WajamInternetEnhancer.exe

Wajam Internet Enhancer

Wajam Internet Technologies Inc.

The file is part of Wajam, a web browser extension that injects social search integration into various search portals such as Google. The application WajamInternetEnhancer.exe has been detected as adware by 2 anti-malware scanners. This executable runs as a local area network (LAN) Internet proxy server listening on port 51441 and has the ability to intercept and modify all inbound and outbound Internet traffic on the local host. This file is typically installed with the program Wajam which is a potentially unwanted software program.
Publisher:
Wajam Internet Technologies Inc.

Product:
Wajam Internet Enhancer

Version:
2.14.1.80

MD5:
ae5adafde4f75dbab95d032734f4351a

SHA-1:
03881eafee82e3b1af2e569c51fd35b4a4b97906

SHA-256:
6a315698e9fef6101412f59d90c71461e2f0ee6acfb560c37d428c94d08784fc

Scanner detections:
2 / 68

Status:
Adware

Analysis date:
11/23/2024 9:52:54 AM UTC  (today)

Scan engine
Detection
Engine version

Malwarebytes
PUP.Optional.Wajam
v2014.08.17.12

Reason Heuristics
PUP.WajamInternetTechnologies.V
14.8.16.23

File size:
82.5 KB (84,480 bytes)

Product version:
2.14.1.80

Copyright:
Copyright © 2014

Original file name:
WajamInternetEnhancer.exe

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\Program Files\wajam\wajam internet enhancer\wajaminternetenhancer.exe

File PE Metadata
Compilation timestamp:
8/13/2014 1:37:50 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
11.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
1536:82xzUxTtaIfYxA8K9vnSJvleC0o3My2qGfvib107MSwLzVf/5yQngVD:xxKTtaEYxVKPSJlomS8XVfK

Entry address:
0x15BFE

Entry point:
FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Entropy:
5.7619

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
79.5 KB (81,408 bytes)

Local Proxy Server
Proxy for:
Internet Settings

Local host address:
http://127.0.0.1:51441/

Local host port:
51441

Default credentials:
No


The file WajamInternetEnhancer.exe has been discovered within the following program.

Wajam  by Wajam
Wajam is a search-enhancement product, but it does not change homepage or search. This product shows display and/or text ads into third-party websites which may alter normal web page layouts.
www.wajam.com
73% remove it
 
Powered by Should I Remove It?

The executing file has been seen to make the following network communications in live environments.

TCP (HTTP):
Connects to ec2-54-208-30-101.compute-1.amazonaws.com  (54.208.30.101:80)

TCP (HTTP SSL):
Connects to usmia1-vip-bx-006.aaplimg.com  (17.253.13.206:443)

TCP (HTTP):
Connects to ec2-50-17-181-149.compute-1.amazonaws.com  (50.17.181.149:80)

TCP (HTTP):
Connects to rtr3.l7.search.vip.bf1.yahoo.com  (63.250.200.63:80)

TCP (HTTP SSL):
Connects to r-072-045-234-077.ff.avast.com  (77.234.45.72:443)

TCP (HTTP):
Connects to ns2270976.ip-5-39-70.eu  (5.39.70.90:80)

TCP (HTTP):
Connects to li491-84.members.linode.com  (50.116.29.84:80)

TCP (HTTP):
Connects to ipv4_1.lagg0.c016.gru001.ix.nflxvideo.net  (198.45.48.81:80)

TCP (HTTP):
Connects to IP-130-73-156-104.static.fibrenoire.ca  (104.156.73.130:80)

TCP (HTTP SSL):
Connects to gru09s16-in-f2.1e100.net  (173.194.118.226:443)

TCP (HTTP SSL):
Connects to gru06s11-in-f9.1e100.net  (173.194.118.137:443)

TCP (HTTP):
Connects to ec2-54-232-235-7.sa-east-1.compute.amazonaws.com  (54.232.235.7:80)

TCP (HTTP):
Connects to ec2-54-225-183-233.compute-1.amazonaws.com  (54.225.183.233:80)

TCP (HTTP):
Connects to ec2-54-208-92-111.compute-1.amazonaws.com  (54.208.92.111:80)

TCP (HTTP):
Connects to ec2-52-206-46-116.compute-1.amazonaws.com  (52.206.46.116:80)

TCP (HTTP SSL):
Connects to ea-in-f95.1e100.net  (74.125.136.95:443)

TCP:
Connects to ea-in-f188.1e100.net  (74.125.136.188:5228)

TCP:
Connects to ea-in-f125.1e100.net  (74.125.136.125:5222)

TCP (HTTP):
Connects to amung.us  (67.202.94.93:80)

TCP (HTTP):
Connects to a23-77-232-170.deploy.static.akamaitechnologies.com  (23.77.232.170:80)

Remove WajamInternetEnhancer.exe - Powered by Reason Core Security