Even the genuine Ratiborus tool is flagged as "Hacktool:Win32/AutoKMS" by Microsoft Defender. This is not a false positive in the traditional sense—the tool is intentionally hacking your OS. Granting it administrator access is like giving a stranger the keys to your house.
A community-vetted, open-source alternative on GitHub (like those found via Descargar Ratiborus Kms Tools