SharkLoader DLL Sideloading via SystemSettings.exe in Non-Standard AppData/ProgramData Paths
Detects instances where the process SystemSettings.exe is executed from locations other than its legitimate path (Windows\ImmersiveControlPanel). This often indicates an attacker masquerading as a system utility to evade detection.
CQL
