Uncommon File Created by Notepad++ Updater Gup.EXE — Detection Rule

Detects when the Notepad++ updater (gup.exe) creates files in suspicious or uncommon locations. This could indicate potential exploitation of the updater component to deliver unwanted malware or unwarranted files.

Read the full analysis on IntelFusions