SynAck lists all the keyboard layouts installed on the victim’s system using "GetKeyboardLayoutList" API and checks against a hardcoded language code list. If a match if found, SynAck sleeps for 300 seconds and then exits without encrypting files.