They might just compute a hash over the binary, or the code space in memory.