Skip to content

Glossary

BagMRU

The ShellBags registry key tree that mirrors the folder hierarchy a user browsed, with one numbered shell item value per child folder.

BagMRU is the key tree at the heart of ShellBags. Each key holds numbered REG_BINARY values (0, 1, 2...), each containing one shell item for a child folder, a matching numbered subkey for that child, an MRUListEx value giving the most-recently-used order, and a NodeSlot pointing into the Bags key.

Walking the tree from the root and joining item names rebuilds absolute paths such as My Computer\E:\exfil. Locations per Windows version are in where ShellBags are stored.