WebView2 Accessing AI Webchat Domains From Unusual Parent

Daniel Jeremiah@daniyyell

•updated Feb 28, 2026•1•0•29

Detects `msedgewebview2.exe` connecting to Grok/Copilot when the parent is not a browser/Office app, matching the AI-in-the-middle C2 proxy technique.