Yes. If Authenticode signature is suppressed (new default) or absent, hash is used.