SilentCanvas - Hidden Desktop Shell Architecture

Ibrahim Saud@tektrix

•updated Jun 19, 2026•0•0•1

Detects the initialization of an alternative hidden shell environment via 'WindowsBackstageShell.exe' and its subsequent network connections. This activity is associated with the SilentCanvas operation.