Always download directly from Microsoft to avoid malware. There are two main versions:

If you are a system administrator pushing software via SCCM or Intune, you need the silent install switches.