XBootMgr.exe

type: OtherMSBinaries

Windows Performance Toolkit binary used to start performance traces.

Full path

C:\Program Files\Windows Kits\10\Windows Performance Toolkit\xbootmgr.exe
C:\Program Files (x86)\Windows Kits\10\Windows Performance Toolkit\xbootmgr.exe

Commands

ExecuteAdministrator T1202
Executes code as part of post-trace automation flow.
```
xbootmgr.exe -trace "{boot|hibernate|standby|shutdown|rebootCycle}" -callBack {PATH:.exe}
```
Executes an executable after the trace is complete using the callBack parameter.
os: Windows
Execute: EXE
ExecuteAdministrator T1202
Executes code as part of pre-trace automation or staging.
```
xbootmgr.exe -trace "{boot|hibernate|standby|shutdown|rebootCycle}" -preTraceCmd {PATH:.exe}
```
Executes an executable before each trace run using the preTraceCmd parameter.
os: Windows
Execute: EXE

Resources

https://learn.microsoft.com/en-us/previous-versions/windows/desktop/xperf/reference

acknowledgement: Avihay Eldad @AvihayEldad, Tommy Warren