Hash of exported project as EXE

CommodeJellyfish

Hi everybody,

I just noticed something a bit strange about exported projects in Godot. When I export different projects, so with different assets and different scripts, the generated ".exe" returns always the same SHA-256 hash. The same hash was already submited on Virustotal by someone else. Of course, my project didn't come from the web.

Does anyone knows how it is possible ? I thought hash collision was one a billion probability.

Thank you very much, Regards

cybereality

So the Godot EXE is included in the export templates. The project is never compiled. When you export, it packages your assets (images, models, scripts, etc.) in the PCK file. This is your game, the EXE is just the blank Godot Engine which opens the game. So every Godot game (for a specific version number, like 3.4.2) will have the exact same executable. This is also the main reason why exporting on Godot is almost instant, and can take 30 minutes or 1 hour on other engines.

CommodeJellyfish

Thanks ! I just looked at the PCK file with a hex editor and I found variables, keywords of my scripts or headers of pngs. Thank you very much for your answer and your time !