from untrusted sources. If you find one “for educational purposes,” use it only in an isolated VM without network access and wipe it afterward. For any real PC, always use a clean, official Microsoft image + your own license.
One USB/ISO contains:
Verify Checksums: If the uploader provides SHA-1 or MD5 hashes, always verify them to ensure the file hasn't been tampered with after being uploaded.