SharkLoader Perfect DLL Hijacking: SystemSettings.exe Sideloading Malicious DLL

Ibrahim Saud@tektrix

•updated Jun 28, 2026•1•0•0

This rule detects when 'SystemSettings.dll' is loaded by a process other than the legitimate 'SystemSettings.exe' located in the Windows ImmersiveControlPanel directory. This behavior can be indicative of DLL hijacking or unauthorized code injection into a system-level component.