Windows installer artifacts are published under /releases/.
Always verify the SHA256 checksum file before running installer binaries.