Understanding the technical layers helps clarify why these tools persist despite vendor countermeasures.
SolidSquad is a known group that releases "license server emulators" (often called "SSQ" or "SolidSquad" cracks) for Dassault Systèmes products (SOLIDWORKS, CATIA, SIMULIA) and other engineering software. Their method bypasses the legitimate license server check by running a local fake server.
A misconfigured Solidsquad server responding to broadcast discovery (@localhost or @bcast) can cause license storm traffic, flooding small networks with ARP and FlexNet heartbeat packets. solidsquad license servers
Even ignoring legal repercussions, network administrators should be aware of severe operational risks.
Solidsquad tools typically install the fake server as a Windows service (e.g., "SolidWorks FlexNet Server" or "Autodesk License Server" with a slight name variation). The service starts automatically, listens on TCP ports, and restarts if crashed. Understanding the technical layers helps clarify why these
Solidsquad servers typically use non-standard or default FlexNet ports. Scan for open TCP ports: 27000, 27001, 27005, 27009, 25734 and check the banner response. A legitimate server sends a FlexNet Publisher banner; a Solidsquad server may send SSQ Emulator or an invalid version string.
Watch for failed DNS queries to solidworks.com, autodesk.com, or flexera.com. A Solidsquad server will edit the hosts file to block these, so no log entries appear—an anomaly in itself. This ensures the fake license server is never
Many Solidsquad installers automatically add entries to %SystemRoot%\System32\drivers\etc\hosts to block vendor phone-home domains. For example:
127.0.0.1 activate.solidworks.com
127.0.0.1 licensing.autodesk.com
This ensures the fake license server is never overridden by an online certificate check.