Exploring the registry found this

Posts 1–6 of 6 · Page 1 of 1
Exploring the registry found this
At first I thought I got key stolen (was trying to decompile some key stealers, not much luck need a better decompiler), as one of the decompilers that I was testing didn't work, I thought got the key was stole (don't have a valid cd key ), but then I checked and it was there, didn't find any abnormal process, so I guess the decompiler didn't fuck up.

The fun part is that I was hurrying to check the key, so I went on the wrong path and found this

Code:
HKEY_CURRENT_USER\Software\Bohemia Interactive Studio\ArmA 2 OA\https://is.bistudio.com:8181/BICDKeys/resources/bicdkeys.cdkeys/
HKEY_CURRENT_USER\Software\Bohemia Interactive Studio\ArmA 2 OA\is.bistudio.com:8181/BICDKeys/resources/bicdkeys.cdkeys/
HKEY_CURRENT_USER\Software\Bohemia Interactive Studio\DayZ Server
Checked the hosts file as I thought I could have been dns spoofed, nothing there.
So what do you guys think this site is about?
That's nothing.
Well under closer inspection (coping and pasting https://is.bistudio.com:8181/BICDKey...cdkeys.cdkeys/ into the html bar) it is called "CDKeysWebRealm" and requires credentials to access. So one could assume this is where they store key information, banned un banned etc.
Quote Originally Posted by Roclan View Post
Well under closer inspection (coping and pasting https://is.bistudio.com:8181/BICDKey...cdkeys.cdkeys/ into the html bar) it is called "CDKeysWebRealm" and requires credentials to access. So one could assume this is where they store key information, banned un banned etc.
Yeah, I figure it's a database that a keystealer sends information(the keys) to.
At least, I think anyways. Could be totally wrong, but that's what it very much looks like.
Quote Originally Posted by ReflectedGod View Post
Yeah, I figure it's a database that a keystealer sends information(the keys) to.
At least, I think anyways. Could be totally wrong, but that's what it very much looks like.
It would appear that way, seeing as its a "glassfish server" and its open source
with bistudio.com dns? I guess the is.bistudio.com in front of it is just a subdomain.
Posts 1–6 of 6 · Page 1 of 1

Post a Reply

Similar Threads

Tags for this Thread

None

Talk with us