CIS keep showing "elevated access" alert for trusted executables.

Why does it do that? Does it treat files bigger than certain size as install file (filesize in question is 150 mb)? Is that a bug?

Quote from the link: “If you select ‘Trust this application’ then CIS will include this to Trusted Files list and no future alerts will be generated when you run the same application.”. This does not happen, CIS still displays the alert (however the file IS present in trusted list).

Then the program modified itself from the original file and the file hash changed causing it to be unknown again. What files or program are we talking about here?

Epic Battle Fantasy 4 (on steam) EBF4.exe - 150 mb