only check hash, not file size