Vault 7: Projects

This publication series is about specific projects related to the Vault 7 main publication.

SECRET//NOFORN
SUBJECT: ExpressLane v3.1.1 – IMIS Requirement #2009-1655
3.3.1. (S) *.eft files shall be collected first.
3.4. (S) The directory listing of the system shall be collected during
the execution of the installation.
3.5. (S) The collected files shall be uncompressed and encrypted.
3.6. (S) The Trojan installation and the collection processes shall be
decoupled to allow for flexibility in operation.
3.6.1. (S) The user shall be able to install the Trojan and run the
collection process with the splash screen.
3.6.2. (S) The user shall be able to run just the collection process with
the splash screen.
3.7. (S) The kill switch date and size of the hidden partition shall be
set through a separate GUI.
3.7.1. (S) The kill switch shall corrupt the MiltA.config file located in the
following path: C:\Program Files\Cross Match
Technologies\Configurations\MOBS MiltA.
3.7.2. (S) The tool shall corrupt the MOBS config file after the pre-set time elapses
(MiltA.config).
3.7.3. (S) Date shall be able to be changed by inserting a watermarked thumb drive with
a new kill date.
3.8. (S) The tool shall allow the user to determine the amount of time the installation takes in
advance.
3.8.1. (S) There shall be a GUI to pre-configure the installation time.
3.9. (U) The installation shall replace the existing MiltA.ver, MiltA-Collect.ver,
MiltA.config, and Country.ar.txt files on the system with new files.
3.9.1. (U) MiltA.ver, MiltA-Collect.ver, and MiltA.config are located in both:
C:\Program Files\Cross Match Technologies\Configurations\MOBS MiltA\VerFiles
and C:\Program Files\Cross Match
Technologies\Configurations\MPBS\MiltA\Workspaces.
3.9.2. (U) Country.ar.txt is located in: C:\Program Files\Cross Match
Technologies\Configurations\Validation Files.
3.10. (S) Collection of data shall not change the date modified for the files.
Page 2 of 5.
SECRET//NOFORN

e-Highlighter

Click to send permalink to address bar, or right-click to copy permalink.

Un-highlight all Un-highlight selectionu Highlight selectionh