> embedding the hash into the software itself can be a solution, while >keeping ping the hash unchanged after embedding.