There are several ways to tell if a process is legitimate or not. You can use Process Explorer, check the digital certificate, or run the process file through VirusTotal. I've shown you how to do all those three things above; follow them.