umamusume64_2.sys

umamusume64_2.sys is the kernel anti-cheat driver shipped with Cygames' Uma Musume Pretty Derby, a Japanese gacha title that launched on PC and Steam in 2025 after years as a major mobile hit. It is signed by DNP Hypertech (株式会社ＤＮＰハイパーテック) and co-signed by Microsoft's Hardware Compatibility Publisher, and it is part of Hypertech's CrackProof anti-cheat product line that has been embedded in several Japanese game titles over the years.

Nextron Research flagged the driver on the LOLDrivers list in May 2026. The notable trait is that it loads despite HVCI (Hypervisor-protected Code Integrity), which is what makes it interesting to attackers practicing BYOVD. The MITRE ATT&CK catalog tracks the abuse pattern under T1562.001 (Impair Defenses).

If you have Uma Musume Pretty Derby installed and current, the driver is expected. If you have it without ever having played the game, treat the presence as worth investigating, and remove the kernel service when you uninstall the game.

umamusume64_2.sys is listed as a known-vulnerable driver on the public LOLDrivers project. One distinct binary hash matching this filename is on record.