When does ransomware go into action?

[readymix]

Does it strike immediately after downloading or run on a time delay.

 

[MustISO]

Typically the encryption/deletion of backups and shadow copies happens immediately after being launched. The prompt for payment may be delayed until that part is completed.