If you downloaded the update files through Microsoft Update Catalog:
You will see SHA1 of the MSU package present in its file name:
The string highlighted in blue is its SHA-1 (Secure Hash Algorithm-1) value, which is always 40 characters long, this value will be changed if the file content is modified.
You can use this method to check if the file is authentic, you can use PowerShell to do this;
First, to open PowerShell:
Then you need the full path of your file and filename, in this example, the file is downloaded to the default downloads folder, which is
C:\Users\USERNAME\Downloads folder, in PowerShell you can use this variable:
$home to represent
C:\Users\Username (your user profile) folder.
You can use
Get-Filehash cmdlet to get the hash of the file and check it against the hash in its filename by using
-eq operator, if the result is
true then the file is good. If it returns
false then the file is corrupted.
I will give you this example to describe the method better:
(get-filehash -path "$home\downloads\windows10.0-kb4592438-x86_95758bd6e2c3a4a98a19efaa4056213531f84f5c.msu" -algorithm SHA1).hash -eq "windows10.0-kb4592438-x86_95758bd6e2c3a4a98a19efaa4056213531f84f5c.msu".split("_").substring(0,40)
true, means my file isn't corrupted.
When you use it, just replace the file name and file path with the real name and path of the file you want to check. And then you are good to go.