: Creates a file named !!!_How_to_Decrypt_Files_!!!.txt or ReadMe.html in affected folders [4, 5]. Behavior :
: Scans the local network for SMB shares to encrypt mapped and unmapped network drives [5]. Technical Indicators snzh.7z
: Appends .snzh or .snooze to encrypted files [2, 4]. : Creates a file named