I've seen it on another app that I tried to wshPipe, namely the RPC vunerability apps from Microsoft. Seems that the $oExec.Status is set to 1 for some reason.

From my testing the "While Not $oExec.Status Loop" is superfluous anyway. It is meant to not allow the function to continue until the shell command has finished. The Exec() method is like KiX's Shell command in that the script does not proceed until the command has finished.

I'll update the function in the UDF forum.