Vault 7: Projects

This publication series is about specific projects related to the Vault 7 main publication.
Pg. 07
Boot PersistenceBoot PersistenceBoot
Persistence
9. Command Dispatcher
The command dispatcher is the heart of the client and it responsible of loading and executing
other AXEs in the system. The triggers to the command dispatcher consist of a waitable timer,
directory change notifications and a bunch of Windows waitable events that can be set by
AXEs. These notifications will cause the dispatcher to load, initialize and unload AXEs. The
following diagram shows the command dispatcher loop.
The waitable timers do not have to bring the system out of standby or hibernate to handle timer
expiration. Neither is the DLL is not required to solicit notifications for system standby or
hibernate or take any action during these events.
The command dispatcher will have to implement with an initial wait and a delay before
executing any command.