Solved Confirmation that my "hpatchmontask.cmd" in System32 is genuine


tenuser1967

Member
Local time
1:46 AM
Posts
14
OS
Windows 11
I fresh installed Windows 11 25H2 and performed a Windows Update this morning.

Immediately, I noticed Kaspersky showing c:\windows\system32\hpatchmontask.cmd as a genuine file in application management. It seems this file is related to Hot Patching, updates without restart.

Problem is that I asked a couple of friends and they both told me that they don't have this file in their <system32> folder albeit one of them is still on 23H2 with hot patching starting with 24H2.

Can anyone please confirm these files should exist in the <system32> folder:

hpatchmon.dll (152,960 bytes)
hpatchmonTask.cmd (6,795 bytes)

They are both digitally signed by Microsoft.

Thanks!
 

My Computer

System One

  • OS
    Windows 11
Did you upgrade to Windows 11 Enterprise 25H2?
 

My Computers

System One System Two

  • OS
    Windows 11 Pro 25H2 Build 26200.8524
    Computer type
    PC/Desktop
    Manufacturer/Model
    Sin-built 2013
    CPU
    Intel(R) Core(TM) i7-4770K CPU @ 3.50GHz
    Motherboard
    ASUS ROG Maximus VI Formula
    Memory
    32.0 GB of I forget and the box is in storage.
    Graphics Card(s)
    Gigabyte nVidia GeForce GTX 1660 Super OC 6GB
    Sound Card
    Onboard thingy
    Monitor(s) Displays
    5 x LG 25MS500-B - 1 x 24MK430H-B - 1 x Wacom Pro 22" Touch Screen Tablet
    Screen Resolution
    All over the place
    Hard Drives
    Too many to list.
    OS on Samsung 1TB 870 QVO SATA
    PSU
    Silverstone 1500
    Case
    NZXT Phantom 820 Full-Tower Case
    Cooling
    Noctua NH-D15 Elite Class Dual Tower CPU Cooler / 6 x EziDIY 120mm / 2 x Corsair 140mm somethings / 1 x 140mm Thermaltake something / 2 x 200mm Corsair.
    Keyboard
    Corsair K95 / Logitech diNovo Edge Wireless
    Mouse
    Logitech: G402 / G502 / Mx Masters / Mx Air Cordless
    Internet Speed
    2000/500Mbps
    Browser
    All sorts
    Antivirus
    Kaspersky Premium
    Other Info
    ㅤㅤㅤㅤㅤㅤㅤㅤㅤㅤㅤㅤㅤㅤㅤㅤㅤㅤㅤㅤㅤㅤㅤㅤㅤㅤㅤㅤㅤㅤㅤㅤㅤㅤㅤㅤㅤㅤㅤㅤ⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀
    TP-Link BE9300 WiFi 7 Bluetooth 5.4 (Archer TBE550E)
    TP-Link TX201 V1 2.5GB Lan

    Grandstream HT812 - VoIP
    ASUS DSL-AX82U - Mesh
    ASUS RT-AC68U - Mesh
    ASUS RT-BE88U Router

    Brother MFC-L2880DW Printer

    I’m on a horse.
  • Operating System
    Windows 11 Pro 25H2 Build 26200.8524
    Computer type
    Laptop
    Manufacturer/Model
    LENOVO Yoga 7 14IRL8 - 7i EVO OLED 14" Touchscreen i5 12 Core 16GB/512GB
    CPU
    Intel Core 12th Gen i5-1240P Processor (1.7 - 4.4GHz)
    Memory
    16GB LPDDR5 RAM
    Graphics card(s)
    Intel Iris Xe Graphics Processor
    Sound Card
    Optimized with Dolby Atmos®
    Screen Resolution
    QHD 2880 x 1800 OLED
    Hard Drives
    M.2 512GB
    Antivirus
    Defender / Malwarebytes
    Other Info
    …still on a horse.
They are in my system32 folder on two 25H2 computers [that have never been networked together].
They are digitally signed by MS.
I've no reason to think they are not genuine.


should exist
Haven't a clue, I do not work for MS.


All the best,
Denis
 

My Computer

System One

  • OS
    Windows 11 Home x64 Version 25H2 Build 26200.8037
They are in my system32 folder on two 25H2 computers [that have never been networked together].
They are digitally signed by MS.
I've no reason to think they are not genuine.

Perfect, thanks!
 

My Computer

System One

  • OS
    Windows 11
For every Monthly Update, MS provides an unique CSV file listing all the new or changed files included in that update.

https://go.microsoft.com/fwlink/?linkid=2334929
"hpatchmon.dll","10.0.26100.5074","05-Sep-2025","20:09","138,648"
"hpatchmonTask.cmd","Not versioned","05-Sep-2025","20:09","6,795"
"hpatchmon.dll","10.0.26100.5074","05-Sep-2025","20:32","152,960"
"hpatchmonTask.cmd","Not versioned","05-Sep-2025","20:32","6,795"
 

My Computer

System One

  • OS
    Windows 7
For every Monthly Update, MS provides an unique CSV file listing all the new or changed files included in that update.

That's very helpful, thanks.

How do I get these CSV files, a search for "hpatchmonTask.cmd" site:microsoft.com returns just a bunch of links in Chinese.
 

My Computer

System One

  • OS
    Windows 11
How do I get these CSV files
ElevenForum News page always has an article for every Cumulative update and it includes a link to the MS article about the CU.
It is the MS article that has the list of files.

But there is no equivalent [that I have found] for new Windows Versions or ISO files.


Denis
 

My Computer

System One

  • OS
    Windows 11 Home x64 Version 25H2 Build 26200.8037
Every W10 & 11 release gets its own Update History page, which lists the Monthly Updates in reverse order (newest updates at the top).

You can bookmark these links:
Windows 11, version 25H2 update history
Windows 11, version 24H2 update history

If you select a specific KB update from the left margin (right now 25H2 only has Sep. 2025), you get that month's KB information. Scroll all the way down the page and you'll find a section:

File information

For a list of the files provided in this update, download the file information for cumulative update 5065789.

Download the CSV, and use the findstr command to search for a filename:
Code:
> findstr /i hpatch 5065789.csv
"hpatchmon.dll","10.0.26100.6725","27-Sep-2025","04:30","141,200"
"hpatchmonTask.cmd","Not versioned","27-Sep-2025","04:30","7,210"
"hpatchmon.dll","10.0.26100.6725","27-Sep-2025","04:40","152,960"
"hpatchmonTask.cmd","Not versioned","27-Sep-2025","04:40","7,210"

Obviously it doesn't inform you where the file lives, but it reports what's the last version of the file, it's release date, and file size.
 

My Computer

System One

  • OS
    Windows 7
Back
Top Bottom