1. Download the SHA-1 checksum tool from Microsoft (support.microsoft.com/en-us/help/841290).
2. Calculate SHA-1 checksum for the ZIP file. The following example shows the tool creating the checksum:

C:\Users\WIN10-x64\Desktop\SHA>fciv.exe -sha1 c:\File.zip
//
// File Checksum Integrity Verifier version 2.05.
//
44f975a110012e65da7155802f7cb1849ee4f386 C:\file.zip

3. Create a rule policy for Executable Files in the Policy Catalog of EPO and push the policy to the client.