hash to verify PE files.
authentihash is a sha256 hash used by Microsoft to verify that the relevant sections of a PE image file have not been altered. This specific type of hash is used by Microsoft AppLocker.
{
"data": {
...
"attributes" : {
...
"authentihash": "<string>",
}
}
}
{
"data": {
"attributes": {
"authentihash": "6b9740557544535e594ba5e6585d78e6724be0bed40350211909d3cd97d8be1e",
}
}
}