Windows 11 26100 specific c0000005 crash in Modern Context Menu Shell Extension (ExplorerMenu.Shell.dll)

ShengYu 20 Reputation points
2026-09-10T06:52:52.9+00:00

Hello Microsoft Community Support and Developers,

We recently received a high-priority health alert in our Partner Center account regarding a critical issue that is heavily impacting our users on the latest Windows 11 builds.

Here is the detailed summary of the issue we are investigating:

🚨 Symptoms & Impact

Partner Center Alert: We detected a massive, unexpected spike in our HangRate metrics compared to our 30-day average baseline.Failure Scope: The issue has rapidly escalated to over 2 Million Total Hits, critically affecting hundreds of thousands of unique devices.Failure Type: The vast majority of these reported failures are categorized as Crash rather than typical hangs.

💻 2. Error Code & Affected Module

Error Code: ACCESS_VIOLATION_c0000005Target Module: ExplorerMenu.Shell.dllContext: This DLL is responsible for our app's Explorer Context Menu Shell Extension (the right-click context menu in Windows Explorer).

📊 3. OS Version & Timeline Observations

According to the telemetric distribution charts in our Partner Center, we observed a distinct pattern regarding the affected environments and timeline:

  • The Environment: Over 1.91 Million crashes appear to be heavily concentrated on Windows 11 Build 10.0.26100 (and related builds). Legacy Windows 11 and Windows 10 versions show very few occurrences of this failure type.
  • The Timeline: This spike unexpectedly began around June 2026 and persisted through late August 2026.
  • Codebase Stability: It is worth noting that our ExplorerMenu.Shell.dll source code has remained entirely unchanged since February 2025, and it ran stably without any major issues until June 2026.
  • Given that the code was untouched for over a year, we wonder if a specific Windows 11 cumulative update or structural adjustment rolled out between June and August 2026 might have interacted unexpectedly with legacy or long-standing Shell Extension implementations.
❓ Questions & Exploration

To help us narrow down the root cause and ensure a stable experience for our users, we would highly appreciate any insights or suggestions from the community or the Windows Shell team:

  1. Are there any known potential compatibility considerations or general guidelines we should follow regarding Windows Explorer context menu behaviors in recent Build 26100 updates?
  2. Has any other developer experienced similar c0000005 errors with previously stable extensions during this recent timeframe, and if so, how was it approached?
  3. Could you recommend any specific debugging techniques, tools, or best practices to help us investigate why this error might occur within the Explorer infrastructure under these specific conditions?

User's image

User's image

f159c3e241546596d7e3d86366cf7c6a

Windows development | Windows App SDK
0 comments No comments

1 answer

Sort by: Oldest
  1. AI answer

    2026-09-10T06:53:24.9433333+00:00

    The supported guidance in the available documentation is limited, but these points are directly relevant to an Explorer context menu shell extension crash on recent Windows 11 builds:

    1. Run and test the shell extension in a separate Explorer process. Add this REG_DWORD value:
    HKEY_CURRENT_USER
       Software
          Microsoft
             Windows
                CurrentVersion
                   Explorer
                      DesktopProcess = 1
    

    Then sign out and sign in again. This causes the desktop and taskbar windows to run in one Explorer.exe process and other Explorer and folder windows in a different Explorer.exe process. For shell-extension debugging, this helps avoid stopping and restarting the desktop and taskbar, and it improves isolation if the non-desktop Explorer process terminates.

    1. If the issue involves a shell extension DLL not unloading promptly during debugging, shorten the inactive unload period. Add this registry key:
    HKEY_LOCAL_MACHINE
       Software
          Microsoft
             Windows
                CurrentVersion
                   Explorer
                      AlwaysUnloadDll
    

    This is useful when debugging because the Shell unloads a DLL only after its usage count reaches zero and it has remained unused for a period of time. Changing this behavior can make repeated test cycles easier.

    1. A crash pattern tied to right-click or legacy context menu invocation can indicate a context menu handler problem. In a similar Windows 11 24H2 case, failure on Shift+Right-click and Show more options was associated with a third-party context menu handler causing an unhandled exception when the legacy IContextMenu path was invoked. The accepted troubleshooting approach was:
      • Open Event Viewer.
      • Check the Application log.
      • Filter for Event ID 1000 at the crash time.
      • Inspect the Faulting module path.
      If the faulting module is a non-Microsoft DLL, that points to the extension or another integrated shell component involved in the crash path.
    2. There is a documented Windows 11 enterprise issue where Explorer, Start, taskbar, and other XAML-dependent components can fail after certain updates because dependent XAML packages do not register in time after update installation. This issue affects Windows 11 versions 24H2 and 25H2 in some enterprise or managed environments, especially around provisioning and non-persistent environments, and can present as:
      • Explorer.exe crash on start
      • black screen after sign-in
      • Start menu not opening
      • taskbar not rendering
      Microsoft states this issue is addressed starting with updates released June 23, 2026 (KB5095093), with broader availability in the following monthly update. If affected devices are on updates released before late July 2026, installing the latest update is the documented resolution.

    Based on the available material, the most grounded investigation path is:

    1. Reproduce with DesktopProcess=1 so the shell extension can be tested in a separate Explorer process.
    2. Capture Application log crashes around the repro time and confirm the exact faulting module path.
    3. If repeated test iterations are needed, use AlwaysUnloadDll to make DLL unload behavior more debugger-friendly.
    4. Correlate affected devices with whether they were on pre-resolution Windows updates from the June–July 2026 timeframe, especially in managed or enterprise deployments.
    5. Validate behavior again after the latest cumulative update, because Microsoft documents a June 2026 fix for a class of Explorer/XAML startup and shell failures.

    Warning: registry changes affect Explorer behavior system-wide for the signed-in user or device. Use them only in a controlled test environment and revert them after debugging if no longer needed.


    AI-generated content may be incorrect. Read our transparency notes for more information.

    Was this answer helpful?

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.