As you would know by now Microsoft released Windows 7 RTM version about a week ago but it seems its been leaked and activation already cracked. According to Steve Ballmer and Steven Sinofsky Windows 7 was released to manufacturing on July 22nd 2009, and will be available in stores by October. The final RTM version is 6.1.7600.16385. Several days before the RTM version “leaked” copies of the RTM started popping up on torrents sites but most of them were either fakes or build 7600.16384 modified with the RTM files. And as usual right after the RTM was official copies of it started emerging again in torrent sites and forums but this time some(most) of them are believed to be the official one. Although Microsoft has not confirmed or denied of its existence yet, Daniel Melanchthon, technical evangelist for Security and Messaging in the Developer & Platform Strategy Group at Microsoft Germany has revealed the original SHA-1,MD5 and CRC hashes of windows 7 which now that can be used to find out if the copies leaked are indeed genuine or not.
Windows 7 RTM hashes:
- Windows 7 Retail Ultimate E English (x86)
Name: 7600.16385.090713-1255_x86fre_cliente_en-us_Retail_UltimateE-GRMCEULFRER_EN_DVD.iso
CRC: 0x953EFBCC
SHA-1: 0xBC10F09B86DCBAF35B31B0E6FBA7D006ACAAD28D - Windows 7 Retail Ultimate E English (x64)
Name: 7600.16385.090713-1255_x64fre_cliente_en-us_Retail_UltimateE-GRMCEULXFRER_EN_DVD.iso
CRC: 0x77BE890E
SHA-1: 0x029DCCEDD7691206010F84CE58343405A4DA92C9 - Windows 7 Retail Ultimate English (x86)
Name: 7600.16385.090713-1255_x86fre_client_en-us_Retail_Ultimate-GRMCULFRER_EN_DVD.iso
CRC: 0xC1C20F76
SHA-1: 0x5395DC4B38F7BDB1E005FF414DEEDFDB16DBF610 - Windows 7 Retail Ultimate English (x64)
Name: 7600.16385.090713-1255_x64fre_client_en-us_Retail_Ultimate-GRMCULXFRER_EN_DVD.iso
CRC: 0x1F1257CA
SHA-1: 0x326327CC2FF9F05379F5058C41BE6BC5E004BAA7 - Windows 7 Ultimate Retail Simplified Chinese (x86)
Name: 7600.16385.090713-1255_x86fre_client_zh-cn_Retail_Ultimate-GRMCULFRER_CN_DVD.iso
SHA1: B589336602E3B7E134E222ED47FC94938B04354F - Windows 7 Ultimate Retail Simplified Chinese (x64)
Name: 7600.16385.090713-1255_x64fre_client_zh-cn_Retail_Ultimate-GRMCULXFRER_CN_DVD.iso
SHA1: 4A98A2F1ED794425674D04A37B70B9763522B0D4 - Windows Server 2008 R2 Volume License (VL) English
Name: 7600.16385.090713-1255_x64fre_server_en-us_VL-GRMSXVOL_EN_DVD.iso
SHA1: AD855EA913AAEC3F1D0E1833C1AEF7A0DE326B0A
To add insult to injury not only Windows 7 had been leaked but its also successfully cracked to bypass the activation making it genuine. This time hackers didn’t take their time like the last attempt at cracking Vista but this comes as no surprise as the crack/activator uses a similar method that was used to activate Windows Vista. The crackers managed to get their hands on a OEM-SLP (System-Locked Pre-installation) product key and a OEM certificate via leaked copy from Lenovo, that was available in a Chinese forum.
This current activation uses Microsoft’s OEM activation. This is the same as the “OEM BIOS Hack” that was made for Vista. Hackers have used a SLIC 2.1 BIN and a genuine OEM certificate to get a Private Key, OEMID and OEM Public Key and used it with the leaked OEM SLP Key that was leaked. The result being a cracked/permanently activated Windows 7 copy. This seems to work on most systems other than Lenovo but is limited to only Ultimate editions because of the OEM key.
Now(at the time of writing) the activators can be found from the SLIC files to automated programs, (7loader and hazar) but always remember that even though its activated its still illegal and also might be dangerous to use these.


