# Vault 7: Projects

This publication series is about specific projects related to the Vault 7 main publication.

### AfterMidnight

# Assassin v1.3 Users Guide

11 June, 2013

- 1
- 2
…
- 157
- 158
- 159
- 160
- 161
…
- 191
- 192

SECRET//ORCON//NOFORN
The paths field is a listing of all of the target implants directories. For a
more detailed description see the paths entry in the Assassin receipt file
description.
Status Result Dir Files
The status result dir filesfield is a custom status result that provides a file walk of
all of the files in the target implants directories.
XML Example
<StatusResultDirFiles>
<FileWalkRecord>
<FileName>c:\temp\input\zvC3VP</FileName>
<FileSize>32b</FileSize>
<CreatedTime>2011-12-21T16:15:06</CreatedTime>
<ModifiedTime>2011-12-21T16:15:11</ModifiedTime>
<AccessedTime>2011-12-21T16:15:06</AccessedTime>
</FileWalkRecord>
<FileWalkRecord>
<FileName>c:\temp\output\zvC3VP.WqTCxg</FileName>
<FileSize>3k231b</FileSize>
<CreatedTime>2011-12-21T16:15:11</CreatedTime>
<ModifiedTime>2011-12-21T16:15:11</ModifiedTime>
<AccessedTime>2011-12-21T16:15:11</AccessedTime>
</FileWalkRecord>
. . .
</StatusResultDirFiles>
Field Definitions
File Walk Record
The file walk record entries are the results of a file walk command ran on
the target Implant directories. For a definition of the file walk record
entries see the section on get walk results.
Status Result Comms
The status result comms field is a custom status result that provides the target
implant’s communication settings.
XML Example
<StatusResultComms>
<ChunkSize>1m</ChunkSize>
<TransportList>
<Transport type=”WebDAV” tries="2">
159
SECRET//ORCON//NOFORN

- 1
- 2
…
- 157
- 158
- 159
- 160
- 161
…
- 191
- 192