mhyprot3.sys
HoYoverse anti-cheat driver (v3)
mhyprot3.sys is a newer build of the HoYoverse anti-cheat kernel driver, successor to the mhyprot2.sysDrivermhyprot2.sysGenshin Impact anti-cheat kernel driverOpen plate → driver that shipped with Genshin Impact. Same vendor, same purpose: kernel-level anti-cheat that registers at install time and persists.
HoYoverse's own package lists show Genshin ImpactGameGenshin ImpactOpen plate → shipped it from version 2.5 in 2022 and dropped it with version 4.1 in September 2023, when HoYoKProtect.sys became the game's only anti-cheat driver. No current HoYoverse game ships it, so if you find it registered, it is most likely left over from an older install. Microsoft's Vulnerable Driver Blocklist carries rules for some builds of it, but as of October 2026 not for the last one Genshin shipped, in versions 3.1 to 4.0.1, so remove the service rather than counting on the blocklist.
Corrected 2026-10-20: this note used to say that if you play Genshin Impact or other HoYoverse titles, this driver is expected. That stopped being true with Genshin's version 4.1 in September 2023.
mhyprot3.sys is listed as a known-vulnerable driver on the public LOLDrivers project. One distinct binary hash matching this filename is on record.
Status data comes from the public LOLDrivers project, a community-curated registry of drivers known to be vulnerable or malicious. The snapshot Vera uses was refreshed October 25, 2026. CVE links go to the NIST National Vulnerability Database.
Vera Project. “mhyprot3.sys.” Vera Field Guide (Driver). The Vera Project. https://www.veraproject.xyz/field-guide/drivers/mhyprot3-sys
