Here is a tria.ge demonstration of this: https://tria.ge/250731-bnmm7syqt6/behavioral1 This is NOT ransomware. All of those detections are false positives.