CmdID

CmdID / Commands / bitsadmin

bitsadmin addfile

Adds a file to the specified job. Windows commands reference

On Windows

Opens CmdID with your command. It is read in your browser and sent nowhere.

Windows

from the Windows commands reference, CC BY 4.0
bitsadmin /addfile <job> <remoteURL> <localname>

To add a file to the job

bitsadmin /addfile myDownloadJob http://downloadsrv/10mb.zip c:\10mb.zipIdentify

Trips 3 Sigma rules: highFile With Suspicious Extension Downloaded Via Bitsadmin by Florian Roth (Nextron Systems), Nasreddine Bencherchali (Nextron Systems); mediumFile Download Via Bitsadmin by Michael Haag, FPT.EagleEye; mediumMonitoring For Persistence Via BITS by Sreeman

jobThe job's display name or GUID.
remoteURLThe URL of the file on the server.
localnameThe name of the file on the local computer. Localname must contain an absolute path to the file.