win32calc.exe
- File Path:
C:\Windows\system32\win32calc.exe - Description: Windows Calculator
Screenshot
Hashes
| Type | Hash |
|---|---|
| MD5 | B31A19BA38F110838119299B50517073 |
| SHA1 | B832B7A1E333EB4FD88B11422E363F51805F480D |
| SHA256 | D7B378A4BC4DEAE748462D216D14A20CCB1BAC1D3FFBC67711DB2CC1D8B182B7 |
| SHA384 | ADBCE20119C8365508A3FB64DDBF0E6BB177BB93242B480CC0576FC13B09648B30AC40A78689F50DDF9E5F7FF63C575B |
| SHA512 | 499A7F5CBE504DB9C92703AD514E18F24188EC4FD292E28F4BAC242002D84305EFAFF80A0239F028C8C41D0FEA97F1B8E85110CD153163167E3DFBC7E272FE4E |
| SSDEEP | 12288:/jsYXcrgzAAwesoULcW2n4y9gjrGGKDXanoUHeGL7GOK:QXrYAAZsPM4yqGfXanJod |
Signature
- Status: Signature verified.
- Serial:
33000000BCE120FDD27CC8EE930000000000BC - Thumbprint:
E85459B23C232DB3CB94C7A56D47678F58E8E51E - Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
- Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
File Metadata
- Original Filename: WIN32CALC.EXE.MUI
- Product Name: Microsoft Windows Operating System
- Company Name: Microsoft Corporation
- File Version: 10.0.14393.0 (rs1_release.160715-1616)
- Product Version: 10.0.14393.0
- Language: English (United States)
- Legal Copyright: Microsoft Corporation. All rights reserved.
File Similarity (ssdeep match)
| File | Score |
|---|---|
| C:\windows\system32\calc.exe | 32 |
| C:\windows\SysWOW64\calc.exe | 30 |
| C:\Windows\SysWOW64\win32calc.exe | 35 |
Possible Misuse
The following table contains possible examples of win32calc.exe being misused. While win32calc.exe is not inherently malicious, its legitimate functionality can be abused for malicious purposes.
| Source | Source File | Example | License |
|---|---|---|---|
| atomic-red-team | T1574.011.md | | weak_service_path | weak service path | String | %windir%\system32\win32calc.exe| | MIT License. © 2018 Red Canary |
MIT License. Copyright (c) 2020-2021 Strontic.