Is this legit?

[Aleddra]

I downloaded a file. Launcher for EvE Online. Filename is suspicious:
EveLauncher-1990751.FzLtlh4IQJC7bI8-e7eIZg.exe
It's the second time i get a weird download name with Edge. Should i switch to another browser?

[emoticorpse]

THANK GOODNESS for a thread that isn't about trashing businesses.....anyways, let's see. You got a link for it? run it through virustotal?

[Aleddra]

What's a virustotal?

I tried downloading it on firefox, firefox filename was simple, but the EvE Online filename ended up the same. It changes everytime, first part is simple. File size is the same.

https://www.eveonline.com/download

[_I_]

looks close
https://www.eveonline.com/download

they do that to even the load across download servers

[emoticorpse]

Originally posted by Aleddra:

What's a virustotal?

I tried downloading it on firefox, firefox filename was simple, but the EvE Online filename ended up the same. It changes everytime, first part is simple. File size is the same.

https://www.eveonline.com/download

virustotal.com is a site like a antivirus site. But it works differently. You take a .exe and drag it into the window and it will have a bunch of antivirus sites scan that file at the same time and tell you what they all think of the file. If they all say it's good, then it's taken as safe. If they think it looks fishy they'll let you know.

Site looks legitimate (I'm not even sure what that site is, looks like a game?) and I got a similar file. Virustotal says it looks good so I'd trust it.

[Aleddra]

It passed on every tag listed on viruttotal. So i guess it's clean, right?

[emoticorpse]

Originally posted by Aleddra:

It passed on every tag listed on viruttotal. So i guess it's clean, right?

I'd say so. You still want to consider everything else like how you landed on the site and the context of the file. But If this is a real game and that's a real legitimate link and all that then it really should be ok.

[Azza ☠]

The filename should be: EveLauncher-1990751.exe

The FzLtlh4IQJC7bI8-e7eIZg part might just be due to Microsoft Edge adding it temporary while the file is being downloaded. It hasn't finished downloading, but should rename itself while completed.

Check under the download manager for Microsoft Edge or the downloads drop down list, does the file say "Failed"? If so, it might give you a resume option to attempt to continue off from where it failed rather than starting from the beginning.

If not, clear out your temporary internet files or use the app CCleaner to do that plus more.

Then try downloading the file again, it should be from the URL:
https://www.eveonline.com/EveLauncher-1990751.exe

[emoticorpse]

Originally posted by Azza ☠:

The filename should be: EveLauncher-1990751.exe

The FzLtlh4IQJC7bI8-e7eIZg part might just be due to Microsoft Edge adding it temporary while the file is being downloaded. It hasn't finished downloading, but should rename itself while completed.

Check under the download manager for Microsoft Edge or the downloads drop down list, does the file say "Failed"? If so, it might give you a resume option to attempt to continue off from where it failed rather than starting from the beginning.

If not, clear out your temporary internet files or use the app CCleaner to do that plus more.

Then try downloading the file again, it should be from the URL:
https://www.eveonline.com/EveLauncher-1990751.exe

I downloaded it also and ended up with a similar file ending with a different string of characters so I have a feeling it's the site offering a renamed file for each downloader for their own reason?

Edit: I'm not even using edge, I'm using Brave (based on Chrome)

[Azza ☠]

Originally posted by emoticorpse:

Originally posted by Azza ☠:

The filename should be: EveLauncher-1990751.exe

The FzLtlh4IQJC7bI8-e7eIZg part might just be due to Microsoft Edge adding it temporary while the file is being downloaded. It hasn't finished downloading, but should rename itself while completed.

Check under the download manager for Microsoft Edge or the downloads drop down list, does the file say "Failed"? If so, it might give you a resume option to attempt to continue off from where it failed rather than starting from the beginning.

If not, clear out your temporary internet files or use the app CCleaner to do that plus more.

Then try downloading the file again, it should be from the URL:
https://www.eveonline.com/EveLauncher-1990751.exe

I downloaded it also and ended up with a similar file ending with a different string of characters so I have a feeling it's the site offering a renamed file for each downloader for their own reason?

Well I just tested it and didn't. It's a tiny installer file and virus check suggests it's clean.

[emoticorpse]

Originally posted by Azza ☠:

Originally posted by emoticorpse:

I downloaded it also and ended up with a similar file ending with a different string of characters so I have a feeling it's the site offering a renamed file for each downloader for their own reason?

Well I just tested it and didn't. It's a tiny installer file and virus check suggests it's clean.

do you have a sha1 of your file? mine's c46e1e5cbe5e5e9facb7f110b47b4f49e2343d5d

Although even if they were different I'd still trust it. I wouldn't be able to explain the differences unless the site is advanced enough to offer every downloader a successfully on the fly packaged virus that managed to be undetected for all sites.

Also tiny installer? mine's 90 GB.

[Azza ☠]

Originally posted by emoticorpse:

Originally posted by Azza ☠:

Well I just tested it and didn't. It's a tiny installer file and virus check suggests it's clean.

do you have a sha1 of your file? mine's c46e1e5cbe5e5e9facb7f110b47b4f49e2343d5d

Although even if they were different I'd still trust it. I wouldn't be able to explain the differences unless the site is advanced enough to offer every downloader a successfully on the fly packaged virus that managed to be undetected for all sites.

Also tiny installer? mine's 90 GB.

Managed to recreate it and yeah it's the same file. It's coming from a S3 Amazon Cloud Front (cloud network), so the renaming of the file is just from a script server load balancing it.

Right-click the file

It should be 88.1 MB (92,407,960 bytes), that's approx 90 MB (not GB)

Digital signature: CCP ehf (Entrusted Timestamp Authority)

Checking SHA1:

certutil -hashfile .\EveLauncher-1990751.exe
c46e1e5cbe5e5e9facb7f110b47b4f49e2343d5d

certutil -hashfile .\EveLauncher-1990751.U6p8gpA4T-KJxJw6mOoahQ.exe
c46e1e5cbe5e5e9facb7f110b47b4f49e2343d5d

Verfied and confirmed it's virus free too

[plat]

In general, VirusTotal is a "warehouse" of about 67 engines that determine whether a file or url is malicious or not. I just scanned emoticorpse's sha in post 10--all clean. VirusTotal can on occasion provide false alarms because the file may be very new and various engines haven't whitelisted it yet. That happened with UserBenchmark not too long ago (it's since tested clean once BitDefender cleared it).

You can also scan the url of the download site via VirusTotal.

VirusTotal is a subsidiary of Google. That's why I use Jotti portable myself.

[emoticorpse]

Originally posted by Azza ☠:

Originally posted by emoticorpse:

do you have a sha1 of your file? mine's c46e1e5cbe5e5e9facb7f110b47b4f49e2343d5d

Although even if they were different I'd still trust it. I wouldn't be able to explain the differences unless the site is advanced enough to offer every downloader a successfully on the fly packaged virus that managed to be undetected for all sites.

Also tiny installer? mine's 90 GB.

Managed to recreate it and yeah it's the same file. It's coming from a S3 Amazon Cloud Front (cloud network), so the renaming of the file is just from a script server load balancing it.

Right-click the file

It should be 88.1 MB (92,407,960 bytes), that's approx 90 MB (not GB)

Digital signature: CCP ehf (Entrusted Timestamp Authority)

Checking SHA1:

certutil -hashfile .\EveLauncher-1990751.U6p8gpA4T-KJxJw6mOoahQ.exe
c46e1e5cbe5e5e9facb7f110b47b4f49e2343d5d

Verfied and confirmed it's virus free too

Oh yeah heh 90 mb is what I meant

[_I_]

or you can grab the steam version
https://store.steampowered.com/app/8500/EVE_Online/

[Jamebonds1]

Online game installer usual have weird filenames. I do that many time in college.