diff --git a/src/Microsoft.SymbolStore/ChecksumValidator.cs b/src/Microsoft.SymbolStore/ChecksumValidator.cs
index f19ce2da80..925743b51b 100644
--- a/src/Microsoft.SymbolStore/ChecksumValidator.cs
+++ b/src/Microsoft.SymbolStore/ChecksumValidator.cs
@@ -7,6 +7,9 @@
 using System.Linq;
 using System.Security.Cryptography;
 using System.Text;
+using System.Web;
+using Microsoft.FileFormats;
+using Microsoft.FileFormats.PDB;
 using Microsoft.FileFormats.PE;
 
 namespace Microsoft.SymbolStore
@@ -17,9 +20,74 @@ internal sealed class ChecksumValidator
         private const uint pdbIdSize = 20;
 
         internal static void Validate(ITracer tracer, Stream pdbStream, IEnumerable<PdbChecksum> pdbChecksums)
+        {
+            // A portable PDB checksum is computed over the metadata image with the embedded
+            // PDB id zeroed out, so it can be fully recomputed and validated here.
+            //
+            // Windows PDBs (MSF container) and PDZ files (MSFZ container) use a completely
+            // different on-disk format that this code cannot recompute. So for those, we
+            // check with PDBFile class and accept it.
+            //
+            // This happens for ngen or ReadyToRun images.
+            if (IsPortablePdb(pdbStream))
+            {
+                ValidatePortablePdb(tracer, pdbStream, pdbChecksums);
+            }
+            else
+            {
+                ValidateWindowsPdb(tracer, pdbStream);
+            }
+        }
+
+        /// <summary>
+        /// Returns true if the stream is a portable PDB (an ECMA-335 metadata image, which
+        /// starts with the "BSJB" signature).
+        /// </summary>
+        private static bool IsPortablePdb(Stream pdbStream)
+        {
+            pdbStream.Position = 0;
+            byte[] signature = new byte[4];
+            int read = pdbStream.Read(signature, 0, signature.Length);
+            pdbStream.Position = 0;
+            return read == signature.Length &&
+                   signature[0] == 0x42 && // 'B'
+                   signature[1] == 0x53 && // 'S'
+                   signature[2] == 0x4A && // 'J'
+                   signature[3] == 0x42;   // 'B'
+        }
+
+        /// <summary>
+        /// Structurally validates a Windows PDB (MSF) or PDZ (MSFZ) download and accepts it.
+        /// A byte-level re-validation is not performed.
+        /// </summary>
+        private static void ValidateWindowsPdb(ITracer tracer, Stream pdbStream)
+        {
+            const string checksumExceptionMessage = "The downloaded file is neither a portable PDB nor a valid Windows PDB (MSF/MSFZ) container";
+            pdbStream.Position = 0;
+            try
+            {
+                using (PDBFile pdbFile = new(new StreamAddressSpace(pdbStream)))
+                {
+                    if (!pdbFile.IsValid())
+                    {
+                        throw new InvalidChecksumException(checksumExceptionMessage);
+                    }
+                    tracer.Information($"Accepting Windows PDB ({pdbFile.ContainerKind}); No checksum validation is available for this file format");
+                }
+            }
+            catch (Exception)  // The PDBFile constructor or IsValid method can throw an Exception exception
+            {
+                // Note: the InvalidChecksumException constructor does not accept an inner exception
+                throw new InvalidChecksumException(checksumExceptionMessage);
+            }
+            pdbStream.Position = 0;
+        }
+
+        private static void ValidatePortablePdb(ITracer tracer, Stream pdbStream, IEnumerable<PdbChecksum> pdbChecksums)
         {
             uint offset = 0;
 
+            pdbStream.Position = 0;
             byte[] bytes = new byte[pdbStream.Length];
             byte[] pdbId = new byte[pdbIdSize];
             if (pdbStream.Read(bytes, offset: 0, count: bytes.Length) != bytes.Length)
diff --git a/src/Microsoft.SymbolStore/SymbolStores/HttpSymbolStore.cs b/src/Microsoft.SymbolStore/SymbolStores/HttpSymbolStore.cs
index 5887261547..ae6eec3f91 100644
--- a/src/Microsoft.SymbolStore/SymbolStores/HttpSymbolStore.cs
+++ b/src/Microsoft.SymbolStore/SymbolStores/HttpSymbolStore.cs
@@ -141,7 +141,20 @@ protected override async Task<SymbolStoreFile> GetFileInner(SymbolStoreKey key,
             {
                 if (needsChecksumMatch)
                 {
-                    ChecksumValidator.Validate(Tracer, stream, key.PdbChecksums);
+                    // Portable PDBs are validated against their checksum here. Windows PDBs (MSF)
+                    // and PDZ (MSFZ) are structurally validated and accepted. A truncated/corrupt
+                    // portable PDB can still throw an EndOfStreamException while parsing its
+                    // metadata; in that case skip this candidate so any other bound PDB can be
+                    // tried (e.g. ngen or ReadyToRun images can have multiple bound PDBs).
+                    try
+                    {
+                        ChecksumValidator.Validate(Tracer, stream, key.PdbChecksums);
+                    }
+                    catch (EndOfStreamException)
+                    {
+                        Tracer.Verbose($"       {key.FullPathName} is not a valid PDB file.");
+                        return null;
+                    }
                 }
                 return new SymbolStoreFile(stream, uri.ToString());
             }
diff --git a/src/Tools/dotnet-symbol/Program.cs b/src/Tools/dotnet-symbol/Program.cs
index dc7d330eb8..e788dbf409 100644
--- a/src/Tools/dotnet-symbol/Program.cs
+++ b/src/Tools/dotnet-symbol/Program.cs
@@ -243,18 +243,25 @@ internal async Task DownloadFiles()
         {
             using (Microsoft.SymbolStore.SymbolStores.SymbolStore symbolStore = BuildSymbolStore())
             {
-                foreach (SymbolStoreKeyWrapper wrapper in GetKeys().Distinct())
+                if (symbolStore != null)
                 {
-                    SymbolStoreKey key = wrapper.Key;
-                    if (symbolStore != null)
+                    foreach (SymbolStoreKeyWrapper wrapper in GetKeys().Distinct())
                     {
-                        using (SymbolStoreFile symbolFile = await symbolStore.GetFile(key, CancellationToken.None).ConfigureAwait(false))
+                        SymbolStoreKey key = wrapper.Key;
+                        try
                         {
-                            if (symbolFile != null)
+                            using (SymbolStoreFile symbolFile = await symbolStore.GetFile(key, CancellationToken.None).ConfigureAwait(false))
                             {
-                                await WriteFile(symbolFile, wrapper).ConfigureAwait(false);
+                                if (symbolFile != null)
+                                {
+                                    await WriteFile(symbolFile, wrapper).ConfigureAwait(false);
+                                }
                             }
                         }
+                        catch (InvalidChecksumException)
+                        {
+                            Tracer.Verbose($"   Skipped invalid {key.FullPathName} file");
+                        }
                     }
                 }
             }