One the infection is present, the malware
begins encrypting files and folders on local drives, any attached drives, backup drives, and potentially other computers on the same network that the victim computer is attached to.
offset of local header from start of archive: 0 (0000000000000000h) bytes
file system or operating system of origin: Unix version of encoding software: 2.0 minimum
file system compatibility required: Unix minimum software version required to extract: 1.0 compression method: none (stored)
file security status: not
encrypted extended local header: no
file last modified on (DOS date / time): 2011 Jan 1 12:00:00 32 - bit CRC value (hex): 00000000 compressed size: 0 bytes uncompressed size: 0 bytes length of filename: 5 characters length of extra field: 0 bytes length of
file comment: 0 characters disk number on which
file begins: disk 1 apparent
file type: binary Unix
file attributes (040755 octal): drwxr - xr - x MS - DOS
file attributes (10 hex): dir