# Vault 7: Projects

This publication series is about specific projects related to the Vault 7 main publication.

### Brutal Kangaroo

# Shadow v1.0 - User Guide

31 August, 2012

- 1
- 2
…
- 9
- 10
- 11
- 12
- 13
- 14

Shadow v1.0 User Guide SECRET
The file system directory that contains the templates that are available to all users. A
typical path is C:\Documents and Settings\All Users\Templates. Valid only for Windows
NT systems.
CSIDL_COMMON_VIDEO (FOLDERID_PublicVideos)
Version 6.0. The file system directory that serves as a repository for video files common
to all users. A typical path is C:\Documents and Settings\All Users\Documents\My
Videos.
CSIDL_COMPUTERSNEARME (FOLDERID_NetworkFolder)
The folder that represents other computers in your workgroup.
CSIDL_CONNECTIONS (FOLDERID_ConnectionsFolder)
The virtual folder that represents Network Connections, that contains network and dial-up
connections.
CSIDL_CONTROLS (FOLDERID_ControlPanelFolder)
The virtual folder that contains icons for the Control Panel applications.
CSIDL_COOKIES (FOLDERID_Cookies)
The file system directory that serves as a common repository for Internet cookies. A
typical path is C:\Documents and Settings\ username\Cookies.
CSIDL_DESKTOP (FOLDERID_Desktop)
The virtual folder that represents the Windows desktop, the root of the namespace.
CSIDL_DESKTOPDIRECTORY (FOLDERID_Desktop)
The file system directory used to physically store file objects on the desktop (not to be
confused with the desktop folder itself). A typical path is C:\Documents and Settings\
username\Desktop.
CSIDL_DRIVES (FOLDERID_ComputerFolder)
The virtual folder that represents My Computer, containing everything on the local
computer: storage devices, printers, and Control Panel. The folder can also contain
mapped network drives.
CSIDL_FAVORITES (FOLDERID_Favorites)
The file system directory that serves as a common repository for the user's favorite items.
A typical path is C:\Documents and Settings\ username\Favorites.
CSIDL_FONTS (FOLDERID_Fonts)
A virtual folder that contains fonts. A typical path is C:\Windows\Fonts.
CSIDL_HISTORY (FOLDERID_History)
The file system directory that serves as a common repository for Internet history items.
CSIDL_INTERNET (FOLDERID_InternetFolder)
A virtual folder for Internet Explorer.
CSIDL_INTERNET_CACHE (FOLDERID_InternetCache)
Version 4.72. The file system directory that serves as a common repository for temporary
Internet files. A typical path is C:\Documents and Settings\ username\Local
Settings\Temporary Internet Files.
CSIDL_LOCAL_APPDATA (FOLDERID_LocalAppData)
Version 5.0. The file system directory that serves as a data repository for local
(nonroaming) applications. A typical path is C:\Documents and Settings\ username\Local
Settings\Application Data.
CSIDL_MYDOCUMENTS (FOLDERID_Documents)
SECRET
8

- 1
- 2
…
- 9
- 10
- 11
- 12
- 13
- 14