They calculate hashes for files and probably compare them to already reported ones