The hash-registry.properties file included in Confluence distributions since CONF-13627 was implemented does not include the class files from the confluence.jar (or anywhere else). This means if customers modify classes then modification detection will not report it at all.