Got the checksums for freshly installed SH5.exe
SHA: 5d86a7fa04e2a0d487d86069873a4cd01b994167
MD5: 02fa3f1e5c78432406430f3f6177fcfe
Also the file was signed on 13th August 2019.
https://imgur.com/AxS0o4u
So yeah, it really looks like they pushed a new binary through Uplay.