Hide Navigation Hide TOC

Uncommon File Created by Notepad++ Updater Gup.EXE (3b8f4c92-6a51-4d7e-9c3a-8e2d1f5a7b09)

Detects when the Notepad++ updater (gup.exe) creates files in suspicious or uncommon locations. This could indicate potential exploitation of the updater component to deliver unwanted malware or unwarranted files.

Cluster A	Galaxy A	Cluster B	Galaxy B	Level
Compromise Software Supply Chain - T1195.002 (bd369cd9-abb8-41ce-b5bb-fff23ee86c00)	Attack Pattern	Uncommon File Created by Notepad++ Updater Gup.EXE (3b8f4c92-6a51-4d7e-9c3a-8e2d1f5a7b09)	Sigma-Rules	1
Adversary-in-the-Middle - T1557 (035bb001-ab69-4a0b-9f6c-2de8b09e1b9d)	Attack Pattern	Uncommon File Created by Notepad++ Updater Gup.EXE (3b8f4c92-6a51-4d7e-9c3a-8e2d1f5a7b09)	Sigma-Rules	1
Compromise Software Supply Chain - T1195.002 (bd369cd9-abb8-41ce-b5bb-fff23ee86c00)	Attack Pattern	Supply Chain Compromise - T1195 (3f18edba-28f4-4bb9-82c3-8aa60dcac5f7)	Attack Pattern	2