Skip to content

Guide

What is a Windows process

Windows and apps both show up as processes. The filename is a clue. The path and publisher are better evidence. A service is a different contract that often lives inside a process such as svchost.exe.

Feex says
I do not call a process malware because the name looks weird. I ask who signed it and where it lives.

What a process is

A process is a running instance of a program. It has an executable name, a process ID, and a memory space. Task Manager lists those instances. Ending a process stops that instance. It does not uninstall the app.

Windows vs an app you installed

explorer.exe, dwm.exe, and csrss.exe belong to Windows. chrome.exe and Discord.exe belong to apps. The publisher and the folder tell you which is which. Feex Wiki splits those into Windows and application families.

Why there are many copies

Browsers split tabs. Windows splits Service Host groups. COM Surrogate starts extra hosts for previews. Many copies are a design, not a count of infections.

Safety without panic

The filename alone is not proof of safety. A legitimate name in the wrong folder is the case that deserves a closer look. Do not delete System32 files because a list ranked them suspicious.

Sources

Reviewed August 2026 · Feex Reviewed How we research.

Was this guide useful?

A yes or no is enough. Pick a reason if you want, or add a short note.

Was this guide useful?