Strange behavior of Antimalware Service Executable when HWiNFO64 is running


New Member
Around the beginning of November, the Antimalware Service Executable system process (MsMpEng.exe) started to load the CPU in constant spikes (about 5% to 15%) if HWiNFO64 is running at the same time. If I close HWiNFO64 or disable real-time protection in Microsoft Defender, the MsMpEng.exe process completely stops behaving as I described above. If Resource Monitor is to be believed, no files are scanned by MsMpEng at this moment, just CPU load spikes when HWiNFO64 is running.

I have already tried adding the folder, executable file and process to Microsoft Defender exceptions, but it doesn't help.

I have been using Windows 11 along with Microsoft Defender and HWiNFO64 for several years now, never had this problem before.

Windows 11 Pro 23H2 22631.2715

Antimalware Client Version: 4.18.23100.2009
Engine Version: 1.1.23100.2009
Antivirus Version: 1.401.1671.0
Antispyware Version: 1.401.1671.0

HWiNFO64 7.66
This is most likely because Windows Defender in some cases overrides certain performance counters for his own use. It has been discussed here for example: