Hi
I've been seeing an error regarding a service mst attempting to load a file mst.sys from the %windir%\temp location. This fails as Microsoft blocks it as incompatible.
The service name reported doesn't exist as a service - I cannot find a service by the name mst, and no reference to the mst.sys file in any registry space. It is, quite frankly, very dodgy in appearance. Virus total however don't report any product detecting it as malware.
I've come here to ask about it as the mst.sys file is signed my Mellanox Ltd.
I'd like to know if it is legitimately your file, and if so how its being loaded, why its using a temp folder and how to stop it. The server with the issue does not have any Mellanox hardware installed.
The files SHA256 is 8b9e2791e8e2312ff75c57a512f628c61632667b990543b824f3932945177
Thanks