I ran across this malware on my computer and Avast did not pick it up. It doesn't do its dirty work it seems until you delete the text file then it renames most of your files and encrypts them. the renamed file has the extension .0xxx appended to it and the files are in fact encrypted. This appears to have happened sometime in 2022 and laid dormant until I stumbled upon the file.
I'm not sure why Avast didn't pick it up originally. Any ideas?
