Some members on Bitcointalk use Ledger hardware wallets, and a few use the native Ledger Live app as well. I noticed that we don’t have a thread about verifying Ledger Live signatures or the installation files, so I thought I would write a quick guide on how to do it.
This tutorial is for Windows users.
What is needed for the verification?• A utility that displays file hashes, such as
Hashtab.
•
The Ledger Live app for your OS.
Verifying the installation binary1. Download and install Hashtab on your computer.
Here is a VirusTotal report for the newest version.
2. Download the correct version of Ledger Live for your OS.
3. After LL has been downloaded, find the file, right-click on it, and click on “Properties”.
4. If you installed Hashtab, you should notice a new tab called “File Hashes” under properties. Click on it.
5. On the File Hashes tab, right-click in the white box and click on “Settings”.
6. A new window will open, showing all Hashtab settings. Unselect all of them, tick only the “SHA-512” box, and click “OK”.
7. Visit the
Ledger Live Download Signatures page. Scroll down a little bit until you find the “Verify my Ledger Live install binary” section.
8. Copy the SHA-512 hash for Windows from the site.
9. In the Ledger Live properties menu under “File Hashes”, paste the copied SHA-512 hash in the “Hash Comparison” bar. If they are identical, a green tick mark will appear on your screen.
10. You have either copied the wrong hash or downloaded a fake version of Ledger Live if you get a red cross instead.

More information on how to verify the SHA-512sum hashes can be found here:
https://www.ledger.com/ledger-live/lld-signaturesAdditionally, check out these posts for more instructions on how to verify the SHA-512sum hashes:
1,
2.
Source:
https://support.ledger.com/hc/en-us/articles/4404807946001-How-to-verify-the-authenticity-of-Ledger-Live-on-Windows-?support=true