ok, No rastreio eu posso ver que a função ntoskrnl.exe!SmKmStoreHelperWorker
do Kernel começa a alocar memória.
Eudescobriissonasemanapassadaem sysinternals .
Eu perguntei à Microsoft sobre isso e a resposta é que isso ocorre por design. Está relacionado à compactação de memória do sistema.
Em o anúncio do Windows 10 Build 10525 , A Microsoft explicou um pouco :
In Windows 10, we have added a new concept in the Memory Manager
called a compression store, which is an in-memory collection of
compressed pages. This means that when Memory Manager feels memory
pressure, it will compress unused pages instead of writing them to
disk. This reduces the amount of memory used per process, allowing
Windows 10 to maintain more applications in physical memory at a time.
This also helps provide better responsiveness across Windows 10. The
compression store lives in the System process’s working set. Since the
system process holds the store in memory, its working set grows larger
exactly when memory is being made available for other processes. This
is visible in Task Manager and the reason the System process appears
to be consuming more memory than previous releases.
Então, em vez de gravar dados de memória no arquivo de paginação, eles são compactados. E essa memória compactada é mostrada no processo do sistema.