Softcoria

How to check file hashes

Use PowerShell Get-FileHash (or certutil) to compare SHA-256 values against the published catalog digest.

By Elena Voss · Sep 9, 2026

A hash is a fingerprint of the exact bytes on disk. If one bit changes, the digest changes. That is why Softcoria publishes SHA-256 next to each installer.

PowerShell (recommended)

Open PowerShell in the download folder and run:

Get-FileHash .\example-setup.exe -Algorithm SHA256

Copy the Hash value and compare it character-by-character with the program page. Case does not matter for hex.

certutil alternative

certutil -hashfile .\example-setup.exe SHA256

When the hash does not match

Do not install. Delete the file, clear partial downloads, and fetch again from the labeled button. Incomplete transfers and lookalike mirrors are the usual causes.

Finding the file quickly

Use Everything to locate the installer by name, inspect archives with 7-Zip, and keep a hardware inventory with CPU-Z if a support ticket asks for your CPU model. Lightweight readers such as Sumatra PDF are useful when a publisher ships a checksum list as a PDF.

A hash is one check, not the whole safety review. Pair it with How to Check if a Windows Program Is Safe Before Installing It.

Related guides

View all →