win32calc.exe
- File Path:
C:\Windows\SysWOW64\win32calc.exe - Description: Windows Calculator
Screenshot
Hashes
| Type | Hash |
|---|---|
| MD5 | A20DCDBED017776C8B3D01A511A8DC46 |
| SHA1 | 6B0A99D565E86A37A980A95028CB2E6FE6036734 |
| SHA256 | 84173F0B3176F68428A88A6870AF6236F28FAEE117074FB36A0BCCCFB55EB301 |
| SHA384 | 4644FC3C093ABE8C59451D7DF20F03BC810943058C6567C8E7CB28FEAC006EAF6D00733ED0644A0AC36278D239D0366B |
| SHA512 | 2BD614B30D4ABBA2766A268FC5C55B9DB8E51E404E27FDD8A97CB6BFADAFA91BCB3679FA3590342728870D3ECAD99D7C881B2843A45C9F4795800ED5C0F9D221 |
| SSDEEP | 12288:wKpPPLacOEIIC9dfbHnD4UYhJLx3HeGL7GOK1d:BpIr9FbHnD4HZxXod |
Signature
- Status: Signature verified.
- Serial:
33000000BCE120FDD27CC8EE930000000000BC - Thumbprint:
E85459B23C232DB3CB94C7A56D47678F58E8E51E - Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
- Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
File Metadata
- Original Filename: WIN32CALC.EXE.MUI
- Product Name: Microsoft Windows Operating System
- Company Name: Microsoft Corporation
- File Version: 10.0.14393.0 (rs1_release.160715-1616)
- Product Version: 10.0.14393.0
- Language: English (United States)
- Legal Copyright: Microsoft Corporation. All rights reserved.
File Similarity (ssdeep match)
| File | Score |
|---|---|
| C:\windows\system32\calc.exe | 35 |
| C:\Windows\system32\win32calc.exe | 35 |
| C:\windows\SysWOW64\calc.exe | 33 |
Possible Misuse
The following table contains possible examples of win32calc.exe being misused. While win32calc.exe is not inherently malicious, its legitimate functionality can be abused for malicious purposes.
| Source | Source File | Example | License |
|---|---|---|---|
| atomic-red-team | T1574.011.md | | weak_service_path | weak service path | String | %windir%\system32\win32calc.exe| | MIT License. © 2018 Red Canary |
MIT License. Copyright (c) 2020-2021 Strontic.