It then creates a zip file with the name <uniqueId>.zip (note that the unique ID is not a real device ID, the malware just calculates a  custom unique ID based on the device ID value), and writes the files into the compressed file.