
 
[+]

Code size:
41 KB (41,984 bytes)

Remove permissions.sqlite - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.