# Vault 7: Projects

This publication series is about specific projects related to the Vault 7 main publication.

### AfterMidnight

# Assassin v1.3 Users Guide

11 June, 2013

- 1
- 2
…
- 129
- 130
- 131
- 132
- 133
…
- 191
- 192

SECRET//ORCON//NOFORN
13.2.1 Build Outputs
This section will describe the xml format of the <BuildOutputs> tag. This tag is used
to set which Assassin types are generated by the Builder or record which types were
generated.
XML Configuration Example
<BuildOutputs>
<Param>service</Param>
<Param>injection</Param>
<Param>executable</Param>
<Param>run_dll</Param>
<Param>service_dll</Param>
</BuildOutputs>
Field Definitions
The <BuildOutputs> tag takes a list of <Param> tags that specify Assassin types or
groups of Assassin types. The valid keywords for the <Param> tags are described
below.
service
The service keyword designates that the Builder will/did generate the service
installer executables, including the service extractor and both 32- and 64-bit
service installers.
injection
The injection keyword designates that the Builder will/did generate the injection
executables, including the injection extractor and both 32- and 64-bit injection
launchers.
executable
The executable keyword designates that the Builder will/did generate the
Assassin implant-only executables, including both 32- and 64-bit.
run_dll
The run_dll keyword designates that the Builder will/did generate the Assassin
implant-only dynamic-link libraries (with RunDll32 entry point), including both
32- and 64-bit.
service_dll
The service_dll keyword designates that the Builder will/did generate the
Assassin service dynamic-link libraries, including both 32- and 64-bit.
all
The all keyword designates that the Builder will/did generate every type of
Assassin executable.
131
SECRET//ORCON//NOFORN

- 1
- 2
…
- 129
- 130
- 131
- 132
- 133
…
- 191
- 192