Trojan.Win32.IEDummy_81f852054d

by malwarelabrobot on October 2nd, 2015 in Malware Descriptions.

Trojan.Win32.IEDummy.FD, Trojan.Win32.Swrort.3.FD, mzpefinder_pcap_file.YR, GenericInjector.YR (Lavasoft MAS)
Behaviour: Trojan


The description has been automatically generated by Lavasoft Malware Analysis System and it may contain incomplete or inaccurate information.

Requires JavaScript enabled!

Summary
Dynamic Analysis
Static Analysis
Network Activity
Map
Strings from Dumps
Removals

MD5: 81f852054d33a5decfb0681e34b4964f
SHA1: 049e26b3c2bb304e837ffcc356001c746b54361f
SHA256: 7c0af9a6b26a4e3c32b694fbcd18e01314b2322409be36ce05553856a070a110
SSDeep: 12288:kxGVL6hBH8HwOzJadKJyhTIQYdIjPGbcTz4rdsoyVOHhYGiF g Ma6oX:kT3KSzb9sdjyV/ MPe
Size: 853312 bytes
File type: EXE
Platform: WIN32
Entropy: Not Packed
PEID: UPolyXv05_v6
Company: SIEN
Created at: 2014-02-06 10:57:12
Analyzed on: WindowsXP SP3 32-bit


Summary:

Trojan. A program that appears to do one thing but actually does another (a.k.a. Trojan Horse).

Payload

No specific payload has been found.

Process activity

The Trojan creates the following process(es):

setup.exe:548
%original file name%.exe:580
yappyz_1332_1.exe:1520
yappyz.exe:1436
yappyz.exe:852
yappyz.exe:1168
yappyz.exe:1484
yappyz.exe:1344
yappyz.exe:2404
yappyz.exe:2192
yappyz.exe:2108
yappyz.exe:1792
yappyz.exe:2244
yappyz.exe:2164
yappyz.exe:2008
yappyz.exe:372

The Trojan injects its code into the following process(es):

yappyz.exe:2320
yappyz.exe:2236
yappyz.exe:2684
yappyz.exe:2528
yappyz.exe:232

Mutexes

The following mutexes were created/opened:
No objects were found.

File activity

The process setup.exe:548 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):

%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\27.1.1419.0\Locales\da.dll (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\27.1.1419.0\Locales\sr.pak (302 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\27.1.1419.0\Locales\lt.dll (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\27.1.1419.0\Locales\gu.pak (1667 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\27.1.1419.0\Locales\zh-TW.dll (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\27.1.1419.0\Locales\th.dll (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\27.1.1419.0\Locales\de.dll (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\27.1.1419.0\Locales\ja.pak (240 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\27.1.1419.0\Locales\he.pak (225 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\27.1.1419.0\Locales\el.pak (1633 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\27.1.1419.0\Locales\lt.pak (199 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\27.1.1419.0\Locales\hi.pak (1677 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\27.1.1419.0\Locales\hi.dll (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\27.1.1419.0\Locales\pt-BR.pak (194 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\27.1.1419.0\Locales\el.dll (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\27.1.1419.0\Locales\fr.dll (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\27.1.1419.0\PepperFlash\pepflashplayer.dll (94114 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\27.1.1419.0\Locales\uk.dll (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\27.1.1419.0\chrome_frame_helper.dll (57 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\27.1.1419.0\Locales\pl.dll (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\27.1.1419.0\Locales\en-US.pak (169 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\27.1.1419.0\Locales\en-GB.pak (169 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\27.1.1419.0\Locales\es.pak (207 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\27.1.1419.0\Locales\hr.dll (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\27.1.1419.0\Locales\zh-TW.pak (170 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\27.1.1419.0\Locales\gu.dll (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\27.1.1419.0\Locales\ro.dll (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\27.1.1419.0\Locales\es-419.pak (202 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\27.1.1419.0\Locales\cs.dll (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\27.1.1419.0\Locales\ms.pak (185 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\27.1.1419.0\VisualElements\smalllogo.png (11 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\27.1.1419.0\libegl.dll (136 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\27.1.1419.0\Locales\hu.pak (210 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\27.1.1419.0\Locales\fa.dll (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\27.1.1419.0\Locales\sk.dll (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\27.1.1419.0\Locales\bg.pak (326 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\27.1.1419.0\Extensions\external_extensions.json (99 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\27.1.1419.0\Locales\ml.pak (1788 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\27.1.1419.0\Locales\cs.pak (201 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\27.1.1419.0\Locales\vi.pak (225 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\27.1.1419.0\Locales\mr.dll (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\27.1.1419.0\nacl64.exe (7386 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\27.1.1419.0\d3dcompiler_46.dll (22433 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\27.1.1419.0\Locales\id.pak (180 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\27.1.1419.0\Locales\fr.pak (214 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\27.1.1419.0\Locales\am.pak (272 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\wow_helper.exe (73 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\app_host.exe (287 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\VisualElementsManifest.xml (386 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\27.1.1419.0\Locales\pt-BR.dll (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\27.1.1419.0\PepperFlash\manifest.json (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\27.1.1419.0\Locales\ta.dll (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\27.1.1419.0\Locales\pt-PT.dll (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\27.1.1419.0\Locales\it.pak (197 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\27.1.1419.0\Locales\fil.pak (204 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\27.1.1419.0\ffmpegsumo.dll (7386 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Application\27.1.1419.0\Installer\setup.exe (10815 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\27.1.1419.0\Locales\sr.dll (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\27.1.1419.0\Locales\ja.dll (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\27.1.1419.0\Locales\ca.pak (202 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\27.1.1419.0\Locales\sw.dll (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\27.1.1419.0\Locales\zh-CN.pak (167 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\27.1.1419.0\secondarytile.png (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\27.1.1419.0\Locales\nl.dll (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\27.1.1419.0\chrome_frame_helper.exe (82 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\27.1.1419.0\metro_driver.dll (6433 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Application\yappyz.exe (7971 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\27.1.1419.0\resources.pak (38588 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\27.1.1419.0\Locales\ml.dll (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\27.1.1419.0\Locales\nb.dll (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\27.1.1419.0\Locales\fi.pak (189 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\chrome.7z (933035 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\27.1.1419.0\Locales\lv.dll (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\27.1.1419.0\libglesv2.dll (3817 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\27.1.1419.0\VisualElements\splash-620x300.png (12 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\27.1.1419.0\Locales\sw.pak (185 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\27.1.1419.0\Locales\sl.pak (188 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\27.1.1419.0\Locales\vi.dll (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\27.1.1419.0\ppgooglenaclpluginchrome.dll (1732 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\27.1.1419.0\Locales\it.dll (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\27.1.1419.0\Locales\tr.dll (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\27.1.1419.0\Locales\sv.pak (184 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\27.1.1419.0\Locales\pt-PT.pak (198 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\27.1.1419.0\Locales\mr.pak (1669 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\27.1.1419.0\Locales\bn.dll (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\27.1.1419.0\icudt.dll (72365 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\27.1.1419.0\Locales\kn.dll (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\27.1.1419.0\chrome_launcher.exe (87 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\27.1.1419.0\Locales\es.dll (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\27.1.1419.0\Locales\ar.dll (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\27.1.1419.0\Locales\ms.dll (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\27.1.1419.0\Locales\en-GB.dll (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\27.1.1419.0\Locales\nl.pak (195 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\27.1.1419.0\Locales\uk.pak (309 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\27.1.1419.0\Locales\pl.pak (198 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\27.1.1419.0\Locales\bg.dll (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\27.1.1419.0\chrome_100_percent.pak (6325 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\27.1.1419.0\nacl_irt_x86_32.nexe (39950 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\27.1.1419.0\chrome.dll (410859 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\27.1.1419.0\Locales\fa.pak (277 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\27.1.1419.0\Locales\nb.pak (185 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\27.1.1419.0\Locales\he.dll (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\yappyz.exe (7386 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\27.1.1419.0\Locales\et.pak (179 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\27.1.1419.0\chrome_touch_100_percent.pak (6338 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\27.1.1419.0\Locales\ru.dll (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\27.1.1419.0\Locales\ta.pak (1736 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\27.1.1419.0\Locales\ko.pak (206 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\27.1.1419.0\Locales\th.pak (1672 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\27.1.1419.0\Locales\es-419.dll (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\27.1.1419.0\VisualElements\logo.png (5 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\27.1.1419.0\Locales\en-US.dll (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\master_preferences (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\27.1.1419.0\Locales\id.dll (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\27.1.1419.0\Locales\am.dll (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\27.1.1419.0\Locales\sk.pak (208 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\27.1.1419.0\Locales\et.dll (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\27.1.1419.0\Locales\bn.pak (1685 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\27.1.1419.0\Locales\sl.dll (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\27.1.1419.0\Locales\fi.dll (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\27.1.1419.0\delegate_execute.exe (6368 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\27.1.1419.0\Locales\da.pak (184 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\27.1.1419.0\Locales\fil.dll (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\27.1.1419.0\Locales\sv.dll (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\27.1.1419.0\Locales\te.pak (1716 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\27.1.1419.0\Locales\hu.dll (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\27.1.1419.0\Locales\tr.pak (198 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\27.1.1419.0\Locales\ca.dll (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\27.1.1419.0\Locales\te.dll (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\27.1.1419.0\Locales\ro.pak (208 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\27.1.1419.0\Locales\hr.pak (192 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\27.1.1419.0\npchrome_frame.dll (17629 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\27.1.1419.0\Locales\kn.pak (1726 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\27.1.1419.0\Locales\de.pak (202 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\27.1.1419.0\Locales\ko.dll (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\27.1.1419.0\Locales\ar.pak (263 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\27.1.1419.0\Locales\ru.pak (305 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\27.1.1419.0\Locales\lv.pak (200 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\27.1.1419.0\Locales\zh-CN.dll (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\27.1.1419.0\nacl_irt_x86_64.nexe (42363 bytes)

The Trojan deletes the following file(s):

%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\wow_helper.exe (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\app_host.exe (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\yappyz.exe (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941 (0 bytes)

The process %original file name%.exe:580 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):

%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\geoloc.iminent[1] (61 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\fr-FR[1].htm (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\YappyzUninstall\YappyzUninstall.exe (6841 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\main[1] (22 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\yappyz.mini[1].png (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\desktop.ini (67 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Microsoft\Internet Explorer\MSIMGSIZ.DAT (96 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\yappyz_1332_1[1].exe (2643733 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\main[1].css (2 bytes)
%Documents and Settings%\%current user%\Cookies\Current_User@public.yappyz[2].txt (1283 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\desktop.ini (67 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\ga[1].js (1453 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\desktop.ini (67 bytes)
%Documents and Settings%\%current user%\Cookies\Current_User@public.yappyz[1].txt (1803 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\icon[1].png (3543 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\desktop.ini (67 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\Yappyz\yappyz_1332_1.exe (835760 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\install[1] (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\BetaYappyz300X90[1].png (392 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\jquery.min[1].js (2614 bytes)
%Documents and Settings%\%current user%\Cookies\Current_User@placehold[1].txt (215 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\data[1] (59 bytes)
%Documents and Settings%\%current user%\Cookies\index.dat (5784 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\desktop.ini (67 bytes)

The Trojan deletes the following file(s):

%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\fr-FR[1].htm (0 bytes)
%Documents and Settings%\%current user%\Cookies\Current_User@public.yappyz[2].txt (0 bytes)
%Documents and Settings%\%current user%\Local Settings\History\History.IE5\MSHist012014041520140416\index.dat (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\Yappyz\yappyz_1332_1.exe (0 bytes)
%Documents and Settings%\%current user%\Local Settings\History\History.IE5\MSHist012014041520140416 (0 bytes)
%Documents and Settings%\%current user%\Cookies\Current_User@public.yappyz[1].txt (0 bytes)

The process yappyz_1332_1.exe:1520 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):

%Documents and Settings%\%current user%\Local Settings\Temp\CR_B4D70.tmp\CHROME.PACKED.7Z (230970 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\CR_B4D70.tmp\setup.exe (24272 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\CR_B4D70.tmp\SETUP.EX_ (1839 bytes)

The Trojan deletes the following file(s):

%Documents and Settings%\%current user%\Local Settings\Temp\CR_B4D70.tmp\CHROME.PACKED.7Z (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\CR_B4D70.tmp (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\CR_B4D70.tmp\setup.exe (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\CR_B4D70.tmp\SETUP.EX_ (0 bytes)

The process yappyz.exe:1484 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):

%Documents and Settings%\%current user%\Local Settings\Temp\scoped_dir_232_13986\DECODED_MESSAGE_CATALOGS (260 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\scoped_dir_232_13986\CRX_INSTALL\Thumbs.db (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\scoped_dir_232_13986\CRX_INSTALL\_locales\en\messages.json (90 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\scoped_dir_232_13986\CRX_INSTALL\_locales\fr\messages.json (102 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\scoped_dir_232_13986\CRX_INSTALL\manifest.json (745 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\scoped_dir_232_13986\CRX_INSTALL\icon128.png (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\scoped_dir_232_13986\DECODED_IMAGES (65 bytes)

The process yappyz.exe:2404 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):

%Documents and Settings%\%current user%\Local Settings\Temp\scoped_dir_232_14006\CRX_INSTALL\_locales\fr\messages.json (247 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\scoped_dir_232_14006\CRX_INSTALL\manifest.json (598 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\scoped_dir_232_14006\DECODED_IMAGES (65 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\scoped_dir_232_14006\CRX_INSTALL\config.json (119 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\scoped_dir_232_14006\DECODED_MESSAGE_CATALOGS (537 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\scoped_dir_232_14006\CRX_INSTALL\_locales\en\messages.json (205 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\scoped_dir_232_14006\CRX_INSTALL\icon128.png (1928 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\scoped_dir_232_14006\CRX_INSTALL\index.html (245 bytes)

The process yappyz.exe:2684 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):

%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\J4UN78YP\fr-sien.cdn.videoplaza.tv\se.video#\plaza.kit.adplayer.adplayer.sxx (287 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\J4UN78YP\macromedia.com\support\flashplayer\sys\settings.sxx (10990 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\J4UN78YP\fr-sien.cdn.videoplaza.tv\com.videoplaza.bootloader.sxx (202 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\J4UN78YP\fr-sien.cdn.videoplaza.tv\com.videoplaza.adplayer.sxx (262 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\J4UN78YP\macromedia.com\support\flashplayer\sys\#fr-sien.cdn.videoplaza.tv\settings.sxx (238 bytes)

The process yappyz.exe:2192 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):

%Documents and Settings%\%current user%\Local Settings\Temp\scoped_dir_232_13993\CRX_INSTALL\resources\images\icon_128.png (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\scoped_dir_232_13993\CRX_INSTALL\resources\images\close.png (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\scoped_dir_232_13993\CRX_INSTALL\scripts\controllers\popupCtrl.js (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\scoped_dir_232_13993\CRX_INSTALL\background.html (100 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\scoped_dir_232_13993\CRX_INSTALL\scripts\directives\ypzGrid.js (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\scoped_dir_232_13993\CRX_INSTALL\_locales\en\messages.json (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\scoped_dir_232_13993\CRX_INSTALL\scripts\directives\ypzFit.js (850 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\scoped_dir_232_13993\DECODED_IMAGES (1608 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\scoped_dir_232_13993\CRX_INSTALL\home.html (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\scoped_dir_232_13993\CRX_INSTALL\resources\images\arrow_left.png (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\scoped_dir_232_13993\CRX_INSTALL\resources\styles\reset.css (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\scoped_dir_232_13993\CRX_INSTALL\manifest.json (650 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\scoped_dir_232_13993\CRX_INSTALL\popup.html (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\scoped_dir_232_13993\CRX_INSTALL\scripts\directives\ngCustom.js (672 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\scoped_dir_232_13993\CRX_INSTALL\scripts\directives\ypzSprite.js (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\scoped_dir_232_13993\CRX_INSTALL\_locales\fr\messages.json (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\scoped_dir_232_13993\CRX_INSTALL\scripts\background.js (6 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\scoped_dir_232_13993\CRX_INSTALL\scripts\services\abTest.js (837 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\scoped_dir_232_13993\CRX_INSTALL\mini.html (277 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\scoped_dir_232_13993\CRX_INSTALL\scripts\directives\ypzWindow.js (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\scoped_dir_232_13993\CRX_INSTALL\scripts\directives\ypzScrollShadow.js (718 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\scoped_dir_232_13993\CRX_INSTALL\scripts\libs\angular.min.js (5952 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\scoped_dir_232_13993\CRX_INSTALL\resources\images\icon_256.png (392 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\scoped_dir_232_13993\CRX_INSTALL\resources\styles\homePage.css (392 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\scoped_dir_232_13993\CRX_INSTALL\scripts\services\gaEvents.js (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\scoped_dir_232_13993\CRX_INSTALL\resources\images\spriteHome.png (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\scoped_dir_232_13993\CRX_INSTALL\resources\images\pin2.png (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\scoped_dir_232_13993\CRX_INSTALL\scripts\controllers\homeCtrl.js (392 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\scoped_dir_232_13993\CRX_INSTALL\resources\images\icon_200.png (7 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\scoped_dir_232_13993\CRX_INSTALL\resources\styles\popup.css (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\scoped_dir_232_13993\CRX_INSTALL\scripts\filters\i18n.js (181 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\scoped_dir_232_13993\DECODED_MESSAGE_CATALOGS (4 bytes)

The process yappyz.exe:2108 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):

%Documents and Settings%\%current user%\Local Settings\Temp\scoped_dir_232_13990\CRX_INSTALL\_locales\en\messages.json (95 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\scoped_dir_232_13990\CRX_INSTALL\_locales\fr\messages.json (100 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\scoped_dir_232_13990\CRX_INSTALL\icon128.png (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\scoped_dir_232_13990\DECODED_IMAGES (65 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\scoped_dir_232_13990\DECODED_MESSAGE_CATALOGS (262 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\scoped_dir_232_13990\CRX_INSTALL\manifest.json (824 bytes)

The process yappyz.exe:2244 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):

%Documents and Settings%\%current user%\Local Settings\Temp\scoped_dir_232_13996\CRX_INSTALL\public\content\iconeNew.png (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\scoped_dir_232_13996\CRX_INSTALL\public\fullscreenAds.css (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\scoped_dir_232_13996\CRX_INSTALL\public\content\yappyzlogo.png (4152 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\scoped_dir_232_13996\CRX_INSTALL\public\content\smiley.png (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\scoped_dir_232_13996\CRX_INSTALL\_locales\en\messages.json (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\scoped_dir_232_13996\CRX_INSTALL\public\content\new-photo.png (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\scoped_dir_232_13996\CRX_INSTALL\public\content\google-logo.png (849 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\scoped_dir_232_13996\CRX_INSTALL\public\content\new-interogation.png (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\scoped_dir_232_13996\CRX_INSTALL\yappyz.js (776 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\scoped_dir_232_13996\CRX_INSTALL\public\content\new-photo2.png (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\scoped_dir_232_13996\CRX_INSTALL\manifest.json (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\scoped_dir_232_13996\CRX_INSTALL\private\app.js (7784 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\scoped_dir_232_13996\CRX_INSTALL\public\content\bg_app.png (392 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\scoped_dir_232_13996\CRX_INSTALL\public\content\MoreCoins.png (392 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\scoped_dir_232_13996\CRX_INSTALL\private\resources\images\icon_128.png (6 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\scoped_dir_232_13996\CRX_INSTALL\public\content\bgGameCharacter.png (17904 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\scoped_dir_232_13996\CRX_INSTALL\public\gamecontainer.html (519 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\scoped_dir_232_13996\DECODED_MESSAGE_CATALOGS (117 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\scoped_dir_232_13996\DECODED_IMAGES (65 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\scoped_dir_232_13996\CRX_INSTALL\public\topbar.css (392 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\scoped_dir_232_13996\CRX_INSTALL\_locales\es\messages.json (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\scoped_dir_232_13996\CRX_INSTALL\public\content\tweeter-logo.png (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\scoped_dir_232_13996\CRX_INSTALL\public\ads.html (146 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\scoped_dir_232_13996\CRX_INSTALL\_locales\it\messages.json (3808 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\scoped_dir_232_13996\CRX_INSTALL\public\ads.css (144 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\scoped_dir_232_13996\CRX_INSTALL\_locales\fr\messages.json (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\scoped_dir_232_13996\CRX_INSTALL\public\content\defaultUserPicture2.png (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\scoped_dir_232_13996\CRX_INSTALL\public\content\facebook_share.png (261 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\scoped_dir_232_13996\CRX_INSTALL\public\fullscreenAds.html (434 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\scoped_dir_232_13996\CRX_INSTALL\public\content\InsertCoinsAnimation.gif (2696 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\scoped_dir_232_13996\CRX_INSTALL\public\content\spriteTopBar.png (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\scoped_dir_232_13996\CRX_INSTALL\private\background.html (211 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\scoped_dir_232_13996\CRX_INSTALL\public\yappyz.js (7288 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\scoped_dir_232_13996\CRX_INSTALL\public\gamecontainer.css (522 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\scoped_dir_232_13996\CRX_INSTALL\public\content\close.png (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\scoped_dir_232_13996\CRX_INSTALL\_locales\de\messages.json (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\scoped_dir_232_13996\CRX_INSTALL\public\content\defaultUserPicture.png (392 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\scoped_dir_232_13996\CRX_INSTALL\public\topbar.html (392 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\scoped_dir_232_13996\CRX_INSTALL\_locales\pt\messages.json (3808 bytes)

The process yappyz.exe:232 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):

%Documents and Settings%\%current user%\Local Settings\Temp\etilqs_bIVFrqaN6Hlvqcc (286 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\scoped_dir_232_13996\CRX_INSTALL\_locales\en\messages.json (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\User Data\Default\Preferences (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\4.tmp (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\scoped_dir_232_13986\CRX_INSTALL\_locales\fr\messages.json (107 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\scoped_dir_232_13986\CRX_INSTALL\manifest.json (788 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\User Data\Default\Cache\f_00000d (25 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\User Data\Default\Local Storage\chrome-extension_onjgfkedmajckgeodakihmpbgjeokfap_0.localstorage (997815 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\scoped_dir_232_13996\CRX_INSTALL\private\resources\images\icon_128.png (5 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\User Data\Default\History (21181 bytes)
%Documents and Settings%\%current user%\Application Data\Microsoft\Internet Explorer\Quick Launch\Store.lnk (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\User Data\Default\Web Applications\_crx_jajfdjebpfphpjkocjenkhegepamcbcl\Bejeweled.ico (150 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\User Data\Default\Session Storage\000003.log (212 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\User Data\Default\Web Data (34793 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\User Data\12.tmp (5 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\User Data\Default\Local App Settings\kjhpfcjlhjpbdpfcffaiopddnpojdpok\000003.log (48 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\scoped_dir_232_13993\5.tmp (673 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\User Data\Default\Cache\f_000011 (240 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\User Data\Default\Local Storage\https_www.facebook.com_0.localstorage-journal (564 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\User Data\Default\Extension Rules\MANIFEST-000002 (69 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\User Data\Default\Extension Rules\MANIFEST-000001 (41 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\User Data\Default\F.tmp (676 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\User Data\Default\Local App Settings\kjhpfcjlhjpbdpfcffaiopddnpojdpok\000001.dbtmp (20 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\User Data\Safe Browsing Cookies-journal (2791 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\User Data\Default\Cache\f_00000f (118 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\scoped_dir_232_13993\CRX_INSTALL\resources\images\icon_256.png (8 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\3.tmp (106417 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\User Data\Default\Archived History (11533 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\User Data\Default\Session Storage\000002.dbtmp (20 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\User Data\Default\Top Sites (5232 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\scoped_dir_232_14006 (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\scoped_dir_232_13986\CRX_INSTALL\_locales\en\messages.json (95 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\scoped_dir_232_13986 (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\User Data\Default\Cookies (1331 bytes)
%Documents and Settings%\%current user%\Desktop\Yappyz.lnk (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\etilqs_GXR1MmshCfLBeQt (532 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\User Data\Default\Local Storage\https_www.facebook.com_0.localstorage (149 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\scoped_dir_232_13996\CRX_INSTALL\_locales\de\messages.json (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\scoped_dir_232_13996\3.tmp (5873 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\User Data\Default\Cache\f_000012 (3875 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\User Data\C.tmp (5 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\User Data\Default\Web Applications\_crx_jajfdjebpfphpjkocjenkhegepamcbcl\Bejeweled.ico.md5 (16 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\User Data\Default\Extension Cookies (1331 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\scoped_dir_232_14006\CRX_INSTALL\_locales\en\messages.json (222 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\User Data\13.tmp (30 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\etilqs_Fygb14KF0gCMsbI (131 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\User Data\Default\Session Storage\MANIFEST-000002 (69 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\User Data\Default\Origin Bound Certs-journal (6215 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\User Data\Default\1.tmp (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\scoped_dir_232_13993\CRX_INSTALL\manifest.json (685 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\User Data\Default\README (166 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\User Data\Default\Extension State\000003.log (1121 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\User Data\Default\Cache\f_00000e (38 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\User Data\Default\Extension Rules\000003.log (2294 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\User Data\Default\Cache\f_00000a (190 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\User Data\Default\Cache\f_00000b (17 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\User Data\Default\Cache\f_00000c (38 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\User Data\10.tmp (5 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\scoped_dir_232_13996\CRX_INSTALL\_locales\es\messages.json (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\scoped_dir_232_13993\CRX_INSTALL\_locales\fr\messages.json (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\User Data\Default\Top Sites-journal (12020 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\scoped_dir_232_13996\CRX_INSTALL\_locales\it\messages.json (53 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\scoped_dir_232_13996\CRX_INSTALL\_locales\fr\messages.json (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\User Data\Default\Cookies-journal (9796 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\User Data\Default\Cache\data_3 (8552 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\User Data\Default\User StyleSheets\Custom.css (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\User Data\Default\Cache\f_000004 (48 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\User Data\Default\Cache\f_000005 (24 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\User Data\Default\Cache\f_000006 (38 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\6.tmp (1443 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\User Data\Default\Cache\f_000001 (117 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\User Data\Default\Cache\f_000002 (26 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\User Data\Default\Cache\f_000003 (38 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\User Data\Default\Origin Bound Certs (1705 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\User Data\Default\Cache\f_000009 (51 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\User Data\Default\Extension State\000001.dbtmp (20 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\User Data\Default\Shortcuts-journal (564 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\scoped_dir_232_13996\CRX_INSTALL\_locales\pt\messages.json (58 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\scoped_dir_232_14006\CRX_INSTALL\manifest.json (746 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\User Data\Safe Browsing Cookies (745 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\User Data\Default\Network Action Predictor-journal (10097 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\User Data\Default\Extension State\000002.dbtmp (20 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\scoped_dir_232_13993\CRX_INSTALL\resources\images\icon_128.png (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\scoped_dir_232_13990\CRX_INSTALL\icon128.png (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\scoped_dir_232_14006\A.tmp (33 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\User Data\Default\Web Applications\_crx_kjhpfcjlhjpbdpfcffaiopddnpojdpok\Yappyz.ico (150 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\scoped_dir_232_13986\2.tmp (9 bytes)
%Documents and Settings%\%current user%\Desktop\Store.lnk (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\7.tmp (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\User Data\Default\Local App Settings\kjhpfcjlhjpbdpfcffaiopddnpojdpok\LOG (47 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\User Data\Default\Extension Rules\000001.dbtmp (20 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\8.tmp (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\scoped_dir_232_14006\CRX_INSTALL\_locales\fr\messages.json (272 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\User Data\Default\Favicons-journal (564 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\User Data\Default\Extension Cookies-journal (9796 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\User Data\Default\Cache\f_000007 (40 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\scoped_dir_232_14006\CRX_INSTALL\icon128.png (34 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\B.tmp (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\etilqs_XFbPa4DzPoSNWN0 (406 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\etilqs_ScSiAXWMWrIXiQI (131 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\9.tmp (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\User Data\Default\Cache\f_000010 (250 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\scoped_dir_232_13990\CRX_INSTALL\_locales\fr\messages.json (105 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Application\First Run (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\User Data\Default\Web Applications\_crx_fckpdnpcdkdbldaegkokodcimgohljpo\Store.ico.md5 (16 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\User Data\Default\Cache\data_2 (2360 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\User Data\Default\Archived History-journal (564 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\User Data\Default\Cache\data_0 (432372 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\User Data\Default\Cache\data_1 (123928 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\User Data\Default\Session Storage\000001.dbtmp (20 bytes)
%Documents and Settings%\%current user%\Desktop\Bejeweled.lnk (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\User Data\Default\Favicons (4342 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\User Data\Default\Cache\f_000008 (89 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\etilqs_Xg4oCc7FfrkgPJC (532 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\scoped_dir_232_13993\CRX_INSTALL\_locales\en\messages.json (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\User Data\Default\History-journal (4276 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\User Data\Default\Web Applications\_crx_fckpdnpcdkdbldaegkokodcimgohljpo\Store.ico (150 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\User Data\Default\E.tmp (671 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\scoped_dir_232_13996\CRX_INSTALL\manifest.json (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\User Data\Default\Session Storage\MANIFEST-000001 (41 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\User Data\Default\Extension State\LOG (47 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\5.tmp (22956 bytes)
%Documents and Settings%\%current user%\Application Data\Microsoft\Internet Explorer\Quick Launch\Yappyz.lnk (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\scoped_dir_232_13990\CRX_INSTALL\_locales\en\messages.json (100 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\User Data\Default\Local App Settings\kjhpfcjlhjpbdpfcffaiopddnpojdpok\MANIFEST-000001 (41 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\scoped_dir_232_13996 (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\scoped_dir_232_13990 (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\User Data\Default\Local Storage\chrome-extension_onjgfkedmajckgeodakihmpbgjeokfap_0.localstorage-journal (14163 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\scoped_dir_232_13993 (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\User Data\Default\11.tmp (285 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\User Data\Default\Session Storage\LOG (46 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\User Data\Default\Extension Rules\000002.dbtmp (20 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\etilqs_TuRnCiuZl6W8wvU (131 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\scoped_dir_232_13990\CRX_INSTALL\manifest.json (851 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\2.tmp (2259 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\scoped_dir_232_13990\6.tmp (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\etilqs_9zYJq4rUxOJ8Hdc (532 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\User Data\Default\Extension Rules\LOG (47 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\etilqs_zL0gkMYQFJwf1RI (131 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\scoped_dir_232_13986\CRX_INSTALL\icon128.png (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\User Data\Default\Extension State\MANIFEST-000002 (69 bytes)
%Documents and Settings%\%current user%\Application Data\Microsoft\Internet Explorer\Quick Launch\Bejeweled.lnk (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\User Data\Default\14.tmp (678 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\User Data\Default\Cache\index (368 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\User Data\Default\Visited Links (284 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\User Data\Default\Extension State\MANIFEST-000001 (41 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\User Data\Default\Network Action Predictor (5093 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\User Data\Default\Web Data-journal (9794 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\A.tmp (6378 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\User Data\Default\Web Applications\_crx_kjhpfcjlhjpbdpfcffaiopddnpojdpok\Yappyz.ico.md5 (16 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\User Data\Default\D.tmp (12 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\User Data\Default\Local App Settings\kjhpfcjlhjpbdpfcffaiopddnpojdpok\000002.dbtmp (20 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\User Data\Default\Local App Settings\kjhpfcjlhjpbdpfcffaiopddnpojdpok\MANIFEST-000002 (69 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\User Data\Default\Shortcuts (592 bytes)

The Trojan deletes the following file(s):

%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\User Data\Local State~RFd8618.TMP (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\J4UN78YP\macromedia.com\support\flashplayer\sys\settings.sol (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\J4UN78YP\fr-sien.cdn.videoplaza.tv\se.video#\plaza.kit.adplayer.adplayer.sol (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\scoped_dir_232_14006\DECODED_MESSAGE_CATALOGS (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\J4UN78YP\fr-sien.cdn.videoplaza.tv\com.videoplaza.adplayer.sol (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\scoped_dir_232_14006\A.tmp (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\scoped_dir_232_13993\CRX_INSTALL\resources\images\icon_128.png (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\scoped_dir_232_13990\CRX_INSTALL\icon128.png (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\User Data\Local State~RFd55d1.TMP (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\4.tmp (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\User Data\Default\Extension State\MANIFEST-000001 (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\User Data\Default\Session Storage\MANIFEST-000001 (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\scoped_dir_232_13986\DECODED_IMAGES (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\User Data\Default\Session Storage\CURRENT~RFd3d19.TMP (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\User Data\Default\Extension State\CURRENT~RFd17de.TMP (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\User Data\Default\Extension Rules\CURRENT~RFd0773.TMP (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\scoped_dir_232_13986\2.tmp (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\User Data\Default\1.tmp (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\scoped_dir_232_13996\CRX_INSTALL\private\resources\images\icon_128.png (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\User Data\Default\Local App Settings\kjhpfcjlhjpbdpfcffaiopddnpojdpok\MANIFEST-000001 (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\7.tmp (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\2.tmp (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\scoped_dir_232_13990 (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\scoped_dir_232_13996\DECODED_MESSAGE_CATALOGS (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\scoped_dir_232_13993 (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\scoped_dir_232_13996\DECODED_IMAGES (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\User Data\Default\Preferences~RFd2e63.TMP (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\scoped_dir_232_13993\5.tmp (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\scoped_dir_232_13990\DECODED_MESSAGE_CATALOGS (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\User Data\Default\Preferences~RFd54e7.TMP (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\8.tmp (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\User Data\Default\Extension Rules\MANIFEST-000001 (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\User Data\Default\Extensions\Temp\scoped_dir_232_13996 (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\scoped_dir_232_13990\6.tmp (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\User Data\Default\Extensions\Temp\scoped_dir_232_13993 (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\User Data\Default\Extensions\Temp\scoped_dir_232_13990 (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\scoped_dir_232_13993\CRX_INSTALL\resources\images\icon_256.png (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\User Data\Default\Local App Settings\kjhpfcjlhjpbdpfcffaiopddnpojdpok\CURRENT~RFd2cae.TMP (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\J4UN78YP\macromedia.com\support\flashplayer\sys\#fr-sien.cdn.videoplaza.tv\settings.sol (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\scoped_dir_232_14006\CRX_INSTALL\icon128.png (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\B.tmp (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\scoped_dir_232_13990\DECODED_IMAGES (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\scoped_dir_232_13986\CRX_INSTALL\icon128.png (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\scoped_dir_232_13986\DECODED_MESSAGE_CATALOGS (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\User Data\Default\Extensions\Temp\scoped_dir_232_14006 (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\3.tmp (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\9.tmp (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\6.tmp (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\User Data\Local State~RFe1817.TMP (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\scoped_dir_232_14006\DECODED_IMAGES (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\scoped_dir_232_14006 (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\J4UN78YP\fr-sien.cdn.videoplaza.tv\com.videoplaza.bootloader.sol (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\5.tmp (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\scoped_dir_232_13986 (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\User Data\Default\Extensions\Temp\scoped_dir_232_13999 (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\User Data\Default\Preferences~RFe1837.TMP (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\scoped_dir_232_13993\DECODED_IMAGES (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\scoped_dir_232_13996 (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\scoped_dir_232_13996\3.tmp (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\scoped_dir_232_13993\DECODED_MESSAGE_CATALOGS (0 bytes)

Registry activity

The process setup.exe:548 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Clients\StartMenuInternet\Yappyz.QQL2B5ZRL54V5ERAM5WD2OE6LQ\Capabilities]
"ApplicationIcon" = "%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Application\yappyz.exe,0"

[HKLM\SOFTWARE\Clients\StartMenuInternet\Yappyz.QQL2B5ZRL54V5ERAM5WD2OE6LQ\Capabilities\URLAssociations]
"tel" = "ChromiumHTM.QQL2B5ZRL54V5ERAM5WD2OE6LQ"

[HKCU\Software\yappyz]
"UninstallArguments" = " --uninstall"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Programs" = "%Documents and Settings%\%current user%\Start Menu\Programs"

[HKCU\Software\yappyz]
"InstallerSuccessLaunchCmdLine" = "%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Application\yappyz.exe"

[HKCR\.html\OpenWithProgids]
"ChromiumHTM.QQL2B5ZRL54V5ERAM5WD2OE6LQ" = ""

[HKLM\SOFTWARE\Clients\StartMenuInternet\Yappyz.QQL2B5ZRL54V5ERAM5WD2OE6LQ\Capabilities\URLAssociations]
"sms" = "ChromiumHTM.QQL2B5ZRL54V5ERAM5WD2OE6LQ"

[HKCU\Software\yappyz]
"pv" = "27.1.1419.0"

[HKCU\Software\yappyz\Commands\install-extension]
"CommandLine" = "%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Application\yappyz.exe --limited-install-from-webstore=%1"

[HKCU\Software\yappyz]
"InstallerError" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\Yappyz]
"InstallDate" = "20151001"

[HKCU\Software\yappyz]
"Name" = "Yappyz"

[HKLM\SOFTWARE\Clients\StartMenuInternet\Yappyz.QQL2B5ZRL54V5ERAM5WD2OE6LQ\InstallInfo]
"HideIconsCommand" = "%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Application\yappyz.exe --hide-icons"

[HKCR\.xhtml\OpenWithProgids]
"ChromiumHTM.QQL2B5ZRL54V5ERAM5WD2OE6LQ" = ""

[HKLM\SOFTWARE\Clients\StartMenuInternet\Yappyz.QQL2B5ZRL54V5ERAM5WD2OE6LQ\Capabilities\URLAssociations]
"urn" = "ChromiumHTM.QQL2B5ZRL54V5ERAM5WD2OE6LQ"

[HKLM\SOFTWARE\Clients\StartMenuInternet\Yappyz.QQL2B5ZRL54V5ERAM5WD2OE6LQ\InstallInfo]
"IconsVisible" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\Yappyz]
"NoModify" = "1"
"DisplayName" = "Yappyz"

[HKCU\Software\yappyz]
"oopcrashes" = "1"

[HKLM\SOFTWARE\Clients\StartMenuInternet\Yappyz.QQL2B5ZRL54V5ERAM5WD2OE6LQ\Capabilities\FileAssociations]
".xhtml" = "ChromiumHTM.QQL2B5ZRL54V5ERAM5WD2OE6LQ"

[HKCU\Software\yappyz]
"ap" = "-stage:preconditions"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd73-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\Yappyz]
"VersionMinor" = "0"
"NoRepair" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Local AppData" = "%Documents and Settings%\%current user%\Local Settings\Application Data"

[HKLM\SOFTWARE\Clients\StartMenuInternet\Yappyz.QQL2B5ZRL54V5ERAM5WD2OE6LQ\Capabilities\URLAssociations]
"mailto" = "ChromiumHTM.QQL2B5ZRL54V5ERAM5WD2OE6LQ"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\Yappyz]
"DisplayIcon" = "%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Application,0"

[HKLM\SOFTWARE\Clients\StartMenuInternet\Yappyz.QQL2B5ZRL54V5ERAM5WD2OE6LQ\shell\open\command]
"(Default)" = "%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Application\yappyz.exe"

[HKLM\SOFTWARE\Clients\StartMenuInternet\Yappyz.QQL2B5ZRL54V5ERAM5WD2OE6LQ\Capabilities\FileAssociations]
".html" = "ChromiumHTM.QQL2B5ZRL54V5ERAM5WD2OE6LQ"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\Yappyz]
"Version" = "27.1.1419.0"
"UninstallString" = "%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Application\27.1.1419.0\Installer\setup.exe --uninstall"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd75-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\Yappyz]
"InstallLocation" = "%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Application"

[HKCR\.htm\OpenWithProgids]
"ChromiumHTM.QQL2B5ZRL54V5ERAM5WD2OE6LQ" = ""

[HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\Yappyz]
"Publisher" = "Yappyz"

[HKLM\SOFTWARE\Clients\StartMenuInternet\Yappyz.QQL2B5ZRL54V5ERAM5WD2OE6LQ\Capabilities\URLAssociations]
"https" = "ChromiumHTM.QQL2B5ZRL54V5ERAM5WD2OE6LQ"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\yappyz.exe]
"Path" = "%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Application"

[HKLM\SOFTWARE\Clients\StartMenuInternet\Yappyz.QQL2B5ZRL54V5ERAM5WD2OE6LQ\Capabilities\FileAssociations]
".xht" = "ChromiumHTM.QQL2B5ZRL54V5ERAM5WD2OE6LQ"

[HKLM\SOFTWARE\Clients\StartMenuInternet\Yappyz.QQL2B5ZRL54V5ERAM5WD2OE6LQ]
"(Default)" = "Yappyz"

[HKLM\SOFTWARE\Clients\StartMenuInternet\Yappyz.QQL2B5ZRL54V5ERAM5WD2OE6LQ\Capabilities\URLAssociations]
"nntp" = "ChromiumHTM.QQL2B5ZRL54V5ERAM5WD2OE6LQ"

[HKLM\SOFTWARE\Clients\StartMenuInternet\Yappyz.QQL2B5ZRL54V5ERAM5WD2OE6LQ\InstallInfo]
"ShowIconsCommand" = "%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Application\yappyz.exe --show-icons"

[HKCU\Software\Classes\CLSID\{A2DF06F9-A21A-44A8-8A99-8B9C84F29160}\LocalServer32]
"(Default)" = "%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Application\27.1.1419.0\delegate_execute.exe"

[HKLM\SOFTWARE\Clients\StartMenuInternet\Yappyz.QQL2B5ZRL54V5ERAM5WD2OE6LQ\DefaultIcon]
"(Default)" = "%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Application\yappyz.exe,0"

[HKLM\SOFTWARE\Clients\StartMenuInternet\Yappyz.QQL2B5ZRL54V5ERAM5WD2OE6LQ\Capabilities]
"ApplicationDescription" = "Chromium is a web browser that runs webpages and applications with lightning speed. It's fast, stable, and easy to use. Browse the web more safely with malware and phishing protection built into Chromium."

[HKCU\Software\yappyz]
"InstallerResult" = "0"

[HKCR\ChromiumHTM.QQL2B5ZRL54V5ERAM5WD2OE6LQ\shell\open\command]
"(Default)" = "%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Application\yappyz.exe -- %1"

[HKLM\System\CurrentControlSet\Control\Session Manager]
"PendingFileRenameOperations" = "\??\%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz,"

[HKLM\SOFTWARE\Clients\StartMenuInternet\Yappyz.QQL2B5ZRL54V5ERAM5WD2OE6LQ\Capabilities\URLAssociations]
"webcal" = "ChromiumHTM.QQL2B5ZRL54V5ERAM5WD2OE6LQ"

[HKCU\Software\yappyz\Commands\install-extension]
"SendsPings" = "1"

[HKLM\SOFTWARE\Clients\StartMenuInternet\Yappyz.QQL2B5ZRL54V5ERAM5WD2OE6LQ\Capabilities\URLAssociations]
"irc" = "ChromiumHTM.QQL2B5ZRL54V5ERAM5WD2OE6LQ"

[HKCU\Software\yappyz]
"UninstallString" = "%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Application\27.1.1419.0\Installer\setup.exe"

[HKCU\Software\yappyz\Commands\on-os-upgrade]
"AutoRunOnOSUpgrade" = "1"

[HKCU\Software\Classes\CLSID\{A2DF06F9-A21A-44A8-8A99-8B9C84F29160}]
"(Default)" = "CommandExecuteImpl Class"

[HKCU\Software\yappyz\Commands\install-extension]
"RunAsUser" = "1"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\yappyz.exe]
"(Default)" = "%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Application\yappyz.exe"

[HKLM\SOFTWARE\Clients\StartMenuInternet\Yappyz.QQL2B5ZRL54V5ERAM5WD2OE6LQ\Capabilities\URLAssociations]
"mms" = "ChromiumHTM.QQL2B5ZRL54V5ERAM5WD2OE6LQ"

[HKCR\.shtml\OpenWithProgids]
"ChromiumHTM.QQL2B5ZRL54V5ERAM5WD2OE6LQ" = ""

[HKCU\Software\yappyz\Commands\on-os-upgrade]
"CommandLine" = "%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Application\27.1.1419.0\Installer\setup.exe --on-os-upgrade --verbose-logging"

[HKLM\SOFTWARE\Clients\StartMenuInternet\Yappyz.QQL2B5ZRL54V5ERAM5WD2OE6LQ\Capabilities\URLAssociations]
"news" = "ChromiumHTM.QQL2B5ZRL54V5ERAM5WD2OE6LQ"

[HKLM\SOFTWARE\Clients\StartMenuInternet\Yappyz.QQL2B5ZRL54V5ERAM5WD2OE6LQ\InstallInfo]
"ReinstallCommand" = "%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Application\yappyz.exe --make-default-browser"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\Yappyz]
"DisplayVersion" = "27.1.1419.0"

[HKCU\Software\yappyz\Commands\install-extension]
"WebAccessible" = "1"

[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "44 BB 12 1E A3 FE 9D C5 DE 1F 9C A8 1B C9 8A A7"

[HKLM\SOFTWARE\Clients\StartMenuInternet\Yappyz.QQL2B5ZRL54V5ERAM5WD2OE6LQ\Capabilities\FileAssociations]
".htm" = "ChromiumHTM.QQL2B5ZRL54V5ERAM5WD2OE6LQ"

[HKLM\SOFTWARE\Clients\StartMenuInternet\Yappyz.QQL2B5ZRL54V5ERAM5WD2OE6LQ\Capabilities\URLAssociations]
"ftp" = "ChromiumHTM.QQL2B5ZRL54V5ERAM5WD2OE6LQ"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd72-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"

[HKCR\.xht\OpenWithProgids]
"ChromiumHTM.QQL2B5ZRL54V5ERAM5WD2OE6LQ" = ""

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{b98117e8-75ca-11e2-81b2-000c293708fb}]
"BaseClass" = "Drive"

[HKCR\ChromiumHTM.QQL2B5ZRL54V5ERAM5WD2OE6LQ]
"(Default)" = "Chromium HTML Document"

[HKCU\Software\yappyz]
"lang" = "en"

[HKCU\Software\Classes\CLSID\{A2DF06F9-A21A-44A8-8A99-8B9C84F29160}\LocalServer32]
"ServerExecutable" = "%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Application\27.1.1419.0\delegate_execute.exe"

[HKLM\SOFTWARE\Clients\StartMenuInternet\Yappyz.QQL2B5ZRL54V5ERAM5WD2OE6LQ\Capabilities\URLAssociations]
"http" = "ChromiumHTM.QQL2B5ZRL54V5ERAM5WD2OE6LQ"

[HKLM\SOFTWARE\Clients\StartMenuInternet\Yappyz.QQL2B5ZRL54V5ERAM5WD2OE6LQ\Capabilities]
"ApplicationName" = "Yappyz"

[HKCR\ChromiumHTM.QQL2B5ZRL54V5ERAM5WD2OE6LQ\DefaultIcon]
"(Default)" = "%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Application\yappyz.exe,0"

[HKLM\SOFTWARE\Clients\StartMenuInternet\Yappyz.QQL2B5ZRL54V5ERAM5WD2OE6LQ\Capabilities\FileAssociations]
".shtml" = "ChromiumHTM.QQL2B5ZRL54V5ERAM5WD2OE6LQ"

[HKLM\SOFTWARE\Clients\StartMenuInternet\Yappyz.QQL2B5ZRL54V5ERAM5WD2OE6LQ\Capabilities\URLAssociations]
"smsto" = "ChromiumHTM.QQL2B5ZRL54V5ERAM5WD2OE6LQ"

[HKCR\ChromiumHTM.QQL2B5ZRL54V5ERAM5WD2OE6LQ]
"URL Protocol" = ""

[HKLM\SOFTWARE\RegisteredApplications]
"Yappyz.QQL2B5ZRL54V5ERAM5WD2OE6LQ" = "Software\Clients\StartMenuInternet\Yappyz.QQL2B5ZRL54V5ERAM5WD2OE6LQ\Capabilities"

[HKLM\SOFTWARE\Clients\StartMenuInternet\Yappyz.QQL2B5ZRL54V5ERAM5WD2OE6LQ\Capabilities\Startmenu]
"StartMenuInternet" = "Yappyz.QQL2B5ZRL54V5ERAM5WD2OE6LQ"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\Yappyz]
"VersionMajor" = "1419"

[HKCU\Software\yappyz]
"InstallerExtraCode1" = "1"

The Trojan deletes the following value(s) in system registry:

[HKCU\Software\yappyz]
"ap"
"InstallerExtraCode1"

The process %original file name%.exe:580 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd72-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\MSHist012015100120151002]
"CacheOptions" = "11"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths]
"Directory" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path4]
"CacheLimit" = "65452"
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache4"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path2]
"CacheLimit" = "65452"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"AppData" = "%Documents and Settings%\%current user%\Application Data"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd73-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\Yappyz]
"UninstallString" = "%Documents and Settings%\%current user%\Local Settings\Application Data\YappyzUninstall\YappyzUninstall.exe /uninstall"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Cookies" = "%Documents and Settings%\%current user%\Cookies"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path2]
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache2"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common AppData" = "%Documents and Settings%\All Users\Application Data"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd75-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\Yappyz]
"UninstallStringOld" = "%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Application\27.1.1419.0\Installer\setup.exe --uninstall"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Cache" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\MSHist012015100120151002]
"CachePrefix" = ":2015100120151002:"

[HKLM\SOFTWARE\Microsoft\DirectDraw\MostRecentApplication]
"Name" = "%original file name%.exe"

[HKCU\Software\yappyz\InitPrefs]
"extensionId" = "jajfdjebpfphpjkocjenkhegepamcbcl"

[HKLM\System\CurrentControlSet\Hardware Profiles\0001\Software\Microsoft\windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path1]
"CacheLimit" = "65452"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections]
"SavedLegacySettings" = "3C 00 00 00 1D 00 00 00 01 00 00 00 00 00 00 00"

[HKLM\SOFTWARE\Microsoft\DirectDraw\MostRecentApplication]
"ID" = "1391677032"

[HKCU\Software\yappyz]
"TempAppInstanceUid" = "1F60ED41-882C-452D-A717-E4B26EAE7226"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\MSHist012015100120151002]
"CacheRepair" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Local AppData" = "%Documents and Settings%\%current user%\Local Settings\Application Data"

[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "5C 90 A4 0E 04 BF 2D 3F C6 A4 8E 6B 49 5E 6A 46"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path1]
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache1"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path3]
"CacheLimit" = "65452"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"MigrateProxy" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"History" = "%Documents and Settings%\%current user%\Local Settings\History"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{b98117e8-75ca-11e2-81b2-000c293708fb}]
"BaseClass" = "Drive"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\MSHist012015100120151002]
"CachePath" = "%USERPROFILE%\Local Settings\History\History.IE5\MSHist012015100120151002\"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path3]
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache3"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths]
"Paths" = "4"

[HKCU\Software\Microsoft\Windows\ShellNoRoam\MUICache\%Program Files%\Internet Explorer]
"iexplore.exe" = "Internet Explorer"

[HKCU\Software\yappyz]
"AppInstanceUid" = "1F60ED41-882C-452D-A717-E4B26EAE7226"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\MSHist012015100120151002]
"CacheLimit" = "8192"

The Trojan modifies IE settings for security zones to map all local web-nodes with no dots which do not refer to any zone to the Intranet Zone:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"UNCAsIntranet" = "1"

The Trojan modifies IE settings for security zones to map all web-nodes that bypassing the proxy to the Intranet Zone:

"ProxyBypass" = "1"

Proxy settings are disabled:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

The Trojan modifies IE settings for security zones to map all urls to the Intranet Zone:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName" = "1"

The Trojan deletes the following registry key(s):

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\MSHist012014041520140416]

The Trojan deletes the following value(s) in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"AutoConfigURL"
"ProxyServer"
"ProxyOverride"

[HKCU\Software\yappyz]
"TempAppInstanceUid"

The process yappyz_1332_1.exe:1520 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "E8 C0 A0 9D 7D 27 EF DA 56 FE 28 20 9D 98 9B 38"

The process yappyz.exe:1436 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "2F 1C 48 A7 55 07 9B F8 0C CE D5 D0 7D CD 43 65"

The process yappyz.exe:2320 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "77 50 9C AB 1A 85 EC 4A 44 FE D1 DE 85 62 4C C4"

The process yappyz.exe:852 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "84 7A B3 83 E4 2C C8 B8 41 0C 9C 67 37 A0 A2 07"

The process yappyz.exe:1168 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "F6 17 C8 62 5E 39 42 7A E0 47 61 10 20 E4 EE 57"

The process yappyz.exe:1484 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "11 AA CC C9 F4 2C 86 34 ED 8F 35 DD CD 45 B2 E4"

The process yappyz.exe:1344 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "C4 56 3D 4F E4 1B 46 5F D1 05 DD E4 77 98 01 8D"

The process yappyz.exe:2404 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "DB 3C 84 43 3F E9 38 45 9A 5C 55 67 CF BF 7D 25"

The process yappyz.exe:2236 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "5E 7F 7A 8F A6 32 AE 51 81 DD 92 30 BC 49 E3 BD"

The process yappyz.exe:2684 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "88 23 4C 65 8D A4 B2 85 D9 02 08 47 CA 2E 1D B4"

The process yappyz.exe:2192 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "AA 59 32 23 23 D8 EB CA B1 72 FF 0C 99 D4 E0 99"

The process yappyz.exe:2108 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "44 0D 7A 96 B2 C5 FE 23 81 C0 3E 19 CA CE E0 EC"

The process yappyz.exe:2528 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "AB 8B F9 95 4F D3 B5 9A 2B E8 6B 57 92 67 B6 0A"

The process yappyz.exe:1792 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "E5 9E 81 70 54 A5 6C FF 85 B9 09 7F 1D 38 AC 51"

The process yappyz.exe:2244 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "03 7B 77 DB E0 ED 7E ED 18 69 05 20 D9 A3 DA 63"

The process yappyz.exe:2164 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "05 D2 FF DB EC E1 3B B6 D4 F5 B1 B2 AB 53 AA 87"

The process yappyz.exe:2008 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "BE FB 4C 51 6D 88 69 33 52 75 02 FA DA DF 50 3A"

The process yappyz.exe:372 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "63 44 21 31 1D 47 A4 2B 82 49 F6 A3 D6 AA 93 3C"

The process yappyz.exe:232 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Tracing\Microsoft\eappprxy\traceIdentifier]
"Guid" = "5f31090b-d990-4e91-b16d-46121d0255aa"

[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Tracing\Microsoft\QUtil\traceIdentifier]
"Guid" = "8aefce96-4618-42ff-a057-3536aa78233e"

[HKLM\SOFTWARE\Microsoft\ESENT\Process\yappyz\DEBUG]
"Trace Level" = ""

[HKLM\System\CurrentControlSet\Services\Eventlog\Application\ESENT]
"EventMessageFile" = "%System%\ESENT.dll"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"AppData" = "%Documents and Settings%\%current user%\Application Data"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common Start Menu" = "%Documents and Settings%\All Users\Start Menu"

[HKLM\System\CurrentControlSet\Services\Eventlog\Application\ESENT]
"CategoryCount" = "16"
"TypesSupported" = "7"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Personal" = "%Documents and Settings%\%current user%\My Documents"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd73-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Local AppData" = "%Documents and Settings%\%current user%\Local Settings\Application Data"

[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Tracing\Microsoft\eappcfg\traceIdentifier]
"BitNames" = " Error Unusual Info Debug"

[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Tracing\Microsoft\eappcfg]
"Active" = "1"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common AppData" = "%Documents and Settings%\All Users\Application Data"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd75-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"My Pictures" = "%Documents and Settings%\%current user%\My Documents\My Pictures"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common Desktop" = "%Documents and Settings%\All Users\Desktop"

[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Tracing\Microsoft\eappcfg]
"ControlFlags" = "1"
"LogSessionName" = "stdout"

[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Tracing\Microsoft\QUtil]
"Active" = "1"

[HKCR\TypeLib\{1EA4DBF0-3C3B-11CF-810C-00AA00389B71}\1.1\0\win32]
"(Default)" = "%System%\oleacc.dll"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common Documents" = "%Documents and Settings%\All Users\Documents"
"CommonVideo" = "%Documents and Settings%\All Users\Documents\My Videos"
"CommonMusic" = "%Documents and Settings%\All Users\Documents\My Music"

[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Tracing\Microsoft\eappprxy]
"LogSessionName" = "stdout"
"ControlFlags" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Start Menu" = "%Documents and Settings%\%current user%\Start Menu"

[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Tracing\Microsoft\eappcfg\traceIdentifier]
"Guid" = "5f31090b-d990-4e91-b16d-46121d0255aa"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"CommonPictures" = "%Documents and Settings%\All Users\Documents\My Pictures"

[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Tracing\Microsoft\eappprxy]
"Active" = "1"

[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "3B CB CB DA 91 31 EB 86 89 6F C6 18 CC 35 1E A5"

[HKLM\System\CurrentControlSet\Services\Eventlog\Application\ESENT]
"CategoryMessageFile" = "%System%\ESENT.dll"

[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Tracing\Microsoft\eappprxy\traceIdentifier]
"BitNames" = " Error Unusual Info Debug"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Desktop" = "%Documents and Settings%\%current user%\Desktop"

[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Tracing\Microsoft\QUtil]
"LogSessionName" = "stdout"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd72-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{b98117e8-75ca-11e2-81b2-000c293708fb}]
"BaseClass" = "Drive"

[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Tracing\Microsoft\QUtil\traceIdentifier]
"BitNames" = " Error Unusual Info Debug"

[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Tracing\Microsoft\QUtil]
"ControlFlags" = "1"

[HKCU\Software\yappyz]
"lastrun" = "13088151454108625"

To automatically run itself each time Windows is booted, the Trojan adds the following link to its file to the system registry autorun key:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Run]
"GoogleChromeAutoLaunch_6FA4726DEB88F1C0FC88AD35ECAB7ECB" = "%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Application\yappyz.exe --no-startup-window"

The Trojan deletes the following value(s) in system registry:

[HKLM\SOFTWARE\Microsoft\ESENT\Process\yappyz\DEBUG]
"Trace Level"

The Trojan disables automatic startup of the application by deleting the following autorun value:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Run]
"GoogleChromeAutoLaunch_6FA4726DEB88F1C0FC88AD35ECAB7ECB"

Dropped PE files

MD5 File path
bd0d34717f7cc121b86ce647bc87da93 c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Application Data\Yappyz\Application\27.1.1419.0\Installer\setup.exe
c7b8adadbcf18760a88e0176001b117c c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Application Data\Yappyz\Application\27.1.1419.0\Locales\am.dll
c0848aa75b6097d1bce50ff13f8b1cde c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Application Data\Yappyz\Application\27.1.1419.0\Locales\ar.dll
52212b4f2dacac97e91f85424636abef c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Application Data\Yappyz\Application\27.1.1419.0\Locales\bg.dll
65bf558477df10b6f1564febd9697f95 c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Application Data\Yappyz\Application\27.1.1419.0\Locales\bn.dll
55cb0e7a61d7eac9371f8249b622ae5d c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Application Data\Yappyz\Application\27.1.1419.0\Locales\ca.dll
f4dd4c5ac610d58e3ec5a6faea0c6a89 c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Application Data\Yappyz\Application\27.1.1419.0\Locales\cs.dll
f110ed877583f97380a5bb86fc0f34c4 c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Application Data\Yappyz\Application\27.1.1419.0\Locales\da.dll
0078541f6caadfad6aecc57e3910930b c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Application Data\Yappyz\Application\27.1.1419.0\Locales\de.dll
5028615fa2eeda4f7fcbf492348a886b c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Application Data\Yappyz\Application\27.1.1419.0\Locales\el.dll
d58cd70b6115d8c73cdfe9ddd9df2672 c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Application Data\Yappyz\Application\27.1.1419.0\Locales\en-GB.dll
d58cf62e2b0e97da16b278a974c23ad2 c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Application Data\Yappyz\Application\27.1.1419.0\Locales\en-US.dll
014cbb950c5e91b21e92287109b93b90 c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Application Data\Yappyz\Application\27.1.1419.0\Locales\es-419.dll
efcb3684ed05620cfbd63e4c8f6d5a81 c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Application Data\Yappyz\Application\27.1.1419.0\Locales\es.dll
22bfad2dab53593e0fa6a6f11045ad80 c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Application Data\Yappyz\Application\27.1.1419.0\Locales\et.dll
54014a4707a5602b071244b6ef6efa0f c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Application Data\Yappyz\Application\27.1.1419.0\Locales\fa.dll
a6804bd7d793fbf66e1b3ad038f4ca04 c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Application Data\Yappyz\Application\27.1.1419.0\Locales\fi.dll
7e3c54fdbd3550f8cc276eeff2cfa2f9 c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Application Data\Yappyz\Application\27.1.1419.0\Locales\fil.dll
d1973a4061813f1be987fda41ac738fc c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Application Data\Yappyz\Application\27.1.1419.0\Locales\fr.dll
118f8e913c88a61d751360c4aa190d95 c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Application Data\Yappyz\Application\27.1.1419.0\Locales\gu.dll
b1c43a2d7a4836f9075b4b032f4fb6e7 c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Application Data\Yappyz\Application\27.1.1419.0\Locales\he.dll
c54a2b55cf8ed0d77c91ebcb83cf3d93 c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Application Data\Yappyz\Application\27.1.1419.0\Locales\hi.dll
e9d1363401862dc60b78bc7b8039f603 c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Application Data\Yappyz\Application\27.1.1419.0\Locales\hr.dll
fb0a4b3a0ed60ae4411b2ad661ed8702 c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Application Data\Yappyz\Application\27.1.1419.0\Locales\hu.dll
befbb0d102878585473b0d4f15d24e2b c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Application Data\Yappyz\Application\27.1.1419.0\Locales\id.dll
8d04b9afbd3bc8f4f27d8786790c5f97 c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Application Data\Yappyz\Application\27.1.1419.0\Locales\it.dll
445ef3f85ae3524e10413647415fbe2d c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Application Data\Yappyz\Application\27.1.1419.0\Locales\ja.dll
c0f7771c9bbdf060a58a313343ac897e c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Application Data\Yappyz\Application\27.1.1419.0\Locales\kn.dll
90e38b8988b9347358c272b1892f7e32 c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Application Data\Yappyz\Application\27.1.1419.0\Locales\ko.dll
6322507aec1d1fbe398bc5f4acaa8bc1 c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Application Data\Yappyz\Application\27.1.1419.0\Locales\lt.dll
88bdf975c9f2ce720ca1ab3fb994c161 c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Application Data\Yappyz\Application\27.1.1419.0\Locales\lv.dll
ecf47321b03446c844ee39597f37fdb5 c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Application Data\Yappyz\Application\27.1.1419.0\Locales\ml.dll
210d09210192bd3cb28a17871e937a7d c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Application Data\Yappyz\Application\27.1.1419.0\Locales\mr.dll
5187852a7256aa5d0e8179f6ec1aa701 c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Application Data\Yappyz\Application\27.1.1419.0\Locales\ms.dll
afbdf857554e3e14ca158bc742c7505a c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Application Data\Yappyz\Application\27.1.1419.0\Locales\nb.dll
dbb580075aae5b9cd7ad94ef1a503feb c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Application Data\Yappyz\Application\27.1.1419.0\Locales\nl.dll
5a41c8e604517822b8b29e38da52c57a c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Application Data\Yappyz\Application\27.1.1419.0\Locales\pl.dll
056b13ca87313b60ce5797e273bb2724 c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Application Data\Yappyz\Application\27.1.1419.0\Locales\pt-BR.dll
91630fd3e355fe83ae6c0cafc7864de3 c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Application Data\Yappyz\Application\27.1.1419.0\Locales\pt-PT.dll
8559caf5009d4aee2ad46cf4a0ff1fb3 c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Application Data\Yappyz\Application\27.1.1419.0\Locales\ro.dll
d5125bf784bc4e9f478ed6d53bc996f4 c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Application Data\Yappyz\Application\27.1.1419.0\Locales\ru.dll
8ca2ea53c54f6edbc1ceac8d56e0c05b c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Application Data\Yappyz\Application\27.1.1419.0\Locales\sk.dll
baf09f46e8591438822dbd8a1798e241 c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Application Data\Yappyz\Application\27.1.1419.0\Locales\sl.dll
76e9cf96953557e430b8e04af9f5176b c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Application Data\Yappyz\Application\27.1.1419.0\Locales\sr.dll
2e1f554cdf2c51a0401d9133b068043d c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Application Data\Yappyz\Application\27.1.1419.0\Locales\sv.dll
a9261a9db47be7eb0c7a2a6667b8b997 c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Application Data\Yappyz\Application\27.1.1419.0\Locales\sw.dll
1c3091fdaee9df962d9bf47483c23b78 c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Application Data\Yappyz\Application\27.1.1419.0\Locales\ta.dll
64ca39d221b253f5c2d0377853303ed1 c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Application Data\Yappyz\Application\27.1.1419.0\Locales\te.dll
932936c1f2fdca9ae08938b72564ffaa c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Application Data\Yappyz\Application\27.1.1419.0\Locales\th.dll
2204f7032d9f2659f3c78569423244fe c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Application Data\Yappyz\Application\27.1.1419.0\Locales\tr.dll
6322aa8977b7906bbcf2c0c31dd306a0 c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Application Data\Yappyz\Application\27.1.1419.0\Locales\uk.dll
17d7c5e48594ee18fe3f1ebcaaa1b686 c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Application Data\Yappyz\Application\27.1.1419.0\Locales\vi.dll
95a22da22d49c648019d7b5db51746f2 c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Application Data\Yappyz\Application\27.1.1419.0\Locales\zh-CN.dll
18f9cec1ba99b1ba2adc2c25427ef1da c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Application Data\Yappyz\Application\27.1.1419.0\Locales\zh-TW.dll
6d6f16acfe64a13887812e886c53d5d5 c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Application Data\Yappyz\Application\27.1.1419.0\PepperFlash\pepflashplayer.dll
6563038cd4421c6382b5b5415a3996b4 c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Application Data\Yappyz\Application\27.1.1419.0\chrome.dll
bd40eca923e6dc93c08af3269bc11d55 c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Application Data\Yappyz\Application\27.1.1419.0\chrome_frame_helper.dll
d7321ede1fbd8ef81d7f71b95b5f86e8 c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Application Data\Yappyz\Application\27.1.1419.0\chrome_frame_helper.exe
b2fdefaee5ff029e03ddc7b902cf9734 c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Application Data\Yappyz\Application\27.1.1419.0\chrome_launcher.exe
b61f20411282fd4f0ac5540d9ef261cf c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Application Data\Yappyz\Application\27.1.1419.0\d3dcompiler_46.dll
0042f8e8f7ddb9f952a32c9bc1b45f04 c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Application Data\Yappyz\Application\27.1.1419.0\delegate_execute.exe
de7a420889be3a5024477002d56da834 c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Application Data\Yappyz\Application\27.1.1419.0\ffmpegsumo.dll
c104bf1724e141e408db0fa815145873 c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Application Data\Yappyz\Application\27.1.1419.0\icudt.dll
df57953e5f66846187d8199c457fb089 c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Application Data\Yappyz\Application\27.1.1419.0\libegl.dll
f8c574b175c7be017aece11c7cdc4599 c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Application Data\Yappyz\Application\27.1.1419.0\libglesv2.dll
f43bec88e905d6a85aac9a580c24cf50 c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Application Data\Yappyz\Application\27.1.1419.0\metro_driver.dll
6bf4f32f1ec89b305876af09f096acd0 c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Application Data\Yappyz\Application\27.1.1419.0\nacl64.exe
b1c30652b2b33f6121cbd740ee616e7e c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Application Data\Yappyz\Application\27.1.1419.0\npchrome_frame.dll
a0441e828c3474ead1bf6d504a47d4f5 c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Application Data\Yappyz\Application\27.1.1419.0\ppgooglenaclpluginchrome.dll
a2b8a829e2a3b1d93dcd0084bc235363 c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Application Data\Yappyz\Application\yappyz.exe
59a405f95d60d2ade673fa372995d520 c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\yappyz_1332_1[1].exe

HOSTS file anomalies

No changes have been detected.

Rootkit activity

No anomalies have been detected.

Propagation

VersionInfo

Company Name: SIEN
Product Name: Yappyz
Product Version: 6.50.2.0
Legal Copyright: (c)SIEN S.A. All rights reserved.
Legal Trademarks:
Original Filename: Setup.exe
Internal Name: YappyzSetup.exe
File Version: 6.50.2.0
File Description: Yappyz
Comments:
Language: English (United States)

PE Sections

Name Virtual Address Virtual Size Raw Size Entropy Section MD5
.text 4096 518446 518656 4.56788 635cd221fed66f8ddc3a301c2f1a8aba
.rdata 524288 132764 133120 3.24416 0524adb7a7a483b43106373de6553e66
.data 659456 34032 16896 3.12428 3ee3c0b4ef2cc4528e5f8bbc522d94d8
.rsrc 696320 49952 50176 3.25424 70106f11c5f7dbadd39dae8b17a690d1
.reloc 749568 126260 126464 1.74758 f00853fc403d51c8abc2b1b28d4c66b5

Dropped from:

Downloaded by:

Similar by SSDeep:

Similar by Lavasoft Polymorphic Checker:

Total found: 5
1af23116f55eab763e6f1293c3189a99
be524e95dd323ec8f6f37c0548d857dc
f8b366e4c3abadfaa1eba52585066952
ec57720d7cb4a67ee7d7e042d05f0ceb
ea000fc9be136e5a088b4b63faa2d2c2

URLs

URL IP
hxxp://public.yappyz.com.cdngc.net/setup/fr-FR 37.29.0.100
hxxp://public.yappyz.com.cdngc.net/setup/bundles/css/main?v=EUchDgvNqy2LnTDqnlSXy0d7gHrRZrjdoFfWa5I7Ot41 37.29.0.100
hxxp://googleapis.l.google.com/ajax/libs/jquery/1.9.1/jquery.min.js
hxxp://public.yappyz.com.cdngc.net/setup/bundles/js/main?v=sDSsPxD4ow0YsO7BRbvTn4BdtyoREQVpAbpVyiLcQs41 37.29.0.100
hxxp://public.yappyz.com.cdngc.net/setup/content/img/BetaYappyz300X90.png 37.29.0.100
hxxp://public.yappyz.com.cdngc.net/setup/content/img/yappyz.mini.png 37.29.0.100
hxxp://public.yappyz.com.cdngc.net/setup/bundles/js/install?v=hXu8-1oDiJ-oMTCBcn3dculz_DbDV6SM0tBg_PpCmoE1 37.29.0.100
hxxp://placehold.it/128x128 162.159.242.140
hxxp://public.yappyz.com.cdngc.net/api/extensions/jajfdjebpfphpjkocjenkhegepamcbcl/data/?callback=OnUpdateAppInfos 37.29.0.100
hxxp://public.yappyz.com.cdngc.net/api/extensions/jajfdjebpfphpjkocjenkhegepamcbcl/icon/ 37.29.0.100
hxxp://www-google-analytics.l.google.com/ga.js
hxxp://a1742.g1.akamai.net/vz/3C0469A7-A63D-4A73-B521-7A91DFBEBA64/1/yappyz_1332_1.exe
hxxp://geoloc.iminent.com.cdngc.net/?&callback=OnGeoloc 37.29.0.28
hxxp://www-google-analytics.l.google.com/r/__utm.gif?utmwv=5.6.7&utms=1&utmn=1510111355&utmhn=public.yappyz.com&utmcs=utf-8&utmsr=1276x846&utmvp=550x220&utmsc=32-bit&utmul=en-us&utmje=1&utmfl=11.6 r602&utmdt=Yappyz Setup&utmhid=170252272&utmr=-&utmp=/setup/fr-FR&utmht=1443677833436&utmac=UA-37741269-1&utmcc=__utma=40499491.528497393.1443677833.1443677833.1443677833.1;+__utmz=40499491.1443677833.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none);&utmjid=1254820438&utmredir=1&utmu=qAAAAAAAAAAAAAAAAAAAAAAE~
hxxp://public.yappyz.com.cdngc.net/api/extensions/fckpdnpcdkdbldaegkokodcimgohljpo/updateinfo/?x=id=fckpdnpcdkdbldaegkokodcimgohljpo&v=0.0&uc 37.29.0.100
hxxp://public.yappyz.com.cdngc.net/api/extensions/kjhpfcjlhjpbdpfcffaiopddnpojdpok/updateinfo/?x=id=kjhpfcjlhjpbdpfcffaiopddnpojdpok&v=0.0&uc 37.29.0.100
hxxp://public.yappyz.com.cdngc.net/api/extensions/hhidenhmbjekmpnnlaakmlegjklgoalj/updateinfo/?x=id=hhidenhmbjekmpnnlaakmlegjklgoalj&v=0.0&uc 37.29.0.100
hxxp://public.yappyz.com.cdngc.net/front/en-US/confirm/install/jajfdjebpfphpjkocjenkhegepamcbcl 37.29.0.100
hxxp://public.yappyz.com.cdngc.net/api/extensions/onjgfkedmajckgeodakihmpbgjeokfap/updateinfo/?x=id=onjgfkedmajckgeodakihmpbgjeokfap&v=0.0&uc 37.29.0.100
hxxp://installevent-384733675.us-east-1.elb.amazonaws.com/95329B79-68A1-4B84-B7F9-8BB78E73E018/json/RaiseInstallEventMethod/?callback=jQuery1910052205445555057905_1443677832686&InstallFlags=5&UserSettings=0&BagKey=&AppInstanceId=1F60ED41-882C-452D-A717-E4B26EAE7226&Version=6.50.2.0&SessionCode=11&Duration=21&Slot=1&OperatingSystem=Microsoft Windows NT 5.1.2600 Service Pack 3&CDNCountryCode=UA&ErrorCode=0&BrowserSettings=7&DefaultBrowser=IE&MonetisationOption=0&RefId=999&ObjectUid=41399590-f7f5-aef9-294d-a7464f0c212b&ClientType=MCC-ASYNC&_=1443677832687
hxxp://public.yappyz.com.cdngc.net/front/Content/styles/home/style?v=mY5m0XTilNnmX8oqyJmH0Iz81sxvm_ft1ShOwaNIDn41 37.29.0.100
hxxp://public.yappyz.com.cdngc.net/front/bundles/scripts/home?v=qAL6kx_tRElGQ5PmBnWfGr3EVvdryDfmiIBoiCZs2eE1 37.29.0.100
hxxp://public.yappyz.com.cdngc.net/front/Content/styles/home/Fonts/lobster_1.4_1-webfont.eot? 37.29.0.100
hxxp://public.yappyz.com.cdngc.net/api/extensions/fckpdnpcdkdbldaegkokodcimgohljpo/crx 37.29.0.100
hxxp://public.yappyz.com.cdngc.net/api/extensions/onjgfkedmajckgeodakihmpbgjeokfap/crx 37.29.0.100
hxxp://public.yappyz.com.cdngc.net/front/Content/images/Home/BETAYappyzWebsite.png 37.29.0.100
hxxp://public.yappyz.com.cdngc.net/front/Content/images/Home/YappyzHeader.jpg 37.29.0.100
hxxp://www-google-analytics.l.google.com/__utm.gif?utmwv=5.6.7&utms=2&utmn=438248317&utmhn=public.yappyz.com&utmcs=utf-8&utmsr=1276x846&utmvp=1272x693&utmsc=32-bit&utmul=en-us&utmje=1&utmfl=11.6 r602&utmdt=Yappyz • Thank you for installing&utmhid=1934479082&utmr=-&utmp=/front/en-US/confirm/install/jajfdjebpfphpjkocjenkhegepamcbcl&utmht=1443677856468&utmac=UA-37741269-1&utmcc=__utma=40499491.528497393.1443677833.1443677833.1443677833.1;+__utmz=40499491.1443677833.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none);&utmjid=&utmu=qAAAAAAAAAAAAAAAAAAAAAAE~
hxxp://public.yappyz.com.cdngc.net/api/extensions/kjhpfcjlhjpbdpfcffaiopddnpojdpok/crx 37.29.0.100
hxxp://pagead.l.doubleclick.net/pagead/conversion.js
hxxp://public.yappyz.com.cdngc.net/api/extensions/hhidenhmbjekmpnnlaakmlegjklgoalj/crx 37.29.0.100
hxxp://public.yappyz.com.cdngc.net/front/Content/Images/Home/LikeFacebook.png 37.29.0.100
hxxp://public.yappyz.com.cdngc.net/front/Content/Images/Home/LikeTwitter.png 37.29.0.100
hxxp://public.yappyz.com.cdngc.net/front/Content/Images/Home/LikeGoogle.png 37.29.0.100
hxxp://public.yappyz.com.cdngc.net/front/Content/images/Home/chrome.png 37.29.0.100
hxxp://a1742.g1.akamai.net/vz/41399590-f7f5-aef9-294d-a7464f0c212b/2/bejeweled.png
hxxp://public.yappyz.com.cdngc.net/api/extensions/jajfdjebpfphpjkocjenkhegepamcbcl/crx 37.29.0.100
hxxp://www-google-analytics.l.google.com/__utm.gif?utmwv=5.6.7&utms=1&utmn=1278248799&utmhn=onjgfkedmajckgeodakihmpbgjeokfap&utmt=event&utme=5(First Run*The user has launched Yappyz for the first time)&utmcs=ISO-8859-1&utmsr=1276x846&utmsc=32-bit&utmul=en-us&utmje=1&utmfl=11.6 r602&utmhid=1987453243&utmr=-&utmp=/private/background.html&utmht=1443677861811&utmac=UA-37741269-1&utmcc=__utma=240588381.964592021.1443677862.1443677862.1443677862.1;+__utmz=240588381.1443677862.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none);&utmjid=&utmu=4AAAAAAAAAAAAAAAAAAAAAAE~
hxxp://logevent-bd-pl-178752783.us-east-1.elb.amazonaws.com/external/95329B79-68A1-4B84-B7F9-8BB78E73E018/json2/RaiseObjectEventLiteMethod/?AppInstanceId=1F60ED41-882C-452D-A717-E4B26EAE7226&EventType=8&Version=0.1.1424.1
hxxp://www-google-analytics.l.google.com/r/__utm.gif?utmwv=5.6.7&utms=2&utmn=970093247&utmhn=onjgfkedmajckgeodakihmpbgjeokfap&utme=8(FirstRun)9(201540)11(1)&utmcs=ISO-8859-1&utmsr=1276x846&utmsc=32-bit&utmul=en-us&utmje=1&utmfl=11.6 r602&utmhid=1987453243&utmr=-&utmp=/home.html&utmht=1443677862590&utmac=UA-37741269-1&utmcc=__utma=240588381.964592021.1443677862.1443677862.1443677862.1;+__utmz=240588381.1443677862.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none);&utmjid=1953777426&utmredir=1&utmu=6QCAAAAAAAAAAAAAAAAAAAAE~
hxxp://apix.yappyz.com.cdngc.net/external/95329B79-68A1-4B84-B7F9-8BB78E73E018/json2/DrillDownObjectMethod/?ObjectTypeField=2147483647&Uid=979AD9EF-CDA1-4A5D-865E-765248C3B960&Depth=2&CultureId=1033 37.29.0.14
hxxp://a1742.g1.akamai.net/vz/eeac1733-6902-af86-3a3f-ca60a80eca46/2/governor-of-poker.png
hxxp://a1742.g1.akamai.net/vz/ad1a3f6c-4ad5-0bd2-0851-f515b05dc02d/2/winter-shop.png
hxxp://a1742.g1.akamai.net/vz/ec4b4f22-3763-962b-bb38-aa829064307a/2/christmas-frenzy.png
hxxp://a1742.g1.akamai.net/vz/c121579f-55a7-4757-6974-00baf6ed4979/2/laser-cannon.png
hxxp://www-google-analytics.l.google.com/__utm.gif?utmwv=5.6.7&utms=3&utmn=1305635976&utmhn=onjgfkedmajckgeodakihmpbgjeokfap&utmt=event&utme=5(apps*Launch game*Launch Bejeweled)8(FirstRun)9(201540)11(1)&utmcs=ISO-8859-1&utmsr=1276x846&utmsc=32-bit&utmul=en-us&utmje=1&utmfl=11.6 r602&utmhid=1987453243&utmr=-&utmp=/private/background.html&utmht=1443677864249&utmac=UA-37741269-1&utmcc=__utma=240588381.964592021.1443677862.1443677862.1443677862.1;+__utmz=240588381.1443677862.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none);&utmjid=&utmu=6QCAAAAAAAAAAAAAAAAAAAAE~
hxxp://logevent-bd-pl-178752783.us-east-1.elb.amazonaws.com/external/95329B79-68A1-4B84-B7F9-8BB78E73E018/json2/RaiseObjectEventLiteMethod/?AppInstanceId=1F60ED41-882C-452D-A717-E4B26EAE7226&EventType=16&TargetUid=41399590-f7f5-aef9-294d-a7464f0c212b&TxUid=435a96ed-92c0-4ea6-30a8-7cf1694ea50f&Version=0.1.1424.1
hxxp://apix.yappyz.com.cdngc.net/external/95329B79-68A1-4B84-B7F9-8BB78E73E018/json2/DrillDownObjectMethod/?ObjectTypeField=2147483647&Uid=41399590-f7f5-aef9-294d-a7464f0c212b&Depth=1&CultureId=1033 37.29.0.14
hxxp://star.c10r.facebook.com/plugins/like.php?href=www.facebook.com/yappyz&send=false&layout=button_count&show_faces=false&font=arial&colorscheme=light&action=like&height=21
hxxp://adserver.iminent.com.cdngc.net/Render/95329B79-68A1-4B84-B7F9-8BB78E73E018/0/yappyz/between_games/ 174.35.71.19
hxxp://revive-ads-srv-3-0-2-lb-911791041.us-east-1.elb.amazonaws.com/openx/www/delivery/ajs.php?zoneid=582&cb=85765325300&charset=UTF-8&loc=http://adserver.iminent.com/Render/95329B79-68A1-4B84-B7F9-8BB78E73E018/0/yappyz/between_games/#AppInstanceUid=1F60ED41-882C-452D-A717-E4B26EAE7226&referer=&appInstanceUid=1F60ED41-882C-452D-A717-E4B26EAE7226&protocol=http&trackerKey=3616
hxxp://adserver.iminent.com.cdngc.net/scripts/video/videoplaza_min_js?v=IeAQjYG0CQy7tOE5i_HejeaqpDzJ2YeDIWhZloywZQg1 174.35.71.19
hxxp://revive-ads-srv-3-0-2-lb-911791041.us-east-1.elb.amazonaws.com/openx/www/delivery/lg.php?bannerid=1913&campaignid=712&zoneid=582&loc=1&referer=http://adserver.iminent.com/Render/95329B79-68A1-4B84-B7F9-8BB78E73E018/0/yappyz/between_games/#AppInstanceUid=1F60ED41-882C-452D-A717-E4B26EAE7226&cb=eabb8be3fb
hxxp://a1531.g.akamai.net/resources/flash/miniplayer/latest/miniplayer.swf
hxxp://a1531.g.akamai.net/resources/flash/miniplayer/1.0.3/miniplayer.swf
hxxp://a1531.g.akamai.net/resources/boot/as3_videoplaza_bootloader.swf
hxxp://proxylb1-ext-sth-tc2.videoplaza.io/crossdomain.xml
hxxp://proxylb1-ext-sth-tc2.videoplaza.io/proxy/environment.xml
hxxp://vp.videoplaza.tv/resources/boot/environment.xml 46.226.155.30
hxxp://vp.videoplaza.tv/crossdomain.xml 46.226.155.30
hxxp://proxylb1-ext-sth-tc2.videoplaza.io/proxy/bwtest.jpg?0.002484244294464588
hxxp://vp.videoplaza.tv/resources/bwtest.jpg 46.226.155.30
hxxp://proxylb1-ext-sth-tc2.videoplaza.io/proxy/as3_vp_player
hxxp://vp.videoplaza.tv/resources/as3_vp_player_2.4.15.17.4.swf 46.226.155.30
hxxp://proxylb1-ext-sth-tc2.videoplaza.io/proxy/vpsupport.js
hxxp://public.yappyz.com.cdngc.net/api/browsers/27.1.1419.0/update 37.29.0.100
hxxp://vp.videoplaza.tv/resources/support/vpsupport_2.4.14.20.0.js 46.226.155.30
hxxp://proxylb1-ext-sth-tc2.videoplaza.io/proxy/distributor/v2?rt=vp_3.0&pf=fl_11.6.602.180&cv=as3_2.4.15.17.4&f=nomidrolls,nopostrolls,nooverlays,noinskins&t=nomidrolls,nopostrolls,nooverlays,noinskins&s=yappyz&ci=gaming&vwt=800&vht=600&vbw=2597&tt=p,po,pa,se,s&xpb=1&rnd=16852581751
hxxp://proxylb1-ext-sth-tc2.videoplaza.io/proxy/distributor/v2?s=fd3185a1-c40a-4c2c-8e18-fb0122e6f553,IAB01&tt=p&rt=vast_2.0&rnd=708257425&pf=fl_11&ru=[URL_MACRO]
hxxp://proxylb1-ext-sth-tc2.videoplaza.io/proxy/tracker/v2?cf=short_form&dcid=c7c4c693-ce76-4e42-a6df-335f946bfb6d&e=21&f=nomidrolls,nooverlays,nopostrolls&pid=fccd69c0-cfd2-4d3e-b83b-d14dc4b45b5e&rnd=15997759&s=yappyz&t=noinskins,nooverlays,nopostrolls,nomidrolls&tid=888db39a-67fe-11e5-8c36-002590e811ac&tt=p
hxxp://proxylb1-ext-sth-tc2.videoplaza.io/proxy/tracker/v2?aid=0&cf=short_form&dcid=c7c4c693-ce76-4e42-a6df-335f946bfb6d&e=0&f=nomidrolls,nooverlays,nopostrolls&pid=fccd69c0-cfd2-4d3e-b83b-d14dc4b45b5e&rnd=80299072&s=yappyz&t=noinskins,nooverlays,nopostrolls,nomidrolls&tid=888db39a-67fe-11e5-8c36-002590e811ac&tt=p&ua=[ua]&uc=[uc]
hxxp://adserver.iminent.com.cdngc.net/Render/95329B79-68A1-4B84-B7F9-8BB78E73E018/0/yappyz/bottom_all_site/ 174.35.71.19
hxxp://revive-ads-srv-3-0-2-lb-911791041.us-east-1.elb.amazonaws.com/openx/www/delivery/ajs.php?zoneid=504&cb=54514302918&charset=UTF-8&loc=http://adserver.iminent.com/Render/95329B79-68A1-4B84-B7F9-8BB78E73E018/0/yappyz/bottom_all_site/#AppInstanceUid=1F60ED41-882C-452D-A717-E4B26EAE7226&referer=&appInstanceUid=1F60ED41-882C-452D-A717-E4B26EAE7226&protocol=http&trackerKey=501
hxxp://bd-pl-datalb-548856240.us-east-1.elb.amazonaws.com/adserver/impression?appInstanceUid=1F60ED41-882C-452D-A717-E4B26EAE7226&appKey=95329b79-68a1-4b84-b7f9-8bb78e73e018&zoneId=504&bannerId=NaN&passbackZoneId=NaN&refhostname=&isBlank=true&loadTime=231&ssl=false&trackerKey=501&impressionId=80d18e6b-d05f-4ccd-bb86-8903defa3ec0&refreshCount=0&adServer=3&pageVisibility=visible&adServerClickTracking=false
hxxp://bejeweled.popcap.com/html5/0.9.12.9490/html5/Bejeweled.html 199.36.253.117
hxxp://bejeweled.popcap.com/html5/0.9.12.9490/html5/webres/spinwait.gif 199.36.253.117
hxxp://bejeweled.popcap.com/html5/0.9.12.9490/html5/webres/sorry_bkg.jpg 199.36.253.117
hxxp://code.jquery.netdna-cdn.com/jquery-1.7.1.min.js
hxxp://bejeweled.popcap.com/html5/0.9.12.9490/html5/soundmanager2.js 199.36.253.117
hxxp://bejeweled.popcap.com/html5/0.9.12.9490/html5/Bejeweled_min.js 199.36.253.117
hxxp://bejeweled.popcap.com/html5/0.9.12.9490/html5/webres/chrome-icon.png 199.36.253.117
hxxp://bejeweled.popcap.com/html5/0.9.12.9490/html5/webres/DistantBackground_01.jpg 199.36.253.117
hxxp://bejeweled.popcap.com/html5/0.9.12.9490/html5/webres/pillars_left_top.png 199.36.253.117
hxxp://bejeweled.popcap.com/html5/0.9.12.9490/html5/webres/pillars_left_bottom.png 199.36.253.117
hxxp://bejeweled.popcap.com/html5/0.9.12.9490/html5/soundmanager2_flash9.swf 199.36.253.117
hxxp://public.yappyz.com/api/extensions/kjhpfcjlhjpbdpfcffaiopddnpojdpok/crx 37.29.0.100
hxxp://public.yappyz.com/setup/content/img/BetaYappyz300X90.png 37.29.0.100
hxxp://fr-sien.cdn.videoplaza.tv/resources/boot/as3_videoplaza_bootloader.swf 188.43.73.0
hxxp://data.bd-pl.com/adserver/impression?appInstanceUid=1F60ED41-882C-452D-A717-E4B26EAE7226&appKey=95329b79-68a1-4b84-b7f9-8bb78e73e018&zoneId=504&bannerId=NaN&passbackZoneId=NaN&refhostname=&isBlank=true&loadTime=231&ssl=false&trackerKey=501&impressionId=80d18e6b-d05f-4ccd-bb86-8903defa3ec0&refreshCount=0&adServer=3&pageVisibility=visible&adServerClickTracking=false 50.16.226.195
hxxp://vz.yappyz.com/vz/c121579f-55a7-4757-6974-00baf6ed4979/2/laser-cannon.png 88.221.132.75
hxxp://www.google-analytics.com/__utm.gif?utmwv=5.6.7&utms=2&utmn=438248317&utmhn=public.yappyz.com&utmcs=utf-8&utmsr=1276x846&utmvp=1272x693&utmsc=32-bit&utmul=en-us&utmje=1&utmfl=11.6 r602&utmdt=Yappyz • Thank you for installing&utmhid=1934479082&utmr=-&utmp=/front/en-US/confirm/install/jajfdjebpfphpjkocjenkhegepamcbcl&utmht=1443677856468&utmac=UA-37741269-1&utmcc=__utma=40499491.528497393.1443677833.1443677833.1443677833.1;+__utmz=40499491.1443677833.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none);&utmjid=&utmu=qAAAAAAAAAAAAAAAAAAAAAAE~ 216.58.209.174
hxxp://fr-sien.videoplaza.tv/proxy/as3_vp_player 46.226.152.98
hxxp://fr-sien.videoplaza.tv/proxy/bwtest.jpg?0.002484244294464588 46.226.152.98
hxxp://public.yappyz.com/front/Content/styles/home/style?v=mY5m0XTilNnmX8oqyJmH0Iz81sxvm_ft1ShOwaNIDn41 37.29.0.100
hxxp://public.yappyz.com/api/extensions/onjgfkedmajckgeodakihmpbgjeokfap/updateinfo/?x=id=onjgfkedmajckgeodakihmpbgjeokfap&v=0.0&uc 37.29.0.100
hxxp://adfront-v2.ads-srv.net/openx/www/delivery/lg.php?bannerid=1913&campaignid=712&zoneid=582&loc=1&referer=http://adserver.iminent.com/Render/95329B79-68A1-4B84-B7F9-8BB78E73E018/0/yappyz/between_games/#AppInstanceUid=1F60ED41-882C-452D-A717-E4B26EAE7226&cb=eabb8be3fb 50.17.206.68
hxxp://public.yappyz.com/front/bundles/scripts/home?v=qAL6kx_tRElGQ5PmBnWfGr3EVvdryDfmiIBoiCZs2eE1 37.29.0.100
hxxp://public.yappyz.com/api/extensions/jajfdjebpfphpjkocjenkhegepamcbcl/crx 37.29.0.100
hxxp://public.yappyz.com/setup/bundles/js/main?v=sDSsPxD4ow0YsO7BRbvTn4BdtyoREQVpAbpVyiLcQs41 37.29.0.100
hxxp://www.googleadservices.com/pagead/conversion.js 173.194.113.218
hxxp://vzapp.iminent.com/vz/3C0469A7-A63D-4A73-B521-7A91DFBEBA64/1/yappyz_1332_1.exe 88.221.132.75
hxxp://public.yappyz.com/api/browsers/27.1.1419.0/update 37.29.0.100
hxxp://public.yappyz.com/api/extensions/fckpdnpcdkdbldaegkokodcimgohljpo/crx 37.29.0.100
hxxp://fr-sien.videoplaza.tv/proxy/distributor/v2?rt=vp_3.0&pf=fl_11.6.602.180&cv=as3_2.4.15.17.4&f=nomidrolls,nopostrolls,nooverlays,noinskins&t=nomidrolls,nopostrolls,nooverlays,noinskins&s=yappyz&ci=gaming&vwt=800&vht=600&vbw=2597&tt=p,po,pa,se,s&xpb=1&rnd=16852581751 46.226.152.98
hxxp://geoloc.iminent.com/?&callback=OnGeoloc 37.29.0.28
hxxp://public.yappyz.com/front/Content/images/Home/chrome.png 37.29.0.100
hxxp://public.yappyz.com/front/en-US/confirm/install/jajfdjebpfphpjkocjenkhegepamcbcl 37.29.0.100
hxxp://public.yappyz.com/api/extensions/hhidenhmbjekmpnnlaakmlegjklgoalj/crx 37.29.0.100
hxxp://vz.yappyz.com/vz/eeac1733-6902-af86-3a3f-ca60a80eca46/2/governor-of-poker.png 88.221.132.75
hxxp://public.yappyz.com/setup/bundles/js/install?v=hXu8-1oDiJ-oMTCBcn3dculz_DbDV6SM0tBg_PpCmoE1 37.29.0.100
hxxp://public.yappyz.com/front/Content/Images/Home/LikeTwitter.png 37.29.0.100
hxxp://adfront-v2.ads-srv.net/openx/www/delivery/ajs.php?zoneid=582&cb=85765325300&charset=UTF-8&loc=http://adserver.iminent.com/Render/95329B79-68A1-4B84-B7F9-8BB78E73E018/0/yappyz/between_games/#AppInstanceUid=1F60ED41-882C-452D-A717-E4B26EAE7226&referer=&appInstanceUid=1F60ED41-882C-452D-A717-E4B26EAE7226&protocol=http&trackerKey=3616 50.17.206.68
hxxp://cdn.videoplaza.tv/resources/flash/miniplayer/1.0.3/miniplayer.swf 188.43.73.0
hxxp://logevent.iminent.com/external/95329B79-68A1-4B84-B7F9-8BB78E73E018/json2/RaiseObjectEventLiteMethod/?AppInstanceId=1F60ED41-882C-452D-A717-E4B26EAE7226&EventType=16&TargetUid=41399590-f7f5-aef9-294d-a7464f0c212b&TxUid=435a96ed-92c0-4ea6-30a8-7cf1694ea50f&Version=0.1.1424.1 23.21.209.30
hxxp://public.yappyz.com/api/extensions/fckpdnpcdkdbldaegkokodcimgohljpo/updateinfo/?x=id=fckpdnpcdkdbldaegkokodcimgohljpo&v=0.0&uc 37.29.0.100
hxxp://fr-sien.videoplaza.tv/proxy/tracker/v2?aid=0&cf=short_form&dcid=c7c4c693-ce76-4e42-a6df-335f946bfb6d&e=0&f=nomidrolls,nooverlays,nopostrolls&pid=fccd69c0-cfd2-4d3e-b83b-d14dc4b45b5e&rnd=80299072&s=yappyz&t=noinskins,nooverlays,nopostrolls,nomidrolls&tid=888db39a-67fe-11e5-8c36-002590e811ac&tt=p&ua=[ua]&uc=[uc] 46.226.152.98
hxxp://www.google-analytics.com/__utm.gif?utmwv=5.6.7&utms=3&utmn=1305635976&utmhn=onjgfkedmajckgeodakihmpbgjeokfap&utmt=event&utme=5(apps*Launch game*Launch Bejeweled)8(FirstRun)9(201540)11(1)&utmcs=ISO-8859-1&utmsr=1276x846&utmsc=32-bit&utmul=en-us&utmje=1&utmfl=11.6 r602&utmhid=1987453243&utmr=-&utmp=/private/background.html&utmht=1443677864249&utmac=UA-37741269-1&utmcc=__utma=240588381.964592021.1443677862.1443677862.1443677862.1;+__utmz=240588381.1443677862.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none);&utmjid=&utmu=6QCAAAAAAAAAAAAAAAAAAAAE~ 216.58.209.174
hxxp://www.google-analytics.com/ga.js 216.58.209.174
hxxp://public.yappyz.com/setup/bundles/css/main?v=EUchDgvNqy2LnTDqnlSXy0d7gHrRZrjdoFfWa5I7Ot41 37.29.0.100
hxxp://public.yappyz.com/setup/content/img/yappyz.mini.png 37.29.0.100
hxxp://fr-sien.videoplaza.tv/proxy/tracker/v2?cf=short_form&dcid=c7c4c693-ce76-4e42-a6df-335f946bfb6d&e=21&f=nomidrolls,nooverlays,nopostrolls&pid=fccd69c0-cfd2-4d3e-b83b-d14dc4b45b5e&rnd=15997759&s=yappyz&t=noinskins,nooverlays,nopostrolls,nomidrolls&tid=888db39a-67fe-11e5-8c36-002590e811ac&tt=p 46.226.152.98
hxxp://www.facebook.com/plugins/like.php?href=www.facebook.com/yappyz&send=false&layout=button_count&show_faces=false&font=arial&colorscheme=light&action=like&height=21 31.13.81.9
hxxp://apix.yappyz.com/external/95329B79-68A1-4B84-B7F9-8BB78E73E018/json2/DrillDownObjectMethod/?ObjectTypeField=2147483647&Uid=41399590-f7f5-aef9-294d-a7464f0c212b&Depth=1&CultureId=1033 37.29.0.14
hxxp://adserver.iminent.com/Render/95329B79-68A1-4B84-B7F9-8BB78E73E018/0/yappyz/between_games/ 174.35.71.19
hxxp://fr-sien.videoplaza.tv/crossdomain.xml 46.226.152.98
hxxp://public.yappyz.com/front/Content/images/Home/YappyzHeader.jpg 37.29.0.100
hxxp://vz.yappyz.com/vz/41399590-f7f5-aef9-294d-a7464f0c212b/2/bejeweled.png 88.221.132.75
hxxp://installevent2.iminent.com/95329B79-68A1-4B84-B7F9-8BB78E73E018/json/RaiseInstallEventMethod/?callback=jQuery1910052205445555057905_1443677832686&InstallFlags=5&UserSettings=0&BagKey=&AppInstanceId=1F60ED41-882C-452D-A717-E4B26EAE7226&Version=6.50.2.0&SessionCode=11&Duration=21&Slot=1&OperatingSystem=Microsoft Windows NT 5.1.2600 Service Pack 3&CDNCountryCode=UA&ErrorCode=0&BrowserSettings=7&DefaultBrowser=IE&MonetisationOption=0&RefId=999&ObjectUid=41399590-f7f5-aef9-294d-a7464f0c212b&ClientType=MCC-ASYNC&_=1443677832687 107.22.235.36
hxxp://adserver.iminent.com/scripts/video/videoplaza_min_js?v=IeAQjYG0CQy7tOE5i_HejeaqpDzJ2YeDIWhZloywZQg1 174.35.71.19
hxxp://www.google-analytics.com/r/__utm.gif?utmwv=5.6.7&utms=1&utmn=1510111355&utmhn=public.yappyz.com&utmcs=utf-8&utmsr=1276x846&utmvp=550x220&utmsc=32-bit&utmul=en-us&utmje=1&utmfl=11.6 r602&utmdt=Yappyz Setup&utmhid=170252272&utmr=-&utmp=/setup/fr-FR&utmht=1443677833436&utmac=UA-37741269-1&utmcc=__utma=40499491.528497393.1443677833.1443677833.1443677833.1;+__utmz=40499491.1443677833.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none);&utmjid=1254820438&utmredir=1&utmu=qAAAAAAAAAAAAAAAAAAAAAAE~ 216.58.209.174
hxxp://konnect.videoplaza.tv/crossdomain.xml 46.226.152.100
hxxp://public.yappyz.com/front/Content/images/Home/BETAYappyzWebsite.png 37.29.0.100
hxxp://code.jquery.com/jquery-1.7.1.min.js 94.31.29.53
hxxp://adserver.iminent.com/Render/95329B79-68A1-4B84-B7F9-8BB78E73E018/0/yappyz/bottom_all_site/ 174.35.71.19
hxxp://public.yappyz.com/front/Content/Images/Home/LikeFacebook.png 37.29.0.100
hxxp://public.yappyz.com/api/extensions/kjhpfcjlhjpbdpfcffaiopddnpojdpok/updateinfo/?x=id=kjhpfcjlhjpbdpfcffaiopddnpojdpok&v=0.0&uc 37.29.0.100
hxxp://www.google-analytics.com/r/__utm.gif?utmwv=5.6.7&utms=2&utmn=970093247&utmhn=onjgfkedmajckgeodakihmpbgjeokfap&utme=8(FirstRun)9(201540)11(1)&utmcs=ISO-8859-1&utmsr=1276x846&utmsc=32-bit&utmul=en-us&utmje=1&utmfl=11.6 r602&utmhid=1987453243&utmr=-&utmp=/home.html&utmht=1443677862590&utmac=UA-37741269-1&utmcc=__utma=240588381.964592021.1443677862.1443677862.1443677862.1;+__utmz=240588381.1443677862.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none);&utmjid=1953777426&utmredir=1&utmu=6QCAAAAAAAAAAAAAAAAAAAAE~ 216.58.209.174
hxxp://konnect.videoplaza.tv/proxy/distributor/v2?s=fd3185a1-c40a-4c2c-8e18-fb0122e6f553,IAB01&tt=p&rt=vast_2.0&rnd=708257425&pf=fl_11&ru=[URL_MACRO] 46.226.152.100
hxxp://public.yappyz.com/setup/fr-FR 37.29.0.100
hxxp://vz.yappyz.com/vz/ad1a3f6c-4ad5-0bd2-0851-f515b05dc02d/2/winter-shop.png 88.221.132.75
hxxp://public.yappyz.com/api/extensions/jajfdjebpfphpjkocjenkhegepamcbcl/icon/ 37.29.0.100
hxxp://public.yappyz.com/front/Content/Images/Home/LikeGoogle.png 37.29.0.100
hxxp://public.yappyz.com/front/Content/styles/home/Fonts/lobster_1.4_1-webfont.eot? 37.29.0.100
hxxp://www.google-analytics.com/__utm.gif?utmwv=5.6.7&utms=1&utmn=1278248799&utmhn=onjgfkedmajckgeodakihmpbgjeokfap&utmt=event&utme=5(First Run*The user has launched Yappyz for the first time)&utmcs=ISO-8859-1&utmsr=1276x846&utmsc=32-bit&utmul=en-us&utmje=1&utmfl=11.6 r602&utmhid=1987453243&utmr=-&utmp=/private/background.html&utmht=1443677861811&utmac=UA-37741269-1&utmcc=__utma=240588381.964592021.1443677862.1443677862.1443677862.1;+__utmz=240588381.1443677862.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none);&utmjid=&utmu=4AAAAAAAAAAAAAAAAAAAAAAE~ 216.58.209.174
hxxp://ajax.googleapis.com/ajax/libs/jquery/1.9.1/jquery.min.js 216.58.209.170
hxxp://adfront-v2.ads-srv.net/openx/www/delivery/ajs.php?zoneid=504&cb=54514302918&charset=UTF-8&loc=http://adserver.iminent.com/Render/95329B79-68A1-4B84-B7F9-8BB78E73E018/0/yappyz/bottom_all_site/#AppInstanceUid=1F60ED41-882C-452D-A717-E4B26EAE7226&referer=&appInstanceUid=1F60ED41-882C-452D-A717-E4B26EAE7226&protocol=http&trackerKey=501 50.17.206.68
hxxp://apix.yappyz.com/external/95329B79-68A1-4B84-B7F9-8BB78E73E018/json2/DrillDownObjectMethod/?ObjectTypeField=2147483647&Uid=979AD9EF-CDA1-4A5D-865E-765248C3B960&Depth=2&CultureId=1033 37.29.0.14
hxxp://logevent.iminent.com/external/95329B79-68A1-4B84-B7F9-8BB78E73E018/json2/RaiseObjectEventLiteMethod/?AppInstanceId=1F60ED41-882C-452D-A717-E4B26EAE7226&EventType=8&Version=0.1.1424.1 23.21.209.30
hxxp://cdn.videoplaza.tv/resources/flash/miniplayer/latest/miniplayer.swf 188.43.73.0
hxxp://public.yappyz.com/api/extensions/jajfdjebpfphpjkocjenkhegepamcbcl/data/?callback=OnUpdateAppInfos 37.29.0.100
hxxp://vz.yappyz.com/vz/ec4b4f22-3763-962b-bb38-aa829064307a/2/christmas-frenzy.png 88.221.132.75
hxxp://fr-sien.videoplaza.tv/proxy/vpsupport.js 46.226.152.98
hxxp://fr-sien.videoplaza.tv/proxy/environment.xml 46.226.152.98
hxxp://public.yappyz.com/api/extensions/onjgfkedmajckgeodakihmpbgjeokfap/crx 37.29.0.100
hxxp://public.yappyz.com/api/extensions/hhidenhmbjekmpnnlaakmlegjklgoalj/updateinfo/?x=id=hhidenhmbjekmpnnlaakmlegjklgoalj&v=0.0&uc 37.29.0.100
clients3.google.com 216.58.209.174
ssl.gstatic.com 173.194.113.223
translate.googleapis.com 216.58.209.202
clients2.google.com 216.58.209.174
www.google.com.ua 173.194.113.216
googleads.g.doubleclick.net 173.194.113.218
www.gstatic.com 173.194.113.207
static.xx.fbcdn.net 31.13.81.13
apis.google.com 216.58.209.174
ad.yieldmanager.com 217.163.21.34
ssl.google-analytics.com 216.58.209.168


IDS verdicts (Suricata alerts: Emerging Threats ET ruleset)

SURICATA STREAM ESTABLISHED packet out of window
SURICATA STREAM Packet with invalid ack
SURICATA STREAM ESTABLISHED invalid ack
SURICATA STREAM SHUTDOWN RST invalid ack

Traffic

GET /vz/ad1a3f6c-4ad5-0bd2-0851-f515b05dc02d/2/winter-shop.png HTTP/1.1
Host: vz.yappyz.com
Connection: keep-alive
User-Agent: Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.32 (KHTML, like Gecko) Chrome/27.1.1419.0 Safari/537.32
Accept: */*
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3


HTTP/1.1 200 OK
Content-Length: 26332
Content-Type: image/png
Last-Modified: Mon, 01 Jan 1900 00:00:00 GMT
ETag: 27455427.2.5210952098427387904
Server: Microsoft-IIS/7.5
ServerSideUid: aa9caaf3-ddfc-4e88-9816-680ba5d925ea
FromLocalCache: true
X-AspNet-Version: 4.0.30319
X-Powered-By: ASP.NET
Server: MCC-PROD19
Cache-Control: public, max-age=1330258
Date: Thu, 01 Oct 2015 05:37:37 GMT
Connection: keep-alive
.PNG........IHDR..............>a.....pHYs.........g..R... cHRM..z%.
.............u0...`..:....o._.F..fbIDATx...w.d.u...v8....vN......D0'.Y
.ER.HJ.....mzf....fl..d[.X.h..,*Z.D..%R.$H.......@#u..7V>i....OU...
.4_=O=.u..T...Y{.w.k-1..?p...q...c.8.............%.o.NN{..G..1g.......
.=.....31.k|.g..Q....EX.d.M..1............A.B..v..........U...>...W
q.....}..(..k-.......\.3"..,.V......o.._>..N.....3..i?..7..........
........E.....6w......q.)Rv\........y.....O28../{..c..........y...!...
.D*`.6...vg@n[l....p. ..4...w.......#..!.2D...I.....................r.
y....s.zQ....~.=.E.............8.F..0%.bH.........Y[.O.1.....#i...|..O
....'........t....T..!..Y.2N....J.V...H"C.,...1`,LO..W....a...........
s..z. .`..C....~.=.E.T.T.....c...:.u..#{.g.:..*..v...(.`..,3t.".j...9.
...os..7......5.....[.B...~.m..g=..8k.....A...pb../[:.%.L.5..`=....%..
...c..p....>.z.Y..<.l...1.T....._U.....#.g<...S/b..q..s.....:
..G9..)...7}...fqU2.$.)L..0.)q...a.BJ.1...x...w#p|. ...}..9.hY..X.$..B
...5.!..8..18 ...a...f.|H.........J9..(....8.-....VP.r.g.S<rr.c....
....Y'..sv.C..3lp..^w.......;........|?..`......P.4ZsH......"e._.,J*Jc
.a. j...(.....Y?N.FH.pN.&3H...%.%.Z.Tm...%.%.Z...&.H......;<.t...P.
.Z..=...y.....n.L4 /.s...y=.<...s...%P..~..3.q..y.W.8.......[. ....
....2=..\.z...........[f-[.....6....93....".$.Aa...c@.....A.1.Ai......
....A...h...........!...w.c......Y....,Z.V...1.n.f'AK..w....gg...`....
..m.hmh..B.sn..w.b..w....b.|.............3..d...h/=.2D i....A.cX.h.}rk
pN......eu.CIo.Y....o.h%....Xh"...0.rl...Z...)....,#........>.x
<<< skipped >>>


GET /external/95329B79-68A1-4B84-B7F9-8BB78E73E018/json2/RaiseObjectEventLiteMethod/?AppInstanceId=1F60ED41-882C-452D-A717-E4B26EAE7226&EventType=8&Version=0.1.1424.1 HTTP/1.1
Host: logevent.iminent.com
Connection: keep-alive
Accept: application/json, text/plain, */*
User-Agent: Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.32 (KHTML, like Gecko) Chrome/27.1.1419.0 Safari/537.32
X-Requested-With: XMLHttpRequest
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3


HTTP/1.1 200 OK
Access-Control-Allow-Headers: Content-Type
Access-Control-Allow-Methods: GET, POST, PUT, DELETE, OPTIONS
Access-Control-Allow-Origin: *
Date: Thu, 01 Oct 2015 05:37:48 GMT
Content-Length: 0
Connection: keep-alive
HTTP/1.1 200 OK..Access-Control-Allow-Headers: Content-Type..Access-Co
ntrol-Allow-Methods: GET, POST, PUT, DELETE, OPTIONS..Access-Control-A
llow-Origin: *..Date: Thu, 01 Oct 2015 05:37:48 GMT..Content-Length: 0
..Connection: keep-alive......


GET /external/95329B79-68A1-4B84-B7F9-8BB78E73E018/json2/RaiseObjectEventLiteMethod/?AppInstanceId=1F60ED41-882C-452D-A717-E4B26EAE7226&EventType=8&Version=0.1.1424.1 HTTP/1.1


Host: logevent.iminent.com
Connection: keep-alive
Accept: application/json, text/plain, */*
User-Agent: Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.32 (KHTML, like Gecko) Chrome/27.1.1419.0 Safari/537.32
X-Requested-With: XMLHttpRequest
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3


HTTP/1.1 200 OK
Access-Control-Allow-Headers: Content-Type
Access-Control-Allow-Methods: GET, POST, PUT, DELETE, OPTIONS
Access-Control-Allow-Origin: *
Date: Thu, 01 Oct 2015 05:37:30 GMT
Content-Length: 0
Connection: keep-alive
HTTP/1.1 200 OK..Access-Control-Allow-Headers: Content-Type..Access-Co
ntrol-Allow-Methods: GET, POST, PUT, DELETE, OPTIONS..Access-Control-A
llow-Origin: *..Date: Thu, 01 Oct 2015 05:37:30 GMT..Content-Length: 0
..Connection: keep-alive......


GET /external/95329B79-68A1-4B84-B7F9-8BB78E73E018/json2/RaiseObjectEventLiteMethod/?AppInstanceId=1F60ED41-882C-452D-A717-E4B26EAE7226&EventType=16&TargetUid=41399590-f7f5-aef9-294d-a7464f0c212b&TxUid=435a96ed-92c0-4ea6-30a8-7cf1694ea50f&Version=0.1.1424.1 HTTP/1.1


Host: logevent.iminent.com
Connection: keep-alive
Accept: application/json, text/plain, */*
User-Agent: Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.32 (KHTML, like Gecko) Chrome/27.1.1419.0 Safari/537.32
X-Requested-With: XMLHttpRequest
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3


HTTP/1.1 200 OK
Access-Control-Allow-Headers: Content-Type
Access-Control-Allow-Methods: GET, POST, PUT, DELETE, OPTIONS
Access-Control-Allow-Origin: *
Date: Thu, 01 Oct 2015 05:37:50 GMT
Content-Length: 0
Connection: keep-alive
HTTP/1.1 200 OK..Access-Control-Allow-Headers: Content-Type..Access-Co
ntrol-Allow-Methods: GET, POST, PUT, DELETE, OPTIONS..Access-Control-A
llow-Origin: *..Date: Thu, 01 Oct 2015 05:37:50 GMT..Content-Length: 0
..Connection: keep-alive......



GET /setup/fr-FR HTTP/1.1
User-Agent: CheckConnection
Host: public.yappyz.com


HTTP/1.1 200 OK
Date: Thu, 01 Oct 2015 05:37:05 GMT
Server: PWS/8.1.20.22
X-Px: ms h0-s1154.v0-mow ( h0-s1003.v0-mow), ht-d h0-s1003.v0-mow.cdngp.net
Cache-Control: max-age=521521
Expires: Sat, 03 Oct 2015 03:28:49 GMT
Age: 356417
Content-Length: 2507
Content-Type: text/html; charset=utf-8
Last-Modified: Sat, 26 Sep 2015 03:28:49 GMT
Connection: keep-alive
..<!doctype html>..<html>..<head>..    <title>
Yappyz Setup</title>..    <link href="/setup/bundles/css/main
?v=EUchDgvNqy2LnTDqnlSXy0d7gHrRZrjdoFfWa5I7Ot41" rel="stylesheet"/>
..    <script src="//ajax.googleapis.com/ajax/libs/jquery/1.9.1/jqu
ery.min.js"></script>..    <script src="/setup/bundles/js/
main?v=sDSsPxD4ow0YsO7BRbvTn4BdtyoREQVpAbpVyiLcQs41"></script>
;..</head>..<body>..    <div id="mainContainer" class="
main gray">..        <div id="defaultView" class="advertise">
..            <div class="centerholder2">..                ..   
         </div>..            <img src="/setup/content/img/Bet
aYappyz300X90.png" alt="Yappyz logo" />          ..        </div
>..        <div id="appView" class="application hidden">..   
         <div class="centerholder"></div>..            <
;div>..                <span class="right powered">Propos
3; par<br />..                    <img src="/setup/content/im
g/yappyz.mini.png" alt="" /></span>..                <img 
id="appImg" src="hXXp://placehold.it/128x128" alt="" /><span id=
"appName" class="appName">Nom de l'Application</span>..  
          </div>..        </div>..        <div id="inst
allNotice" class="notice">en cours d'installation...</div>
;..    </div>..    ..    <div id="footer" class="footer green
">..        <div class="progressholder"></div>..   
<<< skipped >>>


GET /95329B79-68A1-4B84-B7F9-8BB78E73E018/json/RaiseInstallEventMethod/?callback=jQuery1910052205445555057905_1443677832686&InstallFlags=5&UserSettings=0&BagKey=&AppInstanceId=1F60ED41-882C-452D-A717-E4B26EAE7226&Version=6.50.2.0&SessionCode=11&Duration=21&Slot=1&OperatingSystem=Microsoft Windows NT 5.1.2600 Service Pack 3&CDNCountryCode=UA&ErrorCode=0&BrowserSettings=7&DefaultBrowser=IE&MonetisationOption=0&RefId=999&ObjectUid=41399590-f7f5-aef9-294d-a7464f0c212b&ClientType=MCC-ASYNC&_=1443677832687 HTTP/1.1
Accept: */*
Referer: hXXp://public.yappyz.com/setup/fr-FR
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: installevent2.iminent.com
Connection: Keep-Alive


HTTP/1.1 200 OK
Access-Control-Allow-Headers: Content-Type
Access-Control-Allow-Methods: GET, POST, PUT, DELETE, OPTIONS
Access-Control-Allow-Origin: *
Date: Thu, 01 Oct 2015 05:37:41 GMT
Content-Length: 0
Connection: keep-alive
HTTP/1.1 200 OK..Access-Control-Allow-Headers: Content-Type..Access-Co
ntrol-Allow-Methods: GET, POST, PUT, DELETE, OPTIONS..Access-Control-A
llow-Origin: *..Date: Thu, 01 Oct 2015 05:37:41 GMT..Content-Length: 0
..Connection: keep-alive..



GET /jquery-1.7.1.min.js HTTP/1.1
Host: code.jquery.com
Connection: keep-alive
Accept: */*
User-Agent: Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.32 (KHTML, like Gecko) Chrome/27.1.1419.0 Safari/537.32
Referer: hXXp://bejeweled.popcap.com/html5/0.9.12.9490/html5/Bejeweled.html
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3


HTTP/1.1 200 OK
Date: Thu, 01 Oct 2015 05:37:43 GMT
Content-Type: application/javascript; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Fri, 24 Oct 2014 00:16:07 GMT
Vary: Accept-Encoding
ETag: W/"54499a47-16eac"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Cache-Control: public
Access-Control-Allow-Origin: *
Server: NetDNA-cache/2.2
X-Cache: HIT
Content-Encoding: gzip
95e6...............~.G....y.........s.AB8.,...mZ.v...?.... @.....g..r.
.~...UY hw.9..^D..Kdd..y.lw...o....w.....x.........u../F..I..-..g...9.
..W....g..]....l...E..].v.......`.......................a~;].eR._....|
Q.V.E{...j..Z.........u.._..:...|.1.t...ic/.k<o.....b6x3o.ZY......f
c0Y.L......`Q\.......j$..|V4.k..h....u.?.....W..iq.....p._..V........A
..p.~2X..c\LF.U.....H^.'...Y.....z..jM........U..........1....W..>x
....f.q..o....W.y....K...6Nw.b..w.....F..h.5N..T..dj.?./..AG..y......h
 .......0.v.....E....-.2Y.[.!.i.sw.2<(..... x...z.~l.]d.Z...G ] ...
d..V.......Nb7I. .....[Kn-....u1.]5.....t..f.m ....V....g........]...{
.E...v._........~...7?4Z.....I...&...7.......r...>.....;.*.r2]..'O.
.Nz....R[..:.d....Z.pw..(.g.6....V..2.......iv...yvs2./......tr2...-8.
..[z2........X0.eKx6...A..j1.....8...........p.UJ>:._.N.. .}t.My%,~
.h]u.'........{.D?.Zw...^c..w..:........L7...Y.......5..uw...@.&.....F
/..}.../..w.......o......._ds..=..:7.....g.y.......?..'Ovo.<.......
n..0ZB/w...jc..].E...L..Y..S .1..#[.Yw....7.9.Z..r.$h..6d.'...U.d..k.=
.jQ,o.../'.t...k..B.Ah..?.u~6:.\\.....=..h..V...`9...S. ........I.....
.X.9t.U.C#..@....G...?64.^.....=y...Vl...Y.ng..$..75..<h]v....N8.Sp
^.'b ...MlM..&r...U..._u&.....z}u/..9k.W..q..%...]^.;:......a}/...#..x
.A.U..........g.{..}.j.ig.q..k...Io......f.V.......././.....'....v:}.$
4...2..*..f;.V.i.....Y.....=...P....:...}. ..e..u.Z.....i...F..r..Aga.
.........p.9.7R......o............4w.2A....'.?S..l..t..9.D...%cL#u....
.l(#. )W.....3....k.Azr!..ljc=..^2@.bW\..7...J.*.....)...........i
<<< skipped >>>


GET /api/extensions/fckpdnpcdkdbldaegkokodcimgohljpo/updateinfo/?x=id=fckpdnpcdkdbldaegkokodcimgohljpo&v=0.0&uc HTTP/1.1
Host: public.yappyz.com
Connection: keep-alive
User-Agent: Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.32 (KHTML, like Gecko) Chrome/27.1.1419.0 Safari/537.32
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3


HTTP/1.1 200 OK
Date: Thu, 01 Oct 2015 05:37:27 GMT
Server: PWS/8.1.20.22
X-Px: ms h0-s1124.v0-mow ( h0-s1043.v0-mow), ht-d h0-s1043.v0-mow.cdngp.net
Cache-Control: max-age=80886
Expires: Thu, 01 Oct 2015 19:20:14 GMT
Age: 31519
Content-Length: 395
Content-Type: text/xml
Last-Modified: Wed, 30 Sep 2015 19:20:14 GMT
Connection: keep-alive
<?xml version="1.0"?>..<gupdate xmlns:xsd="hXXp://VVV.w3.org/
2001/XMLSchema" xmlns:xsi="hXXp://VVV.w3.org/2001/XMLSchema-instance" 
protocol="2.0" xmlns="hXXp://VVV.google.com/update2/response">..  &
lt;app appid="fckpdnpcdkdbldaegkokodcimgohljpo">..    <updateche
ck codebase="hXXp://public.yappyz.com/api/extensions/fckpdnpcdkdbldaeg
kokodcimgohljpo/crx" version="0.1.1405.0" />..  </app>..</
gupdate>....


GET /api/extensions/kjhpfcjlhjpbdpfcffaiopddnpojdpok/updateinfo/?x=id=kjhpfcjlhjpbdpfcffaiopddnpojdpok&v=0.0&uc HTTP/1.1


Host: public.yappyz.com
Connection: keep-alive
User-Agent: Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.32 (KHTML, like Gecko) Chrome/27.1.1419.0 Safari/537.32
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3


HTTP/1.1 200 OK
Date: Thu, 01 Oct 2015 05:37:27 GMT
Server: PWS/8.1.20.22
X-Px: ms h0-s1124.v0-mow ( h0-s1004.v0-mow), ht-d h0-s1004.v0-mow.cdngp.net
Cache-Control: max-age=80887
Expires: Thu, 01 Oct 2015 19:20:15 GMT
Age: 31519
Content-Length: 395
Content-Type: text/xml
Last-Modified: Wed, 30 Sep 2015 19:20:16 GMT
Connection: keep-alive
<?xml version="1.0"?>..<gupdate xmlns:xsd="hXXp://VVV.w3.org/
2001/XMLSchema" xmlns:xsi="hXXp://VVV.w3.org/2001/XMLSchema-instance" 
protocol="2.0" xmlns="hXXp://VVV.google.com/update2/response">..  &
lt;app appid="kjhpfcjlhjpbdpfcffaiopddnpojdpok">..    <updateche
ck codebase="hXXp://public.yappyz.com/api/extensions/kjhpfcjlhjpbdpfcf
faiopddnpojdpok/crx" version="0.1.1424.2" />..  </app>..</
gupdate>....


GET /api/extensions/hhidenhmbjekmpnnlaakmlegjklgoalj/updateinfo/?x=id=hhidenhmbjekmpnnlaakmlegjklgoalj&v=0.0&uc HTTP/1.1


Host: public.yappyz.com
Connection: keep-alive
User-Agent: Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.32 (KHTML, like Gecko) Chrome/27.1.1419.0 Safari/537.32
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3


HTTP/1.1 200 OK
Date: Thu, 01 Oct 2015 05:37:27 GMT
Server: PWS/8.1.20.22
X-Px: ms h0-s1124.v0-mow ( h0-s1129.v0-mow), ht-d h0-s1129.v0-mow.cdngp.net
Cache-Control: max-age=80889
Expires: Thu, 01 Oct 2015 19:20:19 GMT
Age: 31518
Content-Length: 395
Content-Type: text/xml
Last-Modified: Wed, 30 Sep 2015 19:20:18 GMT
Connection: keep-alive
<?xml version="1.0"?>..<gupdate xmlns:xsd="hXXp://VVV.w3.org/
2001/XMLSchema" xmlns:xsi="hXXp://VVV.w3.org/2001/XMLSchema-instance" 
protocol="2.0" xmlns="hXXp://VVV.google.com/update2/response">..  &
lt;app appid="hhidenhmbjekmpnnlaakmlegjklgoalj">..    <updateche
ck codebase="hXXp://public.yappyz.com/api/extensions/hhidenhmbjekmpnnl
aakmlegjklgoalj/crx" version="0.1.1405.0" />..  </app>..</
gupdate>....


GET /api/extensions/onjgfkedmajckgeodakihmpbgjeokfap/updateinfo/?x=id=onjgfkedmajckgeodakihmpbgjeokfap&v=0.0&uc HTTP/1.1


Host: public.yappyz.com
Connection: keep-alive
User-Agent: Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.32 (KHTML, like Gecko) Chrome/27.1.1419.0 Safari/537.32
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3


HTTP/1.1 200 OK
Date: Thu, 01 Oct 2015 05:37:28 GMT
Server: PWS/8.1.20.22
X-Px: ms h0-s1124.v0-mow ( h0-s1015.v0-mow), ht-d h0-s1015.v0-mow.cdngp.net
Cache-Control: max-age=80890
Expires: Thu, 01 Oct 2015 19:20:20 GMT
Age: 31518
Content-Length: 395
Content-Type: text/xml
Last-Modified: Wed, 30 Sep 2015 19:20:21 GMT
Connection: keep-alive
<?xml version="1.0"?>..<gupdate xmlns:xsd="hXXp://VVV.w3.org/
2001/XMLSchema" xmlns:xsi="hXXp://VVV.w3.org/2001/XMLSchema-instance" 
protocol="2.0" xmlns="hXXp://VVV.google.com/update2/response">..  &
lt;app appid="onjgfkedmajckgeodakihmpbgjeokfap">..    <updateche
ck codebase="hXXp://public.yappyz.com/api/extensions/onjgfkedmajckgeod
akihmpbgjeokfap/crx" version="0.1.1424.1" />..  </app>..</
gupdate>HTTP/1.1 200 OK..Date: Thu, 01 Oct 2015 05:37:28 GMT..Serve
r: PWS/8.1.20.22..X-Px: ms h0-s1124.v0-mow ( h0-s1015.v0-mow), ht-d h0
-s1015.v0-mow.cdngp.net..Cache-Control: max-age=80890..Expires: Thu, 0
1 Oct 2015 19:20:20 GMT..Age: 31518..Content-Length: 395..Content-Type
: text/xml..Last-Modified: Wed, 30 Sep 2015 19:20:21 GMT..Connection: 
keep-alive..<?xml version="1.0"?>..<gupdate xmlns:xsd="http:/
/VVV.w3.org/2001/XMLSchema" xmlns:xsi="hXXp://VVV.w3.org/2001/XMLSchem
a-instance" protocol="2.0" xmlns="hXXp://VVV.google.com/update2/respon
se">..  <app appid="onjgfkedmajckgeodakihmpbgjeokfap">..    &
lt;updatecheck codebase="hXXp://public.yappyz.com/api/extensions/onjgf
kedmajckgeodakihmpbgjeokfap/crx" version="0.1.1424.1" />..  </ap
p>..</gupdate>....
<<< skipped >>>

GET /api/extensions/fckpdnpcdkdbldaegkokodcimgohljpo/crx HTTP/1.1


Host: public.yappyz.com
Connection: keep-alive
User-Agent: Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.32 (KHTML, like Gecko) Chrome/27.1.1419.0 Safari/537.32
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3


HTTP/1.1 200 OK
Date: Thu, 01 Oct 2015 05:37:29 GMT
Server: PWS/8.1.20.22
X-Px: ms h0-s1124.v0-mow ( h0-s1103.v0-mow), ht-d h0-s1103.v0-mow.cdngp.net
Cache-Control: max-age=86400
Expires: Thu, 01 Oct 2015 20:52:10 GMT
Age: 31519
Content-Length: 9301
Content-Type: application/x-chrome-extension
Last-Modified: Wed, 30 Sep 2015 20:52:10 GMT
Connection: keep-alive
Cr24............0..0...*.H............0.......... ss)......./..S*.....
U.H.r.ai3[dp3/.0.....b....r!.~T{..R.p[..`.......'.k"....(D..zw....4...
....t....>{.X.,.Z...........`.../.......P..k|._.G|..%.m...x./..}ga.
p...7.!...f....... .?>...2d,.F(?..@t.jt[[..({...d`..O..?T~.1...Y@5E
.Nge1B..`fw./..i.`Q...9^. `n....PK........c[;D}...............Thumbs.d
b........................>.........................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
................................................R.o.o.t. .E.n.t.r.y...
......................................................................
................`...................2.5.6._.e.3.2.f.d.d.5.e.1.9.2.
<<< skipped >>>

GET /api/extensions/onjgfkedmajckgeodakihmpbgjeokfap/crx HTTP/1.1


Host: public.yappyz.com
Connection: keep-alive
User-Agent: Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.32 (KHTML, like Gecko) Chrome/27.1.1419.0 Safari/537.32
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3


HTTP/1.1 200 OK
Date: Thu, 01 Oct 2015 05:37:29 GMT
Server: PWS/8.1.20.22
X-Px: ms h0-s1124.v0-mow ( h0-s1118.v0-mow), ht-d h0-s1118.v0-mow.cdngp.net
Cache-Control: max-age=86400
Expires: Thu, 01 Oct 2015 20:52:16 GMT
Age: 31513
Accept-Ranges: bytes
Content-Length: 796778
Content-Type: application/x-chrome-extension
Last-Modified: Wed, 30 Sep 2015 20:52:16 GMT
Connection: keep-alive
Cr24............0..0...*.H............0............}p..`....p..|".....
.....V.`'.K...7.Kp.a,..6...{...#J....I.s..Qo.c*...[.....Q....kQ......L
.Jx.}.d......!. F..V.Z.H.j|.?h........:d.~.........v.K{mu_I....x..I0..
..-....E@.:r..va..iJ..Dn.....U.^.....J.lz.rc...t...."Du.{^..g...3..SV.
N..._.............o..;...;PK.........b.DGC.4............_locales\de\me
ssages.json{.  "Buy": {.    "message": "Kaufe M..nzen".  },.  "Game_Bu
y_Coin_Notice": {.    "message": "Upps! Du hast keine M..nzen mehr. ".
  },.  "Game_Buy_Coin_Question": {.    "message": "M..chtest du mehr?"
.  },.  "Game_EndGame_BackToGame_Button": {.    "message": "Zur..ck zu
m Spiel".  },.  "Game_EndGame_Notice": {.    "message": "Du punktest".
  },.  "Game_Insert_Coin": {.    "message": "Bezahle mit M..nzen".  },
.  "Game_Insert_Coin_Notice": {.    "message": "Bezahle eine M..nze um
 zu spielen ".  },.  "Game_Powered": {.    "message": "Powered by".  }
,.  "Game_Signin": {.    "message": "Anmelden".  },.  "Game_Signin_Not
ice": {.    "message": "Erstelle dein Account auf Yappyz und spiele<
;br>{0}".  },.  "No": {.    "message": "Nein".  },.  "No_Thanks": {
.    "message": "Nein, Danke".  },.  "Tooltip_Coins": {.    "message":
 "F..ge M..nzen hinzu".  },.  "Tooltip_Scoreboard": {.    "message": "
Punktetabelle".  },.  "Ui_Best_Score": {.    "message": "H..chtse Punk
tzahl".  },.  "Ui_Coin": {.    "message": "M..nze".  },.  "Ui_Coins": 
{.    "message": "M..nzen".  },.  "Ui_Friends": {.    "message": "Freu
nde".  },.  "Ui_Last_Score": {.    "message": "Letztes Erbegnis". 
<<< skipped >>>

GET /api/extensions/kjhpfcjlhjpbdpfcffaiopddnpojdpok/crx HTTP/1.1


Host: public.yappyz.com
Connection: keep-alive
User-Agent: Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.32 (KHTML, like Gecko) Chrome/27.1.1419.0 Safari/537.32
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3


HTTP/1.1 200 OK
Date: Thu, 01 Oct 2015 05:37:30 GMT
Server: PWS/8.1.20.22
X-Px: ms h0-s1124.v0-mow ( h0-s1114.v0-mow), ht-d h0-s1114.v0-mow.cdngp.net
Cache-Control: max-age=86400
Expires: Thu, 01 Oct 2015 20:52:12 GMT
Age: 31518
Accept-Ranges: bytes
Content-Length: 174409
Content-Type: application/x-chrome-extension
Last-Modified: Wed, 30 Sep 2015 20:52:12 GMT
Connection: keep-alive
Cr24............0..0...*.H............0...........c...`s#...h...).....
8./....-.:./.i..tK..x.....MY^t:8.H...iH...E..2v...H..X....;_.E.F~..&..
i:.KBa..0.....?Q..v..%v.r.../L.TA.....g$.........&..ZK.]......BD.....Q
.....L...:YI...C....~.0...D..9.;...UH.9..w....&..........h..S.."!..).J
..=...;.H....A_8$.9.%.f}..PK........re.D.~V............._locales\en\me
ssages.json...{.  "POPUP_TITLE": {.    "message": "Hey! You might like
 these great games!".  },..  "POPUP_STORE": {.    "message": "Visit th
e Store and check out some other great games.".  },..  "for": {.    "m
essage": "for".  },..  "Add_shortcuts": {.    "message": "Add shortcut
s".  },..  "Desktop": {.    "message": "Desktop".  },..  "Taskbar": {.
    "message": "Taskbar".  },..  "Create": {.    "message": "Create". 
 },..  "Uninstall": {.    "message": "Uninstall".  },..  "ShareGameNot
ice":{.    "message": "Did you enjoy this game ?".  },..  "ShareYappyz
Notice":{.    "message": "Well done ! You just created your Yappyz acc
ount.".  },..  "ShareGame":{.    "message": "Send it to your friends !
".  },..  "ShareYappyz":{.    "message": "Share it with your friends".
  },.   .  "JustPlayed":{.    "message":"You just played {0} on" .  },
..  "YouCanAccess":{.    "message":"Yappyz allows you to play thousand
s of Web games!" .  },..  "OneClick":{.    "message":"One click access
 from your desktop!" .  },..  "OneSelection":{.    "message":"A incred
ible selection!" .  },..  "OneWeek":{.    "message":"New games every w
eek!" .  },..  "BestGames":{.    "message":"Play the best games on
<<< skipped >>>

GET /api/extensions/hhidenhmbjekmpnnlaakmlegjklgoalj/crx HTTP/1.1


Host: public.yappyz.com
Connection: keep-alive
User-Agent: Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.32 (KHTML, like Gecko) Chrome/27.1.1419.0 Safari/537.32
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3


HTTP/1.1 200 OK
Date: Thu, 01 Oct 2015 05:37:30 GMT
Server: PWS/8.1.20.22
X-Px: ms h0-s1124.v0-mow ( h0-s1093.v0-mow), ht-d h0-s1093.v0-mow.cdngp.net
Cache-Control: max-age=86400
Expires: Thu, 01 Oct 2015 20:52:16 GMT
Age: 31514
Content-Length: 4284
Content-Type: application/x-chrome-extension
Last-Modified: Wed, 30 Sep 2015 20:52:15 GMT
Connection: keep-alive
Cr24............0..0...*.H............0........l.i.E.(t}....an,.......
..I&uk...-v.....8.....@...L..N..V4....}.97.c}&{..@0.........p~..W.>
....|q.K&.....J...$...t../......<......... i...Ft....."...X...@O..I
..i3.;.-.Q-....&....X..o..`.HkBp..T.e.{.a...}]]f`s....~...%..3..w.....
..r........>.=z.^n...`...g1.tB.YPK........c[;D...._..._......._loca
les\en\messages.json...{..  "title": {..    "message": "My Account",..
    "description": "Extension title."..  }..}..KP...._..._...PK.......
.c[;D..(.d...d......._locales\fr\messages.json...{..  "title": {..    
"message": "Mon Compte",..    "description": "Titre de l'extension."..
  }..}..KP..(.d...d...PK........c[;D....u...u.......icon128.png.PNG...
.....IHDR..............>a.....tEXtSoftware.Adobe ImageReadyq.e<.
.."iTXtXML:com.adobe.xmp.....<?xpacket begin="..." id="W5M0MpCehiHz
reSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Ado
be XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27        "> <r
df:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <
;rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/"
 xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="hXXp://ns.
adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop
 CS6 (Windows)" xmpMM:InstanceID="xmp.iid:5DE31C0DDD7411E2A01AF91924D6
F94D" xmpMM:DocumentID="xmp.did:5DE31C0EDD7411E2A01AF91924D6F94D"> 
<xmpMM:DerivedFrom stRef:instanceID="xmp.iid:5DE31C0BDD7411E2A01AF9
1924D6F94D" stRef:documentID="xmp.did:5DE31C0CDD7411E2A01AF91924D6
<<< skipped >>>


GET /proxy/bwtest.jpg?0.002484244294464588 HTTP/1.1
Host: fr-sien.videoplaza.tv
Connection: keep-alive
User-Agent: Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.32 (KHTML, like Gecko) Chrome/27.1.1419.0 Safari/537.32
Accept: */*
Referer: hXXp://adserver.iminent.com/Render/95329B79-68A1-4B84-B7F9-8BB78E73E018/0/yappyz/between_games/
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3


HTTP/1.1 302 Found
Server: Apache-Coyote/1.1
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: HEAD, DELETE, GET, OPTIONS, POST, PUT
Access-Control-Max-Age: 86400
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: HEAD, DELETE, GET, OPTIONS, POST, PUT
Access-Control-Max-Age: 86400
Access-Control-Allow-Credentials: true
Location: hXXp://vp.videoplaza.tv/resources/bwtest.jpg
Transfer-Encoding: chunked
Date: Thu, 01 Oct 2015 05:37:39 GMT
Connection: close
0..



GET /vz/ec4b4f22-3763-962b-bb38-aa829064307a/2/christmas-frenzy.png HTTP/1.1
Host: vz.yappyz.com
Connection: keep-alive
User-Agent: Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.32 (KHTML, like Gecko) Chrome/27.1.1419.0 Safari/537.32
Accept: */*
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3


HTTP/1.1 200 OK
Content-Length: 38260
Content-Type: image/png
Last-Modified: Mon, 01 Jan 1900 00:00:00 GMT
ETag: 27455430.2.5210952098427387904
Server: Microsoft-IIS/7.5
ServerSideUid: aecbe66c-5e7a-4275-bbf2-1badaada3fa1
FromLocalCache: true
X-AspNet-Version: 4.0.30319
X-Powered-By: ASP.NET
Server: MCC-PROD19
Cache-Control: public, max-age=535023
Date: Thu, 01 Oct 2015 05:37:37 GMT
Connection: keep-alive
.PNG........IHDR.............L\......pHYs.........g..R... cHRM..z%....
..........u0...`..:....o._.F....IDATx...g.eG.6.Fd....9.}{..VK...B...Vx
...0....b..=.V !........... ..w.....$`.....Z...UU.....Dd....<.x.=.H
.......!..h...>.>12....H........6........s......x..CD...Q..4R.0.
...f...A.4<F$@.......`......qB ....... .....[C...D.....K..H......@.
.pq.. ........!-.....2.FJ.....U..v.m.m%f...oMh....C0..y.o._.>.h.8.?
:...m.........N...`.Oe@....@0..."'#.(C.....1..H0c1..-..0....." .".1...
...........>.-^.hf..D..$.....!.@$D$.D.B".x. ...%..a.Y......qq..K3..
Hh.@.}1|n$HH..........a.<o.......0\<......^..........M.....@0#8J
4...!.D.6rF........ g...H4...........^...s...?............s..!. ..4i..
.(..r....!..l..K)....-&...v.D...._g..0......@..>...c........-.]t,.Y
.A$@.d...1...@....E...T..9...h.0...@"$.....l....B.....6@..i.......IN..
P...a.....n..t.h..,}@D.(..q.B....Tg.Z.%.JK...=...Ek..c..Z(@...B....x^.
......?..?l.....pQ...D@..1.3......`h..0C...".....l..,...q... 4..H3 ...
....!0....3@|N-H....#.\...!pi.i@0.i..q....&4.......A@.b...[.9c..9.....
.......F/..{.[.Y.....1}.p".....x....`.....I.dB.3....B.....D.Y..l......
00...,^Q...8......1c!.@Bn..F....`.......1....!...d......q.\.......A.s.
........12......1.1..p......Ah`\...2@..S!..H.-......Y.0.8...h.....k;..
...9p....v..._.....#...0F`.......\.j',k.YR;........u...k..W...@BH...42
R...$..@...e..6dlE....L.3.51..1..3.`..d..Z.....f...6Z\.....D.A!"W..CB.
0N.P,>P... .#.4....v.,..Ah...n.2.@sa......lq..j.!.......@....". b..
1...F....$'..V...BaR.R.8.....m_.w.pn............n....q.....~.T....
<<< skipped >>>


GET /resources/flash/miniplayer/latest/miniplayer.swf HTTP/1.1
Host: cdn.videoplaza.tv
Connection: keep-alive
User-Agent: Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.32 (KHTML, like Gecko) Chrome/27.1.1419.0 Safari/537.32
Accept: */*
Referer: hXXp://adserver.iminent.com/Render/95329B79-68A1-4B84-B7F9-8BB78E73E018/0/yappyz/between_games/
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3


HTTP/1.1 302 Moved Temporarily
Status: 302
X-Powered-By: PHP/5.3.10-1ubuntu3.6
Content-Type: text/html
Location: /resources/flash/miniplayer/1.0.3/miniplayer.swf
Server: lighttpd/1.4.28
Content-Length: 1
Accept-Ranges: bytes
X-Varnish: 1326874325 1326873520
Cache-Control: must-revalidate, max-age=300
Expires: Thu, 01 Oct 2015 05:42:39 GMT
Date: Thu, 01 Oct 2015 05:37:39 GMT
Connection: keep-alive
.....


GET /resources/flash/miniplayer/1.0.3/miniplayer.swf HTTP/1.1


Host: cdn.videoplaza.tv
Connection: keep-alive
User-Agent: Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.32 (KHTML, like Gecko) Chrome/27.1.1419.0 Safari/537.32
Accept: */*
Referer: hXXp://adserver.iminent.com/Render/95329B79-68A1-4B84-B7F9-8BB78E73E018/0/yappyz/between_games/
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3


HTTP/1.1 200 OK
Content-Type: application/x-shockwave-flash
ETag: "1487745105"
Last-Modified: Wed, 26 Feb 2014 15:45:43 GMT
Server: lighttpd/1.4.28
Content-Length: 8000
Accept-Ranges: bytes
X-Varnish: 1326874337 1316351930
Cache-Control: must-revalidate, max-age=3600
Expires: Thu, 01 Oct 2015 06:37:39 GMT
Date: Thu, 01 Oct 2015 05:37:39 GMT
Connection: keep-alive
CWS..8..x..;gx[..;.... ...ER...j..$7..,..$J$A.T.M......M(......-.r/r.-
....'N.v.'N.$....Kr..s)W..r.z......d..O.y..........B.>"....IB..t...
!......M.....^..x,.......l6...>99..\.J...W.Y.....}..6.h..Od.}m.L...
..n-.LGS.h2..cu,...[.. 5......c..P.].iq-....t.DA.`G8.....j*...U..}_[&.
...T'..pL.D......l4...w..c.....9V;:K.un..3.J../...g...x{*.....S.E....p
...X,..h.....Dr.X...<...f...E.....xN...{.u..X.Q.j....c..N.*..K.58vm
..k.0x..I....Z.E.l.5.....9....?|...n<...}.Dt .....K..]F.bI8.....F\.
......qB..7.uB.zD..zQ.z.%..[_.)r.E.8...d..n-......&.iJ.....q-.w..d2...
y(..&..\4......j6..yl=z.....l..(u...~.?.....x2..hHK.b...KME].l4......j
a-.%.Z...N2wG..Bjz..'..{......k..2.z..c...K.....b.....LvH.fQ.L....Y!..
..P*..j,....L.......Tg..#.n...r.H.y.].....K...>.E.e{.jhz2.......dor
RKw.....h,....}Y-.Pc=.l.jP..@.:..j....].x*.e5....F3Y-..3.dBW.H........
.rYWH......n.Zg....1w...J{1...L.....t.....C...M.&R.z......z...T4.....O
...'..p...5..m.0Ah...~..u..z...1z1...xX.... f...L6......<#.Y.g.,~L.
...`I......T.-..2F9m ....r..]_....`.......y.*...*.J../..:[..u..:...j..
....<..1...b.fz;...7.{Z..[.-.F..F.{..ME7......{6.&21\n8i$.s\..1..D.
.%./[C.D4.q..#` MFC..........2ZV......\\..Q..U...j.~g...{L.......q.VzX
M..Y...R.ZO"...g.[.....I.Eb<..[...J..D-.R..........J.......|..../..
0.........ui-..... Fm..`...Qm6.^...NGy(N....E.L.LK.....t..i~<....xt
;.fe.I.{..v ...ix.k...t.x4....).2q5aH........q!.mf.X..N%K.9IT....e.E.{
.]`......%u.`......K.TR...v.{...^.Y5Z.y..t...<.....E.A.:{{..=.6..n.
..1.a$'{.......M.y..k.g..........x.;.{|.Uz..C.K...t:.....t.{F.=...
<<< skipped >>>


GET /proxy/tracker/v2?cf=short_form&dcid=c7c4c693-ce76-4e42-a6df-335f946bfb6d&e=21&f=nomidrolls,nooverlays,nopostrolls&pid=fccd69c0-cfd2-4d3e-b83b-d14dc4b45b5e&rnd=15997759&s=yappyz&t=noinskins,nooverlays,nopostrolls,nomidrolls&tid=888db39a-67fe-11e5-8c36-002590e811ac&tt=p HTTP/1.1
Host: fr-sien.videoplaza.tv
Connection: keep-alive
User-Agent: Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.32 (KHTML, like Gecko) Chrome/27.1.1419.0 Safari/537.32
Accept: */*
Referer: hXXp://adserver.iminent.com/Render/95329B79-68A1-4B84-B7F9-8BB78E73E018/0/yappyz/between_games/
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: pid=fccd69c0-cfd2-4d3e-b83b-d14dc4b45b5e


HTTP/1.1 200 OK
Server: Apache-Coyote/1.1
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: HEAD, DELETE, GET, OPTIONS, POST, PUT
Access-Control-Max-Age: 86400
Access-Control-Allow-Credentials: true
Set-Cookie: pid=fccd69c0-cfd2-4d3e-b83b-d14dc4b45b5e; Expires=Fri, 30-Sep-2016 05:37:42 GMT; Path=/proxy/
Content-Length: 0
Date: Thu, 01 Oct 2015 05:37:41 GMT
Connection: close



GET /vz/3C0469A7-A63D-4A73-B521-7A91DFBEBA64/1/yappyz_1332_1.exe HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: vzapp.iminent.com
Connection: Keep-Alive


HTTP/1.1 200 OK
Content-Length: 31376704
Content-Type: application/octet-stream
Last-Modified: Tue, 06 Aug 2013 12:59:12 GMT
ETag: 26651550.1.5246799925948687904
Server: Microsoft-IIS/7.5
ServerSideUid: 463220da-4ab8-4c42-8827-b8fb8ffdf08d
FromLocalCache: true
X-AspNet-Version: 4.0.30319
X-Powered-By: ASP.NET
Server: MCC-PROD19
Cache-Control: public, max-age=27281170
Date: Thu, 01 Oct 2015 05:37:06 GMT
Connection: keep-alive
MZ......................@.............................................
..!..L.!This program cannot be run in DOS mode....$.......UU.l.4.?.4.?
.4.?.4.?#4.?.C.?.4.?...?.4.?..<?.4.?.41?.4.?..;?.4.?Rich.4.?.......
.........PE..L......R.................(...................@....@......
....................................................................2.
.P....P...p..............@............................................
................................................text....'.......(.....
............. ..`.data........@......................@....rsrc....p...
P...r...,..............@..@.reloc..............................@..B...
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
...............................................J7..67..X7......T4..`4.
.v4...4...4...4...4...4...4...4...5...5..(5..:5..L5..h5..t5...5...5...
5..B4...5...5...5...6...6..&6..<6..J6..Z6..p6...6...6...6...6...6..
.6...6...7...7..64..$4...4...5...4......v7.............R........B...@.
..@...-.-.c.l.e.a.n.u.p...-.-.s.y.s.t.e.m.-.l.e.v.e.l.....-.-.m.u.l.t.
i.-.i.n.s.t.a.l.l...-.-.a.p.p.-.l.a.u.n.c.h.e.r.....-.-.a.p.p.-.h.o.s.
t.....-.-.c.h.r.o.m.e.-.f.r.a.m.e.....-.-.c.h.r.o.m.e.....-.-.c.h.r.o.
m.e.-.s.x.s.....FDICopy.FDIDestroy..FDICreate.....@.0.@.x.@.%.W.I.
<<< skipped >>>


GET /ga.js HTTP/1.1
Accept: */*
Referer: hXXp://public.yappyz.com/setup/fr-FR
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: VVV.google-analytics.com
Connection: Keep-Alive


HTTP/1.1 200 OK
Date: Thu, 01 Oct 2015 05:04:01 GMT
Expires: Thu, 01 Oct 2015 07:04:01 GMT
Last-Modified: Thu, 10 Sep 2015 10:52:20 GMT
X-Content-Type-Options: nosniff
Content-Type: text/javascript
Vary: Accept-Encoding
Content-Encoding: gzip
Server: Golfe2
Content-Length: 16022
Cache-Control: public, max-age=7200
Age: 1985
...........}kW....w~........pk..f......ZZ(O.,.!$$!q.....gft...>{...
.%.G..>..fF~2........;>..i...&.9.....v*.|x.|$....L.....y. 5.....
!..R*i..........>..mAf.o..@.0L.....1....w.v<_-.|aa.......F.p,...
.yA.....Q.{'...kyA....^.S...'o.2......5K..2o'~.....F#....*.7...c.#.l.P
. >.L.j.4....h...L~-....JW.Z..bm.I.9....s..;...=..Ue...b....r......
...........).......dO.c....v.f...^:....=.}.N'.-4.5m|h..tb.6v..W..r$.@.
8................v......e...T.t.h.c:..(....~.e0.].....{Y.p.....K.@L..J
Z.q.s.8...T...9..1r...u.KS..(xa!..{0!..5.4.^...7..."..........J8... ..
...O....t...q...|...a......a.V.q.5.e.([2..F[.........E...W.|....5a...0
..0...Ma.ML.....d....3.....=/.z`....i....ku#.4.b.Ra.^.:.-.j.*..L......
.A.;...Q.{2i.....}l..H.....T...Y._.Q!q ..V.y...9.@.R..8..!x!...p.e4...
'$c......x....'..AF&*i.../..@...!..zx..bq.{<..9...~..]...cW.Q....@A
...........U..}. .ihA..n..KK0:....b....@.D..U.....b.I>...-=...|..E.
._.W.pS..5....4.Ma..|.B......w...b>X. ...a....gV.1...ra!ZX.).,...[.
.*[.....)s8.. .....X8.c..D6'ai.6..Q.u10..N...p...>V.............!V.
......p#.....#.j...b......C....^........#..>E.`.........y.....%..M.
D.e...Y.HB.....a.G(.b.P.=.......'...&.T._.B..C......T....8..Ra.5.o.*..
.!.o..t ....`"@...='..<.Z.n..}`...m...TY...-...&".!.p....j...H....z
........|....H.....*...4"...K.0D8..2...`.O..R......../`2.6.F.W..,...2.
....I..Y....o...8..yA].....G.....8..8[..U.*x..).]...=.\...0<.pu....
7%.e?".P..f../.C??.h..8|Y.....W.j...^.O(.O.....3W\Q....~.N.G.Z.3.OO..W
.....7i(....c...!.Az....*...*..pdo.c4.k.%..}.......". ..f...{_.z..
<<< skipped >>>

GET /r/__utm.gif?utmwv=5.6.7&utms=1&utmn=1510111355&utmhn=public.yappyz.com&utmcs=utf-8&utmsr=1276x846&utmvp=550x220&utmsc=32-bit&utmul=en-us&utmje=1&utmfl=11.6 r602&utmdt=Yappyz Setup&utmhid=170252272&utmr=-&utmp=/setup/fr-FR&utmht=1443677833436&utmac=UA-37741269-1&utmcc=__utma=40499491.528497393.1443677833.1443677833.1443677833.1;+__utmz=40499491.1443677833.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none);&utmjid=1254820438&utmredir=1&utmu=qAAAAAAAAAAAAAAAAAAAAAAE~ HTTP/1.1


Accept: */*
Referer: hXXp://public.yappyz.com/setup/fr-FR
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: VVV.google-analytics.com
Connection: Keep-Alive


HTTP/1.1 200 OK
Access-Control-Allow-Origin: *
Date: Thu, 01 Oct 2015 05:37:06 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, no-store, must-revalidate
Last-Modified: Sun, 17 May 1998 03:00:00 GMT
X-Content-Type-Options: nosniff
Content-Type: image/gif
Server: Golfe2
Content-Length: 35
GIF89a.............,...........D..;HTTP/1.1 200 OK..Access-Control-All
ow-Origin: *..Date: Thu, 01 Oct 2015 05:37:06 GMT..Pragma: no-cache..E
xpires: Fri, 01 Jan 1990 00:00:00 GMT..Cache-Control: no-cache, no-sto
re, must-revalidate..Last-Modified: Sun, 17 May 1998 03:00:00 GMT..X-C
ontent-Type-Options: nosniff..Content-Type: image/gif..Server: Golfe2.
.Content-Length: 35..GIF89a.............,...........D..;..



GET /proxy/as3_vp_player HTTP/1.1
Host: fr-sien.videoplaza.tv
Connection: keep-alive
User-Agent: Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.32 (KHTML, like Gecko) Chrome/27.1.1419.0 Safari/537.32
Accept: */*
Referer: hXXp://adserver.iminent.com/Render/95329B79-68A1-4B84-B7F9-8BB78E73E018/0/yappyz/between_games/
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3


HTTP/1.1 302 Found
Server: Apache-Coyote/1.1
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: HEAD, DELETE, GET, OPTIONS, POST, PUT
Access-Control-Max-Age: 86400
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: HEAD, DELETE, GET, OPTIONS, POST, PUT
Access-Control-Max-Age: 86400
Access-Control-Allow-Credentials: true
Location: hXXp://vp.videoplaza.tv/resources/as3_vp_player_2.4.15.17.4.swf
Transfer-Encoding: chunked
Date: Thu, 01 Oct 2015 05:37:40 GMT
Connection: close
0..



GET /html5/0.9.12.9490/html5/webres/DistantBackground_01.jpg HTTP/1.1
Host: bejeweled.popcap.com
Connection: keep-alive
User-Agent: Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.32 (KHTML, like Gecko) Chrome/27.1.1419.0 Safari/537.32
Accept: */*
Referer: hXXp://bejeweled.popcap.com/html5/0.9.12.9490/html5/Bejeweled.html
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3


HTTP/1.1 200 OK
Date: Thu, 01 Oct 2015 05:37:43 GMT
Server: Apache
Last-Modified: Thu, 17 Nov 2011 23:04:07 GMT
ETag: "4b799-9809-4b1f63ccd47c0"
Accept-Ranges: bytes
Content-Length: 38921
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Content-Type: image/jpeg
......Exif..II*.................Ducky.......2.....mhXXp://ns.adobe.com
/xap/1.0/.<?xpacket begin="..." id="W5M0MpCehiHzreSzNTczkc9d"?> 
<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c06
1 64.140949, 2010/12/07-10:57:01        "> <rdf:RDF xmlns:rdf="h
ttp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rd
f:about="" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="
hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="hXXp://ns.a
dobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:56BC26884EDBE0119
B4AC6065636A90F" xmpMM:DocumentID="xmp.did:A05C96DF0AB811E195C6CE9A128
1F54B" xmpMM:InstanceID="xmp.iid:A05C96DE0AB811E195C6CE9A1281F54B" xmp
:CreatorTool="Adobe Photoshop CS5 Windows"> <xmpMM:DerivedFrom s
tRef:instanceID="xmp.iid:F5D1D5F768F0E0119A26D0109479293B" stRef:docum
entID="xmp.did:56BC26884EDBE0119B4AC6065636A90F"/> </rdf:Descrip
tion> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>
....Adobe.d...........................................................
#"""#''''''''''..................................................!! !!
''''''''''......8...."..........{.....................................
...............................!..1QAa.."q2..BRb.....#S$..............
......!.AQ.1aq............?......4 ...-VT.*..K....(......?^.E....PADX.
5..fz....L..>.....$ .b-@.....(43J.U.~....y...?.7e...1J.T.f...QD..J.
......W.j. ...?........e.?.....w...9.]......l....9.........~.u:.j..J..
...D.heAk................><KQ.f.U.*PT......|d....@O......5..
<<< skipped >>>


GET /external/95329B79-68A1-4B84-B7F9-8BB78E73E018/json2/DrillDownObjectMethod/?ObjectTypeField=2147483647&Uid=979AD9EF-CDA1-4A5D-865E-765248C3B960&Depth=2&CultureId=1033 HTTP/1.1
Host: apix.yappyz.com
Connection: keep-alive
Accept: application/json, text/plain, */*
User-Agent: Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.32 (KHTML, like Gecko) Chrome/27.1.1419.0 Safari/537.32
X-Requested-With: XMLHttpRequest
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3


HTTP/1.1 200 OK
Date: Thu, 01 Oct 2015 05:37:36 GMT
Server: PWS/8.1.20.22
X-Px: ms h0-s1009.v0-mow ( h0-s1094.v0-mow), ht-d h0-s1094.v0-mow.cdngp.net
Cache-Control: max-age=604800
Expires: Tue, 06 Oct 2015 19:33:51 GMT
Age: 122625
Content-Length: 117252
Content-Type: text/html; charset=utf-8
Content-Encoding: gzip
Vary: Accept-Encoding
X-CDNetwork-CountryCode: US
Connection: keep-alive
.............r.....*X.....1....nk.,..&[.....3..HI...Q.RW. .(.$..P.).K.
..x....... ......2...?\...... .$..`.-.B....(.|.vC...7?|.....ih.......W
..z.......KM.B'p..9.I\........b.G..$......{...2I.X... ....N.^.f.......
..."m....;..tD.aI.....8...%,...QZ.u.'.....s/.......GJF...O....6.......
.G..X......c.3?....V.6...~D.6...23......E.(M.*.y..2%%CX.^e..U).....nf.
.W...6..........K..Q!_.oL....d./........1..h....!?..F6nGF.o..iQ....%mb
j..;.......0...1Z..j..Ea..n(l..[.A1..o)..a......_.J .al..{U\..9.!..(..
...E....a*C.;1F...0v..O.kD.V.!.i(..........[.....M.....)........Ka...y
3.....q....}}.o.6&..'....}...=.....]....i.J*f..F.N7jX..q..K*..QZM..t1.
H..B^|J.(...........y..K3s.......0....w.|>......Z....%.^....%>..
....p.%.^"..$v.M..E/a....*.\B......p*...1.%d......e.. ..%dp.7>.<
.,.[......-d....."........qy.nZ...l....g8.d\...6.........!....@.3..h..
.....S.q.M....x';.yq..f._.....CX..v....G...?....2.G.m8..8.....bq......
...M7. .<.<.}@X.@........7......RT....$.Y^.I.fUY.q^..^.Y..If-@..
..V...n.*n&(mH;..._.<.1...g..Y.36.....sA.v.....08..:s.......E....q.
v.7.Uz3......w.4j~'...!.............S..R21.4n7V.Z.9=,h.....n...\Q.....
/tx;.....}p....Y%%...Wn{.I....._....^Z...z.@..K.}......H..S"3.....d.#.
......"2...6E..^D....`F .$.>.BdYC...3....8gi.YYW9..2...Bk".n....C&.
...3c. ..6)7....<#.D........8..q*<O.%...J.TN.G.u.a...)...^...v..
...]-.T....ST\ .Jy.@ o......i.C.Y%%..g.....f....[.......V;..s..K...~..
..K....8%G.N.....&[0.WB..\H0..].1..v,..V......02C.....H.:...2BPQ....%U
V..L)dI.,G0...`gi!$...=..p.<..../.....#..8....@..Y..u.....a....
<<< skipped >>>

GET /external/95329B79-68A1-4B84-B7F9-8BB78E73E018/json2/DrillDownObjectMethod/?ObjectTypeField=2147483647&Uid=41399590-f7f5-aef9-294d-a7464f0c212b&Depth=1&CultureId=1033 HTTP/1.1


Host: apix.yappyz.com
Connection: keep-alive
Accept: application/json, text/plain, */*
User-Agent: Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.32 (KHTML, like Gecko) Chrome/27.1.1419.0 Safari/537.32
X-Requested-With: XMLHttpRequest
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3


HTTP/1.1 200 OK
Date: Thu, 01 Oct 2015 05:37:37 GMT
Server: PWS/8.1.20.22
X-Px: ms h0-s1009.v0-mow ( h0-s1122.v0-mow), ms h0-s1122.v0-mow ( origin>CONN)
Cache-Control: max-age=604800
Expires: Thu, 08 Oct 2015 05:37:38 GMT
Age: 0
Content-Length: 630
Content-Type: text/html; charset=utf-8
Content-Encoding: gzip
Vary: Accept-Encoding
X-CDNetwork-CountryCode: UA
Connection: keep-alive
............oo.0............u....V.2i...q...c{...U..l...c ...|........
.x.'8..I2JH?...>.<.GI...8>.s..0Jq..(....x..G._7JCc9.<y.poA
...y...i.......T,|..U.U..\... V...P..5K..O=....Z^...'.H...$ ^.........
..[x......n.P.........//...*.... .:.ZiFu.T=(m-F..$A..I..Md....e.......
...;.-..e_z.Te ..........E.....B5..b%.. .#[6.H5.V. ..d..@..&@g..(Ura.V
\Z.r...L.ATf.Q.h.&p.Y.M...J....o.K..z......J....>....C..Z....X>.
......o`.0. .q.^s..K5.4..].1.#.!-..N. T.k.u.).j.r...u..T...P..jM.k.q..
.h....L..2\......S*..9u._]\?s..s.-N....2.!.=sBB:t.....1.6W.6...D......
..v..pS.. .,.f...:6......il:......n...#s.5.....<.r...VB......V.....
1...d.5.9.y.....W4.....



GET /?&callback=OnGeoloc HTTP/1.1
Accept: */*
Referer: hXXp://public.yappyz.com/setup/fr-FR
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: geoloc.iminent.com
Connection: Keep-Alive


HTTP/1.1 200 OK
Date: Thu, 01 Oct 2015 05:37:06 GMT
Server: PWS/8.1.20.22
X-Px: ms h0-s1019.v0-mow ( h0-s1023.v0-mow), ht-d h0-s1023.v0-mow.cdngp.net
Cache-Control: max-age=604800
Expires: Wed, 07 Oct 2015 10:50:19 GMT
Age: 67607
Content-Length: 61
Content-Type: text/javascript; charset=utf-8
X-CDNetwork-CountryCode: UA
Connection: keep-alive
if(OnGeoloc){OnGeoloc({"cc":"UA","domain":".iminent.com"});};HTTP/1.1 
200 OK..Date: Thu, 01 Oct 2015 05:37:06 GMT..Server: PWS/8.1.20.22..X-
Px: ms h0-s1019.v0-mow ( h0-s1023.v0-mow), ht-d h0-s1023.v0-mow.cdngp.
net..Cache-Control: max-age=604800..Expires: Wed, 07 Oct 2015 10:50:19
 GMT..Age: 67607..Content-Length: 61..Content-Type: text/javascript; c
harset=utf-8..X-CDNetwork-CountryCode: UA..Connection: keep-alive..if(
OnGeoloc){OnGeoloc({"cc":"UA","domain":".iminent.com"});};..



GET /vz/c121579f-55a7-4757-6974-00baf6ed4979/2/laser-cannon.png HTTP/1.1
Host: vz.yappyz.com
Connection: keep-alive
User-Agent: Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.32 (KHTML, like Gecko) Chrome/27.1.1419.0 Safari/537.32
Accept: */*
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3


HTTP/1.1 200 OK
Content-Length: 24735
Content-Type: image/png
Last-Modified: Wed, 20 Nov 2013 16:58:48 GMT
ETag: 27305506.2.5246891653715317904
Server: Microsoft-IIS/7.5
ServerSideUid: a29120df-1821-441d-9a69-6ff31ef55397
FromLocalCache: true
X-AspNet-Version: 4.0.30319
X-Powered-By: ASP.NET
Server: MCC-PROD19
Cache-Control: public, max-age=1052619
Date: Thu, 01 Oct 2015 05:37:37 GMT
Connection: keep-alive
.PNG........IHDR.............L\......pHYs................OiCCPPhotosho
p ICC profile..x..SgTS..=...BK...KoR.. RB....&*!..J.!...Q..EE.........
..Q,......!.........{.k........>...........H3Q5...B..........@..$p.
...d!s.#...~<< ".....x.....M..0.....B.\.....t.8K....@z.B..@F....
&S....`.cb..P-.`'........{..[.!..... .e.D.h;...V.E.X0..fK.9..-.0IWfH..
...........0Q..)..{.`.##x.....F.W<. ...*..x..<.$9E.[.-q.WW..(.I.
 .6a.a.@..y..2.4..............x.....6..._-...."bb.....p@...t~..,/...;.
.m..%..h^..u..f..@.....W.p.~<<E.........J.B[a.W}.g._.W.l.~<..
....$.2].G......L......b...G.......".Ib.X*..Q.q.D...2.".B.).%..d..,..&
gt;.5..j>.{.-.]c..K'.Xt.......o..(...h...w..?.G.%..fI.q..^D$.T..?..
..D..*.A....,.........`6.B$..B.B.d..r`)..B(....*`/.@.4.Qh..p...U..=p..
a...(....A...a!...b.X#......!.H...$ ...Q"K.5H1R.T UH..=r.9.\F..;..2...
.G1...Q=...C..7..F...dt1......r..=.6....h...>C.0....3.l0...B.8,..c.
."......V.....c..w...E..6.wB a.AHXLXN.H. .$4...7...Q.'"..K.&.....b21.X
H,#..../.{.C.7$..C2'...I..T...F.nR#.,..4H.#...dk..9.,  .......3...!.[.
.b@q..S.(R.jJ....4..e.2AU..R...T.5.ZB...R.Q...4u.9...IK......h.h.i..t.
....N..W...G.....w.......g(.....g.w...L......T071......oUX*.*|.....J.&
..*/T.......U.U.T..^S}.FU3S......U..P.S.Sg.;...g.oT?.~Y...Y.L.OC.Q.._.
.. .c..x,!k...u.5.&...|v*......=...9C3J3W.R..f?...q..tN..(...~....).).
.4L.1e\k....X.H.Q.G..6......E.Y...A.J'\'Gg.....S.S.....M=:....k....Dw.
n.....^..Lo..y....}/.T.m...G.X...$.....<.5qo<./...QC].@C.a.a....
..<..F.F..i.\.$.m.m..&.&!&KM.M..RM..).;L;L........5.=1.2.......
<<< skipped >>>


GET /html5/0.9.12.9490/html5/webres/pillars_left_top.png HTTP/1.1
Host: bejeweled.popcap.com
Connection: keep-alive
User-Agent: Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.32 (KHTML, like Gecko) Chrome/27.1.1419.0 Safari/537.32
Accept: */*
Referer: hXXp://bejeweled.popcap.com/html5/0.9.12.9490/html5/Bejeweled.html
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3


HTTP/1.1 200 OK
Date: Thu, 01 Oct 2015 05:37:43 GMT
Server: Apache
Last-Modified: Thu, 17 Nov 2011 23:04:09 GMT
ETag: "2faa7-3d2b0-4b1f63cebcc40"
Accept-Ranges: bytes
Content-Length: 250544
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Content-Type: image/png
.PNG........IHDR.....................pHYs.......... .....OiCCPPhotosho
p ICC profile..x..SgTS..=...BK...KoR.. RB....&*!..J.!...Q..EE.........
..Q,......!.........{.k........>...........H3Q5...B..........@..$p.
...d!s.#...~<< ".....x.....M..0.....B.\.....t.8K....@z.B..@F....
&S....`.cb..P-.`'........{..[.!..... .e.D.h;...V.E.X0..fK.9..-.0IWfH..
...........0Q..)..{.`.##x.....F.W<. ...*..x..<.$9E.[.-q.WW..(.I.
 .6a.a.@..y..2.4..............x.....6..._-...."bb.....p@...t~..,/...;.
.m..%..h^..u..f..@.....W.p.~<<E.........J.B[a.W}.g._.W.l.~<..
....$.2].G......L......b...G.......".Ib.X*..Q.q.D...2.".B.).%..d..,..&
gt;.5..j>.{.-.]c..K'.Xt.......o..(...h...w..?.G.%..fI.q..^D$.T..?..
..D..*.A....,.........`6.B$..B.B.d..r`)..B(....*`/.@.4.Qh..p...U..=p..
a...(....A...a!...b.X#......!.H...$ ...Q"K.5H1R.T UH..=r.9.\F..;..2...
.G1...Q=...C..7..F...dt1......r..=.6....h...>C.0....3.l0...B.8,..c.
."......V.....c..w...E..6.wB a.AHXLXN.H. .$4...7...Q.'"..K.&.....b21.X
H,#..../.{.C.7$..C2'...I..T...F.nR#.,..4H.#...dk..9.,  .......3...!.[.
.b@q..S.(R.jJ....4..e.2AU..R...T.5.ZB...R.Q...4u.9...IK......h.h.i..t.
....N..W...G.....w.......g(.....g.w...L......T071......oUX*.*|.....J.&
..*/T.......U.U.T..^S}.FU3S......U..P.S.Sg.;...g.oT?.~Y...Y.L.OC.Q.._.
.. .c..x,!k...u.5.&...|v*......=...9C3J3W.R..f?...q..tN..(...~....).).
.4L.1e\k....X.H.Q.G..6......E.Y...A.J'\'Gg.....S.S.....M=:....k....Dw.
n.....^..Lo..y....}/.T.m...G.X...$.....<.5qo<./...QC].@C.a.a....
..<..F.F..i.\.$.m.m..&.&!&KM.M..RM..).;L;L........5.=1.2.......
<<< skipped >>>


GET /128x128 HTTP/1.1
Accept: */*
Referer: hXXp://public.yappyz.com/setup/fr-FR
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: placehold.it
Connection: Keep-Alive


HTTP/1.1 301 Moved Permanently
Date: Thu, 01 Oct 2015 05:37:06 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: __cfduid=dc3bab29e232ab4c4934d68bcf22f45a51443677826; expires=Fri, 30-Sep-16 05:37:06 GMT; path=/; domain=.placehold.it; HttpOnly
Location: hXXps://placeholdit.imgix.net/~text?txtsize=12&txt=128×128&w=128&h=128
CF-Cache-Status: HIT
Expires: Thu, 01 Oct 2015 09:37:06 GMT
Cache-Control: public, max-age=14400
Server: cloudflare-nginx
CF-RAY: 22e5d04f3e9d2c60-AMS
0..HTTP/1.1 301 Moved Permanently..Date: Thu, 01 Oct 2015 05:37:06 GMT
..Content-Type: text/html..Transfer-Encoding: chunked..Connection: kee
p-alive..Set-Cookie: __cfduid=dc3bab29e232ab4c4934d68bcf22f45a51443677
826; expires=Fri, 30-Sep-16 05:37:06 GMT; path=/; domain=.placehold.it
; HttpOnly..Location: hXXps://placeholdit.imgix.net/~text?txtsize=12&t
xt=128×128&w=128&h=128..CF-Cache-Status: HIT..Expires: Thu, 01 Oc
t 2015 09:37:06 GMT..Cache-Control: public, max-age=14400..Server: clo
udflare-nginx..CF-RAY: 22e5d04f3e9d2c60-AMS..0..



GET /html5/0.9.12.9490/html5/webres/spinwait.gif HTTP/1.1
Host: bejeweled.popcap.com
Connection: keep-alive
User-Agent: Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.32 (KHTML, like Gecko) Chrome/27.1.1419.0 Safari/537.32
Accept: */*
Referer: hXXp://bejeweled.popcap.com/html5/0.9.12.9490/html5/Bejeweled.html
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3


HTTP/1.1 200 OK
Date: Thu, 01 Oct 2015 05:37:43 GMT
Server: Apache
Last-Modified: Thu, 17 Nov 2011 23:04:10 GMT
ETag: "2faad-f39-4b1f63cfb0e80"
Accept-Ranges: bytes
Content-Length: 3897
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Content-Type: image/gif
GIF89a...............................!.......!..NETSCAPE2.0.....,....|
.|....H...0..*.8..._...dibax.l... ..\.x>......pHT...G`.0.I.. .a2K..
TJ.X..lg..j....J..3..G.is....C...x.zMsk..S....0...pz.).v..q.}.........
..y......../....._......`.......(.....h.......A.....{.................
.x... ..7..ln...'. .Zd:..hb.?v..p..............f2..,e..b..U..(..... ..
..h!..*..l..%...f..a.fL..X..g.hG.C..3.#.;^L.8u.4.P.,......K...Y......;
q.].....p...K....x.B4..._a.'......h......qV..#..*.Me...9f.Y....C..M...
..S..A.r.Se1.~s8P.$&a..2....Uu....wn..]..Q.q..:1?O.Xzt...6.s]....%.v.Z
|v.......Rz...kd...y..G./..~......_I.aW.t.>P.3..g...-. ..Aha|.Q.!.~
a.!..5........%&...........!.1J......b...x..........#. .)..#2y$...5.x~
.H...`.."[....4.a..RNY&.X.x.:Nv...Tr.&.of.&.q.(..s.9.Q.}..iu.Vhj....i.
....{..'..$..!.......,....W.0....H...0.@..8.= .`(J.7.(WVi.v. ..7.gm.&l
t;..#.P....H@k8D.G.$....N.....=CYi. .^Ea.....Ai..-.n.........{!v.x/.*o
.......xy.d.~..3{|....8......t....<.$...............@..0%..=.......
.................K.G....z.2....c\3.....m.Y...se<Z.......P./...2C.N!
......HMb...-.....".......o...&IZK.!..!.......,....W.0....H...KH...8.6
..`.u.h."..l[.. ..L..i.|....p.....@k8D.E.$.....Q...4=AYm. .^.a....}5i.
..:..K.... .tn|px.lD.o.~3..#....z.........~.4.....9...........<....
.../...@......@..*.....$......%.a......(.!....2. ....,.....U8."....9Q&
........C.@.8..C.C.:.....HC.D.3,j.X.."...?..)r......L..D..!.......,<
;...B.B....H4<.0.I.....{..'....hj2i;.. o.l...G. .........\.x..I...)
.Jo...j.r.A...F&M..y\)..Z7.=....p...[.Cx.v| ~Q..}dj..t.z...u......
<<< skipped >>>

GET /html5/0.9.12.9490/html5/Bejeweled_min.js HTTP/1.1


Host: bejeweled.popcap.com
Connection: keep-alive
Accept: */*
User-Agent: Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.32 (KHTML, like Gecko) Chrome/27.1.1419.0 Safari/537.32
Referer: hXXp://bejeweled.popcap.com/html5/0.9.12.9490/html5/Bejeweled.html
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3


HTTP/1.1 200 OK
Date: Thu, 01 Oct 2015 05:37:43 GMT
Server: Apache
Last-Modified: Sun, 11 Dec 2011 22:06:18 GMT
ETag: "2fa1f-c3f5b-4b3d83a398a80"
Accept-Ranges: bytes
Content-Length: 802651
Vary: Accept-Encoding
Keep-Alive: timeout=15, max=99
Connection: Keep-Alive
Content-Type: application/javascript
function ca(b){throw b;}var e=void 0,n=true,p=null,s=false;function ga
(){return function(b){return b}}function t(){return function(){}}funct
ion w(b){return function(c){this[b]=c}}function ha(b){return function(
){return this[b]}}function x(b){return function(){return b}}window.ss=
{version:"0.6.1.0",Yqa:function(b){return b===e},Wqa:function(b){retur
n b===p},dm:function(b){return b===p||b===e}};.(function(){function b(
b){b=b||{};d(arguments,function(d){d&&c(d,function(c,d){b[d]=c})},1);r
eturn b}function c(b,c){for(var d in b)c(b[d],d)}function d(b,c,d){if(
b){b instanceof Array||typeof b.length==="number"&&(typeof b.callee===
"function"||b.item&&typeof b.nodeType==="undefined"&&!b.addEventListen
er&&!b.attachEvent)||(b=[b]);for(var d=d||0,f=b.length;d<f;d  )if(c
(b[d],d))break}}function f(b,c){var d;if(b)for(var f=0,g=b.length;f<
;g;f  )if(c(l(b[f]))){d=n;break}return!d}function g(b){var c={};.d(b,f
unction(b){c[b]=n});return c}function h(b,c){var g=[];f(b.contains,fun
ction(f){d(u(f,c?"executionDependencies":"dependencies"),function(c){b
.TL[c]||g.push(c)})});return g}function j(b,c){var d;d=b.contains?h(b,
c):(d=b.SL)?h(d,c):u(b,c?"executionDependencies":"dependencies");retur
n d}function k(b){c(b._parents,function(b){c(b._composites,function(b)
{ss.Zi.KF(b,p,p,n)});ss.Zi.KF(b,p,p,n)})}function l(b){return o(b)||(s
s.scripts[b]={name:b})}function m(b,c,f,g){var h;d(b,function(b){b=o(b
);h|=ss.Zi.KF(b,.c,f,g)});return h}function o(b){(b=typeof b==="string
"?ss.scripts[b]||ss.XL[b]:b?b.ora||b:p)&&!b.c6&&(b=p);return b}fun
<<< skipped >>>

GET /html5/0.9.12.9490/html5/soundmanager2_flash9.swf HTTP/1.1


Host: bejeweled.popcap.com
Connection: keep-alive
User-Agent: Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.32 (KHTML, like Gecko) Chrome/27.1.1419.0 Safari/537.32
Accept: */*
Referer: hXXp://bejeweled.popcap.com/html5/0.9.12.9490/html5/Bejeweled.html
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3


HTTP/1.1 200 OK
Date: Thu, 01 Oct 2015 05:37:49 GMT
Server: Apache
Last-Modified: Sat, 03 Dec 2011 17:26:34 GMT
ETag: "2fba7-2c0d-4b33363170680"
Accept-Ranges: bytes
Content-Length: 11277
Keep-Alive: timeout=15, max=98
Connection: Keep-Alive
Content-Type: application/x-shockwave-flash
CWS..U..x..|y|\U..=....-...M....6M.0M..6.Ji.6...t.JH.....:K.%m....*(.R
QA."....Q.W.A_.h.wT\.._.....s.{3............r......7p..^e......../`..i
.....B........fr..l]..*.F.::..<.~...|a...u..ut..X.v5B......C.s.....
.n..(.GJ.|N.....K....X.....r!#P&..F....R.cM..D.Lt..BV/m.GF2..N.:......
...Qc.......U@.SJ.2....|..z3.!..mcu... ......f.:.nO...#.|..@.LD%&.N!.#
.x&]L......\..\..K0......!.>.....e}...g......z...m$......5k$....c..
...........m.SSSW........c....w..u..|.?./......WX;.q.l....w2...,.Yc...
v.^.La.9.....Y..5.......R!...^..g.=..2j7FI...z-....6...=..5F...0..B.t.
.P......r6n..[b.>%. ......A.v.4P.K...l........Q../.E{t@..d.n...QIr2
]....=.#H....."r.a...u...$..uk....Cz.n%...K..u....L....d>..sC...1v.
...z.........L.wW..GP.J.x.H...P..K09P.Hb..t...N'H...aw).5..]...A..rON.
g.d0i..N#,.w..x2y=i$.P..d.\.7.."lM.K.,... .J..Ro..$...j.v9.bx.t8c.E...
p2...s.x..6.&....S.^.}._.%8T4J........ .@.7.!....3[r.6....(...PXD...'R
F..V..#....Z.t........^h.G.......#.c?..(.r...%%.!........b.X.."..C....
C....2......E.=T,.G<...%...^.............F@".....o....|....a.>k$
..[..l...e.Pw...W..e.4..........)..rF&8P.....i\[F.|.a.(.w..jwF.L..Q EE
.G.fu.....&..]r.d.E..v...q-...%......~.:.......{...R...*"]>T..t.]./
...$J....&..LLzM1..d. |~...D.a.$....\.`T.^.V5Q.....X.....r&....#E?...G
. oT..@.....f.D...u..6I.... ..KBu..b.^.pWA..i.AD..E1l..L..V..2_.(...].
4H..cP;..[..v......PV:....u..H7j.X1Ti....>.Y/...h...P.Yl.`Y.!k.t.q.
...$.m)!..d.P>'..#..zYc...f{...Sl?\..7..dow>g..9..w....?..W}y ..
0'.'...Jq. ....3{..l.......*.....g..T!..}FIm.^..i.....^........}..
<<< skipped >>>


GET /setup/fr-FR HTTP/1.1
Accept: */*
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: public.yappyz.com
Connection: Keep-Alive


HTTP/1.1 200 OK
Date: Thu, 01 Oct 2015 05:37:05 GMT
Server: PWS/8.1.20.22
X-Px: ms h0-s1154.v0-mow ( h0-s1003.v0-mow), ht-d h0-s1003.v0-mow.cdngp.net
Cache-Control: max-age=521521
Expires: Sat, 03 Oct 2015 03:28:49 GMT
Age: 356417
Content-Length: 1093
Content-Type: text/html; charset=utf-8
Content-Encoding: gzip
Vary: Accept-Encoding
Px-Uncompress-Origin: 2507
Last-Modified: Sat, 26 Sep 2015 03:28:49 GMT
Connection: keep-alive
...........Vko.6..^...S.......i.G.....M....(...%:4....u....%..."..."y.
=...>^.h..4ui.Q.....E{.r..E.k;.$.~!q.~C..%q..c.....E..;...<.$.In
1....P.'..K.....}......J._.5...i..1#.?..&...............D.;..V.f...C.P
..dD..P.Pr...P=..a).....nR\.v.z...B.#.u.8....w......?....m=.}.';....Bm
..K.....x.._..#.l..2.p..R.s.Y:.eb...x...V..n<D%.6.E.!.W...0>$.tW
.O...M.q......0.\9n"-.7.u......w=... lQH..b..=.H..f.v.[.b.z.H...!I.j..
.&.u.E...Zk.KA..Z.H0.....-..........G1".............._5.....i....b<
KY:.%..(..Q.2..Mye..^...2..9..a.KByVl ..7.=...tVS.|L..L...=.c.8.._5w[.
K.7..d.~..BYG.<.N.%...].<..X.f....6..r....V.j.J{(......(k#6.....
:........v(*Ol.a..[.F...|.o..D.Od....*.....x.?8<"....s....B2.eV...V
Z.&..vY...-g...I.....:|.-[0Z-].Q.. `..eq.d.. .|n/X ..]....l...(..../cF
..)........ ?......z\v...9W..>(..WBt.......kK..8.Q.d4..n......O5..o
O...>\..........b.mH.Q'o..G7_.... NlT..o!.}..H9.../...;;........u^/
..>}..6..............O.NI.'p$.6..f.d...r.k ..-..%.z.?/..E.I0{.t..F.
?.$6U.f.Ixk...a.`..g'...Q..&u~x.._..Z...0..Z.......t.W.o./^.[D....../.
id.V.0[. ..(.....f.....}m!..U........7v.......Av..c.2..$.6.......k....
..........
<<< skipped >>>

GET /setup/bundles/css/main?v=EUchDgvNqy2LnTDqnlSXy0d7gHrRZrjdoFfWa5I7Ot41 HTTP/1.1


Accept: */*
Referer: hXXp://public.yappyz.com/setup/fr-FR
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: public.yappyz.com
Connection: Keep-Alive


HTTP/1.1 200 OK
Date: Thu, 01 Oct 2015 05:37:05 GMT
Server: PWS/8.1.20.22
X-Px: ms h0-s1154.v0-mow ( h0-s1025.v0-mow), ms h0-s1025.v0-mow ( origin>CONN)
Cache-Control: max-age=31536001
Expires: Fri, 30 Sep 2016 05:37:06 GMT
Age: 0
Content-Length: 872
Content-Type: text/css; charset=utf-8
Content-Encoding: gzip
Vary: Accept-Encoding
Px-Uncompress-Origin: 2104
Last-Modified: Thu, 01 Oct 2015 05:37:06 GMT
Connection: keep-alive
..........}U.n.0....AQ`P..i.T>..K/...l..PYRe.mf..G.rb...C....#.....
......8N3...V...uQ.}...p.N.$...I ..D.RmI..jG.'R.Iu ...5.Rh[.B...8"....
P.u...c..1$.:.}k...*.xW3[.E..0..*i.;.I.2m9.....4@.C...a...N*.2\C >g
.iH...Z.\.....@M.g.*=.wf.B .i.I.U...t.|.( .L=......%TA?epU..n.........
W.#.......$o4.,&.7....[..(G..{.e......3...$!.:....{..D.d@4.s../....s..
.........V.y.BU`.K/d...'....mY.~T.L......&o.,6.M.'.(....Hv.._....lW.i.
.~....X....$..g:g...J...?.....L5.....V.sP}TZ..]fd..2............3.z..8
..h....Y..C.....G^K.2.*..P..c.0.~ ..RR. ....Ec.a....h.t.@....by..Z-...
.. .......rj`>.9j.l..<#...#Qt~Z..=...D.e.*2..,...C].{v..r.2-.L..
..D4....n........#..|n....@v.......%."..|. p..vl.nsW2...Qc.....1..=|..
G..n......K.....H..NQ..B......;..N_.C...AkQ...Q]....l..$0........e....
.9..Q. ?.S...i!................|.>-..!.....<;w'}.G .)nD?g.a...Y.
.;..?f.i..........2....q."........GR.....??.t.8.......


GET /setup/bundles/js/main?v=sDSsPxD4ow0YsO7BRbvTn4BdtyoREQVpAbpVyiLcQs41 HTTP/1.1


Accept: */*
Referer: hXXp://public.yappyz.com/setup/fr-FR
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: public.yappyz.com
Connection: Keep-Alive


HTTP/1.1 200 OK
Date: Thu, 01 Oct 2015 05:37:06 GMT
Server: PWS/8.1.20.22
X-Px: ms h0-s1154.v0-mow ( h0-s1126.v0-mow), ht-d h0-s1126.v0-mow.cdngp.net
Cache-Control: max-age=31536001
Expires: Wed, 28 Sep 2016 18:31:19 GMT
Age: 126348
Content-Length: 6762
Content-Type: text/javascript; charset=utf-8
Content-Encoding: gzip
Vary: Accept-Encoding
Px-Uncompress-Origin: 22512
Last-Modified: Tue, 29 Sep 2015 18:31:18 GMT
Connection: keep-alive
...........<kw.6......d.......F..$.....nWR{h.....K.v\I.....$A...vw.
~.9'....`f03...'.X.0..|;..;..=..0..{~t........d.........n...*X...x.4..
....N...fW....!(.#6..".....5.[...E.hLh.@>...b/...U.H.....a.t*nfV...
.....K~......m.<a.........>aV......x..[.. A.............?....;..
.?.C......5..1...z..Y8..\..m8...|.....'.."..0....8L.....&G.a.xj..'.~2e
./..0...I........p.3...b...kGL$Q........^|xOM.....1..#.....'...&.$....
&x,.>....~.Yt....u...........?.....(H..-.......p...n x.i.I.........
.5.bq.L.W.M..`.......F......3 ...T\.p.A0.i(....>4.....I_8d8LH."m...
..S/B....m.Dx!GZ.}..h..Ms.T........TG..L!...N.G....i.......mMF.d.W.0`K
...%.].B.N t....65.Q......(..m..{..I...c/f............. .e.<~.....v
_3!...5..5.*.g.....CG:9..F.u:..OB....4..7.cw0.....m........}.=.<..=
P.....{..{......f,..S...^......c.......8.Xh....;.S.*h.`D..>....q...
.....n...k..D.$.&6......%.Fd....mE..$1...f......D.@.......q.6...o.....
:[@..$LA.l.;....8..........`.....JYB:....Hjx7_J...........)........*..
.....c\...*....u......l./....|y..t.G.E...$.n.}`...::.}H..j....7a....Y.
...lWe...?9Q}..f.UK......r........5E.,...,......B..M..~....{..........
..l.t..qS~...{(...a.-....g>..}l....s.&....d..Q|.....>|y.....4.]8
'. .>...q(.W._..5.......H~.....H......>.T...#.[j's.aEy...h8.S..J
...B.....OO..4(!X.....hE..K..2.....$....p}.gF._!.h..k.H.....Sa.i..o..~
.,..$R\....t.:'.. ..|..}.E1.......P...O.P...l.>.._a}I..d...h....bB}
...."~.@..@....M..........l....j'.....q.W..>1.X.p.......<.a.pF;.
?...t...pD..r...~..Qf.v.C...P.w.. ..E2h7.{M...j4.[..g..C0.M!..p|0.
<<< skipped >>>

GET /setup/content/img/BetaYappyz300X90.png HTTP/1.1


Accept: */*
Referer: hXXp://public.yappyz.com/setup/fr-FR
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: public.yappyz.com
Connection: Keep-Alive


HTTP/1.1 200 OK
Date: Thu, 01 Oct 2015 05:37:06 GMT
Server: PWS/8.1.20.22
X-Px: ms h0-s1154.v0-mow ( h0-s3.v0-mow), ht-d h0-s3.v0-mow.cdngp.net
ETag: "8c8177b7dc33cf1:0"
Cache-Control: max-age=604800
Expires: Sun, 04 Oct 2015 02:36:50 GMT
Age: 356416
Content-Length: 9625
Content-Type: image/png
Last-Modified: Thu, 27 Feb 2014 16:55:28 GMT
Connection: keep-alive
.PNG........IHDR...,...Z......qk.....tEXtSoftware.Adobe ImageReadyq.e&
lt;...fiTXtXML:com.adobe.xmp.....<?xpacket begin="..." id="W5M0MpCe
hiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk=
"Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27        "> &
lt;rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#">
 <rdf:Description rdf:about="" xmlns:xmpMM="hXXp://ns.adobe.com/xap
/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#"
 xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xm
p.did:B3153A4DCCB0E211AC45CD5FE0A0C364" xmpMM:DocumentID="xmp.did:1981
1AEFB0D611E2BFDABB3629526DDD" xmpMM:InstanceID="xmp.iid:19811AEEB0D611
E2BFDABB3629526DDD" xmp:CreatorTool="Adobe Photoshop CS6 (Windows)">
; <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:B3153A4DCCB0E211AC45
CD5FE0A0C364" stRef:documentID="xmp.did:B3153A4DCCB0E211AC45CD5FE0A0C3
64"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> 
<?xpacket end="r"?>......!.IDATx..].|T..?Y! ...*......*X7....[.T
.j.~~(.Y-..)Z....n.Z.`.-Z.PKA$.A4,.KX...L..:If.s2w.exo.......;..e.....
...s.9...|>PL}05.O..{........c..C"..........WYYy......op.!..F.6.9].
Xy.=.`5.....l.D....z....8..........q...Q...o..J..4N....3')1UI..[....F.
M.A.......$'....... N.`.4.........K.?]y...3....L.........j..m&#.vlc.3.
1.X8.....D.LS....wBA..J....9.W.:..|.BRjR... ...[.......W.E..Y.~...Y...
')X..Z.)E2...~..f...6SZp. .DB.t...#L...Vqqq..1NY....J.).......r-X..$L.
.T.}Xx...I.."...6...C..g.D...%v..b.a..... )1MI.Z.k..S#./'.4e.S..1.
<<< skipped >>>

GET /setup/bundles/js/install?v=hXu8-1oDiJ-oMTCBcn3dculz_DbDV6SM0tBg_PpCmoE1 HTTP/1.1


Accept: */*
Referer: hXXp://public.yappyz.com/setup/fr-FR
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: public.yappyz.com
Connection: Keep-Alive


HTTP/1.1 200 OK
Date: Thu, 01 Oct 2015 05:37:06 GMT
Server: PWS/8.1.20.22
X-Px: ms h0-s1154.v0-mow ( h0-s1088.v0-mow), ht-d h0-s1088.v0-mow.cdngp.net
Cache-Control: max-age=31536000
Expires: Tue, 13 Sep 2016 10:20:53 GMT
Age: 1451773
Content-Length: 1001
Content-Type: text/javascript; charset=utf-8
Content-Encoding: gzip
Vary: Accept-Encoding
Px-Uncompress-Origin: 2361
Last-Modified: Mon, 14 Sep 2015 10:20:52 GMT
Connection: keep-alive
...........Vmo.6.. ...".(N...Q..yY.`.Zt....-.e6.Q%.x.....$...l@..6....
.sw.8..J....b0.>D.[.....\.d.8.tdC.*....2.V.i..W.....{.O.2.r3._9f=..
.j.. n.o|.&.1.<....e..26.....zx..y...C........7..w....`x...;...JYc5
..O..X...7%..<.l..Ccy...t.Ql...Z...).$......G......................
i.{rz}......b.L.'..s....g...<...I...#t.-.$..~...&4`.o......'.Y.....
;..../.HS..A-.....@.6.V.Y.@....~......1.........|.=......\......)`b'..
Tq.@.l...{..3.....6....._..Zk.I.7.R......2.Y....g..A...~...u...z...iV.
4......f.......%O>..ro...w.m.....f....r*...Z...\b.^A..8G....\*..@V.
).F.M....x.K.(4.\c.7H..TFZX....K..J#.<..Z.M.q......F/..@.?.W..l..{?
...Q?@.(|.L..s.X......; ...a...46Z...ys.f.....S.{.....n>......u..ZT
.....j....~..j..E@@.YNIx..S...*....F...._RY.W......j........L.....[P.*
..y.).cj.52U.F.Z_.........yXb..o5.R.2JU..4.E.r...pa.T].}<.}.tX...T.
W..(q..["=.p.R2..h...l... ..&I8%..p..BB.<THY............sI..C].....
L.;.Ws.C.{_FE....{.].q.S../J......".?..V....g..q...~.BE...-p.q..m.. ..
....hU.......{f....v.p.m..rR..iL]..O~Q.....Q9.......


GET /api/extensions/jajfdjebpfphpjkocjenkhegepamcbcl/icon/ HTTP/1.1


Accept: */*
Referer: hXXp://public.yappyz.com/setup/fr-FR
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: public.yappyz.com
Connection: Keep-Alive


HTTP/1.1 200 OK
Date: Thu, 01 Oct 2015 05:37:06 GMT
Server: PWS/8.1.20.22
X-Px: ms h0-s1154.v0-mow ( h0-s1084.v0-mow), rf-ms h0-s1084.v0-mow ( origin>CONN)
Cache-Control: max-age=86400
Expires: Fri, 02 Oct 2015 05:37:06 GMT
Age: 0
Content-Length: 30618
Content-Type: image/png
Last-Modified: Thu, 01 Oct 2015 05:37:06 GMT
Connection: keep-alive
.PNG........IHDR.............L\......pHYs................ cHRM..z%....
..........u0...`..:....o._.F..w IDATx...g.e..&....W<.2#R....%....l.
.4.@.Gp4ml.c...?.?v..f.]......HN.9..ZB5t...J...:"2t<}.=.}...Y......
x."......:...Kw......I..."Kt."D....!!i".]. M..T.."...$. ".."....c$"..V
.(BD..D...P.....7Z..........^J.....W.....[..V1.,...}.._=r....[....UEV.
.P...IW.,..".3..j...v\V.{R...2D.Q!..^...[B.a$.`... ..........B......".
.LE.T-.P......c}#..7L..H.......k...b..c..RHD@.H..\UAdE...I)"R.`...D$..
.y.gYj....h........|..1..Y."........n.wv..,.......mii.O......$IA..c..\
_..^@...ZA.,!....Y.j6....*@"T..b....._...D.!. Dd.....cp..i#M.(.......&
lt;...7...?...A.$...E"sdf...M..R/.....DDH....^...ADk..6M.M...#s.>..
..J......n..{...?'h..D..(...<D..3.........g....'Y.)..\... .N..R.f.(
Q)...6ku:...G..s.y.|df.T....$..b_.....P.DX....."@..4M.k=s...1....#.L..
c|.......H)..D(B..XH0r.....,....hd..0*...b-.n..cte.......@.....P 4.h..
.%B..!....7...?.....R.........x........i....#0F.F..,....I.&&16.I.e....
^..H.@..Y........F.K..D.H..c.@BJ.c.,CD.].....9.(,.H.E..........."!"..@
.D..,.k)... .3[k.6..D...b...[......2Z...R,..I..k....b....01....K..@..[
o.8.H..g..>.........&U.o.Z..X$.1...X. Ib.f.D.0Jt..&{.[.>0.K.....
..H$...""........SI....R.....y..P@.....bL......T...@...!L...o.Z...#...
......X......7d.I....)"...BU.Dj.;....b...j.6...1..........o...<....
............Y!...L&Ji.Z.....&..12{..sEUTUp>..i.[k.A.j...D`jN._.."..
...@......6.H.}..s.{.AQD...I..1....0...(....k[.......D....!"3..@.>.
(.BTD....c.1.P..%m.......W.JkE.P.$....".mm?..>..z.c.....z...~..
<<< skipped >>>


GET /ajax/libs/jquery/1.9.1/jquery.min.js HTTP/1.1
Accept: */*
Referer: hXXp://public.yappyz.com/setup/fr-FR
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: ajax.googleapis.com
Connection: Keep-Alive


HTTP/1.1 200 OK
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Type: text/javascript; charset=UTF-8
Last-Modified: Fri, 08 Feb 2013 15:35:10 GMT
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Date: Thu, 01 Oct 2015 00:53:11 GMT
Expires: Fri, 30 Sep 2016 00:53:11 GMT
X-Content-Type-Options: nosniff
Server: sffe
Content-Length: 32819
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000
Age: 17034
............{{...7...."........o...v..q.[cg'-E..HPBL....RD....[kf0.Pq.
~.sNZ.....f......._..M...wg.?...vG.<8z2.........E...q...:z..GT.._.f
.....t.de.....uT..b.|.o6iv..._E..:.F.x...O..6..*?QUp....2U.4..6I.<.
T.%.E>....R1....4^..tIm...ZE.{5..3..<.....|4.3.D-.r.-o..]......4
[$....:Z...UUP_...........|....z.mF.r...f......Q..?..-3.0..F..^.F....l
.O........\..f.|1..t..NG2U.}tz.jxz.^G.o......./^\.>......#*........
../.../........|zp2{...N.3*....~.\../O'...g...g.;.~.M.Tx..,g.....).y..
w*@...i.^...]........2 ..n;.\.'..'/f....*.4:..oP...f..]Ul..2^.....V...
.....V.P.N....z......o3z.........aC..,.....K.\p...x......WiY%YR.v.*..^
.......<_oVI..a>*.xq....$8>....u%......n ..V?.Q.:..4....o.~.g
..Q...S_..Y.....G)..T.".......<......&...*..Z.t%..s@it5..y.c.....p.
h...X.*/. .H.....){4U.y...I`..&-.. y.....L.O....Lf..X<..1M.w.xD;;..
...3zgn...'S.....g.~3Jn.9-..... .....3..A..e#.....".-i.S..].9..3..=GE.
.,..R*.gs..j.M..0.._'.u......E.|.....K.Q'FY.H^..'.(.OK.\.-.T...8...Q..
..v||5J..Vq.}{.K2..K..z.R....o_..G..t.L....NF.W.}....."{.NLP|.T_......
..j..,P..q.Q..o..<.x...Q..t=..$nJ.%:S...,..N...*.......d.`....M...)
....T.7....|$...[......E..h.......`b.......iQ.w...-n>.=OIw..*......
..H...r.....h..V.Aj..&t..9M..is.j.t]~../...ik......l.p.....mT.=[E..7v.
...n./$...y=T.X.s...J......j.w.W.|.x..F..*..:....>K...d....f.......
...&...7./.2-..P......j.?X.p.....9u.Ae.0...D.....~f.......&...l6..3...
...i}.(.. m.Je.x...p5.:..d...gWz...G..@.*\.2/*..............>...g..
`...w....f.....\.D...#D...E.%.......G..s`K.*.WI...NI.......LeO...&
<<< skipped >>>


GET /vz/eeac1733-6902-af86-3a3f-ca60a80eca46/2/governor-of-poker.png HTTP/1.1
Host: vz.yappyz.com
Connection: keep-alive
User-Agent: Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.32 (KHTML, like Gecko) Chrome/27.1.1419.0 Safari/537.32
Accept: */*
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3


HTTP/1.1 200 OK
Content-Length: 48904
Content-Type: image/png
Last-Modified: Mon, 01 Jan 1900 00:00:00 GMT
ETag: 27076965.2.5210952098427387904
Server: Microsoft-IIS/7.5
ServerSideUid: 85a72f13-2fe4-48dc-994f-47300c8d7db9
FromLocalCache: true
X-AspNet-Version: 4.0.30319
X-Powered-By: ASP.NET
Server: MCC-PROD19
Cache-Control: public, max-age=986113
Date: Thu, 01 Oct 2015 05:37:37 GMT
Connection: keep-alive
.PNG........IHDR.............L\......pHYs................OiCCPPhotosho
p ICC profile..x..SgTS..=...BK...KoR.. RB....&*!..J.!...Q..EE.........
..Q,......!.........{.k........>...........H3Q5...B..........@..$p.
...d!s.#...~<< ".....x.....M..0.....B.\.....t.8K....@z.B..@F....
&S....`.cb..P-.`'........{..[.!..... .e.D.h;...V.E.X0..fK.9..-.0IWfH..
...........0Q..)..{.`.##x.....F.W<. ...*..x..<.$9E.[.-q.WW..(.I.
 .6a.a.@..y..2.4..............x.....6..._-...."bb.....p@...t~..,/...;.
.m..%..h^..u..f..@.....W.p.~<<E.........J.B[a.W}.g._.W.l.~<..
....$.2].G......L......b...G.......".Ib.X*..Q.q.D...2.".B.).%..d..,..&
gt;.5..j>.{.-.]c..K'.Xt.......o..(...h...w..?.G.%..fI.q..^D$.T..?..
..D..*.A....,.........`6.B$..B.B.d..r`)..B(....*`/.@.4.Qh..p...U..=p..
a...(....A...a!...b.X#......!.H...$ ...Q"K.5H1R.T UH..=r.9.\F..;..2...
.G1...Q=...C..7..F...dt1......r..=.6....h...>C.0....3.l0...B.8,..c.
."......V.....c..w...E..6.wB a.AHXLXN.H. .$4...7...Q.'"..K.&.....b21.X
H,#..../.{.C.7$..C2'...I..T...F.nR#.,..4H.#...dk..9.,  .......3...!.[.
.b@q..S.(R.jJ....4..e.2AU..R...T.5.ZB...R.Q...4u.9...IK......h.h.i..t.
....N..W...G.....w.......g(.....g.w...L......T071......oUX*.*|.....J.&
..*/T.......U.U.T..^S}.FU3S......U..P.S.Sg.;...g.oT?.~Y...Y.L.OC.Q.._.
.. .c..x,!k...u.5.&...|v*......=...9C3J3W.R..f?...q..tN..(...~....).).
.4L.1e\k....X.H.Q.G..6......E.Y...A.J'\'Gg.....S.S.....M=:....k....Dw.
n.....^..Lo..y....}/.T.m...G.X...$.....<.5qo<./...QC].@C.a.a....
..<..F.F..i.\.$.m.m..&.&!&KM.M..RM..).;L;L........5.=1.2.......
<<< skipped >>>


GET /proxy/tracker/v2?aid=0&cf=short_form&dcid=c7c4c693-ce76-4e42-a6df-335f946bfb6d&e=0&f=nomidrolls,nooverlays,nopostrolls&pid=fccd69c0-cfd2-4d3e-b83b-d14dc4b45b5e&rnd=80299072&s=yappyz&t=noinskins,nooverlays,nopostrolls,nomidrolls&tid=888db39a-67fe-11e5-8c36-002590e811ac&tt=p&ua=[ua]&uc=[uc] HTTP/1.1
Host: fr-sien.videoplaza.tv
Connection: keep-alive
User-Agent: Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.32 (KHTML, like Gecko) Chrome/27.1.1419.0 Safari/537.32
Accept: */*
Referer: hXXp://adserver.iminent.com/Render/95329B79-68A1-4B84-B7F9-8BB78E73E018/0/yappyz/between_games/
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: pid=fccd69c0-cfd2-4d3e-b83b-d14dc4b45b5e


HTTP/1.1 200 OK
Server: Apache-Coyote/1.1
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: HEAD, DELETE, GET, OPTIONS, POST, PUT
Access-Control-Max-Age: 86400
Access-Control-Allow-Credentials: true
Set-Cookie: pid=fccd69c0-cfd2-4d3e-b83b-d14dc4b45b5e; Expires=Fri, 30-Sep-2016 05:37:42 GMT; Path=/proxy/
Content-Length: 0
Date: Thu, 01 Oct 2015 05:37:41 GMT
Connection: close



GET /__utm.gif?utmwv=5.6.7&utms=1&utmn=1278248799&utmhn=onjgfkedmajckgeodakihmpbgjeokfap&utmt=event&utme=5(First Run*The user has launched Yappyz for the first time)&utmcs=ISO-8859-1&utmsr=1276x846&utmsc=32-bit&utmul=en-us&utmje=1&utmfl=11.6 r602&utmhid=1987453243&utmr=-&utmp=/private/background.html&utmht=1443677861811&utmac=UA-37741269-1&utmcc=__utma=240588381.964592021.1443677862.1443677862.1443677862.1;+__utmz=240588381.1443677862.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none);&utmjid=&utmu=4AAAAAAAAAAAAAAAAAAAAAAE~ HTTP/1.1
Host: VVV.google-analytics.com
Connection: keep-alive
User-Agent: Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.32 (KHTML, like Gecko) Chrome/27.1.1419.0 Safari/537.32
Accept: */*
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3


HTTP/1.1 200 OK
Access-Control-Allow-Origin: *
Date: Wed, 30 Sep 2015 20:09:37 GMT
Pragma: no-cache
Expires: Mon, 01 Jan 1990 00:00:00 GMT
Last-Modified: Sun, 17 May 1998 03:00:00 GMT
X-Content-Type-Options: nosniff
Content-Type: image/gif
Server: Golfe2
Content-Length: 35
Cache-Control: no-cache, no-store, must-revalidate
Age: 34078
GIF89a.............,...........D..;HTTP/1.1 200 OK..Access-Control-All
ow-Origin: *..Date: Wed, 30 Sep 2015 20:09:37 GMT..Pragma: no-cache..E
xpires: Mon, 01 Jan 1990 00:00:00 GMT..Last-Modified: Sun, 17 May 1998
 03:00:00 GMT..X-Content-Type-Options: nosniff..Content-Type: image/gi
f..Server: Golfe2..Content-Length: 35..Cache-Control: no-cache, no-sto
re, must-revalidate..Age: 34078..GIF89a.............,...........D..;font>....


GET /r/__utm.gif?utmwv=5.6.7&utms=2&utmn=970093247&utmhn=onjgfkedmajckgeodakihmpbgjeokfap&utme=8(FirstRun)9(201540)11(1)&utmcs=ISO-8859-1&utmsr=1276x846&utmsc=32-bit&utmul=en-us&utmje=1&utmfl=11.6 r602&utmhid=1987453243&utmr=-&utmp=/home.html&utmht=1443677862590&utmac=UA-37741269-1&utmcc=__utma=240588381.964592021.1443677862.1443677862.1443677862.1;+__utmz=240588381.1443677862.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none);&utmjid=1953777426&utmredir=1&utmu=6QCAAAAAAAAAAAAAAAAAAAAE~ HTTP/1.1


Host: VVV.google-analytics.com
Connection: keep-alive
User-Agent: Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.32 (KHTML, like Gecko) Chrome/27.1.1419.0 Safari/537.32
Accept: */*
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3


HTTP/1.1 200 OK
Access-Control-Allow-Origin: *
Date: Thu, 01 Oct 2015 05:37:36 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, no-store, must-revalidate
Last-Modified: Sun, 17 May 1998 03:00:00 GMT
X-Content-Type-Options: nosniff
Content-Type: image/gif
Server: Golfe2
Content-Length: 35
GIF89a.............,...........D..;HTTP/1.1 200 OK..Access-Control-All
ow-Origin: *..Date: Thu, 01 Oct 2015 05:37:36 GMT..Pragma: no-cache..E
xpires: Fri, 01 Jan 1990 00:00:00 GMT..Cache-Control: no-cache, no-sto
re, must-revalidate..Last-Modified: Sun, 17 May 1998 03:00:00 GMT..X-C
ontent-Type-Options: nosniff..Content-Type: image/gif..Server: Golfe2.
.Content-Length: 35..GIF89a.............,...........D..;....


GET /__utm.gif?utmwv=5.6.7&utms=3&utmn=1305635976&utmhn=onjgfkedmajckgeodakihmpbgjeokfap&utmt=event&utme=5(apps*Launch game*Launch Bejeweled)8(FirstRun)9(201540)11(1)&utmcs=ISO-8859-1&utmsr=1276x846&utmsc=32-bit&utmul=en-us&utmje=1&utmfl=11.6 r602&utmhid=1987453243&utmr=-&utmp=/private/background.html&utmht=1443677864249&utmac=UA-37741269-1&utmcc=__utma=240588381.964592021.1443677862.1443677862.1443677862.1;+__utmz=240588381.1443677862.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none);&utmjid=&utmu=6QCAAAAAAAAAAAAAAAAAAAAE~ HTTP/1.1


Host: VVV.google-analytics.com
Connection: keep-alive
User-Agent: Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.32 (KHTML, like Gecko) Chrome/27.1.1419.0 Safari/537.32
Accept: */*
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3


HTTP/1.1 200 OK
Access-Control-Allow-Origin: *
Date: Wed, 30 Sep 2015 20:09:37 GMT
Pragma: no-cache
Expires: Mon, 01 Jan 1990 00:00:00 GMT
Last-Modified: Sun, 17 May 1998 03:00:00 GMT
X-Content-Type-Options: nosniff
Content-Type: image/gif
Server: Golfe2
Content-Length: 35
Cache-Control: no-cache, no-store, must-revalidate
Age: 34080
GIF89a.............,...........D..;HTTP/1.1 200 OK..Access-Control-All
ow-Origin: *..Date: Wed, 30 Sep 2015 20:09:37 GMT..Pragma: no-cache..E
xpires: Mon, 01 Jan 1990 00:00:00 GMT..Last-Modified: Sun, 17 May 1998
 03:00:00 GMT..X-Content-Type-Options: nosniff..Content-Type: image/gi
f..Server: Golfe2..Content-Length: 35..Cache-Control: no-cache, no-sto
re, must-revalidate..Age: 34080..GIF89a.............,...........D..;font>....



GET /html5/0.9.12.9490/html5/webres/sorry_bkg.jpg HTTP/1.1
Host: bejeweled.popcap.com
Connection: keep-alive
User-Agent: Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.32 (KHTML, like Gecko) Chrome/27.1.1419.0 Safari/537.32
Accept: */*
Referer: hXXp://bejeweled.popcap.com/html5/0.9.12.9490/html5/Bejeweled.html
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3


HTTP/1.1 200 OK
Date: Thu, 01 Oct 2015 05:37:43 GMT
Server: Apache
Last-Modified: Sun, 20 Nov 2011 15:32:48 GMT
ETag: "2faab-638a-4b22c484aa800"
Accept-Ranges: bytes
Content-Length: 25482
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Content-Type: image/jpeg
......JFIF.....H.H......Exif..MM.*.............................b......
.....j.(...........1.........r.2...........i....................'.....
..'.Adobe Photoshop CS4 Windows.2011:11:20 07:32:47...................
.................................................................&.(..
.......................................H.......H..........JFIF.....H.H
......Adobe_CM......Adobe.d...........................................
......................................................................
................................x...."................?...............
...........................................................3......!.1.
AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE..t6..U.e.....u..F'.....
..........Vfv........7GWgw........................5.....!1..AQaq"..2..
...B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te......u..F...............
Vfv........'7GWgw.................?....I%)$.IJI$.R.I$...I%)$.IJI$.R.I$
...I%)$.IO.....I%)$.IJI$.R.I$...I%)$.IJI$.R.I$...I%)$.IO.....I%)$.IJI$
.R.I$...I%)$.IJI$.R.I$...I%)$.IO.....I%)$.IJI$.R.I$...I%)$.IJI$.R.I$..
.I%)$.IO.....I%)$.IJI$.R.I$...I%)$.IJI$.R.I$...I%)$.IO.....I%)$.IJI$.R
.I$...I%)$.IJI$.R.I$...I%)$.IO.....I%)$.IJI$.R.I$...I%)$.IJI$.R.IN.l..
..n...0x...Kd......O.7...vC2.....H...7.-.osgw.V........O.y..1./.u..n..
.......kz.....lu...........-..Z....q....zw!..L...$x`O..~.....1.X.NX. .
...}S......:.J... .Sq..d....o.j..%p._.b..#...o...K............KK.0Hc..
.0..........=.5...}L...8...w..~.....?...5..9i...^.m1?..j.'$r.G,..#.?/.
~~/.......I%)$.IJI$.R.I$...I%)$.IJI$.R..............vV&WK.6Uf.6<
<<< skipped >>>


GET /Render/95329B79-68A1-4B84-B7F9-8BB78E73E018/0/yappyz/between_games/ HTTP/1.1
Host: adserver.iminent.com
Connection: keep-alive
Accept: text/html,application/xhtml xml,application/xml;q=0.9,*/*;q=0.8
User-Agent: Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.32 (KHTML, like Gecko) Chrome/27.1.1419.0 Safari/537.32
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3


HTTP/1.1 200 OK
Date: Thu, 01 Oct 2015 05:37:38 GMT
Server: PWS/8.1.20.22
X-Px: ht-d h0-s1201.p11-fra.cdngp.net
Cache-Control: max-age=21600
Expires: Thu, 01 Oct 2015 08:05:07 GMT
Age: 12751
Content-Length: 12596
Content-Type: text/html; charset=utf-8
Content-Encoding: gzip
Vary: Accept-Encoding
Px-Uncompress-Origin: 52603
Connection: keep-alive
...........}iW.L...9g........a....aKB........V.V.%G..1..oU/Rk3v ..w|N.
.kuUuuUuu.......o....?..../....c..<.."..q\.......U...a..f..*.u.o...
...g9.fa`...[.4S..k...#.....-......Xg....i.......h.....0.....)........
E..yu*......<.......^...94mb...3|.@..Ik.Ll.....M..*...c-.[.....@O..
...K.f....u..a1Z......]...`.X....[.|..T...#.maV.Ol..>.D.(.em.f.....
.y..\...]..v..ZR7K JYY...zI].......=$.J.....ML\.....fI.r35.0...My.....
.~.._k..V..H...W........._.%.|..*&s.....Z}s.zMe...F.$.kBW........i.q..
"S. .s..0...]./....}....RSZ....{.F................%.Ls.J..).....\m:.&.
.7.L..<WJ*...._......R../.kQL.b..A..A>...:...,U4/k..k-3.~....Bp(
1..U.ek..=@dj..-../.P......6..LS.`.....<.nVF.7(.;.....) .9.L)BS..c.
t..T&.D5.dn.....*i.......^......!..A.J.%....k...X....:!b..6....t..i...
..m*.:..b)?...5.5........A.w......r{. *.j.I.....WD.8....n...%.....F..p
......`.a.....K.M.... ......b....:..D..YW...b.$....>....$|D.`Xa-...
....;......E......4(........e..P....Z...4.. ..8^a.a.......K....8.z..a7
HT.<...z...) =.3B. ..M....e7;..Cv.%#K..b..Z..J[..V0.,'i......~:.H..
JTG......R...........J.Q..Tq$..D....".d..SR=.X=DcOU.....U.....i]]}.6..
K\......"D{0.B...Z...Hah^@.a.W........\.y.....U.x.i..e.D..f...J......K
&.3.....)8(XV..&D.R.....( .....0i.K...._]O7g..ym......\..V....?... ..T
.-..0@<.![m.D.....y.z.V....m........_...._Bq..z.@.8Z..Z.Y.....].-.[
...C.D.NPR .......PI....MT.Mu.x&...I..f....Nu.#M...N`ZF.W;.G..>..&g
t;]#aH".%.MG......p....mv...S|...!... .E..&=S....- 1.t..nS.4.^.}......
b...R.<.......B...t.....oy.LA..(3..>p..iF..-k:B..._....... .
<<< skipped >>>

GET /scripts/video/videoplaza_min_js?v=IeAQjYG0CQy7tOE5i_HejeaqpDzJ2YeDIWhZloywZQg1 HTTP/1.1


Host: adserver.iminent.com
Connection: keep-alive
Accept: */*
User-Agent: Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.32 (KHTML, like Gecko) Chrome/27.1.1419.0 Safari/537.32
Referer: hXXp://adserver.iminent.com/Render/95329B79-68A1-4B84-B7F9-8BB78E73E018/0/yappyz/between_games/
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3


HTTP/1.1 200 OK
Date: Thu, 01 Oct 2015 05:37:38 GMT
Server: PWS/8.1.20.22
X-Px: rf-ms h0-s1201.p11-fra ( h0-s1035.p11-fra), ht-d h0-s1035.p11-fra.cdngp.net
Cache-Control: max-age=31536000
Expires: Wed, 28 Sep 2016 22:47:19 GMT
Age: 111019
Content-Length: 1075
Content-Type: text/javascript; charset=utf-8
Content-Encoding: gzip
Vary: Accept-Encoding
Px-Uncompress-Origin: 2251
Last-Modified: Tue, 29 Sep 2015 22:47:19 GMT
Connection: keep-alive
...........VkS.8.. F;..Fq...m.;.WIvH............ .vC... .8..;$.l.]....
..S.k&...Q....d.F]M.$".*7.!.sI.{.........3...e.S...z..=lL.b.1...Xow.d.
8.EdE..N..$..:~..S..n..!..U.8.....6}.`......!....I.....f,...?.Wg-I.H.O
U ..Z.bPP.n......<DXx..z.......H.R....d,....ng.....-..%s.P{........
...-h....k.bO`....\. .xYP\.K....."..(.s.Cw.......n......sd.C...6......
.n.!..WQ..u....s...,.X.....]B.G....G......s.....!?.Gg....a.l......v...
....5ONNNO......Y...Q.w=..h<......R.4`..E.J.......$.-..ms.i3O...2*.
..........CG..8B...p>6 V.h..hr1..`I!......j.O.)8...Qd......8}E.{J".
W.$I.X.....X.;."!...^....^..(..ppC..9)_q.. ..B....F"..%Kt.....&QNV.:4.
.GC..j.e.........,....@O\.H......K..,......CZ.......A..5.cf.I.....|.G.
*.fQQ..]~..|....v......\.....L9:....[. %E..e..-c..Tf..?....\2M..... ).
...U....g...w6x).}.L......btO`.H.a.E.....P.J...Zs.S.*M.!...R....4@....
Q" %.._..~Q.K.`.A..L....F.`....o..9..H5........J.\1.5.ta..d;..Hi.;. ).
h(8..]}....(......6z6...*....0e..C...W3)qZOs.....l.C.v.......C%.H....d
....b...px...n.Yl`.........P..h.f.F......:......z~.s...u9....j.O/a.9.M
W...7.....b.(..Z}|T...z...............
<<< skipped >>>

GET /Render/95329B79-68A1-4B84-B7F9-8BB78E73E018/0/yappyz/bottom_all_site/ HTTP/1.1


Host: adserver.iminent.com
Connection: keep-alive
Accept: text/html,application/xhtml xml,application/xml;q=0.9,*/*;q=0.8
User-Agent: Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.32 (KHTML, like Gecko) Chrome/27.1.1419.0 Safari/537.32
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3


HTTP/1.1 200 OK
Date: Thu, 01 Oct 2015 05:37:42 GMT
Server: PWS/8.1.20.22
X-Px: ht h0-s1201.p11-fra.cdngp.net
Cache-Control: max-age=21600
Expires: Thu, 01 Oct 2015 10:58:28 GMT
Age: 2354
Content-Length: 12593
Content-Type: text/html; charset=utf-8
Content-Encoding: gzip
Vary: Accept-Encoding
Px-Uncompress-Origin: 52602
Connection: keep-alive
...........}iW.L...9g........a....aKB........V.V.%G..1..oU/Rk3v ..w|N.
.kuUuuUuu.......o....?..../....c..<.."..q\.......U...a..f..*.u.o...
...g9.fa`...[.4S..k...#.....-......Xg....i.......h.....0.....)........
E..yu*......<.......^...94mb...3|.@..Ik.Ll.....M..*...c-.[.....@O..
...K.f....u..a1Z......]...`.X....[.|..T...#.maV.Ol..>.D.(.em.f.....
.y..\...]..v..ZR7K JYY...zI].......=$.J.....ML\.....fI.r35.0...My.....
.~.._k..V..H...W........._.%.|..*&s.....Z}s.zMe...F.$.kBW........i.q..
"S. .s..0...]./....}....RSZ....{.F................%.Ls.J..).....\m:.&.
.7.L..<WJ*...._......R../.kQL.b..A..A>...:...,U4/k..k-3.~....Bp(
1..U.ek..=@dj..-../.P......6..LS.`.....<.nVF.7(.;.....) .9.L)BS..c.
t..T&.D5.dn.....*i.......^......!..A.J.%....k...X....:!b..6....t..i...
..m*.:..b)?...5.5........A.w......r{. *.j.I.....WD.8....n...%.....F..p
......`.a.....K.M.... ......b....:..D..YW...b.$....>....$|D.`Xa-...
....;......E......4(........e..P....Z...4.. ..8^a.a.......K....8.z..a7
HT.<...z...) =.3B. ..M....e7;..Cv.%#K..b..Z..J[..V0.,'i......~:.H..
JTG......R...........J.Q..Tq$..D....".d..SR=.X=DcOU.....U.....i]]}.6..
K\......"D{0.B...Z...Hah^@.a.W........\.y.....U.x.i..e.D..f...J......K
&.3.....)8(XV..&D.R.....( .....0i.K...._]O7g..ym......\..V....?... ..T
.-..0@<.![m.D.....y.z.V....m........_...._Bq..z.@.8Z..Z.Y.....].-.[
...C.D.NPR .......PI....MT.Mu.x&...I..f....Nu.#M...N`ZF.W;.G..>..&g
t;]#aH".%.MG......p....mv...S|...!... .E..&=S....- 1.t..nS.4.^.}......
b...R.<.......B...t.....oy.LA..(3..>p..iF..-k:B..._....... .
<<< skipped >>>


GET /front/en-US/confirm/install/jajfdjebpfphpjkocjenkhegepamcbcl HTTP/1.1
Accept: */*
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: public.yappyz.com
Connection: Keep-Alive
Cookie: __utma=40499491.528497393.1443677833.1443677833.1443677833.1; __utmb=40499491.1.10.1443677833; __utmz=40499491.1443677833.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); __utmt=1


HTTP/1.1 200 OK
Date: Thu, 01 Oct 2015 05:37:28 GMT
Server: PWS/8.1.20.22
Transfer-Encoding: chunked
X-Px: ms h0-s1124.v0-mow ( h0-s1090.v0-mow), ms h0-s1090.v0-mow ( origin>CONN)
Cache-Control: max-age=595451
Expires: Thu, 08 Oct 2015 03:01:39 GMT
Age: 0
Content-Type: text/html; charset=utf-8
Content-Encoding: gzip
Vary: Accept-Encoding
Px-Uncompress-Origin: 8194
Last-Modified: Thu, 01 Oct 2015 03:01:39 GMT
Connection: keep-alive
a..............af4...Y.r.8...U...wU....H..I...:.dH.COw.......l..d....}
.}.}.=.l..H.g....I....#..pzu...>C......v4..........."..}F.M.......M
.b!W?5-A..#.."7.)'...wn.[...G.i.).$,.....D......V.eDc*(.m...4ke....e..
E.I....^..B.b......U..`...tO.>.Q.......S..."$.[.$.G...........e.g).
...C.......k....4....?M..N.$....`1G.G~J..5#....8....@.?...L',..A......
2.....PYS)...(q%.9.$e.I..i........m`9.5.h..&5.<...d......]qY..)Lq.x
r.2...I<,...._h..L.b.O..SA6,....j...x..l........w.wG........w$..dH.
...7... .?.PJ.....On&.u.E...Mk...m.s<.....8..6.T.i).8.."RD.b.. ....
.,".......F..=.v...>....]T;..5.0......W.....;5 .]....V.....k/#..3..
,.$[=.........C_|8....{..........c/......3z..^'g5.u./_...U.E....c.....
.S...{...?.@_...1...d<..R....].e.(.Q.c........6.Z...|..,.9e..q..T..
..|....bwt.......Y[~..r...7.....~.Av..Y....)....D>m....7.0."M.sKK.(
.A....."..aA......VIn.~PBM.Y.\,e.....e!z.....yXB....'.I.....*C..!.q...
..W..8......7.... ...=<..........J.S..e...V..}L......./...7[.Y..Z..
\D.......ZQ..>.;........>...f......E.../......~.z~C;..@Fv..|4`..
..?.....4hkI<:Fn.9..Q. .x...Mc............"q...z.y$...]4....b..G...
J.....bp b....g!.....`#.2.q.I......U...llFTn....e.R..)73....;r.....j..
..Z..F...ZJqr.s|.kk.~..E#1..V..P..p..,..$.V..t't...NU.../w..~..0...9.1
2.d9R..T..@-4..%... v....J.......,...........2.$.(P..B..2...2....ltz..
W..zu.9.E......|>.D..jwo...-...4h....L)....`HR....s..4.o7v..._.f}n.
..jF.(.:.Z.......Qn)5......GT......T".^.l.Pp.#..rr.......yF.........Yc
..Q.....7M.q<.. Md...8.....3k.'.N..a..~.'C)NB9.q..........7...k
<<< skipped >>>

GET /front/Content/styles/home/style?v=mY5m0XTilNnmX8oqyJmH0Iz81sxvm_ft1ShOwaNIDn41 HTTP/1.1


Accept: */*
Referer: hXXp://public.yappyz.com/front/en-US/confirm/install/jajfdjebpfphpjkocjenkhegepamcbcl
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: public.yappyz.com
Connection: Keep-Alive
Cookie: __utma=40499491.528497393.1443677833.1443677833.1443677833.1; __utmb=40499491.1.10.1443677833; __utmz=40499491.1443677833.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); __utmt=1


HTTP/1.1 200 OK
Date: Thu, 01 Oct 2015 05:37:28 GMT
Server: PWS/8.1.20.22
X-Px: ms h0-s1124.v0-mow ( h0-s1126.v0-mow), ht-d h0-s1126.v0-mow.cdngp.net
Cache-Control: max-age=31536000
Expires: Thu, 29 Sep 2016 10:51:14 GMT
Age: 67574
Content-Length: 21902
Content-Type: text/css; charset=utf-8
Content-Encoding: gzip
Vary: Accept-Encoding
Px-Uncompress-Origin: 126613
Last-Modified: Wed, 30 Sep 2015 10:51:14 GMT
Connection: keep-alive
..............#7. . .n.v..t..Up.....Y.........9FJJU.X..H.n....G.......
...3.d.)UU{<g.rWI$#..F.. .l..~....._w.uwj..q...V....;.....7.p.....]
.?w..q?.....n..=...~.~.Yn..O..q...U............m......{3.../..p.....p.
....;..../.4...........2.....&...n....O.iq.~...v....I.>...s{..V....
....9....z8....m.e.*...<k.O.L.....~w.X....J......n...g@.?|...7-0.c.
..................m[V.vlZU|u.q.w....&..d.m.v.n.....=v...a:...ETt......
..]D)K....>.....k..4..#.v.......[V...z..n.....H`..w ....<......Y
..G.w~......?.Z...0.m..$....6...G.s7.w.......j...=t-.=..;...n.D...{...
v.t..?.Kh...n8<.[.qs.M.E.h..A.q.n...]...."..U .......y.}.F.....'.:.
. .z........8.n..g...v...C.[..9...]v[.,...Vm.lA....}..i9..Py6....{(.H.
..k.cL...O..l...@\f0)...vM...'AD.b.......E.W...B........U-n\.,...<.
..[..l.C.H...4n..q.....p8........5.a.Q..]...........P....0.Q.......0.=
..FV..........C...M..n}...y3....=.....w.7.........?m;.i.-.G.a...sQ..~.
..-...C......o.8....0....o.0#=I.K`\>......in....0..?.......8....._z
.9.0.,....3...:..................X=....t~.=...=..Mv...'.p.....PY.9.).=
l......Sn..f.....EF........_o`..?G..P>A.i.&.....B@..9..dr....d..M..
.m....6.-.{....>.....QA.%...E......5.l..~.................\.....oa.
....p.7x2..F....-U......n6.s...^......i8..DQ..StT...t.............M...
......M...K=....-.u.q.Z....e.M<g?Q...]!W.........C}=Q..2.y...J..V..
4.D..v...')\ ..f...Z.![.0.|....Hs.Xm...=.b....'.......k.0....rj...g.N.
...=,.'....&....CG..g....K...y...$%...V.cZ,..Z.5*).I.L*S.T..b...I....I
..>WI#.L&.#zE...WD..a.C;1....%f^..b#.NQ^cdU9.....SR.Y.&.4.0....
<<< skipped >>>

GET /front/Content/styles/home/Fonts/lobster_1.4_1-webfont.eot? HTTP/1.1


Accept: */*
Referer: hXXp://public.yappyz.com/front/en-US/confirm/install/jajfdjebpfphpjkocjenkhegepamcbcl
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: public.yappyz.com
Connection: Keep-Alive
Cookie: __utma=40499491.528497393.1443677833.1443677833.1443677833.1; __utmb=40499491.1.10.1443677833; __utmz=40499491.1443677833.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); __utmt=1


HTTP/1.1 200 OK
Date: Thu, 01 Oct 2015 05:37:28 GMT
Server: PWS/8.1.20.22
X-Px: ms h0-s1124.v0-mow ( h0-s1103.v0-mow), ht-d h0-s1103.v0-mow.cdngp.net
ETag: "527927b6dc33cf1:0"
Cache-Control: max-age=604800
Expires: Wed, 07 Oct 2015 10:51:15 GMT
Age: 67573
Content-Length: 29739
Content-Type: application/octet-stream
Last-Modified: Thu, 27 Feb 2014 16:55:25 GMT
Connection: keep-alive
 t..Ws............................LP/...J..@................H.........
..............L.o.b.s.t.e.r. .1.4.....R.e.g.u.l.a.r.....V.e.r.s.i.o.n.
 .1...4...$.L.o.b.s.t.e.r. .1.4. .R.e.g.u.l.a.r.....BSGP..............
.......<..<..8......xZW.h[qJ.x"c.r,g,E.&..C....iE{z~J.U.F.*0.Vb.
..T.(...J.G8...............\V..x.f.duL4.L...fuQd.....TA.w#Ef.........P
..-^QE......L....t\........sX<...@.tC..,.v.p.s.:..u.xg..Kz.........
5 5...r...y.6_.....t..|8.z.n..:5` ..\.;.B...b...*..*.E....g`.....j.,1.
x.m.."...;....1..#.....dx....__.1../...0..$.$[.`w..~..v..jDI.ME..!....
*.y..Z.g.3...?.$`LH.....l(...5.0...R...V... ....QR.8.QM-..".|...%.....
.. P....f........&.K....@.B.r@.)....L...|B,'.P.<g.Z.I2.o$up....8..-
6..A#.1.0..z..).:..G..Y..&.........'.....zV.a=....9...K....ET[..3.....
23K.p."'.." .&.w.R.....Td<.."...(6..*..^"...q..jJ....,..Hcw..os"..n
..m.h.?.N....HP@.........@......./<C.C....#.C(.V.5.DSP`-......B..B.
@.....eURK.%.a.0._J.Fd...dY#.bs=.A w{7.1G.Y.5".d ..0..a.&v...T.k..H.(.
Q.|..."s..L.)'..L..........H......(t.AI...4B......(.LC#Pr..B.4......%.
.i8.d)..m.id-.A.....A.......yJ.P.=..HU..y...VR..{*;.......{...0.....Y@
`RI..&..". ..6.Y:..u.w\X#....@..3...s..oc..>.?F.(.)T...m.&.G.....eQ
M....l....9- ....O.....z5..Z.. .{.._\.H5...<[.i~?..g..C.......XO]U.
z3.....@............-..xmp.K.n...C.\.P.....'...9{....r...K..{...".....
.)..27.*.....5.W..=..`...$.S...l.z.<.A..... .2....@...rX.D(p..05.i.
.....A..=~K)...J.m...q...R...ZTR..B.E........h....!%....N..2U ,PL.1.b9
...*..........*......Ok...&.Y..!4.v)u.7.._RTZs/.^.z .@..-|.p......
<<< skipped >>>

GET /front/Content/images/Home/YappyzHeader.jpg HTTP/1.1


Accept: */*
Referer: hXXp://public.yappyz.com/front/en-US/confirm/install/jajfdjebpfphpjkocjenkhegepamcbcl
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: public.yappyz.com
Connection: Keep-Alive
Cookie: __utma=40499491.528497393.1443677833.1443677833.1443677833.1; __utmb=40499491.2.10.1443677833; __utmz=40499491.1443677833.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); __utmt=1; __utmc=40499491


HTTP/1.1 200 OK
Date: Thu, 01 Oct 2015 05:37:29 GMT
Server: PWS/8.1.20.22
X-Px: ms h0-s1124.v0-mow ( h0-s1037.v0-mow), ht-d h0-s1037.v0-mow.cdngp.net
ETag: "77d8f9b5dc33cf1:0"
Cache-Control: max-age=604800
Expires: Wed, 07 Oct 2015 10:51:16 GMT
Age: 67573
Content-Length: 2605
Content-Type: image/jpeg
Last-Modified: Thu, 27 Feb 2014 16:55:25 GMT
Connection: keep-alive
......Exif..II*.................Ducky.......F.....ohXXp://ns.adobe.com
/xap/1.0/.<?xpacket begin="..." id="W5M0MpCehiHzreSzNTczkc9d"?> 
<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c01
1 66.145661, 2012/02/06-14:56:27        "> <rdf:RDF xmlns:rdf="h
ttp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rd
f:about="" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="
hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="hXXp://ns.a
dobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:15E1F2151675E211A
FEDBBDE4FC7209D" xmpMM:DocumentID="xmp.did:8001AE7B75F011E2AF12C96A357
BFFB8" xmpMM:InstanceID="xmp.iid:8001AE7A75F011E2AF12C96A357BFFB8" xmp
:CreatorTool="Adobe Photoshop CS6 (Windows)"> <xmpMM:DerivedFrom
 stRef:instanceID="xmp.iid:47DC2320ED75E2118C74EA37EA33D04D" stRef:doc
umentID="xmp.did:15E1F2151675E211AFEDBBDE4FC7209D"/> </rdf:Descr
iption> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?&g
t;....Adobe.d.........................................................
......................................................................
..................(...............k...................................
..............................!1.AQaq.."2...B....R....................
............?....P....@......W......".@ q.\`...}.9........e.f b.....y7
..t.......=..f?.....n.._5..@....q..`.8k.{J.~`d..Wkf...................
.. v...@ ...........~ \...S.:...@..\.-..uq.....yP...m.o.@...........&g
t;....$..< z[z..[..z...X....C.....w.Z.G.@js..D....@ b....O.. ..
<<< skipped >>>

GET /front/Content/Images/Home/LikeTwitter.png HTTP/1.1


Accept: */*
Referer: hXXp://public.yappyz.com/front/en-US/confirm/install/jajfdjebpfphpjkocjenkhegepamcbcl
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: public.yappyz.com
Connection: Keep-Alive
Cookie: __utma=40499491.528497393.1443677833.1443677833.1443677833.1; __utmb=40499491.2.10.1443677833; __utmz=40499491.1443677833.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); __utmt=1; __utmc=40499491


HTTP/1.1 200 OK
Date: Thu, 01 Oct 2015 05:37:30 GMT
Server: PWS/8.1.20.22
X-Px: ms h0-s1124.v0-mow ( h0-s1118.v0-mow), ht-d h0-s1118.v0-mow.cdngp.net
ETag: "3714f0b5dc33cf1:0"
Cache-Control: max-age=604800
Expires: Wed, 07 Oct 2015 10:51:21 GMT
Age: 67569
Content-Length: 1092
Content-Type: image/png
Last-Modified: Thu, 27 Feb 2014 16:55:25 GMT
Connection: keep-alive
.PNG........IHDR...2...2......?......sBIT....|.d.....pHYs...........~.
....tEXtCreation Time.01/31/13........tEXtSoftware.Adobe Fireworks CS6
........IDATh...?o.F........6..(@. j..A@X/Z....%.........G`?A..c.-.. K
..2.%.......Z.. .... .......D.....y.....>w.......p.kO@...Y#.2k.Bf.T
...*..ge......4J....2..u.{c....L......9FbN.Ei......3.........e.....e..
.2..Rp/.t..-C...;..;.L.......z.5%.....H...G.e.....Z.g.Vr0T.g.!...L..R.
....E..FX.[ ^z...8}.n.!!v5.{.|...e....D..Q...\....Xz6Q...V-......z....
..HI.0..........Z....[h....D='T...t..~....*947....h......e...`..I.....
...M.`w.c...,.%.~p..4J`2.G......}..z..L.h.#<.2....D..FI...V..xwp..u
..JQ_^@}i........;TH.w...?..y4n....3@.w.......1...^......s.i.(...xv.H2
.P.~...(......B............Gb...b......p/.2...H.`.9h.6.....pw.......~.
.#8~ .....k...l....(..p/.../....iLg./.....Z.v.C?..g.....q.(..@P...i.$.
...{Rb.ql..@J.k.......x ..}l.I...e...#r...,.....b..^.k...1O...........
/.)pkE.j....lH...Q....jE......N....N7.Th...r.Z./e_......H............I
.....z....:....*..C.h...............X.[.r..).t.....!0....y......:.1..$
vs.u!_........5R!.F*d.H.......C..(0.....IEND.B`.....


GET /front/Content/images/Home/chrome.png HTTP/1.1


Accept: */*
Referer: hXXp://public.yappyz.com/front/en-US/confirm/install/jajfdjebpfphpjkocjenkhegepamcbcl
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: public.yappyz.com
Connection: Keep-Alive
Cookie: __utma=40499491.528497393.1443677833.1443677833.1443677833.1; __utmb=40499491.2.10.1443677833; __utmz=40499491.1443677833.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); __utmt=1; __utmc=40499491


HTTP/1.1 200 OK
Date: Thu, 01 Oct 2015 05:37:30 GMT
Server: PWS/8.1.20.22
X-Px: ms h0-s1124.v0-mow ( h0-s1060.v0-mow), ht-d h0-s1060.v0-mow.cdngp.net
ETag: "9165e5b5dc33cf1:0"
Cache-Control: max-age=604800
Expires: Wed, 07 Oct 2015 10:51:21 GMT
Age: 67569
Content-Length: 11174
Content-Type: image/png
Last-Modified: Thu, 27 Feb 2014 16:55:25 GMT
Connection: keep-alive
.PNG........IHDR...P...H.............tEXtSoftware.Adobe ImageReadyq.e&
lt;...fiTXtXML:com.adobe.xmp.....<?xpacket begin="..." id="W5M0MpCe
hiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk=
"Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27        "> &
lt;rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#">
 <rdf:Description rdf:about="" xmlns:xmpMM="hXXp://ns.adobe.com/xap
/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#"
 xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xm
p.did:7E5235CA814BE21196FAF824CE50CCF1" xmpMM:DocumentID="xmp.did:8154
0D50710411E29AB6F5A5BECDBADB" xmpMM:InstanceID="xmp.iid:81540D4F710411
E29AB6F5A5BECDBADB" xmp:CreatorTool="Adobe Photoshop CS6 (Windows)">
; <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:DCF62A310471E21182CC
8A26247C231F" stRef:documentID="xmp.did:7E5235CA814BE21196FAF824CE50CC
F1"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> 
<?xpacket end="r"?>\qY...'.IDATx....t\.....mZK.l..d...d./,..`...
@..-.:.I`0IH =I...`.Fg2.....'.L.prz.&.3.....06^ec[.-./....*..w.J..^.*.
J..J..)..Z.........ui.&....;7o.............@.... @........@.... @...L.
.hwp.\.K..`F.......Pc...... ....=...FKZ.z.\..........t...[.4.=P....m..
....6y<.5.u?....LS.........`...........a(........s..999..?..@&...x.
...o....!j.=P...3........O.. ....g..V.FR,AJ&@.".....l......J.2..P).;..
.J..........*.e|........q...."YfRz.....m...Y.#)...l..KX....d..X.....%.
.....4.r..7........@.... @.........P... @.........P....(..........
<<< skipped >>>


GET /openx/www/delivery/ajs.php?zoneid=582&cb=85765325300&charset=UTF-8&loc=http://adserver.iminent.com/Render/95329B79-68A1-4B84-B7F9-8BB78E73E018/0/yappyz/between_games/#AppInstanceUid=1F60ED41-882C-452D-A717-E4B26EAE7226&referer=&appInstanceUid=1F60ED41-882C-452D-A717-E4B26EAE7226&protocol=http&trackerKey=3616 HTTP/1.1
Host: adfront-v2.ads-srv.net
Connection: keep-alive
Accept: */*
User-Agent: Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.32 (KHTML, like Gecko) Chrome/27.1.1419.0 Safari/537.32
Referer: hXXp://adserver.iminent.com/Render/95329B79-68A1-4B84-B7F9-8BB78E73E018/0/yappyz/between_games/
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3


HTTP/1.1 200 OK
Cache-Control: private, max-age=0, no-cache
Content-Type: text/javascript; charset=UTF-8
Date: Thu, 01 Oct 2015 05:37:38 GMT
Expires: Mon, 26 Jul 1997 05:00:00 GMT
P3P: CP="CUR ADM OUR NOR STA NID"
Pragma: no-cache
Server: Apache/2.2.29 (Amazon)
Set-Cookie: OAGEO=UA||||||||||; path=/
Set-Cookie: OAID=b3d73ff043119edda22686c1dab4deaf; expires=Fri, 30-Sep-2016 05:37:38 GMT; path=/
X-Powered-By: PHP/5.3.29
Content-Length: 747
Connection: keep-alive
var OX_ceb9297b = '';.OX_ceb9297b  = "<" "script>templates.rende
r(\'Videoplaza\', {vpTags:\"\", vpCategory:\"yappyz\", vpContentId: \"
gaming\", width:800, height:600, passbackZoneId:-1});<" "/script>
;<" "div id=\'beacon_eabb8be3fb\' style=\'position: absolute; left:
 0px; top: 0px; visibility: hidden;\'><" "img src=\'hXXp://adfro
nt-v2.ads-srv.net/openx/www/delivery/lg.php?bannerid=1913&campaign
id=712&zoneid=582&loc=1&referer=http://adserver.imin
ent.com/Render/95329B79-68A1-4B84-B7F9-8BB78E73E018/0/yappyz%2
Fbetween_games/#AppInstanceUid=1F60ED41-882C-452D-A717-E4B26EAE7
226&cb=eabb8be3fb\' width=\'0\' height=\'0\' alt=\'\' style=\'widt
h: 0px; height: 0px;\' /><" "/div>\n";.document.write(OX_ceb9
297b);.....


GET /openx/www/delivery/lg.php?bannerid=1913&campaignid=712&zoneid=582&loc=1&referer=http://adserver.iminent.com/Render/95329B79-68A1-4B84-B7F9-8BB78E73E018/0/yappyz/between_games/#AppInstanceUid=1F60ED41-882C-452D-A717-E4B26EAE7226&cb=eabb8be3fb HTTP/1.1


Host: adfront-v2.ads-srv.net
Connection: keep-alive
User-Agent: Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.32 (KHTML, like Gecko) Chrome/27.1.1419.0 Safari/537.32
Accept: */*
Referer: hXXp://adserver.iminent.com/Render/95329B79-68A1-4B84-B7F9-8BB78E73E018/0/yappyz/between_games/
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: OAGEO=UA||||||||||; OAID=b3d73ff043119edda22686c1dab4deaf


HTTP/1.1 200 OK
Cache-Control: private, max-age=0, no-cache
Content-Type: image/gif
Date: Thu, 01 Oct 2015 05:37:38 GMT
Expires: Mon, 26 Jul 1997 05:00:00 GMT
P3P: CP="CUR ADM OUR NOR STA NID"
Pragma: no-cache
Server: Apache/2.2.29 (Amazon)
Set-Cookie: OAID=b3d73ff043119edda22686c1dab4deaf; expires=Fri, 30-Sep-2016 05:37:38 GMT; path=/
X-Powered-By: PHP/5.3.29
Content-Length: 43
Connection: keep-alive
GIF89a.............!.......,...........D..;HTTP/1.1 200 OK..Cache-Cont
rol: private, max-age=0, no-cache..Content-Type: image/gif..Date: Thu,
 01 Oct 2015 05:37:38 GMT..Expires: Mon, 26 Jul 1997 05:00:00 GMT..P3P
: CP="CUR ADM OUR NOR STA NID"..Pragma: no-cache..Server: Apache/2.2.2
9 (Amazon)..Set-Cookie: OAID=b3d73ff043119edda22686c1dab4deaf; expires
=Fri, 30-Sep-2016 05:37:38 GMT; path=/..X-Powered-By: PHP/5.3.29..Cont
ent-Length: 43..Connection: keep-alive..GIF89a.............!.......,..
.........D..;....


GET /openx/www/delivery/ajs.php?zoneid=504&cb=54514302918&charset=UTF-8&loc=http://adserver.iminent.com/Render/95329B79-68A1-4B84-B7F9-8BB78E73E018/0/yappyz/bottom_all_site/#AppInstanceUid=1F60ED41-882C-452D-A717-E4B26EAE7226&referer=&appInstanceUid=1F60ED41-882C-452D-A717-E4B26EAE7226&protocol=http&trackerKey=501 HTTP/1.1


Host: adfront-v2.ads-srv.net
Connection: keep-alive
Accept: */*
User-Agent: Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.32 (KHTML, like Gecko) Chrome/27.1.1419.0 Safari/537.32
Referer: hXXp://adserver.iminent.com/Render/95329B79-68A1-4B84-B7F9-8BB78E73E018/0/yappyz/bottom_all_site/
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3
Cookie: OAGEO=UA||||||||||; OAID=b3d73ff043119edda22686c1dab4deaf


HTTP/1.1 200 OK
Cache-Control: private, max-age=0, no-cache
Content-Type: text/javascript; charset=UTF-8
Date: Thu, 01 Oct 2015 05:37:42 GMT
Expires: Mon, 26 Jul 1997 05:00:00 GMT
P3P: CP="CUR ADM OUR NOR STA NID"
Pragma: no-cache
Server: Apache/2.2.29 (Amazon)
Set-Cookie: OAID=b3d73ff043119edda22686c1dab4deaf; expires=Fri, 30-Sep-2016 05:37:42 GMT; path=/
X-Powered-By: PHP/5.3.29
Content-Length: 52
Connection: keep-alive
var OX_77cacee3 = '';..document.write(OX_77cacee3);.HTTP/1.1 200 OK..C
ache-Control: private, max-age=0, no-cache..Content-Type: text/javascr
ipt; charset=UTF-8..Date: Thu, 01 Oct 2015 05:37:42 GMT..Expires: Mon,
 26 Jul 1997 05:00:00 GMT..P3P: CP="CUR ADM OUR NOR STA NID"..Pragma: 
no-cache..Server: Apache/2.2.29 (Amazon)..Set-Cookie: OAID=b3d73ff0431
19edda22686c1dab4deaf; expires=Fri, 30-Sep-2016 05:37:42 GMT; path=/..
X-Powered-By: PHP/5.3.29..Content-Length: 52..Connection: keep-alive..
var OX_77cacee3 = '';..document.write(OX_77cacee3);.....



GET /vz/41399590-f7f5-aef9-294d-a7464f0c212b/2/bejeweled.png HTTP/1.1
Accept: */*
Referer: hXXp://public.yappyz.com/front/en-US/confirm/install/jajfdjebpfphpjkocjenkhegepamcbcl
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: vz.yappyz.com
Connection: Keep-Alive


HTTP/1.1 200 OK
Content-Length: 30618
Content-Type: image/png
Last-Modified: Fri, 19 Jul 2013 08:29:23 GMT
ETag: 27041695.2.5246784212061287904
Server: Microsoft-IIS/7.5
ServerSideUid: 4c34c963-b4c6-4014-99dd-27714b989e9a
FromLocalCache: true
X-AspNet-Version: 4.0.30319
X-Powered-By: ASP.NET
Server: MCC-PROD19
Cache-Control: public, max-age=28268
Date: Thu, 01 Oct 2015 05:37:30 GMT
Connection: keep-alive
.PNG........IHDR.............L\......pHYs................ cHRM..z%....
..........u0...`..:....o._.F..w IDATx...g.e..&....W<.2#R....%....l.
.4.@.Gp4ml.c...?.?v..f.]......HN.9..ZB5t...J...:"2t<}.=.}...Y......
x."......:...Kw......I..."Kt."D....!!i".]. M..T.."...$. ".."....c$"..V
.(BD..D...P.....7Z..........^J.....W.....[..V1.,...}.._=r....[....UEV.
.P...IW.,..".3..j...v\V.{R...2D.Q!..^...[B.a$.`... ..........B......".
.LE.T-.P......c}#..7L..H.......k...b..c..RHD@.H..\UAdE...I)"R.`...D$..
.y.gYj....h........|..1..Y."........n.wv..,.......mii.O......$IA..c..\
_..^@...ZA.,!....Y.j6....*@"T..b....._...D.!. Dd.....cp..i#M.(.......&
lt;...7...?...A.$...E"sdf...M..R/.....DDH....^...ADk..6M.M...#s.>..
..J......n..{...?'h..D..(...<D..3.........g....'Y.)..\... .N..R.f.(
Q)...6ku:...G..s.y.|df.T....$..b_.....P.DX....."@..4M.k=s...1....#.L..
c|.......H)..D(B..XH0r.....,....hd..0*...b-.n..cte.......@.....P 4.h..
.%B..!....7...?.....R.........x........i....#0F.F..,....I.&&16.I.e....
^..H.@..Y........F.K..D.H..c.@BJ.c.,CD.].....9.(,.H.E..........."!"..@
.D..,.k)... .3[k.6..D...b...[......2Z...R,..I..k....b....01....K..@..[
o.8.H..g..>.........&U.o.Z..X$.1...X. Ib.f.D.0Jt..&{.[.>0.K.....
..H$...""........SI....R.....y..P@.....bL......T...@...!L...o.Z...#...
......X......7d.I....)"...BU.Dj.;....b...j.6...1..........o...<....
............Y!...L&Ji.Z.....&..12{..sEUTUp>..i.[k.A.j...D`jN._.."..
...@......6.H.}..s.{.AQD...I..1....0...(....k[.......D....!"3..@.>.
(.BTD....c.1.P..%m.......W.JkE.P.$....".mm?..>..z.c.....z...~..
<<< skipped >>>


GET /crossdomain.xml HTTP/1.1
Host: konnect.videoplaza.tv
Connection: keep-alive
User-Agent: Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.32 (KHTML, like Gecko) Chrome/27.1.1419.0 Safari/537.32
Accept: */*
Referer: hXXp://adserver.iminent.com/Render/95329B79-68A1-4B84-B7F9-8BB78E73E018/0/yappyz/between_games/
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3


HTTP/1.1 200 OK
Server: Apache-Coyote/1.1
Accept-Ranges: bytes
ETag: W/"268-1441197212000"
Last-Modified: Wed, 02 Sep 2015 12:33:32 GMT
Content-Type: application/xml
Content-Length: 268
Date: Thu, 01 Oct 2015 05:37:41 GMT
Connection: close
<?xml version="1.0"?>.<!DOCTYPE cross-domain-policy SYSTEM "h
ttp://VVV.adobe.com/xml/dtds/cross-domain-policy.dtd">.<cross-do
main-policy>.   <site-control permitted-cross-domain-policies="a
ll"/>.   <allow-access-from domain="*" secure="false"/>.</
cross-domain-policy>...



GET /plugins/like.php?href=VVV.facebook.com/yappyz&send=false&layout=button_count&show_faces=false&font=arial&colorscheme=light&action=like&height=21 HTTP/1.1
Host: VVV.facebook.com
Connection: keep-alive
Accept: text/html,application/xhtml xml,application/xml;q=0.9,*/*;q=0.8
User-Agent: Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.32 (KHTML, like Gecko) Chrome/27.1.1419.0 Safari/537.32
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3


HTTP/1.1 302 Found
Location: hXXps://VVV.facebook.com/plugins/like.php?href=VVV.facebook.com/yappyz&send=false&layout=button_count&show_faces=false&font=arial&colorscheme=light&action=like&height=21
X-Content-Type-Options: nosniff
Content-Type: text/html
X-FB-Debug: 1ilOIWQFq hWHNfsHMxWFP7EzHCACQB3xxaMJfbFWrN/dIp2C4KKoqZ3lbmB2FhpFxuhwjsL52Qnx4AXZOcV1Q==
Date: Thu, 01 Oct 2015 05:37:38 GMT
Connection: keep-alive
Content-Length: 0
HTTP/1.1 302 Found..Location: hXXps://VVV.facebook.com/plugins/like.ph
p?href=VVV.facebook.com/yappyz&send=false&layout=button_count&show_f
aces=false&font=arial&colorscheme=light&action=like&height=21..X-Conte
nt-Type-Options: nosniff..Content-Type: text/html..X-FB-Debug: 1ilOIWQ
Fq hWHNfsHMxWFP7EzHCACQB3xxaMJfbFWrN/dIp2C4KKoqZ3lbmB2FhpFxuhwjsL52Qnx
4AXZOcV1Q==..Date: Thu, 01 Oct 2015 05:37:38 GMT..Connection: keep-ali
ve..Content-Length: 0......



HEAD /vz/3C0469A7-A63D-4A73-B521-7A91DFBEBA64/1/yappyz_1332_1.exe HTTP/1.1
User-Agent: Downloader
Host: vzapp.iminent.com
Connection: Keep-Alive


HTTP/1.1 200 OK
Content-Length: 31376704
Content-Type: application/octet-stream
Last-Modified: Tue, 06 Aug 2013 12:59:12 GMT
ETag: 26651550.1.5246799925948687904
Server: Microsoft-IIS/7.5
ServerSideUid: 463220da-4ab8-4c42-8827-b8fb8ffdf08d
FromLocalCache: true
X-AspNet-Version: 4.0.30319
X-Powered-By: ASP.NET
Server: MCC-PROD19
Cache-Control: public, max-age=27281201
Date: Thu, 01 Oct 2015 05:37:14 GMT
Connection: keep-alive
HTTP/1.1 200 OK..Content-Length: 31376704..Content-Type: application/o
ctet-stream..Last-Modified: Tue, 06 Aug 2013 12:59:12 GMT..ETag: 26651
550.1.5246799925948687904..Server: Microsoft-IIS/7.5..ServerSideUid: 4
63220da-4ab8-4c42-8827-b8fb8ffdf08d..FromLocalCache: true..X-AspNet-Ve
rsion: 4.0.30319..X-Powered-By: ASP.NET..Server: MCC-PROD19..Cache-Con
trol: public, max-age=27281201..Date: Thu, 01 Oct 2015 05:37:14 GMT..C
onnection: keep-alive..



GET /resources/boot/as3_videoplaza_bootloader.swf HTTP/1.1
Host: fr-sien.cdn.videoplaza.tv
Connection: keep-alive
User-Agent: Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.32 (KHTML, like Gecko) Chrome/27.1.1419.0 Safari/537.32
Accept: */*
Referer: hXXp://adserver.iminent.com/Render/95329B79-68A1-4B84-B7F9-8BB78E73E018/0/yappyz/between_games/
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3


HTTP/1.1 200 OK
Content-Type: application/x-shockwave-flash
ETag: "1563538596"
Last-Modified: Fri, 29 Aug 2014 08:47:40 GMT
Server: lighttpd/1.4.28
Content-Length: 10019
Accept-Ranges: bytes
X-Varnish: 1228995712 1206351298
Cache-Control: must-revalidate, max-age=3600
Expires: Thu, 01 Oct 2015 06:37:39 GMT
Date: Thu, 01 Oct 2015 05:37:39 GMT
Connection: keep-alive
CWS..K..x..|.|.E......V.m.N..)V.'...8.B0p.qI..Vp..H.......Sq...B...!t0
..z9....wg......w\#.7. K...w..O..vg..7.....7c....?"...Bf.iw...v./..I..
....:$lP.HJh-.....P.....CO.30......~.>0.Lf.I=l...3:7..L$......E.I..
..............^..}.$.o...i....=.*{..By..G..D.......b....|Q".o..#.Q6eR.
..y$...;..P&.L8#q=.m4F.D&m...R.).K..v ..S.....3.JD.J_vh.H...d...r6..HX
J6e.L6-d.....e..P.H..%...J7f3.x.."2m...1C5.M......2....;.#.T21..6c.i[o
Oi.93....J.. '..6-....y.LCo....R..1Z..Q..r.'.... ..g...F.-.J..6...v;.b
...^Y.K...r,...9..:.v.$C:7...'6...I...X.h.j..2#N....d..J........=....%
.*.H....P..NfS!.lPO.w.....a..W...P,..qV\}.l.(1.F..V9....a...kfn^Es....
....s..9.u.R.T......3.B8.t..1.f!.".(XE.Y..Zn...yg.T..S..gw..3.FD..3Ec.
......6...|=....1R.=...gD...~iw.l.U....6%j.vD3J2..6......#....G.ca5..c
I8;4.....k...m.......n....1.....u{G.Y........]C......o2...yS.u.m.....v
..K.7rfWB"xf..ENSga.=.Eu...T[....6gwg89......c.....|...%SFy.....K.pg,.
.]..r.3c..3.;vp.g3.ac0..m.n...I...?wm...L...y.p..Z3.n....Cg.R.*.P..Q..
.Ki.}|..v..&A..IL....N.%g..#06OfT..>.7...d"..,....b.....v.bg..|r...
 .HlR...d<....^#...(K.;bi\!..B......m..0./j...Cj:'...'S>...k.#!.
........0........D..;....S..\.2d.H.}..=..Z&...*....;.B&..q9.i..w...Bf3
I..-klL....k..M..q#]..c......c.WW.4..F.2..\.J....C.z.C..d.()....p...K.
..L8......./.....LE*;.`.....7.t...h/..6G...v.,.6........DP...m.X......
...l}....j.%qc..u]}RkO......k{6w....$w(k....u(.....~WoG.....ocG.....W"
b...J.v.....m..........G......l..J.$"m$..w......&.:..Y........./o..h.B
j.d".Z...m.......XfH..VU.f^.....}.........q.. :.q.9s.omwG....V2!l.
<<< skipped >>>


GET /adserver/impression?appInstanceUid=1F60ED41-882C-452D-A717-E4B26EAE7226&appKey=95329b79-68a1-4b84-b7f9-8bb78e73e018&zoneId=504&bannerId=NaN&passbackZoneId=NaN&refhostname=&isBlank=true&loadTime=231&ssl=false&trackerKey=501&impressionId=80d18e6b-d05f-4ccd-bb86-8903defa3ec0&refreshCount=0&adServer=3&pageVisibility=visible&adServerClickTracking=false HTTP/1.1
Host: data.bd-pl.com
Connection: keep-alive
User-Agent: Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.32 (KHTML, like Gecko) Chrome/27.1.1419.0 Safari/537.32
Accept: */*
Referer: hXXp://adserver.iminent.com/Render/95329B79-68A1-4B84-B7F9-8BB78E73E018/0/yappyz/bottom_all_site/
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3


HTTP/1.1 200 OK
Access-Control-Allow-Headers: Content-Type
Access-Control-Allow-Methods: GET, POST, PUT, DELETE, OPTIONS
Access-Control-Allow-Origin: *
Date: Thu, 01 Oct 2015 05:37:55 GMT
Content-Length: 0
Connection: keep-alive
HTTP/1.1 200 OK..Access-Control-Allow-Headers: Content-Type..Access-Co
ntrol-Allow-Methods: GET, POST, PUT, DELETE, OPTIONS..Access-Control-A
llow-Origin: *..Date: Thu, 01 Oct 2015 05:37:55 GMT..Content-Length: 0
..Connection: keep-alive..



GET /resources/boot/environment.xml HTTP/1.1
Host: vp.videoplaza.tv
Connection: keep-alive
User-Agent: Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.32 (KHTML, like Gecko) Chrome/27.1.1419.0 Safari/537.32
Accept: */*
Referer: hXXp://adserver.iminent.com/Render/95329B79-68A1-4B84-B7F9-8BB78E73E018/0/yappyz/between_games/
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3


HTTP/1.1 200 OK
Server: nginx/1.7.4
Content-Type: application/xml
Cache-Control: must-revalidate,max-age=3600
Expires: Thu, 06 Mar 2008 00:00:00 GMT
ETag: "3560820759"
Last-Modified: Tue, 27 Aug 2013 09:02:01 GMT
X-Varnish: 1328232910
Via: 1.1 varnish
Content-Length: 642
Accept-Ranges: bytes
Date: Thu, 01 Oct 2015 05:46:44 GMT
X-Varnish: 2306668884 2300532958
Age: 57016
Via: 1.1 varnish
Connection: keep-alive
<?xml version="1.0" encoding="UTF-8"?>.<environment version="
0.5" xmlns:xsi="hXXp://VVV.w3.org/2001/XMLSchema-instance" xsi:schemaL
ocation="hXXp://VVV.videoplaza.com/BootloaderEnvironment hXXp://VVV.vi
deoplaza.com/schema/adplayer/vp-bootloader-environment-schema-2.1.xsd"
>..<settings>...<bootloader>....<scripts>.....<
;script></script>....</scripts>....<adplayerurl>.
...</adplayerurl>...</bootloader>...<adplayer>.     
       <scripts>.....<script priority="0">......<![CDAT
A[vpsupport.js]]>.....</script>....</scripts>....<pl
ugins>.....<plugin>.....</plugin>.....<plugin>...
..</plugin>....</plugins>...</adplayer>..</settin
gs>.</environment>.....


GET /crossdomain.xml HTTP/1.1


Host: vp.videoplaza.tv
Connection: keep-alive
User-Agent: Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.32 (KHTML, like Gecko) Chrome/27.1.1419.0 Safari/537.32
Accept: */*
Referer: hXXp://adserver.iminent.com/Render/95329B79-68A1-4B84-B7F9-8BB78E73E018/0/yappyz/between_games/
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3


HTTP/1.1 200 OK
Server: nginx/1.7.4
Content-Type: application/xml
ETag: "47861194"
Last-Modified: Wed, 09 Oct 2013 11:48:24 GMT
X-Varnish: 1328261134
Via: 1.1 varnish
Content-Length: 268
Accept-Ranges: bytes
Date: Thu, 01 Oct 2015 05:46:44 GMT
X-Varnish: 2306668898 2300451274
Age: 57628
Via: 1.1 varnish
Connection: keep-alive
<?xml version="1.0"?>.<!DOCTYPE cross-domain-policy SYSTEM "h
ttp://VVV.adobe.com/xml/dtds/cross-domain-policy.dtd">.<cross-do
main-policy>.   <site-control permitted-cross-domain-policies="a
ll"/>.   <allow-access-from domain="*" secure="false"/>.</
cross-domain-policy>.HTTP/1.1 200 OK..Server: nginx/1.7.4..Content-
Type: application/xml..ETag: "47861194"..Last-Modified: Wed, 09 Oct 20
13 11:48:24 GMT..X-Varnish: 1328261134..Via: 1.1 varnish..Content-Leng
th: 268..Accept-Ranges: bytes..Date: Thu, 01 Oct 2015 05:46:44 GMT..X-
Varnish: 2306668898 2300451274..Age: 57628..Via: 1.1 varnish..Connecti
on: keep-alive..<?xml version="1.0"?>.<!DOCTYPE cross-domain-
policy SYSTEM "hXXp://VVV.adobe.com/xml/dtds/cross-domain-policy.dtd"&
gt;.<cross-domain-policy>.   <site-control permitted-cross-do
main-policies="all"/>.   <allow-access-from domain="*" secure="f
alse"/>.</cross-domain-policy>.....


GET /resources/bwtest.jpg HTTP/1.1


Host: vp.videoplaza.tv
Connection: keep-alive
User-Agent: Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.32 (KHTML, like Gecko) Chrome/27.1.1419.0 Safari/537.32
Accept: */*
Referer: hXXp://adserver.iminent.com/Render/95329B79-68A1-4B84-B7F9-8BB78E73E018/0/yappyz/between_games/
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3


HTTP/1.1 200 OK
Server: nginx/1.7.4
Content-Type: image/jpeg
Cache-Control: must-revalidate,max-age=3600
Expires: Thu, 06 Mar 2008 00:00:00 GMT
ETag: "847680791"
Last-Modified: Tue, 27 Aug 2013 09:02:02 GMT
X-Varnish: 1328229263
Via: 1.1 varnish
Content-Length: 51283
Accept-Ranges: bytes
Date: Thu, 01 Oct 2015 05:46:45 GMT
X-Varnish: 2306668920 2300485263
Age: 57373
Via: 1.1 varnish
Connection: keep-alive
......JFIF.....d.d......Ducky.......0......Adobe.d....................
.......................................&&&&&          ................
..................................$$#$$          ...........".........
......................................................................
.....!".2#413.5.bSc$AQaRTdU.B6.C..%..Dt.Ee.V...r....7.................
.....!"..1.A2#QaB.R3q.bC.$.c4.r...D.............?.g..i.^..V..?.....)..
.....o.B..W...i..>.7.v...{.f.i..i..F;W<}f..iYX.A.....r..!..o.3..
..u.m...i].ZN,....T.... . ...p...Z..2.b..hVV..J...R...8.....:...[.0El.
......b.l`.}.....c:..T...n..J..E._.D....d..1 hd/m.D.7g.j.._.K|..=..F..
9..\..T...9y...X.&.h..j..0...5..-.e..J..YN1E....2./ .@.U...{..W....Cfq
2.$...b.......{...#..@.0T.N...I....l....;)R..ejg.=..3..W..@..B..y<.
.....]C.C!UR.'.....B....1]jc.]t..a. .m..5..V=.....H.[N.X..........*!.U
.C....(.t..M.ra....H...v9...>.....i.h....7(..C4...Xy.......O.Z.....
7..n....C..A.N..P ^'...,\:z....)..hO.vF....^.....R..3......P.s.D..-p..
....lK..e.............n.......use`9J.r...AR..a..;.?=(u.>..1...1....
j......[.....87..<....5P}.a..C....R._Df..h.F/TV...V|.. S....0:....:
<6<)i..a....z=!?(H.38........[...ddm..n.....8..,cE.?3T.....!U..&
gt;]l...k..(Z.X8..c&....'C.....D..Z.E\Z.]2..@W...oH..:tE..vxrW..h...1.
`.r.2...oT...3.A.......=.>=^..'.F{...).Y.....)Z..N...%V..-....Y..F_
... Sw..Mjm|: .N.'....F...........t.........g.j.\..s.VY3...)Q......T .
7.V.Z..nF.R*1.1f|Q.tVa..G..f...ej.)k)....~.B.ii.........G...kMYrL.`.,.
\%N@.D.. .....|... =.C6N...A)e...t.......%.N3.C......8".RZ.N.....%
<<< skipped >>>

GET /resources/as3_vp_player_2.4.15.17.4.swf HTTP/1.1


Host: vp.videoplaza.tv
Connection: keep-alive
User-Agent: Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.32 (KHTML, like Gecko) Chrome/27.1.1419.0 Safari/537.32
Accept: */*
Referer: hXXp://adserver.iminent.com/Render/95329B79-68A1-4B84-B7F9-8BB78E73E018/0/yappyz/between_games/
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3


HTTP/1.1 200 OK
Server: nginx/1.7.4
Content-Type: application/x-shockwave-flash
Cache-Control: must-revalidate,max-age=3600
Expires: Thu, 06 Mar 2008 00:00:00 GMT
ETag: "690551133"
Last-Modified: Tue, 08 Sep 2015 11:59:52 GMT
X-Varnish: 1325957239
Via: 1.1 varnish
Content-Length: 190882
Accept-Ranges: bytes
Date: Thu, 01 Oct 2015 05:46:45 GMT
X-Varnish: 2306668948 2290983243
Age: 149213
Via: 1.1 varnish
Connection: keep-alive
CWS.....x...uT._.7...Cw....%....A..[.......t. .H..(.. ......s?..~...Y.
./k.p..=......9.....I'..`@..........Io[{q.....n..>.........8/o@@.O.
 ..../..../.....7...'...*.....M....v>6.N..N...7.V..~.Rll..jk.?.z.y.
..................bdk#n...f. m....dcu..7......%.........Q..........j'.
.f.[.V..*....5.1q.........N...B_....1t3ok.k'....k.I.'J./,..'./D/...G/.
./.....I........Ci O..&......5.A........,....k.X.R.1...........U......
....?.[X..Z.{Z........:..%g......9C]..E....B..z...}x....n.[...}ae!...N
.K3MeeDf.@$w....(......tB./~_'W,.p...F...& o....:Xp..E[..:..._........
.......c.E..%.bz..M..-....N.....}....r..?..C.E`.......X...lns..~...Z..
........<7-QE..44...rUE..U&..*.93.....t..@..f.......!.wB.v-s3..."&l
t;....-.~...............l...M......zS%.k.._."`}...0......~Y........Mk.
.k....8....'_.y....o{.=...S.m...."....u..~;....Y.......C..............
...G... ........I..e..U....,.-0.............k...b....|..#.a..Z. ...]2O
O..l...........4s. 3...,...-.... ....k.....l.....5.}!.c'..{kr.'F.{5...
Q..z.i....k....e:..?.zy.v...&..&.$.'!...h}-L>3.g......./...:B....N.
|c.OE.....T}}.J..r..........I..$?..7j...9%8...9....P.........../...q..
r>x.}U....\...m.*..B..8.W..;*;;{...=vF*../.)^.{..^.._.l.0.. ..i....
..{..e1..(n........[*...w.^te..de}..U..p............?.d.G..1-.J..zR...
.J.oW,...........(.6......o.Y.. Z KL...L.S.h.Ikz$F...S..;.1&...G.2?...
c.a......w.u..*>..........._Y.,3t....dy..".C.. ....._...H.....J.*-p
..8?....gh.[.F..k...[.I.m.M....>...6K@..(.....5.. ......`.._.;...t.
{|.....6d...../.gr?2...*...i.2[*.........x...D.........K...Q.g....
<<< skipped >>>

GET /resources/support/vpsupport_2.4.14.20.0.js HTTP/1.1


Host: vp.videoplaza.tv
Connection: keep-alive
User-Agent: Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.32 (KHTML, like Gecko) Chrome/27.1.1419.0 Safari/537.32
Accept: */*
Referer: hXXp://adserver.iminent.com/Render/95329B79-68A1-4B84-B7F9-8BB78E73E018/0/yappyz/between_games/
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3


HTTP/1.1 200 OK
Server: nginx/1.7.4
Content-Type: application/javascript
Cache-Control: must-revalidate,max-age=3600
Expires: Thu, 06 Mar 2008 00:00:00 GMT
ETag: "270802100"
Last-Modified: Mon, 27 Oct 2014 09:55:00 GMT
X-Varnish: 1328223483
Via: 1.1 varnish
Content-Length: 17255
Accept-Ranges: bytes
Date: Thu, 01 Oct 2015 05:46:45 GMT
X-Varnish: 2306668986 2300512299
Age: 57172
Via: 1.1 varnish
Connection: keep-alive
/* .* !vpsupport v2.4.14.20.0 | Videoplaza client-side JavaScript supp
ort code .* Copyright (c) 2014   by Videoplaza, VVV.videoplaza.com .* 
email: info@videoplaza.com .*/ .!function(){var videoplaza_js_support=
window.videoplaza_js_support={COMPANION_BANNER_JAVASCRIPT:"COMPANION_B
ANNER_JAVASCRIPT",externalTrackingQueue:[],externalTrackingQueuePointe
r:0,htmlCompanionZones:[],htmlCompanionZonesMap:{},emarfiMap:[],eventH
andlers:{},callbacks:[],pluginConfig:{},takeoverEventsList:[],takeover
SWFLoaded:!1,vpListener:{},vpListenerBucket:[],companionLoaded:[],take
overObjId:null,modalBkgRGBColor:"rgba(0,0,0, 0.8)",modalBkgOpacity:"80
",modalBkgColor:"#000",modalBkgZIndex:11140,modalBkgObj:null,companion
s:{object:null,embed:null,iframe:null},ua:function(){var u=navigator.u
serAgent.toLowerCase(),p=navigator.platform.toLowerCase(),windows=/win
/.test(p?p:u),mac=/mac/.test(p?p:u),webkit=/webkit/.test(u)?parseFloat
(u.replace(/^.*webkit\/(\d (\.\d )?).*$/,"$1")):!1,mozilla=/firefox/.t
est(u),ie9=/msie 9.0/.test(u),ie=!document.addEventListener,ie10=/msie
 10.0/.test(u),ie11=!!navigator.userAgent.match(/Trident.*rv[ :]*11\./
);return{win:windows,mac:mac,webkit:webkit,ie:ie,moz:mozilla,ie9:ie9,i
e10:ie10,ie11:ie11}}(),init:function(){var i,req,name,value,pluginConf
igArray;if(this.externalTrackingQueue=new Array(10),req="" window.loca
tion,req=req.substring(req.lastIndexOf("/"),req.length),-1!=req.indexO
f("#"))for(pluginConfigArray=req.substring(req.indexOf("#") 1,req.leng
th).split(";"),i=0;i<pluginConfigArray.length;i  )name=pluginCo
<<< skipped >>>


GET /html5/0.9.12.9490/html5/Bejeweled.html HTTP/1.1
Host: bejeweled.popcap.com
Connection: keep-alive
Accept: text/html,application/xhtml xml,application/xml;q=0.9,*/*;q=0.8
User-Agent: Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.32 (KHTML, like Gecko) Chrome/27.1.1419.0 Safari/537.32
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3


HTTP/1.1 200 OK
Date: Thu, 01 Oct 2015 05:37:42 GMT
Server: Apache
Last-Modified: Thu, 15 Dec 2011 22:15:59 GMT
ETag: "4b904-4dd4-4b428d43865c0"
Accept-Ranges: bytes
Content-Length: 5707
Vary: Accept-Encoding
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Content-Type: text/html
Content-Encoding: gzip
............ko.....W.).%.,..q.d_..q..9........ QZ...R.];n.{g..V...<
..h.H....p...~|.......af.t.`D..<K.r...-...r...O.m......{.4...RD....
.T.g`d:.......rZZm....<...;.%b.yN.h..2.u...."i.J{"*.T.....,O.pZL.O.
".>TJ%..G.0.p:.n._.c..c...o{....a.4...:.2.5c........|.2.c..J..ml.D.
*WV../C........R...H.g....?N.V.TN..{....F=.A..y0..Xs..^ N{Q..g....eYq6
...c.$......B.8....T..|.#..... ..N....'B...M'D...8Ph..1..#...x...U..E.
.... R. AE..n_...B#.....i....C7`u1...U ..m5o....`z..e".....(..D..>.
*......a.@f|......3...u^1Ip...........X.eO....p.%...^.l.........i./  .
[. .&Q..s...Z..R5..Zc qh.X..0..%...^...&....h).HY..Q5..e...q..-..?..Q.
.:......Y#.2.&.......&lm...........H._e.ZZ.6.....P..Q.'..6..p......,Sm
"....4.'U.<..3l.o.....*U.b]\..\......2.K~.).{...@A....)...i..bp.E..
|.Dq..^9=.*...*o5.T...`wg..&."<K......&}....e..;..../...=F...B..l.0
...l...I....y...P.D...z..a.9..t7..u.z.j5...s...@...i.].... ...e.`M_..V
..Q...wf1..l..f....d .i...n........3.c*.."S)n.....i.j..U....E.*....v.;
..>[d.w..X.$&=.TY.....".kiQ.X.]...,3... ....]P&..2.).^.....8.u.....
K..Z...K~......w.C...e.j}..[......\.."C,..Y....qz'.b...4.e...e#..Y....
....U..U)....d.1.r.@I90fG.&v.".M.A...a....17..M..S....j.:........<.
S.~}...g...}..h-.37.!.../..u.o..e. 7..E..#.Y.j.l....F^c..u/..xr@.m.`.R
.T4.Z...a*J<....&.Yr....*....{..<`yFX_2...,4...O......U.U..4F...
yr...0My'......).0.[P.D...).....=705z..."-K..,....r.....N p..L,...9=V.
...t..T.HF`5......!...z.....Qy.5...p"..#.""..a...u...#..Ab|dy.;..O....
.4@..VgL.X....N..p...Z'K!.5y`...v....z7..)..&.\...<p.M........j
<<< skipped >>>

GET /html5/0.9.12.9490/html5/soundmanager2.js HTTP/1.1


Host: bejeweled.popcap.com
Connection: keep-alive
Accept: */*
User-Agent: Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.32 (KHTML, like Gecko) Chrome/27.1.1419.0 Safari/537.32
Referer: hXXp://bejeweled.popcap.com/html5/0.9.12.9490/html5/Bejeweled.html
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3


HTTP/1.1 200 OK
Date: Thu, 01 Oct 2015 05:37:43 GMT
Server: Apache
Last-Modified: Thu, 06 Oct 2011 16:24:50 GMT
ETag: "4b913-1cf9e-4aea3c384b880"
Accept-Ranges: bytes
Content-Length: 118686
Vary: Accept-Encoding
Keep-Alive: timeout=15, max=99
Connection: Keep-Alive
Content-Type: application/javascript
/** @license.. *.. * SoundManager 2: JavaScript Sound for the Web.. * 
----------------------------------------------.. * hXXp://schillmania.
com/projects/soundmanager2/.. *.. * Copyright (c) 2007, Scott Schiller
. All rights reserved... * Code provided under the BSD License:.. * ht
tp://schillmania.com/projects/soundmanager2/license.txt.. *.. * V2.97a
.20110918.. */../*global window, SM2_DEFER, sm2Debugger, console, docu
ment, navigator, setTimeout, setInterval, clearInterval, Audio */../* 
jslint regexp: true, sloppy: true, white: true, nomen: true, plusplus:
 true */../**.. * About this file.. * ---------------.. * This is the 
fully-commented source version of the SoundManager 2 API,.. * recommen
ded for use during development and testing... *.. * See soundmanager2-
nodebug-jsmin.js for an optimized build (~10KB with gzip.).. * hXXp://
schillmania.com/projects/soundmanager2/doc/getstarted/#basic-inclusion
.. * Alternately, serve this file with gzip for 75% compression saving
s (~30KB over HTTP.).. *.. * You may notice <d> and </d> c
omments in this source; these are delimiters for.. * debug blocks whic
h are removed in the -nodebug builds, further optimizing code size... 
*/..(function(window) {..var soundManager = null;../**.. * The SoundMa
nager constructor... *.. * @constructor.. * @param {string} smURL Opti
onal: Path to SWF files.. * @param {string} smID Optional: The ID to u
se for the SWF container element.. * @this {SoundManager}.. * @return 
{SoundManager} The new SoundManager instance.. */..function SoundM
<<< skipped >>>


GET /setup/content/img/yappyz.mini.png HTTP/1.1
Accept: */*
Referer: hXXp://public.yappyz.com/setup/fr-FR
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: public.yappyz.com
Connection: Keep-Alive


HTTP/1.1 200 OK
Date: Thu, 01 Oct 2015 05:37:06 GMT
Server: PWS/8.1.20.22
X-Px: ms h0-s1154.v0-mow ( h0-s1067.v0-mow), ht-d h0-s1067.v0-mow.cdngp.net
ETag: "cf677ab7dc33cf1:0"
Cache-Control: max-age=604800
Expires: Sun, 04 Oct 2015 02:36:49 GMT
Age: 356417
Content-Length: 2417
Content-Type: image/png
Last-Modified: Thu, 27 Feb 2014 16:55:28 GMT
Connection: keep-alive
.PNG........IHDR..._...".....9.......sBIT....|.d.....pHYs...........~.
....tEXtCreation Time.18/02/13........tEXtSoftware.Adobe Fireworks CS6
........IDATh..[]L....f....]v.,?^' .1...ih.D*vK.....#.V.....*J ".i-ErE
..}........>'A5V%..6Qj.....f.x.w......>.g.....]....=.....w.s....
.!...`.A. I..0......tT9..\..\..X>.......(.TU.....h...m.NT.3...|...5
d.k........c..{..a*..E^U...$....!T.u../..q....;.....g.~...I.....9d;qy.
....>k/.(.g.kX^....ooa...b<}.;.U..,.m'j.Y.][..Z..V>.(k=s..m.N
.v..Z{ ....R4.N.....'...W.r...Y.......w...........[..%...f..%..j......
.n..d...L....;);..6.=.7........4..)..l8.QP.....%.R..t9.6...........v..
..........v..W$..........gU.".p...?...R.)3..}....no.FD..=.<....=...
..s<_......f. j. . .....2.XE&.0.$>.}...Op.[...#o.k......l.8....4
.O.$..zf......c~..ES.)f...M.S................?.2..A.._..C.E.....u$^U.V
._....=.4y.o _....>F..8x.........Z..g_._...:.....o$t..."a...g..<
M.....a..Z..G....~..*.:.........Y.wr!......y.b...)...../YW..%.S.g>.
..w\..=...u..gs....g...#ho......9...5...&.VS.Q.....|AGD...kv.B...n....
Rs...$.K.x -M......m(..V.g.1...R.e.q.H.v!..@...8$...kP....#N..=.~u..].
..%.\.i..P....\H.....YD..T........../...t...J....E.M*.....T.$.].<..
.I=l...T.vx%...........m....._%-.%......k.P......U.TH..'.\........gQP.
.w*..r.<..{.2....s|......u?".hb|j..&.Q$.G..|,u...%.....OOS.v.....N.
..G.......[~..F........c...v;.../a...a,1...... kq.Z........."...HwA..U
<.H.d(.*A*..8...X....^..G......2./]LK.....0.G....B...?.-...U......|
&.(.x....0H...Wi(2.[1..27....!cDR......][./.c.H>.M...6n;.V.4...
<<< skipped >>>

GET /api/extensions/jajfdjebpfphpjkocjenkhegepamcbcl/data/?callback=OnUpdateAppInfos HTTP/1.1


Accept: */*
Referer: hXXp://public.yappyz.com/setup/fr-FR
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: public.yappyz.com
Connection: Keep-Alive


HTTP/1.1 200 OK
Date: Thu, 01 Oct 2015 05:37:06 GMT
Server: PWS/8.1.20.22
X-Px: ms h0-s1154.v0-mow ( h0-s1105.v0-mow), rf-ms h0-s1105.v0-mow ( origin>CONN)
Cache-Control: max-age=66542
Expires: Fri, 02 Oct 2015 00:06:08 GMT
Age: 0
Content-Length: 59
Content-Type: application/javascript; charset=utf-8
Last-Modified: Thu, 01 Oct 2015 00:06:09 GMT
Connection: keep-alive
if(OnUpdateAppInfos)OnUpdateAppInfos({"name":"Bejeweled"});HTTP/1.1 20
0 OK..Date: Thu, 01 Oct 2015 05:37:06 GMT..Server: PWS/8.1.20.22..X-Px
: ms h0-s1154.v0-mow ( h0-s1105.v0-mow), rf-ms h0-s1105.v0-mow ( origi
n>CONN)..Cache-Control: max-age=66542..Expires: Fri, 02 Oct 2015 00
:06:08 GMT..Age: 0..Content-Length: 59..Content-Type: application/java
script; charset=utf-8..Last-Modified: Thu, 01 Oct 2015 00:06:09 GMT..C
onnection: keep-alive..if(OnUpdateAppInfos)OnUpdateAppInfos({"name":"B
ejeweled"});..



GET /front/bundles/scripts/home?v=qAL6kx_tRElGQ5PmBnWfGr3EVvdryDfmiIBoiCZs2eE1 HTTP/1.1
Accept: */*
Referer: hXXp://public.yappyz.com/front/en-US/confirm/install/jajfdjebpfphpjkocjenkhegepamcbcl
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: public.yappyz.com
Connection: Keep-Alive
Cookie: __utma=40499491.528497393.1443677833.1443677833.1443677833.1; __utmb=40499491.1.10.1443677833; __utmz=40499491.1443677833.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); __utmt=1


HTTP/1.1 200 OK
Date: Thu, 01 Oct 2015 05:37:28 GMT
Server: PWS/8.1.20.22
X-Px: ms h0-s1124.v0-mow ( h0-s1042.v0-mow), ht-d h0-s1042.v0-mow.cdngp.net
Cache-Control: max-age=31536000
Expires: Thu, 29 Sep 2016 10:51:14 GMT
Age: 67574
Content-Length: 34691
Content-Type: text/javascript; charset=utf-8
Content-Encoding: gzip
Vary: Accept-Encoding
Px-Uncompress-Origin: 97410
Last-Modified: Wed, 30 Sep 2015 10:51:14 GMT
Connection: keep-alive
.............z.../.*".-...[j...h.....$.w..$...G......\.VD.Y.=....y.y.Y
.......s.|3..-.P...U....-6M^.a.....:.6a.=....&)f...iv.J.Y.xH...J..*N.Y
^.9/.....&..E...E.M......br....Z?...:...I0.....9.7T^.w.iE..G..4...9.sv
q..'E.l.w....4.b.<=.!....,fw.......\)o.y..,.U29..T... zY.Ve.S...l..
....u.....Z....!}wX...:......7.J...Pe._....).....b.Y....t3..h..eJ...x.
.lK]..'....Ej"=..x...$M.g...R.|v....4N.M...U..Z......._.~.G.zQ..(RaP^.
-.4....q......0.&-............}........K......G.x..S..b.....u.V.*i#.^.
..^V U..}...".zU.(.R.{v{ZaO....;Z...4.o.....,._..n.*....v...q.>M...
b.#..3UV!...8.a.-...m.b.n..n}...M.&.6...5...~&.D...Dj,.....}...I@.^&.j
G.......y9.F.t.6.I.l..j..O.jQ.1F....y...!.i..m.!.D.?..RE.s....N.t]...9
T...........|..,..s;{`t.....J.....w.>...m...E/..Y.`dg...U.a..."U*8.
."...._>../].;F..........I.,R.CL.6..S..M...\-#.l.....8......i;.....
.j..u...-.a].). ......&..s...'..R.'m.<......u7(o..j.'..B.>.)a.Io
C..`.{....<|2..8.0..g.....x.J/\...{c[...z.?..=]..S..N..\.....l0.s..
.kPuc@.p...,U..q.F.L&t...=.....1.3oy...r.f~4.Z"...6................|..
..t.L.h.........-Y!..[q.....:. .9yr_.lq..G...J.M.u.i.....Z..o..M.~.OQ.
.....D....o$.........%....._>....#.7Z..9]^.l}8.]..u....|(.....'....
.O.......a....(21..s....<..m4.^.Sy.<h.....t...Pj...t....nxBFw.}.
....o..5.E'......9..$...;..'...~fD...f_^........4...U...../M.JG.....#.
..n]w.D".TIw.i.......:":.....=.`...:...b.OU._.0..Z......U&..].[.....O.
?...[>......b,I.N..6....E.....m.KEsi..i.JT.....(..]bE...,.o04......
Z.,..3.<[=y.....KS......>...p....*?4L2.<../#T<,B..&.g]
<<< skipped >>>

GET /front/Content/images/Home/BETAYappyzWebsite.png HTTP/1.1


Accept: */*
Referer: hXXp://public.yappyz.com/front/en-US/confirm/install/jajfdjebpfphpjkocjenkhegepamcbcl
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: public.yappyz.com
Connection: Keep-Alive
Cookie: __utma=40499491.528497393.1443677833.1443677833.1443677833.1; __utmb=40499491.2.10.1443677833; __utmz=40499491.1443677833.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); __utmt=1; __utmc=40499491


HTTP/1.1 200 OK
Date: Thu, 01 Oct 2015 05:37:29 GMT
Server: PWS/8.1.20.22
X-Px: ms h0-s1124.v0-mow ( h0-s1145.v0-mow), ht-d h0-s1145.v0-mow.cdngp.net
ETag: "f699e8b5dc33cf1:0"
Cache-Control: max-age=604800
Expires: Wed, 07 Oct 2015 10:51:16 GMT
Age: 67573
Content-Length: 4069
Content-Type: image/png
Last-Modified: Thu, 27 Feb 2014 16:55:25 GMT
Connection: keep-alive
.PNG........IHDR...}...(........a....tEXtSoftware.Adobe ImageReadyq.e&
lt;...fiTXtXML:com.adobe.xmp.....<?xpacket begin="..." id="W5M0MpCe
hiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk=
"Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27        "> &
lt;rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#">
 <rdf:Description rdf:about="" xmlns:xmpMM="hXXp://ns.adobe.com/xap
/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#"
 xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xm
p.did:B2C7217E7CAEE2118A6286789FA57A89" xmpMM:DocumentID="xmp.did:1E2A
7D8CAE7F11E2802FED83647215A1" xmpMM:InstanceID="xmp.iid:1E2A7D8BAE7F11
E2802FED83647215A1" xmp:CreatorTool="Adobe Photoshop CS6 (Windows)">
; <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:58ED1F167FAEE2118A62
86789FA57A89" stRef:documentID="xmp.did:B2C7217E7CAEE2118A6286789FA57A
89"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> 
<?xpacket end="r"?>..[.....IDATx..\.pT..>..B.....".Bx..bx.E.&
.:..R..v.. Sh......Z...Kkm..R..Zc[,Z...QI!Y.... ...L.d..d....7........
,.4.g..{..........B.....E...........].&..........1w....\.k_QQ.........
....w......w.w.....a....M..].s.=..E0$.p..e..S.}){.S7..%../.j.......?=.
.h....Z.X...J..0...}...S.8....u.".*...y.x.W.....t.[..#].9.y..}]...mp..
x.......x.f..,}..k.#.L........J......~.3l1.;.......i....-..%.I........
\.........=...V......rh..\.)m\P...z.......&...Z.-..t.....v...3B2Q/$.C\
.T.tx..p.A....4....W.[..s..B.U.rP.`.o.....&3}Q@N.BS.......A..4..J.
<<< skipped >>>

GET /front/Content/Images/Home/LikeFacebook.png HTTP/1.1


Accept: */*
Referer: hXXp://public.yappyz.com/front/en-US/confirm/install/jajfdjebpfphpjkocjenkhegepamcbcl
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: public.yappyz.com
Connection: Keep-Alive
Cookie: __utma=40499491.528497393.1443677833.1443677833.1443677833.1; __utmb=40499491.2.10.1443677833; __utmz=40499491.1443677833.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); __utmt=1; __utmc=40499491


HTTP/1.1 200 OK
Date: Thu, 01 Oct 2015 05:37:30 GMT
Server: PWS/8.1.20.22
X-Px: ms h0-s1124.v0-mow ( h0-s1108.v0-mow), ht-d h0-s1108.v0-mow.cdngp.net
ETag: "b2fde7b5dc33cf1:0"
Cache-Control: max-age=604800
Expires: Wed, 07 Oct 2015 10:51:21 GMT
Age: 67569
Content-Length: 682
Content-Type: image/png
Last-Modified: Thu, 27 Feb 2014 16:55:25 GMT
Connection: keep-alive
.PNG........IHDR...2...2......?......sBIT....|.d.....pHYs...........~.
....tEXtCreation Time.01/31/13........tEXtSoftware.Adobe Fireworks CS6
........IDATh...1K.P...7...`....R............I..o.K...:..N..A.....".=.
Z.......QlM...z.........#9.....=..`.N ,..5..5"#.U'.N6.B2.1>...H..~t
ZD...u.R.d<.....r.H..S.,.i.d.)..X.).U..H2..U.P$.07....H$.N..SI.d...
...S.'..a.....c.B....VN/...s.h.....\.......J.=.bI.80....h-.g<....ne
m5...N.]J...mK..-...*$....&.3..[..`vz4..._.....2..,8..t$......V.B.....
. ..W.s..a w. T.....[.o...h.....#.7....`0..o.u..M_..j.....h..s......C.
k.....A..g.....,Nab.{.:...........u.E.3?g.|E..E.|/".hi.jh.jh.jh.jh.jh.
jh.j(..x]|.]....c*.....=fd.--B.-B.-B........N..yx....IEND.B`.HTTP/1.1 
200 OK..Date: Thu, 01 Oct 2015 05:37:30 GMT..Server: PWS/8.1.20.22..X-
Px: ms h0-s1124.v0-mow ( h0-s1108.v0-mow), ht-d h0-s1108.v0-mow.cdngp.
net..ETag: "b2fde7b5dc33cf1:0"..Cache-Control: max-age=604800..Expires
: Wed, 07 Oct 2015 10:51:21 GMT..Age: 67569..Content-Length: 682..Cont
ent-Type: image/png..Last-Modified: Thu, 27 Feb 2014 16:55:25 GMT..Con
nection: keep-alive...PNG........IHDR...2...2......?......sBIT....|.d.
....pHYs...........~.....tEXtCreation Time.01/31/13........tEXtSoftwar
e.Adobe Fireworks CS6........IDATh...1K.P...7...`....R............I..o
.K...:..N..A.....".=.Z.......QlM...z.........#9.....=..`.N ,..5..5"#.U
'.N6.B2.1>...H..~tZD...u.R.d<.....r.H..S.,.i.d.)..X.).U..H2..U.P
$.07....H$.N..SI.d......S.'..a.....c.B....VN/...s.h.....\.......J.=.bI
.80....h-.g<....nem5...N.]J...mK..-...*$....&.3..[..`vz4..._...
<<< skipped >>>

GET /front/Content/Images/Home/LikeGoogle.png HTTP/1.1


Accept: */*
Referer: hXXp://public.yappyz.com/front/en-US/confirm/install/jajfdjebpfphpjkocjenkhegepamcbcl
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: public.yappyz.com
Connection: Keep-Alive
Cookie: __utma=40499491.528497393.1443677833.1443677833.1443677833.1; __utmb=40499491.2.10.1443677833; __utmz=40499491.1443677833.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); __utmt=1; __utmc=40499491


HTTP/1.1 200 OK
Date: Thu, 01 Oct 2015 05:37:30 GMT
Server: PWS/8.1.20.22
X-Px: ms h0-s1124.v0-mow ( h0-s1007.v0-mow), ms h0-s1007.v0-mow ( origin>CONN)
ETag: "6dabe9b5dc33cf1:0"
Cache-Control: max-age=604800
Expires: Thu, 08 Oct 2015 05:37:30 GMT
Age: 0
Content-Length: 1434
Content-Type: image/png
Last-Modified: Thu, 27 Feb 2014 16:55:25 GMT
Connection: keep-alive
.PNG........IHDR...2...2......?......sBIT....|.d.....pHYs...........~.
....tEXtCreation Time.01/31/13........tEXtSoftware.Adobe Fireworks CS6
........IDATh..._lSu..?.*.{k.E{K"$..%....1..u..vt...Q.([...c./ f@.3.$.
2.F@.4..^.e.>..G......bB..]L....> .u........M~...w...o.........Q
@...?G...E.....!.7|gJ...y......3%....... ...V&....".......w.....~yt...
....?....S......../{.q.)....].....7.....cJ..B.f..-T...;......j.45i<
..!.d\.....g?bj*Sv.%..7...u...Y..R..d.H......s9.$gi....%.J299A&S....I.
...~L...Y$b6G^........r...C"......w..n.....uN.8F>..`.0..Z.....$....
.$...8{{..;....C$.e.1.. ..5."#..6........,.N..=...Z......}.?....I..p.9
].7.Qz..7r..r...riQP<*..$..i%6S.dE...Z....i.......Dvu...x.....<.
......D.....J:.. y;}{.....t.T....$..G!../P. .h.F.|....8%........b..b.E
...ep..SS.z{.....uF..0R.$.......o".qx.|.f.zd...}.....uf.G.}m.'9....)!.
..P...H....n.....ph.\..s\..`0.@[ ..K_r..9r....nz...`rr...~...O...f5...
.J&..m;.........E2cc1.....].&.....>^...C......{....j.....)7..x.....
.P..*.f...G&.}....O.}F(.....P.q...V.5....h......u...[.....h..T0...B..[
.hi....8x.].I&...3.a"..r..Cx<...l...W.y.fQ...J8.....n<..}......m
.X.$I.....\...h.:.O..z`RU.K..2....v.*.Z.Ph.A"........./.Nsu..q/9.e-\BU
...f\G.......?8A*.*.g...o.N..U9....e...B.@.......N!..$.....d2...v....h
...p'[..E.e......oT..N......7<u.........8.....|.syV.Z........kfgd.}
........c.21..}....A.i...Bw.....Q..]...:....U9(....y.....C.zQ.F..(.nt=
....H$.....%" ...6.&...[.s~%.fB.f.<.........]\....&z....IEND.B`...
<<< skipped >>>


HEAD /vz/3C0469A7-A63D-4A73-B521-7A91DFBEBA64/1/yappyz_1332_1.exe HTTP/1.1
User-Agent: GetLength
Host: vzapp.iminent.com
Content-Length: 0
Cache-Control: no-cache


HTTP/1.1 200 OK
Content-Length: 31376704
Content-Type: application/octet-stream
Last-Modified: Tue, 06 Aug 2013 12:59:12 GMT
ETag: 26651550.1.5246799925948687904
Server: Microsoft-IIS/7.5
ServerSideUid: 463220da-4ab8-4c42-8827-b8fb8ffdf08d
FromLocalCache: true
X-AspNet-Version: 4.0.30319
X-Powered-By: ASP.NET
Server: MCC-PROD19
Cache-Control: public, max-age=27281170
Date: Thu, 01 Oct 2015 05:37:06 GMT
Connection: keep-alive



GET /api/extensions/jajfdjebpfphpjkocjenkhegepamcbcl/crx HTTP/1.1
Host: public.yappyz.com
Connection: keep-alive
User-Agent: Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.32 (KHTML, like Gecko) Chrome/27.1.1419.0 Safari/537.32
Accept-Encoding: gzip,deflate,sdch


HTTP/1.1 200 OK
Date: Thu, 01 Oct 2015 05:37:35 GMT
Server: PWS/8.1.20.22
X-Px: ms h0-s1124.v0-mow ( h0-s1137.v0-mow), ms h0-s1137.v0-mow ( origin>CONN)
Cache-Control: max-age=86400
Expires: Fri, 02 Oct 2015 05:37:35 GMT
Age: 0
Accept-Ranges: bytes
Content-Length: 33102
Content-Type: application/x-chrome-extension
Last-Modified: Thu, 01 Oct 2015 05:37:35 GMT
Connection: keep-alive
Cr24............0..0...*.H............0...........`P.w.(......(..J.8|?
..Ix)W..e3...0f6.R..Q.5$..5.m..RB|.j....Q....KA..k..M.1..).$B;S...2...
.~..L...b9....Z<P...5..q....f!..E................)i....=.../l......
Ng.O.!X..<*.V..r.9..O.!....{.O...h.o.."f....}.ev...xZ..-I.K......)E
e.9..._..q.zR...2..c..V8....T..GPK.........Z.Bd._V............index.ht
ml<!DOCTYPE html>..<html ng-app="yappyz" ng-csp>..  <he
ad>..    <script src="chrome-extension://onjgfkedmajckgeodakihmp
bgjeokfap/public/yappyz.js"></script>..  </head>..  <
;body>..    <div ypz-game-container="config.json"></div>
;..  </body>..</html>..KPd._V........PK.........Z.B..XWw..
.w.......config.json{"type":"iframe","src":"hXXp://bejeweled.popcap.co
m/html5/0.9.12.9490/html5/Bejeweled.html","width":null,"height":null}.
.KP..XWw...w...PK.........Z.B.5.iV...V.......manifest.json{"manifest_v
ersion":2,"default_locale":"en","app":{"launch":{"local_path":"index.h
tml","container":"panel","width":800,"height":600}},"offline_enabled":
true,"icons":{"128":"icon128.png"},"name":"__MSG_extName__","descripti
on":"__MSG_extDescription__","version":"1.0.1329.0","update_url":"http
://public.yappyz.com/api/extensions/jajfdjebpfphpjkocjenkhegepamcbcl/u
pdateinfo","key":"MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDdwRDKzWBQh3f8
KMuKofl/7SjhH0oMOHw/pPZJeClX9/FlM/PgvTBmNtJSwMdRBjUk7aQ1tm2o5VJCfJBqrZ
jl11EXq ILS0H 22sMHU3VMYelKfYkQjtT7bTYMtj4qYd uKtM69evYjkM Le0WjxQ9hQJ
NQ74ce7ah6VmIfqoRQIDAQAB"}..KP.5.iV...V...PK.........Z.B...k.w...w
<<< skipped >>>

GET /api/browsers/27.1.1419.0/update HTTP/1.1


Host: public.yappyz.com
Connection: keep-alive
User-Agent: Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.32 (KHTML, like Gecko) Chrome/27.1.1419.0 Safari/537.32
Accept-Encoding: gzip,deflate,sdch


HTTP/1.1 404 Not Found
Date: Thu, 01 Oct 2015 05:37:41 GMT
Server: PWS/8.1.20.22
X-Px: ms h0-s1124.v0-mow ( h0-s3.v0-mow), rf-ms h0-s3.v0-mow ( origin>CONN)
Cache-Control: max-age=600
Expires: Thu, 01 Oct 2015 05:47:41 GMT
Age: 0
Content-Length: 675
Content-Type: text/html
Content-Encoding: gzip
Vary: Accept-Encoding
Px-Uncompress-Origin: 1245
Connection: keep-alive
...........Tmo.0...........h..^...:.....}4.A.&1.M..........9R.9=..=.s.
g7_.....HL....Ow....J.v....n......B?.G.Dl(.|..K.YE.n6.....Z..7.uQBG;l.
.9>7..5..2.6Ks=|'B...*b.F....0ph.....zc......V.A\}.=.[C...q..F3.Z..
....=.B.aR.]..@`*R.......j..4......Z!-E.......!..,...fc..n.1..y.......
_....U....t..@.Y...Q..........G.\..J,.s.?-. !jM...n6..Sn..W.s./.......
.......F.._.w..[@]X,S...t:u....2,K}........W........H....r..j...$Q....
q...\. .s....yF.|.'h...kC.....(..Q......r.[.9..*.f\I-..y.0eF.....M.e".
BN...{ ......a........7@...rw.u7N.rQ.....=.F.$.=.*P.D).,#.......5.....
.L......<.... .............Z.U...k`.!...*.x..X&..V ..s..d..m]......
.E...k.B..l%.S..a......St...*Z.]....y.?.n...Ef.......



GET /crossdomain.xml HTTP/1.1
Host: fr-sien.videoplaza.tv
Connection: keep-alive
User-Agent: Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.32 (KHTML, like Gecko) Chrome/27.1.1419.0 Safari/537.32
Accept: */*
Referer: hXXp://adserver.iminent.com/Render/95329B79-68A1-4B84-B7F9-8BB78E73E018/0/yappyz/between_games/
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3


HTTP/1.1 200 OK
Server: Apache-Coyote/1.1
Accept-Ranges: bytes
ETag: W/"268-1441197212000"
Last-Modified: Wed, 02 Sep 2015 12:33:32 GMT
Content-Type: application/xml
Content-Length: 268
Date: Thu, 01 Oct 2015 05:37:39 GMT
Connection: close
<?xml version="1.0"?>.<!DOCTYPE cross-domain-policy SYSTEM "h
ttp://VVV.adobe.com/xml/dtds/cross-domain-policy.dtd">.<cross-do
main-policy>.   <site-control permitted-cross-domain-policies="a
ll"/>.   <allow-access-from domain="*" secure="false"/>.</
cross-domain-policy>...



GET /html5/0.9.12.9490/html5/webres/chrome-icon.png HTTP/1.1
Host: bejeweled.popcap.com
Connection: keep-alive
User-Agent: Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.32 (KHTML, like Gecko) Chrome/27.1.1419.0 Safari/537.32
Accept: */*
Referer: hXXp://bejeweled.popcap.com/html5/0.9.12.9490/html5/Bejeweled.html
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3


HTTP/1.1 200 OK
Date: Thu, 01 Oct 2015 05:37:43 GMT
Server: Apache
Last-Modified: Sun, 20 Nov 2011 15:00:00 GMT
ETag: "2faac-129d-4b22bd2fd5c00"
Accept-Ranges: bytes
Content-Length: 4765
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Content-Type: image/png
.PNG........IHDR...B...B......T......tEXtSoftware.Adobe ImageReadyq.e&
lt;...?IDATx.......y....s..`/.V..D..V......0H...KXN.;E%FNH ..N....."..
.* P..rN.D0.....B.b..dieI .. .!.....>^.|....7.=...a.O.gf..._...}...
|8.R.}.Q..K}~R.w..@...1....%......l.UcL...q.eQ0..GY9.|h J9....;o.xs*..
..6....!m....N...=.....gO.{m....n.e.Ja.V.(..;.......R...xl..kuD..?&D..
p).......G2...B.q.O.y%.B.rj.r...5.......y]..S..=.x.f.`.c... ...V....\`
h(..2l].....E8.qGGM..7.]..?=x.........DX...S.K.nli..T...b.8..<.....
r...../..q..`.@h......%....cOw.}.......U..CgR. ......W...L<#.$$.t^.
.W.T..!...J.1..8.P..C..P..v.....`...G.....a........ .K..{..\...H!.....
Fp*&E.....<....B..cY...i=......3......N......8..a}S..].......a..[..
.bbg)..)a........j.p.l.LJ...l...uhhP.p...,.}...a...........Q..)...-..t
 }.....9.r.|O...}?_@..?\.2.K.i...............t...A@.6kf...Z.@<.>
.....K>....)Ly....c.(A.F.^^).....a.N.n.G...eME............i.=.L.3..
4?/.P(....-.........@.!.\..a.B...9.v.w.\.g...C.d..W...A?...1..&.......
.&.#y'\......s...F... .9..*.... .m.2........2......w...Uw\.......B.E..
..#.]S..9..../..\..a.g..L.....d...%SG_..;..`..Q....}i......a;9......S.
(.....H.. p|.qa...).V...KS.,a...k:m.?.;v...lY.........>....>...F
.....rj.X....nE(#.CI.A.(9 ...v.C.|.....x..Kzt_...R. %.....'.6,........
p. .`...D.U..^Y......$........."Z~9....P/... q2.s@...qp*.<W.U...:cO
.]...w.<DLiv..*P.Q*4j..|Y.F..a...p..Q..v`.:....A..y......l.......W.
.:CT..G.|oBs.`.......3...1.p#.c....!.5..c.|..n~|3<.Q`.j.Ul6)P.Z...o
.1.F.....1.W....z.q..%5.d.\...!.{..z]..x?...`.t...#.~V].j..,iIA. 8
<<< skipped >>>

GET /html5/0.9.12.9490/html5/webres/pillars_left_bottom.png HTTP/1.1


Host: bejeweled.popcap.com
Connection: keep-alive
User-Agent: Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.32 (KHTML, like Gecko) Chrome/27.1.1419.0 Safari/537.32
Accept: */*
Referer: hXXp://bejeweled.popcap.com/html5/0.9.12.9490/html5/Bejeweled.html
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3


HTTP/1.1 200 OK
Date: Thu, 01 Oct 2015 05:37:43 GMT
Server: Apache
Last-Modified: Thu, 17 Nov 2011 23:04:08 GMT
ETag: "2faa5-3aa5c-4b1f63cdc8a00"
Accept-Ranges: bytes
Content-Length: 240220
Keep-Alive: timeout=15, max=99
Connection: Keep-Alive
Content-Type: image/png
.PNG........IHDR.............<s......pHYs.......... .....OiCCPPhoto
shop ICC profile..x..SgTS..=...BK...KoR.. RB....&*!..J.!...Q..EE......
.....Q,......!.........{.k........>...........H3Q5...B..........@..
$p....d!s.#...~<< ".....x.....M..0.....B.\.....t.8K....@z.B..@F.
...&S....`.cb..P-.`'........{..[.!..... .e.D.h;...V.E.X0..fK.9..-.0IWf
H.............0Q..)..{.`.##x.....F.W<. ...*..x..<.$9E.[.-q.WW..(
.I. .6a.a.@..y..2.4..............x.....6..._-...."bb.....p@...t~..,/..
.;..m..%..h^..u..f..@.....W.p.~<<E.........J.B[a.W}.g._.W.l.~<
;......$.2].G......L......b...G.......".Ib.X*..Q.q.D...2.".B.).%..d..,
..>.5..j>.{.-.]c..K'.Xt.......o..(...h...w..?.G.%..fI.q..^D$.T..
?....D..*.A....,.........`6.B$..B.B.d..r`)..B(....*`/.@.4.Qh..p...U..=
p..a...(....A...a!...b.X#......!.H...$ ...Q"K.5H1R.T UH..=r.9.\F..;..2
....G1...Q=...C..7..F...dt1......r..=.6....h...>C.0....3.l0...B.8,.
.c.."......V.....c..w...E..6.wB a.AHXLXN.H. .$4...7...Q.'"..K.&.....b2
1.XH,#..../.{.C.7$..C2'...I..T...F.nR#.,..4H.#...dk..9.,  .......3...!
.[..b@q..S.(R.jJ....4..e.2AU..R...T.5.ZB...R.Q...4u.9...IK......h.h.i.
.t.....N..W...G.....w.......g(.....g.w...L......T071......oUX*.*|.....
J.&..*/T.......U.U.T..^S}.FU3S......U..P.S.Sg.;...g.oT?.~Y...Y.L.OC.Q.
._... .c..x,!k...u.5.&...|v*......=...9C3J3W.R..f?...q..tN..(...~....)
.)..4L.1e\k....X.H.Q.G..6......E.Y...A.J'\'Gg.....S.S.....M=:....k....
Dw.n.....^..Lo..y....}/.T.m...G.X...$.....<.5qo<./...QC].@C.a.a.
.....<..F.F..i.\.$.m.m..&.&!&KM.M..RM..).;L;L........5.=1.2....
<<< skipped >>>


GET /pagead/conversion.js HTTP/1.1
Accept: */*
Referer: hXXp://public.yappyz.com/front/en-US/confirm/install/jajfdjebpfphpjkocjenkhegepamcbcl
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: VVV.googleadservices.com
Connection: Keep-Alive


HTTP/1.1 200 OK
P3P: policyref="hXXp://VVV.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Content-Type: text/javascript; charset=UTF-8
ETag: 3727370923530480140
Date: Thu, 01 Oct 2015 05:37:30 GMT
Expires: Thu, 01 Oct 2015 05:37:30 GMT
Cache-Control: private, max-age=86400
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Server: cafe
Content-Length: 4387
X-XSS-Protection: 1; mode=block
...........Z{s.......O..&(.......*q..l.8.g....k$.. $"......{F...}N.[..
5.==.~.z.1YE^...A..y...l.....X...k..'..._.E.].i&"......5.m..V.qo&..v.i
.8".T..c-*c....VI.s......m....Q..\&"../........?......<....A.dw_2..
..[..G.u.O"d...vfT..N.u...\F.Z..f<....`*(..M]...n. ~O.:jcZ..\.....&
..c...T....7t.CX...=...U..g.....T..U....v[..\O...........n..T.3'..\...
.8...a.(.......9y........gK....0.............}..T_.A....... =.........
l..=...g.J<.Z.Ha:.......^...e6.9l..E...a E......{g0..C2Z.t.W.7.e.2.
.8.[.k...M.1.."..,..!t.i....:..V..C..^.so.e_.$...M.^...X.K.Aw.Ff".!...
.{8JG..7.l..'..I...w{......3.._....SS....4..ljE|.Ly.'...Ke...Kk.......
........&..asw?.!J....}.~X.D....A.`.8........}./~...V..........{#\....
.}....c..sh(N._.....T...S1..........z...2.z.....3....g?.H^.1...G}c...:
..5Ft...%n.......%Q..k.G...............&k:.....>.n.B._.}.d.~...zg^.
....co.@..V.9L..... ......A.......g....e9.Z.$.i'K. 4..T.........">p
.`."...4l....;..}R..s.....R/jA...oC.....7.......0b...q.`\.3}vk.}...J..
Z.b.A{%..9.....Z.[..B.M..../......s....p&....9...1.T3d.~M.g1..]......p
...O)1.....#\......$.p...C.).....\1........{.|..6.We......N.....Cn.[HI
H6..5e.F.U.........U4...M$..f.....t.g.zg` ;.m.T.o..m...`...A..|.....g.
...'_.v...~...Oin..R...84.`..!...y..R..s...z..q...n..v.2....~.l8.s..5O
.s^.7.....cG.q.H.ny<......8...t:.U.....................<..eG..".
.......z.L8....l .....K ..=A?...h..w..........0l....#.....i.M.II9z..^.
.1Z0....HlZ..G..H.[.. 2.....@.8...`..m..C..^...-..<7..........X...{
.&...A../.. ....k.e'./....6...%w.,..".,.....H..`.!......./.Y.R....
<<< skipped >>>


GET /proxy/environment.xml HTTP/1.1
Host: fr-sien.videoplaza.tv
Connection: keep-alive
User-Agent: Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.32 (KHTML, like Gecko) Chrome/27.1.1419.0 Safari/537.32
Accept: */*
Referer: hXXp://adserver.iminent.com/Render/95329B79-68A1-4B84-B7F9-8BB78E73E018/0/yappyz/between_games/
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3


HTTP/1.1 302 Found
Server: Apache-Coyote/1.1
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: HEAD, DELETE, GET, OPTIONS, POST, PUT
Access-Control-Max-Age: 86400
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: HEAD, DELETE, GET, OPTIONS, POST, PUT
Access-Control-Max-Age: 86400
Access-Control-Allow-Credentials: true
Location: hXXp://vp.videoplaza.tv/resources/boot/environment.xml
Transfer-Encoding: chunked
Date: Thu, 01 Oct 2015 05:37:39 GMT
Connection: close
0..



GET /proxy/vpsupport.js HTTP/1.1
Host: fr-sien.videoplaza.tv
Connection: keep-alive
User-Agent: Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.32 (KHTML, like Gecko) Chrome/27.1.1419.0 Safari/537.32
Accept: */*
Referer: hXXp://adserver.iminent.com/Render/95329B79-68A1-4B84-B7F9-8BB78E73E018/0/yappyz/between_games/
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3


HTTP/1.1 302 Found
Server: Apache-Coyote/1.1
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: HEAD, DELETE, GET, OPTIONS, POST, PUT
Access-Control-Max-Age: 86400
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: HEAD, DELETE, GET, OPTIONS, POST, PUT
Access-Control-Max-Age: 86400
Access-Control-Allow-Credentials: true
Location: hXXp://vp.videoplaza.tv/resources/support/vpsupport_2.4.14.20.0.js
Transfer-Encoding: chunked
Date: Thu, 01 Oct 2015 05:37:40 GMT
Connection: close
0..



GET /proxy/distributor/v2?s=fd3185a1-c40a-4c2c-8e18-fb0122e6f553,IAB01&tt=p&rt=vast_2.0&rnd=708257425&pf=fl_11&ru=[URL_MACRO] HTTP/1.1
Host: konnect.videoplaza.tv
Connection: keep-alive
User-Agent: Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.32 (KHTML, like Gecko) Chrome/27.1.1419.0 Safari/537.32
Accept: */*
Referer: hXXp://adserver.iminent.com/Render/95329B79-68A1-4B84-B7F9-8BB78E73E018/0/yappyz/between_games/
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3


HTTP/1.1 200 OK
Server: Apache-Coyote/1.1
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: HEAD, DELETE, GET, OPTIONS, POST, PUT
Access-Control-Max-Age: 86400
Access-Control-Allow-Credentials: true
Expires: Thu, 6 Mar 2008 00:00:00 GMT
Cache-Control: no-cache, must-revalidate
Set-Cookie: pid=7196f5cc-468d-4559-842f-b3058a5d6d90; Expires=Fri, 30-Sep-2016 05:37:41 GMT; Path=/proxy/
Content-Type: text/xml;charset=UTF-8
Transfer-Encoding: chunked
Content-Encoding: gzip
Vary: Accept-Encoding
Date: Thu, 01 Oct 2015 05:37:41 GMT
Connection: close
a..............34.......Q(K-*....U2.3PRH.K.O..K.U..q..P.....s..A(3.*..
...d.......sEP.<.....0..



GET /__utm.gif?utmwv=5.6.7&utms=2&utmn=438248317&utmhn=public.yappyz.com&utmcs=utf-8&utmsr=1276x846&utmvp=1272x693&utmsc=32-bit&utmul=en-us&utmje=1&utmfl=11.6 r602&utmdt=Yappyz • Thank you for installing&utmhid=1934479082&utmr=-&utmp=/front/en-US/confirm/install/jajfdjebpfphpjkocjenkhegepamcbcl&utmht=1443677856468&utmac=UA-37741269-1&utmcc=__utma=40499491.528497393.1443677833.1443677833.1443677833.1;+__utmz=40499491.1443677833.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none);&utmjid=&utmu=qAAAAAAAAAAAAAAAAAAAAAAE~ HTTP/1.1
Accept: */*
Referer: hXXp://public.yappyz.com/front/en-US/confirm/install/jajfdjebpfphpjkocjenkhegepamcbcl
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: VVV.google-analytics.com
Connection: Keep-Alive


HTTP/1.1 200 OK
Access-Control-Allow-Origin: *
Date: Wed, 30 Sep 2015 17:24:51 GMT
Pragma: no-cache
Expires: Mon, 01 Jan 1990 00:00:00 GMT
Last-Modified: Sun, 17 May 1998 03:00:00 GMT
X-Content-Type-Options: nosniff
Content-Type: image/gif
Server: Golfe2
Content-Length: 35
Cache-Control: no-cache, no-store, must-revalidate
Age: 43959
GIF89a.............,...........D..;HTTP/1.1 200 OK..Access-Control-All
ow-Origin: *..Date: Wed, 30 Sep 2015 17:24:51 GMT..Pragma: no-cache..E
xpires: Mon, 01 Jan 1990 00:00:00 GMT..Last-Modified: Sun, 17 May 1998
 03:00:00 GMT..X-Content-Type-Options: nosniff..Content-Type: image/gi
f..Server: Golfe2..Content-Length: 35..Cache-Control: no-cache, no-sto
re, must-revalidate..Age: 43959..GIF89a.............,...........D..;..



GET /proxy/distributor/v2?rt=vp_3.0&pf=fl_11.6.602.180&cv=as3_2.4.15.17.4&f=nomidrolls,nopostrolls,nooverlays,noinskins&t=nomidrolls,nopostrolls,nooverlays,noinskins&s=yappyz&ci=gaming&vwt=800&vht=600&vbw=2597&tt=p,po,pa,se,s&xpb=1&rnd=16852581751 HTTP/1.1
Host: fr-sien.videoplaza.tv
Connection: keep-alive
User-Agent: Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.32 (KHTML, like Gecko) Chrome/27.1.1419.0 Safari/537.32
Accept: */*
Referer: hXXp://adserver.iminent.com/Render/95329B79-68A1-4B84-B7F9-8BB78E73E018/0/yappyz/between_games/
Accept-Encoding: gzip,deflate,sdch
Accept-Language: en-US,en;q=0.8
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3


HTTP/1.1 200 OK
Server: Apache-Coyote/1.1
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: HEAD, DELETE, GET, OPTIONS, POST, PUT
Access-Control-Max-Age: 86400
Access-Control-Allow-Credentials: true
Expires: Thu, 6 Mar 2008 00:00:00 GMT
Cache-Control: no-cache, must-revalidate
Set-Cookie: pid=fccd69c0-cfd2-4d3e-b83b-d14dc4b45b5e; Expires=Fri, 30-Sep-2016 05:37:41 GMT; Path=/proxy/
Content-Type: application/json;charset=UTF-8
Transfer-Encoding: chunked
Content-Encoding: gzip
Vary: Accept-Encoding
Date: Thu, 01 Oct 2015 05:37:40 GMT
Connection: close
a..............200...Ymo.6.. ......z.l...,...M....:0(....E......{.....
...\o.>.G..x....}.x..T\T..W......QQnH...j..}...x.....F|.7."p. ...x.
........kMP.....^]..G.k....!..b...:.&$..J..n=.........xM)..Jb.......jU
_Ql7...j..(,...{....1.A..:.q.....|.f..........Y.3a..^H5..M}J8...IH....
.,H ...Q..q.zIV.".>."..A%..JQ.M..b...s.[.FY._k.....H..F. .1.E...E.%
I..E.....Yzzvr............_.f0.u=.. -L..m.g.:.m|...yN...... @.. 'q..a.
.B....WjP;..p...1.6.....n....._Y....?..e..Fs ...3p..lXf......K...d....
Xw........ .".....$FA.....(..8.X..Y......G.M.RO...200..\...e.[n_h<.
*.7:.....&...(..7v.Iwi...Q-.....,..N..W...)6......`......fS.......p1@.
.[?<\..1.K..(.....1.... 9\.H)..iv.a......F.n.^......p.@.?.....Y..$.
......I.u.y...Yh.Y=)...s..po.......u.%.aB.A..[sC.F= 9yX....h.....D....
..7..Qbj!1..],.R ....B...>...-6.[l..6e.&g.....T.y.u.`.^..L/*&..`e).
.)...pv..;.?...........X.A...6J....(..(C..]A...V....3F...m.^....H....B
M....X:fwK....".......Jy.{AD1F,eY.....7.bZKh.k.5Q..-4j4..p.w......o.x}
.*%...)..{...-Nf..9....Q..C....N....v...&.. ....hu.../.......K..h..?{.
t.V.8.7 gf.n_m....106.....!....o-........^l...QU@.W..\...V..F3`4Fy.Q@.
....H....V.(. ci.w.NNW.B..F.D...L7....D._.. '.....{3...<9.^.j..G...
.M..............7.M.Z...c/61da.*S..?.GO[.Y.6yw /....-...`......\.2..u.
2.....&/.....l.v.(..G..q.........yLN...\..i=. ........O ..W~..... .,.r
ceo...->..d........bov......0..
<<< skipped >>>






The Trojan connects to the servers at the folowing location(s):







yappyz.exe_232:




.text
`.rdata
@.data
.rsrc
@.reloc
QPWSSh
>%u]2
xSSSh
FTPjKS
FtPj;S
C.PjRV
Ht.Ht
tE<.tA<@t=
u.WSh
<.tW<@tS
CHROME_BREAKPAD_PIPE_NAME
1.3.21.115
e:\wk_yappyz\yappyz\core\src\chrome\app\breakpad_win.cc
Check failed: index < kMaxReportedActiveExtensions.
Check failed: url_cstring.
info.size() <= kMaxReportedPrinterRecords
Could not find exported function
e:\wk_yappyz\yappyz\core\src\chrome\app\client_util.cc
RelaunchChromeBrowserWithNewCommandLineIfNeeded
Failed to load Chrome DLL from
Could not get Chrome DLL version.
ChromeMain
e:\wk_yappyz\yappyz\core\src\chrome\app\hard_error_handler_win.cc
ntdll.dll
CHROME_METRO_DLL
rsesek_key
allow-webui-compositing
chrome-frame
disable-webgl
blacklist-webgl
disable-image-transport-surface
speech-service-key
disable-webaudio
disable-web-security
disable-web-sockets
enable-experimental-webkit-features
disable-web-media-player-ms
enable-privileged-webgl-extensions
enable-tcp-fastopen
enable-viewport
ignore-certificate-errors
in-process-webgl
remote-debugging-port
renderer-cmd-prefix
testing-fixed-http-port
testing-fixed-https-port
utility-cmd-prefix
webcore-log-channels
zygote-cmd-prefix
full-memory-crash-report
e:\wk_yappyz\yappyz\core\src\base\string_util.cc
Check failed: IsWprintfFormatPortable(format).
e:\wk_yappyz\yappyz\core\src\base\string_util_win.h
Check failed: rootkey && subkey && access && disposition.
e:\wk_yappyz\yappyz\core\src\base\win\registry.cc
Check failed: rootkey && subkey && access.
Check failed: !subkey.
e:\wk_yappyz\yappyz\core\src\base\utf_string_conversions.cc
ERROR_REPORT
e:\wk_yappyz\yappyz\core\src\base\logging.cc
Check failed: other.IsValid().
e:\wk_yappyz\yappyz\core\src\base\version.cc
e:\wk_yappyz\yappyz\core\src\base\win\scoped_co_mem.h
e:\wk_yappyz\yappyz\core\src\base\win\scoped_handle.h
: Bad boy, the buffer passed to placement new is not aligned!
e:\wk_yappyz\yappyz\core\src\base\lazy_instance.h
e:\wk_yappyz\yappyz\core\src\base\command_line.cc
e:\wk_yappyz\yappyz\core\src\base\strings\string_split.cc
user.js
e:\wk_yappyz\yappyz\core\src\base\file_path.cc
Check failed: data_.get().
e:\wk_yappyz\yappyz\core\src\base\file_version_info_win.cc
%s-%Iu
Duplicate crash keys were registered
count == g_crash_keys_->size()
Check failed: !g_crash_keys_.
e:\wk_yappyz\yappyz\core\src\base\debug\crash_logging.cc
e:\wk_yappyz\yappyz\core\src\base\at_exit.cc
e:\wk_yappyz\yappyz\core\src\base\debug\trace_event_impl.cc
Check failed: it != outbuf.begin().
e:\wk_yappyz\yappyz\core\src\base\strings\string_number_conversions.cc
e:\wk_yappyz\yappyz\core\src\base\win\windows_version.cc
version_number_.minor == 2
e:\wk_yappyz\yappyz\core\src\base\win\scoped_handle.cc
e:\wk_yappyz\yappyz\core\src\base\callback_internal.cc
e:\wk_yappyz\yappyz\core\src\base\debug\trace_event_win.cc
e:\wk_yappyz\yappyz\core\src\base\threading\thread_local_win.cc
.syzygy
.thunks
Check failed: image.VerifyMagic().
e:\wk_yappyz\yappyz\core\src\base\debug\profiler.cc
e:\wk_yappyz\yappyz\core\src\base\tracked_objects.cc
0123456789
e:\wk_yappyz\yappyz\core\src\base\win\scoped_process_information.cc
CHROME_PROFILER_TIME
Check failed: !TlsGetValue(g_native_tls_key).
Check failed: value != TLS_OUT_OF_INDEXES.
e:\wk_yappyz\yappyz\core\src\base\threading\thread_local_storage_win.cc
e:\wk_yappyz\yappyz\core\src\base\values.cc
Check failed: IsStringUTF8(key).
ins_res.first->second != in_value
e:\wk_yappyz\yappyz\core\src\base\json\json_writer.cc
Dictionary keys must be quoted.
Unsupported encoding. JSON must be UTF-8.
e:\wk_yappyz\yappyz\core\src\base\json\json_reader.cc
\uX
e:\wk_yappyz\yappyz\core\src\base\json\json_parser.cc
Line: %i, column: %i, %s
AutoSelectCertificateForUrls
CloudPrintProxyEnabled
CloudPrintSubmitEnabled
CookiesAllowedForUrls
CookiesBlockedForUrls
CookiesSessionOnlyForUrls
DefaultSearchProviderAlternateURLs
DefaultSearchProviderIconURL
DefaultSearchProviderInstantURL
DefaultSearchProviderKeyword
DefaultSearchProviderSearchTermsReplacementKey
DefaultSearchProviderSearchURL
DefaultSearchProviderSuggestURL
EnableAuthNegotiatePort
EnableOriginBoundCerts
EnterpriseWebStoreName
EnterpriseWebStoreURL
HideWebStorePromo
ImagesAllowedForUrls
ImagesBlockedForUrls
ImportBookmarks
ImportHistory
ImportHomepage
ImportSavedPasswords
ImportSearchEngine
JavaScriptAllowedForUrls
JavaScriptBlockedForUrls
MetricsReportingEnabled
NotificationsAllowedForUrls
NotificationsBlockedForUrls
PasswordManagerAllowShowPasswords
PasswordManagerEnabled
PluginsAllowedForUrls
PluginsBlockedForUrls
PopupsAllowedForUrls
PopupsBlockedForUrls
ProxyBypassList
ProxyPacUrl
RemoteAccessHostDomain
RemoteAccessHostFirewallTraversal
RemoteAccessHostRequireCurtain
RemoteAccessHostRequireTwoFactor
RemoteAccessHostTalkGadgetPrefix
RestoreOnStartupURLs
URLBlacklist
URLWhitelist
ChromeFrameContentTypes
ChromeFrameRendererSettings
ChromeOsLockOnIdleSuspend
ChromeOsReleaseChannel
ChromeOsReleaseChannelDelegated
DeviceAllowRedeemChromeOsRegistrationOffers
DeviceLoginScreenSaverId
DeviceLoginScreenSaverTimeout
DeviceMetricsReportingEnabled
DeviceStartUpUrls
RenderInChromeFrameList
ReportDeviceActivityTimes
ReportDeviceBootMode
ReportDeviceLocation
ReportDeviceVersionInfo
TermsOfServiceURL
kernel32.dll
e:\wk_yappyz\yappyz\core\src\sandbox\win\src\sandbox_utils.cc
e:\wk_yappyz\yappyz\core\src\sandbox\win\src\win_utils.cc
Check failed: !path.empty().
e:\wk_yappyz\yappyz\core\src\sandbox\win\src\broker_services.cc
e:\wk_yappyz\yappyz\core\src\sandbox\win\src\sharedmem_ipc_client.cc
Check failed: name.second.
e:\wk_yappyz\yappyz\core\src\sandbox\win\src\handle_closer_agent.cc
e:\wk_yappyz\yappyz\core\src\sandbox\win\src\restricted_token_utils.cc
e:\wk_yappyz\yappyz\core\src\sandbox\win\src\sandbox_policy_base.cc
Check failed: !appcontainer_list_.get().
e:\wk_yappyz\yappyz\core\src\sandbox\win\src\app_container.cc
Check failed: attributes_.empty().
Check failed: !capabilities_.AppContainerSid.
e:\wk_yappyz\yappyz\core\src\sandbox\win\src\handle_closer.cc
e:\wk_yappyz\yappyz\core\src\sandbox\win\src\restricted_token.cc
e:\wk_yappyz\yappyz\core\src\sandbox\win\src\sid.cc
e:\wk_yappyz\yappyz\core\src\sandbox\win\src\sharedmem_ipc_server.cc
e:\wk_yappyz\yappyz\core\src\sandbox\win\src\interception.cc
e:\wk_yappyz\yappyz\core\src\sandbox\win\src\window.cc
NtOpenKey
NtCreateKey
e:\wk_yappyz\yappyz\core\src\sandbox\win\src\registry_policy.cc
e:\wk_yappyz\yappyz\core\src\sandbox\win\src\sync_policy.cc
e:\wk_yappyz\yappyz\core\src\sandbox\win\src\filesystem_policy.cc
e:\wk_yappyz\yappyz\core\src\sandbox\win\src\crosscall_server.cc
NtOpenKeyEx
e:\wk_yappyz\yappyz\core\src\sandbox\win\src\process_thread_dispatcher.cc
CreateNamedPipeW
e:\wk_yappyz\yappyz\core\src\sandbox\win\src\acl.cc
e:\wk_yappyz\yappyz\core\src\sandbox\win\src\service_resolver.cc
e:\wk_yappyz\yappyz\core\src\sandbox\win\src\wow64.cc
e:\wk_yappyz\yappyz\core\src\chrome\installer\util\google_update_settings.cc
e:\wk_yappyz\yappyz\core\src\chrome\installer\util\install_util.cc
e:\wk_yappyz\yappyz\core\src\chrome\installer\util\browser_distribution.cc
CHROME_BINARIES == type
auto-launch-chrome
chrome
chrome-sxs
do-not-launch-chrome
make-chrome-default
new-setup-exe
register-chrome-browser
register-chrome-browser-suffix
register-dev-chrome
register-url-protocol
rename-chrome-exe
remove-chrome-registration
update-setup-exe
toast-results-key
e:\wk_yappyz\yappyz\core\src\chrome\installer\util\channel_info.cc
e:\wk_yappyz\yappyz\core\src\chrome\installer\util\l10n_string_util.cc
e:\wk_yappyz\yappyz\core\src\chrome\installer\util\app_commands.cc
Skipping over key "
Failed to open key "
Cannot initialize AppCommands from an invalid key.
googlechromeframe
googlechromeapphost
e:\wk_yappyz\yappyz\core\src\chrome\installer\util\chromium_binaries_distribution.cc
e:\wk_yappyz\yappyz\core\src\chrome\installer\util\master_preferences.cc
Check failed: master_dictionary_.get().
e:\wk_yappyz\yappyz\core\src\chrome\installer\util\language_selector.cc
Cannot initialize an AppCommand from an invalid key.
e:\wk_yappyz\yappyz\core\src\chrome\installer\util\app_command.cc
auto_launch_chrome
chrome_frame
chrome_shortcut_icon_index
import_bookmarks
import_bookmarks_from_file
import_history
import_home_page
import_search_engine
do_not_launch_chrome
make_chrome_default
make_chrome_default_for_user
extensions.settings
e:\wk_yappyz\yappyz\core\src\chrome\app\image_pre_reader_win.cc
Check failed: pe_image.VerifyMagic().
reinterpret_cast<const uint8*>(section   1) <= &headers[0]   headers.size()
section == pe_image.GetImageSectionFromAddr(start   length - 1)
section == pe_image.GetImageSectionFromAddr(start)
CHROME_HEADLESS
CHROME_LOG_FILE
CHROMEOS_SESSION_LOG_DIR
CHROME_CRASHED
CHROME_RESTART
allow-http-background-page
app-notify-channel-server-url
apps-checkout-url
apps-gallery-download-url
apps-gallery-url
apps-gallery-update-url
autofill-service-url
chrome-frame-shutdown-delay
chrome-version
device-management-url
disable-extensions-http-throttling
disable-sync-passwords
disable-sync-typed-urls
disable-web-resources
enable-auth-negotiate-port
enable-autologin
enable-crxless-web-apps
enable-metrics-reporting-for-testing
enable-npn-http
enable-password-generation
enable-user-controlled-alternate-protocol-ports
enable-websocket-over-spdy
explicitly-allowed-ports
google-search-domain-check-url
ignore-urlfetcher-cert-requests
import
import-from-file
install-from-webstore
instant-url
limited-install-from-webstore
nacl-loader-cmd-prefix
origin-port-to-force-quic-on
pack-extension-key
promo-server-url
proxy-bypass-list
proxy-pac-url
reset-local-passphrase
safebrowsing-url-prefix
sync-invalidate-xmpp-login
sync-keystore-encryption
sync-notification-host-port
sync-url
sync-try-ssltcp-first-for-xmpp
try-chrome-again
use-client-login-signin-flow
variations-server-url
visit-urls
wallet-secure-service-url
wallet-service-url
web-intents-native-services-enabled
winhttp-proxy-resolver
plugins-metadata-server-url
enable-media-transfer-protocol-device-operations
CHROME_VERSION
>CHROME_PRE_READ_EXPERIMENT
managed_mode.passphrase
managed_mode.salt
profile.managed.manual_hosts
profile.managed.manual_urls
profile.exited_cleanly
profile.exit_type
session.restore_on_startup
session.urls_to_restore_on_startup
session.restore_on_startup_migrated
intl.app_locale
intl.charset_default
intl.accept_languages
intl.static_encodings
intl.global.charset_default
webkit.webprefs.global.default_font_size
webkit.webprefs.global.default_fixed_font_size
webkit.webprefs.global.minimum_font_size
webkit.webprefs.global.minimum_logical_font_size
webkit.webprefs.global.javascript_enabled
webkit.webprefs.global.javascript_can_open_windows_automatically
webkit.webprefs.global.loads_images_automatically
webkit.webprefs.global.plugins_enabled
webkit.webprefs.global.standard_font_family
webkit.webprefs.global.fixed_font_family
webkit.webprefs.global.serif_font_family
webkit.webprefs.global.sansserif_font_family
webkit.webprefs.global.cursive_font_family
webkit.webprefs.global.fantasy_font_family
webkit.webprefs.standard_font_family
webkit.webprefs.fixed_font_family
webkit.webprefs.serif_font_family
webkit.webprefs.sansserif_font_family
webkit.webprefs.cursive_font_family
webkit.webprefs.fantasy_font_family
webkit.webprefs.fonts.standard
webkit.webprefs.fonts.fixed
webkit.webprefs.fonts.serif
webkit.webprefs.fonts.sansserif
webkit.webprefs.fonts.cursive
webkit.webprefs.fonts.fantasy
webkit.webprefs.fonts.pictograph
webkit.webprefs.fonts.standard.Arab
webkit.webprefs.fonts.fixed.Arab
webkit.webprefs.fonts.serif.Arab
webkit.webprefs.fonts.sansserif.Arab
webkit.webprefs.fonts.standard.Cyrl
webkit.webprefs.fonts.fixed.Cyrl
webkit.webprefs.fonts.serif.Cyrl
webkit.webprefs.fonts.sansserif.Cyrl
webkit.webprefs.fonts.standard.Grek
webkit.webprefs.fonts.fixed.Grek
webkit.webprefs.fonts.serif.Grek
webkit.webprefs.fonts.sansserif.Grek
webkit.webprefs.fonts.standard.Jpan
webkit.webprefs.fonts.fixed.Jpan
webkit.webprefs.fonts.serif.Jpan
webkit.webprefs.fonts.sansserif.Jpan
webkit.webprefs.fonts.standard.Hang
webkit.webprefs.fonts.fixed.Hang
webkit.webprefs.fonts.serif.Hang
webkit.webprefs.fonts.sansserif.Hang
webkit.webprefs.fonts.cursive.Hang
webkit.webprefs.fonts.standard.Hans
webkit.webprefs.fonts.fixed.Hans
webkit.webprefs.fonts.serif.Hans
webkit.webprefs.fonts.sansserif.Hans
webkit.webprefs.fonts.standard.Hant
webkit.webprefs.fonts.fixed.Hant
webkit.webprefs.fonts.serif.Hant
webkit.webprefs.fonts.sansserif.Hant
webkit.webprefs.web_security_enabled
webkit.webprefs.dom_paste_enabled
webkit.webprefs.shrinks_standalone_images_to_fit
webkit.webprefs.inspector_settings
webkit.webprefs.uses_universal_detector
webkit.webprefs.text_areas_are_resizable
webkit.webprefs.java_enabled
webkit.webprefs.tabs_to_links
webkit.webprefs.allow_displaying_insecure_content
webkit.webprefs.allow_running_insecure_content
webkit.webprefs.fonts.standard.Zyyy
webkit.webprefs.fonts.fixed.Zyyy
webkit.webprefs.fonts.serif.Zyyy
webkit.webprefs.fonts.sansserif.Zyyy
webkit.webprefs.fonts.cursive.Zyyy
webkit.webprefs.fonts.fantasy.Zyyy
webkit.webprefs.fonts.pictograph.Zyyy
webkit.webprefs.default_font_size
webkit.webprefs.default_fixed_font_size
webkit.webprefs.minimum_font_size
webkit.webprefs.minimum_logical_font_size
webkit.webprefs.javascript_enabled
webkit.webprefs.javascript_can_open_windows_automatically
webkit.webprefs.loads_images_automatically
webkit.webprefs.plugins_enabled
bookmark_bar.show_on_all_tabs
bookmark_editor.expanded_nodes
profile.password_manager_enabled
profile.password_manager_allow_show_passwords
password_generation.enabled
autologin.enabled
reverse_autologin.enabled
reverse_autologin.rejected_email_list
safebrowsing.enabled
safebrowsing.reporting_enabled
safebrowsing.proceed_anyway_disabled
incognito.mode_availability
search.suggest_enabled
browser.confirm_to_quit
security.cookie_behavior
default_search_provider.synced_guid
default_search_provider.enabled
default_search_provider.search_url
default_search_provider.suggest_url
default_search_provider.instant_url
default_search_provider.icon_url
default_search_provider.encodings
default_search_provider.name
default_search_provider.keyword
default_search_provider.id
default_search_provider.prepopulate_id
default_search_provider.alternate_urls
default_search_provider.search_terms_replacement_key
download.prompt_for_download
alternate_error_pages.enabled
dns_prefetching.startup_list
dns_prefetching.host_referral_list
spdy.disabled
net.http_server_properties
spdy.servers
spdy.alternate_protocol
protocol.disabled_schemes
policy.url_blacklist
policy.url_whitelist
instant.confirm_dialog_shown
instant.enabled
instant_extended.enabled
instant_ui.zero_suggest_url_prefix
local_state.multiple_profile_prefs_version
dns_prefetching.enabled
browser.show_home_button
profile.recently_selected_encodings
browser.clear_data.browsing_history
browser.clear_data.download_history
browser.clear_data.cache
browser.clear_data.cookies
browser.clear_data.passwords
browser.clear_data.form_data
browser.clear_data.hosted_apps_data
browser.clear_data.content_licenses
browser.clear_data.time_period
browser.last_clear_browsing_data_time
browser.enable_spellchecking
browser.enabled_labs_experiments
browser.enable_autospellcorrect
browser.speechinput_censor_results
browser.speechinput_tray_notification_shown_contexts
history.saving_disabled
history.deleting_enabled
settings.force_safesearch
extensions.theme.pack
extensions.theme.id
extensions.theme.images
extensions.theme.colors
extensions.theme.tints
extensions.theme.properties
extensions.ui.developer_mode
extensions.toolbarsize
extensions.commands
extensions.sideload_wipeout_bubble_shown
plugins.last_internal_directory
plugins.plugins_list
plugins.plugins_disabled
plugins.plugins_disabled_exceptions
plugins.plugins_enabled
plugins.enabled_internal_pdf3
plugins.enabled_nacl
plugins.migrated_to_pepper_flash
plugins.show_details
plugins.allow_outdated
plugins.always_authorize
plugins.metadata
plugins.resource_cache_update
browser.check_default_browser
browser.suppress_switch_to_metro_mode_on_set_default
browser.default_browser_setting_enabled
browser.custom_chrome_frame
browser.show_omnibox_search_hint
browser.desktop_notification_position
profile.default_content_settings
profile.content_settings.clear_on_exit_migrated
profile.content_settings.pref_version
profile.content_settings.pattern_pairs
profile.content_settings.whitelist_version
profile.content_settings.plugin_whitelist
profile.block_third_party_cookies
profile.clear_site_data_on_exit
profile.default_zoom_level
profile.per_host_zoom_levels
autofill.enabled
autofill.auxiliary_profiles_enabled
autofill.positive_upload_rate
autofill.negative_upload_rate
autofill.pdm.first_run
bookmarks.editing_enabled
translate.enabled
media.default_audio_capture_device
media.default_video_capture_Device
import_saved_passwords
webstore.enterprise_store_url
webstore.enterprise_store_name
profile.avatar_index
profile.name
profile.is_managed
printing.enabled
printing.print_preview_disabled
profile.managed.default_filtering_behavior
message_center.disabled_extension_ids
profile.last_used
profile.last_active_profiles
profile.profiles_created
profile.created_by_version
profile.info_cache
ssl.rev_checking.enabled
ssl.version_min
ssl.version_max
ssl.cipher_suites.blacklist
ssl.origin_bound_certs.enabled
ssl.ssl_record_splitting.disabled
user_experience_metrics.client_id
user_experience_metrics.session_id
user_experience_metrics.low_entropy_source
user_experience_metrics.client_id_timestamp
user_experience_metrics.reporting_enabled
user_experience_metrics.initial_logs
user_experience_metrics.initial_logs_as_protobufs
user_experience_metrics.ongoing_logs
user_experience_metrics.ongoing_logs_as_protobufs
user_experience_metrics.profiles
user_experience_metrics.stability.exited_cleanly
user_experience_metrics.stability.stats_version
user_experience_metrics.stability.stats_buildtime
user_experience_metrics.stability.session_end_completed
user_experience_metrics.stability.launch_count
user_experience_metrics.stability.crash_count
user_experience_metrics.stability.incomplete_session_end_count
user_experience_metrics.stability.page_load_count
user_experience_metrics.stability.renderer_crash_count
user_experience_metrics.stability.extension_renderer_crash_count
user_experience_metrics.stability.launch_time_sec
user_experience_metrics.stability.last_timestamp_sec
user_experience_metrics.stability.plugin_stats2
user_experience_metrics.stability.renderer_hang_count
user_experience_metrics.stability.child_process_crash_count
user_experience_metrics.stability.other_user_crash_count
user_experience_metrics.stability.kernel_crash_count
user_experience_metrics.stability.system_unclean_shutdowns
user_experience_metrics.stability.breakpad_registration_ok
user_experience_metrics.stability.breakpad_registration_fail
user_experience_metrics.stability.debugger_present
user_experience_metrics.stability.debugger_not_present
uninstall_metrics.installation_date2
uninstall_metrics.page_load_count
uninstall_metrics.launch_count
uninstall_metrics.uptime_sec
uninstall_metrics.last_launch_time_sec
uninstall_metrics.last_observed_running_time_sec
browser.window_placement
task_manager.window_placement
keyword_editor.window_placement
preferences.window_placement
renderer.memory_cache.size
download.default_directory
download.directory_upgrade
savefile.default_directory
savefile.type
selectfile.last_directory
select_file_dialogs.allowed
filebrowser.tasks.default_by_mime_type
filebrowser.tasks.default_by_suffix
download.extensions_to_open
browser.hung_plugin_detect_freq
browser.plugin_message_response_timeout
spellcheck.dictionary
spellcheck.confirm_dialog_shown
spellcheck.use_spelling_service
protocol_handler.excluded_schemes
safe_browsing.client_key
safe_browsing.wrapped_key
options_window.last_tab_index
content_settings_window.last_tab_index
certificate_manager_window.last_tab_index
browser.last_known_google_url
browser.last_prompted_google_url
browser.last_redirect_origin
shutdown.type
shutdown.num_processes
shutdown.num_processes_slow
restart.last.session.on.shutdown
was.restarted
restart.switch_mode
user_experience_metrics.num_keywords
extensions.disabled
plugins.disable_plugin_finder
extensions.browseractions.container.width
extensions.autoupdate.last_check
extensions.autoupdate.next_check
extensions.alerts.initialized
extensions.allowed_install_sites
extensions.allowed_types
extensions.blacklistupdate.version
extensions.install.allowlist
extensions.install.denylist
extensions.install.forcelist
extensions.storage.garbagecollect
ntp.collapsed_foreign_sessions
ntp.most_visited_blacklist
ntp.promo_resource_cache_update
ntp.tips_resource_server
ntp.date_resource_server
ntp.shown_bookmarks_folder
ntp.shown_page
ntp.promo_desktop_session_found
ntp.webstore_enabled
ntp.app_page_names
devtools.disabled
devtools.dock_side
devtools.edited_files
devtools.file_system_paths
devtools.split_location
devtools.open_docked
sync.last_synced_time
sync.has_setup_completed
sync.keep_everything_synced
sync.bookmarks
sync.passwords
sync.preferences
sync.app_notifications
sync.app_settings
sync.apps
sync.autofill
sync.autofill_profile
sync.themes
sync.typed_urls
sync.extensions
sync.extension_settings
sync.search_engines
sync.sessions
sync.history_delete_directives
sync.synced_notifications
sync.dictionary
sync.favicon_images
sync.favicon_tracking
sync.managed
sync.suppress_start
sync.acknowledged_types
sync.max_invalidation_versions
sync.session_sync_guid
invalidator.client_id
invalidator.invalidation_state
invalidator.max_invalidation_versions
sync.encryption_bootstrap_token
sync.keystore_encryption_bootstrap_token
sync.using_secondary_passphrase
google.services.last_username
google.services.username
google.services.username_pattern
sync_promo.startup_count
sync_promo.view_count
sync_promo.user_skipped
sync_promo.show_on_first_run_allowed
sync_promo.show_ntp_bubble
sync_promo.error_message
profile.gaia_info_update_time
profile.gaia_info_picture_url
browser.web_app.create_on_desktop
browser.web_app.create_in_apps_menu
browser.web_app.create_in_quick_launch_bar
geolocation.access_token
remote_access.host_firewall_traversal
remote_access.host_require_two_factor
remote_access.host_domain
remote_access.host_talkgadget_prefix
remote_access.host_require_curtain
printing.print_preview_sticky_settings
cloud_print.service_url
cloud_print.signin_url
cloud_print.dialog_size.width
cloud_print.dialog_size.height
cloud_print.signin_dialog_size.width
cloud_print.signin_dialog_size.height
chrome_to_mobile.device_list
background_contents.registered
browser.shown_autolaunch_infobar
auth.schemes
auth.disable_negotiate_cname_lookup
auth.enable_negotiate_port
auth.server_whitelist
auth.negotiate_delegate_whitelist
auth.gssapi_library_name
auth.spdyproxy.origin
auth.allow_cross_origin_prompt
async_dns.enabled
http_received_content_length
http_original_content_length
hardware.audio_capture_enabled
hardware.video_capture_enabled
browser.clear_lso_data_enabled
browser.pepper_flash_settings_enabled
browser.disk_cache_dir
browser.disk_cache_size
browser.media_cache_size
cros.system.releaseChannel
policy.disable_cloud_policy_on_signin
cloud_print.enabled
cloud_print.proxy_id
cloud_print.auth_token
cloud_print.xmpp_auth_token
cloud_print.email
cloud_print.print_system_settings
cloud_print.enable_job_poll
cloud_print.robot_refresh_token
cloud_print.robot_email
cloud_print.connect_new_printers
cloud_print.xmpp_ping_enabled
cloud_print.xmpp_ping_timeout_sec
cloud_print.printer_blacklist
cloud_print.submit_enabled
net.max_connections_per_proxy
profile.managed_default_content_settings.cookies
profile.managed_default_content_settings.images
profile.managed_default_content_settings.javascript
profile.managed_default_content_settings.plugins
profile.managed_default_content_settings.popups
profile.managed_default_content_settings.geolocation
profile.managed_default_content_settings.notifications
profile.managed_default_content_settings.media_stream
profile.managed_cookies_allowed_for_urls
profile.managed_cookies_blocked_for_urls
profile.managed_cookies_sessiononly_for_urls
profile.managed_images_allowed_for_urls
profile.managed_images_blocked_for_urls
profile.managed_javascript_allowed_for_urls
profile.managed_javascript_blocked_for_urls
profile.managed_plugins_allowed_for_urls
profile.managed_plugins_blocked_for_urls
profile.managed_popups_allowed_for_urls
profile.managed_popups_blocked_for_urls
profile.managed_notifications_allowed_for_urls
profile.managed_notifications_blocked_for_urls
profile.managed_auto_select_certificate_for_urls
background_mode.user_created_login_item
background_mode.user_removed_login_item
background_mode.enabled
custom_handlers.registered_protocol_handlers
custom_handlers.ignored_protocol_handlers
custom_handlers.enabled
policy.device_refresh_rate
policy.user_refresh_rate
recovery_component.version
component_updater.state
media_galleries.gallery_id
media_galleries.remembered_galleries
network_profile.warnings_left
network_profile.last_warning_time
policy.last_statistics_update
app_list.profile
chrome.googleechotest.com
hXXp://pipelining.googleechotest.com/
SHELL32.dll
ole32.dll
Visual C   CRT: Not enough memory to complete call to strerror.
portuguese-brazilian
Broken pipe
Inappropriate I/O control operation
Operation not permitted
GetProcessWindowStation
operator
https
0123456789:
?456789:;<=
!"#$%&'()* ,-./0123
windows-936
windows-950
windows-949
windows-932
windows-874
windows-1254
windows-1251
windows-1256
windows-1255
#!V!W!"!&!r%!%#%%%'%)%c%e%g%C%<!"%$%&%(%*% %-%/%1%3%5%7%9%;$=%?%A%D%F%H%J%K%L%M%N%O%R%U%X%[%^%_%`%a%b%d%f%h%i%j%k%l%m%o%s% !,!
windows-%d
!$*);^-/
SOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zones\
SOFTWARE\Microsoft\Windows\CurrentVersion\Time Zones\
SOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zones\GMT
SOFTWARE\Microsoft\Windows\CurrentVersion\Time Zones
ucol_nextSortKeyPart
ucol_getSortKey
Returns %d.
Returns. Status = %d.
Returns %d. Status = %d.
Returns %d. Status = %p.
keyMap
keyTypeData
Keys
Check failed: path.empty().
key >= base::DIR_CURRENT
e:\wk_yappyz\yappyz\core\src\base\path_service.cc
e:\wk_yappyz\yappyz\core\src\base\win\i18n.cc
kernel32.dll not found.
?#%X.y
E:\out\out\Release\chrome.exe.pdb
WINMM.dll
VERSION.dll
SHLWAPI.dll
CreateIoCompletionPort
WaitNamedPipeW
TransactNamedPipe
SetNamedPipeHandleState
GetProcessHandleCount
KERNEL32.dll
RegQueryInfoKeyW
RegCloseKey
RegEnumKeyExW
RegOpenKeyExW
RegCreateKeyExW
ADVAPI32.dll
CloseWindowStation
CreateWindowStationW
SetProcessWindowStation
USER32.dll
USERENV.dll
GetCPInfo
GetProcessHeap
GetWindowsDirectoryW
chrome.exe
SetActiveURL
zcÁ
66660666
6 6$6(6,606
00W0e0s0}0
; ;$;(;,;0;4;
2,2h2~2
1"1)161<1
1/3
4054585<5@5
<0<4<8<<<
;(=,=0=4=8=
434T4]5W5_516J6:7U7:8^8G9
5 5$585<5
3 3$383<3@3
4 4<4@4\4`4|4
0 0(0,000
4 5$5(505
\\.\pipe\GoogleCrashServices\
\\.\pipe\ChromeCrashServices
error %u
unspecified-crash-key
hurl-chunk-%i
prn-info-%d
0.0.0.0-devel
Chrome
ChromeFrame
Software\Google\ChromeFrame
debug_message.exe
debug.log
.\debug.log
Software\Classes\CLSID\{054AAE20-4BEA-4347-8A35-64A533254A9D}\LocalServer32
Software\Microsoft\Windows\CurrentVersion\Run
\StringFileInfo\xx\%ls
Apsapi.dll
eChrome_MessagePumpWindow
%s\%s.dmp
rpcrt4.dll
dbghelp.dll
x-x-x-xx-xxxxxx
HKEY_DYN_DATA
HKEY_CURRENT_CONFIG
HKEY_PERFORMANCE_NLSTEXT
HKEY_PERFORMANCE_TEXT
HKEY_PERFORMANCE_DATA
HKEY_USERS
HKEY_LOCAL_MACHINE
HKEY_CURRENT_USER
HKEY_CLASSES_ROOT
pipe\
Ckernel32.dll
ALPC Port
s0x%X
Cntdll.dll
wow_helper.exe"
{4ea16ac7-fd5a-47c3-875b-dbf4a2008c20}
ChromeCanary
registering_chrome
{7D2B3E1D-D096-4594-9D8F-A6667F12E0AC}
{A2DF06F9-A21A-44A8-8A99-8B9C84F29160}
Browse the web
Software\Microsoft\Windows\CurrentVersion\Uninstall\Yappyz
{8A69D345-D564-463C-AFF1-A69D9E530F96}
{430FD4D0-B729-4F61-AA34-91526481799D}
GoogleUpdateSetup.exe
CFEndTempOptOutCmd
CFOptInCmd
CFOptOutCmd
CFTempOptOutCmd
UninstallCmdLine
WebAccessible
chrmstp.exe
app_host.exe
chrome.dll
yappyz.exe
npchrome_frame.dll
chrome_frame_helper.exe
ChromeFrameHelperWindowClass
ChromeFrameReadyMode
chrome_launcher.exe
new_chrome.exe
old_chrome.exe
delegate_execute.exe
nacl64.exe
setup.exe
InstallerSuccessLaunchCmdLine
-chrome
-chromeframe
{8A69D345-D564-463c-AFF1-A69D9E530F96}
{5C65F4B0-3651-4514-B207-D10CB699B14B}
hXXps://clients4.google.com/firefox/metrics/collect
{8BA986DA-5100-405E-AA35-86F34A02ACBF}
DGoogle Chrome Frame
Google\Chrome Frame
Chrome in a Frame.
Uninstall Chrome Frame
Software\Microsoft\Windows\CurrentVersion\Uninstall\Google Chrome Frame
{FDA71E6F-AC4C-4a00-8B70-9958A68906BF}
DGoogle Chrome App Launcher
ChromeAppList
Software\Microsoft\Windows\CurrentVersion\Uninstall\Google Chrome App Launcher
DelegateExecute
\.exe
URL Protocol
webcal
.xhtml
.shtml
.html
Software\Microsoft\Windows\CurrentVersion\App Paths
Software\Microsoft\Windows\Shell\Associations\UrlAssociations\http\UserChoice
metro_driver.dll
Chrome_StatusTrayWindow
Chrome_MessageWindow
Reported Crashes.txt
testing_interface.dll
Certificate Revocation Lists
Custom Dictionary.txt
Login Data
Origin Bound Certs
Cached Theme.pak
Web Applications
Web Data
pepflashplayer.dll
CHROME_METRO_NAV_SEARCH_REQUEST
CHROME_METRO_GET_CURRENT_TAB_INFO
mscoree.dll
ADVAPI32.DLL
nKERNEL32.DLL
- Attempt to initialize the CRT more than once.
- CRT not initialized
- floating point support not loaded
WUSER32.DLL
00000000
333333333333333333
333333333336
K%%CollationBin
%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Application\yappyz.exe
27.1.1419.0
chrome_exe

iexplore.exe_972:




%?9-*09,*19}*09
.text
`.data
.rsrc
msvcrt.dll
KERNEL32.dll
NTDLL.DLL
USER32.dll
SHLWAPI.dll
SHDOCVW.dll
Software\Microsoft\Windows\CurrentVersion\Explorer\BrowseNewProcess
IE-X-X
rsabase.dll
System\CurrentControlSet\Control\Windows
dw15 -x -s %u
watson.microsoft.com
IEWatsonURL
%s -h %u
iedw.exe
Iexplore.XPExceptionFilter
jscript.DLL
mshtml.dll
mlang.dll
urlmon.dll
wininet.dll
shdocvw.DLL
browseui.DLL
comctl32.DLL
IEXPLORE.EXE
iexplore.pdb
ADVAPI32.dll
MsgWaitForMultipleObjects
IExplorer.EXE
IIIIIB(II<.Fg
7?_____ZZSSH%
)z.UUUUUUUU
,....Qym
````2```
{.QLQIIIKGKGKGKGKGKG
;33;33;0
8888880
8887080
browseui.dll
shdocvw.dll
6.00.2900.5512 (xpsp.080413-2105)
Windows
Operating System
6.00.2900.5512

yappyz.exe_2236:




.text
`.rdata
@.data
.rsrc
@.reloc
QPWSSh
>%u]2
xSSSh
FTPjKS
FtPj;S
C.PjRV
Ht.Ht
tE<.tA<@t=
u.WSh
<.tW<@tS
CHROME_BREAKPAD_PIPE_NAME
1.3.21.115
e:\wk_yappyz\yappyz\core\src\chrome\app\breakpad_win.cc
Check failed: index < kMaxReportedActiveExtensions.
Check failed: url_cstring.
info.size() <= kMaxReportedPrinterRecords
Could not find exported function
e:\wk_yappyz\yappyz\core\src\chrome\app\client_util.cc
RelaunchChromeBrowserWithNewCommandLineIfNeeded
Failed to load Chrome DLL from
Could not get Chrome DLL version.
ChromeMain
e:\wk_yappyz\yappyz\core\src\chrome\app\hard_error_handler_win.cc
ntdll.dll
CHROME_METRO_DLL
rsesek_key
allow-webui-compositing
chrome-frame
disable-webgl
blacklist-webgl
disable-image-transport-surface
speech-service-key
disable-webaudio
disable-web-security
disable-web-sockets
enable-experimental-webkit-features
disable-web-media-player-ms
enable-privileged-webgl-extensions
enable-tcp-fastopen
enable-viewport
ignore-certificate-errors
in-process-webgl
remote-debugging-port
renderer-cmd-prefix
testing-fixed-http-port
testing-fixed-https-port
utility-cmd-prefix
webcore-log-channels
zygote-cmd-prefix
full-memory-crash-report
e:\wk_yappyz\yappyz\core\src\base\string_util.cc
Check failed: IsWprintfFormatPortable(format).
e:\wk_yappyz\yappyz\core\src\base\string_util_win.h
Check failed: rootkey && subkey && access && disposition.
e:\wk_yappyz\yappyz\core\src\base\win\registry.cc
Check failed: rootkey && subkey && access.
Check failed: !subkey.
e:\wk_yappyz\yappyz\core\src\base\utf_string_conversions.cc
ERROR_REPORT
e:\wk_yappyz\yappyz\core\src\base\logging.cc
Check failed: other.IsValid().
e:\wk_yappyz\yappyz\core\src\base\version.cc
e:\wk_yappyz\yappyz\core\src\base\win\scoped_co_mem.h
e:\wk_yappyz\yappyz\core\src\base\win\scoped_handle.h
: Bad boy, the buffer passed to placement new is not aligned!
e:\wk_yappyz\yappyz\core\src\base\lazy_instance.h
e:\wk_yappyz\yappyz\core\src\base\command_line.cc
e:\wk_yappyz\yappyz\core\src\base\strings\string_split.cc
user.js
e:\wk_yappyz\yappyz\core\src\base\file_path.cc
Check failed: data_.get().
e:\wk_yappyz\yappyz\core\src\base\file_version_info_win.cc
%s-%Iu
Duplicate crash keys were registered
count == g_crash_keys_->size()
Check failed: !g_crash_keys_.
e:\wk_yappyz\yappyz\core\src\base\debug\crash_logging.cc
e:\wk_yappyz\yappyz\core\src\base\at_exit.cc
e:\wk_yappyz\yappyz\core\src\base\debug\trace_event_impl.cc
Check failed: it != outbuf.begin().
e:\wk_yappyz\yappyz\core\src\base\strings\string_number_conversions.cc
e:\wk_yappyz\yappyz\core\src\base\win\windows_version.cc
version_number_.minor == 2
e:\wk_yappyz\yappyz\core\src\base\win\scoped_handle.cc
e:\wk_yappyz\yappyz\core\src\base\callback_internal.cc
e:\wk_yappyz\yappyz\core\src\base\debug\trace_event_win.cc
e:\wk_yappyz\yappyz\core\src\base\threading\thread_local_win.cc
.syzygy
.thunks
Check failed: image.VerifyMagic().
e:\wk_yappyz\yappyz\core\src\base\debug\profiler.cc
e:\wk_yappyz\yappyz\core\src\base\tracked_objects.cc
0123456789
e:\wk_yappyz\yappyz\core\src\base\win\scoped_process_information.cc
CHROME_PROFILER_TIME
Check failed: !TlsGetValue(g_native_tls_key).
Check failed: value != TLS_OUT_OF_INDEXES.
e:\wk_yappyz\yappyz\core\src\base\threading\thread_local_storage_win.cc
e:\wk_yappyz\yappyz\core\src\base\values.cc
Check failed: IsStringUTF8(key).
ins_res.first->second != in_value
e:\wk_yappyz\yappyz\core\src\base\json\json_writer.cc
Dictionary keys must be quoted.
Unsupported encoding. JSON must be UTF-8.
e:\wk_yappyz\yappyz\core\src\base\json\json_reader.cc
\uX
e:\wk_yappyz\yappyz\core\src\base\json\json_parser.cc
Line: %i, column: %i, %s
AutoSelectCertificateForUrls
CloudPrintProxyEnabled
CloudPrintSubmitEnabled
CookiesAllowedForUrls
CookiesBlockedForUrls
CookiesSessionOnlyForUrls
DefaultSearchProviderAlternateURLs
DefaultSearchProviderIconURL
DefaultSearchProviderInstantURL
DefaultSearchProviderKeyword
DefaultSearchProviderSearchTermsReplacementKey
DefaultSearchProviderSearchURL
DefaultSearchProviderSuggestURL
EnableAuthNegotiatePort
EnableOriginBoundCerts
EnterpriseWebStoreName
EnterpriseWebStoreURL
HideWebStorePromo
ImagesAllowedForUrls
ImagesBlockedForUrls
ImportBookmarks
ImportHistory
ImportHomepage
ImportSavedPasswords
ImportSearchEngine
JavaScriptAllowedForUrls
JavaScriptBlockedForUrls
MetricsReportingEnabled
NotificationsAllowedForUrls
NotificationsBlockedForUrls
PasswordManagerAllowShowPasswords
PasswordManagerEnabled
PluginsAllowedForUrls
PluginsBlockedForUrls
PopupsAllowedForUrls
PopupsBlockedForUrls
ProxyBypassList
ProxyPacUrl
RemoteAccessHostDomain
RemoteAccessHostFirewallTraversal
RemoteAccessHostRequireCurtain
RemoteAccessHostRequireTwoFactor
RemoteAccessHostTalkGadgetPrefix
RestoreOnStartupURLs
URLBlacklist
URLWhitelist
ChromeFrameContentTypes
ChromeFrameRendererSettings
ChromeOsLockOnIdleSuspend
ChromeOsReleaseChannel
ChromeOsReleaseChannelDelegated
DeviceAllowRedeemChromeOsRegistrationOffers
DeviceLoginScreenSaverId
DeviceLoginScreenSaverTimeout
DeviceMetricsReportingEnabled
DeviceStartUpUrls
RenderInChromeFrameList
ReportDeviceActivityTimes
ReportDeviceBootMode
ReportDeviceLocation
ReportDeviceVersionInfo
TermsOfServiceURL
kernel32.dll
e:\wk_yappyz\yappyz\core\src\sandbox\win\src\sandbox_utils.cc
e:\wk_yappyz\yappyz\core\src\sandbox\win\src\win_utils.cc
Check failed: !path.empty().
e:\wk_yappyz\yappyz\core\src\sandbox\win\src\broker_services.cc
e:\wk_yappyz\yappyz\core\src\sandbox\win\src\sharedmem_ipc_client.cc
Check failed: name.second.
e:\wk_yappyz\yappyz\core\src\sandbox\win\src\handle_closer_agent.cc
e:\wk_yappyz\yappyz\core\src\sandbox\win\src\restricted_token_utils.cc
e:\wk_yappyz\yappyz\core\src\sandbox\win\src\sandbox_policy_base.cc
Check failed: !appcontainer_list_.get().
e:\wk_yappyz\yappyz\core\src\sandbox\win\src\app_container.cc
Check failed: attributes_.empty().
Check failed: !capabilities_.AppContainerSid.
e:\wk_yappyz\yappyz\core\src\sandbox\win\src\handle_closer.cc
e:\wk_yappyz\yappyz\core\src\sandbox\win\src\restricted_token.cc
e:\wk_yappyz\yappyz\core\src\sandbox\win\src\sid.cc
e:\wk_yappyz\yappyz\core\src\sandbox\win\src\sharedmem_ipc_server.cc
e:\wk_yappyz\yappyz\core\src\sandbox\win\src\interception.cc
e:\wk_yappyz\yappyz\core\src\sandbox\win\src\window.cc
NtOpenKey
NtCreateKey
e:\wk_yappyz\yappyz\core\src\sandbox\win\src\registry_policy.cc
e:\wk_yappyz\yappyz\core\src\sandbox\win\src\sync_policy.cc
e:\wk_yappyz\yappyz\core\src\sandbox\win\src\filesystem_policy.cc
e:\wk_yappyz\yappyz\core\src\sandbox\win\src\crosscall_server.cc
NtOpenKeyEx
e:\wk_yappyz\yappyz\core\src\sandbox\win\src\process_thread_dispatcher.cc
CreateNamedPipeW
e:\wk_yappyz\yappyz\core\src\sandbox\win\src\acl.cc
e:\wk_yappyz\yappyz\core\src\sandbox\win\src\service_resolver.cc
e:\wk_yappyz\yappyz\core\src\sandbox\win\src\wow64.cc
e:\wk_yappyz\yappyz\core\src\chrome\installer\util\google_update_settings.cc
e:\wk_yappyz\yappyz\core\src\chrome\installer\util\install_util.cc
e:\wk_yappyz\yappyz\core\src\chrome\installer\util\browser_distribution.cc
CHROME_BINARIES == type
auto-launch-chrome
chrome
chrome-sxs
do-not-launch-chrome
make-chrome-default
new-setup-exe
register-chrome-browser
register-chrome-browser-suffix
register-dev-chrome
register-url-protocol
rename-chrome-exe
remove-chrome-registration
update-setup-exe
toast-results-key
e:\wk_yappyz\yappyz\core\src\chrome\installer\util\channel_info.cc
e:\wk_yappyz\yappyz\core\src\chrome\installer\util\l10n_string_util.cc
e:\wk_yappyz\yappyz\core\src\chrome\installer\util\app_commands.cc
Skipping over key "
Failed to open key "
Cannot initialize AppCommands from an invalid key.
googlechromeframe
googlechromeapphost
e:\wk_yappyz\yappyz\core\src\chrome\installer\util\chromium_binaries_distribution.cc
e:\wk_yappyz\yappyz\core\src\chrome\installer\util\master_preferences.cc
Check failed: master_dictionary_.get().
e:\wk_yappyz\yappyz\core\src\chrome\installer\util\language_selector.cc
Cannot initialize an AppCommand from an invalid key.
e:\wk_yappyz\yappyz\core\src\chrome\installer\util\app_command.cc
auto_launch_chrome
chrome_frame
chrome_shortcut_icon_index
import_bookmarks
import_bookmarks_from_file
import_history
import_home_page
import_search_engine
do_not_launch_chrome
make_chrome_default
make_chrome_default_for_user
extensions.settings
e:\wk_yappyz\yappyz\core\src\chrome\app\image_pre_reader_win.cc
Check failed: pe_image.VerifyMagic().
reinterpret_cast<const uint8*>(section   1) <= &headers[0]   headers.size()
section == pe_image.GetImageSectionFromAddr(start   length - 1)
section == pe_image.GetImageSectionFromAddr(start)
CHROME_HEADLESS
CHROME_LOG_FILE
CHROMEOS_SESSION_LOG_DIR
CHROME_CRASHED
CHROME_RESTART
allow-http-background-page
app-notify-channel-server-url
apps-checkout-url
apps-gallery-download-url
apps-gallery-url
apps-gallery-update-url
autofill-service-url
chrome-frame-shutdown-delay
chrome-version
device-management-url
disable-extensions-http-throttling
disable-sync-passwords
disable-sync-typed-urls
disable-web-resources
enable-auth-negotiate-port
enable-autologin
enable-crxless-web-apps
enable-metrics-reporting-for-testing
enable-npn-http
enable-password-generation
enable-user-controlled-alternate-protocol-ports
enable-websocket-over-spdy
explicitly-allowed-ports
google-search-domain-check-url
ignore-urlfetcher-cert-requests
import
import-from-file
install-from-webstore
instant-url
limited-install-from-webstore
nacl-loader-cmd-prefix
origin-port-to-force-quic-on
pack-extension-key
promo-server-url
proxy-bypass-list
proxy-pac-url
reset-local-passphrase
safebrowsing-url-prefix
sync-invalidate-xmpp-login
sync-keystore-encryption
sync-notification-host-port
sync-url
sync-try-ssltcp-first-for-xmpp
try-chrome-again
use-client-login-signin-flow
variations-server-url
visit-urls
wallet-secure-service-url
wallet-service-url
web-intents-native-services-enabled
winhttp-proxy-resolver
plugins-metadata-server-url
enable-media-transfer-protocol-device-operations
CHROME_VERSION
>CHROME_PRE_READ_EXPERIMENT
managed_mode.passphrase
managed_mode.salt
profile.managed.manual_hosts
profile.managed.manual_urls
profile.exited_cleanly
profile.exit_type
session.restore_on_startup
session.urls_to_restore_on_startup
session.restore_on_startup_migrated
intl.app_locale
intl.charset_default
intl.accept_languages
intl.static_encodings
intl.global.charset_default
webkit.webprefs.global.default_font_size
webkit.webprefs.global.default_fixed_font_size
webkit.webprefs.global.minimum_font_size
webkit.webprefs.global.minimum_logical_font_size
webkit.webprefs.global.javascript_enabled
webkit.webprefs.global.javascript_can_open_windows_automatically
webkit.webprefs.global.loads_images_automatically
webkit.webprefs.global.plugins_enabled
webkit.webprefs.global.standard_font_family
webkit.webprefs.global.fixed_font_family
webkit.webprefs.global.serif_font_family
webkit.webprefs.global.sansserif_font_family
webkit.webprefs.global.cursive_font_family
webkit.webprefs.global.fantasy_font_family
webkit.webprefs.standard_font_family
webkit.webprefs.fixed_font_family
webkit.webprefs.serif_font_family
webkit.webprefs.sansserif_font_family
webkit.webprefs.cursive_font_family
webkit.webprefs.fantasy_font_family
webkit.webprefs.fonts.standard
webkit.webprefs.fonts.fixed
webkit.webprefs.fonts.serif
webkit.webprefs.fonts.sansserif
webkit.webprefs.fonts.cursive
webkit.webprefs.fonts.fantasy
webkit.webprefs.fonts.pictograph
webkit.webprefs.fonts.standard.Arab
webkit.webprefs.fonts.fixed.Arab
webkit.webprefs.fonts.serif.Arab
webkit.webprefs.fonts.sansserif.Arab
webkit.webprefs.fonts.standard.Cyrl
webkit.webprefs.fonts.fixed.Cyrl
webkit.webprefs.fonts.serif.Cyrl
webkit.webprefs.fonts.sansserif.Cyrl
webkit.webprefs.fonts.standard.Grek
webkit.webprefs.fonts.fixed.Grek
webkit.webprefs.fonts.serif.Grek
webkit.webprefs.fonts.sansserif.Grek
webkit.webprefs.fonts.standard.Jpan
webkit.webprefs.fonts.fixed.Jpan
webkit.webprefs.fonts.serif.Jpan
webkit.webprefs.fonts.sansserif.Jpan
webkit.webprefs.fonts.standard.Hang
webkit.webprefs.fonts.fixed.Hang
webkit.webprefs.fonts.serif.Hang
webkit.webprefs.fonts.sansserif.Hang
webkit.webprefs.fonts.cursive.Hang
webkit.webprefs.fonts.standard.Hans
webkit.webprefs.fonts.fixed.Hans
webkit.webprefs.fonts.serif.Hans
webkit.webprefs.fonts.sansserif.Hans
webkit.webprefs.fonts.standard.Hant
webkit.webprefs.fonts.fixed.Hant
webkit.webprefs.fonts.serif.Hant
webkit.webprefs.fonts.sansserif.Hant
webkit.webprefs.web_security_enabled
webkit.webprefs.dom_paste_enabled
webkit.webprefs.shrinks_standalone_images_to_fit
webkit.webprefs.inspector_settings
webkit.webprefs.uses_universal_detector
webkit.webprefs.text_areas_are_resizable
webkit.webprefs.java_enabled
webkit.webprefs.tabs_to_links
webkit.webprefs.allow_displaying_insecure_content
webkit.webprefs.allow_running_insecure_content
webkit.webprefs.fonts.standard.Zyyy
webkit.webprefs.fonts.fixed.Zyyy
webkit.webprefs.fonts.serif.Zyyy
webkit.webprefs.fonts.sansserif.Zyyy
webkit.webprefs.fonts.cursive.Zyyy
webkit.webprefs.fonts.fantasy.Zyyy
webkit.webprefs.fonts.pictograph.Zyyy
webkit.webprefs.default_font_size
webkit.webprefs.default_fixed_font_size
webkit.webprefs.minimum_font_size
webkit.webprefs.minimum_logical_font_size
webkit.webprefs.javascript_enabled
webkit.webprefs.javascript_can_open_windows_automatically
webkit.webprefs.loads_images_automatically
webkit.webprefs.plugins_enabled
bookmark_bar.show_on_all_tabs
bookmark_editor.expanded_nodes
profile.password_manager_enabled
profile.password_manager_allow_show_passwords
password_generation.enabled
autologin.enabled
reverse_autologin.enabled
reverse_autologin.rejected_email_list
safebrowsing.enabled
safebrowsing.reporting_enabled
safebrowsing.proceed_anyway_disabled
incognito.mode_availability
search.suggest_enabled
browser.confirm_to_quit
security.cookie_behavior
default_search_provider.synced_guid
default_search_provider.enabled
default_search_provider.search_url
default_search_provider.suggest_url
default_search_provider.instant_url
default_search_provider.icon_url
default_search_provider.encodings
default_search_provider.name
default_search_provider.keyword
default_search_provider.id
default_search_provider.prepopulate_id
default_search_provider.alternate_urls
default_search_provider.search_terms_replacement_key
download.prompt_for_download
alternate_error_pages.enabled
dns_prefetching.startup_list
dns_prefetching.host_referral_list
spdy.disabled
net.http_server_properties
spdy.servers
spdy.alternate_protocol
protocol.disabled_schemes
policy.url_blacklist
policy.url_whitelist
instant.confirm_dialog_shown
instant.enabled
instant_extended.enabled
instant_ui.zero_suggest_url_prefix
local_state.multiple_profile_prefs_version
dns_prefetching.enabled
browser.show_home_button
profile.recently_selected_encodings
browser.clear_data.browsing_history
browser.clear_data.download_history
browser.clear_data.cache
browser.clear_data.cookies
browser.clear_data.passwords
browser.clear_data.form_data
browser.clear_data.hosted_apps_data
browser.clear_data.content_licenses
browser.clear_data.time_period
browser.last_clear_browsing_data_time
browser.enable_spellchecking
browser.enabled_labs_experiments
browser.enable_autospellcorrect
browser.speechinput_censor_results
browser.speechinput_tray_notification_shown_contexts
history.saving_disabled
history.deleting_enabled
settings.force_safesearch
extensions.theme.pack
extensions.theme.id
extensions.theme.images
extensions.theme.colors
extensions.theme.tints
extensions.theme.properties
extensions.ui.developer_mode
extensions.toolbarsize
extensions.commands
extensions.sideload_wipeout_bubble_shown
plugins.last_internal_directory
plugins.plugins_list
plugins.plugins_disabled
plugins.plugins_disabled_exceptions
plugins.plugins_enabled
plugins.enabled_internal_pdf3
plugins.enabled_nacl
plugins.migrated_to_pepper_flash
plugins.show_details
plugins.allow_outdated
plugins.always_authorize
plugins.metadata
plugins.resource_cache_update
browser.check_default_browser
browser.suppress_switch_to_metro_mode_on_set_default
browser.default_browser_setting_enabled
browser.custom_chrome_frame
browser.show_omnibox_search_hint
browser.desktop_notification_position
profile.default_content_settings
profile.content_settings.clear_on_exit_migrated
profile.content_settings.pref_version
profile.content_settings.pattern_pairs
profile.content_settings.whitelist_version
profile.content_settings.plugin_whitelist
profile.block_third_party_cookies
profile.clear_site_data_on_exit
profile.default_zoom_level
profile.per_host_zoom_levels
autofill.enabled
autofill.auxiliary_profiles_enabled
autofill.positive_upload_rate
autofill.negative_upload_rate
autofill.pdm.first_run
bookmarks.editing_enabled
translate.enabled
media.default_audio_capture_device
media.default_video_capture_Device
import_saved_passwords
webstore.enterprise_store_url
webstore.enterprise_store_name
profile.avatar_index
profile.name
profile.is_managed
printing.enabled
printing.print_preview_disabled
profile.managed.default_filtering_behavior
message_center.disabled_extension_ids
profile.last_used
profile.last_active_profiles
profile.profiles_created
profile.created_by_version
profile.info_cache
ssl.rev_checking.enabled
ssl.version_min
ssl.version_max
ssl.cipher_suites.blacklist
ssl.origin_bound_certs.enabled
ssl.ssl_record_splitting.disabled
user_experience_metrics.client_id
user_experience_metrics.session_id
user_experience_metrics.low_entropy_source
user_experience_metrics.client_id_timestamp
user_experience_metrics.reporting_enabled
user_experience_metrics.initial_logs
user_experience_metrics.initial_logs_as_protobufs
user_experience_metrics.ongoing_logs
user_experience_metrics.ongoing_logs_as_protobufs
user_experience_metrics.profiles
user_experience_metrics.stability.exited_cleanly
user_experience_metrics.stability.stats_version
user_experience_metrics.stability.stats_buildtime
user_experience_metrics.stability.session_end_completed
user_experience_metrics.stability.launch_count
user_experience_metrics.stability.crash_count
user_experience_metrics.stability.incomplete_session_end_count
user_experience_metrics.stability.page_load_count
user_experience_metrics.stability.renderer_crash_count
user_experience_metrics.stability.extension_renderer_crash_count
user_experience_metrics.stability.launch_time_sec
user_experience_metrics.stability.last_timestamp_sec
user_experience_metrics.stability.plugin_stats2
user_experience_metrics.stability.renderer_hang_count
user_experience_metrics.stability.child_process_crash_count
user_experience_metrics.stability.other_user_crash_count
user_experience_metrics.stability.kernel_crash_count
user_experience_metrics.stability.system_unclean_shutdowns
user_experience_metrics.stability.breakpad_registration_ok
user_experience_metrics.stability.breakpad_registration_fail
user_experience_metrics.stability.debugger_present
user_experience_metrics.stability.debugger_not_present
uninstall_metrics.installation_date2
uninstall_metrics.page_load_count
uninstall_metrics.launch_count
uninstall_metrics.uptime_sec
uninstall_metrics.last_launch_time_sec
uninstall_metrics.last_observed_running_time_sec
browser.window_placement
task_manager.window_placement
keyword_editor.window_placement
preferences.window_placement
renderer.memory_cache.size
download.default_directory
download.directory_upgrade
savefile.default_directory
savefile.type
selectfile.last_directory
select_file_dialogs.allowed
filebrowser.tasks.default_by_mime_type
filebrowser.tasks.default_by_suffix
download.extensions_to_open
browser.hung_plugin_detect_freq
browser.plugin_message_response_timeout
spellcheck.dictionary
spellcheck.confirm_dialog_shown
spellcheck.use_spelling_service
protocol_handler.excluded_schemes
safe_browsing.client_key
safe_browsing.wrapped_key
options_window.last_tab_index
content_settings_window.last_tab_index
certificate_manager_window.last_tab_index
browser.last_known_google_url
browser.last_prompted_google_url
browser.last_redirect_origin
shutdown.type
shutdown.num_processes
shutdown.num_processes_slow
restart.last.session.on.shutdown
was.restarted
restart.switch_mode
user_experience_metrics.num_keywords
extensions.disabled
plugins.disable_plugin_finder
extensions.browseractions.container.width
extensions.autoupdate.last_check
extensions.autoupdate.next_check
extensions.alerts.initialized
extensions.allowed_install_sites
extensions.allowed_types
extensions.blacklistupdate.version
extensions.install.allowlist
extensions.install.denylist
extensions.install.forcelist
extensions.storage.garbagecollect
ntp.collapsed_foreign_sessions
ntp.most_visited_blacklist
ntp.promo_resource_cache_update
ntp.tips_resource_server
ntp.date_resource_server
ntp.shown_bookmarks_folder
ntp.shown_page
ntp.promo_desktop_session_found
ntp.webstore_enabled
ntp.app_page_names
devtools.disabled
devtools.dock_side
devtools.edited_files
devtools.file_system_paths
devtools.split_location
devtools.open_docked
sync.last_synced_time
sync.has_setup_completed
sync.keep_everything_synced
sync.bookmarks
sync.passwords
sync.preferences
sync.app_notifications
sync.app_settings
sync.apps
sync.autofill
sync.autofill_profile
sync.themes
sync.typed_urls
sync.extensions
sync.extension_settings
sync.search_engines
sync.sessions
sync.history_delete_directives
sync.synced_notifications
sync.dictionary
sync.favicon_images
sync.favicon_tracking
sync.managed
sync.suppress_start
sync.acknowledged_types
sync.max_invalidation_versions
sync.session_sync_guid
invalidator.client_id
invalidator.invalidation_state
invalidator.max_invalidation_versions
sync.encryption_bootstrap_token
sync.keystore_encryption_bootstrap_token
sync.using_secondary_passphrase
google.services.last_username
google.services.username
google.services.username_pattern
sync_promo.startup_count
sync_promo.view_count
sync_promo.user_skipped
sync_promo.show_on_first_run_allowed
sync_promo.show_ntp_bubble
sync_promo.error_message
profile.gaia_info_update_time
profile.gaia_info_picture_url
browser.web_app.create_on_desktop
browser.web_app.create_in_apps_menu
browser.web_app.create_in_quick_launch_bar
geolocation.access_token
remote_access.host_firewall_traversal
remote_access.host_require_two_factor
remote_access.host_domain
remote_access.host_talkgadget_prefix
remote_access.host_require_curtain
printing.print_preview_sticky_settings
cloud_print.service_url
cloud_print.signin_url
cloud_print.dialog_size.width
cloud_print.dialog_size.height
cloud_print.signin_dialog_size.width
cloud_print.signin_dialog_size.height
chrome_to_mobile.device_list
background_contents.registered
browser.shown_autolaunch_infobar
auth.schemes
auth.disable_negotiate_cname_lookup
auth.enable_negotiate_port
auth.server_whitelist
auth.negotiate_delegate_whitelist
auth.gssapi_library_name
auth.spdyproxy.origin
auth.allow_cross_origin_prompt
async_dns.enabled
http_received_content_length
http_original_content_length
hardware.audio_capture_enabled
hardware.video_capture_enabled
browser.clear_lso_data_enabled
browser.pepper_flash_settings_enabled
browser.disk_cache_dir
browser.disk_cache_size
browser.media_cache_size
cros.system.releaseChannel
policy.disable_cloud_policy_on_signin
cloud_print.enabled
cloud_print.proxy_id
cloud_print.auth_token
cloud_print.xmpp_auth_token
cloud_print.email
cloud_print.print_system_settings
cloud_print.enable_job_poll
cloud_print.robot_refresh_token
cloud_print.robot_email
cloud_print.connect_new_printers
cloud_print.xmpp_ping_enabled
cloud_print.xmpp_ping_timeout_sec
cloud_print.printer_blacklist
cloud_print.submit_enabled
net.max_connections_per_proxy
profile.managed_default_content_settings.cookies
profile.managed_default_content_settings.images
profile.managed_default_content_settings.javascript
profile.managed_default_content_settings.plugins
profile.managed_default_content_settings.popups
profile.managed_default_content_settings.geolocation
profile.managed_default_content_settings.notifications
profile.managed_default_content_settings.media_stream
profile.managed_cookies_allowed_for_urls
profile.managed_cookies_blocked_for_urls
profile.managed_cookies_sessiononly_for_urls
profile.managed_images_allowed_for_urls
profile.managed_images_blocked_for_urls
profile.managed_javascript_allowed_for_urls
profile.managed_javascript_blocked_for_urls
profile.managed_plugins_allowed_for_urls
profile.managed_plugins_blocked_for_urls
profile.managed_popups_allowed_for_urls
profile.managed_popups_blocked_for_urls
profile.managed_notifications_allowed_for_urls
profile.managed_notifications_blocked_for_urls
profile.managed_auto_select_certificate_for_urls
background_mode.user_created_login_item
background_mode.user_removed_login_item
background_mode.enabled
custom_handlers.registered_protocol_handlers
custom_handlers.ignored_protocol_handlers
custom_handlers.enabled
policy.device_refresh_rate
policy.user_refresh_rate
recovery_component.version
component_updater.state
media_galleries.gallery_id
media_galleries.remembered_galleries
network_profile.warnings_left
network_profile.last_warning_time
policy.last_statistics_update
app_list.profile
chrome.googleechotest.com
hXXp://pipelining.googleechotest.com/
SHELL32.dll
ole32.dll
Visual C   CRT: Not enough memory to complete call to strerror.
portuguese-brazilian
Broken pipe
Inappropriate I/O control operation
Operation not permitted
GetProcessWindowStation
operator
https
0123456789:
?456789:;<=
!"#$%&'()* ,-./0123
windows-936
windows-950
windows-949
windows-932
windows-874
windows-1254
windows-1251
windows-1256
windows-1255
#!V!W!"!&!r%!%#%%%'%)%c%e%g%C%<!"%$%&%(%*% %-%/%1%3%5%7%9%;$=%?%A%D%F%H%J%K%L%M%N%O%R%U%X%[%^%_%`%a%b%d%f%h%i%j%k%l%m%o%s% !,!
windows-%d
!$*);^-/
SOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zones\
SOFTWARE\Microsoft\Windows\CurrentVersion\Time Zones\
SOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zones\GMT
SOFTWARE\Microsoft\Windows\CurrentVersion\Time Zones
ucol_nextSortKeyPart
ucol_getSortKey
Returns %d.
Returns. Status = %d.
Returns %d. Status = %d.
Returns %d. Status = %p.
keyMap
keyTypeData
Keys
Check failed: path.empty().
key >= base::DIR_CURRENT
e:\wk_yappyz\yappyz\core\src\base\path_service.cc
e:\wk_yappyz\yappyz\core\src\base\win\i18n.cc
kernel32.dll not found.
?#%X.y
E:\out\out\Release\chrome.exe.pdb
WINMM.dll
VERSION.dll
SHLWAPI.dll
CreateIoCompletionPort
WaitNamedPipeW
TransactNamedPipe
SetNamedPipeHandleState
GetProcessHandleCount
KERNEL32.dll
RegQueryInfoKeyW
RegCloseKey
RegEnumKeyExW
RegOpenKeyExW
RegCreateKeyExW
ADVAPI32.dll
CloseWindowStation
CreateWindowStationW
SetProcessWindowStation
USER32.dll
USERENV.dll
GetCPInfo
GetProcessHeap
GetWindowsDirectoryW
chrome.exe
SetActiveURL
zcÁ
66660666
6 6$6(6,606
00W0e0s0}0
; ;$;(;,;0;4;
2,2h2~2
1"1)161<1
1/3
4054585<5@5
<0<4<8<<<
;(=,=0=4=8=
434T4]5W5_516J6:7U7:8^8G9
5 5$585<5
3 3$383<3@3
4 4<4@4\4`4|4
0 0(0,000
4 5$5(505
\\.\pipe\GoogleCrashServices\
\\.\pipe\ChromeCrashServices
error %u
unspecified-crash-key
hurl-chunk-%i
prn-info-%d
0.0.0.0-devel
Chrome
ChromeFrame
Software\Google\ChromeFrame
debug_message.exe
debug.log
.\debug.log
Software\Classes\CLSID\{054AAE20-4BEA-4347-8A35-64A533254A9D}\LocalServer32
Software\Microsoft\Windows\CurrentVersion\Run
\StringFileInfo\xx\%ls
Apsapi.dll
eChrome_MessagePumpWindow
%s\%s.dmp
rpcrt4.dll
dbghelp.dll
x-x-x-xx-xxxxxx
HKEY_DYN_DATA
HKEY_CURRENT_CONFIG
HKEY_PERFORMANCE_NLSTEXT
HKEY_PERFORMANCE_TEXT
HKEY_PERFORMANCE_DATA
HKEY_USERS
HKEY_LOCAL_MACHINE
HKEY_CURRENT_USER
HKEY_CLASSES_ROOT
pipe\
Ckernel32.dll
ALPC Port
s0x%X
Cntdll.dll
wow_helper.exe"
{4ea16ac7-fd5a-47c3-875b-dbf4a2008c20}
ChromeCanary
registering_chrome
{7D2B3E1D-D096-4594-9D8F-A6667F12E0AC}
{A2DF06F9-A21A-44A8-8A99-8B9C84F29160}
Browse the web
Software\Microsoft\Windows\CurrentVersion\Uninstall\Yappyz
{8A69D345-D564-463C-AFF1-A69D9E530F96}
{430FD4D0-B729-4F61-AA34-91526481799D}
GoogleUpdateSetup.exe
CFEndTempOptOutCmd
CFOptInCmd
CFOptOutCmd
CFTempOptOutCmd
UninstallCmdLine
WebAccessible
chrmstp.exe
app_host.exe
chrome.dll
yappyz.exe
npchrome_frame.dll
chrome_frame_helper.exe
ChromeFrameHelperWindowClass
ChromeFrameReadyMode
chrome_launcher.exe
new_chrome.exe
old_chrome.exe
delegate_execute.exe
nacl64.exe
setup.exe
InstallerSuccessLaunchCmdLine
-chrome
-chromeframe
{8A69D345-D564-463c-AFF1-A69D9E530F96}
{5C65F4B0-3651-4514-B207-D10CB699B14B}
hXXps://clients4.google.com/firefox/metrics/collect
{8BA986DA-5100-405E-AA35-86F34A02ACBF}
DGoogle Chrome Frame
Google\Chrome Frame
Chrome in a Frame.
Uninstall Chrome Frame
Software\Microsoft\Windows\CurrentVersion\Uninstall\Google Chrome Frame
{FDA71E6F-AC4C-4a00-8B70-9958A68906BF}
DGoogle Chrome App Launcher
ChromeAppList
Software\Microsoft\Windows\CurrentVersion\Uninstall\Google Chrome App Launcher
DelegateExecute
\.exe
URL Protocol
webcal
.xhtml
.shtml
.html
Software\Microsoft\Windows\CurrentVersion\App Paths
Software\Microsoft\Windows\Shell\Associations\UrlAssociations\http\UserChoice
metro_driver.dll
Chrome_StatusTrayWindow
Chrome_MessageWindow
Reported Crashes.txt
testing_interface.dll
Certificate Revocation Lists
Custom Dictionary.txt
Login Data
Origin Bound Certs
Cached Theme.pak
Web Applications
Web Data
pepflashplayer.dll
CHROME_METRO_NAV_SEARCH_REQUEST
CHROME_METRO_GET_CURRENT_TAB_INFO
mscoree.dll
ADVAPI32.DLL
nKERNEL32.DLL
- Attempt to initialize the CRT more than once.
- CRT not initialized
- floating point support not loaded
WUSER32.DLL
00000000
333333333333333333
333333333336
K%%CollationBin
%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Application\yappyz.exe
27.1.1419.0
chrome_exe

yappyz.exe_2236_rwx_2460A000_00060000:




h%Xd%

yappyz.exe_2320:




.text
`.rdata
@.data
.rsrc
@.reloc
QPWSSh
>%u]2
xSSSh
FTPjKS
FtPj;S
C.PjRV
Ht.Ht
tE<.tA<@t=
u.WSh
<.tW<@tS
CHROME_BREAKPAD_PIPE_NAME
1.3.21.115
e:\wk_yappyz\yappyz\core\src\chrome\app\breakpad_win.cc
Check failed: index < kMaxReportedActiveExtensions.
Check failed: url_cstring.
info.size() <= kMaxReportedPrinterRecords
Could not find exported function
e:\wk_yappyz\yappyz\core\src\chrome\app\client_util.cc
RelaunchChromeBrowserWithNewCommandLineIfNeeded
Failed to load Chrome DLL from
Could not get Chrome DLL version.
ChromeMain
e:\wk_yappyz\yappyz\core\src\chrome\app\hard_error_handler_win.cc
ntdll.dll
CHROME_METRO_DLL
rsesek_key
allow-webui-compositing
chrome-frame
disable-webgl
blacklist-webgl
disable-image-transport-surface
speech-service-key
disable-webaudio
disable-web-security
disable-web-sockets
enable-experimental-webkit-features
disable-web-media-player-ms
enable-privileged-webgl-extensions
enable-tcp-fastopen
enable-viewport
ignore-certificate-errors
in-process-webgl
remote-debugging-port
renderer-cmd-prefix
testing-fixed-http-port
testing-fixed-https-port
utility-cmd-prefix
webcore-log-channels
zygote-cmd-prefix
full-memory-crash-report
e:\wk_yappyz\yappyz\core\src\base\string_util.cc
Check failed: IsWprintfFormatPortable(format).
e:\wk_yappyz\yappyz\core\src\base\string_util_win.h
Check failed: rootkey && subkey && access && disposition.
e:\wk_yappyz\yappyz\core\src\base\win\registry.cc
Check failed: rootkey && subkey && access.
Check failed: !subkey.
e:\wk_yappyz\yappyz\core\src\base\utf_string_conversions.cc
ERROR_REPORT
e:\wk_yappyz\yappyz\core\src\base\logging.cc
Check failed: other.IsValid().
e:\wk_yappyz\yappyz\core\src\base\version.cc
e:\wk_yappyz\yappyz\core\src\base\win\scoped_co_mem.h
e:\wk_yappyz\yappyz\core\src\base\win\scoped_handle.h
: Bad boy, the buffer passed to placement new is not aligned!
e:\wk_yappyz\yappyz\core\src\base\lazy_instance.h
e:\wk_yappyz\yappyz\core\src\base\command_line.cc
e:\wk_yappyz\yappyz\core\src\base\strings\string_split.cc
user.js
e:\wk_yappyz\yappyz\core\src\base\file_path.cc
Check failed: data_.get().
e:\wk_yappyz\yappyz\core\src\base\file_version_info_win.cc
%s-%Iu
Duplicate crash keys were registered
count == g_crash_keys_->size()
Check failed: !g_crash_keys_.
e:\wk_yappyz\yappyz\core\src\base\debug\crash_logging.cc
e:\wk_yappyz\yappyz\core\src\base\at_exit.cc
e:\wk_yappyz\yappyz\core\src\base\debug\trace_event_impl.cc
Check failed: it != outbuf.begin().
e:\wk_yappyz\yappyz\core\src\base\strings\string_number_conversions.cc
e:\wk_yappyz\yappyz\core\src\base\win\windows_version.cc
version_number_.minor == 2
e:\wk_yappyz\yappyz\core\src\base\win\scoped_handle.cc
e:\wk_yappyz\yappyz\core\src\base\callback_internal.cc
e:\wk_yappyz\yappyz\core\src\base\debug\trace_event_win.cc
e:\wk_yappyz\yappyz\core\src\base\threading\thread_local_win.cc
.syzygy
.thunks
Check failed: image.VerifyMagic().
e:\wk_yappyz\yappyz\core\src\base\debug\profiler.cc
e:\wk_yappyz\yappyz\core\src\base\tracked_objects.cc
0123456789
e:\wk_yappyz\yappyz\core\src\base\win\scoped_process_information.cc
CHROME_PROFILER_TIME
Check failed: !TlsGetValue(g_native_tls_key).
Check failed: value != TLS_OUT_OF_INDEXES.
e:\wk_yappyz\yappyz\core\src\base\threading\thread_local_storage_win.cc
e:\wk_yappyz\yappyz\core\src\base\values.cc
Check failed: IsStringUTF8(key).
ins_res.first->second != in_value
e:\wk_yappyz\yappyz\core\src\base\json\json_writer.cc
Dictionary keys must be quoted.
Unsupported encoding. JSON must be UTF-8.
e:\wk_yappyz\yappyz\core\src\base\json\json_reader.cc
\uX
e:\wk_yappyz\yappyz\core\src\base\json\json_parser.cc
Line: %i, column: %i, %s
AutoSelectCertificateForUrls
CloudPrintProxyEnabled
CloudPrintSubmitEnabled
CookiesAllowedForUrls
CookiesBlockedForUrls
CookiesSessionOnlyForUrls
DefaultSearchProviderAlternateURLs
DefaultSearchProviderIconURL
DefaultSearchProviderInstantURL
DefaultSearchProviderKeyword
DefaultSearchProviderSearchTermsReplacementKey
DefaultSearchProviderSearchURL
DefaultSearchProviderSuggestURL
EnableAuthNegotiatePort
EnableOriginBoundCerts
EnterpriseWebStoreName
EnterpriseWebStoreURL
HideWebStorePromo
ImagesAllowedForUrls
ImagesBlockedForUrls
ImportBookmarks
ImportHistory
ImportHomepage
ImportSavedPasswords
ImportSearchEngine
JavaScriptAllowedForUrls
JavaScriptBlockedForUrls
MetricsReportingEnabled
NotificationsAllowedForUrls
NotificationsBlockedForUrls
PasswordManagerAllowShowPasswords
PasswordManagerEnabled
PluginsAllowedForUrls
PluginsBlockedForUrls
PopupsAllowedForUrls
PopupsBlockedForUrls
ProxyBypassList
ProxyPacUrl
RemoteAccessHostDomain
RemoteAccessHostFirewallTraversal
RemoteAccessHostRequireCurtain
RemoteAccessHostRequireTwoFactor
RemoteAccessHostTalkGadgetPrefix
RestoreOnStartupURLs
URLBlacklist
URLWhitelist
ChromeFrameContentTypes
ChromeFrameRendererSettings
ChromeOsLockOnIdleSuspend
ChromeOsReleaseChannel
ChromeOsReleaseChannelDelegated
DeviceAllowRedeemChromeOsRegistrationOffers
DeviceLoginScreenSaverId
DeviceLoginScreenSaverTimeout
DeviceMetricsReportingEnabled
DeviceStartUpUrls
RenderInChromeFrameList
ReportDeviceActivityTimes
ReportDeviceBootMode
ReportDeviceLocation
ReportDeviceVersionInfo
TermsOfServiceURL
kernel32.dll
e:\wk_yappyz\yappyz\core\src\sandbox\win\src\sandbox_utils.cc
e:\wk_yappyz\yappyz\core\src\sandbox\win\src\win_utils.cc
Check failed: !path.empty().
e:\wk_yappyz\yappyz\core\src\sandbox\win\src\broker_services.cc
e:\wk_yappyz\yappyz\core\src\sandbox\win\src\sharedmem_ipc_client.cc
Check failed: name.second.
e:\wk_yappyz\yappyz\core\src\sandbox\win\src\handle_closer_agent.cc
e:\wk_yappyz\yappyz\core\src\sandbox\win\src\restricted_token_utils.cc
e:\wk_yappyz\yappyz\core\src\sandbox\win\src\sandbox_policy_base.cc
Check failed: !appcontainer_list_.get().
e:\wk_yappyz\yappyz\core\src\sandbox\win\src\app_container.cc
Check failed: attributes_.empty().
Check failed: !capabilities_.AppContainerSid.
e:\wk_yappyz\yappyz\core\src\sandbox\win\src\handle_closer.cc
e:\wk_yappyz\yappyz\core\src\sandbox\win\src\restricted_token.cc
e:\wk_yappyz\yappyz\core\src\sandbox\win\src\sid.cc
e:\wk_yappyz\yappyz\core\src\sandbox\win\src\sharedmem_ipc_server.cc
e:\wk_yappyz\yappyz\core\src\sandbox\win\src\interception.cc
e:\wk_yappyz\yappyz\core\src\sandbox\win\src\window.cc
NtOpenKey
NtCreateKey
e:\wk_yappyz\yappyz\core\src\sandbox\win\src\registry_policy.cc
e:\wk_yappyz\yappyz\core\src\sandbox\win\src\sync_policy.cc
e:\wk_yappyz\yappyz\core\src\sandbox\win\src\filesystem_policy.cc
e:\wk_yappyz\yappyz\core\src\sandbox\win\src\crosscall_server.cc
NtOpenKeyEx
e:\wk_yappyz\yappyz\core\src\sandbox\win\src\process_thread_dispatcher.cc
CreateNamedPipeW
e:\wk_yappyz\yappyz\core\src\sandbox\win\src\acl.cc
e:\wk_yappyz\yappyz\core\src\sandbox\win\src\service_resolver.cc
e:\wk_yappyz\yappyz\core\src\sandbox\win\src\wow64.cc
e:\wk_yappyz\yappyz\core\src\chrome\installer\util\google_update_settings.cc
e:\wk_yappyz\yappyz\core\src\chrome\installer\util\install_util.cc
e:\wk_yappyz\yappyz\core\src\chrome\installer\util\browser_distribution.cc
CHROME_BINARIES == type
auto-launch-chrome
chrome
chrome-sxs
do-not-launch-chrome
make-chrome-default
new-setup-exe
register-chrome-browser
register-chrome-browser-suffix
register-dev-chrome
register-url-protocol
rename-chrome-exe
remove-chrome-registration
update-setup-exe
toast-results-key
e:\wk_yappyz\yappyz\core\src\chrome\installer\util\channel_info.cc
e:\wk_yappyz\yappyz\core\src\chrome\installer\util\l10n_string_util.cc
e:\wk_yappyz\yappyz\core\src\chrome\installer\util\app_commands.cc
Skipping over key "
Failed to open key "
Cannot initialize AppCommands from an invalid key.
googlechromeframe
googlechromeapphost
e:\wk_yappyz\yappyz\core\src\chrome\installer\util\chromium_binaries_distribution.cc
e:\wk_yappyz\yappyz\core\src\chrome\installer\util\master_preferences.cc
Check failed: master_dictionary_.get().
e:\wk_yappyz\yappyz\core\src\chrome\installer\util\language_selector.cc
Cannot initialize an AppCommand from an invalid key.
e:\wk_yappyz\yappyz\core\src\chrome\installer\util\app_command.cc
auto_launch_chrome
chrome_frame
chrome_shortcut_icon_index
import_bookmarks
import_bookmarks_from_file
import_history
import_home_page
import_search_engine
do_not_launch_chrome
make_chrome_default
make_chrome_default_for_user
extensions.settings
e:\wk_yappyz\yappyz\core\src\chrome\app\image_pre_reader_win.cc
Check failed: pe_image.VerifyMagic().
reinterpret_cast<const uint8*>(section   1) <= &headers[0]   headers.size()
section == pe_image.GetImageSectionFromAddr(start   length - 1)
section == pe_image.GetImageSectionFromAddr(start)
CHROME_HEADLESS
CHROME_LOG_FILE
CHROMEOS_SESSION_LOG_DIR
CHROME_CRASHED
CHROME_RESTART
allow-http-background-page
app-notify-channel-server-url
apps-checkout-url
apps-gallery-download-url
apps-gallery-url
apps-gallery-update-url
autofill-service-url
chrome-frame-shutdown-delay
chrome-version
device-management-url
disable-extensions-http-throttling
disable-sync-passwords
disable-sync-typed-urls
disable-web-resources
enable-auth-negotiate-port
enable-autologin
enable-crxless-web-apps
enable-metrics-reporting-for-testing
enable-npn-http
enable-password-generation
enable-user-controlled-alternate-protocol-ports
enable-websocket-over-spdy
explicitly-allowed-ports
google-search-domain-check-url
ignore-urlfetcher-cert-requests
import
import-from-file
install-from-webstore
instant-url
limited-install-from-webstore
nacl-loader-cmd-prefix
origin-port-to-force-quic-on
pack-extension-key
promo-server-url
proxy-bypass-list
proxy-pac-url
reset-local-passphrase
safebrowsing-url-prefix
sync-invalidate-xmpp-login
sync-keystore-encryption
sync-notification-host-port
sync-url
sync-try-ssltcp-first-for-xmpp
try-chrome-again
use-client-login-signin-flow
variations-server-url
visit-urls
wallet-secure-service-url
wallet-service-url
web-intents-native-services-enabled
winhttp-proxy-resolver
plugins-metadata-server-url
enable-media-transfer-protocol-device-operations
CHROME_VERSION
>CHROME_PRE_READ_EXPERIMENT
managed_mode.passphrase
managed_mode.salt
profile.managed.manual_hosts
profile.managed.manual_urls
profile.exited_cleanly
profile.exit_type
session.restore_on_startup
session.urls_to_restore_on_startup
session.restore_on_startup_migrated
intl.app_locale
intl.charset_default
intl.accept_languages
intl.static_encodings
intl.global.charset_default
webkit.webprefs.global.default_font_size
webkit.webprefs.global.default_fixed_font_size
webkit.webprefs.global.minimum_font_size
webkit.webprefs.global.minimum_logical_font_size
webkit.webprefs.global.javascript_enabled
webkit.webprefs.global.javascript_can_open_windows_automatically
webkit.webprefs.global.loads_images_automatically
webkit.webprefs.global.plugins_enabled
webkit.webprefs.global.standard_font_family
webkit.webprefs.global.fixed_font_family
webkit.webprefs.global.serif_font_family
webkit.webprefs.global.sansserif_font_family
webkit.webprefs.global.cursive_font_family
webkit.webprefs.global.fantasy_font_family
webkit.webprefs.standard_font_family
webkit.webprefs.fixed_font_family
webkit.webprefs.serif_font_family
webkit.webprefs.sansserif_font_family
webkit.webprefs.cursive_font_family
webkit.webprefs.fantasy_font_family
webkit.webprefs.fonts.standard
webkit.webprefs.fonts.fixed
webkit.webprefs.fonts.serif
webkit.webprefs.fonts.sansserif
webkit.webprefs.fonts.cursive
webkit.webprefs.fonts.fantasy
webkit.webprefs.fonts.pictograph
webkit.webprefs.fonts.standard.Arab
webkit.webprefs.fonts.fixed.Arab
webkit.webprefs.fonts.serif.Arab
webkit.webprefs.fonts.sansserif.Arab
webkit.webprefs.fonts.standard.Cyrl
webkit.webprefs.fonts.fixed.Cyrl
webkit.webprefs.fonts.serif.Cyrl
webkit.webprefs.fonts.sansserif.Cyrl
webkit.webprefs.fonts.standard.Grek
webkit.webprefs.fonts.fixed.Grek
webkit.webprefs.fonts.serif.Grek
webkit.webprefs.fonts.sansserif.Grek
webkit.webprefs.fonts.standard.Jpan
webkit.webprefs.fonts.fixed.Jpan
webkit.webprefs.fonts.serif.Jpan
webkit.webprefs.fonts.sansserif.Jpan
webkit.webprefs.fonts.standard.Hang
webkit.webprefs.fonts.fixed.Hang
webkit.webprefs.fonts.serif.Hang
webkit.webprefs.fonts.sansserif.Hang
webkit.webprefs.fonts.cursive.Hang
webkit.webprefs.fonts.standard.Hans
webkit.webprefs.fonts.fixed.Hans
webkit.webprefs.fonts.serif.Hans
webkit.webprefs.fonts.sansserif.Hans
webkit.webprefs.fonts.standard.Hant
webkit.webprefs.fonts.fixed.Hant
webkit.webprefs.fonts.serif.Hant
webkit.webprefs.fonts.sansserif.Hant
webkit.webprefs.web_security_enabled
webkit.webprefs.dom_paste_enabled
webkit.webprefs.shrinks_standalone_images_to_fit
webkit.webprefs.inspector_settings
webkit.webprefs.uses_universal_detector
webkit.webprefs.text_areas_are_resizable
webkit.webprefs.java_enabled
webkit.webprefs.tabs_to_links
webkit.webprefs.allow_displaying_insecure_content
webkit.webprefs.allow_running_insecure_content
webkit.webprefs.fonts.standard.Zyyy
webkit.webprefs.fonts.fixed.Zyyy
webkit.webprefs.fonts.serif.Zyyy
webkit.webprefs.fonts.sansserif.Zyyy
webkit.webprefs.fonts.cursive.Zyyy
webkit.webprefs.fonts.fantasy.Zyyy
webkit.webprefs.fonts.pictograph.Zyyy
webkit.webprefs.default_font_size
webkit.webprefs.default_fixed_font_size
webkit.webprefs.minimum_font_size
webkit.webprefs.minimum_logical_font_size
webkit.webprefs.javascript_enabled
webkit.webprefs.javascript_can_open_windows_automatically
webkit.webprefs.loads_images_automatically
webkit.webprefs.plugins_enabled
bookmark_bar.show_on_all_tabs
bookmark_editor.expanded_nodes
profile.password_manager_enabled
profile.password_manager_allow_show_passwords
password_generation.enabled
autologin.enabled
reverse_autologin.enabled
reverse_autologin.rejected_email_list
safebrowsing.enabled
safebrowsing.reporting_enabled
safebrowsing.proceed_anyway_disabled
incognito.mode_availability
search.suggest_enabled
browser.confirm_to_quit
security.cookie_behavior
default_search_provider.synced_guid
default_search_provider.enabled
default_search_provider.search_url
default_search_provider.suggest_url
default_search_provider.instant_url
default_search_provider.icon_url
default_search_provider.encodings
default_search_provider.name
default_search_provider.keyword
default_search_provider.id
default_search_provider.prepopulate_id
default_search_provider.alternate_urls
default_search_provider.search_terms_replacement_key
download.prompt_for_download
alternate_error_pages.enabled
dns_prefetching.startup_list
dns_prefetching.host_referral_list
spdy.disabled
net.http_server_properties
spdy.servers
spdy.alternate_protocol
protocol.disabled_schemes
policy.url_blacklist
policy.url_whitelist
instant.confirm_dialog_shown
instant.enabled
instant_extended.enabled
instant_ui.zero_suggest_url_prefix
local_state.multiple_profile_prefs_version
dns_prefetching.enabled
browser.show_home_button
profile.recently_selected_encodings
browser.clear_data.browsing_history
browser.clear_data.download_history
browser.clear_data.cache
browser.clear_data.cookies
browser.clear_data.passwords
browser.clear_data.form_data
browser.clear_data.hosted_apps_data
browser.clear_data.content_licenses
browser.clear_data.time_period
browser.last_clear_browsing_data_time
browser.enable_spellchecking
browser.enabled_labs_experiments
browser.enable_autospellcorrect
browser.speechinput_censor_results
browser.speechinput_tray_notification_shown_contexts
history.saving_disabled
history.deleting_enabled
settings.force_safesearch
extensions.theme.pack
extensions.theme.id
extensions.theme.images
extensions.theme.colors
extensions.theme.tints
extensions.theme.properties
extensions.ui.developer_mode
extensions.toolbarsize
extensions.commands
extensions.sideload_wipeout_bubble_shown
plugins.last_internal_directory
plugins.plugins_list
plugins.plugins_disabled
plugins.plugins_disabled_exceptions
plugins.plugins_enabled
plugins.enabled_internal_pdf3
plugins.enabled_nacl
plugins.migrated_to_pepper_flash
plugins.show_details
plugins.allow_outdated
plugins.always_authorize
plugins.metadata
plugins.resource_cache_update
browser.check_default_browser
browser.suppress_switch_to_metro_mode_on_set_default
browser.default_browser_setting_enabled
browser.custom_chrome_frame
browser.show_omnibox_search_hint
browser.desktop_notification_position
profile.default_content_settings
profile.content_settings.clear_on_exit_migrated
profile.content_settings.pref_version
profile.content_settings.pattern_pairs
profile.content_settings.whitelist_version
profile.content_settings.plugin_whitelist
profile.block_third_party_cookies
profile.clear_site_data_on_exit
profile.default_zoom_level
profile.per_host_zoom_levels
autofill.enabled
autofill.auxiliary_profiles_enabled
autofill.positive_upload_rate
autofill.negative_upload_rate
autofill.pdm.first_run
bookmarks.editing_enabled
translate.enabled
media.default_audio_capture_device
media.default_video_capture_Device
import_saved_passwords
webstore.enterprise_store_url
webstore.enterprise_store_name
profile.avatar_index
profile.name
profile.is_managed
printing.enabled
printing.print_preview_disabled
profile.managed.default_filtering_behavior
message_center.disabled_extension_ids
profile.last_used
profile.last_active_profiles
profile.profiles_created
profile.created_by_version
profile.info_cache
ssl.rev_checking.enabled
ssl.version_min
ssl.version_max
ssl.cipher_suites.blacklist
ssl.origin_bound_certs.enabled
ssl.ssl_record_splitting.disabled
user_experience_metrics.client_id
user_experience_metrics.session_id
user_experience_metrics.low_entropy_source
user_experience_metrics.client_id_timestamp
user_experience_metrics.reporting_enabled
user_experience_metrics.initial_logs
user_experience_metrics.initial_logs_as_protobufs
user_experience_metrics.ongoing_logs
user_experience_metrics.ongoing_logs_as_protobufs
user_experience_metrics.profiles
user_experience_metrics.stability.exited_cleanly
user_experience_metrics.stability.stats_version
user_experience_metrics.stability.stats_buildtime
user_experience_metrics.stability.session_end_completed
user_experience_metrics.stability.launch_count
user_experience_metrics.stability.crash_count
user_experience_metrics.stability.incomplete_session_end_count
user_experience_metrics.stability.page_load_count
user_experience_metrics.stability.renderer_crash_count
user_experience_metrics.stability.extension_renderer_crash_count
user_experience_metrics.stability.launch_time_sec
user_experience_metrics.stability.last_timestamp_sec
user_experience_metrics.stability.plugin_stats2
user_experience_metrics.stability.renderer_hang_count
user_experience_metrics.stability.child_process_crash_count
user_experience_metrics.stability.other_user_crash_count
user_experience_metrics.stability.kernel_crash_count
user_experience_metrics.stability.system_unclean_shutdowns
user_experience_metrics.stability.breakpad_registration_ok
user_experience_metrics.stability.breakpad_registration_fail
user_experience_metrics.stability.debugger_present
user_experience_metrics.stability.debugger_not_present
uninstall_metrics.installation_date2
uninstall_metrics.page_load_count
uninstall_metrics.launch_count
uninstall_metrics.uptime_sec
uninstall_metrics.last_launch_time_sec
uninstall_metrics.last_observed_running_time_sec
browser.window_placement
task_manager.window_placement
keyword_editor.window_placement
preferences.window_placement
renderer.memory_cache.size
download.default_directory
download.directory_upgrade
savefile.default_directory
savefile.type
selectfile.last_directory
select_file_dialogs.allowed
filebrowser.tasks.default_by_mime_type
filebrowser.tasks.default_by_suffix
download.extensions_to_open
browser.hung_plugin_detect_freq
browser.plugin_message_response_timeout
spellcheck.dictionary
spellcheck.confirm_dialog_shown
spellcheck.use_spelling_service
protocol_handler.excluded_schemes
safe_browsing.client_key
safe_browsing.wrapped_key
options_window.last_tab_index
content_settings_window.last_tab_index
certificate_manager_window.last_tab_index
browser.last_known_google_url
browser.last_prompted_google_url
browser.last_redirect_origin
shutdown.type
shutdown.num_processes
shutdown.num_processes_slow
restart.last.session.on.shutdown
was.restarted
restart.switch_mode
user_experience_metrics.num_keywords
extensions.disabled
plugins.disable_plugin_finder
extensions.browseractions.container.width
extensions.autoupdate.last_check
extensions.autoupdate.next_check
extensions.alerts.initialized
extensions.allowed_install_sites
extensions.allowed_types
extensions.blacklistupdate.version
extensions.install.allowlist
extensions.install.denylist
extensions.install.forcelist
extensions.storage.garbagecollect
ntp.collapsed_foreign_sessions
ntp.most_visited_blacklist
ntp.promo_resource_cache_update
ntp.tips_resource_server
ntp.date_resource_server
ntp.shown_bookmarks_folder
ntp.shown_page
ntp.promo_desktop_session_found
ntp.webstore_enabled
ntp.app_page_names
devtools.disabled
devtools.dock_side
devtools.edited_files
devtools.file_system_paths
devtools.split_location
devtools.open_docked
sync.last_synced_time
sync.has_setup_completed
sync.keep_everything_synced
sync.bookmarks
sync.passwords
sync.preferences
sync.app_notifications
sync.app_settings
sync.apps
sync.autofill
sync.autofill_profile
sync.themes
sync.typed_urls
sync.extensions
sync.extension_settings
sync.search_engines
sync.sessions
sync.history_delete_directives
sync.synced_notifications
sync.dictionary
sync.favicon_images
sync.favicon_tracking
sync.managed
sync.suppress_start
sync.acknowledged_types
sync.max_invalidation_versions
sync.session_sync_guid
invalidator.client_id
invalidator.invalidation_state
invalidator.max_invalidation_versions
sync.encryption_bootstrap_token
sync.keystore_encryption_bootstrap_token
sync.using_secondary_passphrase
google.services.last_username
google.services.username
google.services.username_pattern
sync_promo.startup_count
sync_promo.view_count
sync_promo.user_skipped
sync_promo.show_on_first_run_allowed
sync_promo.show_ntp_bubble
sync_promo.error_message
profile.gaia_info_update_time
profile.gaia_info_picture_url
browser.web_app.create_on_desktop
browser.web_app.create_in_apps_menu
browser.web_app.create_in_quick_launch_bar
geolocation.access_token
remote_access.host_firewall_traversal
remote_access.host_require_two_factor
remote_access.host_domain
remote_access.host_talkgadget_prefix
remote_access.host_require_curtain
printing.print_preview_sticky_settings
cloud_print.service_url
cloud_print.signin_url
cloud_print.dialog_size.width
cloud_print.dialog_size.height
cloud_print.signin_dialog_size.width
cloud_print.signin_dialog_size.height
chrome_to_mobile.device_list
background_contents.registered
browser.shown_autolaunch_infobar
auth.schemes
auth.disable_negotiate_cname_lookup
auth.enable_negotiate_port
auth.server_whitelist
auth.negotiate_delegate_whitelist
auth.gssapi_library_name
auth.spdyproxy.origin
auth.allow_cross_origin_prompt
async_dns.enabled
http_received_content_length
http_original_content_length
hardware.audio_capture_enabled
hardware.video_capture_enabled
browser.clear_lso_data_enabled
browser.pepper_flash_settings_enabled
browser.disk_cache_dir
browser.disk_cache_size
browser.media_cache_size
cros.system.releaseChannel
policy.disable_cloud_policy_on_signin
cloud_print.enabled
cloud_print.proxy_id
cloud_print.auth_token
cloud_print.xmpp_auth_token
cloud_print.email
cloud_print.print_system_settings
cloud_print.enable_job_poll
cloud_print.robot_refresh_token
cloud_print.robot_email
cloud_print.connect_new_printers
cloud_print.xmpp_ping_enabled
cloud_print.xmpp_ping_timeout_sec
cloud_print.printer_blacklist
cloud_print.submit_enabled
net.max_connections_per_proxy
profile.managed_default_content_settings.cookies
profile.managed_default_content_settings.images
profile.managed_default_content_settings.javascript
profile.managed_default_content_settings.plugins
profile.managed_default_content_settings.popups
profile.managed_default_content_settings.geolocation
profile.managed_default_content_settings.notifications
profile.managed_default_content_settings.media_stream
profile.managed_cookies_allowed_for_urls
profile.managed_cookies_blocked_for_urls
profile.managed_cookies_sessiononly_for_urls
profile.managed_images_allowed_for_urls
profile.managed_images_blocked_for_urls
profile.managed_javascript_allowed_for_urls
profile.managed_javascript_blocked_for_urls
profile.managed_plugins_allowed_for_urls
profile.managed_plugins_blocked_for_urls
profile.managed_popups_allowed_for_urls
profile.managed_popups_blocked_for_urls
profile.managed_notifications_allowed_for_urls
profile.managed_notifications_blocked_for_urls
profile.managed_auto_select_certificate_for_urls
background_mode.user_created_login_item
background_mode.user_removed_login_item
background_mode.enabled
custom_handlers.registered_protocol_handlers
custom_handlers.ignored_protocol_handlers
custom_handlers.enabled
policy.device_refresh_rate
policy.user_refresh_rate
recovery_component.version
component_updater.state
media_galleries.gallery_id
media_galleries.remembered_galleries
network_profile.warnings_left
network_profile.last_warning_time
policy.last_statistics_update
app_list.profile
chrome.googleechotest.com
hXXp://pipelining.googleechotest.com/
SHELL32.dll
ole32.dll
Visual C   CRT: Not enough memory to complete call to strerror.
portuguese-brazilian
Broken pipe
Inappropriate I/O control operation
Operation not permitted
GetProcessWindowStation
operator
https
0123456789:
?456789:;<=
!"#$%&'()* ,-./0123
windows-936
windows-950
windows-949
windows-932
windows-874
windows-1254
windows-1251
windows-1256
windows-1255
#!V!W!"!&!r%!%#%%%'%)%c%e%g%C%<!"%$%&%(%*% %-%/%1%3%5%7%9%;$=%?%A%D%F%H%J%K%L%M%N%O%R%U%X%[%^%_%`%a%b%d%f%h%i%j%k%l%m%o%s% !,!
windows-%d
!$*);^-/
SOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zones\
SOFTWARE\Microsoft\Windows\CurrentVersion\Time Zones\
SOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zones\GMT
SOFTWARE\Microsoft\Windows\CurrentVersion\Time Zones
ucol_nextSortKeyPart
ucol_getSortKey
Returns %d.
Returns. Status = %d.
Returns %d. Status = %d.
Returns %d. Status = %p.
keyMap
keyTypeData
Keys
Check failed: path.empty().
key >= base::DIR_CURRENT
e:\wk_yappyz\yappyz\core\src\base\path_service.cc
e:\wk_yappyz\yappyz\core\src\base\win\i18n.cc
kernel32.dll not found.
?#%X.y
E:\out\out\Release\chrome.exe.pdb
WINMM.dll
VERSION.dll
SHLWAPI.dll
CreateIoCompletionPort
WaitNamedPipeW
TransactNamedPipe
SetNamedPipeHandleState
GetProcessHandleCount
KERNEL32.dll
RegQueryInfoKeyW
RegCloseKey
RegEnumKeyExW
RegOpenKeyExW
RegCreateKeyExW
ADVAPI32.dll
CloseWindowStation
CreateWindowStationW
SetProcessWindowStation
USER32.dll
USERENV.dll
GetCPInfo
GetProcessHeap
GetWindowsDirectoryW
chrome.exe
SetActiveURL
zcÁ
66660666
6 6$6(6,606
00W0e0s0}0
; ;$;(;,;0;4;
2,2h2~2
1"1)161<1
1/3
4054585<5@5
<0<4<8<<<
;(=,=0=4=8=
434T4]5W5_516J6:7U7:8^8G9
5 5$585<5
3 3$383<3@3
4 4<4@4\4`4|4
0 0(0,000
4 5$5(505
\\.\pipe\GoogleCrashServices\
\\.\pipe\ChromeCrashServices
error %u
unspecified-crash-key
hurl-chunk-%i
prn-info-%d
0.0.0.0-devel
Chrome
ChromeFrame
Software\Google\ChromeFrame
debug_message.exe
debug.log
.\debug.log
Software\Classes\CLSID\{054AAE20-4BEA-4347-8A35-64A533254A9D}\LocalServer32
Software\Microsoft\Windows\CurrentVersion\Run
\StringFileInfo\xx\%ls
Apsapi.dll
eChrome_MessagePumpWindow
%s\%s.dmp
rpcrt4.dll
dbghelp.dll
x-x-x-xx-xxxxxx
HKEY_DYN_DATA
HKEY_CURRENT_CONFIG
HKEY_PERFORMANCE_NLSTEXT
HKEY_PERFORMANCE_TEXT
HKEY_PERFORMANCE_DATA
HKEY_USERS
HKEY_LOCAL_MACHINE
HKEY_CURRENT_USER
HKEY_CLASSES_ROOT
pipe\
Ckernel32.dll
ALPC Port
s0x%X
Cntdll.dll
wow_helper.exe"
{4ea16ac7-fd5a-47c3-875b-dbf4a2008c20}
ChromeCanary
registering_chrome
{7D2B3E1D-D096-4594-9D8F-A6667F12E0AC}
{A2DF06F9-A21A-44A8-8A99-8B9C84F29160}
Browse the web
Software\Microsoft\Windows\CurrentVersion\Uninstall\Yappyz
{8A69D345-D564-463C-AFF1-A69D9E530F96}
{430FD4D0-B729-4F61-AA34-91526481799D}
GoogleUpdateSetup.exe
CFEndTempOptOutCmd
CFOptInCmd
CFOptOutCmd
CFTempOptOutCmd
UninstallCmdLine
WebAccessible
chrmstp.exe
app_host.exe
chrome.dll
yappyz.exe
npchrome_frame.dll
chrome_frame_helper.exe
ChromeFrameHelperWindowClass
ChromeFrameReadyMode
chrome_launcher.exe
new_chrome.exe
old_chrome.exe
delegate_execute.exe
nacl64.exe
setup.exe
InstallerSuccessLaunchCmdLine
-chrome
-chromeframe
{8A69D345-D564-463c-AFF1-A69D9E530F96}
{5C65F4B0-3651-4514-B207-D10CB699B14B}
hXXps://clients4.google.com/firefox/metrics/collect
{8BA986DA-5100-405E-AA35-86F34A02ACBF}
DGoogle Chrome Frame
Google\Chrome Frame
Chrome in a Frame.
Uninstall Chrome Frame
Software\Microsoft\Windows\CurrentVersion\Uninstall\Google Chrome Frame
{FDA71E6F-AC4C-4a00-8B70-9958A68906BF}
DGoogle Chrome App Launcher
ChromeAppList
Software\Microsoft\Windows\CurrentVersion\Uninstall\Google Chrome App Launcher
DelegateExecute
\.exe
URL Protocol
webcal
.xhtml
.shtml
.html
Software\Microsoft\Windows\CurrentVersion\App Paths
Software\Microsoft\Windows\Shell\Associations\UrlAssociations\http\UserChoice
metro_driver.dll
Chrome_StatusTrayWindow
Chrome_MessageWindow
Reported Crashes.txt
testing_interface.dll
Certificate Revocation Lists
Custom Dictionary.txt
Login Data
Origin Bound Certs
Cached Theme.pak
Web Applications
Web Data
pepflashplayer.dll
CHROME_METRO_NAV_SEARCH_REQUEST
CHROME_METRO_GET_CURRENT_TAB_INFO
mscoree.dll
ADVAPI32.DLL
nKERNEL32.DLL
- Attempt to initialize the CRT more than once.
- CRT not initialized
- floating point support not loaded
WUSER32.DLL
00000000
333333333333333333
333333333336
K%%CollationBin
%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Application\yappyz.exe
27.1.1419.0
chrome_exe

yappyz.exe_2320_rwx_3510A000_000F5000:




=.DOU
=.DOUu

yappyz.exe_2528:




.text
`.rdata
@.data
.rsrc
@.reloc
QPWSSh
>%u]2
xSSSh
FTPjKS
FtPj;S
C.PjRV
Ht.Ht
tE<.tA<@t=
u.WSh
<.tW<@tS
CHROME_BREAKPAD_PIPE_NAME
1.3.21.115
e:\wk_yappyz\yappyz\core\src\chrome\app\breakpad_win.cc
Check failed: index < kMaxReportedActiveExtensions.
Check failed: url_cstring.
info.size() <= kMaxReportedPrinterRecords
Could not find exported function
e:\wk_yappyz\yappyz\core\src\chrome\app\client_util.cc
RelaunchChromeBrowserWithNewCommandLineIfNeeded
Failed to load Chrome DLL from
Could not get Chrome DLL version.
ChromeMain
e:\wk_yappyz\yappyz\core\src\chrome\app\hard_error_handler_win.cc
ntdll.dll
CHROME_METRO_DLL
rsesek_key
allow-webui-compositing
chrome-frame
disable-webgl
blacklist-webgl
disable-image-transport-surface
speech-service-key
disable-webaudio
disable-web-security
disable-web-sockets
enable-experimental-webkit-features
disable-web-media-player-ms
enable-privileged-webgl-extensions
enable-tcp-fastopen
enable-viewport
ignore-certificate-errors
in-process-webgl
remote-debugging-port
renderer-cmd-prefix
testing-fixed-http-port
testing-fixed-https-port
utility-cmd-prefix
webcore-log-channels
zygote-cmd-prefix
full-memory-crash-report
e:\wk_yappyz\yappyz\core\src\base\string_util.cc
Check failed: IsWprintfFormatPortable(format).
e:\wk_yappyz\yappyz\core\src\base\string_util_win.h
Check failed: rootkey && subkey && access && disposition.
e:\wk_yappyz\yappyz\core\src\base\win\registry.cc
Check failed: rootkey && subkey && access.
Check failed: !subkey.
e:\wk_yappyz\yappyz\core\src\base\utf_string_conversions.cc
ERROR_REPORT
e:\wk_yappyz\yappyz\core\src\base\logging.cc
Check failed: other.IsValid().
e:\wk_yappyz\yappyz\core\src\base\version.cc
e:\wk_yappyz\yappyz\core\src\base\win\scoped_co_mem.h
e:\wk_yappyz\yappyz\core\src\base\win\scoped_handle.h
: Bad boy, the buffer passed to placement new is not aligned!
e:\wk_yappyz\yappyz\core\src\base\lazy_instance.h
e:\wk_yappyz\yappyz\core\src\base\command_line.cc
e:\wk_yappyz\yappyz\core\src\base\strings\string_split.cc
user.js
e:\wk_yappyz\yappyz\core\src\base\file_path.cc
Check failed: data_.get().
e:\wk_yappyz\yappyz\core\src\base\file_version_info_win.cc
%s-%Iu
Duplicate crash keys were registered
count == g_crash_keys_->size()
Check failed: !g_crash_keys_.
e:\wk_yappyz\yappyz\core\src\base\debug\crash_logging.cc
e:\wk_yappyz\yappyz\core\src\base\at_exit.cc
e:\wk_yappyz\yappyz\core\src\base\debug\trace_event_impl.cc
Check failed: it != outbuf.begin().
e:\wk_yappyz\yappyz\core\src\base\strings\string_number_conversions.cc
e:\wk_yappyz\yappyz\core\src\base\win\windows_version.cc
version_number_.minor == 2
e:\wk_yappyz\yappyz\core\src\base\win\scoped_handle.cc
e:\wk_yappyz\yappyz\core\src\base\callback_internal.cc
e:\wk_yappyz\yappyz\core\src\base\debug\trace_event_win.cc
e:\wk_yappyz\yappyz\core\src\base\threading\thread_local_win.cc
.syzygy
.thunks
Check failed: image.VerifyMagic().
e:\wk_yappyz\yappyz\core\src\base\debug\profiler.cc
e:\wk_yappyz\yappyz\core\src\base\tracked_objects.cc
0123456789
e:\wk_yappyz\yappyz\core\src\base\win\scoped_process_information.cc
CHROME_PROFILER_TIME
Check failed: !TlsGetValue(g_native_tls_key).
Check failed: value != TLS_OUT_OF_INDEXES.
e:\wk_yappyz\yappyz\core\src\base\threading\thread_local_storage_win.cc
e:\wk_yappyz\yappyz\core\src\base\values.cc
Check failed: IsStringUTF8(key).
ins_res.first->second != in_value
e:\wk_yappyz\yappyz\core\src\base\json\json_writer.cc
Dictionary keys must be quoted.
Unsupported encoding. JSON must be UTF-8.
e:\wk_yappyz\yappyz\core\src\base\json\json_reader.cc
\uX
e:\wk_yappyz\yappyz\core\src\base\json\json_parser.cc
Line: %i, column: %i, %s
AutoSelectCertificateForUrls
CloudPrintProxyEnabled
CloudPrintSubmitEnabled
CookiesAllowedForUrls
CookiesBlockedForUrls
CookiesSessionOnlyForUrls
DefaultSearchProviderAlternateURLs
DefaultSearchProviderIconURL
DefaultSearchProviderInstantURL
DefaultSearchProviderKeyword
DefaultSearchProviderSearchTermsReplacementKey
DefaultSearchProviderSearchURL
DefaultSearchProviderSuggestURL
EnableAuthNegotiatePort
EnableOriginBoundCerts
EnterpriseWebStoreName
EnterpriseWebStoreURL
HideWebStorePromo
ImagesAllowedForUrls
ImagesBlockedForUrls
ImportBookmarks
ImportHistory
ImportHomepage
ImportSavedPasswords
ImportSearchEngine
JavaScriptAllowedForUrls
JavaScriptBlockedForUrls
MetricsReportingEnabled
NotificationsAllowedForUrls
NotificationsBlockedForUrls
PasswordManagerAllowShowPasswords
PasswordManagerEnabled
PluginsAllowedForUrls
PluginsBlockedForUrls
PopupsAllowedForUrls
PopupsBlockedForUrls
ProxyBypassList
ProxyPacUrl
RemoteAccessHostDomain
RemoteAccessHostFirewallTraversal
RemoteAccessHostRequireCurtain
RemoteAccessHostRequireTwoFactor
RemoteAccessHostTalkGadgetPrefix
RestoreOnStartupURLs
URLBlacklist
URLWhitelist
ChromeFrameContentTypes
ChromeFrameRendererSettings
ChromeOsLockOnIdleSuspend
ChromeOsReleaseChannel
ChromeOsReleaseChannelDelegated
DeviceAllowRedeemChromeOsRegistrationOffers
DeviceLoginScreenSaverId
DeviceLoginScreenSaverTimeout
DeviceMetricsReportingEnabled
DeviceStartUpUrls
RenderInChromeFrameList
ReportDeviceActivityTimes
ReportDeviceBootMode
ReportDeviceLocation
ReportDeviceVersionInfo
TermsOfServiceURL
kernel32.dll
e:\wk_yappyz\yappyz\core\src\sandbox\win\src\sandbox_utils.cc
e:\wk_yappyz\yappyz\core\src\sandbox\win\src\win_utils.cc
Check failed: !path.empty().
e:\wk_yappyz\yappyz\core\src\sandbox\win\src\broker_services.cc
e:\wk_yappyz\yappyz\core\src\sandbox\win\src\sharedmem_ipc_client.cc
Check failed: name.second.
e:\wk_yappyz\yappyz\core\src\sandbox\win\src\handle_closer_agent.cc
e:\wk_yappyz\yappyz\core\src\sandbox\win\src\restricted_token_utils.cc
e:\wk_yappyz\yappyz\core\src\sandbox\win\src\sandbox_policy_base.cc
Check failed: !appcontainer_list_.get().
e:\wk_yappyz\yappyz\core\src\sandbox\win\src\app_container.cc
Check failed: attributes_.empty().
Check failed: !capabilities_.AppContainerSid.
e:\wk_yappyz\yappyz\core\src\sandbox\win\src\handle_closer.cc
e:\wk_yappyz\yappyz\core\src\sandbox\win\src\restricted_token.cc
e:\wk_yappyz\yappyz\core\src\sandbox\win\src\sid.cc
e:\wk_yappyz\yappyz\core\src\sandbox\win\src\sharedmem_ipc_server.cc
e:\wk_yappyz\yappyz\core\src\sandbox\win\src\interception.cc
e:\wk_yappyz\yappyz\core\src\sandbox\win\src\window.cc
NtOpenKey
NtCreateKey
e:\wk_yappyz\yappyz\core\src\sandbox\win\src\registry_policy.cc
e:\wk_yappyz\yappyz\core\src\sandbox\win\src\sync_policy.cc
e:\wk_yappyz\yappyz\core\src\sandbox\win\src\filesystem_policy.cc
e:\wk_yappyz\yappyz\core\src\sandbox\win\src\crosscall_server.cc
NtOpenKeyEx
e:\wk_yappyz\yappyz\core\src\sandbox\win\src\process_thread_dispatcher.cc
CreateNamedPipeW
e:\wk_yappyz\yappyz\core\src\sandbox\win\src\acl.cc
e:\wk_yappyz\yappyz\core\src\sandbox\win\src\service_resolver.cc
e:\wk_yappyz\yappyz\core\src\sandbox\win\src\wow64.cc
e:\wk_yappyz\yappyz\core\src\chrome\installer\util\google_update_settings.cc
e:\wk_yappyz\yappyz\core\src\chrome\installer\util\install_util.cc
e:\wk_yappyz\yappyz\core\src\chrome\installer\util\browser_distribution.cc
CHROME_BINARIES == type
auto-launch-chrome
chrome
chrome-sxs
do-not-launch-chrome
make-chrome-default
new-setup-exe
register-chrome-browser
register-chrome-browser-suffix
register-dev-chrome
register-url-protocol
rename-chrome-exe
remove-chrome-registration
update-setup-exe
toast-results-key
e:\wk_yappyz\yappyz\core\src\chrome\installer\util\channel_info.cc
e:\wk_yappyz\yappyz\core\src\chrome\installer\util\l10n_string_util.cc
e:\wk_yappyz\yappyz\core\src\chrome\installer\util\app_commands.cc
Skipping over key "
Failed to open key "
Cannot initialize AppCommands from an invalid key.
googlechromeframe
googlechromeapphost
e:\wk_yappyz\yappyz\core\src\chrome\installer\util\chromium_binaries_distribution.cc
e:\wk_yappyz\yappyz\core\src\chrome\installer\util\master_preferences.cc
Check failed: master_dictionary_.get().
e:\wk_yappyz\yappyz\core\src\chrome\installer\util\language_selector.cc
Cannot initialize an AppCommand from an invalid key.
e:\wk_yappyz\yappyz\core\src\chrome\installer\util\app_command.cc
auto_launch_chrome
chrome_frame
chrome_shortcut_icon_index
import_bookmarks
import_bookmarks_from_file
import_history
import_home_page
import_search_engine
do_not_launch_chrome
make_chrome_default
make_chrome_default_for_user
extensions.settings
e:\wk_yappyz\yappyz\core\src\chrome\app\image_pre_reader_win.cc
Check failed: pe_image.VerifyMagic().
reinterpret_cast<const uint8*>(section   1) <= &headers[0]   headers.size()
section == pe_image.GetImageSectionFromAddr(start   length - 1)
section == pe_image.GetImageSectionFromAddr(start)
CHROME_HEADLESS
CHROME_LOG_FILE
CHROMEOS_SESSION_LOG_DIR
CHROME_CRASHED
CHROME_RESTART
allow-http-background-page
app-notify-channel-server-url
apps-checkout-url
apps-gallery-download-url
apps-gallery-url
apps-gallery-update-url
autofill-service-url
chrome-frame-shutdown-delay
chrome-version
device-management-url
disable-extensions-http-throttling
disable-sync-passwords
disable-sync-typed-urls
disable-web-resources
enable-auth-negotiate-port
enable-autologin
enable-crxless-web-apps
enable-metrics-reporting-for-testing
enable-npn-http
enable-password-generation
enable-user-controlled-alternate-protocol-ports
enable-websocket-over-spdy
explicitly-allowed-ports
google-search-domain-check-url
ignore-urlfetcher-cert-requests
import
import-from-file
install-from-webstore
instant-url
limited-install-from-webstore
nacl-loader-cmd-prefix
origin-port-to-force-quic-on
pack-extension-key
promo-server-url
proxy-bypass-list
proxy-pac-url
reset-local-passphrase
safebrowsing-url-prefix
sync-invalidate-xmpp-login
sync-keystore-encryption
sync-notification-host-port
sync-url
sync-try-ssltcp-first-for-xmpp
try-chrome-again
use-client-login-signin-flow
variations-server-url
visit-urls
wallet-secure-service-url
wallet-service-url
web-intents-native-services-enabled
winhttp-proxy-resolver
plugins-metadata-server-url
enable-media-transfer-protocol-device-operations
CHROME_VERSION
>CHROME_PRE_READ_EXPERIMENT
managed_mode.passphrase
managed_mode.salt
profile.managed.manual_hosts
profile.managed.manual_urls
profile.exited_cleanly
profile.exit_type
session.restore_on_startup
session.urls_to_restore_on_startup
session.restore_on_startup_migrated
intl.app_locale
intl.charset_default
intl.accept_languages
intl.static_encodings
intl.global.charset_default
webkit.webprefs.global.default_font_size
webkit.webprefs.global.default_fixed_font_size
webkit.webprefs.global.minimum_font_size
webkit.webprefs.global.minimum_logical_font_size
webkit.webprefs.global.javascript_enabled
webkit.webprefs.global.javascript_can_open_windows_automatically
webkit.webprefs.global.loads_images_automatically
webkit.webprefs.global.plugins_enabled
webkit.webprefs.global.standard_font_family
webkit.webprefs.global.fixed_font_family
webkit.webprefs.global.serif_font_family
webkit.webprefs.global.sansserif_font_family
webkit.webprefs.global.cursive_font_family
webkit.webprefs.global.fantasy_font_family
webkit.webprefs.standard_font_family
webkit.webprefs.fixed_font_family
webkit.webprefs.serif_font_family
webkit.webprefs.sansserif_font_family
webkit.webprefs.cursive_font_family
webkit.webprefs.fantasy_font_family
webkit.webprefs.fonts.standard
webkit.webprefs.fonts.fixed
webkit.webprefs.fonts.serif
webkit.webprefs.fonts.sansserif
webkit.webprefs.fonts.cursive
webkit.webprefs.fonts.fantasy
webkit.webprefs.fonts.pictograph
webkit.webprefs.fonts.standard.Arab
webkit.webprefs.fonts.fixed.Arab
webkit.webprefs.fonts.serif.Arab
webkit.webprefs.fonts.sansserif.Arab
webkit.webprefs.fonts.standard.Cyrl
webkit.webprefs.fonts.fixed.Cyrl
webkit.webprefs.fonts.serif.Cyrl
webkit.webprefs.fonts.sansserif.Cyrl
webkit.webprefs.fonts.standard.Grek
webkit.webprefs.fonts.fixed.Grek
webkit.webprefs.fonts.serif.Grek
webkit.webprefs.fonts.sansserif.Grek
webkit.webprefs.fonts.standard.Jpan
webkit.webprefs.fonts.fixed.Jpan
webkit.webprefs.fonts.serif.Jpan
webkit.webprefs.fonts.sansserif.Jpan
webkit.webprefs.fonts.standard.Hang
webkit.webprefs.fonts.fixed.Hang
webkit.webprefs.fonts.serif.Hang
webkit.webprefs.fonts.sansserif.Hang
webkit.webprefs.fonts.cursive.Hang
webkit.webprefs.fonts.standard.Hans
webkit.webprefs.fonts.fixed.Hans
webkit.webprefs.fonts.serif.Hans
webkit.webprefs.fonts.sansserif.Hans
webkit.webprefs.fonts.standard.Hant
webkit.webprefs.fonts.fixed.Hant
webkit.webprefs.fonts.serif.Hant
webkit.webprefs.fonts.sansserif.Hant
webkit.webprefs.web_security_enabled
webkit.webprefs.dom_paste_enabled
webkit.webprefs.shrinks_standalone_images_to_fit
webkit.webprefs.inspector_settings
webkit.webprefs.uses_universal_detector
webkit.webprefs.text_areas_are_resizable
webkit.webprefs.java_enabled
webkit.webprefs.tabs_to_links
webkit.webprefs.allow_displaying_insecure_content
webkit.webprefs.allow_running_insecure_content
webkit.webprefs.fonts.standard.Zyyy
webkit.webprefs.fonts.fixed.Zyyy
webkit.webprefs.fonts.serif.Zyyy
webkit.webprefs.fonts.sansserif.Zyyy
webkit.webprefs.fonts.cursive.Zyyy
webkit.webprefs.fonts.fantasy.Zyyy
webkit.webprefs.fonts.pictograph.Zyyy
webkit.webprefs.default_font_size
webkit.webprefs.default_fixed_font_size
webkit.webprefs.minimum_font_size
webkit.webprefs.minimum_logical_font_size
webkit.webprefs.javascript_enabled
webkit.webprefs.javascript_can_open_windows_automatically
webkit.webprefs.loads_images_automatically
webkit.webprefs.plugins_enabled
bookmark_bar.show_on_all_tabs
bookmark_editor.expanded_nodes
profile.password_manager_enabled
profile.password_manager_allow_show_passwords
password_generation.enabled
autologin.enabled
reverse_autologin.enabled
reverse_autologin.rejected_email_list
safebrowsing.enabled
safebrowsing.reporting_enabled
safebrowsing.proceed_anyway_disabled
incognito.mode_availability
search.suggest_enabled
browser.confirm_to_quit
security.cookie_behavior
default_search_provider.synced_guid
default_search_provider.enabled
default_search_provider.search_url
default_search_provider.suggest_url
default_search_provider.instant_url
default_search_provider.icon_url
default_search_provider.encodings
default_search_provider.name
default_search_provider.keyword
default_search_provider.id
default_search_provider.prepopulate_id
default_search_provider.alternate_urls
default_search_provider.search_terms_replacement_key
download.prompt_for_download
alternate_error_pages.enabled
dns_prefetching.startup_list
dns_prefetching.host_referral_list
spdy.disabled
net.http_server_properties
spdy.servers
spdy.alternate_protocol
protocol.disabled_schemes
policy.url_blacklist
policy.url_whitelist
instant.confirm_dialog_shown
instant.enabled
instant_extended.enabled
instant_ui.zero_suggest_url_prefix
local_state.multiple_profile_prefs_version
dns_prefetching.enabled
browser.show_home_button
profile.recently_selected_encodings
browser.clear_data.browsing_history
browser.clear_data.download_history
browser.clear_data.cache
browser.clear_data.cookies
browser.clear_data.passwords
browser.clear_data.form_data
browser.clear_data.hosted_apps_data
browser.clear_data.content_licenses
browser.clear_data.time_period
browser.last_clear_browsing_data_time
browser.enable_spellchecking
browser.enabled_labs_experiments
browser.enable_autospellcorrect
browser.speechinput_censor_results
browser.speechinput_tray_notification_shown_contexts
history.saving_disabled
history.deleting_enabled
settings.force_safesearch
extensions.theme.pack
extensions.theme.id
extensions.theme.images
extensions.theme.colors
extensions.theme.tints
extensions.theme.properties
extensions.ui.developer_mode
extensions.toolbarsize
extensions.commands
extensions.sideload_wipeout_bubble_shown
plugins.last_internal_directory
plugins.plugins_list
plugins.plugins_disabled
plugins.plugins_disabled_exceptions
plugins.plugins_enabled
plugins.enabled_internal_pdf3
plugins.enabled_nacl
plugins.migrated_to_pepper_flash
plugins.show_details
plugins.allow_outdated
plugins.always_authorize
plugins.metadata
plugins.resource_cache_update
browser.check_default_browser
browser.suppress_switch_to_metro_mode_on_set_default
browser.default_browser_setting_enabled
browser.custom_chrome_frame
browser.show_omnibox_search_hint
browser.desktop_notification_position
profile.default_content_settings
profile.content_settings.clear_on_exit_migrated
profile.content_settings.pref_version
profile.content_settings.pattern_pairs
profile.content_settings.whitelist_version
profile.content_settings.plugin_whitelist
profile.block_third_party_cookies
profile.clear_site_data_on_exit
profile.default_zoom_level
profile.per_host_zoom_levels
autofill.enabled
autofill.auxiliary_profiles_enabled
autofill.positive_upload_rate
autofill.negative_upload_rate
autofill.pdm.first_run
bookmarks.editing_enabled
translate.enabled
media.default_audio_capture_device
media.default_video_capture_Device
import_saved_passwords
webstore.enterprise_store_url
webstore.enterprise_store_name
profile.avatar_index
profile.name
profile.is_managed
printing.enabled
printing.print_preview_disabled
profile.managed.default_filtering_behavior
message_center.disabled_extension_ids
profile.last_used
profile.last_active_profiles
profile.profiles_created
profile.created_by_version
profile.info_cache
ssl.rev_checking.enabled
ssl.version_min
ssl.version_max
ssl.cipher_suites.blacklist
ssl.origin_bound_certs.enabled
ssl.ssl_record_splitting.disabled
user_experience_metrics.client_id
user_experience_metrics.session_id
user_experience_metrics.low_entropy_source
user_experience_metrics.client_id_timestamp
user_experience_metrics.reporting_enabled
user_experience_metrics.initial_logs
user_experience_metrics.initial_logs_as_protobufs
user_experience_metrics.ongoing_logs
user_experience_metrics.ongoing_logs_as_protobufs
user_experience_metrics.profiles
user_experience_metrics.stability.exited_cleanly
user_experience_metrics.stability.stats_version
user_experience_metrics.stability.stats_buildtime
user_experience_metrics.stability.session_end_completed
user_experience_metrics.stability.launch_count
user_experience_metrics.stability.crash_count
user_experience_metrics.stability.incomplete_session_end_count
user_experience_metrics.stability.page_load_count
user_experience_metrics.stability.renderer_crash_count
user_experience_metrics.stability.extension_renderer_crash_count
user_experience_metrics.stability.launch_time_sec
user_experience_metrics.stability.last_timestamp_sec
user_experience_metrics.stability.plugin_stats2
user_experience_metrics.stability.renderer_hang_count
user_experience_metrics.stability.child_process_crash_count
user_experience_metrics.stability.other_user_crash_count
user_experience_metrics.stability.kernel_crash_count
user_experience_metrics.stability.system_unclean_shutdowns
user_experience_metrics.stability.breakpad_registration_ok
user_experience_metrics.stability.breakpad_registration_fail
user_experience_metrics.stability.debugger_present
user_experience_metrics.stability.debugger_not_present
uninstall_metrics.installation_date2
uninstall_metrics.page_load_count
uninstall_metrics.launch_count
uninstall_metrics.uptime_sec
uninstall_metrics.last_launch_time_sec
uninstall_metrics.last_observed_running_time_sec
browser.window_placement
task_manager.window_placement
keyword_editor.window_placement
preferences.window_placement
renderer.memory_cache.size
download.default_directory
download.directory_upgrade
savefile.default_directory
savefile.type
selectfile.last_directory
select_file_dialogs.allowed
filebrowser.tasks.default_by_mime_type
filebrowser.tasks.default_by_suffix
download.extensions_to_open
browser.hung_plugin_detect_freq
browser.plugin_message_response_timeout
spellcheck.dictionary
spellcheck.confirm_dialog_shown
spellcheck.use_spelling_service
protocol_handler.excluded_schemes
safe_browsing.client_key
safe_browsing.wrapped_key
options_window.last_tab_index
content_settings_window.last_tab_index
certificate_manager_window.last_tab_index
browser.last_known_google_url
browser.last_prompted_google_url
browser.last_redirect_origin
shutdown.type
shutdown.num_processes
shutdown.num_processes_slow
restart.last.session.on.shutdown
was.restarted
restart.switch_mode
user_experience_metrics.num_keywords
extensions.disabled
plugins.disable_plugin_finder
extensions.browseractions.container.width
extensions.autoupdate.last_check
extensions.autoupdate.next_check
extensions.alerts.initialized
extensions.allowed_install_sites
extensions.allowed_types
extensions.blacklistupdate.version
extensions.install.allowlist
extensions.install.denylist
extensions.install.forcelist
extensions.storage.garbagecollect
ntp.collapsed_foreign_sessions
ntp.most_visited_blacklist
ntp.promo_resource_cache_update
ntp.tips_resource_server
ntp.date_resource_server
ntp.shown_bookmarks_folder
ntp.shown_page
ntp.promo_desktop_session_found
ntp.webstore_enabled
ntp.app_page_names
devtools.disabled
devtools.dock_side
devtools.edited_files
devtools.file_system_paths
devtools.split_location
devtools.open_docked
sync.last_synced_time
sync.has_setup_completed
sync.keep_everything_synced
sync.bookmarks
sync.passwords
sync.preferences
sync.app_notifications
sync.app_settings
sync.apps
sync.autofill
sync.autofill_profile
sync.themes
sync.typed_urls
sync.extensions
sync.extension_settings
sync.search_engines
sync.sessions
sync.history_delete_directives
sync.synced_notifications
sync.dictionary
sync.favicon_images
sync.favicon_tracking
sync.managed
sync.suppress_start
sync.acknowledged_types
sync.max_invalidation_versions
sync.session_sync_guid
invalidator.client_id
invalidator.invalidation_state
invalidator.max_invalidation_versions
sync.encryption_bootstrap_token
sync.keystore_encryption_bootstrap_token
sync.using_secondary_passphrase
google.services.last_username
google.services.username
google.services.username_pattern
sync_promo.startup_count
sync_promo.view_count
sync_promo.user_skipped
sync_promo.show_on_first_run_allowed
sync_promo.show_ntp_bubble
sync_promo.error_message
profile.gaia_info_update_time
profile.gaia_info_picture_url
browser.web_app.create_on_desktop
browser.web_app.create_in_apps_menu
browser.web_app.create_in_quick_launch_bar
geolocation.access_token
remote_access.host_firewall_traversal
remote_access.host_require_two_factor
remote_access.host_domain
remote_access.host_talkgadget_prefix
remote_access.host_require_curtain
printing.print_preview_sticky_settings
cloud_print.service_url
cloud_print.signin_url
cloud_print.dialog_size.width
cloud_print.dialog_size.height
cloud_print.signin_dialog_size.width
cloud_print.signin_dialog_size.height
chrome_to_mobile.device_list
background_contents.registered
browser.shown_autolaunch_infobar
auth.schemes
auth.disable_negotiate_cname_lookup
auth.enable_negotiate_port
auth.server_whitelist
auth.negotiate_delegate_whitelist
auth.gssapi_library_name
auth.spdyproxy.origin
auth.allow_cross_origin_prompt
async_dns.enabled
http_received_content_length
http_original_content_length
hardware.audio_capture_enabled
hardware.video_capture_enabled
browser.clear_lso_data_enabled
browser.pepper_flash_settings_enabled
browser.disk_cache_dir
browser.disk_cache_size
browser.media_cache_size
cros.system.releaseChannel
policy.disable_cloud_policy_on_signin
cloud_print.enabled
cloud_print.proxy_id
cloud_print.auth_token
cloud_print.xmpp_auth_token
cloud_print.email
cloud_print.print_system_settings
cloud_print.enable_job_poll
cloud_print.robot_refresh_token
cloud_print.robot_email
cloud_print.connect_new_printers
cloud_print.xmpp_ping_enabled
cloud_print.xmpp_ping_timeout_sec
cloud_print.printer_blacklist
cloud_print.submit_enabled
net.max_connections_per_proxy
profile.managed_default_content_settings.cookies
profile.managed_default_content_settings.images
profile.managed_default_content_settings.javascript
profile.managed_default_content_settings.plugins
profile.managed_default_content_settings.popups
profile.managed_default_content_settings.geolocation
profile.managed_default_content_settings.notifications
profile.managed_default_content_settings.media_stream
profile.managed_cookies_allowed_for_urls
profile.managed_cookies_blocked_for_urls
profile.managed_cookies_sessiononly_for_urls
profile.managed_images_allowed_for_urls
profile.managed_images_blocked_for_urls
profile.managed_javascript_allowed_for_urls
profile.managed_javascript_blocked_for_urls
profile.managed_plugins_allowed_for_urls
profile.managed_plugins_blocked_for_urls
profile.managed_popups_allowed_for_urls
profile.managed_popups_blocked_for_urls
profile.managed_notifications_allowed_for_urls
profile.managed_notifications_blocked_for_urls
profile.managed_auto_select_certificate_for_urls
background_mode.user_created_login_item
background_mode.user_removed_login_item
background_mode.enabled
custom_handlers.registered_protocol_handlers
custom_handlers.ignored_protocol_handlers
custom_handlers.enabled
policy.device_refresh_rate
policy.user_refresh_rate
recovery_component.version
component_updater.state
media_galleries.gallery_id
media_galleries.remembered_galleries
network_profile.warnings_left
network_profile.last_warning_time
policy.last_statistics_update
app_list.profile
chrome.googleechotest.com
hXXp://pipelining.googleechotest.com/
SHELL32.dll
ole32.dll
Visual C   CRT: Not enough memory to complete call to strerror.
portuguese-brazilian
Broken pipe
Inappropriate I/O control operation
Operation not permitted
GetProcessWindowStation
operator
https
0123456789:
?456789:;<=
!"#$%&'()* ,-./0123
windows-936
windows-950
windows-949
windows-932
windows-874
windows-1254
windows-1251
windows-1256
windows-1255
#!V!W!"!&!r%!%#%%%'%)%c%e%g%C%<!"%$%&%(%*% %-%/%1%3%5%7%9%;$=%?%A%D%F%H%J%K%L%M%N%O%R%U%X%[%^%_%`%a%b%d%f%h%i%j%k%l%m%o%s% !,!
windows-%d
!$*);^-/
SOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zones\
SOFTWARE\Microsoft\Windows\CurrentVersion\Time Zones\
SOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zones\GMT
SOFTWARE\Microsoft\Windows\CurrentVersion\Time Zones
ucol_nextSortKeyPart
ucol_getSortKey
Returns %d.
Returns. Status = %d.
Returns %d. Status = %d.
Returns %d. Status = %p.
keyMap
keyTypeData
Keys
Check failed: path.empty().
key >= base::DIR_CURRENT
e:\wk_yappyz\yappyz\core\src\base\path_service.cc
e:\wk_yappyz\yappyz\core\src\base\win\i18n.cc
kernel32.dll not found.
?#%X.y
E:\out\out\Release\chrome.exe.pdb
WINMM.dll
VERSION.dll
SHLWAPI.dll
CreateIoCompletionPort
WaitNamedPipeW
TransactNamedPipe
SetNamedPipeHandleState
GetProcessHandleCount
KERNEL32.dll
RegQueryInfoKeyW
RegCloseKey
RegEnumKeyExW
RegOpenKeyExW
RegCreateKeyExW
ADVAPI32.dll
CloseWindowStation
CreateWindowStationW
SetProcessWindowStation
USER32.dll
USERENV.dll
GetCPInfo
GetProcessHeap
GetWindowsDirectoryW
chrome.exe
SetActiveURL
zcÁ
66660666
6 6$6(6,606
00W0e0s0}0
; ;$;(;,;0;4;
2,2h2~2
1"1)161<1
1/3
4054585<5@5
<0<4<8<<<
;(=,=0=4=8=
434T4]5W5_516J6:7U7:8^8G9
5 5$585<5
3 3$383<3@3
4 4<4@4\4`4|4
0 0(0,000
4 5$5(505
\\.\pipe\GoogleCrashServices\
\\.\pipe\ChromeCrashServices
error %u
unspecified-crash-key
hurl-chunk-%i
prn-info-%d
0.0.0.0-devel
Chrome
ChromeFrame
Software\Google\ChromeFrame
debug_message.exe
debug.log
.\debug.log
Software\Classes\CLSID\{054AAE20-4BEA-4347-8A35-64A533254A9D}\LocalServer32
Software\Microsoft\Windows\CurrentVersion\Run
\StringFileInfo\xx\%ls
Apsapi.dll
eChrome_MessagePumpWindow
%s\%s.dmp
rpcrt4.dll
dbghelp.dll
x-x-x-xx-xxxxxx
HKEY_DYN_DATA
HKEY_CURRENT_CONFIG
HKEY_PERFORMANCE_NLSTEXT
HKEY_PERFORMANCE_TEXT
HKEY_PERFORMANCE_DATA
HKEY_USERS
HKEY_LOCAL_MACHINE
HKEY_CURRENT_USER
HKEY_CLASSES_ROOT
pipe\
Ckernel32.dll
ALPC Port
s0x%X
Cntdll.dll
wow_helper.exe"
{4ea16ac7-fd5a-47c3-875b-dbf4a2008c20}
ChromeCanary
registering_chrome
{7D2B3E1D-D096-4594-9D8F-A6667F12E0AC}
{A2DF06F9-A21A-44A8-8A99-8B9C84F29160}
Browse the web
Software\Microsoft\Windows\CurrentVersion\Uninstall\Yappyz
{8A69D345-D564-463C-AFF1-A69D9E530F96}
{430FD4D0-B729-4F61-AA34-91526481799D}
GoogleUpdateSetup.exe
CFEndTempOptOutCmd
CFOptInCmd
CFOptOutCmd
CFTempOptOutCmd
UninstallCmdLine
WebAccessible
chrmstp.exe
app_host.exe
chrome.dll
yappyz.exe
npchrome_frame.dll
chrome_frame_helper.exe
ChromeFrameHelperWindowClass
ChromeFrameReadyMode
chrome_launcher.exe
new_chrome.exe
old_chrome.exe
delegate_execute.exe
nacl64.exe
setup.exe
InstallerSuccessLaunchCmdLine
-chrome
-chromeframe
{8A69D345-D564-463c-AFF1-A69D9E530F96}
{5C65F4B0-3651-4514-B207-D10CB699B14B}
hXXps://clients4.google.com/firefox/metrics/collect
{8BA986DA-5100-405E-AA35-86F34A02ACBF}
DGoogle Chrome Frame
Google\Chrome Frame
Chrome in a Frame.
Uninstall Chrome Frame
Software\Microsoft\Windows\CurrentVersion\Uninstall\Google Chrome Frame
{FDA71E6F-AC4C-4a00-8B70-9958A68906BF}
DGoogle Chrome App Launcher
ChromeAppList
Software\Microsoft\Windows\CurrentVersion\Uninstall\Google Chrome App Launcher
DelegateExecute
\.exe
URL Protocol
webcal
.xhtml
.shtml
.html
Software\Microsoft\Windows\CurrentVersion\App Paths
Software\Microsoft\Windows\Shell\Associations\UrlAssociations\http\UserChoice
metro_driver.dll
Chrome_StatusTrayWindow
Chrome_MessageWindow
Reported Crashes.txt
testing_interface.dll
Certificate Revocation Lists
Custom Dictionary.txt
Login Data
Origin Bound Certs
Cached Theme.pak
Web Applications
Web Data
pepflashplayer.dll
CHROME_METRO_NAV_SEARCH_REQUEST
CHROME_METRO_GET_CURRENT_TAB_INFO
mscoree.dll
ADVAPI32.DLL
nKERNEL32.DLL
- Attempt to initialize the CRT more than once.
- CRT not initialized
- floating point support not loaded
WUSER32.DLL
00000000
333333333333333333
333333333336
K%%CollationBin
%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Application\yappyz.exe
27.1.1419.0
chrome_exe

yappyz.exe_2528_rwx_0FD0A000_00060000:




%U='$

yappyz.exe_2528_rwx_1D00A000_000F5000:




.facu
=WEBK
=HTTP
webk

yappyz.exe_2684:




.text
`.rdata
@.data
.rsrc
@.reloc
QPWSSh
>%u]2
xSSSh
FTPjKS
FtPj;S
C.PjRV
Ht.Ht
tE<.tA<@t=
u.WSh
<.tW<@tS
CHROME_BREAKPAD_PIPE_NAME
1.3.21.115
e:\wk_yappyz\yappyz\core\src\chrome\app\breakpad_win.cc
Check failed: index < kMaxReportedActiveExtensions.
Check failed: url_cstring.
info.size() <= kMaxReportedPrinterRecords
Could not find exported function
e:\wk_yappyz\yappyz\core\src\chrome\app\client_util.cc
RelaunchChromeBrowserWithNewCommandLineIfNeeded
Failed to load Chrome DLL from
Could not get Chrome DLL version.
ChromeMain
e:\wk_yappyz\yappyz\core\src\chrome\app\hard_error_handler_win.cc
ntdll.dll
CHROME_METRO_DLL
rsesek_key
allow-webui-compositing
chrome-frame
disable-webgl
blacklist-webgl
disable-image-transport-surface
speech-service-key
disable-webaudio
disable-web-security
disable-web-sockets
enable-experimental-webkit-features
disable-web-media-player-ms
enable-privileged-webgl-extensions
enable-tcp-fastopen
enable-viewport
ignore-certificate-errors
in-process-webgl
remote-debugging-port
renderer-cmd-prefix
testing-fixed-http-port
testing-fixed-https-port
utility-cmd-prefix
webcore-log-channels
zygote-cmd-prefix
full-memory-crash-report
e:\wk_yappyz\yappyz\core\src\base\string_util.cc
Check failed: IsWprintfFormatPortable(format).
e:\wk_yappyz\yappyz\core\src\base\string_util_win.h
Check failed: rootkey && subkey && access && disposition.
e:\wk_yappyz\yappyz\core\src\base\win\registry.cc
Check failed: rootkey && subkey && access.
Check failed: !subkey.
e:\wk_yappyz\yappyz\core\src\base\utf_string_conversions.cc
ERROR_REPORT
e:\wk_yappyz\yappyz\core\src\base\logging.cc
Check failed: other.IsValid().
e:\wk_yappyz\yappyz\core\src\base\version.cc
e:\wk_yappyz\yappyz\core\src\base\win\scoped_co_mem.h
e:\wk_yappyz\yappyz\core\src\base\win\scoped_handle.h
: Bad boy, the buffer passed to placement new is not aligned!
e:\wk_yappyz\yappyz\core\src\base\lazy_instance.h
e:\wk_yappyz\yappyz\core\src\base\command_line.cc
e:\wk_yappyz\yappyz\core\src\base\strings\string_split.cc
user.js
e:\wk_yappyz\yappyz\core\src\base\file_path.cc
Check failed: data_.get().
e:\wk_yappyz\yappyz\core\src\base\file_version_info_win.cc
%s-%Iu
Duplicate crash keys were registered
count == g_crash_keys_->size()
Check failed: !g_crash_keys_.
e:\wk_yappyz\yappyz\core\src\base\debug\crash_logging.cc
e:\wk_yappyz\yappyz\core\src\base\at_exit.cc
e:\wk_yappyz\yappyz\core\src\base\debug\trace_event_impl.cc
Check failed: it != outbuf.begin().
e:\wk_yappyz\yappyz\core\src\base\strings\string_number_conversions.cc
e:\wk_yappyz\yappyz\core\src\base\win\windows_version.cc
version_number_.minor == 2
e:\wk_yappyz\yappyz\core\src\base\win\scoped_handle.cc
e:\wk_yappyz\yappyz\core\src\base\callback_internal.cc
e:\wk_yappyz\yappyz\core\src\base\debug\trace_event_win.cc
e:\wk_yappyz\yappyz\core\src\base\threading\thread_local_win.cc
.syzygy
.thunks
Check failed: image.VerifyMagic().
e:\wk_yappyz\yappyz\core\src\base\debug\profiler.cc
e:\wk_yappyz\yappyz\core\src\base\tracked_objects.cc
0123456789
e:\wk_yappyz\yappyz\core\src\base\win\scoped_process_information.cc
CHROME_PROFILER_TIME
Check failed: !TlsGetValue(g_native_tls_key).
Check failed: value != TLS_OUT_OF_INDEXES.
e:\wk_yappyz\yappyz\core\src\base\threading\thread_local_storage_win.cc
e:\wk_yappyz\yappyz\core\src\base\values.cc
Check failed: IsStringUTF8(key).
ins_res.first->second != in_value
e:\wk_yappyz\yappyz\core\src\base\json\json_writer.cc
Dictionary keys must be quoted.
Unsupported encoding. JSON must be UTF-8.
e:\wk_yappyz\yappyz\core\src\base\json\json_reader.cc
\uX
e:\wk_yappyz\yappyz\core\src\base\json\json_parser.cc
Line: %i, column: %i, %s
AutoSelectCertificateForUrls
CloudPrintProxyEnabled
CloudPrintSubmitEnabled
CookiesAllowedForUrls
CookiesBlockedForUrls
CookiesSessionOnlyForUrls
DefaultSearchProviderAlternateURLs
DefaultSearchProviderIconURL
DefaultSearchProviderInstantURL
DefaultSearchProviderKeyword
DefaultSearchProviderSearchTermsReplacementKey
DefaultSearchProviderSearchURL
DefaultSearchProviderSuggestURL
EnableAuthNegotiatePort
EnableOriginBoundCerts
EnterpriseWebStoreName
EnterpriseWebStoreURL
HideWebStorePromo
ImagesAllowedForUrls
ImagesBlockedForUrls
ImportBookmarks
ImportHistory
ImportHomepage
ImportSavedPasswords
ImportSearchEngine
JavaScriptAllowedForUrls
JavaScriptBlockedForUrls
MetricsReportingEnabled
NotificationsAllowedForUrls
NotificationsBlockedForUrls
PasswordManagerAllowShowPasswords
PasswordManagerEnabled
PluginsAllowedForUrls
PluginsBlockedForUrls
PopupsAllowedForUrls
PopupsBlockedForUrls
ProxyBypassList
ProxyPacUrl
RemoteAccessHostDomain
RemoteAccessHostFirewallTraversal
RemoteAccessHostRequireCurtain
RemoteAccessHostRequireTwoFactor
RemoteAccessHostTalkGadgetPrefix
RestoreOnStartupURLs
URLBlacklist
URLWhitelist
ChromeFrameContentTypes
ChromeFrameRendererSettings
ChromeOsLockOnIdleSuspend
ChromeOsReleaseChannel
ChromeOsReleaseChannelDelegated
DeviceAllowRedeemChromeOsRegistrationOffers
DeviceLoginScreenSaverId
DeviceLoginScreenSaverTimeout
DeviceMetricsReportingEnabled
DeviceStartUpUrls
RenderInChromeFrameList
ReportDeviceActivityTimes
ReportDeviceBootMode
ReportDeviceLocation
ReportDeviceVersionInfo
TermsOfServiceURL
kernel32.dll
e:\wk_yappyz\yappyz\core\src\sandbox\win\src\sandbox_utils.cc
e:\wk_yappyz\yappyz\core\src\sandbox\win\src\win_utils.cc
Check failed: !path.empty().
e:\wk_yappyz\yappyz\core\src\sandbox\win\src\broker_services.cc
e:\wk_yappyz\yappyz\core\src\sandbox\win\src\sharedmem_ipc_client.cc
Check failed: name.second.
e:\wk_yappyz\yappyz\core\src\sandbox\win\src\handle_closer_agent.cc
e:\wk_yappyz\yappyz\core\src\sandbox\win\src\restricted_token_utils.cc
e:\wk_yappyz\yappyz\core\src\sandbox\win\src\sandbox_policy_base.cc
Check failed: !appcontainer_list_.get().
e:\wk_yappyz\yappyz\core\src\sandbox\win\src\app_container.cc
Check failed: attributes_.empty().
Check failed: !capabilities_.AppContainerSid.
e:\wk_yappyz\yappyz\core\src\sandbox\win\src\handle_closer.cc
e:\wk_yappyz\yappyz\core\src\sandbox\win\src\restricted_token.cc
e:\wk_yappyz\yappyz\core\src\sandbox\win\src\sid.cc
e:\wk_yappyz\yappyz\core\src\sandbox\win\src\sharedmem_ipc_server.cc
e:\wk_yappyz\yappyz\core\src\sandbox\win\src\interception.cc
e:\wk_yappyz\yappyz\core\src\sandbox\win\src\window.cc
NtOpenKey
NtCreateKey
e:\wk_yappyz\yappyz\core\src\sandbox\win\src\registry_policy.cc
e:\wk_yappyz\yappyz\core\src\sandbox\win\src\sync_policy.cc
e:\wk_yappyz\yappyz\core\src\sandbox\win\src\filesystem_policy.cc
e:\wk_yappyz\yappyz\core\src\sandbox\win\src\crosscall_server.cc
NtOpenKeyEx
e:\wk_yappyz\yappyz\core\src\sandbox\win\src\process_thread_dispatcher.cc
CreateNamedPipeW
e:\wk_yappyz\yappyz\core\src\sandbox\win\src\acl.cc
e:\wk_yappyz\yappyz\core\src\sandbox\win\src\service_resolver.cc
e:\wk_yappyz\yappyz\core\src\sandbox\win\src\wow64.cc
e:\wk_yappyz\yappyz\core\src\chrome\installer\util\google_update_settings.cc
e:\wk_yappyz\yappyz\core\src\chrome\installer\util\install_util.cc
e:\wk_yappyz\yappyz\core\src\chrome\installer\util\browser_distribution.cc
CHROME_BINARIES == type
auto-launch-chrome
chrome
chrome-sxs
do-not-launch-chrome
make-chrome-default
new-setup-exe
register-chrome-browser
register-chrome-browser-suffix
register-dev-chrome
register-url-protocol
rename-chrome-exe
remove-chrome-registration
update-setup-exe
toast-results-key
e:\wk_yappyz\yappyz\core\src\chrome\installer\util\channel_info.cc
e:\wk_yappyz\yappyz\core\src\chrome\installer\util\l10n_string_util.cc
e:\wk_yappyz\yappyz\core\src\chrome\installer\util\app_commands.cc
Skipping over key "
Failed to open key "
Cannot initialize AppCommands from an invalid key.
googlechromeframe
googlechromeapphost
e:\wk_yappyz\yappyz\core\src\chrome\installer\util\chromium_binaries_distribution.cc
e:\wk_yappyz\yappyz\core\src\chrome\installer\util\master_preferences.cc
Check failed: master_dictionary_.get().
e:\wk_yappyz\yappyz\core\src\chrome\installer\util\language_selector.cc
Cannot initialize an AppCommand from an invalid key.
e:\wk_yappyz\yappyz\core\src\chrome\installer\util\app_command.cc
auto_launch_chrome
chrome_frame
chrome_shortcut_icon_index
import_bookmarks
import_bookmarks_from_file
import_history
import_home_page
import_search_engine
do_not_launch_chrome
make_chrome_default
make_chrome_default_for_user
extensions.settings
e:\wk_yappyz\yappyz\core\src\chrome\app\image_pre_reader_win.cc
Check failed: pe_image.VerifyMagic().
reinterpret_cast<const uint8*>(section   1) <= &headers[0]   headers.size()
section == pe_image.GetImageSectionFromAddr(start   length - 1)
section == pe_image.GetImageSectionFromAddr(start)
CHROME_HEADLESS
CHROME_LOG_FILE
CHROMEOS_SESSION_LOG_DIR
CHROME_CRASHED
CHROME_RESTART
allow-http-background-page
app-notify-channel-server-url
apps-checkout-url
apps-gallery-download-url
apps-gallery-url
apps-gallery-update-url
autofill-service-url
chrome-frame-shutdown-delay
chrome-version
device-management-url
disable-extensions-http-throttling
disable-sync-passwords
disable-sync-typed-urls
disable-web-resources
enable-auth-negotiate-port
enable-autologin
enable-crxless-web-apps
enable-metrics-reporting-for-testing
enable-npn-http
enable-password-generation
enable-user-controlled-alternate-protocol-ports
enable-websocket-over-spdy
explicitly-allowed-ports
google-search-domain-check-url
ignore-urlfetcher-cert-requests
import
import-from-file
install-from-webstore
instant-url
limited-install-from-webstore
nacl-loader-cmd-prefix
origin-port-to-force-quic-on
pack-extension-key
promo-server-url
proxy-bypass-list
proxy-pac-url
reset-local-passphrase
safebrowsing-url-prefix
sync-invalidate-xmpp-login
sync-keystore-encryption
sync-notification-host-port
sync-url
sync-try-ssltcp-first-for-xmpp
try-chrome-again
use-client-login-signin-flow
variations-server-url
visit-urls
wallet-secure-service-url
wallet-service-url
web-intents-native-services-enabled
winhttp-proxy-resolver
plugins-metadata-server-url
enable-media-transfer-protocol-device-operations
CHROME_VERSION
>CHROME_PRE_READ_EXPERIMENT
managed_mode.passphrase
managed_mode.salt
profile.managed.manual_hosts
profile.managed.manual_urls
profile.exited_cleanly
profile.exit_type
session.restore_on_startup
session.urls_to_restore_on_startup
session.restore_on_startup_migrated
intl.app_locale
intl.charset_default
intl.accept_languages
intl.static_encodings
intl.global.charset_default
webkit.webprefs.global.default_font_size
webkit.webprefs.global.default_fixed_font_size
webkit.webprefs.global.minimum_font_size
webkit.webprefs.global.minimum_logical_font_size
webkit.webprefs.global.javascript_enabled
webkit.webprefs.global.javascript_can_open_windows_automatically
webkit.webprefs.global.loads_images_automatically
webkit.webprefs.global.plugins_enabled
webkit.webprefs.global.standard_font_family
webkit.webprefs.global.fixed_font_family
webkit.webprefs.global.serif_font_family
webkit.webprefs.global.sansserif_font_family
webkit.webprefs.global.cursive_font_family
webkit.webprefs.global.fantasy_font_family
webkit.webprefs.standard_font_family
webkit.webprefs.fixed_font_family
webkit.webprefs.serif_font_family
webkit.webprefs.sansserif_font_family
webkit.webprefs.cursive_font_family
webkit.webprefs.fantasy_font_family
webkit.webprefs.fonts.standard
webkit.webprefs.fonts.fixed
webkit.webprefs.fonts.serif
webkit.webprefs.fonts.sansserif
webkit.webprefs.fonts.cursive
webkit.webprefs.fonts.fantasy
webkit.webprefs.fonts.pictograph
webkit.webprefs.fonts.standard.Arab
webkit.webprefs.fonts.fixed.Arab
webkit.webprefs.fonts.serif.Arab
webkit.webprefs.fonts.sansserif.Arab
webkit.webprefs.fonts.standard.Cyrl
webkit.webprefs.fonts.fixed.Cyrl
webkit.webprefs.fonts.serif.Cyrl
webkit.webprefs.fonts.sansserif.Cyrl
webkit.webprefs.fonts.standard.Grek
webkit.webprefs.fonts.fixed.Grek
webkit.webprefs.fonts.serif.Grek
webkit.webprefs.fonts.sansserif.Grek
webkit.webprefs.fonts.standard.Jpan
webkit.webprefs.fonts.fixed.Jpan
webkit.webprefs.fonts.serif.Jpan
webkit.webprefs.fonts.sansserif.Jpan
webkit.webprefs.fonts.standard.Hang
webkit.webprefs.fonts.fixed.Hang
webkit.webprefs.fonts.serif.Hang
webkit.webprefs.fonts.sansserif.Hang
webkit.webprefs.fonts.cursive.Hang
webkit.webprefs.fonts.standard.Hans
webkit.webprefs.fonts.fixed.Hans
webkit.webprefs.fonts.serif.Hans
webkit.webprefs.fonts.sansserif.Hans
webkit.webprefs.fonts.standard.Hant
webkit.webprefs.fonts.fixed.Hant
webkit.webprefs.fonts.serif.Hant
webkit.webprefs.fonts.sansserif.Hant
webkit.webprefs.web_security_enabled
webkit.webprefs.dom_paste_enabled
webkit.webprefs.shrinks_standalone_images_to_fit
webkit.webprefs.inspector_settings
webkit.webprefs.uses_universal_detector
webkit.webprefs.text_areas_are_resizable
webkit.webprefs.java_enabled
webkit.webprefs.tabs_to_links
webkit.webprefs.allow_displaying_insecure_content
webkit.webprefs.allow_running_insecure_content
webkit.webprefs.fonts.standard.Zyyy
webkit.webprefs.fonts.fixed.Zyyy
webkit.webprefs.fonts.serif.Zyyy
webkit.webprefs.fonts.sansserif.Zyyy
webkit.webprefs.fonts.cursive.Zyyy
webkit.webprefs.fonts.fantasy.Zyyy
webkit.webprefs.fonts.pictograph.Zyyy
webkit.webprefs.default_font_size
webkit.webprefs.default_fixed_font_size
webkit.webprefs.minimum_font_size
webkit.webprefs.minimum_logical_font_size
webkit.webprefs.javascript_enabled
webkit.webprefs.javascript_can_open_windows_automatically
webkit.webprefs.loads_images_automatically
webkit.webprefs.plugins_enabled
bookmark_bar.show_on_all_tabs
bookmark_editor.expanded_nodes
profile.password_manager_enabled
profile.password_manager_allow_show_passwords
password_generation.enabled
autologin.enabled
reverse_autologin.enabled
reverse_autologin.rejected_email_list
safebrowsing.enabled
safebrowsing.reporting_enabled
safebrowsing.proceed_anyway_disabled
incognito.mode_availability
search.suggest_enabled
browser.confirm_to_quit
security.cookie_behavior
default_search_provider.synced_guid
default_search_provider.enabled
default_search_provider.search_url
default_search_provider.suggest_url
default_search_provider.instant_url
default_search_provider.icon_url
default_search_provider.encodings
default_search_provider.name
default_search_provider.keyword
default_search_provider.id
default_search_provider.prepopulate_id
default_search_provider.alternate_urls
default_search_provider.search_terms_replacement_key
download.prompt_for_download
alternate_error_pages.enabled
dns_prefetching.startup_list
dns_prefetching.host_referral_list
spdy.disabled
net.http_server_properties
spdy.servers
spdy.alternate_protocol
protocol.disabled_schemes
policy.url_blacklist
policy.url_whitelist
instant.confirm_dialog_shown
instant.enabled
instant_extended.enabled
instant_ui.zero_suggest_url_prefix
local_state.multiple_profile_prefs_version
dns_prefetching.enabled
browser.show_home_button
profile.recently_selected_encodings
browser.clear_data.browsing_history
browser.clear_data.download_history
browser.clear_data.cache
browser.clear_data.cookies
browser.clear_data.passwords
browser.clear_data.form_data
browser.clear_data.hosted_apps_data
browser.clear_data.content_licenses
browser.clear_data.time_period
browser.last_clear_browsing_data_time
browser.enable_spellchecking
browser.enabled_labs_experiments
browser.enable_autospellcorrect
browser.speechinput_censor_results
browser.speechinput_tray_notification_shown_contexts
history.saving_disabled
history.deleting_enabled
settings.force_safesearch
extensions.theme.pack
extensions.theme.id
extensions.theme.images
extensions.theme.colors
extensions.theme.tints
extensions.theme.properties
extensions.ui.developer_mode
extensions.toolbarsize
extensions.commands
extensions.sideload_wipeout_bubble_shown
plugins.last_internal_directory
plugins.plugins_list
plugins.plugins_disabled
plugins.plugins_disabled_exceptions
plugins.plugins_enabled
plugins.enabled_internal_pdf3
plugins.enabled_nacl
plugins.migrated_to_pepper_flash
plugins.show_details
plugins.allow_outdated
plugins.always_authorize
plugins.metadata
plugins.resource_cache_update
browser.check_default_browser
browser.suppress_switch_to_metro_mode_on_set_default
browser.default_browser_setting_enabled
browser.custom_chrome_frame
browser.show_omnibox_search_hint
browser.desktop_notification_position
profile.default_content_settings
profile.content_settings.clear_on_exit_migrated
profile.content_settings.pref_version
profile.content_settings.pattern_pairs
profile.content_settings.whitelist_version
profile.content_settings.plugin_whitelist
profile.block_third_party_cookies
profile.clear_site_data_on_exit
profile.default_zoom_level
profile.per_host_zoom_levels
autofill.enabled
autofill.auxiliary_profiles_enabled
autofill.positive_upload_rate
autofill.negative_upload_rate
autofill.pdm.first_run
bookmarks.editing_enabled
translate.enabled
media.default_audio_capture_device
media.default_video_capture_Device
import_saved_passwords
webstore.enterprise_store_url
webstore.enterprise_store_name
profile.avatar_index
profile.name
profile.is_managed
printing.enabled
printing.print_preview_disabled
profile.managed.default_filtering_behavior
message_center.disabled_extension_ids
profile.last_used
profile.last_active_profiles
profile.profiles_created
profile.created_by_version
profile.info_cache
ssl.rev_checking.enabled
ssl.version_min
ssl.version_max
ssl.cipher_suites.blacklist
ssl.origin_bound_certs.enabled
ssl.ssl_record_splitting.disabled
user_experience_metrics.client_id
user_experience_metrics.session_id
user_experience_metrics.low_entropy_source
user_experience_metrics.client_id_timestamp
user_experience_metrics.reporting_enabled
user_experience_metrics.initial_logs
user_experience_metrics.initial_logs_as_protobufs
user_experience_metrics.ongoing_logs
user_experience_metrics.ongoing_logs_as_protobufs
user_experience_metrics.profiles
user_experience_metrics.stability.exited_cleanly
user_experience_metrics.stability.stats_version
user_experience_metrics.stability.stats_buildtime
user_experience_metrics.stability.session_end_completed
user_experience_metrics.stability.launch_count
user_experience_metrics.stability.crash_count
user_experience_metrics.stability.incomplete_session_end_count
user_experience_metrics.stability.page_load_count
user_experience_metrics.stability.renderer_crash_count
user_experience_metrics.stability.extension_renderer_crash_count
user_experience_metrics.stability.launch_time_sec
user_experience_metrics.stability.last_timestamp_sec
user_experience_metrics.stability.plugin_stats2
user_experience_metrics.stability.renderer_hang_count
user_experience_metrics.stability.child_process_crash_count
user_experience_metrics.stability.other_user_crash_count
user_experience_metrics.stability.kernel_crash_count
user_experience_metrics.stability.system_unclean_shutdowns
user_experience_metrics.stability.breakpad_registration_ok
user_experience_metrics.stability.breakpad_registration_fail
user_experience_metrics.stability.debugger_present
user_experience_metrics.stability.debugger_not_present
uninstall_metrics.installation_date2
uninstall_metrics.page_load_count
uninstall_metrics.launch_count
uninstall_metrics.uptime_sec
uninstall_metrics.last_launch_time_sec
uninstall_metrics.last_observed_running_time_sec
browser.window_placement
task_manager.window_placement
keyword_editor.window_placement
preferences.window_placement
renderer.memory_cache.size
download.default_directory
download.directory_upgrade
savefile.default_directory
savefile.type
selectfile.last_directory
select_file_dialogs.allowed
filebrowser.tasks.default_by_mime_type
filebrowser.tasks.default_by_suffix
download.extensions_to_open
browser.hung_plugin_detect_freq
browser.plugin_message_response_timeout
spellcheck.dictionary
spellcheck.confirm_dialog_shown
spellcheck.use_spelling_service
protocol_handler.excluded_schemes
safe_browsing.client_key
safe_browsing.wrapped_key
options_window.last_tab_index
content_settings_window.last_tab_index
certificate_manager_window.last_tab_index
browser.last_known_google_url
browser.last_prompted_google_url
browser.last_redirect_origin
shutdown.type
shutdown.num_processes
shutdown.num_processes_slow
restart.last.session.on.shutdown
was.restarted
restart.switch_mode
user_experience_metrics.num_keywords
extensions.disabled
plugins.disable_plugin_finder
extensions.browseractions.container.width
extensions.autoupdate.last_check
extensions.autoupdate.next_check
extensions.alerts.initialized
extensions.allowed_install_sites
extensions.allowed_types
extensions.blacklistupdate.version
extensions.install.allowlist
extensions.install.denylist
extensions.install.forcelist
extensions.storage.garbagecollect
ntp.collapsed_foreign_sessions
ntp.most_visited_blacklist
ntp.promo_resource_cache_update
ntp.tips_resource_server
ntp.date_resource_server
ntp.shown_bookmarks_folder
ntp.shown_page
ntp.promo_desktop_session_found
ntp.webstore_enabled
ntp.app_page_names
devtools.disabled
devtools.dock_side
devtools.edited_files
devtools.file_system_paths
devtools.split_location
devtools.open_docked
sync.last_synced_time
sync.has_setup_completed
sync.keep_everything_synced
sync.bookmarks
sync.passwords
sync.preferences
sync.app_notifications
sync.app_settings
sync.apps
sync.autofill
sync.autofill_profile
sync.themes
sync.typed_urls
sync.extensions
sync.extension_settings
sync.search_engines
sync.sessions
sync.history_delete_directives
sync.synced_notifications
sync.dictionary
sync.favicon_images
sync.favicon_tracking
sync.managed
sync.suppress_start
sync.acknowledged_types
sync.max_invalidation_versions
sync.session_sync_guid
invalidator.client_id
invalidator.invalidation_state
invalidator.max_invalidation_versions
sync.encryption_bootstrap_token
sync.keystore_encryption_bootstrap_token
sync.using_secondary_passphrase
google.services.last_username
google.services.username
google.services.username_pattern
sync_promo.startup_count
sync_promo.view_count
sync_promo.user_skipped
sync_promo.show_on_first_run_allowed
sync_promo.show_ntp_bubble
sync_promo.error_message
profile.gaia_info_update_time
profile.gaia_info_picture_url
browser.web_app.create_on_desktop
browser.web_app.create_in_apps_menu
browser.web_app.create_in_quick_launch_bar
geolocation.access_token
remote_access.host_firewall_traversal
remote_access.host_require_two_factor
remote_access.host_domain
remote_access.host_talkgadget_prefix
remote_access.host_require_curtain
printing.print_preview_sticky_settings
cloud_print.service_url
cloud_print.signin_url
cloud_print.dialog_size.width
cloud_print.dialog_size.height
cloud_print.signin_dialog_size.width
cloud_print.signin_dialog_size.height
chrome_to_mobile.device_list
background_contents.registered
browser.shown_autolaunch_infobar
auth.schemes
auth.disable_negotiate_cname_lookup
auth.enable_negotiate_port
auth.server_whitelist
auth.negotiate_delegate_whitelist
auth.gssapi_library_name
auth.spdyproxy.origin
auth.allow_cross_origin_prompt
async_dns.enabled
http_received_content_length
http_original_content_length
hardware.audio_capture_enabled
hardware.video_capture_enabled
browser.clear_lso_data_enabled
browser.pepper_flash_settings_enabled
browser.disk_cache_dir
browser.disk_cache_size
browser.media_cache_size
cros.system.releaseChannel
policy.disable_cloud_policy_on_signin
cloud_print.enabled
cloud_print.proxy_id
cloud_print.auth_token
cloud_print.xmpp_auth_token
cloud_print.email
cloud_print.print_system_settings
cloud_print.enable_job_poll
cloud_print.robot_refresh_token
cloud_print.robot_email
cloud_print.connect_new_printers
cloud_print.xmpp_ping_enabled
cloud_print.xmpp_ping_timeout_sec
cloud_print.printer_blacklist
cloud_print.submit_enabled
net.max_connections_per_proxy
profile.managed_default_content_settings.cookies
profile.managed_default_content_settings.images
profile.managed_default_content_settings.javascript
profile.managed_default_content_settings.plugins
profile.managed_default_content_settings.popups
profile.managed_default_content_settings.geolocation
profile.managed_default_content_settings.notifications
profile.managed_default_content_settings.media_stream
profile.managed_cookies_allowed_for_urls
profile.managed_cookies_blocked_for_urls
profile.managed_cookies_sessiononly_for_urls
profile.managed_images_allowed_for_urls
profile.managed_images_blocked_for_urls
profile.managed_javascript_allowed_for_urls
profile.managed_javascript_blocked_for_urls
profile.managed_plugins_allowed_for_urls
profile.managed_plugins_blocked_for_urls
profile.managed_popups_allowed_for_urls
profile.managed_popups_blocked_for_urls
profile.managed_notifications_allowed_for_urls
profile.managed_notifications_blocked_for_urls
profile.managed_auto_select_certificate_for_urls
background_mode.user_created_login_item
background_mode.user_removed_login_item
background_mode.enabled
custom_handlers.registered_protocol_handlers
custom_handlers.ignored_protocol_handlers
custom_handlers.enabled
policy.device_refresh_rate
policy.user_refresh_rate
recovery_component.version
component_updater.state
media_galleries.gallery_id
media_galleries.remembered_galleries
network_profile.warnings_left
network_profile.last_warning_time
policy.last_statistics_update
app_list.profile
chrome.googleechotest.com
hXXp://pipelining.googleechotest.com/
SHELL32.dll
ole32.dll
Visual C   CRT: Not enough memory to complete call to strerror.
portuguese-brazilian
Broken pipe
Inappropriate I/O control operation
Operation not permitted
GetProcessWindowStation
operator
https
0123456789:
?456789:;<=
!"#$%&'()* ,-./0123
windows-936
windows-950
windows-949
windows-932
windows-874
windows-1254
windows-1251
windows-1256
windows-1255
#!V!W!"!&!r%!%#%%%'%)%c%e%g%C%<!"%$%&%(%*% %-%/%1%3%5%7%9%;$=%?%A%D%F%H%J%K%L%M%N%O%R%U%X%[%^%_%`%a%b%d%f%h%i%j%k%l%m%o%s% !,!
windows-%d
!$*);^-/
SOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zones\
SOFTWARE\Microsoft\Windows\CurrentVersion\Time Zones\
SOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zones\GMT
SOFTWARE\Microsoft\Windows\CurrentVersion\Time Zones
ucol_nextSortKeyPart
ucol_getSortKey
Returns %d.
Returns. Status = %d.
Returns %d. Status = %d.
Returns %d. Status = %p.
keyMap
keyTypeData
Keys
Check failed: path.empty().
key >= base::DIR_CURRENT
e:\wk_yappyz\yappyz\core\src\base\path_service.cc
e:\wk_yappyz\yappyz\core\src\base\win\i18n.cc
kernel32.dll not found.
?#%X.y
E:\out\out\Release\chrome.exe.pdb
WINMM.dll
VERSION.dll
SHLWAPI.dll
CreateIoCompletionPort
WaitNamedPipeW
TransactNamedPipe
SetNamedPipeHandleState
GetProcessHandleCount
KERNEL32.dll
RegQueryInfoKeyW
RegCloseKey
RegEnumKeyExW
RegOpenKeyExW
RegCreateKeyExW
ADVAPI32.dll
CloseWindowStation
CreateWindowStationW
SetProcessWindowStation
USER32.dll
USERENV.dll
GetCPInfo
GetProcessHeap
GetWindowsDirectoryW
chrome.exe
SetActiveURL
zcÁ
66660666
6 6$6(6,606
00W0e0s0}0
; ;$;(;,;0;4;
2,2h2~2
1"1)161<1
1/3
4054585<5@5
<0<4<8<<<
;(=,=0=4=8=
434T4]5W5_516J6:7U7:8^8G9
5 5$585<5
3 3$383<3@3
4 4<4@4\4`4|4
0 0(0,000
4 5$5(505
\\.\pipe\GoogleCrashServices\
\\.\pipe\ChromeCrashServices
error %u
unspecified-crash-key
hurl-chunk-%i
prn-info-%d
0.0.0.0-devel
Chrome
ChromeFrame
Software\Google\ChromeFrame
debug_message.exe
debug.log
.\debug.log
Software\Classes\CLSID\{054AAE20-4BEA-4347-8A35-64A533254A9D}\LocalServer32
Software\Microsoft\Windows\CurrentVersion\Run
\StringFileInfo\xx\%ls
Apsapi.dll
eChrome_MessagePumpWindow
%s\%s.dmp
rpcrt4.dll
dbghelp.dll
x-x-x-xx-xxxxxx
HKEY_DYN_DATA
HKEY_CURRENT_CONFIG
HKEY_PERFORMANCE_NLSTEXT
HKEY_PERFORMANCE_TEXT
HKEY_PERFORMANCE_DATA
HKEY_USERS
HKEY_LOCAL_MACHINE
HKEY_CURRENT_USER
HKEY_CLASSES_ROOT
pipe\
Ckernel32.dll
ALPC Port
s0x%X
Cntdll.dll
wow_helper.exe"
{4ea16ac7-fd5a-47c3-875b-dbf4a2008c20}
ChromeCanary
registering_chrome
{7D2B3E1D-D096-4594-9D8F-A6667F12E0AC}
{A2DF06F9-A21A-44A8-8A99-8B9C84F29160}
Browse the web
Software\Microsoft\Windows\CurrentVersion\Uninstall\Yappyz
{8A69D345-D564-463C-AFF1-A69D9E530F96}
{430FD4D0-B729-4F61-AA34-91526481799D}
GoogleUpdateSetup.exe
CFEndTempOptOutCmd
CFOptInCmd
CFOptOutCmd
CFTempOptOutCmd
UninstallCmdLine
WebAccessible
chrmstp.exe
app_host.exe
chrome.dll
yappyz.exe
npchrome_frame.dll
chrome_frame_helper.exe
ChromeFrameHelperWindowClass
ChromeFrameReadyMode
chrome_launcher.exe
new_chrome.exe
old_chrome.exe
delegate_execute.exe
nacl64.exe
setup.exe
InstallerSuccessLaunchCmdLine
-chrome
-chromeframe
{8A69D345-D564-463c-AFF1-A69D9E530F96}
{5C65F4B0-3651-4514-B207-D10CB699B14B}
hXXps://clients4.google.com/firefox/metrics/collect
{8BA986DA-5100-405E-AA35-86F34A02ACBF}
DGoogle Chrome Frame
Google\Chrome Frame
Chrome in a Frame.
Uninstall Chrome Frame
Software\Microsoft\Windows\CurrentVersion\Uninstall\Google Chrome Frame
{FDA71E6F-AC4C-4a00-8B70-9958A68906BF}
DGoogle Chrome App Launcher
ChromeAppList
Software\Microsoft\Windows\CurrentVersion\Uninstall\Google Chrome App Launcher
DelegateExecute
\.exe
URL Protocol
webcal
.xhtml
.shtml
.html
Software\Microsoft\Windows\CurrentVersion\App Paths
Software\Microsoft\Windows\Shell\Associations\UrlAssociations\http\UserChoice
metro_driver.dll
Chrome_StatusTrayWindow
Chrome_MessageWindow
Reported Crashes.txt
testing_interface.dll
Certificate Revocation Lists
Custom Dictionary.txt
Login Data
Origin Bound Certs
Cached Theme.pak
Web Applications
Web Data
pepflashplayer.dll
CHROME_METRO_NAV_SEARCH_REQUEST
CHROME_METRO_GET_CURRENT_TAB_INFO
mscoree.dll
ADVAPI32.DLL
nKERNEL32.DLL
- Attempt to initialize the CRT more than once.
- CRT not initialized
- floating point support not loaded
WUSER32.DLL
00000000
333333333333333333
333333333336
K%%CollationBin
%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Application\yappyz.exe
27.1.1419.0
chrome_exe






Remove it with Ad-Aware




    

  1. Click (here) to download and install Ad-Aware Free Antivirus.
    2. 

  2. Update the definition files.
    3. 

  3. Run a full scan of your computer.
    4. 





Manual removal*




    

  1. Terminate malicious process(es) (How to End a Process With the Task Manager):
    

    setup.exe:548
    %original file name%.exe:580
    yappyz_1332_1.exe:1520
    yappyz.exe:1436
    yappyz.exe:852
    yappyz.exe:1168
    yappyz.exe:1484
    yappyz.exe:1344
    yappyz.exe:2404
    yappyz.exe:2192
    yappyz.exe:2108
    yappyz.exe:1792
    yappyz.exe:2244
    yappyz.exe:2164
    yappyz.exe:2008
    yappyz.exe:372
    

    2. 

  2. Delete the original Trojan file.
    3. 

  3. Delete or disinfect the following files created/modified by the Trojan:
    

    %Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\27.1.1419.0\Locales\da.dll (3 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\27.1.1419.0\Locales\sr.pak (302 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\27.1.1419.0\Locales\lt.dll (3 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\27.1.1419.0\Locales\gu.pak (1667 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\27.1.1419.0\Locales\zh-TW.dll (2 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\27.1.1419.0\Locales\th.dll (2 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\27.1.1419.0\Locales\de.dll (3 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\27.1.1419.0\Locales\ja.pak (240 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\27.1.1419.0\Locales\he.pak (225 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\27.1.1419.0\Locales\el.pak (1633 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\27.1.1419.0\Locales\lt.pak (199 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\27.1.1419.0\Locales\hi.pak (1677 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\27.1.1419.0\Locales\hi.dll (3 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\27.1.1419.0\Locales\pt-BR.pak (194 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\27.1.1419.0\Locales\el.dll (3 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\27.1.1419.0\Locales\fr.dll (3 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\27.1.1419.0\PepperFlash\pepflashplayer.dll (94114 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\27.1.1419.0\Locales\uk.dll (3 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\27.1.1419.0\chrome_frame_helper.dll (57 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\27.1.1419.0\Locales\pl.dll (3 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\27.1.1419.0\Locales\en-US.pak (169 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\27.1.1419.0\Locales\en-GB.pak (169 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\27.1.1419.0\Locales\es.pak (207 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\27.1.1419.0\Locales\hr.dll (3 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\27.1.1419.0\Locales\zh-TW.pak (170 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\27.1.1419.0\Locales\gu.dll (3 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\27.1.1419.0\Locales\ro.dll (3 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\27.1.1419.0\Locales\es-419.pak (202 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\27.1.1419.0\Locales\cs.dll (3 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\27.1.1419.0\Locales\ms.pak (185 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\27.1.1419.0\VisualElements\smalllogo.png (11 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\27.1.1419.0\libegl.dll (136 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\27.1.1419.0\Locales\hu.pak (210 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\27.1.1419.0\Locales\fa.dll (3 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\27.1.1419.0\Locales\sk.dll (3 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\27.1.1419.0\Locales\bg.pak (326 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\27.1.1419.0\Extensions\external_extensions.json (99 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\27.1.1419.0\Locales\ml.pak (1788 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\27.1.1419.0\Locales\cs.pak (201 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\27.1.1419.0\Locales\vi.pak (225 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\27.1.1419.0\Locales\mr.dll (2 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\27.1.1419.0\nacl64.exe (7386 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\27.1.1419.0\d3dcompiler_46.dll (22433 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\27.1.1419.0\Locales\id.pak (180 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\27.1.1419.0\Locales\fr.pak (214 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\27.1.1419.0\Locales\am.pak (272 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\wow_helper.exe (73 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\app_host.exe (287 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\VisualElementsManifest.xml (386 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\27.1.1419.0\Locales\pt-BR.dll (3 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\27.1.1419.0\PepperFlash\manifest.json (2 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\27.1.1419.0\Locales\ta.dll (3 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\27.1.1419.0\Locales\pt-PT.dll (3 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\27.1.1419.0\Locales\it.pak (197 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\27.1.1419.0\Locales\fil.pak (204 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\27.1.1419.0\ffmpegsumo.dll (7386 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Application\27.1.1419.0\Installer\setup.exe (10815 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\27.1.1419.0\Locales\sr.dll (3 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\27.1.1419.0\Locales\ja.dll (2 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\27.1.1419.0\Locales\ca.pak (202 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\27.1.1419.0\Locales\sw.dll (3 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\27.1.1419.0\Locales\zh-CN.pak (167 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\27.1.1419.0\secondarytile.png (2 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\27.1.1419.0\Locales\nl.dll (3 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\27.1.1419.0\chrome_frame_helper.exe (82 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\27.1.1419.0\metro_driver.dll (6433 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Application\yappyz.exe (7971 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\27.1.1419.0\resources.pak (38588 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\27.1.1419.0\Locales\ml.dll (3 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\27.1.1419.0\Locales\nb.dll (3 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\27.1.1419.0\Locales\fi.pak (189 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\chrome.7z (933035 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\27.1.1419.0\Locales\lv.dll (2 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\27.1.1419.0\libglesv2.dll (3817 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\27.1.1419.0\VisualElements\splash-620x300.png (12 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\27.1.1419.0\Locales\sw.pak (185 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\27.1.1419.0\Locales\sl.pak (188 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\27.1.1419.0\Locales\vi.dll (2 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\27.1.1419.0\ppgooglenaclpluginchrome.dll (1732 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\27.1.1419.0\Locales\it.dll (2 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\27.1.1419.0\Locales\tr.dll (3 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\27.1.1419.0\Locales\sv.pak (184 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\27.1.1419.0\Locales\pt-PT.pak (198 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\27.1.1419.0\Locales\mr.pak (1669 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\27.1.1419.0\Locales\bn.dll (3 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\27.1.1419.0\icudt.dll (72365 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\27.1.1419.0\Locales\kn.dll (3 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\27.1.1419.0\chrome_launcher.exe (87 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\27.1.1419.0\Locales\es.dll (3 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\27.1.1419.0\Locales\ar.dll (2 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\27.1.1419.0\Locales\ms.dll (2 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\27.1.1419.0\Locales\en-GB.dll (2 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\27.1.1419.0\Locales\nl.pak (195 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\27.1.1419.0\Locales\uk.pak (309 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\27.1.1419.0\Locales\pl.pak (198 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\27.1.1419.0\Locales\bg.dll (3 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\27.1.1419.0\chrome_100_percent.pak (6325 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\27.1.1419.0\nacl_irt_x86_32.nexe (39950 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\27.1.1419.0\chrome.dll (410859 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\27.1.1419.0\Locales\fa.pak (277 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\27.1.1419.0\Locales\nb.pak (185 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\27.1.1419.0\Locales\he.dll (2 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\yappyz.exe (7386 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\27.1.1419.0\Locales\et.pak (179 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\27.1.1419.0\chrome_touch_100_percent.pak (6338 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\27.1.1419.0\Locales\ru.dll (3 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\27.1.1419.0\Locales\ta.pak (1736 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\27.1.1419.0\Locales\ko.pak (206 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\27.1.1419.0\Locales\th.pak (1672 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\27.1.1419.0\Locales\es-419.dll (3 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\27.1.1419.0\VisualElements\logo.png (5 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\27.1.1419.0\Locales\en-US.dll (2 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\master_preferences (4 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\27.1.1419.0\Locales\id.dll (3 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\27.1.1419.0\Locales\am.dll (2 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\27.1.1419.0\Locales\sk.pak (208 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\27.1.1419.0\Locales\et.dll (2 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\27.1.1419.0\Locales\bn.pak (1685 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\27.1.1419.0\Locales\sl.dll (3 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\27.1.1419.0\Locales\fi.dll (3 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\27.1.1419.0\delegate_execute.exe (6368 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\27.1.1419.0\Locales\da.pak (184 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\27.1.1419.0\Locales\fil.dll (3 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\27.1.1419.0\Locales\sv.dll (2 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\27.1.1419.0\Locales\te.pak (1716 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\27.1.1419.0\Locales\hu.dll (3 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\27.1.1419.0\Locales\tr.pak (198 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\27.1.1419.0\Locales\ca.dll (3 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\27.1.1419.0\Locales\te.dll (3 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\27.1.1419.0\Locales\ro.pak (208 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\27.1.1419.0\Locales\hr.pak (192 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\27.1.1419.0\npchrome_frame.dll (17629 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\27.1.1419.0\Locales\kn.pak (1726 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\27.1.1419.0\Locales\de.pak (202 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\27.1.1419.0\Locales\ko.dll (2 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\27.1.1419.0\Locales\ar.pak (263 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\27.1.1419.0\Locales\ru.pak (305 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\27.1.1419.0\Locales\lv.pak (200 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\27.1.1419.0\Locales\zh-CN.dll (2 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Temp\source548_13941\Chrome-bin\27.1.1419.0\nacl_irt_x86_64.nexe (42363 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\geoloc.iminent[1] (61 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\fr-FR[1].htm (2 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\YappyzUninstall\YappyzUninstall.exe (6841 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\main[1] (22 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\yappyz.mini[1].png (2 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\desktop.ini (67 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Microsoft\Internet Explorer\MSIMGSIZ.DAT (96 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\yappyz_1332_1[1].exe (2643733 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\main[1].css (2 bytes)
    %Documents and Settings%\%current user%\Cookies\Current_User@public.yappyz[2].txt (1283 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\desktop.ini (67 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\ga[1].js (1453 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\desktop.ini (67 bytes)
    %Documents and Settings%\%current user%\Cookies\Current_User@public.yappyz[1].txt (1803 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\icon[1].png (3543 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\desktop.ini (67 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\Yappyz\yappyz_1332_1.exe (835760 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\install[1] (2 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\BetaYappyz300X90[1].png (392 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\jquery.min[1].js (2614 bytes)
    %Documents and Settings%\%current user%\Cookies\Current_User@placehold[1].txt (215 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\data[1] (59 bytes)
    %Documents and Settings%\%current user%\Cookies\index.dat (5784 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\desktop.ini (67 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\CR_B4D70.tmp\CHROME.PACKED.7Z (230970 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\CR_B4D70.tmp\setup.exe (24272 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\CR_B4D70.tmp\SETUP.EX_ (1839 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\scoped_dir_232_13986\DECODED_MESSAGE_CATALOGS (260 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\scoped_dir_232_13986\CRX_INSTALL\Thumbs.db (4 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\scoped_dir_232_13986\CRX_INSTALL\_locales\en\messages.json (90 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\scoped_dir_232_13986\CRX_INSTALL\_locales\fr\messages.json (102 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\scoped_dir_232_13986\CRX_INSTALL\manifest.json (745 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\scoped_dir_232_13986\CRX_INSTALL\icon128.png (2 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\scoped_dir_232_13986\DECODED_IMAGES (65 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\scoped_dir_232_14006\CRX_INSTALL\_locales\fr\messages.json (247 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\scoped_dir_232_14006\CRX_INSTALL\manifest.json (598 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\scoped_dir_232_14006\DECODED_IMAGES (65 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\scoped_dir_232_14006\CRX_INSTALL\config.json (119 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\scoped_dir_232_14006\DECODED_MESSAGE_CATALOGS (537 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\scoped_dir_232_14006\CRX_INSTALL\_locales\en\messages.json (205 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\scoped_dir_232_14006\CRX_INSTALL\icon128.png (1928 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\scoped_dir_232_14006\CRX_INSTALL\index.html (245 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\J4UN78YP\fr-sien.cdn.videoplaza.tv\se.video#\plaza.kit.adplayer.adplayer.sxx (287 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\J4UN78YP\macromedia.com\support\flashplayer\sys\settings.sxx (10990 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\J4UN78YP\fr-sien.cdn.videoplaza.tv\com.videoplaza.bootloader.sxx (202 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\J4UN78YP\fr-sien.cdn.videoplaza.tv\com.videoplaza.adplayer.sxx (262 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\J4UN78YP\macromedia.com\support\flashplayer\sys\#fr-sien.cdn.videoplaza.tv\settings.sxx (238 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\scoped_dir_232_13993\CRX_INSTALL\resources\images\icon_128.png (4 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\scoped_dir_232_13993\CRX_INSTALL\resources\images\close.png (1 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\scoped_dir_232_13993\CRX_INSTALL\scripts\controllers\popupCtrl.js (4 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\scoped_dir_232_13993\CRX_INSTALL\background.html (100 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\scoped_dir_232_13993\CRX_INSTALL\scripts\directives\ypzGrid.js (2 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\scoped_dir_232_13993\CRX_INSTALL\_locales\en\messages.json (1 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\scoped_dir_232_13993\CRX_INSTALL\scripts\directives\ypzFit.js (850 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\scoped_dir_232_13993\DECODED_IMAGES (1608 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\scoped_dir_232_13993\CRX_INSTALL\home.html (3 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\scoped_dir_232_13993\CRX_INSTALL\resources\images\arrow_left.png (1 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\scoped_dir_232_13993\CRX_INSTALL\resources\styles\reset.css (1 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\scoped_dir_232_13993\CRX_INSTALL\manifest.json (650 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\scoped_dir_232_13993\CRX_INSTALL\popup.html (2 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\scoped_dir_232_13993\CRX_INSTALL\scripts\directives\ngCustom.js (672 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\scoped_dir_232_13993\CRX_INSTALL\scripts\directives\ypzSprite.js (3 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\scoped_dir_232_13993\CRX_INSTALL\_locales\fr\messages.json (2 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\scoped_dir_232_13993\CRX_INSTALL\scripts\background.js (6 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\scoped_dir_232_13993\CRX_INSTALL\scripts\services\abTest.js (837 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\scoped_dir_232_13993\CRX_INSTALL\mini.html (277 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\scoped_dir_232_13993\CRX_INSTALL\scripts\directives\ypzWindow.js (2 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\scoped_dir_232_13993\CRX_INSTALL\scripts\directives\ypzScrollShadow.js (718 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\scoped_dir_232_13993\CRX_INSTALL\scripts\libs\angular.min.js (5952 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\scoped_dir_232_13993\CRX_INSTALL\resources\images\icon_256.png (392 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\scoped_dir_232_13993\CRX_INSTALL\resources\styles\homePage.css (392 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\scoped_dir_232_13993\CRX_INSTALL\scripts\services\gaEvents.js (1 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\scoped_dir_232_13993\CRX_INSTALL\resources\images\spriteHome.png (4 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\scoped_dir_232_13993\CRX_INSTALL\resources\images\pin2.png (1 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\scoped_dir_232_13993\CRX_INSTALL\scripts\controllers\homeCtrl.js (392 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\scoped_dir_232_13993\CRX_INSTALL\resources\images\icon_200.png (7 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\scoped_dir_232_13993\CRX_INSTALL\resources\styles\popup.css (2 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\scoped_dir_232_13993\CRX_INSTALL\scripts\filters\i18n.js (181 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\scoped_dir_232_13993\DECODED_MESSAGE_CATALOGS (4 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\scoped_dir_232_13990\CRX_INSTALL\_locales\en\messages.json (95 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\scoped_dir_232_13990\CRX_INSTALL\_locales\fr\messages.json (100 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\scoped_dir_232_13990\CRX_INSTALL\icon128.png (2 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\scoped_dir_232_13990\DECODED_IMAGES (65 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\scoped_dir_232_13990\DECODED_MESSAGE_CATALOGS (262 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\scoped_dir_232_13990\CRX_INSTALL\manifest.json (824 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\scoped_dir_232_13996\CRX_INSTALL\public\content\iconeNew.png (1 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\scoped_dir_232_13996\CRX_INSTALL\public\fullscreenAds.css (1 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\scoped_dir_232_13996\CRX_INSTALL\public\content\yappyzlogo.png (4152 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\scoped_dir_232_13996\CRX_INSTALL\public\content\smiley.png (1 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\scoped_dir_232_13996\CRX_INSTALL\_locales\en\messages.json (3 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\scoped_dir_232_13996\CRX_INSTALL\public\content\new-photo.png (1 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\scoped_dir_232_13996\CRX_INSTALL\public\content\google-logo.png (849 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\scoped_dir_232_13996\CRX_INSTALL\public\content\new-interogation.png (1 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\scoped_dir_232_13996\CRX_INSTALL\yappyz.js (776 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\scoped_dir_232_13996\CRX_INSTALL\public\content\new-photo2.png (1 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\scoped_dir_232_13996\CRX_INSTALL\manifest.json (1 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\scoped_dir_232_13996\CRX_INSTALL\private\app.js (7784 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\scoped_dir_232_13996\CRX_INSTALL\public\content\bg_app.png (392 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\scoped_dir_232_13996\CRX_INSTALL\public\content\MoreCoins.png (392 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\scoped_dir_232_13996\CRX_INSTALL\private\resources\images\icon_128.png (6 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\scoped_dir_232_13996\CRX_INSTALL\public\content\bgGameCharacter.png (17904 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\scoped_dir_232_13996\CRX_INSTALL\public\gamecontainer.html (519 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\scoped_dir_232_13996\DECODED_MESSAGE_CATALOGS (117 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\scoped_dir_232_13996\DECODED_IMAGES (65 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\scoped_dir_232_13996\CRX_INSTALL\public\topbar.css (392 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\scoped_dir_232_13996\CRX_INSTALL\_locales\es\messages.json (1 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\scoped_dir_232_13996\CRX_INSTALL\public\content\tweeter-logo.png (1 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\scoped_dir_232_13996\CRX_INSTALL\public\ads.html (146 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\scoped_dir_232_13996\CRX_INSTALL\_locales\it\messages.json (3808 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\scoped_dir_232_13996\CRX_INSTALL\public\ads.css (144 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\scoped_dir_232_13996\CRX_INSTALL\_locales\fr\messages.json (3 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\scoped_dir_232_13996\CRX_INSTALL\public\content\defaultUserPicture2.png (2 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\scoped_dir_232_13996\CRX_INSTALL\public\content\facebook_share.png (261 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\scoped_dir_232_13996\CRX_INSTALL\public\fullscreenAds.html (434 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\scoped_dir_232_13996\CRX_INSTALL\public\content\InsertCoinsAnimation.gif (2696 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\scoped_dir_232_13996\CRX_INSTALL\public\content\spriteTopBar.png (3 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\scoped_dir_232_13996\CRX_INSTALL\private\background.html (211 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\scoped_dir_232_13996\CRX_INSTALL\public\yappyz.js (7288 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\scoped_dir_232_13996\CRX_INSTALL\public\gamecontainer.css (522 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\scoped_dir_232_13996\CRX_INSTALL\public\content\close.png (1 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\scoped_dir_232_13996\CRX_INSTALL\_locales\de\messages.json (1 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\scoped_dir_232_13996\CRX_INSTALL\public\content\defaultUserPicture.png (392 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\scoped_dir_232_13996\CRX_INSTALL\public\topbar.html (392 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\scoped_dir_232_13996\CRX_INSTALL\_locales\pt\messages.json (3808 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\etilqs_bIVFrqaN6Hlvqcc (286 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\User Data\Default\Preferences (4 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\4.tmp (1 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\User Data\Default\Cache\f_00000d (25 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\User Data\Default\Local Storage\chrome-extension_onjgfkedmajckgeodakihmpbgjeokfap_0.localstorage (997815 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\User Data\Default\History (21181 bytes)
    %Documents and Settings%\%current user%\Application Data\Microsoft\Internet Explorer\Quick Launch\Store.lnk (2 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\User Data\Default\Web Applications\_crx_jajfdjebpfphpjkocjenkhegepamcbcl\Bejeweled.ico (150 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\User Data\Default\Session Storage\000003.log (212 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\User Data\Default\Web Data (34793 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\User Data\12.tmp (5 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\User Data\Default\Local App Settings\kjhpfcjlhjpbdpfcffaiopddnpojdpok\000003.log (48 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\scoped_dir_232_13993\5.tmp (673 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\User Data\Default\Cache\f_000011 (240 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\User Data\Default\Local Storage\https_www.facebook.com_0.localstorage-journal (564 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\User Data\Default\Extension Rules\MANIFEST-000002 (69 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\User Data\Default\Extension Rules\MANIFEST-000001 (41 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\User Data\Default\F.tmp (676 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\User Data\Default\Local App Settings\kjhpfcjlhjpbdpfcffaiopddnpojdpok\000001.dbtmp (20 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\User Data\Safe Browsing Cookies-journal (2791 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\User Data\Default\Cache\f_00000f (118 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\3.tmp (106417 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\User Data\Default\Archived History (11533 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\User Data\Default\Session Storage\000002.dbtmp (20 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\User Data\Default\Top Sites (5232 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\User Data\Default\Cookies (1331 bytes)
    %Documents and Settings%\%current user%\Desktop\Yappyz.lnk (2 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\etilqs_GXR1MmshCfLBeQt (532 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\scoped_dir_232_13996\3.tmp (5873 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\User Data\Default\Cache\f_000012 (3875 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\User Data\C.tmp (5 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\User Data\Default\Web Applications\_crx_jajfdjebpfphpjkocjenkhegepamcbcl\Bejeweled.ico.md5 (16 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\User Data\Default\Extension Cookies (1331 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\User Data\13.tmp (30 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\etilqs_Fygb14KF0gCMsbI (131 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\User Data\Default\Session Storage\MANIFEST-000002 (69 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\User Data\Default\Origin Bound Certs-journal (6215 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\User Data\Default\1.tmp (1 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\User Data\Default\README (166 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\User Data\Default\Extension State\000003.log (1121 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\User Data\Default\Cache\f_00000e (38 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\User Data\Default\Extension Rules\000003.log (2294 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\User Data\Default\Cache\f_00000a (190 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\User Data\Default\Cache\f_00000b (17 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\User Data\Default\Cache\f_00000c (38 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\User Data\10.tmp (5 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\User Data\Default\Top Sites-journal (12020 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\User Data\Default\Cookies-journal (9796 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\User Data\Default\Cache\data_3 (8552 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\User Data\Default\User StyleSheets\Custom.css (0 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\User Data\Default\Cache\f_000004 (48 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\User Data\Default\Cache\f_000005 (24 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\User Data\Default\Cache\f_000006 (38 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\6.tmp (1443 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\User Data\Default\Cache\f_000001 (117 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\User Data\Default\Cache\f_000002 (26 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\User Data\Default\Cache\f_000003 (38 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\User Data\Default\Cache\f_000009 (51 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\User Data\Default\Extension State\000001.dbtmp (20 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\User Data\Default\Shortcuts-journal (564 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\User Data\Default\Network Action Predictor-journal (10097 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\User Data\Default\Extension State\000002.dbtmp (20 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\scoped_dir_232_14006\A.tmp (33 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\User Data\Default\Web Applications\_crx_kjhpfcjlhjpbdpfcffaiopddnpojdpok\Yappyz.ico (150 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\scoped_dir_232_13986\2.tmp (9 bytes)
    %Documents and Settings%\%current user%\Desktop\Store.lnk (2 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\7.tmp (1 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\User Data\Default\Local App Settings\kjhpfcjlhjpbdpfcffaiopddnpojdpok\LOG (47 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\User Data\Default\Extension Rules\000001.dbtmp (20 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\8.tmp (1 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\User Data\Default\Favicons-journal (564 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\User Data\Default\Extension Cookies-journal (9796 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\User Data\Default\Cache\f_000007 (40 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\B.tmp (1 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\etilqs_XFbPa4DzPoSNWN0 (406 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\etilqs_ScSiAXWMWrIXiQI (131 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\9.tmp (1 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\User Data\Default\Cache\f_000010 (250 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Application\First Run (0 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\User Data\Default\Web Applications\_crx_fckpdnpcdkdbldaegkokodcimgohljpo\Store.ico.md5 (16 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\User Data\Default\Cache\data_2 (2360 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\User Data\Default\Archived History-journal (564 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\User Data\Default\Cache\data_0 (432372 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\User Data\Default\Cache\data_1 (123928 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\User Data\Default\Session Storage\000001.dbtmp (20 bytes)
    %Documents and Settings%\%current user%\Desktop\Bejeweled.lnk (2 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\User Data\Default\Cache\f_000008 (89 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\etilqs_Xg4oCc7FfrkgPJC (532 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\User Data\Default\History-journal (4276 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\User Data\Default\E.tmp (671 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\User Data\Default\Session Storage\MANIFEST-000001 (41 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\User Data\Default\Extension State\LOG (47 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\5.tmp (22956 bytes)
    %Documents and Settings%\%current user%\Application Data\Microsoft\Internet Explorer\Quick Launch\Yappyz.lnk (2 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\User Data\Default\Local App Settings\kjhpfcjlhjpbdpfcffaiopddnpojdpok\MANIFEST-000001 (41 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\User Data\Default\Local Storage\chrome-extension_onjgfkedmajckgeodakihmpbgjeokfap_0.localstorage-journal (14163 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\User Data\Default\11.tmp (285 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\User Data\Default\Session Storage\LOG (46 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\User Data\Default\Extension Rules\000002.dbtmp (20 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\etilqs_TuRnCiuZl6W8wvU (131 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\2.tmp (2259 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\scoped_dir_232_13990\6.tmp (4 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\etilqs_9zYJq4rUxOJ8Hdc (532 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\User Data\Default\Extension Rules\LOG (47 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\etilqs_zL0gkMYQFJwf1RI (131 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\User Data\Default\Extension State\MANIFEST-000002 (69 bytes)
    %Documents and Settings%\%current user%\Application Data\Microsoft\Internet Explorer\Quick Launch\Bejeweled.lnk (2 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\User Data\Default\14.tmp (678 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\User Data\Default\Cache\index (368 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\User Data\Default\Visited Links (284 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\User Data\Default\Extension State\MANIFEST-000001 (41 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\User Data\Default\Web Data-journal (9794 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\A.tmp (6378 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\User Data\Default\Web Applications\_crx_kjhpfcjlhjpbdpfcffaiopddnpojdpok\Yappyz.ico.md5 (16 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\User Data\Default\D.tmp (12 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\User Data\Default\Local App Settings\kjhpfcjlhjpbdpfcffaiopddnpojdpok\000002.dbtmp (20 bytes)
    %Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\User Data\Default\Local App Settings\kjhpfcjlhjpbdpfcffaiopddnpojdpok\MANIFEST-000002 (69 bytes)
    

    4. 

  4. Delete the following value(s) in the autorun key (How to Work with System Registry):
    

    [HKCU\Software\Microsoft\Windows\CurrentVersion\Run]
    "GoogleChromeAutoLaunch_6FA4726DEB88F1C0FC88AD35ECAB7ECB" = "%Documents and Settings%\%current user%\Local Settings\Application Data\Yappyz\Application\yappyz.exe --no-startup-window"
    

    5. 

  5. Clean the Temporary Internet Files folder, which may contain infected files (How to clean Temporary Internet Files folder).
    6. 

  6. Reboot the computer.
    7. 



*Manual removal may cause unexpected system behaviour and should be performed at your own risk.












 
 




 
No votes yet












				


							


			

				
					  
							

		

		


					
							

	

	
	        


	

        
      
 

      
      

      
    
 

    
  
 

		


		

		
			

			

				

					Lavasoft is the maker of Ad-Aware,
					the world's most popular anti-malware 
					software with over 450 million 
					downloads.
				

				

					© 2024 Lavasoft. All rights reserved.

					Terms Of Use |   Privacy Policy
					


								

			


		

		


	

	
	

	

		x
		
Our best antivirus yet!

		
Fresh new look. Faster scanning. Better protection.

		

			
Enjoy unique new features, lightning fast scans and a simple yet beautiful new look in our best antivirus yet!

			
For a quicker, lighter and more secure experience, download the all new adaware antivirus 12 now!

			
			Download adaware antivirus 12
		

		No thanks, continue to lavasoft.com
	

	

		

			close x
			
Discover the new adaware antivirus 12

			
Our best antivirus yet

			Download Now