DEVCON_X86.EXE – Unclassified Malware removal

DEVCON_X86.EXE size: 83576 bytes
DEVCON_X86.EXE hash: 13468A05C81CB1E83E22ED540D2B378F

Created files:

%TEMP%\RootGenius\adb.exe
%TEMP%\RootGenius\AdbWinApi.dll
%TEMP%\RootGenius\AdbWinUsbApi.dll
%TEMP%\RootGenius\android_driver\devcon_x64.exe
%TEMP%\RootGenius\android_driver\devcon_x86.exe
%TEMP%\RootGenius\Data\Apk\KingUser.apk
%TEMP%\RootGenius\Data\Apk\lbesec_shuame.apk
%TEMP%\RootGenius\Data\Apk\StayAwake.apk
%TEMP%\RootGenius\Data\Bin\busybox
%TEMP%\RootGenius\Data\Bin\fakebackup.ab
%TEMP%\RootGenius\Data\Bin\lbesu
%TEMP%\RootGenius\Data\Bin\rgs
%TEMP%\RootGenius\Data\Bin\su
%TEMP%\RootGenius\Data\Bin\su1
%TEMP%\RootGenius\zlib1.dll

Detected by UnHackMe:

DEVCON_X86.EXE
Default location: %TEMP%\ROOTGENIUS\ANDROID_DRIVER\DEVCON_X86.EXE

Dropper information:
MD5: 7abbea4ea2b642a0719c9848c14bd3f5
File size: 5382776 bytes