We Recommend: You Boost your PC today


6.2.8250.0 (winmain_win8beta.120217-1520) 0.45%
4.3.9431.0 (winmain_bluemp.130615-1214) 0.91%
4.0.9200.16384 (win8_rtm.120725-1247) 20.45%
4.0.9200.16384 (win8_rtm.120725-1247) 75.91%
4.0.8400.0 (winmain_win8rc.120518-1423) 1.36%
4.0.8400.0 (winmain_win8rc.120518-1423) 0.91%



Antimalware Service Executable by Microsoft Corporation (Signed)

This is a Windows system installed file with Windows File Protection (WFP) enabled.


There are 6 versions of msmpeng.exe in the wild, the latest version being 6.2.8250.0 (winmain_win8beta.120217-1520). It is started as a Windows Service called 'Windows Defender-Dienst' with the name 'WinDefend' and described as “Schützt Benutzer vor Schadsoftware und weiterer potenziell unerwünschter Software.”. . In addition, it is run under the context of the SYSTEM account with extensive privileges (the administrator accounts have the same privileges). The average file size is about 15.5 KB. The file is a digitally signed and issued to Microsoft Corporation by Microsoft Corporation. During the process's lifecycle, the typical CPU resource utilization is about 0.0055% including both foreground and background operations, the average private memory consumption is about 77.92 MB with the maximum memory reaching around 112.86 MB. Addionally, typically read and write I/O disk operations is about 2.68 MB per minute for reads and 266.45 KB per minute for writes.

What is msmpeng.exe?

MsMpEng.exe is the back-end of Microsoft Security Essentials. It is important to remember that this process is actually used by both Windows Defender and MSE. When you install Microsoft Security Essentials, then Windows Defender is automatically turned off and Microsoft Security Essentials uses this process. This is the main process that runs the program and takes quite some system memory. If you end this process then Microsoft Security Essentials will be disabled and an alert will be shown aski

About msmpeng.exe (from Microsoft Corporation)

Windows Defender is software that helps protect your computer against pop-ups, slow performance, and security threats caused by spyware and other unwanted software by detecting and removing known spyw


File name:msmpeng.exe
Publisher:Microsoft Corporation
Product name:Antimalware Service Executable
Description:Microsoft® Windows® Operating System
Typical file path:C:\Program Files\windows defender\msmpeng.exe
Issued to:Microsoft Corporation
Authority (CA):Microsoft Corporation
Expiration date:Tuesday, July 09, 2013
Windows Service
Service name:WinDefend
Display name:Windows Defender-Dienst
Description:“Schützt Benutzer vor Schadsoftware und weiterer potenziell unerwünschter Software.”


(Note, the behaviors below are for all versions of msmpeng.exe, select a unique version for details.)
Runs under 'SYSTEM\CurrentControlSet\Services' by the Service Controller (services.exe)
  • 'WinDefend' (Windows Defender-Dienst)
  • WinDefend

VersionsAll file variations of msmpeng.exe

MD5SHA-1File size
51f9e8d45640f778f9d62b9dcd75059a a487268b56250b5cf7a720033e982d39b2504e63 13.57 KB
c41c83e9c720d164a3e5152e1cf56101 03f2e6c7a10441d13f498694e3ad546271e65d35 23.28 KB
36a695e1683671009c2fea38b5eb4cd4 2497c8cad4579f37b5d7c1f2d8e8a06049d8fce0 13.54 KB
f6e2d63673ed6c04ab21cec88517b0f5 dbd38ad4668005f26b8535777eee9349cc293503 15.08 KB
eafc046ffdbe1cbe3cabade34f09f588 60d3e9c0c917ba61f9b3657047d799d8838e4a59 14.54 KB
aada4de00d483653a0a9c149d60096a0 9246133750f97afdc645827b138acf23605d82c8 13 KB

Windows OS versionsDistribution by Windows OS

OS versiondistribution
Windows 8 Pro 53.42%
Windows 8 23.29%
Windows 8 Pro with Media Center 11.87%
Windows 8 Enterprise 5.02%
Windows 8 Release Preview 2.28%
Windows 8 Single Language 1.37%
Windows 8 Enterprise Evaluation 0.91%
Windows 8.1 Single Language Preview 0.46%
Windows 8.1 Pro Preview with Media Center 0.46%
Windows 8 Consumer Preview 0.46%
Windows 8 Enterprise N 0.46%

Distribution by countryDistribution by country

United States installs about 38.53% of Antimalware Service Executable.

OEM distributionDistribution by PC manufacturer

PC Manufacturerdistribution
Hewlett-Packard 20.65%
ASUS 17.39%
Toshiba 15.22%
Dell 15.22%
Sony 8.70%
Acer 8.70%
Lenovo 2.17%
Packard Bell 2.17%
MSI 2.17%
Should I remove It? Clean your PC of unwanted adware, toolbars and bloatware.

Download it for FREE