Forum Discussion

samlo1775's avatar
samlo1775
Copper Contributor
Sep 21, 2023
Solved

wsusscn2.cab file download verification

 

Hi,

 

I use the wsusscn2.cab file to check missing security updates on an offline computer. I download the .cab file from https://catalog.s.download.windowsupdate.com/microsoftupdate/v6/wsusscan/wsusscn2.cab

 

How can I verify the download? Can I find the SHA-256 checksum for the .cab file somewhere?

 

Thanks for the help!

  • Hi samlo1775,

    it seems that Microsoft has removed the expected checksum from the website. I am not sure why they have done this, but it is possible that it is because the checksum is no longer necessary.

    In the past, the expected checksum was used to verify the integrity of the Windows Update Offline Scan file. However, Microsoft has changed the way that the file is downloaded and installed, so the checksum is no longer necessary.

    If you are concerned about the integrity of the Windows Update Offline Scan file, you can verify the file's signature using the following command:

    Get-AuthenticodeSignature -FilePath <file path>


    This command will return a list of all the signatures that are applied to the file, along with their validity status.

    Please click Mark as Best Response & Like if my post helped you to solve your issue.
    This will help others to find the correct solution easily. It also closes the item.


    If the post was useful in other ways, please consider giving it Like.


    Kindest regards,


    Leon Pavesic

3 Replies

  • LeonPavesic's avatar
    LeonPavesic
    Silver Contributor

    Hi samlo1775,

    To verify the download of the wsusscn2.cab file, you can use the following steps:

    1. Download the file from the official Microsoft website: https://catalog.s.download.windowsupdate.com/microsoftupdate/v6/wsusscan/wsusscn2.cab
    2. Open a command prompt window (CMD) and navigate to the directory where you downloaded the file.
    3. Run the following command:

     

    certutil -hashfile wsusscn2.cab SHA256​

     

    This will generate the SHA-256 checksum for the file.

    1. Compare the generated checksum to the expected checksum. The expected checksum is published by Microsoft on the following website: https://support.microsoft.com/en-us/topic/a-new-version-of-the-windows-update-offline-scan-file-wsusscn2-cab-is-available-for-advanced-users-fe433f4d-44f4-28e3-88c5-5b22329c0a08

    If the two checksums match, then the file is authentic and has not been tampered with.

    If the checksums do not match, then the file may have been corrupted.

    Please click Mark as Best Response & Like if my post helped you to solve your issue.
    This will help others to find the correct solution easily. It also closes the item.


    If the post was useful in other ways, please consider giving it Like.


    Kindest regards,


    Leon Pavesic

     

      • LeonPavesic's avatar
        LeonPavesic
        Silver Contributor

        Hi samlo1775,

        it seems that Microsoft has removed the expected checksum from the website. I am not sure why they have done this, but it is possible that it is because the checksum is no longer necessary.

        In the past, the expected checksum was used to verify the integrity of the Windows Update Offline Scan file. However, Microsoft has changed the way that the file is downloaded and installed, so the checksum is no longer necessary.

        If you are concerned about the integrity of the Windows Update Offline Scan file, you can verify the file's signature using the following command:

        Get-AuthenticodeSignature -FilePath <file path>


        This command will return a list of all the signatures that are applied to the file, along with their validity status.

        Please click Mark as Best Response & Like if my post helped you to solve your issue.
        This will help others to find the correct solution easily. It also closes the item.


        If the post was useful in other ways, please consider giving it Like.


        Kindest regards,


        Leon Pavesic

Resources