Are we sure this is a Microsoft release / site? ... When did Microsoft start using Java and signing their ActiveX controls via a data warehouse company?

...

And as *.ISO's can be signed (right?) there is no way to confirm that they have not been messed with.