📎 AI Summary:
The discussion revolves around an unexpected occurrence of files being saved with a .ram extension during the "save as" process on Windows. The original poster is concerned about how this is happening, as .ram files are typically associated with audio files, but no related software has been installed. Responders suggest examining the file's initial bytes and enabling advanced auditing to trace its origin, with one hypothesis pointing to automation tools like Adobe Bridge. Overall, the thread reflects curiosity and investigative troubleshooting regarding the mysterious .ram files.
T

techquest

Well-Known Member
Joined
Mar 29, 2023
Messages
10
Thread Author #1
have come across a situation where a file is stored with .ram extension instead of its default extension,so is there any shortcut on windows operating system to store file as .ram file,felt like some shortcut unexpectedly created it,can someone help on this? curious to know what might have happened
 

Solution
Neemobeer
You would have to look at the first 16 bytes of the file to known what they really are. I also had to search the net as I was not familiar with a .ram file. Without some time of EDR you'll not likely be able to track down what created the file.

At best you could enable advanced auditing for process creation and review that periodically to see what is creating the file.
Sort by date Sort by votes
Neemobeer

Neemobeer

Windows Forum Team
Staff member
Joined
Jul 4, 2015
Messages
8,995
#2
File extensions can be assigned anything. The are only used for the explorer process to help determine icons and what to open the file with. Anything could add any extension value to a file.
 

Upvote 0 Downvote
T

techquest

Well-Known Member
Joined
Mar 29, 2023
Messages
10
Thread Author #3
thanks for replying,my concern here is generally to my knowledge this shouldn't happen and it never happened till date,there are no such cases where it should get saved as .ram,so just trying to understand this,
and since .ram is used for some audio files as searched on internet,but there are no such softwares installed and so as a result there is no such case where some or other file can get saved as with .ram file extension,it is not manually saved as .ram but just when trying to opt "save as" somehow it is saved as .ram,your inputs are appreciated on this.
 

Upvote 0 Downvote
Neemobeer

Neemobeer

Windows Forum Team
Staff member
Joined
Jul 4, 2015
Messages
8,995
#4
You would have to look at the first 16 bytes of the file to known what they really are. I also had to search the net as I was not familiar with a .ram file. Without some time of EDR you'll not likely be able to track down what created the file.

At best you could enable advanced auditing for process creation and review that periodically to see what is creating the file.
 

Upvote 1 Downvote
Solution
You must log in or register to reply here.