decrypt and encrypt Eset license.lf

[r2du-soft]

hi

I set up an internal server eset

my server can give update from versions 4,5,6,7,8,9,10 and 11.1.42.0 (Antivirus,Smart Security,Internet Security,Smart Security Premium)

after 11.1.42.0 eset change the Activation Method and input activation all Sections (computer protection,internet protection,network protection,security tools) in license.lf file in patch: C:\ProgramData\ESET\ESET Security\License

now in new versions (11.1.54.0 and 11.2.49.0) i'm somewhat successful in activating. now eset color is green but now i want active all sections (computer protection,internet protection,network protection,security tools)

to do this i must make changes to the license.lf  file.
i know a part of the file is encrypted and when i creation the slightest change in file,license.lf  broken!
now i need the help for decrypy the license.lf  file for change Expire time without broken file!

What do you think of this?

 

i  put license.lf file in attach to view and test

 

Site: https://www.upload.ee
Sharecode: /files/8748211/license.zip.html

 

[knowledge-Spammer]

u do see it have name and email inside it u is sure u want all to see the email  and things ?

[r2du-soft]

yes!  not problem

we want find a way to decrypt and change license expire date in license.lf file

The easily way to access the file content is open license.lf with notepad and see the texts

 

½q™
Të­ ئ„4W¾ُگچ،è#.إظ©3hڑï؛+Ys	-“¯);a)بê“PŒچ¥”†
و.®¦êآ>زsِ?aœثxz9ë88÷"cü.ّي™è‰ë5Hآ×فو«÷.@4)؛ذّ¾ژ¦_)…‎¬;.èlç3j"Nف¦*²‚ئش7l%@ئ·طâ ‚ع‰ژ”§حکKسضں2·ئüqثo _¬`ؤ©J¼*%œ2ژ4AEسٹ؛ ڈإ,y“êش.ےxغ؛'ـ*؛بں
u^ُ/t»جj< )'ُOق•‰±0_•ˆ$AىكؤٌاهYطünV°ٍI‏¢أD›.:عjہ@طچîد#  ´ ESET License Signing Certificate‰
 Të¹ 
	p„ضےî6ہڑ¥ ¦³ضoاûھ‏¯—؛(ل]–سàüج	3¾ثMز/ƒZ	¸ہ£b;گزر‍ ùڈ‎_C ز5wL¬¢tا:‹،ٹbeوw”"‍PY مêi³=”ûةد¢ْ|F€|إ*ح”6	ى4,¶*èب1G©ًûضugu¥Pڑï³—ù„ ُ‘²³Aعw箽½ن,Eسٹ×ٍp­!¥ 8Iٍ·!Mژêpع"ؤ<! ٌچŒلإuNµهغ\à؛uiث/ژ†\;§ث"ü\3‏ُ‏فHY¯Rqضو<r¤VwU
¾ز”*ëًهvaأ,2‰>§َ{	ƒmإ؟‹نبûگ‰ Tي\ 
	iڑ"ء.Oà‏‌w‏1ش^¶غ«W/î³»ƒهnر¸ˆJ2{>ƒN!k آO±/XُnيىزSؤق’¬E§»±”\€%aط¦x-z›Vœ،–}}V‚ئ+@ڑبmûmص~ِ´m6‚~‍ s?OôرKôؤq"HTدچkہَK،گخ?ذ8rîe€é!-«â[‡،ئْ«W^ژ ‍ّü؛ˆ°ے-·ا¬\”فتâن	ˆ²Bل¦2?ئ©5I3ہ‏2§÷†®پX÷ؤ¯Y•@·قèْ‍gçظسض+´×Mئ®8خ ژU4±I–گFNO&UI\حiY0ءv]êؤ؟“¶‘O9>ئگ
 
p„ضےî6ہ ­بb []€آ< ? x m l   v e r s i o n = " 1 . 0 "   e n c o d i n g = " u t f - 1 6 " ? > < E S E T   s c h e m a L o c a t i o n = " h t t p s : / / h 3 - e d f d e v 0 1 - v . e s e t . c o m / s c h e m a / L i c e n s e F i l e V 2 . x s d " > < P R O D U C T _ L I C E N S E _ F I L E   V E R S I O N = " 2 . 0 "   I D = " 3 f a d 5 6 d 1 - 7 4 a 9 - 4 2 7 6 - 8 5 0 a - c 1 b a 3 7 e e 3 1 6 3 "   I S S U E _ D A T E = " 2 0 1 8 - 0 7 - 2 9 T 0 8 : 5 4 : 2 6 . 9 2 0 1 0 1 9 Z "   S E Q U E N C E = " 0 "   M A N A G I N G _ A P P L I C A T I O N _ T O K E N = " " > < L I C E N S E   P U B L I C _ I D = " 3 A B - V 8 G - V 9 R "   U S E R N A M E = " J N a V 6 Y v w 1 v J r Z A e t h 8 g v d d o x H 7 x 7 + O 0 M f 9 0 z 3 Q = = "   P A S S W O R D = " F N a 3 6 e T w k P J v Z A a t z 8 h 7 d Z o x S L w = "   T Y P E = " F U L L _ P A I D "   F L A G S = " 4 "   D I S P L A Y _ N A M E = " E S E T   I n t e r n e t   S e c u r i t y ,   E x p i r a t i o n   d a t e   :   8 / 3 1 / 2 0 1 8 ,   1   s e a t "   A C T I V A T I O N _ D A T E = " 2 0 1 7 - 0 8 - 3 1 T 1 2 : 1 2 : 3 1 . 9 6 7 "   C U S T O M E R _ I D = " a 2 d 0 1 c 7 8 - 9 2 9 1 - 4 9 c b - a 8 5 b - 9 3 c 6 c d b 1 a 1 d a "   C U S T O M E R _ N A M E = " r e z a   k h a d e m i   s h i r m a r d "   C U S T O M E R _ E M A I L = " r o s e S o f t . i r @ g m a i l . c o m "   N A V I G A T I O N _ T O K E N = " p u b l i c I d = 3 A B - V 8 G - V 9 R & a m p ; p a r t n e r I d = 1 9 & a m p ; b a t c h C o d e = A F A X - W 3 3 4 - G & a m p ; l i c P r o d C o d e = 1 4 0 & a m p ; l i c e n s e K e y S u f f i x = H A C 8 "   L I C E N S E _ K E Y _ S U F F I X = " H A C 8 "   D E A L _ C O D E = " "   R E N E W A B L E = " t r u e " > < U N I T _ Q U A N T I T I E S > < U N I T _ Q U A N T I T Y   T Y P E = " S E A T "   V O L U M E = " 1 "   / > < / U N I T _ Q U A N T I T I E S > < A C T I V E _ P R O D U C T   E X P I R A T I O N _ D A T E = " 2 0 1 8 - 0 8 - 3 1 T 1 2 : 0 0 : 0 0 Z "   E X T E N D E D _ P E R I O D = " 1 4 "   L I C E N S E _ S T A T U S = " A C T I V E "   P R O D U C T _ C O D E = " 1 4 0 "   P R O D U C T _ N A M E = " E S E T   I n t e r n e t   S e c u r i t y " > < F E A T U R E S > < F U N C T I O N A L I T I E S > < F U N C T I O N A L I T Y   C O D E = " A N T I T H E F T "   N A M E = " A N T I T H E F T "   / > < F U N C T I O N A L I T Y   C O D E = " P A R E N T A L "   N A M E = " P A R E N T A L "   / > < F U N C T I O N A L I T Y   C O D E = " A N T I S P A M "   N A M E = " A N T I S P A M "   / > < F U N C T I O N A L I T Y   C O D E = " F I R E W A L L "   N A M E = " F I R E W A L L "   / > < F U N C T I O N A L I T Y   C O D E = " A N T I V I R U S "   N A M E = " A N T I V I R U S "   / > < F U N C T I O N A L I T Y   C O D E = " D E V I C E _ C O N T R O L "   N A M E = " D E V I C E _ C O N T R O L "   / > < F U N C T I O N A L I T Y   C O D E = " W E B _ E M A I L _ P R O T E C T I O N "   N A M E = " W E B _ E M A I L _ P R O T E C T I O N "   / > < F U N C T I O N A L I T Y   C O D E = " B A N K I N G _ P R O T E C T I O N "   N A M E = " B A N K I N G _ P R O T E C T I O N "   / > < F U N C T I O N A L I T Y   C O D E = " W E B C A M _ P R O T E C T I O N "   N A M E = " W E B C A M _ P R O T E C T I O N "   / > < / F U N C T I O N A L I T I E S > < C U S T O M I Z A T I O N S   / > < / F E A T U R E S > < / A C T I V E _ P R O D U C T > < F R E E _ P R O D U C T   E X P I R A T I O N _ D A T E = " 2 0 1 8 - 0 8 - 3 1 T 1 2 : 0 0 : 0 0 Z "   P R O D U C T _ C O D E = " "   P R O D U C T _ N A M E = " " > < F E A T U R E S > < F U N C T I O N A L I T I E S > < F U N C T I O N A L I T Y   C O D E = " "   N A M E = " "   / > < / F U N C T I O N A L I T I E S > < / F E A T U R E S > < / F R E E _ P R O D U C T > < R E F E R R A L   C O D E = " "   U N I T S _ U S E D = " 0 "   / > < M O D E L   T Y P E = " T R A D I T I O N A L "   S T A T U S = " P R O D U C T I V E "   / > < / L I C E N S E > < / P R O D U C T _ L I C E N S E _ F I L E > < / E S E T > ‰ 
 []€آ 
	p„ضےî6ہH_ 
ة-Œ¢lإ	EO±‚‚6}"éa،ْP;ُ¼4
¤ُ. ¾ “$B¯vüّPuز¤7؛NE°¢‘rè	$™;t $ي®ٹِ+خ×kX.©~قLû؟‰Oن@	cuت™²ë@"è	ؤ>bxyڑ'ëcCPooO؛÷ِ*ٌC!@سر¸ظƒى‰“7…ôٍپç¾¼rںaُزرسé¯dـ!9îƒض^]G¸—j–jeذ6
¥´ے]ف×؟ؤˆ)q	‚îœTك²ہگEةhٹ~أ*VفQ_:ـ'&¼
{-ظزہ’_[ô؟؟ژإ’Gù<…±‹‎ذdb»زپ4D¥±4¸

 

With a bit of a change to the top file, you can see the following

 

½q™
Të­ئ„4W¾ُگچ،è#.إظ©3hڑï؛+Ys	-“¯);a)بê“PŒچ¥”†
و.®¦êآ>زsِ?aœثxz9ë88÷"cü.ّي™è‰ë5Hآ×فو«÷.@4)؛ذّ¾ژ¦_)…‎¬;.èlç3j"Nف¦*²‚ئش7l%@ئ·طâ‚ع‰ژ”§حکKسضں2·ئüqثo _¬`ؤ©J¼*%œ2ژ4AEسٹ؛ڈإ,y“êش.ےxغ؛'ـ*؛بں
u^ُ/t»جj<)'ُOق•‰±0_•ˆ$AىكؤٌاهYطünV°ٍI‏¢أD›.:عjہ@طچîد#´ESETLicenseSigningCertificate‰
Të¹
	p„ضےî6ہڑ¥¦³ضoاûھ‏¯—؛(ل]–سàüج	3¾ثMز/ƒZ	¸ہ£b;گزر‍ ùڈ‎_Cز5wL¬¢tا:‹،ٹbeوw”"‍PYمêi³=”ûةد¢ْ|F€|إ*ح”6	ى4,¶*èب1G©ًûضugu¥Pڑï³—ù„ُ‘²³Aعw箽½ن,Eسٹ×ٍp­!¥8Iٍ·!Mژêpع"ؤ<! ٌچŒلإuNµهغ\à؛uiث/ژ†\;§ث"ü\3‏ُ‏فHY¯Rqضو<r¤VwU
¾ز”*ëًهvaأ,2‰>§َ{	ƒmإ؟‹نبûگ‰Tي\
	iڑ"ء.Oà‏‌w‏1ش^¶غ«W/î³»ƒهnر¸ˆJ2{>ƒN!kآO±/XُnيىزSؤق’¬E§»±”\€%aط¦x-z›Vœ،–}}V‚ئ+@ڑبmûmص~ِ´m6‚~‍s?OôرKôؤq"HTدچkہَK،گخ?ذ8rîe€é!-«â[‡،ئْ«W^ژ‍ّü؛ˆ°ے-·ا¬\”فتâن	ˆ²Bل¦2?ئ©5I3ہ‏2§÷†®پX÷ؤ¯Y•@·قèْ‍gçظسض+´×Mئ®8خژU4±I–گFNO&UI\حiY0ءv]êؤ؟“¶‘O9>ئگ

p„ضےî6ہ­بb[]€آ
<?xmlversion="1.0"encoding="utf-16"?>
<ESETschemaLocation="https://h3-edfdev01-v.eset.com/schema/LicenseFileV2.xsd">
<PRODUCT_LICENSE_FILEVERSION="2.0"ID="3fad56d1-74a9-4276-850a-c1ba37ee3163"ISSUE_DATE="2018-07-29T08:54:26.9201019Z"SEQUENCE="0"MANAGING_APPLICATION_TOKEN="">
<LICENSEPUBLIC_ID="3AB-V8G-V9R"USERNAME="JNaV6Yvw1vJrZAeth8gvddoxH7x7+O0Mf90z3Q=="PASSWORD="FNa36eTwkPJvZAatz8h7dZoxSLw="TYPE="FULL_PAID"FLAGS="4"DISPLAY_NAME="ESETInternetSecurity,Expirationdate:8/31/2018,1seat"ACTIVATION_DATE="2017-08-31T12:12:31.967"CUSTOMER_ID="a2d01c78-9291-49cb-a85b-93c6cdb1a1da"CUSTOMER_NAME="rezakhademishirmard"CUSTOMER_EMAIL="[email protected]"NAVIGATION_TOKEN="publicId=3AB-V8G-V9R&amp;partnerId=19&amp;batchCode=AFAX-W334-G&amp;licProdCode=140&amp;licenseKeySuffix=HAC8"LICENSE_KEY_SUFFIX="HAC8"DEAL_CODE=""RENEWABLE="true">
<UNIT_QUANTITIES>
<UNIT_QUANTITYTYPE="SEAT"VOLUME="1"/>
</UNIT_QUANTITIES>
<ACTIVE_PRODUCTEXPIRATION_DATE="2018-08-31T12:00:00Z"EXTENDED_PERIOD="14"LICENSE_STATUS="ACTIVE"PRODUCT_CODE="140"PRODUCT_NAME="ESETInternetSecurity">
<FEATURES>
<FUNCTIONALITIES>
<FUNCTIONALITYCODE="ANTITHEFT"NAME="ANTITHEFT"/>
<FUNCTIONALITYCODE="PARENTAL"NAME="PARENTAL"/>
<FUNCTIONALITYCODE="ANTISPAM"NAME="ANTISPAM"/>
<FUNCTIONALITYCODE="FIREWALL"NAME="FIREWALL"/>
<FUNCTIONALITYCODE="ANTIVIRUS"NAME="ANTIVIRUS"/>
<FUNCTIONALITYCODE="DEVICE_CONTROL"NAME="DEVICE_CONTROL"/>
<FUNCTIONALITYCODE="WEB_EMAIL_PROTECTION"NAME="WEB_EMAIL_PROTECTION"/>
<FUNCTIONALITYCODE="BANKING_PROTECTION"NAME="BANKING_PROTECTION"/>
<FUNCTIONALITYCODE="WEBCAM_PROTECTION"NAME="WEBCAM_PROTECTION"/>
</FUNCTIONALITIES>
<CUSTOMIZATIONS/>
</FEATURES>
</ACTIVE_PRODUCT>
<FREE_PRODUCTEXPIRATION_DATE="2018-08-31T12:00:00Z"PRODUCT_CODE=""PRODUCT_NAME="">
<FEATURES>
<FUNCTIONALITIES>
<FUNCTIONALITYCODE=""NAME=""/>
</FUNCTIONALITIES>
</FEATURES>
</FREE_PRODUCT>
<REFERRALCODE=""UNITS_USED="0"/>
<MODELTYPE="TRADITIONAL"STATUS="PRODUCTIVE"/>
</LICENSE>
</PRODUCT_LICENSE_FILE>
</ESET>
‰
[]€آ
	p„ضےî6ہH_
ة-Œ¢lإ	EO±‚‚6}"éa،ْP;ُ¼4
¤ُ.¾“$B¯vüّPuز¤7؛NE°¢‘rè	$™;t $ي®ٹِ+خ×kX.©~قLû؟‰Oن@	cuت™²ë@"è	ؤ>bxyڑ'ëcCPooO؛÷ِ*ٌC!@سر¸ظƒى‰“7…ôٍپç¾¼rںaُزرسé¯dـ!9îƒض^]G¸—j–jeذ6
¥´ے]ف×؟ؤˆ)q	‚îœTك²ہگEةhٹ~أ*VفQ_:ـ'&¼
{-ظزہ’_[ô؟؟ژإ’Gù<…±‹‎ذdb»زپ4D¥±4¸

 

when i change the license.lf with WinHex and change dates 2018 to 2019 ,and after save changes,when i open the eset i see not loaded license and i know license.lf file broken

 

in license.lf text infoemation (up) i see some Unintelligible characters before open XML tag and after close tags:

 

Before XML Tags:

½q™
Të­ئ„4W¾ُگچ،è#.إظ©3hڑï؛+Ys	-“¯);a)بê“PŒچ¥”†
و.®¦êآ>زsِ?aœثxz9ë88÷"cü.ّي™è‰ë5Hآ×فو«÷.@4)؛ذّ¾ژ¦_)…‎¬;.èlç3j"Nف¦*²‚ئش7l%@ئ·طâ‚ع‰ژ”§حکKسضں2·ئüqثo _¬`ؤ©J¼*%œ2ژ4AEسٹ؛ڈإ,y“êش.ےxغ؛'ـ*؛بں
u^ُ/t»جj<)'ُOق•‰±0_•ˆ$AىكؤٌاهYطünV°ٍI‏¢أD›.:عjہ@طچîد#´ESETLicenseSigningCertificate‰
Të¹
	p„ضےî6ہڑ¥¦³ضoاûھ‏¯—؛(ل]–سàüج	3¾ثMز/ƒZ	¸ہ£b;گزر‍ ùڈ‎_Cز5wL¬¢tا:‹،ٹbeوw”"‍PYمêi³=”ûةد¢ْ|F€|إ*ح”6	ى4,¶*èب1G©ًûضugu¥Pڑï³—ù„ُ‘²³Aعw箽½ن,Eسٹ×ٍp­!¥8Iٍ·!Mژêpع"ؤ<! ٌچŒلإuNµهغ\à؛uiث/ژ†\;§ث"ü\3‏ُ‏فHY¯Rqضو<r¤VwU
¾ز”*ëًهvaأ,2‰>§َ{	ƒmإ؟‹نبûگ‰Tي\
	iڑ"ء.Oà‏‌w‏1ش^¶غ«W/î³»ƒهnر¸ˆJ2{>ƒN!kآO±/XُnيىزSؤق’¬E§»±”\€%aط¦x-z›Vœ،–}}V‚ئ+@ڑبmûmص~ِ´m6‚~‍s?OôرKôؤq"HTدچkہَK،گخ?ذ8rîe€é!-«â[‡،ئْ«W^ژ‍ّü؛ˆ°ے-·ا¬\”فتâن	ˆ²Bل¦2?ئ©5I3ہ‏2§÷†®پX÷ؤ¯Y•@·قèْ‍gçظسض+´×Mئ®8خژU4±I–گFNO&UI\حiY0ءv]êؤ؟“¶‘O9>ئگ

p„ضےî6ہ­بb[]€آ

 

after close XML Tags:

‰
[]€آ
	p„ضےî6ہH_
ة-Œ¢lإ	EO±‚‚6}"éa،ْP;ُ¼4
¤ُ.¾“$B¯vüّPuز¤7؛NE°¢‘rè	$™;t $ي®ٹِ+خ×kX.©~قLû؟‰Oن@	cuت™²ë@"è	ؤ>bxyڑ'ëcCPooO؛÷ِ*ٌC!@سر¸ظƒى‰“7…ôٍپç¾¼rںaُزرسé¯dـ!9îƒض^]G¸—j–jeذ6
¥´ے]ف×؟ؤˆ)q	‚îœTك²ہگEةhٹ~أ*VفQ_:ـ'&¼
{-ظزہ’_[ô؟؟ژإ’Gù<…±‹‎ذdb»زپ4D¥±4¸

I trying to decrypt them,but so far I did not get the result and need to help

[r2du-soft]

 

also i don't know what the password and username format

thats look like BASE64 but not BASE64 

 

USERNAME="JNaV6Yvw1vJrZAeth8gvddoxH7x7+O0Mf90z3Q=="
PASSWORD="FNa36eTwkPJvZAatz8h7dZoxSLw="

It is also possible to encode and exist in values below the date

but i dont know encryption method

ID="3fad56d1-74a9-4276-850a-c1ba37ee3163"
CUSTOMER_ID="a2d01c78-9291-49cb-a85b-93c6cdb1a1da"
LICENSEPUBLIC_ID="3AB-V8G-V9R"

 

[knowledge-Spammer]

i see what u are trying to do but not sure if can do as u like

i cant decrypt   the text  as it seems very hard  maybe more then one language in the text 

ill ask friends about this more   but not sure can real help but ill ask

[r2du-soft]

4 minutes ago, knowledge said:

i see what u are trying to do but not sure if can do as u like

i cant decrypt   the text  as it seems very hard  maybe more then one language in the text 

ill ask friends about this more   but not sure can real help but ill ask

 

thank you my friend
So I'm waiting for you
And if I came to a conclusion,I'm announce in this topic

[Hacknhotq]

Hi, Change regedit better than the decode license.lf

[r2du-soft]

On 7/31/2018 at 6:46 AM, Hacknhotq said:

Hi, Change regedit better than the decode license.lf

 

hi Hacknhotq

yes regedit is very better but in new versions of eset software (versions 11.1.54.0 and latest) eset change the activation method!

they are set active sections (computer protection,internet protection,network protection,security tools) in the license.lf and if the license file not exist then that sections not activated and in that sections show message with the text:

to use this functionality please activate product

 

i found some methods but first must test that's until I'm completely sure and after that i think i have good news about cracking ?