---
id: "authentihash"
kind: "datatype"
status: "stable"
is_pii: false
categories: ["software"]
langs: ["common"]
quality: 46
url: "http://registry.apicrafter.io/datatype/authentihash"
---

# authentihash (`authentihash`)

authentihash is a sha256 hash used by Microsoft to verify that the relevant sections of a PE image file have not been altered. This specific type of hash is used by Microsoft AppLocker.

- Parent datatype: `sha256hash`
- Personal data (PII): no
- Categories: Software development (software)
- Countries: global
- Languages: Common to most languages (common)
- Classification: identifier

## Examples

- `b9be0c1b4a48e7acd1bd186d31f86212794a824f0a9602242b054f9d98bd7c70` — Virus total file Twain_32.dll

## Metacrafter rules

2 rules: 1 match the field name, 1 match values.

- `authentihashbyknown` (field, `common/software.yaml`)
- `authentihashbyvalue` (data, `common/software.yaml`)

## Supported by tools

- `metacrafter`

## Sources

- other: <https://developers.virustotal.com/reference/authentihash>

## Quality

Score 46/100. Missing: regexp, second example, negative example, authoritative source link, mapping (Wikidata, Schema.org, ...), translation.

JSON: <http://registry.apicrafter.io/api/v1/datatypes/authentihash.json> · Edit: <https://github.com/apicrafter/metacrafter-registry/edit/main/data/datatypes/any/software/authentihash.yaml>