After downloading, check the file size and SHA-256 hash if it is published on the official site. For version 36797, legitimate files are usually:

A vulnerability in the remote update mechanism (score 8.2 high) has been closed. This prevents a malicious actor on your local network from injecting fake firmware updates.