Vault 7: Projects

This publication series is about specific projects related to the Vault 7 main publication.

SECRET//20350629
as %temp% or %appdata%) can be used in collection and output fields.
Additionally, where output is being written, additional variables are recognized
that can be used to direct multiple surveys and collections to unique locations:
a. %GUID% - a unique id string, changed for every launch
b. %ft% - a hex string derived from the current time
c. %st% - a readable time/date string
d. %drive% - the drive letter of the flash drive (Ex: F:\)
2. (S) The EzCheese tool is configured to work with one specific thumb drive based
on its unique drive serial number. If the directory structure is copied to another
drive the tool will not run. In order to install the tool on another drive, the user
must configure a new installation.
4.2 (U) Preparing for an Operation - Initiating a Session
4.2.1 (U) Initial Setup
(S) The following instructions provide information on how to configure the EzCheese
tool in Station by a TOO. There are two separate configuration tools:
1. EzConfigUltimate.exe, which configures the single multi-platform survey
executable.
2. Mac-n-Cheese.exe, which creates the links and configures the Dll files to launch
the configured survey.
Configuring the survey with EzConfigUltimate:
(U) Double-click on EZConfigUltimate.exe. The following user interface will appear:
SECRET//20350629
3

e-Highlighter

Click to send permalink to address bar, or right-click to copy permalink.

Un-highlight all Un-highlight selectionu Highlight selectionh