home

eu3_v5.1.exe

Divine Wind

Paradox Interactive

The program is a setup application that uses the Inno Setup installer. This is installed with Divine Wind version 5.1. The file has been seen being downloaded from i.download.idg.pl and multiple other hosts.
Publisher:
Paradox Interactive

Product:
Divine Wind

Description:
Divine Wind Setup

MD5:
e292cc501176e42fd79b2f5c11fa0fdf

SHA-1:
bb786ca7715099e555745377647a89c480b91d61

SHA-256:
10e6ae48df98f56bd6b8b5e687fe0a21dbb99d605fd70ff8f454a3349e73e7cf

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/29/2024 8:51:34 AM UTC  (today)

File size:
19.4 MB (20,312,160 bytes)

Product version:
5.1

File type:
Executable application (Win32 EXE)

Installer:
Inno Setup

Common path:
C:\users\{user}\downloads\eu3_v5.1.exe

File PE Metadata
Compilation timestamp:
6/20/1992 12:22:17 AM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
393216:MJJUW1GikOqIqLUzxEX0DfArud6bS3MzB3cyuwnqGwZsFHMjuOBaqxYGcQe5ZFw:/vpjExEXYwu0bSsqyPq2dMjvBb+OWZFw

Entry address:
0x9C40

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, 86, 94, FF, FF, E8, 8D, A6, FF, FF, E8, 1C, A9, FF, FF, E8, 53, C9, FF, FF, E8, 9A, C9, FF, FF, E8, C9, F2, FF, FF, E8, 30, F4, FF, FF, 33, C0, 55, 68, FC, A2, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, C5, A2, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 96, FE, FF, FF, E8, C9, FA, FF, FF, 8D, 55, F0, 33, C0, E8, 83, CF, FF, FF, 8B, 55, F0, B8, E8, CD, 40, 00, E8, 32, 95, FF, FF, 6A, 02, 6A, 00, 6A, 01, 8B, 0D, E8, CD...
 
[+]

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
37 KB (37,888 bytes)

The file eu3_v5.1.exe has been discovered within the following program.

Divine Wind version 5.1  by Paradox Interactive
Divine Wind is the fourth expansion to Europa Universalis III. Play as one of four major daimyos in Japan vying for influence over the Emperor and control over the Shogunate.
www.paradoxplaza.com
About 3% of users remove it
 
Powered by Should I Remove It?

The file eu3_v5.1.exe has been seen being distributed by the following 7 URLs.

http://i.download.idg.pl/fannef/cbfa7b9ec1055932399e80832c422cb2/57c46b5e//zx/cyberjoy/patche/e/.../EU3_DivineWind_5.1_ddpatch.exe

http://i.download.idg.pl/fannef/d11d2ccc8b7e52d312d830467069c399/56f5e8d1//zx/cyberjoy/patche/e/.../EU3_DivineWind_5.1_ddpatch.exe

http://i.download.idg.pl/fannef/0a7b5fc6c504e61d3df2d2c5d7138b5f/57516cf0//zx/cyberjoy/patche/e/.../EU3_DivineWind_5.1_ddpatch.exe

http://i.download.idg.pl/fannef/af4828b4c517b79398496a57a537bfea/563335b5//zx/cyberjoy/patche/e/.../EU3_DivineWind_5.1_ddpatch.exe

http://i.download.idg.pl/fannef/2dbf280054289f25602115e66fa96f35/566453b4//zx/cyberjoy/patche/e/.../EU3_DivineWind_5.1_ddpatch.exe

http://old.paradoxplaza.com/in-game/.../eu3_v5.1.exe

http://download2us.softpedia.com/dl/9a1fb49966da68eadc18d6811c769a53/52001d1c/200095204/games/.../EU3_DivineWind_5.1_ddpatch.exe

Scan eu3_v5.1.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.