# Vault 7: Projects

This publication series is about specific projects related to the Vault 7 main publication.

### Dumbo

# Dumbo v3.0 -- Field Guide

6 July, 2015

- 1
- 2
…
- 6
- 7
- 8

If Dumbo is unsuccessful, a warning will be displayed to the user that it failed.
2.3 Logging Details
Dumbo maintains a verbose log of all actions taken either automatically or manually by the
user. The log is stored in a file called “log.txt” and is located in the same directory as the
program’s execution. For the log to be maintained, the thumb drive Dumbo is executed from
must remain plugged into the system throughout the duration of the operation. Dumbo will
not report failed logging attempts if the drive is removed.
All logging entries are preceded by an ISO 8601 UTC timestamp, ex.:
[Year-Month-Day Hour:Minutes:Seconds UTC]
Logging entries are also preceded by a header labeling the sentiment of the log entry.
Dumbo’s log is constantly appended to at the end of the file. If the program is run on the
same thumb drive, across multiple uses, without cleaning the log file, the log will maintain
the entries from all uses.
2.4 Additional Notes
In some instances, programs emulate a camera input to other programs; such is the case with
Fujitsu’s YouCam.exe. When this occurs, YouCam.exe will have control of the actual
webcam, and feed input to other processes as needed. In this scenario, Dumbo may not
output meaningful details related to files.
Dumbo has the capability to detect only files are were being written at the moment of its
execution. Previously saved files will not be detected.
If another program attempts to use a camera while Dumbo is running, it will not function
properly due to the camera already being in use.

- 1
- 2
…
- 6
- 7
- 8