valinet / valinet/ExplorerPatcher

sihost memory leak when exploerpatcher is installed

Open
#5,157 2 comments 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

Dominant language
C
Stars
33.9k
Forks
1.4k
PR merge metrics
No merged PRs in 30d

Description

Before reporting your issue
  • I have confirmed that this issue does not happen when ExplorerPatcher is not installed
  • I do not have "register as shell extension" enabled
  • I have tried my best to check existing issues
Repro ExplorerPatcher versions

26100.8457.70.3

Repro Windows Versions

Edition Windows 11 Pro
Version 25H2
Installed on ‎5/‎31/‎2025
OS build 26200.9168
Experience Windows Feature Experience Pack 1000.26100.344.0

Third-party tweak software installed

Winaero Tweaker
powertoys
Sysinternals

Describe the bug

sihost.exe allocates 96 GB private bytes, 2.2 TB virtual
Windows System Event Log report resource exhaustion warnings
Applications display "out of memory" warnings

sihost performance properties reported from process explorer:

Image

VMMAP heap 1 shows huge number of 16,384K block allocations:

Image
Expected outcome

No user action required.

Problem resolves when explorerpatcher is uninstalled.

Actual outcome

No user action required.

Problem resolves when explorerpatcher is uninstalled.

Additional info

Processor AMD Ryzen 9 9900X 12-Core Processor (4.40 GHz)
Installed RAM 128 GB (126 GB usable)
System type 64-bit operating system, x64-based processor
Pen and touch No pen or touch input is available for this display

Crash Dumps

System doesn't crash.

Media

No response

Contributor guide

No contributing guide indexed for this repository

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

No source files, tests, or entry points are named. First reproduce the leak with ExplorerPatcher 26100.8457.70.3 on the reported Windows 11 25H2 setup, comparing ExplorerPatcher installed versus removed, and investigate the sihost.exe allocations. Done means the reported private and virtual memory growth no longer occurs with ExplorerPatcher installed.

Written by the indexing model from the issue text.

Assessment

Tech stack
c
Domain
operating-systems
Issue type
Bug
Difficulty
5/5
Estimated time
Over a week
Activity status
Active
Clarity
Needs clarification
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.