Suspicious Child Process of Notepad++ Updater - GUP.Exe — Detection Rule

Detects suspicious child process creation by the Notepad++ updater process (gup.exe). This could indicate potential exploitation of the updater component to deliver unwanted malware.

Read the full analysis on IntelFusions