Notepad++ GUP.exe Anomalous DNS

Georg Lauenstein@gsec

•updated Feb 8, 2026•2•0•64

Detects gup.exe making DNS queries to domains other than legitimate Notepad++ infrastructure.