Article · Wikipedia archive · Last revised Jun 2, 2026

InstallCore

InstallCore was an installation and content distribution platform created by ironSource, considered potentially unwanted programs (PUP) by a number of anti-malware vendors. It included a software development kit (SDK) for Windows and Mac OS X. The program allowed those using it for distribution to include monetization by advertisements or charging for installation, and made its installations invisible to the user and its anti-virus software.

Last revised
Jun 2, 2026
Read time
≈ 2 min
Length
438 w
Citations
12
Source
Wikipedia ↗
InstallCore
DeveloperIronSource
Initial release2009 (2009)
Websitewww.installcore.com

InstallCore (stylized as installCore) was an installation and content distribution platform created by ironSource, considered potentially unwanted programs (PUP) by a number of anti-malware vendors. It included a software development kit (SDK) for Windows and Mac OS X.1 The program allowed those using it for distribution to include monetization by advertisements or charging for installation, and made its installations invisible to the user and its anti-virus software.2

The platform and its programs have been rated potentially unwanted programs (PUP) or potentially unwanted applications (PUA) by anti-malware product vendors since 2014,3 and by Windows Defender Antivirus since 2015.4

The platform was primarily designed for efficient web-based deployment of various types of application software. As of August 2012, InstallCore was managing 100 million installations every month, offering services for paid, unpaid, and free software by using the SDK version.5

History

The InstallCore team introduced the first version of the SDK at the beginning of 2011.6 The SDK was a fork of the FoxTab installer and had only basic Installation features.

InstallCore was discontinued as part of a company flotation in late 2020.7

Criticism and malware classification

InstallCore and its software packages have been classified as potentially unwanted programs (PUP) or potentially unwanted applications (PUA), by anti-malware product vendors3 and Windows Defender Antivirus4 from 2014–2015 onwards, with many stating that it installs adware and other additional PUPs.8 Malwarebytes identified the program as "a family of bundlers that installs more than one application on the user's computer".9 It has been described as "crossing the line into full-blown malware" and a "nasty Trojan".10


See also

See also

References

References

  1. "ironSource's installCore launches Mac OS installer to offer comprehensive, cross-platform solution for developers". Software Developer Times. 25 November 2014. Retrieved 25 November 2014.
  2. "Automated Malware Analysis Report".
  3. "Detailed Analysis - Install Core - Adware and PUAs - Advanced Network Threat Protection | ATP from Targeted Malware Attacks and Persistent Threats | sophos.com - Threat Center". www.sophos.com. Retrieved 2023-07-03.
  4. PUA:Win32/InstallCore - Windows, Mar 11 2015
  5. "installCore Introduces Super Targeting for Freemium-Model Desktop Applications". PRWeb. Retrieved 9 January 2014.
  6. "The InstallCore SDK | InstallCore – Professional installation creation platform". August 20, 2011. Archived from the original on 2011-08-20.
  7. Gilead, Assaf (29 June 2021). "Giving up its cash cow paved ironSource's way to NYSE". Globes. Retrieved 15 July 2022.
  8. Macgregor, Jody (14 July 2022). "Unity is merging with a company who made a malware installer". PC Gamer. Retrieved 15 July 2022.
  9. "Adware.InstallCore". Malwarebytes Labs. Retrieved 15 July 2022.
  10. Paul Wagenseil (May 20, 2015). "Mac Adware Trojan Can Install Anything on OS X". Tom's Guide.
External links