After download, check the SHA-1 against a known good value (example – verify via Microsoft’s old VLSC hashes or trusted tech forums like MDL).