m417z / winbindex

An index of Windows binaries, including download links for executables such as exe, dll and sys files

Winbindex

An index of Windows binaries, including download links for executables such as exe, dll and sys files.

All linked binary files are hosted on the Microsoft public symbol server (msdl.microsoft.com), Winbindex merely indexes metadata that enables to generate those links.

The website, along with the whole database, is hosted on GitHub in this repository, and is served with GitHub Pages. The database is updated on a regular basis by Python scripts that are also located in this repository in the data folder. The database can be found in the gh-pages branch.

For technical details and the background story please refer to the blog post: Introducing Winbindex - the Windows Binaries Index

winbindex's Issues

Some files cannot be downloaded

I have fetched a list of files from your database. The following files cannot be downloaded:

0eed89b6f8d79bfe14cb4757744b5b91ccd0eca31ac7cecb6b22bf03afdb26f1,
860a72fd473add283a3bfde161b8719aa08bee24b12fdf06e268447d6985e0c9
8f7fd74b70a03fbf100f7df1ba6d9dc6f46997d409e2ed2fd1302e7d2ccb83a7
dfa0a5c68c0ba3d79309e4cd88165528d884d36aa60444351744e25134bd5237
a9a69cf8377c6447d24f524937cc00e3321f296080b41a3a8efcf8dcbc8c5eca
b7f3b67126cdcd5b27fb94ecf8e6055df759254f9e66069e95ec7673821c8adf

All of these files are arm64 builds of ntoskrnl.exe. The links are generated using the method presented in DeltaDownloader. I have also tested clicking directly on the links generated by your frontend.

Probably something wrong with the parameters provided in your database?

Windows XP and Windows Server 2003 binaries

Indexing also Windows XP and Windows Server 2003 binaries would be great.

This would require an update to this project to add support for to at least Edition, Channel and languages because a there are some files with the same filename but they are not identical between Edition, Channel and/or languages.

File names can be renamed

When clicked the download button, the downloaded file is named as random chars/id with an extension, "blob". It would be nice to rename the file on download.

Windows 7 binaries?

Is it possible to include older versions of Windows in the index?

Localization

It is sad that the site is only in English - I propose to translate.
I am ready to help in the translation into Russian.
(For example, you can use Weblate, or any other service. It is completely free for open source projects.)

Windows 1909 is missing

Cool, but Windows 1909 is missing from the download list!

I got a .blob file..???

Hi
Interesting app

I went to: https://winbindex.m417z.com/ (correct?)
and searched for the file: resampledmo.dll

I ended up with:
A526E27F5718054E3C1CC0E711891916C51097F16C99B0258D046EB7CB54E32800.blob (Attached, but renamed to .txt as .blob isnt allowed)
er...? ok??
Ran that through VT and got:
https://www.virustotal.com/gui/file/70d563bda75f3f3f3b110fa01085c6f40e0191befee964d7aa46cbf985d83dfc/behavior
Which seems like the result for the correct file.

At this point I was like: "WTF!? Am I missing something here??

A526E27F5718054E3C1CC0E711891916C51097F16C99B0258D046EB7CB54E32800.txt

Download files that are missing in VirusTotal from the Symbol Server for additional information

Hi,
some of the kernels (ntoskrnlmp.exe) are reported with version ??? however it is possible to extract the version of the kernel looking at its metadata. For example on Linux using something similar to
wrestool --extract --raw --type=version ntoskrnlmp.exe | tr '\0, ' '\t.\0' | sed 's/\t\t/_/g' | tr -c -d '[:print:]' | sed -r -n 's/.*Version[^0-9]*([0-9]+\.[0-9]+(\.[0-9]+?)\.[0-9]+?).*/\1/p'

Support for downloading PDB files

It would be nice if a support for downloading PDB files of the PE files was added

Also I would like to say thank you for creating this tool/website!

AssertionError when running upd02_get_manifests_from_updates.py directly

When i run (after running python3 upd01_get_list_of_updates.py and creating updates.json):

python3 upd02_get_manifests_from_updates.py

I get:

Processing Windows version 1507
[KB3074683] Downloading update
[KB3074683] ERROR: Failed to process update
[KB3074683]
Traceback (most recent call last):
  File "upd02_get_manifests_from_updates.py", line 172, in <module>
    main()
  File "upd02_get_manifests_from_updates.py", line 162, in main
    get_manifests_from_update(windows_version, update_kb)
  File "upd02_get_manifests_from_updates.py", line 132, in get_manifests_from_update

    download_url, local_dir, local_path = download_update(windows_version, update_kb)
  File "upd02_get_manifests_from_updates.py", line 47, in download_update
    found_updates = search_for_updates(f'{update_kb} {windows_version} x64')
  File "upd02_get_manifests_from_updates.py", line 20, in search_for_updates
    assert '(page 1 of 1)' in html  # we expect only one page of results
AssertionError

What am I doing wrong?

p.s. great work on this, and thanks in advance! 🙏

can download offline storage?

Some files are missing

Steps to reproduce: search for slc.dll or other licensing related file. Attempt to download. None of the download links work.

This seems to be because some files don't have symbol information on the symbol server, but the scripts assume all files have debugging information on the symbol server.

Need Windows Server data

This is a very useful tool. Thank you for your work. Could you please add the Windows server module data?

unable to download a single winload.efi

Not sure what the deal is: https://winbindex.m417z.com/?file=winload.efi

But im unable to download any winload.efi

Windows 10 Mobile binaries?

Seems like updates for Windows 10 Mobile are still index in the Microsoft Update catalog, as mentioned in #166.

While Win10M is a dead OS, it provides a picture of the evolution of Windows NT on ARM before the 16xxx builds indexed here.

I'm particularly interested in the ntoskrnl.exe file and the PsRegisterPicoProcess symbol. I've noticed that only on ARM Windows build 16xxx, the symbol is missing. It is available on all known Windows NT 10.0 x64 builds and is known to be present on early Win10M (10.0.10240.x).

bug - downloads wrong files

Some times when I download a dll it downloads a file with a different hash than it is written.
for example the dll wiatrace.dll

• x64 | 10.0.19041.21 (sha256 - 5ebfeb8c26339d811ce77c286be26925c4e5d2d0f9e37ba2375438f5b51e650c)
• x64 | 10.0.19041.450 (sha256 - 9ad91cc28cbc6cb010911427a9b3d406a193d13f05f85e58ed7af01e8d9e3b2f)

but when I download them both of the files have the same hash: sha256 - 7e442ef73a0a425422085390496de05275930ea60e3ea1806e68c3566e0fb2f5

https://winbindex.m417z.com/?file=wiatrace.dll