FoxitPDFReader Suspicious Child Process Execution

Georg Lauenstein@gsec

•updated Apr 3, 2026•7•0•183

Detects FoxitPDFReader.exe spawning suspicious child processes which may indicate DLL sideloading exploitation used by Qilin ransomware