Windows 11 Consuming 16GB of Ram with nothing significant running

Question

I have a very new install of Windows 11 enterprise, running on a VM with 16GB of memory and 5 cores.

I have almost nothing running on it and it's VERY slow.

I think the problem is that every time I look, it's using all 16GB (96%) of memory but I have no idea why. Nothing particular is taking up a ton of memory even after a reboot.

I took all the items from sysinternals process explorer and pasted them into a spreadsheet. When I did that they totaled less than 2GB of Private Bytes and Working set memory.

Here's what sysinternals Process Explorer is showing (sorted highest consumption desc):

Process CPU Private Bytes Working Set PID Description Company Name
dwm.exe 1.14 86,780 K 124,488 K 5116
Memory Compression < 0.01 576 K 114,536 K 1960
svchost.exe 2.27 212,176 K 113,148 K 1080 Host Process for Windows Services Microsoft Corporation
WUDFHost.exe < 0.01 3,476 K 92,968 K 3608
procexp64.exe 4.17 36,228 K 82,024 K 9132 Sysinternals Process Explorer Sysinternals - www.sysinternals.com
MsMpEng.exe < 0.01 207,220 K 80,420 K 3108 Antimalware Service Executable Microsoft Corporation
svchost.exe < 0.01 84,504 K 67,572 K 1844 Host Process for Windows Services Microsoft Corporation
LogonUI.exe 12,672 K 50,368 K 812
explorer.exe < 0.01 57,672 K 49,828 K 5132 Windows Explorer Microsoft Corporation
TiWorker.exe 27,976 K 36,864 K 8016
RuntimeBroker.exe 6,048 K 25,388 K 4936 Runtime Broker Microsoft Corporation
msedgewebview2.exe < 0.01 24,940 K 25,244 K 2532 Microsoft Edge WebView2 Microsoft Corporation
Microsoft.Photos.exe Suspended 36,900 K 24,160 K 5772
svchost.exe 18,884 K 23,492 K 6984 Host Process for Windows Services Microsoft Corporation
svchost.exe 9,964 K 22,716 K 476 Host Process for Windows Services Microsoft Corporation
svchost.exe 6,180 K 21,416 K 472 Host Process for Windows Services Microsoft Corporation
TextInputHost.exe 12,640 K 19,276 K 8328 Microsoft Corporation
svchost.exe 16,228 K 19,212 K 2480 Host Process for Windows Services Microsoft Corporation
svchost.exe < 0.01 10,804 K 17,648 K 912 Host Process for Windows Services Microsoft Corporation
svchost.exe 3,780 K 16,980 K 2928 Host Process for Windows Services Microsoft Corporation
Registry 3,596 K 16,644 K 124
RuntimeBroker.exe 10,800 K 16,260 K 6280 Runtime Broker Microsoft Corporation
svchost.exe 3,872 K 15,652 K 2076 Host Process for Windows Services Microsoft Corporation
SearchIndexer.exe 20,704 K 15,268 K 4228 Microsoft Windows Search Indexer Microsoft Corporation
dwm.exe < 0.01 19,132 K 15,268 K 1028
sihost.exe 6,700 K 14,484 K 1484 Shell Infrastructure Host Microsoft Corporation
svchost.exe 3,956 K 14,296 K 7156 Host Process for Windows Services Microsoft Corporation
svchost.exe 3,300 K 13,512 K 6060 Host Process for Windows Services Microsoft Corporation
svchost.exe 5,404 K 13,336 K 924 Host Process for Windows Services Microsoft Corporation
YourPhone.exe Suspended 27,152 K 13,244 K 6976   Microsoft Corporation
StartMenuExperienceHost.exe 16,936 K 13,024 K 6112
OneDrive.exe 24,808 K 12,648 K 7664 Microsoft OneDrive Microsoft Corporation
ctfmon.exe < 0.01 3,596 K 12,616 K 4500
backgroundTaskHost.exe Suspended 2,748 K 12,576 K 2700 Background Task Host Microsoft Corporation
svchost.exe 3,224 K 12,552 K 336 Host Process for Windows Services Microsoft Corporation
svchost.exe 8,648 K 12,464 K 3040 Host Process for Windows Services Microsoft Corporation
svchost.exe 4,900 K 12,448 K 1116 Host Process for Windows Services Microsoft Corporation
taskhostw.exe 5,816 K 12,284 K 4856 Host Process for Windows Tasks Microsoft Corporation
RuntimeBroker.exe 3,112 K 11,764 K 8232 Runtime Broker Microsoft Corporation
lsass.exe < 0.01 6,256 K 11,740 K 800 Local Security Authority Process Microsoft Corporation
Widgets.exe 6,660 K 11,620 K 6876 Microsoft Corporation
svchost.exe 24,552 K 11,188 K 2764 Host Process for Windows Services Microsoft Corporation
rdpclip.exe < 0.01 3,700 K 11,072 K 2736 RDP Clipboard Monitor Microsoft Corporation
svchost.exe < 0.01 6,832 K 11,004 K 492 Host Process for Windows Services Microsoft Corporation
svchost.exe < 0.01 6,656 K 10,952 K 3100 Host Process for Windows Services Microsoft Corporation
svchost.exe 5,724 K 10,908 K 1236 Host Process for Windows Services Microsoft Corporation
msedgewebview2.exe 8,756 K 10,584 K 6036 Microsoft Edge WebView2 Microsoft Corporation
MiniSearchHost.exe Suspended 16,252 K 10,568 K 5060 Microsoft Corporation
msedgewebview2.exe 115,004 K 10,532 K 7812 Microsoft Edge WebView2 Microsoft Corporation
msedgewebview2.exe 6,896 K 10,436 K 7032 Microsoft Edge WebView2 Microsoft Corporation
svchost.exe 3,468 K 10,272 K 2340 Host Process for Windows Services Microsoft Corporation
svchost.exe 4,556 K 10,268 K 3560 Host Process for Windows Services Microsoft Corporation
TabTip.exe < 0.01 3,708 K 10,012 K 5328
svchost.exe 2,968 K 9,820 K 1428 Host Process for Windows Services Microsoft Corporation
svchost.exe 4,072 K 9,488 K 3136 Host Process for Windows Services Microsoft Corporation
svchost.exe 5,320 K 9,472 K 4176 Host Process for Windows Services Microsoft Corporation
svchost.exe 3,016 K 9,324 K 2984 Host Process for Windows Services Microsoft Corporation
svchost.exe < 0.01 14,560 K 9,108 K 1792 Host Process for Windows Services Microsoft Corporation
svchost.exe 2,532 K 9,096 K 4124 Host Process for Windows Services Microsoft Corporation
svchost.exe 4,044 K 9,084 K 1780 Host Process for Windows Services Microsoft Corporation
svchost.exe 4,304 K 8,980 K 2016 Host Process for Windows Services Microsoft Corporation
svchost.exe 2,576 K 8,748 K 7268 Host Process for Windows Services Microsoft Corporation
RuntimeBroker.exe 1,652 K 8,472 K 7244 Runtime Broker Microsoft Corporation
ApplicationFrameHost.exe 8,000 K 8,252 K 6232 Application Frame Host Microsoft Corporation
dllhost.exe 5,972 K 8,100 K 3948 COM Surrogate Microsoft Corporation
svchost.exe 4,260 K 8,088 K 1492 Host Process for Windows Services Microsoft Corporation
svchost.exe 1,668 K 8,080 K 8784 Host Process for Windows Services Microsoft Corporation
svchost.exe 10,208 K 8,040 K 2876 Host Process for Windows Services Microsoft Corporation
svchost.exe 3,004 K 7,972 K 2116 Host Process for Windows Services Microsoft Corporation
svchost.exe 3,332 K 7,732 K 5396 Host Process for Windows Services Microsoft Corporation
svchost.exe 3,824 K 7,620 K 2568 Host Process for Windows Services Microsoft Corporation
TrustedInstaller.exe < 0.01 1,708 K 7,608 K 1264 Windows Modules Installer Microsoft Corporation
SecurityHealthService.exe 3,876 K 7,524 K 7556 Windows Security Health Service Microsoft Corporation
msedgewebview2.exe 23,788 K 7,356 K 5992 Microsoft Edge WebView2 Microsoft Corporation
svchost.exe 1,692 K 7,260 K 6916 Host Process for Windows Services Microsoft Corporation
svchost.exe 2,068 K 7,200 K 1456 Host Process for Windows Services Microsoft Corporation
svchost.exe 3,132 K 6,944 K 648 Host Process for Windows Services Microsoft Corporation
svchost.exe 1,980 K 6,792 K 1664 Host Process for Windows Services Microsoft Corporation
svchost.exe 2,528 K 6,768 K 8656 Host Process for Windows Services Microsoft Corporation
SgrmBroker.exe 4,496 K 6,512 K 1640 System Guard Runtime Monitor Broker Service Microsoft Corporation
svchost.exe 2,260 K 6,416 K 1292 Host Process for Windows Services Microsoft Corporation
services.exe 4,752 K 6,380 K 780
SecurityHealthSystray.exe 1,832 K 6,352 K 7536 Windows Security notification icon Microsoft Corporation
RuntimeBroker.exe 3,288 K 6,216 K 6172 Runtime Broker Microsoft Corporation
svchost.exe 2,156 K 5,916 K 2416 Host Process for Windows Services Microsoft Corporation
NisSrv.exe 3,596 K 5,876 K 3236 Microsoft Network Realtime Inspection Service Microsoft Corporation
winlogon.exe 2,392 K 5,812 K 1216
svchost.exe < 0.01 3,316 K 5,780 K 2248 Host Process for Windows Services Microsoft Corporation
SearchHost.exe Suspended 106,812 K 5,756 K 5700 Microsoft Corporation
svchost.exe 1,964 K 5,632 K 2988 Host Process for Windows Services Microsoft Corporation
uhssvc.exe 1,316 K 5,564 K 2996 Microsoft Update Health Service Microsoft Corporation
svchost.exe 2,344 K 5,460 K 3128 Host Process for Windows Services Microsoft Corporation
svchost.exe 2,168 K 5,456 K 6348 Host Process for Windows Services Microsoft Corporation
svchost.exe 1,504 K 5,384 K 3332 Host Process for Windows Services Microsoft Corporation
spoolsv.exe 7,024 K 5,384 K 2844 Spooler SubSystem App Microsoft Corporation
svchost.exe 2,692 K 5,352 K 3572 Host Process for Windows Services Microsoft Corporation
svchost.exe 6,268 K 5,224 K 4400 Host Process for Windows Services Microsoft Corporation
svchost.exe < 0.01 2,664 K 5,128 K 3636 Host Process for Windows Services Microsoft Corporation
svchost.exe 2,356 K 5,120 K 1476 Host Process for Windows Services Microsoft Corporation
svchost.exe 2,076 K 4,964 K 1228 Host Process for Windows Services Microsoft Corporation
svchost.exe 1,756 K 4,808 K 2608 Host Process for Windows Services Microsoft Corporation
svchost.exe 2,096 K 4,676 K 2296 Host Process for Windows Services Microsoft Corporation
svchost.exe 2,584 K 4,400 K 2760 Host Process for Windows Services Microsoft Corporation
svchost.exe 1,972 K 4,348 K 2036 Host Process for Windows Services Microsoft Corporation
winlogon.exe 2,144 K 4,228 K 732
svchost.exe 2,136 K 4,112 K 2240 Host Process for Windows Services Microsoft Corporation
svchost.exe 1,668 K 4,100 K 1820 Host Process for Windows Services Microsoft Corporation
svchost.exe 4,240 K 4,084 K 1392 Host Process for Windows Services Microsoft Corporation
svchost.exe 1,756 K 4,044 K 2260 Host Process for Windows Services Microsoft Corporation
svchost.exe 1,612 K 4,024 K 2044 Host Process for Windows Services Microsoft Corporation
svchost.exe 1,912 K 3,868 K 2464 Host Process for Windows Services Microsoft Corporation
csrss.exe < 0.01 2,012 K 3,640 K 2800
svchost.exe 1,476 K 3,608 K 2268 Host Process for Windows Services Microsoft Corporation
dopusrt.exe 1,592 K 3,608 K 7776 Directory Opus Helper Application GP Software
svchost.exe 1,848 K 3,564 K 3868 Host Process for Windows Services Microsoft Corporation
svchost.exe 1,720 K 3,544 K 1952 Host Process for Windows Services Microsoft Corporation
svchost.exe 1,840 K 3,532 K 1832 Host Process for Windows Services Microsoft Corporation
svchost.exe < 0.01 1,480 K 3,496 K 1308 Host Process for Windows Services Microsoft Corporation
csrss.exe 1,804 K 3,476 K 564
msedgewebview2.exe 1,904 K 3,464 K 7784 Microsoft Edge WebView2 Microsoft Corporation
qemu-ga.exe < 0.01 1,692 K 3,404 K 1876 QEMU machine emulators and tools http://www.qemu-project.org
svchost.exe 1,464 K 3,308 K 1740 Host Process for Windows Services Microsoft Corporation
svchost.exe 1,632 K 3,308 K 2824 Host Process for Windows Services Microsoft Corporation
svchost.exe 1,336 K 3,244 K 5876 Host Process for Windows Services Microsoft Corporation
svchost.exe 1,232 K 3,204 K 1856 Host Process for Windows Services Microsoft Corporation
fontdrvhost.exe 3,604 K 3,176 K 3204
svchost.exe 1,252 K 3,148 K 2028 Host Process for Windows Services Microsoft Corporation
AggregatorHost.exe 984 K 3,124 K 3716
wininit.exe 1,324 K 2,976 K 636
svchost.exe 1,408 K 2,940 K 3484 Host Process for Windows Services Microsoft Corporation
svchost.exe 1,224 K 2,660 K 3084 Host Process for Windows Services Microsoft Corporation
svchost.exe 1,208 K 2,516 K 1300 Host Process for Windows Services Microsoft Corporation
rdpinput.exe 1,396 K 2,496 K 5228
csrss.exe < 0.01 1,688 K 2,464 K 644
fontdrvhost.exe 1,252 K 1,192 K 944
fontdrvhost.exe 1,320 K 1,192 K 952
System < 0.01 40 K 716 K 4
smss.exe 1,080 K 512 K 444
System Idle Process 92.45 56 K 8 K 0
Interrupts < 0.01 0 K 0 K n/a Hardware Interrupts and DPCs

Can someone tell me what's going on?