As someone affected by the ransomware - did anyone else notice empty console windows popping up from time to time the days before the ransomware triggered the encryption?
(PC gamers were particularly impacted by this, as the command prompt flickering would minimize full screen games...)