All modern versions of Windows will have Microsoft's Defender antivirus/malware protection turned on by default. That means you incur a penalty every time a file is accessed from disk, or a process is launched, or a library loaded, or sockets are used or certain APIs are called.
It's better than most 3rd party AV software but it's still a performance overhead that could be turned off.