RIVET logoRIVET

Home / Process library / dwm.exe

What is dwm.exe?

dwm.exe is Desktop Window Manager. Composes every window into the image you see on screen, including transparency and animations.

Namedwm.exe
Full nameDesktop Window Manager
PublisherMicrosoft Windows
Normal locationC:\Windows\System32
Safe to end?Keep No. dwm.exe is part of Windows and should keep running.
If you end itThe screen flickers while Windows restarts it; it can't stay stopped.

How to check it's the real dwm.exe

  1. Open Task Manager (Ctrl+Shift+Esc) and go to Details.
  2. Right-click dwm.exe and choose Open file location. It should open C:\Windows\System32.
  3. Right-click the file, choose Properties, then Digital Signatures. The signer should be Microsoft Windows.

A file called dwm.exe somewhere else, or without that signature, is worth scanning with Microsoft Defender.

What RIVET shows

RIVET's process list shows dwm.exe with this explanation, the verdict above, and a signature check, so you can see at a glance whether it is the genuine Windows file. Ending a process can't be undone, and RIVET warns you before it ends anything Windows needs.

Get RIVET freeAll processes and services

Questions

Is dwm.exe a virus?

The genuine dwm.exe is part of Windows, signed by Microsoft Windows, and runs from C:\Windows\System32. Malware sometimes copies the name, so check the location and signature as shown above.

Can I end dwm.exe?

No. dwm.exe is part of Windows and should keep running. The screen flickers while Windows restarts it; it can't stay stopped.

Source: https://learn.microsoft.com/en-us/windows/win32/dwm/dwm-overview

Last updated 29 October 2026