While a program is a static sequence of instructions, a process is a dynamic set of resources to execute a program. It is easy to confuse a program for a process but they’re entirely two different things. The Windows API allows user-written programs to interact with Windows. The program requesting the execution of action does not need to know how the underlying hardware functions or operates. Windows API is generally the set of functions that a coded Windows program utilizes to request execution of actions such as closing a window, opening a new window or displaying a message on a screen amongst many other applications. The Windows Application Program Interface (API) is the user-mode system programming interface to the Windows OS family. In this article, we’ll briefly explore the following building blocks of the Windows operating system Windows Application Interface, process, registry and threads. Windows internals are the inner workings, critical OS data or system architecture of the Windows operating system architecture.

Process monitor malware analysis