WinRAR flaw lets hackers run programs when you open RAR archives

Can someone explain why WinRar installers of the same exact versions and languages but downloaded from their different sites www.rarlab.com vs www.win-rar.com have different sizes/hashes while being signed by the same signer?

good question

3,595,296 winrar-x64-623-rarlab.exe

3,586,840 winrar-x64-623-win-rar.exe

sha-256

20739e8fc050187af013e2499718895e4c980699ccaf046b2f96b12497e61959 winrar-x64-623-win-rar.exe

3d019e60c0def88892ad89023d2e15133fc940fef140faeeaa414ad38f8ef3bf winrar-x64-623-rarlab.exe

Reminder that 7z can extract .rar files, and is open source!

Thanks for the heads-up.

7Zip, I believe, had a similar flaw "recently".

> 7Zip, I believe, had a similar flaw "recently".

why did you put quotes around that word?

Couldn't recall just how long it'd been.