SilentMare installer creates uninstall registry entry and desktop shortcut to masquerade as legitimate software

Ethan Andrews@eandrews

•updated Jul 28, 2026•5•0•2

Detects SilentMare beachhead installers that add an HKCU CurrentVersion\Uninstall registry entry and create a desktop shortcut within a short time window, mimicking legitimate software installation to mask the hidden updater/beachhead component.