Possible DLL Hijacking of log.dll

Daniel Koifman@Koifsec

•updated Feb 3, 2026•7•0•22,091

This rule alerts on outbound network activity initiated by gup.exe where the destination URL is not associated with expected Notepad++ update endpoints.