Suspicious Execution of SystemSettings

Swachchhanda Shrawan Poudel (Nextron Systems)

Detects the execution of SystemSettings.exe from non-standard paths or with different metadata than original. This may indicate a malicious attempt to disguise as a legitimate application. Adversaries often mimic their malware as legitimate executables to evade detection, blend in with normal system activity, and exploit trust in known system files.

2025-02-21 00:00:00

None

feef4082-e9cc-46a0-8e87-c7c8603a2325

attack.defense-evasion attack.t1036.005

Nextron Sigma feed only (private)