If SHA1/SHA256 doesn’t match → DO NOT install it.
That means the download is corrupted or not the exact file listed in the Catalog.
KB5007651 is a Microsoft Defender platform update, not a normal Windows patch.
It often shows as “Installed” even when the platform version didn’t actually update.
Open PowerShell as Admin and copy-paste the following:
Get-MpComputerStatus and hit the Enter Key.
Check AMProduction version. If it’s not 10.0.29510.1001, the update isn’t actually applied.
Open Command Prompt as Admin and run:
DISM /Online /Cleanup-Image /RestoreHealth