# Vault 7: Projects

This publication series is about specific projects related to the Vault 7 main publication.

### AfterMidnight

# AlphaGremlin v0.1.0 Users Guide

1 June, 2014

- 1
- 2
- 3
- 4
- 5
- 6
- 7

• Post-Processing
When performing post-processing, simply typing process followed by the
directory to the encrypted files is sufficient to decrypt, sort, and aggregate
output created by AlphaGremlin. The runtime of sorting is linear both to the
number of encrypted files, and to the size of each encrypted file. Within the
directory Deployment\workspace\processed\mytarget, there will be a
directory named AlphaGremlin. Within this directory, there will be a file
named idToCRC.log, idToCommand.log, and folders with 10 digit numbers.
The file idToCRC.log is a directory, and shows which command generated
which folder of output. Do not open this folder in Notepad, as Notepad is
unable to recognize newline characters generated by python.
In each of the numbered folders created, there will be additional .log files.
These files contain the actual output generated by AlphaGremlin. The files'
names follow the following convention: 4 digits of the year, dash, 2 digits of
month (01-09 for first 9 months), dash, 2 digits of day, 2 digits of the hour, 2
digits of the minutes, 2 digits of the second at the time of creation, period,
and 10 digits of a randomly generated id. It is advisable to open this file in a
text editor that can properly display NUL characters, so that the user can see
when data is missing.
• Warnings/Undefined Behavior
When creating a plan for a target, putting Unicode characters into the
console will not function as desired. The Unicode characters will be
converted into single-byte characters, which might end up causing problems
with AlphaGremlin if illegal bytes are converted to single-byte characters.
• Example
create target -n mytarget -a x86 -d 2w -b 60 -j 10 -l '10.3.2.75' -p 5000 -c
5000000 -i 0 --base-url 'dart/' target

- 1
- 2
- 3
- 4
- 5
- 6
- 7