uninstall.exe

Wajam

Wajam

The file is part of Wajam, a web browser extension that injects social search integration into various search portals such as Google. The application uninstall.exe by Wajam has been detected as adware by 1 anti-malware scanner with very strong indications that the file is a potential threat. The program is a setup application that uses the NSIS (Nullsoft Scriptable Install System) installer. This is the uninstaller utility registered in the Windows Control Panel for the program Wajam by Wajam. This file is typically installed with the program Wajam which is a potentially unwanted software program.
Publisher:
Wajam  (signed and verified)

Product:
Wajam

Version:
1.4

MD5:
c31d62b5512389fb7dbf75f66f68cc4b

SHA-1:
51a5e57d1ca58257a51decaee93dd25188167562

SHA-256:
1298cac2085475d5c76d03969c164995cbc7300228383a8dd0de544659f46c72

Scanner detections:
1 / 68

Status:
Adware

Note:
Our current pool of anti-malware engines have not currently detected this file, however based on our own detection heuristics we feel that this file is unwanted.

Analysis date:
5/8/2024 10:53:39 PM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.Wajam.Installer (M)
16.1.23.3

File size:
61.6 KB (63,032 bytes)

Copyright:
© Wajam. All right reserved.

Trademarks:
Wajam – Great minds search alike.

File type:
Executable application (Win32 EXE)

Installer:
NSIS (Nullsoft Scriptable Install System)

Language:
English (United States)

Common path:
C:\Program Files\wajam\uninstall.exe

Digital Signature
Signed by:

Authority:
COMODO CA Limited

Valid from:
5/16/2012 1:00:00 AM

Valid to:
5/17/2013 12:59:59 AM

Subject:
CN=Wajam, O=Wajam, STREET="4115 Boulevard Saint-Laurent suite #200", L=Montreal, S=Quebec, PostalCode=H2W1Y7, C=CA

Issuer:
CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
175B7FEB5E5C08B00F3B710CDD9D93EB

File PE Metadata
Compilation timestamp:
12/5/2009 10:53:18 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
1536:sgq3+uta99Hj25XvwLXJLi/nAt0vVxO00YThw4:zstajHKBvYXJLKnl9xE4

Entry address:
0x36A0

Entry point:
81, EC, 80, 01, 00, 00, 53, 55, 56, 33, DB, 57, 89, 5C, 24, 18, C7, 44, 24, 10, 88, A7, 40, 00, 33, F6, C6, 44, 24, 14, 20, FF, 15, 30, 80, 40, 00, 68, 01, 80, 00, 00, FF, 15, B4, 80, 40, 00, 53, FF, 15, 88, 82, 40, 00, 6A, 08, A3, B8, 63, 42, 00, E8, EE, 2E, 00, 00, A3, 04, 63, 42, 00, 53, 8D, 44, 24, 34, 68, 60, 01, 00, 00, 50, 53, 68, B0, 0C, 42, 00, FF, 15, 58, 81, 40, 00, 68, 10, A8, 40, 00, 68, 00, 5B, 42, 00, E8, F4, 29, 00, 00, FF, 15, B0, 80, 40, 00, BF, 00, C0, 42, 00, 50, 57, E8, E2, 29, 00, 00...
 
[+]

Entropy:
6.9858

Packer / compiler:
Nullsoft install system v2.x

Code size:
24.5 KB (25,088 bytes)

Program Uninstaller
Program name:
Wajam

Display publisher:
Wajam

Display version:
1.78

Uninstall string:
C:\Program Files (x86)\Wajam\uninstall.exe


The file uninstall.exe has been discovered within the following program.

Wajam  by Wajam
Wajam is a search-enhancement product, but it does not change homepage or search. This product shows display and/or text ads into third-party websites which may alter normal web page layouts.
www.wajam.com
73% remove it
 
Powered by Should I Remove It?

Remove uninstall.exe - Powered by Reason Core Security