← All drivers
vulnerable
Driver

mhyprot3.sys

HoYoverse anti-cheat driver (v3)

From miHoYo / HoYoverse
Part of the miHoYo family
Status
On a known-vulnerable list
Known variants
1 distinct hashes
Field notes

mhyprot3.sys is a newer build of the HoYoverse anti-cheat kernel driver, successor to the mhyprot2.sysDrivermhyprot2.sysGenshin Impact anti-cheat kernel driverOpen plate → driver that shipped with Genshin Impact. Same vendor, same purpose: kernel-level anti-cheat that registers at install time and persists.

HoYoverse's own package lists show Genshin ImpactGameGenshin ImpactOpen plate → shipped it from version 2.5 in 2022 and dropped it with version 4.1 in September 2023, when HoYoKProtect.sys became the game's only anti-cheat driver. No current HoYoverse game ships it, so if you find it registered, it is most likely left over from an older install. Microsoft's Vulnerable Driver Blocklist carries rules for some builds of it, but as of October 2026 not for the last one Genshin shipped, in versions 3.1 to 4.0.1, so remove the service rather than counting on the blocklist.

Corrected 2026-10-20: this note used to say that if you play Genshin Impact or other HoYoverse titles, this driver is expected. That stopped being true with Genshin's version 4.1 in September 2023.

What the record shows

mhyprot3.sys is listed as a known-vulnerable driver on the public LOLDrivers project. One distinct binary hash matching this filename is on record.

What this means, plainly
Presence is not proof of misuse. Driver files on the LOLDrivers list commonly ship with legitimate hardware tools, gaming software, or vendor utilities. Their presence is recorded as evidence on a record. It is never treated as a verdict about a person.
Related drivers

Other drivers in the miHoYo family. See the whole family →

Source

Status data comes from the public LOLDrivers project, a community-curated registry of drivers known to be vulnerable or malicious. The snapshot Vera uses was refreshed October 25, 2026. CVE links go to the NIST National Vulnerability Database.

Cite this entry

Vera Project. “mhyprot3.sys.” Vera Field Guide (Driver). The Vera Project. https://www.veraproject.xyz/field-guide/drivers/mhyprot3-sys