2025-10-28 by Micah Babinski (@mbabinski)
Services created as part of this application installation and usage will create or rename files with a .crypt extension.
According to mthcht's Awesome List of Ransomware Extensions, the .crypt extension is associated with FindZip ransomware.
Initiating processes observed creating or renaming the .crypt files include backgroundtaskhost.exe, setuphost.exe, and svchost.exe.