Computer security

A file publisher posts a cryptographic hash beside a download. A user recomputes the hash after downloading and obtains a different value. What can the user conclude most directly?