How would this work, when something like Windows Security Policy (Group Policy) can prevent or allow apps based on its hash?

https://docs.microsoft.com/en-us/windows-server/identity/sof...