CrLf

回复 2# yu2n

mshta http://bathome.net/s/hta/ array(wmi('Win32_Process')).where(function(o){return o.Name=='cmd.exe'}).select('commandline')COPY