Open g33khubber opened 1 year ago
4) 'similar images' is for finding, for example, the same image saved in two different formats (such as a jpeg and a bmp) or in two different sizes (such as 600x400 and also saved as 1200x800). Yes, it will be slower, because instead of simply hashing the contents to detect exact duplicates it uses some algorithm (I'm not sure which the dev is using) to 'intelligently' 'recognize' the two images as being the 'same' thing. It's like using Tineye or Google Reverse Image Search on your own computer.
5) Are they different? Did you manually check the contents of the file in a hex editor (some can even highlight any differences in the code)? Most likely they are in fact the exact same file used multiple times and given different names for reasons that make sense to the malwarebytes devs. Less likely is a hash collision. Aside from manually inspecting the files, you can also re-run the search using a different hash. It would even more unlikely for a hash collision to occur across multiple algorithms.
Thanks!