XBootMgrSleep.exe

Windows Performance Toolkit binary used for tracing and analyzing system performance during sleep and resume transitions.

Execute

Performs execution of specified executable, can be used as a defense evasion

xbootmgrsleep.exe 1000 {PATH:.exe}

Execute executable via XBootMgrSleep, with a 1 second (=1000 milliseconds) delay. Alternatively, it is also possible to replace the delay with any string for immediate execution. — MITRE: T1202 — Privileges: User