Home How it works Support Boost Connect Download

Boost Connect

Uncovering the DNA of programs.
Good programs    
Fair programs  
Bad programs 

What is msmpeng.exe?

Part of Antimalware Service Executable by Microsoft

What is it?

MsMpEng.exe is the back-end of Microsoft Security Essentials. It is important to remember that this process is actually used by both Windows Defender and MSE. When you install Microsoft Security Essentials, then Windows Defender is automatically turned off and Microsoft Security Essentials uses this process. This is the main process that runs the program and takes quite some system memory. If you end this process then Microsoft Security Essentials will be disabled and an alert will be shown aski

What if I disable Antimalware Service Executable?

If you disable Microsoft Security Essentials, then Windows Defender will be enabled and will start using this process. So in a way both Windows Defender and Microsoft Security Essentials use this single process.
Description of msmpeng.exe from Microsoft
Windows Defender is software that helps protect your computer against pop-ups, slow performance, and security threats caused by spyware and other unwanted software by detecting and removing known spyware from your computer. Windows Defender features Real-Time Protection, a monitoring system that recommends actions against spyware when it's detected, minimizes interruptions, and helps you stay productive.
(msmpeng.exe is a system file that is installed with Windows)
Download Boost and enjoy your PC. Speed up Antimalware Service Executable and optimize your PC.

How does msmpeng.exe run?

Service - msmpeng.exe runs as a background Windows service called 'WinDefend' (Windows Defender-Dienst). This is a system service that is installed with the Windows operating system and protected with Window's File Protection.


What is the community is seeing?What is the community is doing?
About 0.3% of all Boost users have the msmpeng.exe process running.Of the 0.3% of msmpeng.exe users, less than 1% have disabled it.
How resource intensive is msmpeng.exe?
Comparison based on the average resource utilization across all programs.
0.00013% CPU1250.9%
Average CPU utilization across all programs is 0.00001%.
72.34 MB RAM335.9%
Average private memory utilization across all programs is 21.53 MB.
258 context switches/sec258.0%
Average context switches for all programs is 100 per second.
Typical file (disk image) location:
C:\Program Files\windows defender\msmpeng.exe

Are there other versions of Antimalware Service Executable?

Why are multiple of the same versions listed?

What else is related?

What Windows OS versions does this run on?

Windows 8 Release Preview (6.2.8400.0)

About Microsoft Corporation

Microsoft, founded in 1975 by Bill Gates and Paul Allen, is a veteran software company, best known for its Microsoft Windows operating system and the Microsoft More...
Download Boost

File details

File name: msmpeng.exe
Publisher: Microsoft Corporation (verified)
Name: Antimalware Service Executable
Description: Microsoft® Windows® Operating System
Version: 4.0.8400.0 (winmain_win8rc.120518-1423)
Product version: 4.0.8400.0
Size: 14.54 KB
Original file name: MsMpEng.exe
Windows file protection: Yes

Digital certificate

Certificate authority: Microsoft Corporation
Expiration date: 7/9/2013

Resource utilization

CPU utilization averages
Total CPU: 0.0005143446%
Privileged CPU: 0.0003892560%
User CPU: 0.00012508859546%
Privileged CPU time: 55536356 ms
Privileged CPU time /min: 0 ms
CPU cycle count: 9,135,401
Context switches /sec: 258
Memory utilization averages
Committed memory: 250.5 MB
Peak committed memory: 545.46 MB
Paged memory: 72.34 MB
Peak paged memory: 387.41 MB
Paged system memory: 292.99 KB
Non-paged system memory: 82.3 KB
Working set memory: 66.4 MB
Peak working set memory: 371.25 MB
Min working set memory: 37.52 MB
Private memory: 72.34 MB
Page faults: 3,933,560
Page faults /min: 0
Process I/O averages
Total read operations: 351,041
Total write operations: 968
Total write transfer: 178.5 MB
Total other operations: 1,807,504
Total other transfer: 91.52 MB
Handle count average: 474
Thread count average: 18

Process details

Runs as (owner): User
Integrety level: System
Windows platform: 64-bit
Runs as a service: Yes
Parent Process
Process Command

Service details

Name: Windows Defender-Dienst
Service name: WinDefend
Service type: Win32OwnProcess
Description: “Schützt Benutzer vor Schadsoftware und weiterer potenziell unerwünschter Software.”

Image hashes

MD5: eafc046ffdbe1cbe3cabade34f09f588
SHA-1: 60d3e9c0c917ba61f9b3657047d799d8838e4a59
SHA-256: 5d957b168ccf57781c3c2ec67506139546410828285b2d3785a4c0d9e09ce38b

PE image details

Subsystem: Windows GUI
File packed: No
Import Table
Stay up to date with news about Boost
Subscribe to our newsletter to receive the latest Boost news and discounts.
© 2018 Reason Software Company Inc.
228 Park Ave S #74122 New York, NY 10003
(646) 664-1038 | info@boostbyreason.com
How it works Privacy Terms Support Contact Download Donate Reason Software, the makers of Boost logo

Download Boost and enjoy your PC.

Increase your PC's performance.
Remove unwanted crapware.
Reduce your boot time.
Identify and resolves crashes.
Download the FREE unlimited trial of Boost!
No spyware, no adware, no bundles, no tricks.

Save 40% on Boost

For a limited time, from now until Thursday, May 24, 2018 you can purchase Boost for 40% off of the normal price, only $39.95 $24.95.
The instant online savings will be automatically applied during checkout.

100% Satisfaction Guarantee

Purchase with confidence. We stand behind Boost.
If for any reason you are not satisfied with your software purchase, simply contact our Customer Support within 30 days, and we'll refund the purchase price. We won't make you jump through hoops to get all your money back!