WajamInternetEnhancer.exe

Wajam Internet Enhancer

Wajam Internet Technologies Inc.

The file is part of Wajam, a web browser extension that injects social search integration into various search portals such as Google. The application WajamInternetEnhancer.exe has been detected as adware by 1 anti-malware scanner with very strong indications that the file is a potential threat. This file is typically installed with the program Wajam which is a potentially unwanted software program. While running, it connects to the Internet address server-54-192-14-83.ams1.r.cloudfront.net on port 80 using the HTTP protocol.
Publisher:
Wajam Internet Technologies Inc.

Product:
Wajam Internet Enhancer

Version:
2.6.2.1

MD5:
911e1a3a27bdff60a25fb374a6ed1acd

SHA-1:
28dd4164bc17f019235897cf57858d6b626ee66a

SHA-256:
dae6a55bc8972ac402cc1bf93eb217abd61b1e528ae8290bb54dfd3c8f652d11

Scanner detections:
1 / 68

Status:
Adware

Note:
Our current pool of anti-malware engines have not currently detected this file, however based on our own detection heuristics we feel that this file is unwanted.

Analysis date:
11/5/2024 9:44:07 AM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
Threat.Win.Reputation
14.4.28.13

File size:
73 KB (74,752 bytes)

Product version:
2.6.2.1

Copyright:
Copyright © 2014

Original file name:
WajamInternetEnhancer.exe

File type:
Executable application (Win64 EXE)

Language:
Language Neutral

Common path:
C:\Program Files\wajam\wajam internet enhancer\wajaminternetenhancer.exe

File PE Metadata
OS bitness:
Win64

CTPH (ssdeep):
1536:sib6Sg6eECslsOXfzne8+1OAgBDEAioViH3DbB3PLDz3kFtOs6p:ZWSvlsOXje8+1MEAdaFPvz3kFEsI

Entry point:
FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Entropy:
5.7859

Developed / compiled with:
Microsoft Visual C# / Basic .NET

The file WajamInternetEnhancer.exe has been discovered within the following program.

Wajam  by Wajam
Wajam is a search-enhancement product, but it does not change homepage or search. This product shows display and/or text ads into third-party websites which may alter normal web page layouts.
www.wajam.com
73% remove it
 
Powered by Should I Remove It?

The executing file has been seen to make the following network communications in live environments.

TCP (HTTP SSL):
Connects to rtr3.l7.search.vip.gq1.yahoo.com  (208.71.45.11:443)

TCP (HTTP):
Connects to r-96-40-234-77.ff.avast.com  (77.234.40.96:80)

TCP (HTTP SSL):
Connects to e1.ycpi.vip.bra.yahoo.com  (200.152.162.135:443)

TCP (HTTP):
Connects to cdn-68-142-101-7.mia1.llnw.net  (68.142.101.7:80)

TCP (HTTP):
Connects to server-54-192-14-83.ams1.r.cloudfront.net  (54.192.14.83:80)

TCP (HTTP):
Connects to server-52-85-74-240.lhr3.r.cloudfront.net  (52.85.74.240:80)

TCP (HTTP):
Connects to s18753078.onlinehome-server.info  (217.160.109.197:80)

Remove WajamInternetEnhancer.exe - Powered by Reason Core Security