bootim.exe
boot immersive menus file version info
Program on Windows 7 known copies with hashes
Is it the real bootim.exe?
C:\Windows\system32\7 known copies
10.0.22000.1 (WinBuild.160101.0800) · C:\WINDOWS\system32\bootim.exe · signed by Microsoft Windows
9fa62898e4ce1e77bdf9315b9b6aba8344de0e3b827b5586c83835d1c21165ba10.0.19041.508 (WinBuild.160101.0800) · C:\Windows\system32\bootim.exe · signed by Microsoft Windows
99660e380163afbf4d66341364909f904e9695ba2872b5dc1df575498d2bd34410.0.19041.1 (WinBuild.160101.0800) · C:\Windows\system32\bootim.exe · signed by Microsoft Windows
b495453d533b88387ccb2d8d03b990131161cca2ef30e93e26d1ea267891ed4510.0.18362.1 (WinBuild.160101.0800) · C:\WINDOWS\system32\bootim.exe · signed by Microsoft Windows
e08ed7e2f1b892be0330f536781560aaba8d18938f2222f9eff946bdd7e4cf3510.0.17763.1 (WinBuild.160101.0800) · C:\Windows\system32\bootim.exe · signed by Microsoft Windows
e233391af22be0e39d8d2e3faeece9d424031ce97dfa9ae3a7a453f2e6f5c5cb10.0.14393.0 (rs1_release.160715-1616) · C:\Windows\system32\bootim.exe · signed by Microsoft Windows
4c66a88d7981117ef438ea867dc67445b3706bbb16aafea688ae74db5ddf0d5c6.3.9600.17415 (winblue_r4.141028-1500) · C:\windows\system32\bootim.exe · not signed
b205f7ac445810ad7d8ac8d4b758d6a70bb5f799497eb2cf1684627f8e60fd96From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.