» insthelper.exe
Overview
Analysis
File Details
Programs (1)

insthelper.exe

PAYBACK Toolbar

Payback GmbH

This is a self-extracting archive and installer. This is installed with PAYBACK Toolbar 1.2.

File name:

insthelper.exe

Publisher:

Payback GmbH (signed and verified)

Product:

PAYBACK Toolbar

Description:

PAYBACK Toolbar Installer/Deinstaller

Version:

1.2.0.1

MD5:

70d06e3fdda0e3fee4a404460ce8a4e6

SHA-1:

bb7d00fbb24cfe871673d49d09a0042c6495ac9c

SHA-256:

75bf0cb90e8774599331e4ff2e104c75818d53008c72d585f35490f841775206

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

7/13/2025 4:25:18 AM UTC (today)

File size:

232.6 KB (238,136 bytes)

Product version:

1.2.0.1

Original file name:

insthelper.exe

File type:

Executable application (Win32 EXE)

Language:

German (Germany)

Common path:

C:\Program Files\payback\payback toolbar\insthelper.exe

Digital Signature

Signed by:

Payback GmbH

Authority:

VeriSign, Inc.

Valid from:

8/1/2011 2:00:00 AM

Valid to:

8/19/2013 1:59:59 AM

Subject:

CN=Payback GmbH, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Payback GmbH, L=Munich, S=Bavaria, C=DE

Issuer:

CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

76A73BB948D697378248C6A1B7B9C374

File PE Metadata

Compilation timestamp:

5/25/2012 1:51:41 PM

OS version:

5.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

9.0

CTPH (ssdeep):

3072:40rygsDvlece7sLBhYggin2psHfcygiCbJzBsAKgYXZnTfoOZYsxLJ37b:BygsDteceoLB5LL6IhYCX

Entry address:

0x9CDB

Entry point:

E8, C0, 6E, 00, 00, E9, 79, FE, FF, FF, CC, CC, CC, 68, 50, 9D, 40, 00, 64, FF, 35, 00, 00, 00, 00, 8B, 44, 24, 10, 89, 6C, 24, 10, 8D, 6C, 24, 10, 2B, E0, 53, 56, 57, A1, 84, 62, 43, 00, 31, 45, FC, 33, C5, 50, 89, 65, E8, FF, 75, F8, 8B, 45, FC, C7, 45, FC, FE, FF, FF, FF, 89, 45, F8, 8D, 45, F0, 64, A3, 00, 00, 00, 00, C3, 8B, 4D, F0, 64, 89, 0D, 00, 00, 00, 00, 59, 5F, 5F, 5E, 5B, 8B, E5, 5D, 51, C3, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, 8B, FF, 55, 8B, EC, 83, EC, 18, 53, 8B, 5D... 
[+]

Code size:

123 KB (125,952 bytes)

The file insthelper.exe has been discovered within the following program.

PAYBACK Toolbar 1.2 by PAYBACK GmbH

As part of the installation process PAYBACK Toolbar may offer changes to your Internet Browser settings. These changes if approved by you can be reconfigured by you at any time from the options dialog available on your Internet Browser.

www.payback.de

53% remove it

Scan insthelper.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.