To be fair, I doubt that someone who even knows how to verify a hash when would be presented with an exe instead of an iso would think that this looks fine.