Getting that Windows ISO checked before anything else

I’m staring at this Windows ISO and I can already feel the risk. Like, it looks normal, it downloads fine, but that means nothing. One bad download, one sketchy mirror, or even just a tiny corruption and suddenly you’re installing something broken. Or worse. So yeah, before I click “mount” or toss it on a USB stick, I want proof it’s the exact file it’s supposed to be.

That’s where the SHA-1 checksum comes in. It’s basically a fingerprint for the ISO. Microsoft (or whoever published the ISO) gives an official hash value, and then I compute my own hash from the file sitting on my drive using CertUtil or PowerShell. If both fingerprints match, I relax a bit. If they don’t match, I stop right there and figure out why.

Quick wrap-up

If the official SHA-1 and my local SHA-1 are identical, I’m good to move on with making install media. If they’re different, something is off and I treat that ISO like trash until proven otherwise.