win32calc.exe

  • File Path: C:\Windows\system32\win32calc.exe
  • Description: Windows Calculator

Screenshot

win32calc.exe

Hashes

Type Hash
MD5 B31A19BA38F110838119299B50517073
SHA1 B832B7A1E333EB4FD88B11422E363F51805F480D
SHA256 D7B378A4BC4DEAE748462D216D14A20CCB1BAC1D3FFBC67711DB2CC1D8B182B7
SHA384 ADBCE20119C8365508A3FB64DDBF0E6BB177BB93242B480CC0576FC13B09648B30AC40A78689F50DDF9E5F7FF63C575B
SHA512 499A7F5CBE504DB9C92703AD514E18F24188EC4FD292E28F4BAC242002D84305EFAFF80A0239F028C8C41D0FEA97F1B8E85110CD153163167E3DFBC7E272FE4E
SSDEEP 12288:/jsYXcrgzAAwesoULcW2n4y9gjrGGKDXanoUHeGL7GOK:QXrYAAZsPM4yqGfXanJod

Signature

  • Status: Signature verified.
  • Serial: 33000000BCE120FDD27CC8EE930000000000BC
  • Thumbprint: E85459B23C232DB3CB94C7A56D47678F58E8E51E
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: WIN32CALC.EXE.MUI
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.14393.0 (rs1_release.160715-1616)
  • Product Version: 10.0.14393.0
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.

File Similarity (ssdeep match)

File Score
C:\windows\system32\calc.exe 32
C:\windows\SysWOW64\calc.exe 30
C:\Windows\SysWOW64\win32calc.exe 35

Possible Misuse

The following table contains possible examples of win32calc.exe being misused. While win32calc.exe is not inherently malicious, its legitimate functionality can be abused for malicious purposes.

Source Source File Example License
atomic-red-team T1574.011.md | weak_service_path | weak service path | String | %windir%\system32\win32calc.exe| MIT License. © 2018 Red Canary

MIT License. Copyright (c) 2020-2021 Strontic.