Get-CiFileHashes available parameters

Syntax

Get-CiFileHashes
    [-FilePath] <FileInfo>
    [<CommonParameters>]

Description

Calculates the Authenticode hash and first page hash of the PEs with SHA1 and SHA256 algorithms. The hashes are compliant wih the Windows Defender Application Control (WDAC) policy.

The cmdlet outputs an ordered hashtable. The keys are the hash algorithm names and the values are the hashes.

For more information please visit this page

Tip

If the file is non-conformant, the function will calculate the flat hash of the file using the specified hash algorithm and return them as the Authenticode hashes. This is compliant with how the WDAC engine in Windows works.

Parameters

-FilePath

The path to the file for which the hashes are to be calculated. Supports TAB completion, when you press Tab key, file picker GUI will open allowing you to select a file.

Type:	FileInfo
Position:	Named
Default value:	None
Required:	True
Accept pipeline input:	False
Accept wildcard characters:	False