Netskope Threat Labs

InstallCore

ATP Sandbox Adv. HeuristicsAV

InstallCore is a software bundler and installer family that packages potentially unwanted programs, toolbars, and adware alongside legitimate applications. Its installers use deceptive consent flows to promote extra software, and security products widely flag it because the bundled programs change browser and system settings without meaningful consent.

First seen
January 2022
Last seen
August 2026
Installcore
Alert Name
Application.Bundler.InstallCore.AQ
Application.Bundler.InstallCore.AR
Application.InstallCore.AE
Application.InstallCore.AV
Application.InstallCore.AX
Application.InstallCore.BI
Application.InstallCore.BV
Application.InstallCore.BW
Application.InstallCore.BY
Application.InstallCore.GG