If you allow for the exe to differ and thus the hash to differ there isnt really a way to guarantee the version which could lead to a lot of desyncs. The only solution would be to get the exe then do the wrapping after the version is guaranteed but this could still lead to issues.