3 Fixes: Windows 11 Antimalware Service Executable Use High Memory

Have you also encountered problem of Antimalware Service Executable high memory for Windows 11? This article will tell you why it happens, and how to fix it in 3 ways.


By Miya Updated on September 19, 2023

Share this: instagram reddit

What Is Antimalware Service Executable?

The Antimalware Service Executable is a process that is part of Windows Defender, the built-in antivirus and antimalware software in Windows operating systems. It is also known as MsMpEng.exe. The purpose of this service is to scan and protect your computer against malicious software, including viruses, spyware, and other types of malware.


This article will discuss why Windows 11 Antimalware Service Executable high memory is caused and how to fix it. Finally, it is recommended that you backup your data to prevent data loss.

Why does Antimalware Service Executable Use High Memory?

Sometimes, users may notice that the Antimalware Service Executable process consumes a significant amount of memory (RAM) and CPU resources, causing high system resource usage. This behavior is more noticeable during system scans or when the software is actively scanning files in the background.

There are a few reasons why the Antimalware Service Executable may use high memory:

✍Real-time scanning: Windows Defender continuously monitors files, applications, and processes in real-time to detect and prevent malware infections. This constant monitoring can result in higher memory usage.

✍System scans: When performing scheduled or manual scans, Windows Defender scans all files on your computer. The scanning process can be resource-intensive, leading to increased memory usage.

✍Conflict with other security software: If you have another antivirus or an antimalware program installed on your computer, it can sometimes conflict with Windows Defender, leading to higher memory usage.

But don't worry, we will provide you with 3 solutions to Antimalware Executable high memory usage on Windows 11, please read carefully.

How to Fix Windows 11 Antimalware Service Executable Use High Memory

When the Antimalware Service Executable runs, it can cause high disk, CPU, or memory usage, computer freezes, and other issues that significantly impact computer usage. If you're experiencing this problem, don't worry. Here are 3 simple solutions to address the Antimalware Service Executable high memory in Windows 11.

Before disabling Windows Defender, it's recommended to back up your computer's data to avoid data loss. Disabling Windows Defender leaves your computer unprotected as it is the built-in antivirus software in Windows 11, exposing it to malware and viruses.

Solution 1. Modifying Windows Defender's Scheduling Preferences

To change Windows Defender's scheduling options, follow these steps:

Step 1. Press Win + R to open the Run window, type taskschd.msc, and press Enter.

Step 2. Expand Task Scheduler Library -> Microsoft -> Windows in the left menu.

Task Scheduler Library

Step 3. In the Windows options, locate and click on Windows Defender. Then double-click on the Windows Defender Scheduled Scan option in the interface.

Windows Defender Scheduled Scan

Step 4. In the pop-up window, deselect Run with the highest privileges.

Run with Highest Privileges

Step 5. Navigate to the Conditions tab and clear all checkboxes to cancel the scheduled scan. Click OK.


Solution 2. Deactivate Real-Time Protection

If you wish to temporarily disable Windows Defender instead of permanently turning it off, you need to visit the Windows Security Center.

Step 1. Access the Windows Security Center by pressing Win + I to open the Settings interface, then select Update & Security.

Update & Security

Step 2. In the left panel, choose Windows Security, and then click on Virus & threat protection in the left menu.

Windows Security

Step 3. In the new pop-up window, choose Firewall & network protection, and then select Manage settings.

Firewall & Network Protection

Step 4. Toggle the Real-time protection button to the Off position.

Turn off Real-time Protection

Solution 3. Deactivate Windows Defender using Group Policy

If you find that the above two methods don't work, you can also try disabling Windows Defender using Group Policy to solve Antimalware Service Executable high memory on Windows 11.

Step 1. To open the Run window, press Win + R simultaneously, then type gpedit.msc and hit Enter.

Open Group Policy

Step 2. Open the Local Group Policy Editor window. In the left panel, select and expand Administrative Templates -> Windows Components.

Local Group Policy Editor

Step 3. Choose Real-time protection within Windows Defender Antivirus. In the right interface, double-click on Turn off real-time protection, and then select Enabled.

Disable Real-time Protection

Backup Your Important Windows 11 Files to Prevent Data Loss

Prior to disabling Windows Defenderto solve Antimalware Service Executable high memory usage on Windows 11, it is highly recommended to utilize AOMEI Backupper Standard for preemptively backing up crucial data on your computer. Disabling Windows Defender exposes your computer system to heightened vulnerability against malware attacks and potential data loss.

AOMEI Backupper Standard is a free professional backup software compatible with Windows 11/10/8.1/8/7/XP/Vista. Its features include:

❅ System, disk, partition, folder, and file backup to safeguard important data.
❅ Flexible scheduling options for backups, including Full, Incremental and Differential backups.
❅ Backup options to local disks, external devices (USB, HDD, SSD, etc.), NAS or network shared folders, and cloud drives.

To proceed with the backup task, download AOMEI Backupper Standard and follow the instructions provided.

Download FreewareWin11/10/8.1/8/7/XP
Secure Download

Step 1.OpenAOMEI Backupper and select Backup from the left menu. Then, click on File Backup in the interface.

File Backup

Step 2. Click on Add Folder or Add File to include single or multiple files/folders during this step.

Add Folder or File

Step 3. Once you have added the desired files/folders, choose the backup destination by clicking the arrow. Finally, click on Start Backup to initiate the backup process.

Select Target Path

❉Tips: Before initiating the backup, customize your settings using the three options at the bottom left:
◉ Options: Compress or split the backup, receive email notifications upon completion, and encrypt your backup (available in AOMEI Backupper Professional).
◉ Schedule: Set up regular backups on a daily, weekly, monthly, and USB plug in and event triggers basis to ensure comprehensive data backup.
◉ Scheme: Choose from three backup methods - Full Backup, Incremental Backup, and Differential Backup. For incremental and differential backups, manually set the backup intervals. Once the intervals are reached, an automatic full backup will be performed. The advanced version also offers an automatic backup cleanup feature.

Step 4. During the backup process, utilize the settings at the bottom left to configure the computer's behavior after completion. You can choose to shut down, restart, hibernate, or put the computer to sleep.

File Backup Shutdown

Step 5. Once the backup is finished, click on Finish.


1. Apart from backup functionality, AOMEI Backupper offers disk cloning, partition cloning, and additional tools like creating bootable media, recovery environment, and disk erasing.
2. To avoid hard drive damage or storage limitations, AOMEI Backupper provides a homemade cloud drive. You can back up your files to AOMEI Cloud, which offers 1TB of free storage for 15 days upon signing up for an AOMEI account.


Now that you understand the causes behind the Windows 11 Antimalware Service Executable high memory issue and have three potential fixes, these solutions should assist you in resolving the problem. However, it is crucial to note that disabling Windows Defender leaves your computer susceptible to malware attacks and data loss.

To prevent such risks, it is highly recommended to utilize AOMEI Backupper Standard for backing up essential data before disabling Windows Defender. This software not only prevents data loss but also provides assistance in handling the BSoD error of Windows 11 Inaccessible Boot Device after cloning. Take proactive measures to protect your computer by downloading and utilizing AOMEI Backupper now!

Miya · Editor
Miya has an excellent insight and receives professional and systematic technical training since joining AOMEI. She has a comprehensive understanding of computer issues, aiming at helping users troubleshoot all kinds of problems. A lot of computer users around the world have found her articles very helpful!