CmdID

CmdID / Commands

sdelete64

This command is the 64 bit version of sdelete. tldr-pages

On Windows 2 Sigma rules name it

Opens CmdID with your command. It is read in your browser and sent nowhere.

Windows

from tldr-pages, CC BY 4.0

What detects it

Sigma process creation rules that name sdelete64
highRenamed Sysinternals Sdelete ExecutionFlorian Roth (Nextron Systems)
mediumPotential Binary Impersonating Sysinternals Toolsfrack113, Swachchhanda Shrawan Poudel (Nextron Systems)