Replace executable on shared file

An operator with write access to an internal SMB share replaces an executable at a path used by a legitimate user or process. The replacement runs only if that path is later launched. Leaving the file in place can support repeated execution when users or processes continue to invoke it, but replacing the file alone does not configure automatic execution.