have you ever heard of running a download through an antivirus if unsure if the source is legit or not? you can also check wether it is signed by MS, this is. The only way to not fall pray to the baddies of the world is to have some basic common sense:
- always scan downloaded files from unverified sources through a reliable up to date Antivirus.
- if still unsure check wether downloaded app is signed by MS by checking the file properties