MSDN hashes

[vareu]

As you probably know, the "MSDN Subscriber Downloads" page (which contained file hashes) has been closed in June 2017 and now we can't access those hashes easily.
However, there are projects which dumped all of the hashes - firstly from the MSDN website when it was still available, and now from my.visualstudio.com website, which is viewed as an successor. Those databases are put online for everyone, so now you can validate the hashes.

Keep in mind, that these are not Microsoft-sponsored projects, so you can't be 100% sure that the hashes are authentic, but it is better than nothing.

Website of the projects:
http://www.heidoc.net/php/myvsdump.php
https://msdn.su
https://github.com/martinml/msdn
https://github.com/sigot/msdn-mirrors

[Valerio]

I recall using this one, also: https://msdn.lol-inter.net/

[vareu]

Do you know a way to download that database?

[Sim31]

I recall using this one, also: https://msdn.lol-inter.net/

Page doesn't come up, wonder if it's hosted off someones server and goes up and down a lot?

[DVINTHEHOUSEMAN]

I got a 502

[vareu]

I also got error 502 on https://msdn.lol-inter.net/

I would be really interested in getting the HeiDoc database.

[CamposJ]

I am interested in getting the HeiDoc database too

[vareu]

New fantastic site with hashes: https://files.rg-adguard.net/category

[wavemaster76]

Download full database: https://cdn.discordapp.com/attachments/ ... 0-04-21.7z

[vareu]

WOW! Thank you very much! Where is this database from/how it was created?

[wavemaster76]

WOW! Thank you very much! Where is this database from/how it was created?

It is created from MSDN metadata. Here is an updated version (including 2004 files): https://cdn.discordapp.com/attachments/ ... 0-05-12.7z

It is be created by the developer of UUP dump (on MyDigitalLife): https://forums.mydigitallife.net/thread ... ump.78070/

[vareu]

Thank you!

The most interesting file there is mvs_names.txt - it looks that it contains all of the MSDN library programs with SHA-1 hashes.
If he could also give us the SHA-512, that would be really nice.

[wavemaster76]

Thank you!

The most interesting file there is mvs_names.txt - it looks that it contains all of the MSDN library programs with SHA-1 hashes.
If he could also give us the SHA-512, that would be really nice.

He can't. This is just a dump of the MVS website, he doesn't have everything downloaded. The website only contains SHA-1 and SHA-256 hashes, you have to live with that.

[vareu]

Well, even SHA-256 is a news. In the times of open MSDN Subscriber Downloads there was only SHA-1 hash provided.

[DonaltDuck]

...
Keep in mind, that these are not Microsoft-sponsored projects, so you can't be 100% sure that the hashes are authentic, but it is better than nothing.
...

idk what this project's based on, but
Microsoft has a SDK (https based) to request all file infos from MYVS (MSDN) database

you just need a
- valid subscription
- login to the subscription account
- and a little bit know how to use the SDK

Microsoft itself use this SDK on the MyVisualstudio (and VLSC) download page
and i use the SDK for my own Database dump Tool
and my own MYVS Download tool

in case you use the SDK to request fileinfo or request a download link for a MS File,
you can be 100% shure that hashes are authentic from Microsoft's Database

[vareu]

No doubt about that, but please keep in mind, that the point you've made:

you just need a - valid subscription

is the main obstacle for most of us - especially in countries where Microsoft products costs a fortune due to the ratio of local currency value to the dollar value.

That's why, if you have such access and can help us by generating an CSV file (or SQL/ACCDB or other format [even HTML-based table]), then it would be greatly appreciated and I personally be thankful to you for your generous contribution to us

[DonaltDuck]

adguard use also the Microsoft SDK for his online database (wich indicate that all infos ar valid from MYVS datababe)
https://msdn.rg-adguard.net/public.php
list all latest Microsoft Products from last 30 days
you can also request older Products by entering a serch term eg "access_2010"
https://msdn.rg-adguard.net/public.php? ... 10&str=100

The info buttons show the details (not all but the the most important)

Product (Full Name): Access 2010 (x64) - (Arabic)
Product Family: Access 2010
FileId: 42346
File Type: EXE
Language: Arabic (AR)
Architecture: X64
File: ar_access_2010_x64_514925.exe
SHA1: d88a6b4f5f5d312bc8a44288e829e0a9e904608e
SHA256:
File Size (MB): bytes (318 MB)
Date release: 2010-05-10
Note:

No doubt about that, but please keep in mind, that the point you've made:
....
That's why, if you have such access and can help us by generating an CSV file (or SQL/ACCDB or other format [even HTML-based table]), then it would be greatly appreciated and I personally be thankful to you for your generous contribution to us

sorry, but publish a database file ( SQL/ACCDB or other format) is not allowed by Microsoft
i dont want to loose myVS subscription. it seems that MS tollerate the online version from adguard (he hope that MS dont close his account)

[wavemaster76]

https://database.luzea.ovh/

[vareu]

sorry, but publish a database file ( SQL/ACCDB or other format) is not allowed by Microsoft
i dont want to loose myVS subscription. it seems that MS tollerate the online version from adguard (he hope that MS dont close his account)

But how do they know who published it? Any member can retrieve this data.

https://database.luzea.ovh/

Thank you very much, it looks like another great source.
But still non-downloadable

[DonaltDuck]

...
But how do they know who published it? Any member can retrieve this data.
...

1. you must be logged in with your Microsoft subscription to use the HTML SDK
2. each request (HTML post) to the Microsoft database by the SDK need the login cookie -> each request send the user data (cookie) to MS
4. each SDK request return the requested data in jdson format in addition this also include your current IP Adress (depend on the SDK function)
-> you can be 1000% shure that Microsoft check your accound and knows your IP adress for each request to the MSDN (MyVS) database
MS logg the request and Quarantained suspected user (tempory and or permanent) <- i have also test this during my SDK usage (MS Quarantained my account tempory for 1 day)

----

https://database.luzea.ovh/

Thank you very much, it looks like another great source.
But still non-downloadable

this database doesnt use the MS SDK to get hashes (i know luzea)
- it only use published hashes from the www (MDL Forum)
- it is incompleate (his database do not include all MSDN products)
--> all in all it is not for sure (not recommended)

[wavemaster76]

this database doesnt use the MS SDK to get hashes (i know luzea)
- it only use published hashes from the www (MDL Forum)
- it is incompleate (his database do not include all MSDN products)
--> all in all it is not for sure (not recommended)

it uses the My Visual Studio API (i guess you first have to learn the difference between API and SDK...), sadly, most of the old content (Win 2000, Win 95) got removed from MVS and metadata such as checksums cannot be obtained anymore (at least not from MVS directly). None of these checksums come from MDL or other websites not cooperated with Microsoft. Either i created checksums myself (like for Tech Bench things (Insider Preview)). VLSC metadata is also coming from Microsoft.

If you have any other checksums from official Microsoft released media, please post it here and i’ll add it to the database.

PS: msdn.rg-adguard is as unofficial as the database and they use the same endpoint for MVS files. I’ve found another way for VLSC files, but it also doesn’t have everything, but most of the newer stuff.

PPS: you’re really wasting your money for a MVS (former MSDN) subscription?

[DonaltDuck]

PPS: you’re really wasting your money for a MVS (former MSDN) subscription?

No, but your question shows me we both talk about the same kind of subscription

[wavemaster76]

No, but your question shows me we both talk about the same kind of subscription

yes, but it doesn't really matter. Again, i would be surprised if one of the hashes in the database would be wrong, because most of them are coming from official MS endpoints and everything else is self-generated (checked twice)