Didn't see it mentioned yet, but checking the file hash (if available) is a good way to verify a file, especially if you get the download from a 3rd party site rather than the official developer.
A good utility for this is "HashMyFiles"
HashMyFiles: Calculate MD5/SHA1/CRC32 hash of files
HashMyFiles is small utility that allows you to calculate the MD5 and
SHA1 hashes of one or more files in your system. You can easily copy the
MD5/SHA1 hashes list into the clipboard, or save them into text/html/xml
file.
HashMyFiles can also be launched from the context menu of Windows
Explorer, and display the MD5/SHA1 hashes of the selected file or folder.
It does MD5, SHA1, CRC32, SHA-256, SHA-512, and SHA-384. The description on the site is older, and doesn't list all of the hashes available in the latest version (v2.23).
And it is portable, no install required.
I especially like the Windows explorer context menu items that are optional in the settings (good to use from your download folder)!!!
1. open in HashMyFiles
2. open in VirusTotal website