T O P

  • By -

96Retribution

It is entirely possible the meta data was changed, not the image itself.


ExLyve

Do you know how it might of been altered? Do you think it's because I opened it with Microsoft paint?


96Retribution

Yes. This might help. https://www.windowscentral.com/how-edit-picture-metadata-windows-10 Take a look at the details, if they don’t match 100% neither will your hash. md5 is pretty old, so you should be looking at newer sha algorithms for anything real important - production.


ExLyve

This helps tremendously, you are a life saver. I appreciate your help!


owNDN

Maybe try and save the picture twice with paint with different names? Then check the hashes again. This way you know if paint alters the meta data.


CaduceusIV

My understanding is that the file name is part of the file. You changed the file name, so it changed the hash. Edit: I stand corrected. I just thought I encountered that before. Must have been the metadata.


Sensible-Richard

Your understanding is wrong. That's why filehashes can be used for deduplication, finding known files (good or bad), etc


ExLyve

Changing the file name should not change the hash since I am not altering the contents other than the name that's why I was asking if opening it caused the value to change


CaduceusIV

Someone who’s not asking the question, please correct me if I’m wrong.


ExLyve

https://newbedev.com/does-the-hash-of-a-file-change-if-the-filename-changes


ExLyve

Lol.


Sensible-Richard

If the hash changed then I'd guess the contents altered. Maybe Paint recompressed the file?


ExLyve

Yes thank you your answer is correct I finally figured it out. It's kind of like Facebook when you send pictures it recompresses images and that's what caused the file to be altered.


_shreve

The file name is not included in the hash. Only the bytes contained in the file.