It often creates scheduled tasks to automatically renew this "fake" activation every few days, ensuring the OS remains "active".

If you find this file on your system, security professionals generally recommend:

Yes, legitimate hack tools are detected as “riskware” or “hacktool,” not as a virus. However, because these tools often come bundled with malware, most security experts advise treating any detection as a threat.

* Kaspersky Total Security. * KTS 21.3.10.391: Не удается настроить исключение для AAct. Kaspersky Support Forum