Vault 7: Projects

This publication series is about specific projects related to the Vault 7 main publication.

4.2.2 Optional Dll Parameters:
1. ES_Dll Kill Date: DllPayload(64).dll will exit immediately after exploitation if
this date is surpassed. Default is two years into the future.
2. Recharge Number of Runs: When the selected whitelisted thumb drive comes
back to the Primary Host computer, if checked, ES Server(64).exe will put the
number of surveys and payload runs back to their original amounts.
3. Allow Retasking on Previous Targets: When the selected whitelisted thumb
drive infects a secondary host with DllPayload(64).dll, it places a GUID in the
Registry under HKLM\Software\ Microsoft\Active Setup or HKLM\Software\
Microsoft\MNU depending upon the Persist Completed Reg Key check box. If
the selected whitelisted thumb drive has not made it back to the Primary Host
11
SECRET//X1
CL BY: 2397517
REASON: 1.4(c)
DECL: 20361019
DRV: COL S-06

e-Highlighter

Click to send permalink to address bar, or right-click to copy permalink.

Un-highlight all Un-highlight selectionu Highlight selectionh