MsMpEng.exe writes large amounts of data to vmem file

Sourcell 0 Reputation points

I have a VMware Workstation virtual machine stored on an external removable SSD. Every time I start it, VMware Workstation creates a vmem file for it to store the virtual machine's memory data.

At this point, MsMpEng.exe keeps writing a lot of data to this vmem file, causing the SSD to reach 100% active time and my virtual machine to stop responding for a while.

User's image

I have tried to exclude paths, processes, and files related to VMware Workstation and vmem file using the following powershell commands, but it still does not change the behavior of MsMpEng.exe

  • Set-MpPreference -ExclusionPath "F:\Virtual Machines\Kali"
  • Set-MpPreference -ExclusionProcess "C:\Program Files (x86)\VMware\VMware Workstation\*","C:\Program Files (x86)\VMware\VMware Workstation\ x64\*","vmware.exe","vmware-vmx.exe","mksSandbox.exe"
  • Set-MpPreference -ExclusionExtension ".vmem",".vmdk"

So what can I do to prevent MsMpEng.exe from writing large amounts of data to the vmem file?


  • Why is MsMpEng.exe writing data instead of reading it?
  • I've allocated 32 GB of memory to the VM.
A family of Microsoft operating systems that run across personal computers, tablets, laptops, phones, internet of things devices, self-contained mixed reality headsets, large collaboration screens, and other devices.
4,966 questions
Windows 11
Windows 11
A Microsoft operating system designed for productivity, creativity, and ease of use.
8,678 questions
{count} votes