home

WajamInternetEnhancer.exe

Wajam Internet Enhancer

Wajam Internet Technologies Inc.

The file is part of Wajam, a web browser extension that injects social search integration into various search portals such as Google. The application WajamInternetEnhancer.exe has been detected as adware by 1 anti-malware scanner with very strong indications that the file is a potential threat. This file is typically installed with the program Wajam which is a potentially unwanted software program. While running, it connects to the Internet address server-52-85-249-42.ams50.r.cloudfront.net on port 443.
Publisher:
Wajam Internet Technologies Inc.

Product:
Wajam Internet Enhancer

Version:
2.8.1.23

MD5:
137bfd62ffef76e059890386065f22e4

SHA-1:
c3159c8be786662d6d41adc31eb0dfb2eb471fac

SHA-256:
f3a01a38e8b0fb3a3fe589b599ad66b77725b8227f2710c659125b49bdf2f28f

Scanner detections:
1 / 68

Status:
Adware

Note:
Our current pool of anti-malware engines have not currently detected this file, however based on our own detection heuristics we feel that this file is unwanted.

Analysis date:
4/24/2025 7:34:44 AM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.WajamInternetTechnologies.V
14.5.16.14

File size:
65.5 KB (67,072 bytes)

Product version:
2.8.1.23

Copyright:
Copyright © 2014

Original file name:
WajamInternetEnhancer.exe

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\Program Files\wajam\wajam internet enhancer\wajaminternetenhancer.exe

File PE Metadata
Compilation timestamp:
5/15/2014 3:16:14 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
11.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
1536:XnLStLnsM2BHVtNV+g36L9OB68c5gSQP/9GZk1JhbU8FiJ8K/8XZ:WeM2BHVt7+g3K9O3c5lQP/9imbtFiZ/A

Entry address:
0x119EE

Entry point:
FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 02, 00, 10, 00, 00, 00, 20, 00, 00, 80, 18, 00, 00, 00, 38, 00, 00, 80, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 01, 00, 01, 00, 00, 00, 50, 00, 00, 80, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 01, 00, 01, 00, 00, 00, 68, 00, 00, 80, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 01, 00, 00, 00, 00, 00, 80, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
62.5 KB (64,000 bytes)

The file WajamInternetEnhancer.exe has been discovered within the following program.

Wajam  by Wajam
Wajam is a search-enhancement product, but it does not change homepage or search. This product shows display and/or text ads into third-party websites which may alter normal web page layouts.
www.wajam.com
73% remove it
 
Powered by Should I Remove It?

The executing file has been seen to make the following network communications in live environments.

TCP (HTTP SSL):
Connects to ec2-54-191-11-118.us-west-2.compute.amazonaws.com  (54.191.11.118:443)

TCP (HTTP):
Connects to ec2-54-208-30-101.compute-1.amazonaws.com  (54.208.30.101:80)

TCP (HTTP SSL):
Connects to bam-4.nr-data.net  (50.31.164.174:443)

TCP (HTTP SSL):
Connects to server-52-85-249-42.ams50.r.cloudfront.net  (52.85.249.42:443)

TCP (HTTP SSL):
Connects to msnbot-65-52-108-154.search.msn.com  (65.52.108.154:443)

TCP (HTTP SSL):
Connects to ec2-35-164-62-191.us-west-2.compute.amazonaws.com  (35.164.62.191:443)

TCP (HTTP SSL):
Connects to bam-6.nr-data.net  (162.247.242.18:443)

TCP (HTTP):
Connects to static-17-44-68-212.sadecehosting.net  (212.68.44.17:80)

TCP (HTTP):
Connects to static.77.73.76.144.clients.your-server.de  (144.76.73.77:80)

TCP (HTTP):
Connects to static.43.108.251.148.clients.your-server.de  (148.251.108.43:80)

TCP (HTTP):
Connects to static.22.201.46.78.clients.your-server.de  (78.46.201.22:80)

TCP (HTTP):
Connects to static.128.147.76.144.clients.your-server.de  (144.76.147.128:80)

TCP (HTTP):
Connects to static.11.104.76.144.clients.your-server.de  (144.76.104.11:80)

TCP (HTTP):
Connects to shared  (176.9.143.153:80)

TCP (HTTP SSL):
Connects to server-52-85-246-202.ams50.r.cloudfront.net  (52.85.246.202:443)

TCP (HTTP SSL):
Connects to s3-1.amazonaws.com  (52.216.32.59:443)

TCP (HTTP):
Connects to mail.khabarfarsi.com  (176.9.154.103:80)

TCP (HTTP SSL):
Connects to lis01s05-in-f31.1e100.net  (173.194.41.223:443)

TCP (HTTP):
Connects to k2b-bulk.intl.ebay.com  (66.135.211.189:80)

TCP (HTTP):
Connects to hosted-by.hostdl.com.asiatech.ir  (79.127.126.66:80)

Remove WajamInternetEnhancer.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.