.. /XBootMgrSleep.exe
Star

Execute (EXE)

Windows Performance Toolkit binary used for tracing and analyzing system performance during sleep and resume transitions.

Paths:

Resources:

Acknowledgements:

Execute

  1. Execute executable via XBootMgrSleep, with a 1 second (=1000 milliseconds) delay. Alternatively, it is also possible to replace the delay with any string for immediate execution.

    xbootmgrsleep.exe 1000 {PATH:.exe}
    Use case
    Performs execution of specified executable, can be used as a defense evasion
    Privileges required
    User
    Operating systems
    Windows
    ATT&CK® technique
    T1202
    Tags
    Execute: EXE