AlcorMP.exe is the primary executable for the Alcor Micro Mass Production Tool (often referred to as MPTool), a powerful low-level utility designed to manage, repair, and configure USB flash drives built with Alcor Micro controllers.
| Legitimate | Suspicious/Malicious |
|----------------|----------------------------|
| Digitally signed by Alcor Micro, Corp. | Unsigned or invalid signature |
| Located only in System32 or Alcor program folder | Located in Temp, AppData, Downloads, or USB root |
| Present only when actual Alcor card reader hardware is connected | Present on system without any Alcor hardware |
| Low CPU/memory usage | High resource use or erratic process behavior |
| No network activity | Attempts outbound connections | alcormp.exe
VirusTotal Scan:
Descriptor Configuration: Allows users to change the Vendor ID (VID), Product ID (PID), and product names. Technical Review & User Experience Assessment Interface AlcorMP