--- Name: Gpup.exe Description: Execute Author: '' Created: 2018-05-25 Commands: - Command: Gpup.exe -w whatever -e c:\Windows\System32\calc.exe Description: Execute another command through gpup.exe (Notepad++ binary). Full_Path: - 'C:\Program Files (x86)\Notepad++\updater\gpup.exe ' Code_Sample: [] Detection: [] Resources: - https://twitter.com/pabraeken/status/997892519827558400 Acknowledgement: - Person: Pierre-Alexandre Braeken Handle: '@pabraeken'