# Vault 7: Projects

This publication series is about specific projects related to the Vault 7 main publication.

### Grasshopper

# GH-Module-Bermuda-v1_0-UserGuide

1 June, 2012

- 1
- 2
…
- 5
- 6
- 7
- 8
- 9

SECRET//ORCON//NOFORN
PayloadDllPath
The path to the payload on the target run by the Bermuda stub. This field is only
present when the payload is a DLL, otherwise it is not necessary.
MaxRunTime
The maximum run time for the task executable or infinite. When the max run
time has elapsed, the Task Scheduler will attempt to terminate the application.
Max run time may be defined with millisecond granularity.
If the task executable fails to exit within three minutes of receiving a WM_CLOSE
message, or if the executable is unable to handle messages, the Task Scheduler
terminates the executable using TerminateProcess.
TriggerType
The type of trigger used to schedule execution of the task executable. Bermuda
supports three types of triggers, including:
once Runs the task a single time
at_startup Runs the task at system startup
at_logon Runs the task when a user logs on
BeginDate
The date when the trigger activates. Scheduled task triggers are not evaluated
by the Task Scheduler until after their begin date has passed.
EndDate
The date when the trigger deactivates. Scheduled task triggers are no longer
evaluated by the Task Scheduler after their end date has passed. This field is
optional; if no text is given for the tag, the end date will not be set.
Start Time
The time of day when the trigger will run the task executable. This field is
ignored for triggers of type at_logon and at_startup.
Duration
The time after the task starts that the trigger remains active. The trigger
duration must be greater than or equal to the trigger interval. Duration may be
defined with minute granularity.
For example, if you start a task at 8:00am and want to repeatedly start until
5:00pm, there would be 9 hours in the duration.
Interval
The time between task executions during the period defined by the trigger
duration. Interval may be defined with minute granularity.
For example, if you run a task every hour from 8:00am to 5:00pm, there would
be 1 hour in the duration.
KillAt End
Whether the Task Scheduler should terminate the task executable at the end of
the trigger duration. The presence of the tag indicates that the task will be
terminated.
7
SECRET//ORCON//NOFORN

- 1
- 2
…
- 5
- 6
- 7
- 8
- 9