Technical focus: registry footprints, Explorer shell hooks, and command-line inspections for 7-Zip on Windows
IT & automationWhat follows catalogs representative keys and switches observed on mainstream Windows estates. MSI transforms, portable per-user trees, WOW6432Node redirection, or Intune repackaging can diverge sharply—treat each example as provisional until burn-in on a scratch VM succeeds.
Registry hives you will touch most often
Interactive choices and File Manager chrome usually land in HKEY_CURRENT_USER, whereas per-machine installers record canonical install metadata and global switches under HKEY_LOCAL_MACHINE so elevated services and standard users consume one source of truth.
HKEY_CURRENT_USER\Software\7-Zip
HKEY_CURRENT_USER\Software\7-Zip\FM
HKEY_LOCAL_MACHINE\SOFTWARE\7-Zip
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\7-Zip
Explorer context menu (shell integration)
Handlers register beneath HKEY_CLASSES_ROOT for files, directories, blank desktop canvases, and drives when Explorer exposes verbs such as Add to archive. Friendly strings usually embed “7-Zip” within each node. Pure 64-bit fleets can still show duplicate entries under Wow6432Node when a 32-bit helper registered first—compare both branches if verbs intermittently vanish.
HKEY_CLASSES_ROOT\*\shellex\ContextMenuHandlers\7-Zip
HKEY_CLASSES_ROOT\Directory\shellex\ContextMenuHandlers\7-Zip
HKEY_CLASSES_ROOT\Directory\Background\shellex\ContextMenuHandlers\7-Zip
HKEY_CLASSES_ROOT\Drive\shellex\ContextMenuHandlers\7-Zip
Commands that enumerate keys quickly
Drive cmd.exe or PowerShell with the smallest privilege tier that answers the query: HKCU scans generally succeed under standard tokens, while sweeping HKLM can demand elevation so ACLs do not mask values.
reg query "HKCU\Software\7-Zip" /s
reg query "HKLM\SOFTWARE\7-Zip" /s
Get-ItemProperty -Path "HKLM:\SOFTWARE\7-Zip" -ErrorAction SilentlyContinue
Get-ItemProperty -Path "HKLM:\SOFTWARE\WOW6432Node\7-Zip" -ErrorAction SilentlyContinue
Silent installation (template)
Shipped Windows installers commonly honor NSIS-style /S switches for unattended flows. Replace the placeholder filename with the binary you distribute after signing and regression passes.
"7z.exe-installer-rename-me.exe" /S