I reinstated 2.2.4 and activated the internal downloader. Once downloaded, it asked me if I wanted to close VLC and install, and I clicked no. It is not clear whether VLC itself verifies the hashes and digital signatures prior to proceeding to upgrade.
Found vlc-2.2.6-win64.exe in my temp folder. The file is digitally signed, and checked out ok
The MD5 and SH1 hashes match what is in the
http://download.videolan.org/pub/videol ... 2.6/win64/ for the .exe file.
No alert came from Windows Defender.
Reinstated VLC 2.2.6 which was already installed.
The one I checked out was the 64 bit one.