updater12767.exe

Tiger Savings

Innovative Apps

This is part of a distribution package that is classified as adware distributed by 50onRed. This adware is used to interact with the installed web browsers and inject ads and modify the default search and homepages. The application updater12767.exe, “Tiger Savings exe” by Innovative Apps has been detected as adware by 9 anti-malware scanners. It runs as a scheduled task under the Windows Task Scheduler triggered by a time event. This web browser addon will display additional advertisements in the user's browser including popup, banner, contextual hyperlinks as well as affiliate links.
Publisher:
215 Apps  (signed by Innovative Apps)

Product:
Tiger Savings

Description:
Tiger Savings exe

Version:
1000.1000.1000.1000

MD5:
d544c330255c136047ef9922ab97ce28

SHA-1:
ad055ca386b0099ab27e3f79cb28d01720bcca60

SHA-256:
d79a94984ea67d8d1c566267fd7791dd3e7374f048cfa30bc74d3e9880824727

Scanner detections:
9 / 68

Status:
Adware

Explanation:
Browser extension that injects additional advertisements (banner and text links) on web pages.

Analysis date:
7/8/2025 7:23:47 PM UTC  (today)

Scan engine
Detection
Engine version

AVG
SmartShopper.G
2014.0.3518

Boost by Reason
Trojan.Adw.Task.InnovativeApps.M
2013.8.3.17

Emsisoft Anti-Malware
Riskware.Win32.Toolbar.CrossRider.AMN
8.13.08.03.05

ESET NOD32
Win32/Toolbar.CrossRider (variant)
7.8389

herdProtect (fuzzy)
2013.12.20.15

McAfee
Artemis!D544C330255C
5600.7156

Reason Heuristics
Trojan.MyStart.Task.M
14.8.7.17

Trend Micro House Call
TROJ_GEN.F47V0528
7.2.215

VIPRE Antivirus
GamePlayLabs
18226

File size:
205.4 KB (210,312 bytes)

Product version:
1000.1000.1000.1000

Copyright:
Copyright 2011

Original file name:
Tiger Savings.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\appdata\local\updater12767\updater12767.exe

Digital Signature
Signed by:

Authority:
Thawte, Inc.

Valid from:
1/8/2013 4:00:00 PM

Valid to:
1/9/2014 3:59:59 PM

Subject:
CN=Innovative Apps, O=Innovative Apps, L=Philadelphia, S=Pennsylvania, C=US

Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:
5419E32FDAD7A6E5666A35066C5EAAC5

File PE Metadata
Compilation timestamp:
1/15/2013 5:01:55 AM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
3072:S/2e1jiykkaE5dKvKJZltWRkWTpJitu8xQAei7MxNEndGM//Ux:/e9iykqZvlt4k8Jkn+Aei7MxvM8x

Entry address:
0x15B31

Code size:
158 KB (161,792 bytes)

Scheduled Task
Task name:
Updater12767.exe

Trigger:
Time (Next runs on 8/3/2013 at 2:13 AM)


Remove updater12767.exe - Powered by Reason Core Security