They probably use a proxy/stub process that uses the .exe that doesn't change often.