Question: How do i gets this ESD's

You need to login to view this posts content.

 

You need to login to view this posts content.

 

I did try but to no avail by

tracefmt.exe -o windowsupate.log Windowsupdate.39765.1.etl Windowsupdate.39765.1.etl -r e:\Symbols

Any hint would be appreciated.

 

You need to login to view this posts content.

 

For Windows 7/8.1, the latest Windows10InsiderPreview.exe and reboot is a must for ESDs from Slow Ring.

And the permanent address will be located at C:\Windows\WindowsUpdate.log shortly after the ESD download started.

 

You need to login to view this posts content.

 

Can you please gently show a part of the WindowsUpdate.log that contains the link via PM, mate?

Would like to adapt my WU TOOL to parse those comfortably.

 

Code:

Windows PowerShell
Copyright (C) 2015 Microsoft Corporation. All rights reserved.

PS C:\WINDOWS\system32> Get-WindowsUpdateLog

Converting C:\WINDOWS\logs\WindowsUpdate into C:\Users\burp\Desktop\WindowsUpdate.log ...


    Directory: C:\Users\burp\AppData\Local\Temp\WindowsUpdateLog


Mode                LastWriteTime         Length Name
----                -------------         ------ ----
d-----        7/22/2015   8:15 AM                SymCache

Input
----------------
File(s):
     C:\WINDOWS\logs\WindowsUpdate\WindowsUpdate.20150717.195954.699.1.etl
     C:\WINDOWS\logs\WindowsUpdate\WindowsUpdate.20150717.210839.638.1.etl
     C:\WINDOWS\logs\WindowsUpdate\WindowsUpdate.20150717.213412.831.1.etl
     C:\WINDOWS\logs\WindowsUpdate\WindowsUpdate.20150717.222338.521.1.etl
     C:\WINDOWS\logs\WindowsUpdate\WindowsUpdate.20150717.224146.773.1.etl
     C:\WINDOWS\logs\WindowsUpdate\WindowsUpdate.20150717.230840.600.1.etl
     C:\WINDOWS\logs\WindowsUpdate\WindowsUpdate.20150717.232338.757.1.etl
     C:\WINDOWS\logs\WindowsUpdate\WindowsUpdate.20150717.233631.023.1.etl
     C:\WINDOWS\logs\WindowsUpdate\WindowsUpdate.20150718.084115.172.1.etl
     C:\WINDOWS\logs\WindowsUpdate\WindowsUpdate.20150718.085425.531.1.etl

0.00%29.63%59.26%88.89%100.00%

Output
----------------
DumpFile:           C:\Users\burp\AppData\Local\Temp\WindowsUpdateLog\wuetl.CSV.tmp.00000

The command completed successfully.

----------I SNIPPED IT HERE-----------
Output
----------------
DumpFile:           C:\Users\burp\AppData\Local\Temp\WindowsUpdateLog\wuetl.CSV.tmp.00009

The command completed successfully.




WindowsUpdate.log written to C:\Users\burp\Desktop\WindowsUpdate.log



PS C:\WINDOWS\system32>

this will run for a bit, does like 8 or 9 passes (this is just one to show).

Is this the same thing? I don't see any links in it lol

 

I would need the %windir%\WindowsUpdate.log from a system that is searching for it via WU.


NOTE: The log refreshs itself from down to top, so after several attempts info gets flushed.

 

I didn't either. Whatever this is seems to be rather worthless for acquiring links. The get-bitstransfer thing works until reboot tho.

 

For Windows 10, the ESD link is located in C:\Windows\SoftwareDistribution\DataStore\DataStore.edb

The same way as we get the ZDP (e.g. windows10.0-kb3074674-x86_3165f806cd5e9d59cc0ccd34ea1d0e404bb3a147.cab).

1. Open it with notepad, and find . e s d



2. then you get a time-bombed link with space in between characters.



3. Copy the full link content to a .txt and save.

Code:

h t t p : / / s h . d l . w s . m i c r o s o f t . c o m / d l / c o n t e n t / d / u p d t / 2 0 1 5 / 0 7 / 1 0 2 4 0 . 1 6 3 8 4 . 1 5 0 7 0 9 - 1 7 0 0 . t h 1 _ c l i e n t p r o _ r e t _ x 8 6 f r e _ e n - u s _ 8 3 d 0 e c e b e 1 c c d d e 0 8 a 1 4 4 a 3 4 d f 6 5 6 d 2 a f 4 8 c 6 b 8 4 . e s d ? P 1 = 1 4 3 7 4 6 5 3 2 4 & P 2 = 1 0 1 & P 3 = 1 & P 4 = c 9 9 W k F F % 2 f v 9 I P 1 5 T u n W U C q d 2 3 6 N c % 3 d

4. Replace the space with nothing​, you get the link.e.g.

Code:

http://sh.dl.ws.microsoft.com/dl/content/d/updt/2015/07/10240.16384.150709-1700.th1_clientpro_ret_x86fre_en-us_83d0ecebe1ccdde08a144a34df656d2af48c6b84.esd?P1=1437465324&P2=101&P3=1&P4=c99WkFF%2fv9IP15TunWUCqd236Nc%3d

[Note]
To open DataStore.edb, you may need to stop Windows Update Service.

Code:

sc stop wuauserv

 

You need to login to view this posts content.

 

You need to login to view this posts content.

 

@ xinso

The good about parsing those logs directly from CMD is you don't neet to stop the service.

 

i try it without stop services and i got error in win 10 ..after stop services open

 

Yeah, when opening it manually. I'll parse it through a for loop from admin running batch file.

 

this is faster way to download esd files but it only goes upto build 10074.
ms has removed the rest due to it only comeing out soon

ms-vnext.net/Win10esds/urls/