Can no longer run pre-compiled SysInternals PE

[pen3tr8or]

I'm currently unable to run sdelete64.exe from SysInternals with No-Consolation in Cobalt Strike 4.10. This worked in commits through f791d27 (September 14, 2024), however, now the beacon hangs/dies when attempting to run the same PE.

Screenshot showing using successful execution using the commit mentioned above and then execution when using the latest commit. The test file to be deleted was recreated before attempting execution with each commit.

[S4ntiagoP]

I tried it on havoc and it works for me. Could it be that you are not updating the .CNA script?

[pen3tr8or]

Thanks for the quick response, I have used the .CNA script provided with each commit.