DEVCON_X64.EXE – Unclassified Malware removal

DEVCON_X64.EXE size: 87672 bytes
DEVCON_X64.EXE hash: 68DD313030CE594585FE5BF6C30FC573

Created files:

%TEMP%\RootGenius\AdbWinApi.dll
%TEMP%\RootGenius\AdbWinUsbApi.dll
%TEMP%\RootGenius\android_driver\devcon_x64.exe
%TEMP%\RootGenius\android_driver\devcon_x86.exe
%TEMP%\RootGenius\Data\Apk\KingUser.apk
%TEMP%\RootGenius\Data\Apk\StayAwake.apk
%TEMP%\RootGenius\Data\Bin\busybox
%TEMP%\RootGenius\Data\Bin\fakebackup.ab
%TEMP%\RootGenius\Data\Bin\install-recovery.sh
%TEMP%\RootGenius\Data\Bin\ksud
%TEMP%\RootGenius\Data\Bin\rgs
%TEMP%\RootGenius\Data\Bin\su
%TEMP%\RootGenius\Data\Bin\su1
%TEMP%\RootGenius\Data\Sol\20
%TEMP%\RootGenius\RootGenius.dll
%TEMP%\RootGenius\shuame_helper.exe
%TEMP%\RootGenius\zlib1.dll

Detected by UnHackMe:

DEVCON_X64.EXE
Default location: %TEMP%\ROOTGENIUS\ANDROID_DRIVER\DEVCON_X64.EXE

Dropper information:
MD5: 5782f0967cb48f70b5b59b32942f416c
File size: 4930680 bytes