Isn’t the following better than current windows package managers? a) Download file.EXE binary from somewhere b) run: certutil -hashfile file.EXE (which spits

Isn’t the following better than current windows package managers? a) Download file.EXE binary from somewhere b) run: certutil -hashfile file.EXE (which spits out hash value) c) search for hash value obtained at step “b” on a site like: virustotal.com : it tells you if malware is detected d) run: file.exe (if no malware detected) I honestly couldn’t find a better method on MS Windows. Other suggestions?