Hello, as stated in the title, I have some SHA1-hashes that I want to have checked. Of course I did research myself. To speed it up a bit and keep the post shorter, I already checked all my XP hashed on adguard and they all matched. But how trusty is the adguard website and are all the hashes that are posted there 100% legit? ME Code: * ME OEM English 25a7c617b3fc0e009e2ce5e7b5d4bba82537d8be * ME Retail English 6b95da74ef1695ff78e495afb7aeea991a85260c ** ME MSDN English 7e13981281e3a08416bb94fec654c176f3a891e5 *** ME German CD1 d959edc4b9ca25ee7fb0963caeaf1c0963a4c23f *** ME German CD2 de14b4217a180e19320b59bb512c1aebb8a83f4d From my research: * might be legit ** hash found here on the forum, might be legit too *** CD2 hash found here on the forum, but legitimacy unknown - CD1 not found, legitimacy unknown 2000 Code: * 2000 P SP4 English 4a4569b303163a53927109954a9f30e89cfead29 ** 2000 P SP4 OEM English feeceb7a86126422a04dff98cbfaf3b655bab983 ** 2000 P SP4 OEM German 80191a94dc7acabcb8bf188a928e80f3dc75942b *** 2000 MSDN German ffd05e7ee361f08a8d57d332167ba36864633f1e *** 2000 P SP4 German 213be0908e7ad594c2fe35541f7888b15b42d6e9 From my research: * might be legit ** nothing found *** most likely homebrew It would be great if some people can have a look at my hashes and verify and confirm whether they are legit or not. Thank you
The website is very reliable, 99% of the data verification is no problem, most of the data values are the same on my 400TB hard drive
How about ME and 2000? Got any of them too? Any that might match one with the ones I've posted above?
Code: * ME OEM English 25a7c617b3fc0e009e2ce5e7b5d4bba82537d8be * ME Retail English 6b95da74ef1695ff78e495afb7aeea991a85260c ** ME MSDN English 7e13981281e3a08416bb94fec654c176f3a891e5 are correct hash Code: *** ME German CD1 d959edc4b9ca25ee7fb0963caeaf1c0963a4c23f *** ME German CD2 de14b4217a180e19320b59bb512c1aebb8a83f4d please check under code Code: F6A891AF4E6029064E0F8DF4C666E8419388FA50 *[DEU] de_winME_101_rtl-setup_cd1_20000608-0x04.iso 24CCDA413B3250ACE07E655EC72D2EFA28E6DCAD *[DEU] de_winME_102_upgrade___cd1_20000608-0x04.iso F9E81C744D200799596CB6DAC22B9911C4F718B6 *[DEU] de_winME_110_ms-select_cd1_20000608-0x04.iso 9DFE716EA16AB1AA028DE2885E1755073859BED4 *[DEU] de_winME_111_msdn-ship_cd1_20000608-0x04.iso 593CFD78F4B7811EFB904E37DC6C64274462B941 *[DEU] de_winME_112_stepup-98_cd1_20000608-0x04.iso C19A3607587CF15F7D307F79316DA35AE1F3EB56 *[DEU] de_winME_115_oem-setup_cd1_20000608-0x04.iso 53F54E8477A8DDD1DFAED6BB6F5E45A1928B14E3 *[DEU] de_winME_115_oem-setup_cd2_20000629-0xE4_sbsi.iso Code: * 2000 P SP4 English 4a4569b303163a53927109954a9f30e89cfead29 ** 2000 P SP4 OEM English feeceb7a86126422a04dff98cbfaf3b655bab983 *** 2000 MSDN German ffd05e7ee361f08a8d57d332167ba36864633f1e correct Code: 47D9C830C185AB443A45BA56FC4445628E61B837 *[DEU] de_w2k_WIN2000_combo_FPP_0032.0.iso FFD05E7EE361F08A8D57D332167BA36864633F1E *[DEU] de_w2k_WIN2000_combo_FPP_0032.1.iso Code: ** 2000 P SP4 OEM German 80191a94dc7acabcb8bf188a928e80f3dc75942b ZRMPOEM_DE *** 2000 P SP4 German 213be0908e7ad594c2fe35541f7888b15b42d6e9 ZRMPFPP_DE i don't have files, please share with me?
Thank you for your answer. I know that Microsoft pulled off pre-XP hashes a long time ago, that's why I asked here. I know about @vanelle, I came across him in several threads while browsing here, I thought he might reply to my post as well and confirm some of my ISO hashes, but he didn't replied yet. I saw he liked the post below yours, so he might still will reply and confirm some of my ISOs. (I didn't know that @ command worked here, in this case I had mentioned him.) Thank you for your reply. So only Code: *** ME German CD1 d959edc4b9ca25ee7fb0963caeaf1c0963a4c23f *** ME German CD2 de14b4217a180e19320b59bb512c1aebb8a83f4d are not correct, according to your knowledge? @vanelle liked your post, maybe he can also confirm some hashes? I saw him saying in some other thread that, at least 2 of my mentioned hashes were homebrewed. Which of course is now confusing, because you say they are legit. You want to have these files? Code: ** 2000 P SP4 OEM German 80191a94dc7acabcb8bf188a928e80f3dc75942b ZRMPOEM_DE *** 2000 P SP4 German 213be0908e7ad594c2fe35541f7888b15b42d6e9 ZRMPFPP_DE I don't know if this is allowed. I don't know if they are legit and unaltered. I checked the Forum Rules. And in this case might apply rule 3.1, 3.4 and 3.9.
this means that there may be sectors filled with 00 or FF at the end of the file. check the file for details. or wrong dump and wrong files into ISO image. so you send file or post the download link i will check them. yes we have been working on checking and converting many files information into data for a long period of time.
Code: ME German CD2 de14b4217a180e19320b59bb512c1aebb8a83f4d see this post please: threads/original-msdn-hashes-and-filenames-of-windows-95-98-me-and-2000-german-deutsch.71396/#post-1280498 (I'm too new to post links, use the forum's url and add the part above) Code: 2000 P SP4 German 213be0908e7ad594c2fe35541f7888b15b42d6e9 see this post please: threads/microsoft-windows-2000-xp-info-for-collectors.52771/page-22#post-1619827 (I'm too new to post links, use the forum's url and add the part above) How do I check if sectors are filled with 00 or FF? I can post you links, that is probably the easiest way. Of which ISO do you want the link? Is archiveorg and winworldpc allowed to be posted here?
For these two images it is pretty easy to spot errors. (I didn't bother to check those server images since uploader's level of quality checking his uploads isn't top notch)
@wvv000 Indeed - the year 2018 is a good indicator But there are many more indicators, not only here in a hex view but also from files in the image itself. See if you can spot more, this is a good image to exercise and learn from. I added similar info from a verified image from this time period with some offset's and where some of the hex data is translated. There is much more to look for but maybe a good start if you like to dive down the rabbithole. (btw, don't focus to much on my time zone byte translation, the decimal value is obviously wrong in second translation due to a bug but i use the hex value instead anyway) 213be0908e7ad594c2fe35541f7888b15b42d6e9 *W2PFPP_DE.ISO Code: 00008000 01 43 44 30 30 31 01 00 20 20 20 20 20 20 20 20 .CD001.. 00008010 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 00008020 20 20 20 20 20 20 20 20 57 32 50 46 50 50 5f 44 W2PFPP_D 00008030 45 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 E 00008040 20 20 20 20 20 20 20 20 00 00 00 00 00 00 00 00 ........ 00008050 fa 3d 02 00 00 02 3d fa 00 00 00 00 00 00 00 00 .=....=......... 00008060 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00008070 00 00 00 00 00 00 00 00 01 00 00 01 01 00 00 01 ................ 00008080 00 08 08 00 c2 00 00 00 00 00 00 c2 17 00 00 00 ................ 00008090 00 00 00 00 00 00 00 18 00 00 00 00 22 00 a7 00 ............"... 000080A0 00 00 00 00 00 a7 f4 01 00 00 00 00 01 f4 68 0b ..............h. 000080B0 0b 08 00 00 f0 02 00 00 01 00 00 01 01 00 57 32 ..............W2 000080C0 50 46 50 50 5f 44 45 20 20 20 20 20 20 20 20 20 PFPP_DE 000080D0 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 W2PFPP_DE MICROSOFT CORPORATION MICROSOFT CORPORATION, ONE MICROSOFT WAY, REDMOND WA 98052, (425) 882-8080 CDIMAGE 2.47 (10/12/2000 TM) Image master time: 2018-07-31 20:00:00:00 0xF0 Image master tz: 0xF0 Volume hex time string: 68 0b 0b 08 00 00 f0 Volume dec time string: 104 11 11 8 0 0 240 00008320 20 20 20 20 20 20 20 20 20 20 20 20 20 32 30 31 201 00008330 38 30 37 33 31 32 30 30 30 30 30 30 30 f0 30 30 8073120000000.00 00008340 30 30 30 30 30 30 30 30 30 30 30 30 30 30 00 30 00000000000000.0 00008350 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 00 000000000000000. 00008360 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 0000000000000000 00008370 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00008380 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00008390 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ Date: 20180731 Time: 200000 d183812d681126789358bf3cccec98194b22f67c *W2PFPP_EN.iso Code: 00008000 01 43 44 30 30 31 01 00 20 20 20 20 20 20 20 20 .CD001.. 00008010 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 00008020 20 20 20 20 20 20 20 20 57 32 50 46 50 50 5f 45 W2PFPP_E 00008030 4e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 N 00008040 20 20 20 20 20 20 20 20 00 00 00 00 00 00 00 00 ........ 00008050 36 d1 02 00 00 02 d1 36 00 00 00 00 00 00 00 00 6......6........ 00008060 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00008070 00 00 00 00 00 00 00 00 01 00 00 01 01 00 00 01 ................ 00008080 00 08 08 00 d8 0a 00 00 00 00 0a d8 15 00 00 00 ................ 00008090 00 00 00 00 00 00 00 17 00 00 00 00 22 00 19 00 ............"... 000080A0 00 00 00 00 00 19 40 02 00 00 00 00 02 40 63 0c ......@......@c. 000080B0 07 0c 00 00 00 02 00 00 01 00 00 01 01 00 57 32 ..............W2 000080C0 50 46 50 50 5f 45 4e 20 20 20 20 20 20 20 20 20 PFPP_EN 000080D0 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 W2PFPP_EN MICROSOFT CORPORATION MICROSOFT CORPORATION, ONE MICROSOFT WAY, REDMOND WA 98052, (206) 882-8080 CDIMAGE 2.27 (07/24/96 TM) Image master time: 1999-12-07 12:00:00:00 0xE0 Image master tz: 0xE0 Volume hex time string: 63 0c 07 0c 00 00 00 Volume dec time string: 99 12 7 12 0 0 0 00008320 20 20 20 20 20 20 20 20 20 20 20 20 20 31 39 39 199 00008330 39 31 32 30 37 31 32 30 30 30 30 30 30 e0 30 30 9120712000000.00 00008340 30 30 30 30 30 30 30 30 30 30 30 30 30 30 00 30 00000000000000.0 00008350 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 00 000000000000000. 00008360 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 0000000000000000 00008370 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00008380 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00008390 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ Date: 19991207 Time: 120000