# Vault 7: Projects

This publication series is about specific projects related to the Vault 7 main publication.

### AfterMidnight

# Assassin v1.4 Users Guide

1 June, 2014

- 1
- 2
…
- 167
- 168
- 169
- 170
- 171
…
- 203
- 204

SECRET//ORCON//NOFORN
</ICEStatus>
</StatusResultICE>
</StatusResult>
Field Definitions
Target ID
The ID tag contains information describing what the target ID for the configured
Implant will be. The ID consists of a parent and child ID, each of which consists of
4 alpha-numeric characters. The parent ID is required and the child ID can be set
to be generated automatically at build time if it is left blank.
In the example above, the D is defined as ‘assne1jz’.
Target Version
The target version field specifies the version of the Assassin Implant that
provided the results.
In the example above, the code version returned from the Implant is Assassin
version 1.1
Target Current Time
The target current time defines the exact time on the target when the task was
executed.
In the example above, the current time of the target when the task ran was
December 21
st
, 2011 at 4:15:11 PM.
Status Result Basic
The status result basic field is a custom status result that provides some of the
generic Implant settings as described below.
XML Example
<StatusResultBasic>
<HibernateSeconds>1m</HibernateSeconds>
<UninstallOnDate>2012-12-31T12:00:00<UninstallOnDate/>
<InstalledOnDate>2011-12-21T16:03:17</InstalledOnDate>
<ExecuteStartedDate>2011-12-21T16:03:17</ExecuteStartedDate>
</StatusResultBasic>
Field Definitions
Hibernate Seconds
Hibernate seconds field shows the amount of time that the target
hibernated before starting communication with the LP.
In the example above, the target would have remained inactive for one
minute before beginning the beacon cycle.
Uninstall On Time
169
SECRET//ORCON//NOFORN

- 1
- 2
…
- 167
- 168
- 169
- 170
- 171
…
- 203
- 204