WajamInternetEnhancer.exe

Wajam Internet Enhancer

Wajam Internet Technologies Inc.

The file is part of Wajam, a web browser extension that injects social search integration into various search portals such as Google. The application WajamInternetEnhancer.exe has been detected as adware by 2 anti-malware scanners. This executable runs as a local area network (LAN) Internet proxy server listening on port 51142 and has the ability to intercept and modify all inbound and outbound Internet traffic on the local host. This file is typically installed with the program Wajam which is a potentially unwanted software program.
Publisher:
Wajam Internet Technologies Inc.

Product:
Wajam Internet Enhancer

Version:
2.12.2.13

MD5:
50b511b503377cdb1dc731cd375d3752

SHA-1:
cc811537cec32df45bc63eede5ce9098d03514b6

SHA-256:
82f4d89826cfc5b322118a0a5709d4e1e99eba379b74f1905c6e6e2c4f8566f0

Scanner detections:
2 / 68

Status:
Adware

Analysis date:
4/24/2024 10:31:54 AM UTC  (today)

Scan engine
Detection
Engine version

Malwarebytes
PUP.Optional.Wajam
v2014.09.13.02

Reason Heuristics
PUP.WajamInternetTechnologies.V
14.8.6.13

File size:
82 KB (83,968 bytes)

Product version:
2.12.2.13

Copyright:
Copyright © 2014

Original file name:
WajamInternetEnhancer.exe

File type:
Executable application (Win32 EXE)

Common path:
C:\Program Files\wajam\wajam internet enhancer\wajaminternetenhancer.exe

File PE Metadata
Compilation timestamp:
8/5/2014 10:29:40 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
11.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
1536:52xzUxTmaJ/P/6b1oJulb2tgTgl7i4F97RnsRtRvJzEf31/l5jeSSSSH2CRx7MS3:gxKTmaJ/P/6b1oolb2tgTgl7i4FFRsRF

Entry address:
0x15B3E

Entry point:
FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
79 KB (80,896 bytes)

Local Proxy Server
Proxy for:
Internet Settings

Local host address:
http://127.0.0.1:51142/

Local host port:
51142

Default credentials:
No


The file WajamInternetEnhancer.exe has been discovered within the following program.

Wajam  by Wajam
Wajam is a search-enhancement product, but it does not change homepage or search. This product shows display and/or text ads into third-party websites which may alter normal web page layouts.
www.wajam.com
73% remove it
 
Powered by Should I Remove It?

The executing file has been seen to make the following network communications in live environments.

TCP (HTTP):
Connects to broadband.actcorp.in  (202.53.8.52:80)

TCP (HTTP SSL):
Connects to a23-215-118-197.deploy.static.akamaitechnologies.com  (23.215.118.197:443)

TCP (HTTP SSL):
Connects to 33.2-254.11.199.200.telemar.net.br  (200.199.11.33:443)

TCP (HTTP):
Connects to ec2-54-243-128-145.compute-1.amazonaws.com  (54.243.128.145:80)

TCP (HTTP):
Connects to ec2-52-206-93-196.compute-1.amazonaws.com  (52.206.93.196:80)

TCP (HTTP):

TCP (HTTP):
Connects to a23-57-228-185.deploy.static.akamaitechnologies.com  (23.57.228.185:80)

TCP (HTTP SSL):
Connects to ec2-52-207-165-18.compute-1.amazonaws.com  (52.207.165.18:443)

TCP (HTTP SSL):
Connects to 35.2-254.11.199.200.telemar.net.br  (200.199.11.35:443)

TCP (HTTP):
Connects to target1-1.sfa12.smi2.net  (5.9.92.53:80)

TCP (HTTP):
Connects to rtr3.l7.search.vip.sg3.yahoo.com  (106.10.162.43:80)

TCP (HTTP):
Connects to ec2-52-208-210-223.eu-west-1.compute.amazonaws.com  (52.208.210.223:80)

TCP (HTTP):
Connects to target2-1.sfa27.smi2.net  (148.251.13.189:80)

TCP (HTTP):
Connects to slb-content.adfox.ru  (213.180.204.92:80)

TCP (HTTP SSL):
Connects to mc.yandex.ru  (87.250.251.119:443)

TCP (HTTP SSL):
Connects to edge-star-mini-shv-01-gru2.facebook.com  (31.13.85.36:443)

TCP (HTTP):
Connects to target1-1.sfa18.smi2.net  (144.76.20.141:80)

TCP (HTTP):
Connects to server-52-84-64-40.ord51.r.cloudfront.net  (52.84.64.40:80)

TCP (HTTP SSL):
Connects to server-52-84-63-216.ord51.r.cloudfront.net  (52.84.63.216:443)

TCP (HTTP):
Connects to s3-website-us-west-2.amazonaws.com  (54.231.184.187:80)

Remove WajamInternetEnhancer.exe - Powered by Reason Core Security