DEVCON_X64.EXE – Unclassified Malware removal

DEVCON_X64.EXE size: 87672 bytes
DEVCON_X64.EXE hash: 68DD313030CE594585FE5BF6C30FC573

Created files:

%TEMP%\RootGenius\adb.exe
%TEMP%\RootGenius\AdbWinApi.dll
%TEMP%\RootGenius\AdbWinUsbApi.dll
%TEMP%\RootGenius\android_driver\devcon_x64.exe
%TEMP%\RootGenius\android_driver\devcon_x86.exe
%TEMP%\RootGenius\Data\Apk\KingUser.apk
%TEMP%\RootGenius\Data\Apk\lbesec_shuame.apk
%TEMP%\RootGenius\Data\Apk\StayAwake.apk
%TEMP%\RootGenius\Data\Bin\busybox
%TEMP%\RootGenius\Data\Bin\fakebackup.ab
%TEMP%\RootGenius\Data\Bin\lbesu
%TEMP%\RootGenius\Data\Bin\rgs
%TEMP%\RootGenius\Data\Bin\su
%TEMP%\RootGenius\Data\Bin\su1
%TEMP%\RootGenius\zlib1.dll

Detected by UnHackMe:

DEVCON_X64.EXE
Default location: %TEMP%\ROOTGENIUS\ANDROID_DRIVER\DEVCON_X64.EXE

Dropper information:
MD5: 7abbea4ea2b642a0719c9848c14bd3f5
File size: 5382776 bytes