bug - downloads wrong files

[eran667]

Some times when I download a dll it downloads a file with a different hash than it is written.
for example the dll wiatrace.dll

• x64 | 10.0.19041.21 (sha256 - 5ebfeb8c26339d811ce77c286be26925c4e5d2d0f9e37ba2375438f5b51e650c)
• x64 | 10.0.19041.450 (sha256 - 9ad91cc28cbc6cb010911427a9b3d406a193d13f05f85e58ed7af01e8d9e3b2f)

but when I download them both of the files have the same hash: sha256 - 7e442ef73a0a425422085390496de05275930ea60e3ea1806e68c3566e0fb2f5

https://winbindex.m417z.com/?file=wiatrace.dll

[m417z]

This is a known limitation.

The two files have the same code and data, but different metadata (such as version info, digital signature). In this case the generated link is the same, and you get some file with the same code and data. The metadata and hash may or may not be the same as one of the files listed in Winbindex (in this case it isn't, you get a file of version 10.0.19041.443).

Proof - all sections but .rsrc are the same.

For more details, read the section about collisions in the blog post.