Technical Anshu
Tutorials Blog
🛡️ ISO Verification Guide

Verify Genuine Windows ISO Complete Guide with SHA256 Hash Check

A Windows ISO from a random website, a pen drive from a shop, or a link a friend sent can look perfect and still be modified inside. The SHA256 hash check is the one test a fake cannot pass. Here is the complete method - with the verifier tool and with PowerShell.

✍️ Technical Anshu🪟 Windows 10 / 11⏱️ 10 minute check
🎥 Watch the full video — the verifier tool and the hash check, shown step by step

Every Windows ISO ever released by Microsoft has a fingerprint - a long code called a SHA256 hash. Change even one byte inside the ISO and the fingerprint changes completely. That is why this check is so powerful: if your file's hash matches the official hash for that exact Windows version, the file is bit-for-bit identical to what Microsoft released. If it does not match, the file was modified, corrupted, or is a different version than its name claims. This guide covers both routes shown in the video - the free Windows and Office Genuine ISO Verifier tool, and the manual PowerShell command - plus how to read the result honestly.

Windows PowerShell — Get-FileHash
PS C:\Downloads> Get-FileHash .\Win11_24H2_English_x64.iso -Algorithm SHA256 Algorithm Hash --------- ---- SHA256 4E2B1C9A 7F03D5E8 1A6B42C0 99D7E315 B80F4A62 C31D9E77 05A18F2C 6D44B90E Path C:\Downloads\Win11_24H2_English_x64.iso
Example output only — your hash is a 64-character code. It is genuine only if it matches the official hash for the exact same version, edition and language.
1

Why a Fake ISO Is a Real Danger, Not a Small Risk

A modified Windows ISO installs a modified Windows. The common additions are not harmless: pre-installed activators, disabled Windows Defender, disabled updates, and in bad cases a miner or a remote-access tool that starts with the system. Because the tampering is inside the install image itself, a normal antivirus scan after installation often finds nothing - the unwanted software arrived as part of the operating system. Shops and download sites rarely do this on purpose; most pass on files they received from someone else. That is exactly why you verify, every time, before the ISO touches a PC.

2

Method 1 — The Genuine ISO Verifier Tool from the Video

The video uses the free tool called Windows and Office Genuine ISO Verifier. It keeps a built-in database of hashes of genuine Microsoft releases, so you do not have to hunt for the official hash yourself:

  1. Download the tool from the link in the video description and extract it - it runs portably, nothing to install
  2. Open the tool and select or drag in your Windows or Office ISO file
  3. The tool calculates the file's SHA256 hash and compares it with its database of known genuine releases
  4. Read the verdict: a genuine result names the exact product, version and language the file really is; a not genuine result means the hash matches no official release

One honest limit: a very new or very old release may not be in the tool's database yet. An unknown result is not proof of a fake - it means use Method 2 and compare manually.

3

Method 2 — The PowerShell Hash Command, No Tool Needed

Windows can calculate the hash itself. This is the command the video shows, and it works on any Windows 10 or 11 PC:

  1. Open the folder that holds the ISO, then open PowerShell in that folder (type powershell in the folder's address bar, or open PowerShell and use cd to reach the folder)
  2. Run Get-FileHash .\Win11_24H2_English_x64.iso -Algorithm SHA256 - replace the file name with your file's exact name
  3. Wait - hashing a 5 to 6 GB file takes a little time; the 64-character result appears when it finishes
  4. The older alternative is certutil -hashfile Win11_24H2_English_x64.iso SHA256, which prints the same value from Command Prompt

Tip: press the up arrow and reuse the command for other files - and never type the hash by hand when comparing. Copy and paste it.

4

Compare Against the Official Hash — This Step Decides Everything

Your calculated hash means nothing until it is compared with the right reference:

  1. Find the official SHA256 for your exact file - Microsoft publishes hashes on its software download pages, and volume customers see them in the Microsoft 365 admin / Volume Licensing download portal next to each product
  2. Match all four things: Windows version (for example 24H2), edition set (consumer vs business editions), language (English US and English International are different files with different hashes), and architecture (x64 vs ARM64)
  3. Paste both hashes into any text editor, one above the other - a genuine match is identical in all 64 characters
  4. Get the reference hash from an independent, trustworthy source - never from the same page that gave you the ISO (that trap has its own page on this site)
5

Match or Mismatch — What Each Result Really Means

Exact match: the ISO is byte-identical to Microsoft's release. Install with confidence - activation is a separate question covered in another guide here, but the file itself is clean. Mismatch: do not install yet, and do not panic either. A mismatch proves only that the file is not that exact official release - the most common innocent causes are a corrupted download, the wrong reference hash (different language or edition), or a file someone rebuilt. Re-download once from Microsoft, verify the reference hash, and if it still mismatches, delete the file and use a known-good source. A file that fails twice from an unofficial source is a file you walk away from.

🔴 The rule that protects every PC you touch: no verification, no installation. Two minutes of hashing is cheaper than one infected reinstall — and if you install Windows for customers, this check is part of the job, not an extra.

🎥 Watch the Complete Video Guide

Every step shown live — checking a real ISO with the verifier tool and with PowerShell.

▶️ Watch Full Video
❓ Common Questions (FAQ)

My hash does not match. Is my ISO definitely fake?

Not definitely - it proves the file is not the exact official release you compared against. First rule out a corrupt download and a wrong reference hash (different language, edition or build). If a fresh download from an unofficial source still mismatches the correct official hash, treat the file as modified and do not install it.

Can the Genuine ISO Verifier check Office ISOs too?

Yes - that is the second half of its name. It holds hashes for Windows and Microsoft Office releases, which is useful for the Office ISO a shop gave you with a new PC. Very recent or very old releases may show as unknown; then use the PowerShell hash and compare manually.

The verifier says genuine. Does that mean Windows will activate?

No. Genuine describes the file - it is Microsoft's untouched release. Activation depends on your licence key or digital licence, which is a completely separate system. A genuine ISO with no valid licence still will not activate.

This guide is based on the Technical Anshu video on verifying genuine Windows ISOs • Stuck on a step? Ask in the video comments — you will get an answer there 🙏