Solved Confirmation that my "hpatchmontask.cmd" in System32 is genuine


tenuser1967

Member
Local time
8:40 AM
Posts
14
OS
Windows 11
I fresh installed Windows 11 25H2 and performed a Windows Update this morning.

Immediately, I noticed Kaspersky showing c:\windows\system32\hpatchmontask.cmd as a genuine file in application management. It seems this file is related to Hot Patching, updates without restart.

Problem is that I asked a couple of friends and they both told me that they don't have this file in their <system32> folder albeit one of them is still on 23H2 with hot patching starting with 24H2.

Can anyone please confirm these files should exist in the <system32> folder:

hpatchmon.dll (152,960 bytes)
hpatchmonTask.cmd (6,795 bytes)

They are both digitally signed by Microsoft.

Thanks!
 

My Computer My Computer

At a glance

Windows 11
OS
Windows 11
Did you upgrade to Windows 11 Enterprise 25H2?
 

My Computers My Computers

  • At a glance

    Windows 11 Pro 25H2 Build 26200.9168Intel(R) Core(TM) i7-4770K CPU @ 3.50GHz32.0 GB of I forget and the box is in storage.Gigabyte nVidia GeForce GTX 1660 Super OC 6GB
    OS
    Windows 11 Pro 25H2 Build 26200.9168
    Computer type
    PC/Desktop
    Manufacturer/Model
    Sin-built 2013
    CPU
    Intel(R) Core(TM) i7-4770K CPU @ 3.50GHz
    Motherboard
    ASUS ROG Maximus VI Formula
    Memory
    32.0 GB of I forget and the box is in storage.
    Graphics Card(s)
    Gigabyte nVidia GeForce GTX 1660 Super OC 6GB
    Sound Card
    ROG SupremeFX Formula 8-Channel High Definition Audio
    Monitor(s) Displays
    5 x LG 25MS500-B - 1 x 24MK430H-B - 1 x Wacom Pro 22" Touch Screen Tablet
    Screen Resolution
    All over the place
    Hard Drives
    Too many to list. OS on Samsung 1TB 870 QVO SATA
    PSU
    Silverstone 1500
    Case
    NZXT Phantom 820 Full-Tower Case
    Cooling
    Noctua NH-D15 Elite Class Dual Tower CPU Cooler / 6 x EziDIY 120mm / 2 x Corsair 140mm somethings / 1 x 140mm Thermaltake something / 2 x 200mm Corsair.
    Keyboard
    Corsair K95 / Logitech diNovo Edge Wireless
    Mouse
    Logitech: G402 / G502 / Mx Masters / Mx Air Cordless
    Internet Speed
    2000/500Mbps
    Browser
    All sorts
    Antivirus
    Kaspersky Premium
    Other Info
    ㅤㅤㅤㅤㅤㅤㅤㅤㅤㅤㅤㅤㅤㅤㅤㅤㅤㅤㅤㅤㅤㅤㅤㅤㅤㅤㅤㅤㅤㅤㅤㅤㅤㅤㅤㅤㅤㅤㅤㅤ⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀
    TP-Link BE9300 WiFi 7 Bluetooth 5.4 (Archer TBE550E)
    TP-Link TX201 V1 2.5GB Lan

    Grandstream HT812 - VoIP
    ASUS DSL-AX82U - Mesh
    ASUS RT-AC68U - Mesh
    ASUS RT-BE88U Router

    Brother MFC-L2880DW Printer

    I’m on a horse.
  • At a glance

    Windows 11 Pro 25H2 Build 26200.9168 (Wifes)13th Generation Intel® Core™ i5-1340P Process...16GB LPDDR5-52001x Intel® Iris® Xe Graphics
    Operating System
    Windows 11 Pro 25H2 Build 26200.9168 (Wifes)
    Computer type
    Laptop
    Manufacturer/Model
    LENOVO Yoga 7 14IRL8 - Type 82YL
    CPU
    13th Generation Intel® Core™ i5-1340P Processor(Core™ i5-1340P)
    Memory
    16GB LPDDR5-5200
    Graphics card(s)
    1x Intel® Iris® Xe Graphics
    Sound Card
    Optimized with Dolby Atmos®
    Screen Resolution
    QHD 2880 x 1800 OLED
    Hard Drives
    M.2 512 GB SSD PCIe
    Mouse
    Logiteck MX Master 3S
    Internet Speed
    2000/500
    Antivirus
    Defender / Malwarebytes
    Other Info
    …still on a horse.


    Wireless Network: Wi-Fi 6E 2x2 AX; Bluetooth® 5.1 or above
    Ports: 1x 1 Novo button; 2 in 1 Audio Combo jack; Micro SD Card Reader; HDMI 1.4b; 2 x USB Type-C (TBT4)
    USB 3.2 Gen 2 DP 1.4a
    PD 3.0); 1 x USB 3.2 Gen1 Type A
    Camera
    1x 1080P FHD IR/RGB Hybrid with Privacy Shutter and Dual Array Microphone
    Graphics
    1x Intel® Iris® Xe Graphics
    Monitor
    14" WUXGA
    Form Factor
    Convertible Notebook
  • Windows 11 Pro 25H2 Build 26200.9168 (Wifes)

    Yoga 7 2-in-1 14IML9 - Type 83DJ

    Processor: Intel® Core™ Ultra 7 155H Processor(Core™ Ultra 7 155H)

    Memory: 32GB LPD5X-7467

    Hard Drive: 1 TB SSD PCIe

    Wireless Network: 1x Wi-Fi 6E 2x2 AX; Bluetooth® 5.1 or above

    Ports: 1 x HDMI 2.1 TMDS; 1 x Novo Button; 1 x Combo Audio Jack
    2 x USB-C (USB 4.0)
    1 x USB-A 3.2 Gen 1

    Camera: 1080P FHD IR Hybrid with Dual Microphone

    Graphics: Intel® Arc™ Graphics

    Monitor: 14" 2.8K

    ...Where's my horse?
They are in my system32 folder on two 25H2 computers [that have never been networked together].
They are digitally signed by MS.
I've no reason to think they are not genuine.


should exist
Haven't a clue, I do not work for MS.


All the best,
Denis
 

My Computer My Computer

At a glance

Windows 11 Home x64 Version 25H2 Build 26200....
OS
Windows 11 Home x64 Version 25H2 Build 26200.9168
They are in my system32 folder on two 25H2 computers [that have never been networked together].
They are digitally signed by MS.
I've no reason to think they are not genuine.

Perfect, thanks!
 

My Computer My Computer

At a glance

Windows 11
OS
Windows 11
For every Monthly Update, MS provides an unique CSV file listing all the new or changed files included in that update.

https://go.microsoft.com/fwlink/?linkid=2334929
"hpatchmon.dll","10.0.26100.5074","05-Sep-2025","20:09","138,648"
"hpatchmonTask.cmd","Not versioned","05-Sep-2025","20:09","6,795"
"hpatchmon.dll","10.0.26100.5074","05-Sep-2025","20:32","152,960"
"hpatchmonTask.cmd","Not versioned","05-Sep-2025","20:32","6,795"
 

My Computer My Computer

At a glance

Windows 7
OS
Windows 7
For every Monthly Update, MS provides an unique CSV file listing all the new or changed files included in that update.

That's very helpful, thanks.

How do I get these CSV files, a search for "hpatchmonTask.cmd" site:microsoft.com returns just a bunch of links in Chinese.
 

My Computer My Computer

At a glance

Windows 11
OS
Windows 11
How do I get these CSV files
ElevenForum News page always has an article for every Cumulative update and it includes a link to the MS article about the CU.
It is the MS article that has the list of files.

But there is no equivalent [that I have found] for new Windows Versions or ISO files.


Denis
 

My Computer My Computer

At a glance

Windows 11 Home x64 Version 25H2 Build 26200....
OS
Windows 11 Home x64 Version 25H2 Build 26200.9168
Every W10 & 11 release gets its own Update History page, which lists the Monthly Updates in reverse order (newest updates at the top).

You can bookmark these links:
Windows 11, version 25H2 update history
Windows 11, version 24H2 update history

If you select a specific KB update from the left margin (right now 25H2 only has Sep. 2025), you get that month's KB information. Scroll all the way down the page and you'll find a section:

File information

For a list of the files provided in this update, download the file information for cumulative update 5065789.

Download the CSV, and use the findstr command to search for a filename:
Code:
> findstr /i hpatch 5065789.csv
"hpatchmon.dll","10.0.26100.6725","27-Sep-2025","04:30","141,200"
"hpatchmonTask.cmd","Not versioned","27-Sep-2025","04:30","7,210"
"hpatchmon.dll","10.0.26100.6725","27-Sep-2025","04:40","152,960"
"hpatchmonTask.cmd","Not versioned","27-Sep-2025","04:40","7,210"

Obviously it doesn't inform you where the file lives, but it reports what's the last version of the file, it's release date, and file size.
 

My Computer My Computer

At a glance

Windows 7
OS
Windows 7

Latest Support Threads

Back
Top Bottom