The application ratings uses checksum? Because without this NIS trust on a false 'alg.exe' for example.