home

RemoveDrive.exe

RemoveDrive

Uwe Sieber - www.uwe-sieber.de

Publisher:
Uwe Sieber - www.uwe-sieber.de

Product:
RemoveDrive

Description:
RemoveDrive (Win32) - Prepares drives for safe removal

Version:
2,1,1,0

MD5:
4fbbeac254672e1a14f3c3c86de7ebe7

SHA-1:
842c86d8211021159f981c7e029ef2ca628020a8

SHA-256:
a0c1b9b7d55c850a8d0d7cd6a640a8cc4aa5c617008dc9c44d43d735abd23089

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
1/1/2025 7:57:45 AM UTC  (today)

File size:
38.5 KB (39,424 bytes)

Product version:
2,1,1,0

Copyright:
Copyright © 2005-2011 Uwe Sieber

Original file name:
RemoveDrive.exe

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\Program Files\musicbee\removedrive.exe

File PE Metadata
Compilation timestamp:
4/24/2011 3:31:57 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows Console

Linker version:
9.0

CTPH (ssdeep):
768:vOpQXQCOnmI2JNtixiPF7NxtDBnTOkLoTp2Mcwf:vOGXcQE8FRNnBLoTpt

Entry address:
0x2248

Entry point:
55, 8B, EC, 81, EC, 84, 00, 00, 00, 56, FF, 15, E8, 70, 40, 00, A3, 14, A9, 40, 00, 8D, 85, 7C, FF, FF, FF, 50, 8D, 75, FC, E8, C8, FE, FF, FF, 8D, 85, 7C, FF, FF, FF, 50, FF, 75, FC, E8, 49, 15, 00, 00, 59, 59, 50, FF, 15, EC, 70, 40, 00, CC, 56, 8B, 35, 58, 71, 40, 00, EB, 0B, 68, E8, 03, 00, 00, FF, 15, 68, 70, 40, 00, FF, 74, 24, 08, 6A, 08, FF, 35, 14, A9, 40, 00, FF, D6, 85, C0, 74, E3, 5E, C3, FF, 74, 24, 04, 6A, 00, FF, 35, 14, A9, 40, 00, FF, 15, F4, 70, 40, 00, C3, 55, 8B, EC, 8A, 10, 81, EC, 00...
 
[+]

Entropy:
5.4719

Developed / compiled with:
Microsoft Visual C++

Code size:
21 KB (21,504 bytes)

The file RemoveDrive.exe has been discovered within the following programs.

MusicBee  by Steven Mayall
MusicBee is a freeware digital media player and media library application for organizing and playing audio on Microsoft Windows operating systems using the BASS Audio Library. Audio CD playback and ripping (with CD-Text capabilities) is supported.
getmusicbee.com
About 8% of users remove it
 
Powered by Should I Remove It?

The file RemoveDrive.exe has been seen being distributed by the following 3 URLs.

http://download.tecnomotor.com.br/?RastherPcBeta/.../rvd_x86.exe

http://download.tecnomotor.com.br/?RastherPc/.../rvd_x86.exe

http://download.tecnomotor.com.br/?RastherPc/.../rvd_x86.exe

Scan RemoveDrive.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.