I don't have solid information on that. But I don't think it's likely MS is jacking their own customers on purpose. That would be extremely stupid of them. They're sneaky and corrupt, but usually not stupid.
Assuming the download really came from MS, I might suspect something connected with CoPilot. I think it's a little soon for Recall. Forced installation of those two things is on the doorstep.
Or perhaps the download was corrupted, or came from some source other than MS.
Thank you for looking at it. I am curious if there are more who notice this same thing. Have to keep an eye on this to see if it is a common pattern. Strange that it is hidden from the processes if it is legit. :)