Skip to content

Glossary

ShellBags

Registry keys in which Windows Explorer stores per-folder view settings, and with them a per-user record of every folder navigated to in the shell.

ShellBags are the BagMRU and Bags registry keys that Windows Explorer uses to remember how each folder was displayed (view mode, sort order, window size). To attach settings to a folder, Explorer records the folder itself as a shell item, so the keys double as a history of folders a user browsed, including USB drives, network shares, ZIP contents and deleted folders.

On Windows 7 and later they live mainly in UsrClass.dat, with a smaller tree in NTUSER.DAT. They prove navigation, not file access. See the complete guide, or parse a hive with the ShellBags Parser.