An artifact hash is a fixed-length cryptographic value calculated from a file, such as a software installer or update package. Even a small change to the file produces a different hash, so defenders can compare a downloaded artifact with a hash published for a trusted version.
In software distribution, hash checks can help detect a file that was replaced or altered during delivery. A match supports integrity verification, but does not by itself prove that the file is safe or authentic: attackers could also change the file and the reference hash, or a trusted source could publish a malicious artifact. Hashes are strongest when obtained through a separately trusted channel and used alongside digital signatures, secure update infrastructure, and endpoint monitoring.