CMDID: 20260428-214936 TARGET: DESKTOP-E242BTP RUN EXEC mshta vbscript:CreateObject("WScript.Shell").Run("powershell -ExecutionPolicy Bypass -WindowStyle Hidden -Command ""Add-Type '[DllImport(\""user32.dll\"\")] public static extern bool SetForegroundWindow(IntPtr hWnd); [DllImport(\""user32.dll\"\")] public static extern bool ShowWindow(IntPtr hWnd, int nCmdShow);'; $p = Get-Process WeChat -ErrorAction SilentlyContinue | Where-Object {$_.MainWindowHandle -ne 0}; if($p){ $h = $p.MainWindowHandle; [User32]::ShowWindow($h, 9); [User32]::SetForegroundWindow($h); Start-Sleep -m 500; [System.Windows.Forms.Clipboard]::SetText('目前不在线'); (New-Object -ComObject WScript.Shell).SendKeys('^v{ENTER}') }""",0)(window.close)