UevAppMonitor.exe
Program on Windows 5 known copies with hashes
Is it the real UevAppMonitor.exe?
C:\Windows\system32\5 known copies
10.0.19041.1 · C:\Windows\system32\UevAppMonitor.exe · signed by Microsoft Windows
0be7f413037a2192e3361954867b09de0568ff53a938f73dd8ba1bdce05c700210.0.18362.449 · C:\WINDOWS\system32\UevAppMonitor.exe · signed by Microsoft Windows
76f00ab1ca61ec3d3c2b8abdd379be51c9d6a62d0a2be0cc19b1ed2e8089fc9510.0.17763.348 · C:\Windows\system32\UevAppMonitor.exe · signed by Microsoft Windows
07ba56aca60f76dd7ff7261c25a653a5f1e55cce9d30842f8169c364923dc16510.0.14393.2828 · C:\Windows\system32\UevAppMonitor.exe · signed by Microsoft Windows
c8f1e02c5c176e84655826c3a435dc3202e45df53f7a2138b20b392a4c3c10e50.0.0.0 · C:\WINDOWS\system32\UevAppMonitor.exe · signed by Microsoft Windows
e38a989ebde559a7c4170b8e649898a0f588889b6d64495efadee40ca7b7ef34From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.