Probably a stupid/paranoid question, but I don't see a way do a checksum, so I have to ask... should this 7z Git file have an exe extension? It reminds me of one of those stupid malicious download tricks which hopes that the user has "hide known file extensions" enabled (since Microsoft stupidly has that a default option).
PortableGit-2.10.1-64-bit.7z.exe
From https://git-scm.com/download/win
Is this just a self extracting 7z or was the dang site hacked? And why no checksum?