DEVCON_X64.EXE – Unclassified Malware removal

DEVCON_X64.EXE size: 87672 bytes
DEVCON_X64.EXE hash: 68DD313030CE594585FE5BF6C30FC573

Created files:

%TEMP%\RootGenius\AdbWinApi.dll
%TEMP%\RootGenius\AdbWinUsbApi.dll
%TEMP%\RootGenius\android_driver\devcon_x64.exe
%TEMP%\RootGenius\android_driver\devcon_x86.exe
%TEMP%\RootGenius\Data\Apk\KingUser.apk
%TEMP%\RootGenius\Data\Apk\StayAwake.apk
%TEMP%\RootGenius\Data\Bin\busybox
%TEMP%\RootGenius\Data\Bin\fakebackup.ab
%TEMP%\RootGenius\Data\Bin\install-recovery.sh
%TEMP%\RootGenius\Data\Bin\ksud
%TEMP%\RootGenius\Data\Bin\rgs
%TEMP%\RootGenius\Data\Bin\su
%TEMP%\RootGenius\Data\Bin\su1
%TEMP%\RootGenius\shuame_helper.exe
%TEMP%\RootGenius\zlib1.dll

Detected by UnHackMe:

DEVCON_X64.EXE
Default location: %TEMP%\ROOTGENIUS\ANDROID_DRIVER\DEVCON_X64.EXE

Dropper information:
MD5: 1f4854129147a7895b64ffd70af6b58f
File size: 5294200 bytes