Before you download
Use only a source you independently recognize as belonging to the software developer. Avoid shortened links, unsolicited attachments, repackaged installers, and pages that imitate download buttons.
Practical note: Write down the displayed version and release date. A file name alone does not prove authenticity.
Verify the file
Scan the file with your installed security software. Open Windows file properties and review the Digital Signatures tab if present. Compare a published checksum when the developer supplies one.
Practical note: A missing signature is not automatically proof of malware, but it removes one useful verification signal and should increase caution.
Prepare Windows
Install current Windows updates and stable graphics drivers. Create a restore point, close sensitive applications, and understand every antivirus exclusion before adding it.
Practical note: Never exclude an entire drive or Downloads folder merely to make a miner run.