Does anyone know how to calculate Authenticode File hash in PowerShell?

Question

I'm looking for a way to calculate the Authenticode SHA1,SHA256 hashes of a file inside PowerShell. The file is unsigned.

Get-Filehash outputs the flat hash which is not what I'm looking for.

ConfigCI built-in module can calculate both Authenticode and Page hashes of a file but I don't want to use them since they provide a lot more details and are time consuming to run.

Module's dll is located here: "C:\Windows\assembly\NativeImages_v4.0.30319_64\Microsoft.C99be4d25#\0d6b77335b3aaf092de7496ce37c34bc\Microsoft.ConfigCI.Commands.ni.dll"

.NET or C# code is also okay, I can use either and run them in PowerShell

Answer 1

Powershell get-applockerfileinformation shows the authenticode hash

Answer 2

Finally found a way to do this:

Here is the C# code: https://github.com/HotCakeX/Harden-Windows-Security/blob/main/WDACConfig/WDACConfig%20Module%20Files/C%23/AuthenticodeHashCalc.cs

and here is the PowerShell code: https://github.com/HotCakeX/Harden-Windows-Security/blob/main/WDACConfig/WDACConfig%20Module%20Files/Core/Get-CiFileHashes.psm1

Documentation: https://github.com/HotCakeX/Harden-Windows-Security/wiki/Get-CiFileHashes

It uses Wintrust.dll and it calculates correct Authenticode and first page hashes of files.