Find Shell Extensions in Windows Regedit

Shell extensions are COM objects (Dynamic Link Libraries) that customize and expand the Windows interface, such as adding entries to the File Explorer right-click context menu, handling icon overlays, or managing property sheets. In the Windows Registry Editor (regedit), these extensions are not stored in a single unified list; instead, they are cataloged under several specific registry keys depending on their scope, approval status, and handler type.

1. Globally Approved Shell Extensions

Windows maintains a master list of approved shell extension CLSIDs (Class Identifiers). This is the most direct location to see extensions authorized to run in the Windows Explorer process:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved

• Each Name in this key is a GUID/CLSID (e.g., {42071714-76d4-11d1-8b24-00a0c9068ff3}).
• The Data field contains the human-readable description of the extension.

To find blocked shell extensions, check the companion key:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Blocked

2. Context Menu and Object Handlers (shellex)

Specific shell extensions linked to files, folders, and system objects are stored within the shellex subkeys under HKEY_CLASSES_ROOT (or their user-specific counterparts in HKEY_CURRENT_USER\Software\Classes).

All Files and Global Objects

• All Files: HKEY_CLASSES_ROOT\*\shellex\ContextMenuHandlers
• All Objects (Files and Folders): HKEY_CLASSES_ROOT\AllFilesystemObjects\shellex\ContextMenuHandlers

Folders and Directories

• File System Directories: HKEY_CLASSES_ROOT\Directory\shellex\ContextMenuHandlers
• Folder Backgrounds (Empty Space Menu): HKEY_CLASSES_ROOT\Directory\Background\shellex\ContextMenuHandlers
• Generic Folders: HKEY_CLASSES_ROOT\Folder\shellex\ContextMenuHandlers
• Drives: HKEY_CLASSES_ROOT\Drive\shellex\ContextMenuHandlers

Other Handler Types

Within the same paths, replace ContextMenuHandlers with other handler subkeys to locate specific functionality: * PropertySheetHandlers (File Properties tabs) * DragDropHandlers (Right-click drag-and-drop actions) * CopyHookHandlers (Actions intercepting move/delete operations) * IconHandler / IconOverlayHandlers (File icon graphics and overlay badges)

3. Extension Details and DLL File Paths (CLSID)

The keys under shellex and Approved typically reference a CLSID GUID rather than a direct executable path. To locate the actual .dll file powering a specific shell extension:

1. Copy the CLSID string (including the curly brackets {...}).

2. Navigate to:

   HKEY_CLASSES_ROOT\CLSID\{YOUR-CLSID-GUID}\InprocServer32

   (Or HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{YOUR-CLSID-GUID}\InprocServer32)

3. Check the (Default) value, which displays the exact filesystem path to the registered DLL file.