home

WajamInternetEnhancer.exe

Wajam Internet Enhancer

Wajam Internet Technologies Inc.

The file is part of Wajam, a web browser extension that injects social search integration into various search portals such as Google. The application WajamInternetEnhancer.exe has been detected as adware by 1 anti-malware scanner with very strong indications that the file is a potential threat. This file is typically installed with the program Wajam which is a potentially unwanted software program.
Publisher:
Wajam Internet Technologies Inc.

Product:
Wajam Internet Enhancer

Version:
2.5.2.5

MD5:
ea5de0c9ab4be50cb990a69041d695f7

SHA-1:
13d6bbd30074dab7a54d5fe1b18124d1f10e566a

SHA-256:
e3e3e0873b1a79213cc57beff7c92a23803d48a769667c8f1676942b83e291ac

Scanner detections:
1 / 68

Status:
Adware

Note:
Our current pool of anti-malware engines have not currently detected this file, however based on our own detection heuristics we feel that this file is unwanted.

Analysis date:
12/25/2024 12:52:47 PM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
Threat.Win.Reputation
14.4.28.13

File size:
73 KB (74,752 bytes)

Product version:
2.5.2.5

Copyright:
Copyright © 2014

Original file name:
WajamInternetEnhancer.exe

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\Program Files\wajam\wajam internet enhancer\wajaminternetenhancer.exe

File PE Metadata
Compilation timestamp:
4/3/2014 9:46:05 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
11.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
1536:eyb6zl6eECIyjgZloKmkpWPkgBrj3cAA6khjLJ0GGx4DbBKPLfzJkytDsxg:LWzCRZloKmkpMPj3cAlkhfJ0GD0PbzJL

Entry address:
0x136BE

Entry point:
FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
70 KB (71,680 bytes)

The file WajamInternetEnhancer.exe has been discovered within the following program.

Wajam  by Wajam
Wajam is a search-enhancement product, but it does not change homepage or search. This product shows display and/or text ads into third-party websites which may alter normal web page layouts.
www.wajam.com
73% remove it
 
Powered by Should I Remove It?

The executing file has been seen to make the following network communications in live environments.

TCP (HTTP SSL):
Connects to 186-229-127-52.ded.intelignet.com.br  (186.229.127.52:443)

TCP (HTTP SSL):
Connects to 186-229-127-57.ded.intelignet.com.br  (186.229.127.57:443)

TCP (HTTP SSL):
Connects to ssl.sc.opera.com  (82.145.223.176:443)

TCP (HTTP SSL):
Connects to 186-229-127-58.ded.intelignet.com.br  (186.229.127.58:443)

TCP (HTTP SSL):
Connects to 186-229-127-53.ded.intelignet.com.br  (186.229.127.53:443)

TCP (HTTP SSL):
Connects to 186-229-127-55.ded.intelignet.com.br  (186.229.127.55:443)

TCP (HTTP SSL):
Connects to xx-fbcdn-shv-02-gru2.fbcdn.net  (157.240.12.16:443)

TCP (HTTP SSL):
Connects to lb03.us.ext.opera.com  (37.228.108.252:443)

TCP (HTTP SSL):
Connects to ec2-52-20-120-15.compute-1.amazonaws.com  (52.20.120.15:443)

TCP (HTTP SSL):
Connects to 186-229-53-45.ded.intelignet.com.br  (186.229.53.45:443)

TCP (HTTP SSL):
Connects to 186-228-156-48.ded.intelignet.com.br  (186.228.156.48:443)

TCP (HTTP SSL):
Connects to edge-star-mini-shv-02-gru2.facebook.com  (157.240.12.35:443)

TCP (HTTP SSL):
Connects to ec2-54-197-247-122.compute-1.amazonaws.com  (54.197.247.122:443)

TCP (HTTP):
Connects to 67-217-177-62.ash01.latisys.net  (67.217.177.62:80)

TCP (HTTP):
Connects to 208.43.234.241-static.reverse.softlayer.com  (208.43.234.241:80)

TCP (HTTP SSL):
Connects to 186-229-127-59.ded.intelignet.com.br  (186.229.127.59:443)

TCP (HTTP):
Connects to server-54-230-0-13.lhr5.r.cloudfront.net  (54.230.0.13:80)

TCP (HTTP):
Connects to server-52-85-142-16.iad12.r.cloudfront.net  (52.85.142.16:80)

TCP (HTTP):
Connects to par08s10-in-f26.1e100.net  (74.125.230.250:80)

TCP (HTTP):
Connects to m347-mp1-cvx1b.lan.ntl.com  (62.252.169.91:80)

Remove WajamInternetEnhancer.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.