DEVCON_X64.EXE – Unclassified Malware removal

DEVCON_X64.EXE size: 87672 bytes
DEVCON_X64.EXE hash: 68DD313030CE594585FE5BF6C30FC573

Created files:

%TEMP%\629C6.dmp
%TEMP%\RootGenius\AdbWinApi.dll
%TEMP%\RootGenius\AdbWinUsbApi.dll
%TEMP%\RootGenius\android_driver\devcon_x64.exe
%TEMP%\RootGenius\android_driver\devcon_x86.exe
%TEMP%\RootGenius\Data\Apk\KingUser.apk
%TEMP%\RootGenius\Data\Apk\StayAwake.apk
%TEMP%\RootGenius\Data\Bin\busybox
%TEMP%\RootGenius\Data\Bin\fakebackup.ab
%TEMP%\RootGenius\Data\Bin\install-recovery.sh
%TEMP%\RootGenius\Data\Bin\ksud
%TEMP%\RootGenius\Data\Bin\rgs
%TEMP%\RootGenius\Data\Bin\su
%TEMP%\RootGenius\Data\Bin\su1
%TEMP%\RootGenius\shuame_helper.exe
%TEMP%\RootGenius\zlib1.dll
%Common AppData%\Microsoft\Dr Watson\user.dmp

Detected by UnHackMe:

DEVCON_X64.EXE
Default location: %TEMP%\ROOTGENIUS\ANDROID_DRIVER\DEVCON_X64.EXE

Dropper information:
MD5: 09fe8335f4bd67a83c23e2f14337c17c
File size: 5093496 bytes