Forensic

HI everybody. i have a problem. I dont know what process is malware ? when i use volatility i show all process and all dll list, but i dont know how to know it’s a malware process. and how check md5 of thi path of malware ?