# Vault 7: Projects

This publication series is about specific projects related to the Vault 7 main publication.

### Brutal Kangaroo

# Shadow v1.0 - User Guide

31 August, 2012

- 1
- 2
…
- 8
- 9
- 10
- 11
- 12
- 13
- 14

Shadow v1.0 User Guide SECRET
The file system directory that corresponds to the nonlocalized Startup program group for
all users. Valid only for Microsoft Windows NT systems. This value is recognized in
Windows Vista for backward compatibility, but the folder itself no longer exists.
CSIDL_COMMON_APPDATA (FOLDERID_ProgramData)
Version 5.0. The file system directory that contains application data for all users. A
typical path is C:\Documents and Settings\All Users\Application Data. This folder is used
for application data that is not user specific. For example, an application can store a spell-
check dictionary, a database of clip art, or a log file in the
CSIDL_COMMON_APPDATA folder. This information will not roam and is available
to anyone using the computer.
CSIDL_COMMON_DESKTOPDIRECTORY (FOLDERID_PublicDesktop)
The file system directory that contains files and folders that appear on the desktop for all
users. A typical path is C:\Documents and Settings\All Users\Desktop. Valid only for
Windows NT systems.
CSIDL_COMMON_DOCUMENTS (FOLDERID_PublicDocuments)
The file system directory that contains documents that are common to all users. A typical
paths is C:\Documents and Settings\All Users\Documents. Valid for Windows NT
systems and Windows 95 and Windows 98 systems with Shfolder.dll installed.
CSIDL_COMMON_FAVORITES (FOLDERID_Favorites)
The file system directory that serves as a common repository for favorite items common
to all users. Valid only for Windows NT systems.
CSIDL_COMMON_MUSIC (FOLDERID_PublicMusic)
Version 6.0. The file system directory that serves as a repository for music files common
to all users. A typical path is C:\Documents and Settings\All Users\Documents\My
Music.
CSIDL_COMMON_OEM_LINKS (FOLDERID_CommonOEMLinks)
This value is recognized in Windows Vista for backward compatibility, but the folder
itself is no longer used.
CSIDL_COMMON_PICTURES (FOLDERID_PublicPictures)
Version 6.0. The file system directory that serves as a repository for image files common
to all users. A typical path is C:\Documents and Settings\All Users\Documents\My
Pictures.
CSIDL_COMMON_PROGRAMS (FOLDERID_CommonPrograms)
The file system directory that contains the directories for the common program groups
that appear on the Start menu for all users. A typical path is C:\Documents and
Settings\All Users\Start Menu\Programs. Valid only for Windows NT systems.
CSIDL_COMMON_STARTMENU (FOLDERID_CommonStartMenu)
The file system directory that contains the programs and folders that appear on the Start
menu for all users. A typical path is C:\Documents and Settings\All Users\Start Menu.
Valid only for Windows NT systems.
CSIDL_COMMON_STARTUP (FOLDERID_CommonStartup)
The file system directory that contains the programs that appear in the Startup folder for
all users. A typical path is C:\Documents and Settings\All Users\Start
Menu\Programs\Startup. Valid only for Windows NT systems.
CSIDL_COMMON_TEMPLATES (FOLDERID_CommonTemplates)
SECRET
7

- 1
- 2
…
- 8
- 9
- 10
- 11
- 12
- 13
- 14