Scenario: File checker is directed against a UNC share or some other disk content. It may use the timestamp of a file rather than its hash as the most lightweight mechanism to determine whether analysis needs to be recapitulated.