No clue, but if it can be reconstructed from officials URL, I assume it's the best you can expect.

Or just compute checksum of its contents and try to find the sources of binaries ?

Only if it's open-source, which I doubt.