home

uninstall.exe

Radyoos Media Ltd.

The application uninstall.exe by Radyoos Media has been detected as adware by 7 anti-malware scanners. This is the uninstaller utility registered in the Windows Control Panel for the program jollywallet by jollywallet. This file is typically installed with the program JollyWallet by Radyoos Media Ltd. which is a potentially unwanted software program. It is built using the Crossrider cross-browser extension platform. While the file utilizes the Crossrider framework and delivery services, it is not owned by Crossrider.
Publisher:
Radyoos Media Ltd.  (signed and verified)

MD5:
36e136d416eb954744ff902853a60ee8

SHA-1:
a8df54bab50768c98b595ccbe3f8ac24ae279a8e

SHA-256:
d4e4723d57fe02ee90b5f35052950293b05304baa76dec30912c28c20b6a39bb

Scanner detections:
7 / 68

Status:
Adware

Explanation:
The software may change the browser's home page and search provider settings as well as display advertisements.

Analysis date:
4/23/2024 5:28:59 PM UTC  (today)

Scan engine
Detection
Engine version

Avira AntiVirus
TR/Crypt.ZPACK.Gen2
7.11.30.172

avast!
Win32:RadyoosMedia-A [PUP]
140929-0

Dr.Web
Trojan.Crossrider.27207
9.0.1.05190

NANO AntiVirus
Trojan.Win32.Crossrider.dfokfj
0.28.2.62440

Panda Antivirus
Trj/Genetic.gen
14.09.30.11

Reason Heuristics
PUP.RadyoosMedia.J
14.9.30.22

Zillya! Antivirus
Adware.Adwapper.Win32.63
2.0.0.1939

File size:
82.9 KB (84,840 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\Program Files\jollywallet\uninstall.exe

Digital Signature
Signed by:
Radyoos Media Ltd.

Authority:
VeriSign, Inc.

Valid from:
11/12/2013 9:00:00 AM

Valid to:
2/12/2016 8:59:59 AM

Subject:
CN=Radyoos Media Ltd., OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Radyoos Media Ltd., L=Tel Aviv-Jaffa, S=Israel, C=IL

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
06C470BB28DFF4919F7971031170309C

File PE Metadata
Compilation timestamp:
9/11/2014 8:04:05 AM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
11.0

CTPH (ssdeep):
1536:vMk0y8ey87sQFP01ncGxCsWjcdP6Rt0Z8:vvpF6ztP6RtA8

Entry address:
0x37A1

Entry point:
E8, BB, 61, 00, 00, E9, 00, 00, 00, 00, 6A, 14, 68, F0, 2A, 41, 00, E8, 79, 63, 00, 00, E8, 57, 28, 00, 00, 0F, B7, F0, 6A, 02, E8, 4E, 61, 00, 00, 59, B8, 4D, 5A, 00, 00, 66, 39, 05, 00, 00, 40, 00, 74, 04, 33, DB, EB, 33, A1, 3C, 00, 40, 00, 81, B8, 00, 00, 40, 00, 50, 45, 00, 00, 75, EB, B9, 0B, 01, 00, 00, 66, 39, 88, 18, 00, 40, 00, 75, DD, 33, DB, 83, B8, 74, 00, 40, 00, 0E, 76, 09, 39, 98, E8, 00, 40, 00, 0F, 95, C3, 89, 5D, E4, E8, 2F, 5B, 00, 00, 85, C0, 75, 08, 6A, 1C, E8, DC, 00, 00, 00, 59, E8...
 
[+]

Entropy:
6.2482

Code size:
49.5 KB (50,688 bytes)

Program Uninstaller
Program name:
jollywallet

Display publisher:
jollywallet

Display version:
1.35.3.9

Uninstall string:
C:\Program Files\jollywallet\Uninstall.exe /fcp=1


The file uninstall.exe has been discovered within the following program.

JollyWallet  by Radyoos Media Ltd.
Publisher's description - “JollyWallet is an online shopping tool that combines cash back, discounts and online coupons.”
www.jollywallet.com
76% remove it
 
Powered by Should I Remove It?

Remove uninstall.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.