Application License check being blocked

[SixtyNine]

Malwarebytes
www.malwarebytes.com

-Log Details-
Protection Event Date: 9/14/23
Protection Event Time: 10:16 AM
Log File: 61d9edd2-52df-11ee-91eb-20cf3064b32a.json

-Software Information-
Version: 4.6.1.280
Components Version: 1.0.2117
Update Package Version: 1.0.75283
License: Premium

-System Information-
OS: Windows 10 (Build 19045.3448)
CPU: x64
File System: NTFS
User: System

-Exploit Details-
File: 0
(No malicious items detected)

Exploit: 1
Exploit.PayloadProcessBlock, C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command echo (Get-WmiObject Win32_ComputerSystemProduct | Select-Object -ExpandProperty UUID), Blocked, 701, 392684, 0.0.0, ,

-Exploit Data-
Affected Application: cmd
Protection Layer: Application Behavior Protection
Protection Technique: Exploit payload process blocked
File Name: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command echo (Get-WmiObject Win32_ComputerSystemProduct | Select-Object -ExpandProperty UUID)
URL:

 

(end)

[Porthos]

@SixtyNine How often does this license check happen and what application is it?

[SixtyNine]

Hello, Thank you for responding. The check seemed to occur when the application was first initialised each day.

Since then I have negotiated with the supplier of the application to provide me with an alternative offline check (keyfile) so although the issue itself was not resolved it no longer affects me.

[Porthos]

The beta that was released today has the anti-exploit fix included.

You may get the beta by enabling BETA updates and checking for updates.

This is the version with the fix.