Microsoft introduced a similar feature in 2010. In that scheme, "file identifier" and the signature, if the application is signed, is sent to a cloud service [1][2][3]. Therefore they can track attempts for downloads, without having to know the URL itself.
How could they say "This file is not commonly downloaded" without knowing how often it is downloaded?
If they know how often files are downloaded, where are they receiving that information from?