The Extract_OEM_Folder.cmd File Analysis

Updated 27 days ago

Checked by Malaware Check

Extract_OEM_Folder.cmd

Technical Analysis

File Name	Extract_OEM_Folder.cmd
File Type	DOS batch file
Magic Bytes	`DOS batch file, ASCII text, with CRLF line terminators`
SSDEEP Hash	192:uAxP0lwUdxlc3pi7dKYHCuDHKQFIqpqChXAN8+znDeG3QWzDMUjkWzbY2/oWzXLO:Kxu3pi7ojopqChAN8+jbxmQByjJJ
Scanner Version	1.0.216.174
Database Version	2025-05-11 05:00:22 UTC

⚠

Suspicious File Detected

Detected by 12 security engines - requires caution

This file requires additional checking for potential threats. Based on suspicious indicators, we will soon add it to our virus database.

AutoKMS is a tool associated with illegal Microsoft software activation that bypasses legitimate licensing processes. It introduces security risks and potential legal consequences.

20%

Detection Rate

20,548

File Size (bytes)

12/61

Engines Detected

2025-05-11

Analysis Date

Scan Another File

File Identification

Hash Type	Value	Action
MD5	dcf1dab10c501c7c5f45d21827a23764
SHA1	24f89198d09f833022b93e41e76ee34b08b1880d
SHA256	3bed8da24c3fe2443f2209840e8e56c7e62869f175461a389711c50cc388be34
SHA512	7e5ad5f5ad52d6d133d94473ab59236cbba9c8bbc7699909f966bc5e2721efddb967ad1e2ec4ec91a1320e89a0b033fd2e858136f80baf1038763ae54e48e77c

Security Engines with Detections (12 of 61)

Lionic

Hacktool.Script.KMSAuto.3!c Malicious

ALYac

Generic.Application.HackTool.KMS.A.66F3EFBB Malicious

Arcabit

Generic.Application.HackTool.KMS.A.66F3EFBB Malicious

TrendMicro-HouseCall

HackTool.BAT.AutoKMS.I Malicious

Kaspersky

HEUR:HackTool.Script.KMSAuto.gen Malicious

BitDefender

Generic.Application.HackTool.KMS.A.66F3EFBB Malicious

MicroWorld-eScan

Generic.Application.HackTool.KMS.A.66F3EFBB Malicious

VIPRE

Generic.Application.HackTool.KMS.A.66F3EFBB Malicious

TrendMicro

HackTool.BAT.AutoKMS.I Malicious

FireEye

Generic.Application.HackTool.KMS.A.66F3EFBB Malicious

GData

Generic.Application.HackTool.KMS.A.66F3EFBB Malicious

Ikarus

PUA.HackTool Malicious

49 engines reported no threats - Only engines with detections are shown above for clarity

Remember: This is Result of Online Virus Scanner

Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:

Download Anti-Malware

Keep Your System Protected

This file appears clean, but regular security maintenance is important

Regular Scans: Run weekly system scans to detect new threats before they can cause damage.
Keep Software Updated: Ensure your operating system and all applications have the latest security patches.
Safe Browsing: Avoid suspicious websites and never download software from untrusted sources.
Email Security: Be cautious with email attachments and links, even from known contacts.

Proactive Protection

12 antivirus engines detected potential threats. This could be a false positive, especially for system tools or packed software. Verify the file source and check if it's digitally signed by a trusted publisher.

Leave a Comment

Share your thoughts or insights about this file. Do you align with our conclusion?

* Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.

Your Score for

5 4 3 2 1

Gridinsoft Anti-Malware

Cure your PC from any kind of malware

GridinSoft Anti-Malware will help you to protect your computer from spyware, trojans, backdoors, rootkits. It cleans your system from annoying advertisement modules and other malicious stuff developed by hackers.

Anti-Malware Download Now

Gridinsoft Anti-Malware