Suspicious Child Process of Notepad++ Updater - GUP.Exe

SigmaHQ Detections@sigmaHQ

•updated Feb 4, 2026•0•0•0

Detects suspicious child process creation by the Notepad++ updater process (gup.exe). This could indicate potential exploitation of the updater component to deliver unwanted malware.