What is interesting here is that a signed piece of software can pick up an unsigned dll, execute it, and that execution causes a compromise of the system.
Most relevant I found: https://devblogs.microsoft.com/oldnewthing/20200420-00/?p=10...
Probably in this case the installation of the crack requires admin privileges to modify files in "Program Files" folder. Boom, you've broken the rules ;)