Notepad.exe External Network Connection

Ibrahim Saud@tektrix

•updated Jun 17, 2026•0•0•11

Detects notepad.exe making anomalous external network connections, which can be indicative of malware like PureHVNC or Brute Ratel C4 (BRc4) using a seemingly benign process for command and control or data exfiltration.