Should I block it?

No, this file is 100% safe to run.

VersionsAdditional versions

6.2.8250.0 (winmain_win8beta.120217-1520) 0.37%
6.2.8102.0 (winmain_win8m3.110823-1455) 0.74%
4.3.9600.16384 (winblue_rtm.130821-1623) 13.01%
4.3.9600.16384 (winblue_rtm.130821-1623) 0.74%
4.3.9431.0 (winmain_bluemp.130615-1214) 1.86%
4.3.9431.0 (winmain_bluemp.130615-1214) 0.37%
4.0.9200.16384 (win8_rtm.120725-1247) 18.22%
4.0.9200.16384 (win8_rtm.120725-1247) 62.83%
4.0.8400.0 (winmain_win8rc.120518-1423) 1.12%
4.0.8400.0 (winmain_win8rc.120518-1423) 0.74%

Relationships


PE structurePE file structure

Show functions
Import table
kernel32.dll
ExitProcess, QueryPerformanceCounter, GetCurrentProcessId, GetCurrentThreadId, GetSystemTimeAsFileTime, GetTickCount
mpsvc.dll
ServiceCrtMain

MsMpEng.exe

Antimalware Service Executable by Microsoft Corporation (Signed)

Remove MsMpEng.exe
Version:   4.0.8400.0 (winmain_win8rc.120518-1423)
MD5:   aada4de00d483653a0a9c149d60096a0
SHA1:   9246133750f97afdc645827b138acf23605d82c8
SHA256:   0b81c9cca0aff44d9d7bd103b01cabaac26edcf364c755a8f032c209fdc3034c
This is a Windows system installed file with Windows File Protection (WFP) enabled.

What is MsMpEng.exe?

MsMpEng.exe is the back-end of Microsoft Security Essentials. It is important to remember that this process is actually used by both Windows Defender and MSE. When you install Microsoft Security Essentials, then Windows Defender is automatically turned off and Microsoft Security Essentials uses this process. This is the main process that runs the program and takes quite some system memory. If you end this process then Microsoft Security Essentials will be disabled and an alert will be shown aski

About MsMpEng.exe (from Microsoft Corporation)

Windows Defender is software that helps protect your computer against pop-ups, slow performance, and security threats caused by spyware and other unwanted software by detecting and removing known spyw

DetailsDetails

File name:msmpeng.exe
Publisher:Microsoft Corporation
Product name:Antimalware Service Executable
Description:Microsoft® Windows® Operating System
Typical file path:C:\Program Files\windows defender\msmpeng.exe
File version:4.0.8400.0 (winmain_win8rc.120518-1423)
Product version:4.0.8400.0
Size:13 KB (13,312 bytes)
Certificate
Issued to:Microsoft Corporation
Authority (CA):Microsoft Corporation
Expiration date:Tuesday, July 9, 2013
Digital DNA
PE subsystem:Windows GUI
File packed:No
.NET CLR:No
More details

BehaviorsBehaviors

Services
Runs under 'SYSTEM\CurrentControlSet\Services' by the Service Controller (services.exe)
  • 'WinDefend' (Servizio Windows Defender)
  • WinDefend

Windows OS versionsDistribution by Windows OS

OS versiondistribution
Windows 8 Pro 43.50%
Windows 8 16.00%
Windows 8.1 10.50%
Windows 8 Pro with Media Center 8.50%
Windows 8.1 Pro 5.00%
Windows 8 Enterprise 3.50%
Windows 8.1 Pro Preview 2.00%
Windows 8 Release Preview 2.00%
Windows 8 Enterprise N 1.50%
Windows 8.1 Single Language 1.00%
Windows 8.1 Pro with Media Center 1.00%
Windows 8.1 Enterprise 1.00%
Windows Developer Preview 1.00%
Windows 8 Single Language 1.00%
Windows 8 Enterprise Evaluation 1.00%
Windows 8.1 Single Language Preview 0.50%
Windows 8.1 Pro Preview with Media Center 0.50%
Windows 8 Consumer Preview 0.50%

Distribution by countryDistribution by country

United States installs about 33.67% of Antimalware Service Executable.

OEM distributionDistribution by PC manufacturer

PC Manufacturerdistribution
ASUS 21.92%
Hewlett-Packard 16.44%
Dell 13.70%
Toshiba 10.96%
Sony 9.59%
Acer 8.90%
Lenovo 8.22%
GIGABYTE 3.42%
Intel 2.74%
Medion 1.37%
Packard Bell 1.37%
Alienware 0.68%
Samsung 0.68%
Should I remove It? Clean your PC of unwanted adware, toolbars and bloatware.

Download it for FREE