THREAT INDICATORS (16)
Suspicious file manipulation behavior - possibly Ransomware
MITRE: Impact [T1485][T1486]
Behaves like ransomware in its file operations