# Vault 7: Projects

This publication series is about specific projects related to the Vault 7 main publication.

### ExpressLane

# ExpressLane v3.1.1 -- TPP FINAL

24 April, 2009

- 1
- 2
- 3
- 4
- 5
- 6
…
- 15
- 16

SECRET//20340424
thumb drive.
3.2.2. (S) Collection shall begin within one
minute of the installation beginning.
3. 3.3. (S) The tool shall collect *.eft, *.ldf and *.mdf
files.
3.3.1. (S) *.eft files shall be collected first.
IMIS
2009-
1655
3.3
4. 3.4. (S) The directory listing of the system shall be
collected during the execution of the installation
IMIS
2009-
1655
3.4
5. 3.5. (S) The collected files shall be uncompressed and
encrypted.
IMIS
2009-
1655
3.5
6. 3.6. (S) The Trojan installation and the collection
processes shall be decoupled to allow for flexibility in
operation.
3.6.1. (S) The user shall be able to install the
Trojan and run the collection process with the
splash screen.
3.6.2. (S) The user shall be able to run just the
collection process with the splash screen.
IMIS
2009-
1655
3.6
7. 3.7. (S) The kill switch date and size of the hidden
partition shall be set through a separate GUI.
3.7.1. (S) The kill switch shall corrupt the
MiltA.config file located in the following path:
C:\Program Files\Cross Match
Technologies\Configurations\MOBS MiltA.
3.7.2. (S) The tool shall corrupt the MOBS
config file after the pre-set time elapses
(MiltA.config).
3.7.3. (S) Date shall be able to be changed by
inserting a watermarked thumb drive with a new
kill date.
IMIS
2009-
1655
3.7
8. 3.8. (S) The tool shall allow the user to determine the
amount of time the installation takes in advance.
3.8.1. (S) There shall be a GUI to pre-configure
the installation time.
IMIS
2009-
1655
3.8
9. 3.9. (U) The installation shall replace the existing
MiltA.ver, MiltA-Collect.ver, MiltA.config, and
Country.ar.txt files on the system with new files.
3.9.1. (U) MiltA.ver, MiltA-Collect.ver, and
MiltA.config are located in both: C:\Program
Files\Cross Match
Technologies\Configurations\MOBS
MiltA\VerFiles and C:\Program Files\Cross
Match
Technologies\Configurations\MPBS\MiltA\Work
spaces.
IMIS
2009-
1655
3.9
SECRET//20340424
2

- 1
- 2
- 3
- 4
- 5
- 6
…
- 15
- 16