It may install an emulated Key Management Service (KMS) server to fake corporate activation.
Malware that encrypts your personal files, photos, and documents, demanding payment to unlock them. W7lxe.exe Activation.zip
When he extracted it, there was no "ReadMe" or "License" file. Just the executable. He double-clicked. It may install an emulated Key Management Service