InstallCore

Summary
Sneaky bundled adware that refuses to die
Class
Adware
Class Summary
Adware is a type of software that delivers unsolicited advertisements, typically through pop-up messages or browser redirection. While not always harmful, adware can significantly degrade system performance and user experience. Adware often infiltrates systems through free software downloads or malicious websites. If adware made it on to the system, scrutinize any recent software downloads, especially free software, as it's often the source. Adware can often be removed by looking for odd LaunchAgents, LaunchDaemons, and unexpected 3rd-party browser extensions.
Description

InstallCore is an adware distribution platform developed by ironSource until 2020. It enabled stealthy bundled adware installations invisible to users and antivirus products. InstallCore has been classified as a potentially unwanted program (PUP) since 2014. It continues to spread as an adware dropper despite being discontinued.

References
Example Hashes
  • 6c8f7ed8ed0b14308f5169e9f0415987a6ccc0fa
    VirusTotal