← Back to driver explorer
Driver intelligenceVulnerableVerified
mst.sys
mst.sys is a vulnerable kernel driver from the KeServiceDescriptorTable/vulnerable-drivers repository. The driver exposes dangerous kernel primitives to usermode.
Known samples 1
0 recorded TRUE · 1 recorded FALSE · 0 unknown for loading despite HVCI. Results apply to individual samples.
mst.sysSample 1 · HVCI FALSE
- MD5
84c230b35f5c8e2a075362277c513a94- SHA1
001136fe2a17280190a7adcf95586ebcffa4aac2- SHA256
bf8d3377fc0834828afcc94165172333b2e1b58fb37d45be91a07d8d2e54d431- Imphash
4662aae0e89f6e51d339e12af74eb4df- Authentihash MD5
3c15644a60cc2fd398a514bb60995226- Authentihash SHA1
2eb67b65e70b3de842b0c6b487a83481cbe5624d- Authentihash SHA256
1822e496ba402b26d4a736d4626334752d0be76b4a68cc2e799e7a9db4a69515- Machine
- AMD64
- Version
- 0.1.0.0
- Publisher
- Mellanox Technologies Ltd.
Recorded command
sc.exe create mst binPath=C:\windows\temp\mst.sys type=kernel && sc.exe start mstElevate privileges · Privileges: kernel · OS: Windows 10
Research & references
Acknowledgement: @rainbowdynamix, @DbgPrint