home

wpctrl.exe

Pivot Sofware

Portrait Displays, Inc.

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘PivotSoftware’. This is installed with DisplayView Pivot.
Publisher:
Portrait Displays, Inc.  (signed and verified)

Product:
Pivot Sofware

Description:
Pivot Software Support Application

Version:
7.70

MD5:
41a26040200b58803371e766175c8852

SHA-1:
4726d9b66d6e2c5e131b0b549fbc78eb13b2c914

SHA-256:
29ffca18d2e414779ffd1e5f3d1130a5b00fbdc820db0a6798baedc1017732f9

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/26/2024 6:33:18 PM UTC  (today)

File size:
858.6 KB (879,216 bytes)

Product version:
7.70

Copyright:
Copyright (C) 1993-2005 Portrait Displays, Inc.

Trademarks:
Pivot(R), Pivot Software(R), and Pivot Enabled(R) Are registered trademarks of Portrait Displays, Inc.

Original file name:
wpctrl.exe

File type:
Executable application (Win32 EXE)

Common path:
C:\Program Files\portrait displays\displayview pivot\wpctrl.exe

Digital Signature
Signed by:
Portrait Displays, Inc.

Authority:
VeriSign, Inc.

Valid from:
5/3/2010 2:00:00 AM

Valid to:
6/17/2011 1:59:59 AM

Subject:
CN="Portrait Displays, Inc.", OU=Engineering, OU=Digital ID Class 3 - Microsoft Software Validation v2, O="Portrait Displays, Inc.", L=Pleasanton, S=California, C=US

Issuer:
CN=VeriSign Class 3 Code Signing 2009-2 CA, OU=Terms of use at https://www.verisign.com/rpa (c)09, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
00B979BE18EE44336FA1E32B6A4E5502

File PE Metadata
Compilation timestamp:
11/15/2010 7:51:06 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
7.0

CTPH (ssdeep):
6144:DXsXLidmYftmng30HfzFqTaz/ALrBeary3DBBX:DiLXu4HRin/rsDBBX

Entry address:
0x32A19

Entry point:
6A, 70, 68, 00, E9, 43, 00, E8, 77, 03, 00, 00, 33, DB, 53, 8B, 3D, BC, 41, 43, 00, FF, D7, 66, 81, 38, 4D, 5A, 75, 1F, 8B, 48, 3C, 03, C8, 81, 39, 50, 45, 00, 00, 75, 12, 0F, B7, 41, 18, 3D, 0B, 01, 00, 00, 74, 1F, 3D, 0B, 02, 00, 00, 74, 05, 89, 5D, E4, EB, 27, 83, B9, 84, 00, 00, 00, 0E, 76, F2, 33, C0, 39, 99, F8, 00, 00, 00, EB, 0E, 83, 79, 74, 0E, 76, E2, 33, C0, 39, 99, E8, 00, 00, 00, 0F, 95, C0, 89, 45, E4, 89, 5D, FC, 6A, 02, FF, 15, F8, 46, 43, 00, 59, 83, 0D, 80, F0, 44, 00, FF, 83, 0D, 84, F0...
 
[+]

Entropy:
4.8468

Developed / compiled with:
Microsoft Visual C++ v7.1

Code size:
204 KB (208,896 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
PivotSoftware

Command:
"C:\Program Files\portrait displays\displayview pivot\wpctrl.exe"


The file wpctrl.exe has been discovered within the following program.

DisplayView Pivot  by Portrait Displays, Inc.
www.portrait.com
About 1% of users remove it
 
Powered by Should I Remove It?

Scan wpctrl.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.