6.2.8250.0 (winmain_win8beta.120217-1520) 0.37%
6.2.8102.0 (winmain_win8m3.110823-1455) 0.74%
4.3.9600.16384 (winblue_rtm.130821-1623) 13.01%
4.3.9600.16384 (winblue_rtm.130821-1623) 0.74%
4.3.9431.0 (winmain_bluemp.130615-1214) 1.86%
4.3.9431.0 (winmain_bluemp.130615-1214) 0.37%
4.0.9200.16384 (win8_rtm.120725-1247) 18.22%
4.0.9200.16384 (win8_rtm.120725-1247) 62.83%
4.0.8400.0 (winmain_win8rc.120518-1423) 1.12%
4.0.8400.0 (winmain_win8rc.120518-1423) 0.74%



Antimalware Service Executable by Microsoft Corporation (Signed)

Remove MsMpEng.exe
This is a Windows system installed file with Windows File Protection (WFP) enabled.


There are 10 versions of msmpeng.exe in the wild, the latest version being 6.2.8250.0 (winmain_win8beta.120217-1520). It is started as a Windows Service called 'Servizio Windows Defender' with the name 'WinDefend' and described as “Contribuisce a proteggere gli utenti da malware e altro software potenzialmente indesiderato”. . In addition, it is run under the context of the SYSTEM account with extensive privileges (the administrator accounts have the same privileges). The average file size is about 17.28 KB. The file is a digitally signed and issued to Microsoft Corporation by Microsoft Corporation. During the process's lifecycle, the typical CPU resource utilization is about 0.0054% including both foreground and background operations, the average private memory consumption is about 77.82 MB with the maximum memory reaching around 112.08 MB. Addionally, typically read and write I/O disk operations is about 2.68 MB per minute for reads and 266.45 KB per minute for writes.

What is msmpeng.exe?

MsMpEng.exe is the back-end of Microsoft Security Essentials. It is important to remember that this process is actually used by both Windows Defender and MSE. When you install Microsoft Security Essentials, then Windows Defender is automatically turned off and Microsoft Security Essentials uses this process. This is the main process that runs the program and takes quite some system memory. If you end this process then Microsoft Security Essentials will be disabled and an alert will be shown aski

About msmpeng.exe (from Microsoft Corporation)

Windows Defender is software that helps protect your computer against pop-ups, slow performance, and security threats caused by spyware and other unwanted software by detecting and removing known spyw


File name:msmpeng.exe
Publisher:Microsoft Corporation
Product name:Antimalware Service Executable
Description:Microsoft® Windows® Operating System
Typical file path:C:\Program Files\windows defender\msmpeng.exe
Issued to:Microsoft Corporation
Authority (CA):Microsoft Corporation
Expiration date:Tuesday, July 9, 2013
Windows Service
Service name:WinDefend
Display name:Servizio Windows Defender
Description:“Contribuisce a proteggere gli utenti da malware e altro software potenzialmente indesiderato”


(Note, the behaviors below are for all versions of msmpeng.exe, select a unique version for details.)
Runs under 'SYSTEM\CurrentControlSet\Services' by the Service Controller (services.exe)
  • 'WinDefend' (Servizio Windows Defender)
  • WinDefend

VersionsAll file variations of msmpeng.exe

MD5SHA-1File size
51f9e8d45640f778f9d62b9dcd75059a a487268b56250b5cf7a720033e982d39b2504e63 13.57 KB
597f4d2d141ca4b0e41f6e1c6923b103 abdd62663478148d1b63f3d5a9998c38ed1132d7 13.09 KB
90b85ffbdeead1be861d59134ea985b0 55e9859aa7dba87678e7c529b571fdf6b7181339 23.28 KB
31e2ca1eef312b7bbb597b6ff4feb5dc e57ea5da41f37a7b62c62860d2ca9a32944cb19e 21.72 KB
c41c83e9c720d164a3e5152e1cf56101 03f2e6c7a10441d13f498694e3ad546271e65d35 23.28 KB
6d4070803c959fadf6384aa1bd588e93 27a6d2242e066a3a2da1766ebe4ce640d30341be 21.72 KB
36a695e1683671009c2fea38b5eb4cd4 2497c8cad4579f37b5d7c1f2d8e8a06049d8fce0 13.54 KB
f6e2d63673ed6c04ab21cec88517b0f5 dbd38ad4668005f26b8535777eee9349cc293503 15.08 KB
eafc046ffdbe1cbe3cabade34f09f588 60d3e9c0c917ba61f9b3657047d799d8838e4a59 14.54 KB
aada4de00d483653a0a9c149d60096a0 9246133750f97afdc645827b138acf23605d82c8 13 KB

Windows OS versionsDistribution by Windows OS

OS versiondistribution
Windows 8 Pro 44.40%
Windows 8 19.40%
Windows 8 Pro with Media Center 10.07%
Windows 8.1 7.84%
Windows 8 Enterprise 4.10%
Windows 8.1 Pro 3.73%
Windows 8 Release Preview 1.87%
Windows 8.1 Pro Preview 1.49%
Windows 8 Enterprise N 1.12%
Windows 8 Single Language 1.12%
Windows 8.1 Single Language 0.75%
Windows 8.1 Pro with Media Center 0.75%
Windows 8.1 Enterprise 0.75%
Windows Developer Preview 0.75%
Windows 8 Enterprise Evaluation 0.75%
Windows 8.1 Single Language Preview 0.37%
Windows 8.1 Pro Preview with Media Center 0.37%
Windows 8 Consumer Preview 0.37%

Distribution by countryDistribution by country

United States installs about 37.45% of Antimalware Service Executable.

OEM distributionDistribution by PC manufacturer

PC Manufacturerdistribution
ASUS 20.51%
Hewlett-Packard 17.31%
Dell 12.82%
Toshiba 10.26%
Acer 8.97%
Sony 8.97%
Lenovo 7.69%
Intel 2.56%
Medion 1.28%
Packard Bell 1.28%
MSI 1.28%
Alienware 0.64%
Samsung 0.64%
Should I remove It? Clean your PC of unwanted adware, toolbars and bloatware.

Download it for FREE