How to Check if 7-Zip Download Is Corrupted

Verifying the integrity of a 7-Zip installer ensures the file downloaded completely and has not been corrupted or tampered with. This guide explains how to check the official download using Windows built-in digital signatures and cryptographic SHA-256 checksums to confirm the file is authentic and safe to run.

Method 1: Check the Digital Signature (Easiest)

Official 7-Zip Windows installers (.exe and .msi) are digitally signed by the developer, Igor Pavlov. A valid signature confirms that the file is complete and has not been modified since it was released.

  1. Locate the downloaded 7-Zip installer in your Downloads folder.
  2. Right-click the file and select Properties.
  3. Click the Digital Signatures tab. (If this tab is missing, the file is either corrupted, incomplete, or not an official installer.)
  4. Select the signature in the list (usually named Igor Pavlov) and click Details.
  5. Look at the top of the window under Digital Signature Information. It should state:
    "This digital signature is OK."

If Windows reports that the signature is invalid or not trusted, the file is corrupted.

Method 2: Verify the SHA-256 Hash

A checksum is a unique string of characters generated from the file's data. If even a single byte is missing or altered during the download, the checksum will not match the official value listed on the 7-Zip website.

Step 1: Generate the Hash on Your System

On Windows (PowerShell):

  1. Press Win + X and select Terminal or PowerShell.
  2. Run the following command (replace filename.exe with your actual file path): 
    Get-FileHash -Algorithm SHA256 "C:\Path\To\7z-installer.exe"

On Windows (Command Prompt):

certutil -hashfile "C:\Path\To\7z-installer.exe" SHA256

On Linux or macOS:

sha256sum /path/to/7z-file.tar.xz

Step 2: Compare with the Official Hash

  1. Visit the official download page on 7-zip.org.
  2. Locate the link for the exact version and file architecture you downloaded.
  3. Compare the SHA-256 hash provided on the official page with the output string generated by your terminal.
  4. If the two strings match character-for-character, the file is fully intact and uncorrupted.

What to Do If the Verification Fails

If the digital signature is missing/invalid or the SHA-256 hashes do not match:

  • Delete the downloaded file immediately.
  • Clear your web browser cache.
  • Re-download the installer exclusively from the official website (www.7-zip.org).