diff --git a/NIST_Data_Leakage_Case/NIST_Data_Leakage_03_WebHistory_SQL_Python.pptx b/NIST_Data_Leakage_Case/NIST_Data_Leakage_03_WebHistory_SQL_Python.pptx index 23bb66b..1fb56e7 100644 Binary files a/NIST_Data_Leakage_Case/NIST_Data_Leakage_03_WebHistory_SQL_Python.pptx and b/NIST_Data_Leakage_Case/NIST_Data_Leakage_03_WebHistory_SQL_Python.pptx differ diff --git a/NIST_Data_Leakage_Case/py_version/pycode/webhistory_python/IE11_container14.csv b/NIST_Data_Leakage_Case/py_version/pycode/webhistory_python/IE11_container14.csv new file mode 100644 index 0000000..e21d2ce --- /dev/null +++ b/NIST_Data_Leakage_Case/py_version/pycode/webhistory_python/IE11_container14.csv @@ -0,0 +1,58 @@ +EntryId ContainerId CacheId UrlHash SecureDirectory FileSize Type Flags AccessCount SyncTime CreationTime ExpiryTime ModifiedTime AccessedTime PostCheckTime SyncCount ExemptionDelta Url Filename FileExtension RequestHeaders ResponseHeaders RedirectUrl Group ExtraData +24 1 0 46055402037931576 1 32988 69 1 1 Mar 23, 2015 18:12:08.184224700 Mar 23, 2015 18:12:08.084224600 Jan 01, 1601 00:00:00.000000000 Feb 27, 2015 00:47:45.000000000 Mar 23, 2015 18:12:08.184224700 0 1 0 https://technet.microsoft.com/favicon.ico favicon[2].ico 485454502f312e3120323030204f4b0d0a436f6e74656e742d4c656e6774683a2033323938380d0a436f6e74656e742d547970653a20696d6167652f782d69636f6e0d0a455461673a202261346130343230323735326430313a30220d0a5033503a2043503d22414c4c20494e442044535020434f522041444d20434f4e6f20435552204355536f204956416f204956446f2050534120505344205441492054454c6f204f55522053414d6f20434e5420434f4d20494e54204e4156204f4e4c20504859205052452050555220554e49220d0a582d506f77657265642d42793a204153502e4e45540d0a582d496e7374616e63653a2043483131330d0a582d55412d436f6d70617469626c653a2049453d656467650d0a582d506f77657265642d42793a204152522f322e350d0a5033503a2043503d22414c4c20494e442044535020434f522041444d20434f4e6f20435552204355536f204956416f204956446f2050534120505344205441492054454c6f204f55522053414d6f20434e5420434f4d20494e54204e4156204f4e4c20504859205052452050555220554e49220d0a582d506f77657265642d42793a204153502e4e45540d0a582d496e7374616e63653a2043483131330d0a0d0a 0700000000000010 +49 1 0 80500383856957489 2 1150 69 1 1 Mar 23, 2015 20:45:22.349231400 Mar 23, 2015 20:45:22.308229100 Mar 24, 2015 01:05:50.308229100 Mar 20, 2015 14:36:39.000000000 Mar 23, 2015 20:45:22.349231400 0 0 0 http://www.wired.com/wp-content/themes/Phoenix/assets/images/favicon.ico favicon[2].ico 485454502f312e3120323030204f4b0d0a4163636573732d436f6e74726f6c2d416c6c6f772d4f726967696e3a202a0d0a436f6e74656e742d547970653a20696d6167652f782d69636f6e0d0a455461673a20223437652d35313162393365383363626330220d0a4a2d436163686561626c653a204e4f3a476f742053657373696f6e0d0a436f6e74656e742d4c656e6774683a20313135300d0a582d5365727665642d42793a2063616368652d6a666b313032352d4a464b2c2063616368652d696164323134362d4941440d0a582d43616368653a204d4953532c204849542c204849540d0a582d43616368652d486974733a20323631382c20313131310d0a582d54696d65723a2053313432373134333532322e3532373130322c5653302c5645300d0a0d0a 0700000000000010 +50 1 0 80500386916822584 4 1150 69 1 1 Mar 23, 2015 20:56:32.953278700 Mar 23, 2015 20:56:32.953278700 Mar 24, 2015 18:56:15.953278700 Mar 20, 2015 14:36:39.000000000 Mar 23, 2015 20:56:32.953278700 0 0 0 http://www.wired.com/favicon.ico favicon[2].ico 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 0700000000000010 +58 1 0 603118138792257392 4 17 4161 0 1 Mar 25, 2015 15:15:56.842405500 Mar 25, 2015 15:15:56.842405500 Jan 01, 1601 00:00:00.000000000 Jan 01, 1601 00:00:00.000000000 Mar 25, 2015 15:15:56.842405500 0 0 0 https://license.piriform.com/verify/?p=ccpro&c=cc&cv=5.04.5151&l=1033&lk=CJ9T-J7CU-SPNV-GWMB-WBEC&mk=YSNW-75UN-3WNW-QDJI-6UFT-T7TM-9AX9-8ZG8-USQZ verify[1].htm 485454502f312e3120323030204f4b0d0a436f6e74656e742d547970653a20746578742f68746d6c3b20636861727365743d7574662d380d0a582d506f77657265642d42793a204153502e4e45540d0a436f6e74656e742d4c656e6774683a2031370d0a0d0a +21 1 0 950865741498908069 4 1327 65 0 1 Mar 23, 2015 17:28:55.700342200 Mar 23, 2015 17:28:55.690342100 Mar 30, 2015 17:28:54.690342100 Jan 01, 1601 00:00:00.000000000 Mar 23, 2015 17:28:55.700342200 0 0 0 https://www.bing.com/getLogo?language=en-US&scale=100&contrast=gray getLogo[1].png 485454502f312e3120323030204f4b0d0a436f6e74656e742d4c656e6774683a20313332370d0a436f6e74656e742d547970653a20696d6167652f706e670d0a566172793a204163636570742d456e636f64696e670d0a0d0a +53 1 0 982119349977706040 1 2550 69 1 1 Mar 25, 2015 14:47:06.132305500 Mar 25, 2015 14:47:06.116705500 Mar 24, 2016 14:47:06.116705500 May 25, 2012 05:50:00.000000000 Mar 25, 2015 14:47:06.132305500 0 0 0 http://eraser.heidi.ie/favicon.ico favicon[3].ico 485454502f312e3120323030204f4b0d0a566172793a557365722d4167656e740d0a455461673a20223966362d34633064356630356337323030220d0a507261676d613a207075626c69630d0a4b6565702d416c6976653a2074696d656f75743d31302c206d61783d3130300d0a436f6e74656e742d547970653a20696d6167652f782d69636f6e0d0a436f6e74656e742d4c656e6774683a20323535300d0a0d0a 0700000000000010 +40 1 0 1015070513637039175 3 232623 65 2 2 Mar 23, 2015 20:34:08.844580200 Mar 23, 2015 20:34:08.782180100 Mar 19, 2016 23:36:29.782180100 Mar 19, 2015 23:51:21.000000000 Mar 23, 2015 20:34:29.052616000 0 0 0 https://apis.google.com/_/scs/apps-static/_/js/k=oz.gapi.en.Vh6dPmTLRzs.O/m=client/rt=j/sv=1/d=1/ed=1/am=IQ/rs=AGLTcCPMH84qo1WVX7OKMktu4bYHvIFfsw/t=zcms/cb=gapi.loaded_0 cb=gapi[1].js 485454502f312e3120323030204f4b0d0a436f6e74656e742d547970653a20746578742f6a6176617363726970743b20636861727365743d5554462d380d0a582d436f6e74656e742d547970652d4f7074696f6e733a206e6f736e6966660d0a582d5853532d50726f74656374696f6e3a20313b206d6f64653d626c6f636b0d0a416c7465726e6174652d50726f746f636f6c3a203434333a717569632c703d302e350d0a436f6e74656e742d4c656e6774683a203233323632330d0a0d0a 00000b001945802546060000e763f6fdff85a16d8000c0820080001000000040ea82b0038df3071086bc4f8c1e839303bf070104c02c01fe6bffae91fdfbff710c0900080000017e108010160000000800000080e08300006901041c0721002000000000000000005002000000000000000000000000006000000000000000000000002808002400008005400000000000004000004000000000841d704810001000000000000000c00f020000000000000000000000000000000000420002860c40bf0000000000e8010000e00004800088000000000000 +46 1 0 1015070515473039193 1 37098 65 2 2 Mar 23, 2015 20:34:09.750381800 Mar 23, 2015 20:34:09.734781800 Mar 20, 2016 00:35:46.734781800 Mar 19, 2015 23:51:21.000000000 Mar 23, 2015 20:34:29.271016400 0 0 0 https://apis.google.com/_/scs/apps-static/_/js/k=oz.gapi.en.Vh6dPmTLRzs.O/m=googleapis_proxy/rt=j/sv=1/d=1/ed=1/am=IQ/rs=AGLTcCPMH84qo1WVX7OKMktu4bYHvIFfsw/t=zcms/cb=gapi.loaded_0 cb=gapi[1].js 485454502f312e3120323030204f4b0d0a436f6e74656e742d547970653a20746578742f6a6176617363726970743b20636861727365743d5554462d380d0a582d436f6e74656e742d547970652d4f7074696f6e733a206e6f736e6966660d0a582d5853532d50726f74656374696f6e3a20313b206d6f64653d626c6f636b0d0a416c7465726e6174652d50726f746f636f6c3a203434333a717569632c703d302e350d0a436f6e74656e742d4c656e6774683a2033373039380d0a0d0a 00000b0019458025f50000006300f0f1b780212c083b80f3071086b67f8c0c83110000001c013b50dfdf1f00 +39 1 0 1015070517522523434 2 12780 65 3 2 Mar 23, 2015 20:34:08.735380000 Mar 23, 2015 20:34:08.704179900 Mar 23, 2015 21:04:08.704179900 Jan 01, 1601 00:00:00.000000000 Mar 23, 2015 20:34:29.037016000 0 0 0 https://apis.google.com/js/client.js client[1].js 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 00000b00194580252d000000ffbdff7dfb1b0000 +44 1 0 1015070517627948819 3 12771 65 3 2 Mar 23, 2015 20:34:09.719181800 Mar 23, 2015 20:34:09.703581700 Mar 23, 2015 21:04:09.703581700 Jan 01, 1601 00:00:00.000000000 Mar 23, 2015 20:34:29.099416100 0 0 0 https://apis.google.com/js/api.js api[1].js 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 00000b00194580252d000000eb8c4049031a0000 +42 1 0 1028294953066255954 2 7595 65 1 2 Mar 23, 2015 20:34:09.641181600 Mar 23, 2015 20:34:09.406181100 Mar 24, 2015 20:34:09.406181100 Jan 01, 1601 00:00:00.000000000 Mar 23, 2015 20:34:29.239816300 0 0 0 https://clients6.google.com/static/proxy.html?jsh=m%3B%2F_%2Fscs%2Fapps-static%2F_%2Fjs%2Fk%3Doz.gapi.en.Vh6dPmTLRzs.O%2Fm%3D__features__%2Fam%3DIQ%2Frt%3Dj%2Fd%3D1%2Ft%3Dzcms%2Frs%3DAGLTcCPMH84qo1WVX7OKMktu4bYHvIFfsw proxy[1].htm 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 00000b00194580252d000000fb9dffbebd1d0000 +45 1 0 1123721938682842145 1 8522 65 2 2 Mar 23, 2015 20:34:09.734781800 Mar 23, 2015 20:34:09.719181800 Mar 17, 2016 23:02:56.719181800 Mar 16, 2015 21:38:46.000000000 Mar 23, 2015 20:34:29.099416100 0 0 0 https://ssl.gstatic.com/accounts/o/2006856415-postmessagerelay.js 2006856415-postmessagerelay[1].js 485454502f312e3120323030204f4b0d0a436f6e74656e742d547970653a20746578742f6a6176617363726970740d0a582d436f6e74656e742d547970652d4f7074696f6e733a206e6f736e6966660d0a582d5853532d50726f74656374696f6e3a20313b206d6f64653d626c6f636b0d0a416c7465726e6174652d50726f746f636f6c3a203434333a717569632c703d302e350d0a436f6e74656e742d4c656e6774683a20383532320d0a0d0a 00000b0019458025340000001de53f0060030000 +43 1 0 1123721939005287487 1 17836 65 0 2 Mar 23, 2015 20:34:09.672381700 Mar 23, 2015 20:34:09.672381700 Mar 10, 2016 13:39:25.672381700 Mar 10, 2015 20:51:43.000000000 Mar 23, 2015 20:34:29.239816300 0 0 0 https://ssl.gstatic.com/docs/documents/share/images/sprite-18.svg sprite-18[1].svg 485454502f312e3120323030204f4b0d0a436f6e74656e742d547970653a20696d6167652f7376672b786d6c0d0a582d436f6e74656e742d547970652d4f7074696f6e733a206e6f736e6966660d0a582d5853532d50726f74656374696f6e3a20313b206d6f64653d626c6f636b0d0a416c7465726e6174652d50726f746f636f6c3a203434333a717569632c703d302e350d0a436f6e74656e742d4c656e6774683a2031373833360d0a0d0a +30 1 0 1123721939806537246 1 1619 65 0 1 Mar 23, 2015 20:04:18.921167800 Mar 23, 2015 20:04:18.858767700 Mar 17, 2016 23:03:02.858767700 Oct 24, 2014 21:49:35.000000000 Mar 23, 2015 20:04:18.921167800 0 0 0 https://ssl.gstatic.com/accounts/ui/avatar_2x.png avatar_2x[1].png 485454502f312e3120323030204f4b0d0a436f6e74656e742d547970653a20696d6167652f706e670d0a582d436f6e74656e742d547970652d4f7074696f6e733a206e6f736e6966660d0a436f6e74656e742d4c656e6774683a20313631390d0a582d5853532d50726f74656374696f6e3a20313b206d6f64653d626c6f636b0d0a416c7465726e6174652d50726f746f636f6c3a203434333a717569632c703d302e350d0a0d0a +32 1 0 1123721939960511573 1 11156 65 0 1 Mar 23, 2015 20:04:18.921167800 Mar 23, 2015 20:04:18.889967700 Mar 17, 2016 23:03:01.889967700 Jul 23, 2013 19:36:21.000000000 Mar 23, 2015 20:04:18.921167800 0 0 0 https://ssl.gstatic.com/accounts/ui/logo_strip_2x.png logo_strip_2x[1].png 485454502f312e3120323030204f4b0d0a436f6e74656e742d547970653a20696d6167652f706e670d0a582d436f6e74656e742d547970652d4f7074696f6e733a206e6f736e6966660d0a436f6e74656e742d4c656e6774683a2031313135360d0a582d5853532d50726f74656374696f6e3a20313b206d6f64653d626c6f636b0d0a416c7465726e6174652d50726f746f636f6c3a203434333a717569632c703d302e350d0a0d0a +31 1 0 1123721940670892826 1 9005 65 0 1 Mar 23, 2015 20:04:18.921167800 Mar 23, 2015 20:04:18.858767700 Mar 17, 2016 23:03:02.858767700 Sep 17, 2013 00:02:19.000000000 Mar 23, 2015 20:04:18.921167800 0 0 0 https://ssl.gstatic.com/accounts/ui/logo_2x.png logo_2x[1].png 485454502f312e3120323030204f4b0d0a436f6e74656e742d547970653a20696d6167652f706e670d0a582d436f6e74656e742d547970652d4f7074696f6e733a206e6f736e6966660d0a436f6e74656e742d4c656e6774683a20393030350d0a582d5853532d50726f74656374696f6e3a20313b206d6f64653d626c6f636b0d0a416c7465726e6174652d50726f746f636f6c3a203434333a717569632c703d302e350d0a0d0a +35 1 0 1123721941320462184 2 81351 65 0 1 Mar 23, 2015 20:04:54.079030200 Mar 23, 2015 20:04:53.938629900 Mar 16, 2016 01:26:55.938629900 Dec 11, 2014 00:49:41.000000000 Mar 23, 2015 20:04:54.079030200 0 0 0 https://ssl.gstatic.com/accounts/ui/progress_spinner_color_20dp_4x.gif progress_spinner_color_20dp_4x[1].gif 485454502f312e3120323030204f4b0d0a436f6e74656e742d547970653a20696d6167652f6769660d0a582d436f6e74656e742d547970652d4f7074696f6e733a206e6f736e6966660d0a436f6e74656e742d4c656e6774683a2038313335310d0a582d5853532d50726f74656374696f6e3a20313b206d6f64653d626c6f636b0d0a416c7465726e6174652d50726f746f636f6c3a203434333a717569632c703d302e350d0a0d0a +34 1 0 1643400978356778986 3 18719 65 0 1 Mar 23, 2015 20:04:19.248768400 Mar 23, 2015 20:04:19.139568200 Mar 09, 2016 01:03:24.139568200 Aug 21, 2014 18:08:10.000000000 Mar 23, 2015 20:04:19.248768400 0 0 0 https://fonts.gstatic.com/s/opensans/v10/DXI1ORHCpsQm3Vp6mXoaTXZ2MAKAc2x4R1uOSeegc5U.eot DXI1ORHCpsQm3Vp6mXoaTXZ2MAKAc2x4R1uOSeegc5U[1].eot 485454502f312e3120323030204f4b0d0a436f6e74656e742d547970653a20666f6e742f656f740d0a4163636573732d436f6e74726f6c2d416c6c6f772d4f726967696e3a202a0d0a54696d696e672d416c6c6f772d4f726967696e3a202a0d0a582d436f6e74656e742d547970652d4f7074696f6e733a206e6f736e6966660d0a582d5853532d50726f74656374696f6e3a20313b206d6f64653d626c6f636b0d0a416c7465726e6174652d50726f746f636f6c3a203434333a717569632c703d302e350d0a436f6e74656e742d4c656e6774683a2031383731390d0a0d0a +33 1 0 1643400979802019327 3 18218 65 0 1 Mar 23, 2015 20:04:19.233168400 Mar 23, 2015 20:04:19.139568200 Mar 17, 2016 23:03:19.139568200 Aug 21, 2014 18:06:58.000000000 Mar 23, 2015 20:04:19.233168400 0 0 0 https://fonts.gstatic.com/s/opensans/v10/cJZKeOuBrn4kERxqtaUH3fY6323mHUZFJMgTvxaG2iE.eot cJZKeOuBrn4kERxqtaUH3fY6323mHUZFJMgTvxaG2iE[1].eot 485454502f312e3120323030204f4b0d0a436f6e74656e742d547970653a20666f6e742f656f740d0a4163636573732d436f6e74726f6c2d416c6c6f772d4f726967696e3a202a0d0a54696d696e672d416c6c6f772d4f726967696e3a202a0d0a582d436f6e74656e742d547970652d4f7074696f6e733a206e6f736e6966660d0a582d5853532d50726f74656374696f6e3a20313b206d6f64653d626c6f636b0d0a416c7465726e6174652d50726f746f636f6c3a203434333a717569632c703d302e350d0a436f6e74656e742d4c656e6774683a2031383231380d0a0d0a +11 1 0 1674072363868411024 2 1102 65 1 11 Mar 22, 2015 15:48:45.537379300 Mar 22, 2015 15:48:45.537379300 Apr 22, 2015 15:48:45.537379300 Mar 16, 2015 05:30:18.000000000 Mar 25, 2015 15:24:51.516005500 0 0 0 https://odc.officeapps.live.com/odc/stat/images/OrgIdAccount.png?b=3914.1000 OrgIdAccount[1].png 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 +8 1 0 1674072363909558057 1 47346 65 3 11 Mar 22, 2015 15:48:45.412579100 Mar 22, 2015 15:48:45.412579100 Apr 22, 2015 15:48:45.412579100 Mar 16, 2015 05:30:12.000000000 Mar 25, 2015 15:24:51.516005500 0 0 0 https://odc.officeapps.live.com/odc/stat/EmailHrd.js?b=3914.1000 EmailHrd[1].js 485454502f312e3120323030204f4b0d0a436f6e74656e742d547970653a206170706c69636174696f6e2f6a6176617363726970740d0a455461673a202230346132613436616135666430313a30220d0a582d436f7272656c6174696f6e49643a2064396166383433312d643937622d343561612d623830632d3061653766663663356261660d0a582d5573657253657373696f6e49643a2064396166383433312d643937622d343561612d623830632d3061653766663663356261660d0a582d4f666669636546453a204f646346726f6e74456e645f494e5f34340d0a582d4f666669636556657273696f6e3a2031362e302e333931342e313030300d0a582d4f6666696365436c75737465723a206e6375732d6f64632e6f6666696365617070732e6c6976652e636f6d0d0a5033503a2043503d2243414f2044535020434f522041444d612044455620434f4e692054454c69204355522050534120505344205441492049564469204f55522053414d69204255532044454d204e41562053544120554e4920434f4d20494e5420504859204f4e4c2046494e20505552220d0a582d506f77657265642d42793a204153502e4e45540d0a436f6e74656e742d4c656e6774683a2034373334360d0a0d0a 00000b0019458025560000000bf00700000800008620000000000000 +9 1 0 1674072364202811596 4 668 65 1 11 Mar 22, 2015 15:48:45.428179100 Mar 22, 2015 15:48:45.428179100 Apr 22, 2015 15:48:45.428179100 Mar 16, 2015 05:30:14.000000000 Mar 25, 2015 15:24:51.516005500 0 0 0 https://odc.officeapps.live.com/odc/stat/images/spinner_16x16.gif?b=3914.1000 spinner_16x16[1].gif 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 +1 1 0 1674072364318583934 2 5214 65 0 7 Mar 25, 2015 14:41:13.121405500 Mar 25, 2015 14:41:13.121405500 Jan 01, 1601 00:00:00.000000000 Jan 01, 1601 00:00:00.000000000 Mar 25, 2015 14:41:13.121405500 0 0 0 https://odc.officeapps.live.com/odc/emailhrd?lcid=1033&syslcid=1033&uilcid=1033&app=5&ver=15&build=15.0.4420&p=0&a=1&hm=1&sp=0 emailhrd[1].htm 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 00000b0019458025150000008100000000000000 +10 1 0 1674072364372317618 3 162 65 1 11 Mar 22, 2015 15:48:45.521779200 Mar 22, 2015 15:48:45.521779200 Apr 22, 2015 15:48:45.521779200 Mar 16, 2015 05:30:18.000000000 Mar 25, 2015 15:24:51.516005500 0 0 0 https://odc.officeapps.live.com/odc/stat/images/MSAccount.png?b=3914.1000 MSAccount[1].png 485454502f312e3120323030204f4b0d0a436f6e74656e742d547970653a20696d6167652f706e670d0a455461673a202230643162643439616135666430313a30220d0a582d436f7272656c6174696f6e49643a2064356430333436302d306130322d343361342d613737362d3735626336353839356336620d0a582d5573657253657373696f6e49643a2064356430333436302d306130322d343361342d613737362d3735626336353839356336620d0a582d4f666669636546453a204f646346726f6e74456e645f494e5f34340d0a582d4f666669636556657273696f6e3a2031362e302e333931342e313030300d0a582d4f6666696365436c75737465723a206e6375732d6f64632e6f6666696365617070732e6c6976652e636f6d0d0a5033503a2043503d2243414f2044535020434f522041444d612044455620434f4e692054454c69204355522050534120505344205441492049564469204f55522053414d69204255532044454d204e41562053544120554e4920434f4d20494e5420504859204f4e4c2046494e20505552220d0a582d506f77657265642d42793a204153502e4e45540d0a436f6e74656e742d4c656e6774683a203136320d0a0d0a +36 1 0 1674072365231972268 4 5208 65 0 1 Mar 23, 2015 20:26:59.199003100 Mar 23, 2015 20:26:59.199003100 Jan 01, 1601 00:00:00.000000000 Jan 01, 1601 00:00:00.000000000 Mar 23, 2015 20:26:59.199003100 0 0 0 https://odc.officeapps.live.com/odc/emailhrd?lcid=1033&syslcid=1033&uilcid=1033&app=1&ver=15&build=15.0.4420&p=0&a=1&hm=1&sp=0 emailhrd[2].htm 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 +6 1 0 1674072365679945078 3 1389 65 3 11 Mar 22, 2015 15:48:45.287778800 Mar 22, 2015 15:48:45.287778800 Apr 22, 2015 15:48:45.287778800 Mar 16, 2015 05:30:20.000000000 Mar 25, 2015 15:24:51.516005500 0 0 0 https://odc.officeapps.live.com/odc/stat/Telemetry.js?b=3914.1000 Telemetry[1].js 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 00000b00194580250c0000007f04000000000000 +5 1 0 1674072365755778540 4 99358 65 3 11 Mar 22, 2015 15:48:45.178578600 Mar 22, 2015 15:48:45.178578600 Apr 22, 2015 15:48:45.178578600 Mar 16, 2015 05:30:12.000000000 Mar 25, 2015 15:24:51.516005500 0 0 0 https://odc.officeapps.live.com/odc/stat/MicrosoftAjax.js?b=3914.1000 MicrosoftAjax[1].js 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 00000b0019458025b6010000190000030000000438e4200001903460000490110000120001805000000bc400000000001000000000010040008000400000060400000000 +29 1 0 1674072366258284051 4 5202 65 0 3 Mar 23, 2015 20:27:39.556879200 Mar 23, 2015 20:27:39.556879200 Jan 01, 1601 00:00:00.000000000 Jan 01, 1601 00:00:00.000000000 Mar 23, 2015 20:27:39.556879200 0 0 0 https://odc.officeapps.live.com/odc/emailhrd?lcid=1033&syslcid=1033&uilcid=1033&app=3&ver=15&build=15.0.4420&p=0&a=1&hm=1&sp=0 emailhrd[3].htm 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 00000b0019458025150000008100000000000000 +7 1 0 1674072366335171906 1 2081 65 2 21 Mar 25, 2015 15:24:51.578405500 Mar 25, 2015 15:24:51.578405500 Jan 01, 1601 00:00:00.000000000 Jan 01, 1601 00:00:00.000000000 Mar 25, 2015 15:24:51.578405500 0 0 0 https://odc.officeapps.live.com/odc/jsonstrings?b=3914.1000&g=EmailHrd&mkt=1033 jsonstrings[1].js 485454502f312e3120323030204f4b0d0a436f6e74656e742d547970653a20746578742f6a6176617363726970743b20636861727365743d7574662d380d0a582d436f7272656c6174696f6e49643a2036323336363861352d623738382d343861652d383736632d3065373534396362383938650d0a582d5573657253657373696f6e49643a2036323336363861352d623738382d343861652d383736632d3065373534396362383938650d0a582d4f666669636546453a204f646346726f6e74456e645f494e5f33360d0a582d4f666669636556657273696f6e3a2031362e302e333931342e313030300d0a582d4f6666696365436c75737465723a206e6375732d6f64632e6f6666696365617070732e6c6976652e636f6d0d0a5033503a2043503d2243414f2044535020434f522041444d612044455620434f4e692054454c69204355522050534120505344205441492049564469204f55522053414d69204255532044454d204e41562053544120554e4920434f4d20494e5420504859204f4e4c2046494e20505552220d0a436f6e74656e742d446973706f736974696f6e3a20696e6c696e653b2066696c656e616d653d6a736f6e737472696e67732e6a730d0a582d506f77657265642d42793a204153502e4e45540d0a436f6e74656e742d4c656e6774683a20323038310d0a0d0a +28 1 0 1674072366419296017 3 5205 65 0 7 Mar 25, 2015 15:24:51.500405500 Mar 25, 2015 15:24:51.500405500 Jan 01, 1601 00:00:00.000000000 Jan 01, 1601 00:00:00.000000000 Mar 25, 2015 15:24:51.500405500 0 0 0 https://odc.officeapps.live.com/odc/emailhrd?lcid=1033&syslcid=1033&uilcid=1033&app=0&ver=15&build=15.0.4420&p=0&a=1&hm=1&sp=0 emailhrd[1].htm 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 00000b0019458025150000008100000000000000 +3 1 0 1674072366621470816 2 222626 65 3 11 Mar 22, 2015 15:48:45.053778400 Mar 22, 2015 15:48:44.835378000 Apr 22, 2015 15:48:44.835378000 Mar 16, 2015 05:30:14.000000000 Mar 25, 2015 15:24:51.516005500 0 0 0 https://odc.officeapps.live.com/odc/stat/jquery.js?b=3914.1000 jquery[1].js 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 00000b00194580251504000033420f0040eef822d78546387600a01d00000140200000f2068201002c67670c2008200000814172a10000400000000040b01f09004500008001400000002025018430088d00400080000800000000000800400000000000000800010000000000000200000000040020000000000000001010200000000000008008222222420021020000000000 +2 1 0 1674072366853611030 3 4742 65 3 11 Mar 22, 2015 15:48:44.710577800 Mar 22, 2015 15:48:44.710577800 Apr 22, 2015 15:48:44.710577800 Mar 16, 2015 05:30:18.000000000 Mar 25, 2015 15:24:51.516005500 0 0 0 https://odc.officeapps.live.com/odc/stat/EmailHrd.css?b=3914.1000 EmailHrd[1].css 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 +4 1 0 1674072366955667109 1 17756 65 3 11 Mar 22, 2015 15:48:45.178578600 Mar 22, 2015 15:48:45.162978600 Apr 22, 2015 15:48:45.162978600 Mar 16, 2015 05:30:16.000000000 Mar 25, 2015 15:24:51.516005500 0 0 0 https://odc.officeapps.live.com/odc/stat/CommonDiagnostics.js?b=3914.1000 CommonDiagnostics[1].js 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 00000b001945802582000000030102f000980290905b80b1031e68010000000000000000 +14 1 0 1772484056099875307 3 182 2113 0 1 Mar 23, 2015 17:27:40.870603800 Mar 23, 2015 17:27:40.840603400 Mar 23, 2015 16:27:40.840603400 Jan 01, 1601 00:00:00.000000000 Mar 23, 2015 17:27:40.870603800 0 0 0 https://go.microsoft.com/fwlink/?LinkId=251136 fwlink[1].htm 485454502f312e312033303220466f756e640d0a436f6e74656e742d547970653a20746578742f68746d6c3b20636861727365743d7574662d380d0a4c6f636174696f6e3a2068747470733a2f2f69656f6e6c696e652e6d6963726f736f66742e636f6d2f69652f6b6e6f776e5f70726f7669646572735f646f776e6c6f61645f76312e786d6c0d0a582d4173704e65742d56657273696f6e3a20342e302e33303331390d0a582d506f77657265642d42793a204153502e4e45540d0a436f6e74656e742d4c656e6774683a203138320d0a0d0a +54 1 0 1855271783392132830 4 1406 69 0 1 Mar 25, 2015 14:47:30.032105500 Mar 25, 2015 14:47:30.032105500 Mar 31, 2015 11:40:57.032105500 Mar 05, 2015 01:30:16.000000000 Mar 25, 2015 14:47:30.032105500 0 0 0 http://a.fsdn.com/con/img/sftheme/favicon.ico favicon[4].ico 485454502f312e3120323030204f4b0d0a436f6e74656e742d547970653a20696d6167652f782d69636f6e0d0a436f6e74656e742d4c656e6774683a20313430360d0a4163636573732d436f6e74726f6c2d416c6c6f772d4f726967696e3a202a0d0a0d0a 0700000000000010 +56 1 0 2485604597113296946 2 4 4161 0 1 Mar 25, 2015 14:58:35.148805500 Mar 25, 2015 14:58:35.148805500 Jan 01, 1601 00:00:00.000000000 Jan 01, 1601 00:00:00.000000000 Mar 25, 2015 14:58:35.148805500 0 0 0 http://service.piriform.com/installcheck.aspx?p=1&v=5.04.5151&vx=&l=1033&b=1&o=6.1W6&g=2&i=1&a=0 installcheck[1].htm 485454502f312e3120323030204f4b0d0a436f6e74656e742d547970653a20746578742f68746d6c3b20636861727365743d7574662d380d0a582d506f77657265642d42793a204153502e4e45540d0a436f6e74656e742d4c656e6774683a20340d0a0d0a +27 1 0 2491798896612149113 3 52630 69 1 1 Mar 23, 2015 18:13:58.382908000 Mar 23, 2015 18:13:58.052907600 Mar 24, 2015 18:13:56.052907600 Feb 27, 2015 00:46:44.000000000 Mar 23, 2015 18:13:58.382908000 0 0 0 https://msdn.microsoft.com/Areas/Epx/Themes/Windows/Content/Winlogo_favicon.ico Winlogo_favicon[1].ico 485454502f312e3120323030204f4b0d0a436f6e74656e742d4c656e6774683a2035323633300d0a436f6e74656e742d547970653a20696d6167652f782d69636f6e0d0a455461673a202237323162366463323635326430313a30220d0a5033503a2043503d22414c4c20494e442044535020434f522041444d20434f4e6f20435552204355536f204956416f204956446f2050534120505344205441492054454c6f204f55522053414d6f20434e5420434f4d20494e54204e4156204f4e4c20504859205052452050555220554e49220d0a582d506f77657265642d42793a204153502e4e45540d0a582d496e7374616e63653a2043483130370d0a582d55412d436f6d70617469626c653a2049453d656467650d0a582d506f77657265642d42793a204152522f322e350d0a5033503a2043503d22414c4c20494e442044535020434f522041444d20434f4e6f20435552204355536f204956416f204956446f2050534120505344205441492054454c6f204f55522053414d6f20434e5420434f4d20494e54204e4156204f4e4c20504859205052452050555220554e49220d0a582d506f77657265642d42793a204153502e4e45540d0a582d496e7374616e63653a2043483130370d0a0d0a 0700000000000010 +47 1 0 2596437241225949487 4 68179 65 2 2 Mar 23, 2015 20:34:09.765981800 Mar 23, 2015 20:34:09.734781800 Mar 23, 2015 20:42:08.734781800 Jan 01, 1601 00:00:00.000000000 Mar 23, 2015 20:34:29.099416100 0 0 0 https://oauth.googleusercontent.com/gadgets/js/core:rpc:shindig.random:shindig.sha1.js?c=2 core_rpc_shindig.random_shindig.sha1[1].js 485454502f312e3120323030204f4b0d0a436f6e74656e742d547970653a20746578742f6a6176617363726970743b20636861727365743d7574662d380d0a582d436f6e74656e742d547970652d4f7074696f6e733a206e6f736e6966660d0a582d4672616d652d4f7074696f6e733a2053414d454f524947494e0d0a582d5853532d50726f74656374696f6e3a20313b206d6f64653d626c6f636b0d0a416c7465726e6174652d50726f746f636f6c3a203434333a717569632c703d302e350d0a436f6e74656e742d4c656e6774683a2036383137390d0a0d0a 00000b00194580252b010000ff4d24800c58c2479102028200000800008206000000010000c0f0630cc8f4df42d0ffe39f060000 +12 1 0 3813309684894133935 2 4286 69 1 1 Mar 23, 2015 17:27:39.918391700 Mar 23, 2015 17:27:39.902791700 Dec 02, 2015 06:55:01.902791700 Nov 25, 2014 22:09:18.000000000 Mar 23, 2015 17:27:39.918391700 0 0 0 http://static-hp-eus.s-msn.com/sc/54/4f1880.ico 4f1880[1].ico 485454502f312e3120323030204f4b0d0a436f6e74656e742d547970653a20696d6167652f782d69636f6e0d0a455461673a2022306262653937346663386430313a30220d0a582d506f77657265642d42793a204153502e4e45540d0a4163636573732d436f6e74726f6c2d416c6c6f772d4f726967696e3a202a0d0a4163636573732d436f6e74726f6c2d416c6c6f772d4d6574686f64733a20484541442c4745542c4f5054494f4e530d0a582d5853532d50726f74656374696f6e3a20310d0a436f6e74656e742d4c656e6774683a20343238360d0a0d0a 0700000000000010 +15 1 0 4329175334228404777 2 90518 65 0 1 Mar 23, 2015 17:27:41.333110900 Mar 23, 2015 17:27:41.043106500 Sep 19, 2015 17:27:39.043106500 Oct 06, 2014 17:20:33.000000000 Mar 23, 2015 17:27:41.333110900 0 0 0 https://ieonline.microsoft.com/ie/known_providers_download_v1.xml known_providers_download_v1[1].xml 485454502f312e3120323030204f4b0d0a436f6e74656e742d4c656e6774683a2039303531380d0a436f6e74656e742d547970653a20746578742f786d6c0d0a566172793a204163636570742d456e636f64696e670d0a0d0a +20 1 0 4329175334302063107 1 18176 65 1 1 Mar 23, 2015 17:28:40.228145200 Mar 23, 2015 17:28:40.218145200 Mar 23, 2015 18:28:38.218145200 Jan 01, 1601 00:00:00.000000000 Mar 23, 2015 17:28:40.228145200 0 0 0 https://ieonline.microsoft.com/iedomainsuggestions/ie11/suggestions.en-US suggestions[1].en-US 485454502f312e3120323030204f4b0d0a436f6e74656e742d4c656e6774683a2031383137360d0a436f6e74656e742d547970653a206170706c69636174696f6e2f6f637465742d73747265616d0d0a455461673a20504a624a6b3141476b4e476e6548504e5972786a6d7a6f515a54383d0d0a566172793a204163636570742d456e636f64696e670d0a0d0a +57 1 0 4741347428400884922 1 24 65 0 1 Mar 25, 2015 15:15:55.376005500 Mar 25, 2015 15:15:55.376005500 Mar 25, 2015 14:15:55.376005500 Jan 01, 1601 00:00:00.000000000 Mar 25, 2015 15:15:55.376005500 0 0 0 https://www.piriform.com/go/app_cc_pro_trialkey app_cc_pro_trialkey[1].htm 485454502f312e3120323030204f4b0d0a436f6e74656e742d547970653a20746578742f68746d6c3b20636861727365743d7574662d380d0a436f6e74656e742d4c656e6774683a2032340d0a582d5365727665642d42793a2063616368652d646677313832332d4446570d0a582d43616368653a204849540d0a566172793a204163636570742d456e636f64696e670d0a55736572436f756e7472793a2055530d0a0d0a +19 1 0 4932032904189260812 2 4286 69 0 1 Mar 23, 2015 17:28:18.780805800 Mar 23, 2015 17:28:18.749605700 Sep 19, 2015 17:28:17.749605700 Oct 19, 2013 01:08:06.000000000 Mar 23, 2015 17:28:18.780805800 0 0 0 http://www.bing.com/s/a/bing_p_lg.ico bing_p_lg[1].ico 485454502f312e3120323030204f4b0d0a436f6e74656e742d4c656e6774683a20343238360d0a436f6e74656e742d547970653a20696d6167652f782d69636f6e0d0a566172793a204163636570742d456e636f64696e670d0a0d0a 0700000000000010 +13 1 0 4932032905459625528 4 1150 65 0 2 Mar 23, 2015 17:27:40.285594800 Mar 23, 2015 17:27:40.285594800 Sep 19, 2015 17:27:38.285594800 Oct 19, 2013 01:08:06.000000000 Mar 23, 2015 17:27:41.338111000 0 0 0 http://www.bing.com/favicon.ico favicon[1].ico 485454502f312e3120323030204f4b0d0a436f6e74656e742d4c656e6774683a20313135300d0a436f6e74656e742d547970653a20696d6167652f782d69636f6e0d0a0d0a +26 1 0 5331463131104194101 4 2734 69 1 1 Mar 23, 2015 18:12:52.663301400 Mar 23, 2015 18:12:52.553301300 Jan 01, 1601 00:00:00.000000000 Sep 30, 2014 15:31:27.000000000 Mar 23, 2015 18:12:52.663301400 0 1 0 http://bits.wikimedia.org/favicon/wikipedia.ico wikipedia[1].ico 485454502f312e3120323030204f4b0d0a582d506f77657265642d42793a204848564d2f332e332e302d7374617469630d0a455461673a20226161652d35303434613133613139316330220d0a436f6e74656e742d547970653a20696d6167652f766e642e6d6963726f736f66742e69636f6e0d0a436f6e74656e742d4c656e6774683a20323733340d0a582d5661726e6973683a203334363130313639353420333436303837313235330d0a582d43616368653a2063703130363920686974202836353231290d0a0d0a 0700000000000010 +55 1 0 6170065829203635768 3 5430 69 1 1 Mar 25, 2015 14:47:55.349505500 Mar 25, 2015 14:47:55.255905500 Mar 31, 2015 08:18:49.255905500 Sep 16, 2009 11:43:45.000000000 Mar 25, 2015 14:47:55.349505500 0 0 0 http://s1.pir.fm/favicon.ico favicon[2].ico 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 0700000000000010 +37 1 0 6301957378392537969 4 74308 65 2 2 Mar 23, 2015 20:34:08.345379300 Mar 23, 2015 20:34:08.314179200 Mar 17, 2016 15:53:27.314179200 Mar 18, 2015 12:30:15.000000000 Mar 23, 2015 20:34:28.943415800 0 0 0 https://www.gstatic.com/common_sharing/static/client/css/2251474084-share_application_jfk_ltr.css 2251474084-share_application_jfk_ltr[1].css 485454502f312e3120323030204f4b0d0a436f6e74656e742d547970653a20746578742f6373730d0a582d436f6e74656e742d547970652d4f7074696f6e733a206e6f736e6966660d0a582d5853532d50726f74656374696f6e3a20313b206d6f64653d626c6f636b0d0a416c7465726e6174652d50726f746f636f6c3a203434333a717569632c703d302e350d0a436f6e74656e742d4c656e6774683a2037343330380d0a0d0a +38 1 0 6301957379338616632 4 451305 65 2 2 Mar 23, 2015 20:34:08.470179500 Mar 23, 2015 20:34:08.314179200 Mar 17, 2016 15:53:27.314179200 Mar 18, 2015 12:30:15.000000000 Mar 23, 2015 20:34:28.943415800 0 0 0 https://www.gstatic.com/common_sharing/static/client/js/1432103611-sharing_core.js 1432103611-sharing_core[1].js 485454502f312e3120323030204f4b0d0a436f6e74656e742d547970653a20746578742f6a6176617363726970740d0a582d436f6e74656e742d547970652d4f7074696f6e733a206e6f736e6966660d0a582d5853532d50726f74656374696f6e3a20313b206d6f64653d626c6f636b0d0a416c7465726e6174652d50726f746f636f6c3a203434333a717569632c703d302e350d0a436f6e74656e742d4c656e6774683a203435313330350d0a0d0a 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 +52 1 0 6319077626156019158 4 2550 69 1 1 Mar 25, 2015 14:46:59.450705500 Mar 25, 2015 14:46:59.435105500 Feb 07, 2016 08:55:36.435105500 Jan 29, 2013 21:10:32.000000000 Mar 25, 2015 14:46:59.450705500 0 0 0 http://eraser2.heidi.ie/wp-content/uploads/2013/01/favicon.ico favicon[3].ico 485454502f312e3120323030204f4b0d0a436f6e74656e742d547970653a20696d6167652f782d69636f6e0d0a455461673a20223966362d34643437336432656534323030220d0a507261676d613a207075626c69630d0a582d43616368653a204869742066726f6d20636c6f756466726f6e740d0a582d416d7a2d43662d49643a204c5941746e667a4e484b566e44596778664150536f723945464d6237714a5a46416d54627536677278327564617438747251716647413d3d0d0a436f6e74656e742d4c656e6774683a20323535300d0a0d0a 0700000000000010 +17 1 0 7073498621879297096 2 16 65 1 4 Mar 25, 2015 14:46:37.045605500 Mar 25, 2015 14:46:37.045605500 Jan 01, 1601 00:00:00.000000000 Sep 04, 2014 22:51:35.000000000 Mar 25, 2015 14:46:37.045605500 0 0 0 https://r20swj13mr.microsoft.com/ieblocklist/v1/urlblockindex.bin urlblockindex[1].bin 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 +18 1 0 7073498625611234024 3 0 65 1 1 Mar 23, 2015 17:28:01.863172900 Mar 23, 2015 17:28:01.858172600 Jan 01, 1601 00:00:00.000000000 Sep 04, 2014 22:51:35.000000000 Mar 23, 2015 17:28:01.863172900 0 0 0 https://r20swj13mr.microsoft.com/ieblocklist/v1/urlblocklist.bin urlblocklist[1].bin 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 +22 1 0 7099659503585305367 3 1229 69 1 2 Mar 23, 2015 18:08:18.463260300 Mar 23, 2015 18:08:18.463260300 Jan 01, 1601 00:00:00.000000000 Feb 05, 2015 05:44:19.000000000 Mar 23, 2015 18:08:18.463260300 0 1 0 http://sysinfotools.com/blog/wp-content/themes/beautiful-pro/images/favicon.ico favicon[1].ico 485454502f312e3120323030204f4b0d0a455461673a20223235633232662d3463642d35306535306362393437373566220d0a436f6e74656e742d4c656e6774683a20313232390d0a4b6565702d416c6976653a2074696d656f75743d31352c206d61783d3130300d0a436f6e74656e742d547970653a20696d6167652f782d69636f6e0d0a0d0a 0700000000000010 +16 1 0 7519702687860223544 1 17174 69 1 1 Mar 23, 2015 17:27:50.180407100 Mar 23, 2015 17:27:50.040006900 Mar 23, 2015 17:35:23.040006900 Aug 23, 2012 16:57:51.000000000 Mar 23, 2015 17:27:50.180407100 0 0 0 http://www.microsoft.com/favicon.ico favicon[1].ico 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 0700000000000010 +25 1 0 7539341224192971492 2 17174 69 1 1 Mar 23, 2015 18:12:47.181289700 Mar 23, 2015 18:12:47.081289600 Mar 23, 2015 18:16:59.081289600 Aug 23, 2012 16:57:51.000000000 Mar 23, 2015 18:12:47.181289700 0 0 0 https://www.microsoft.com/favicon.ico?v2 favicon[1].ico 485454502f312e3120323030204f4b0d0a436f6e74656e742d4c656e6774683a2031373137340d0a436f6e74656e742d547970653a20696d6167652f782d69636f6e0d0a455461673a20226635386135333665353038316364313a30220d0a5033503a2043503d22414c4c20494e442044535020434f522041444d20434f4e6f20435552204355536f204956416f204956446f2050534120505344205441492054454c6f204f55522053414d6f20434e5420434f4d20494e54204e4156204f4e4c20504859205052452050555220554e49220d0a565461673a203433383138383532363330303030303030300d0a582d506f77657265642d42793a204153502e4e45540d0a582d506f77657265642d42793a204152522f322e350d0a582d506f77657265642d42793a204153502e4e45540d0a582d4343433a2055530d0a582d4349443a20320d0a0d0a 0700000000000010 +51 1 0 7765466333922742444 4 44 1 4 1 Mar 24, 2015 13:34:23.550041900 Mar 24, 2015 13:34:23.550041900 Jan 01, 1601 00:00:00.000000000 Jan 01, 1601 00:00:00.000000000 Mar 24, 2015 13:34:23.550041900 0 0 0 res://C:\\Program%20Files\\Microsoft%20Office\\Office15\\1033\\OUTLWVW.DLL/gap.gif gap[1] +41 1 0 8729872286227399428 2 616 65 0 2 Mar 23, 2015 20:34:09.625581600 Mar 23, 2015 20:34:09.187780800 Mar 24, 2015 20:34:09.187780800 Jan 01, 1601 00:00:00.000000000 Mar 23, 2015 20:34:29.099416100 0 0 0 https://accounts.google.com/o/oauth2/postmessageRelay?parent=https%3A%2F%2Fdrive.google.com postmessageRelay[1].htm 485454502f312e3120323030204f4b0d0a436f6e74656e742d547970653a20746578742f68746d6c3b20636861727365743d5554462d380d0a582d436f6e74656e742d547970652d4f7074696f6e733a206e6f736e6966660d0a582d5853532d50726f74656374696f6e3a20313b206d6f64653d626c6f636b0d0a416c7465726e6174652d50726f746f636f6c3a203434333a717569632c703d302e350d0a5472616e736665722d456e636f64696e673a206368756e6b65640d0a0d0a +48 1 0 9098717720063652296 3 519295 65 1 10 Mar 25, 2015 14:46:37.076805500 Mar 23, 2015 20:44:17.289742900 Mar 25, 2015 20:46:37.076805500 Mar 04, 2015 01:56:16.000000000 Mar 25, 2015 14:46:37.045605500 0 0 0 https://iecvlist.microsoft.com/IE11/1387494476607/iecompatviewlist.xml iecompatviewlist[1].xml 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 diff --git a/NIST_Data_Leakage_Case/py_version/pycode/webhistory_python/IE11_container_6_9.csv b/NIST_Data_Leakage_Case/py_version/pycode/webhistory_python/IE11_container_6_9.csv new file mode 100644 index 0000000..fa6efc1 --- /dev/null +++ b/NIST_Data_Leakage_Case/py_version/pycode/webhistory_python/IE11_container_6_9.csv @@ -0,0 +1,190 @@ +EntryId ContainerId CacheId UrlHash SecureDirectory FileSize Type Flags AccessCount SyncTime CreationTime ExpiryTime ModifiedTime AccessedTime PostCheckTime SyncCount ExemptionDelta Url Filename FileExtension RequestHeaders ResponseHeaders RedirectUrl Group ExtraData +186 6 0 80482696689587059 0 0 2097153 0 1 Mar 25, 2015 14:48:22.828705500 Jan 01, 1601 00:00:00.000000000 Apr 20, 2015 14:41:13.332498900 Mar 25, 2015 14:48:22.828705500 Mar 25, 2015 14:48:22.828705500 0 1 0 Visited: informant@http://www.facebook.com/v2.0/plugins/like.php?action=like&app_id=&channel=http%3A%2F%2Fstatic.ak.facebook.com%2Fconnect%2Fxd_arbiter%2F6Dg4oLkBbYq.js%3Fversion%3D41%23cb%3Df481ba2f70b255%26domain%3Dwww.piriform.com%26origin%3Dhttp%253A%252F%252Fwww.piriform.com%252Fffff418cbd4aa2%26relation%3Dparent.parent&container_width=270&href=https%3A%2F%2Fwww.facebook.com%2FPiriform&layout=standard&locale=en_US&sdk=joey&share=true&show_faces=true&width=250 790000007500000031535053a114020000000000c0000000000000461100000017000000001300000000000000110000000d0000000013000000000000001100000009000000001300000000000000110000000600000000130000000000000015000000180000000040000000c036e736e966d0010000000000000000530000004f00000031535053a114020000000000c0000000000000461100000021000000001300000000000000110000001c00000000030000000000000011000000200000000003000000000000000000000000000000 +104 6 0 80482696805975883 0 0 2097153 0 1 Mar 23, 2015 20:44:27.994912000 Jan 01, 1601 00:00:00.000000000 Apr 18, 2015 20:44:27.995435000 Mar 23, 2015 20:44:27.994912000 Mar 23, 2015 20:44:27.994912000 0 1 0 Visited: informant@http://www.facebook.com/plugins/like.php?action=like&app_id=&channel=http%3A%2F%2Fstatic.ak.facebook.com%2Fconnect%2Fxd_arbiter%2F6Dg4oLkBbYq.js%3Fversion%3D41%23cb%3Df24fad7ef30bdac%26domain%3Dwww.entertainmentwise.com%26origin%3Dhttp%253A%252F%252Fwww.entertainmentwise.com%252Fff4b9e83a017f8%26relation%3Dparent.parent&container_width=886&href=https%3A%2F%2Fwww.facebook.com%2FEntertainmentwise&layout=button_count&locale=en_GB&sdk=joey&share=false&show_faces=false 790000007500000031535053a114020000000000c0000000000000461100000017000000001300000000000000110000000d0000000013000000000000001100000009000000001300000000000000110000000600000000130000000000000015000000180000000040000000a053b5a08865d0010000000000000000530000004f00000031535053a114020000000000c0000000000000461100000021000000001300000000000000110000001c00000000030000000000000011000000200000000003000000000000000000000000000000 +64 6 0 80482697550090686 0 0 2097153 0 1 Mar 23, 2015 18:11:13.018592600 Jan 01, 1601 00:00:00.000000000 Apr 18, 2015 18:04:03.522386000 Mar 23, 2015 18:11:13.018592600 Mar 23, 2015 18:11:13.018592600 0 1 0 790000007500000031535053a114020000000000c0000000000000461100000017000000001300000000000000110000000d0000000013000000000000001100000009000000001300000000000000110000000600000000130000000000000015000000180000000040000000a05513387365d0010000000000000000530000004f00000031535053a114020000000000c0000000000000461100000021000000001300000000000000110000001c00000000030000000000000011000000200000000003000000000000000000000000000000 +63 6 0 80482697868884817 0 0 2097153 0 1 Mar 23, 2015 18:11:13.003592400 Jan 01, 1601 00:00:00.000000000 Apr 18, 2015 18:04:03.507385800 Mar 23, 2015 18:11:13.003592400 Mar 23, 2015 18:11:13.003592400 0 1 0 790000007500000031535053a114020000000000c0000000000000461100000017000000001300000000000000110000000d0000000013000000000000001100000009000000001300000000000000110000000600000000130000000000000015000000180000000040000000b00b11387365d0010000000000000000530000004f00000031535053a114020000000000c0000000000000461100000021000000001300000000000000110000001c00000000030000000000000011000000200000000003000000000000000000000000000000 +62 6 0 80482698128200905 0 0 2097153 0 1 Mar 23, 2015 18:11:12.988592200 Jan 01, 1601 00:00:00.000000000 Apr 18, 2015 18:04:03.492385600 Mar 23, 2015 18:11:12.988592200 Mar 23, 2015 18:11:12.988592200 0 1 0 790000007500000031535053a114020000000000c0000000000000461100000017000000001300000000000000110000000d0000000013000000000000001100000009000000001300000000000000110000000600000000130000000000000015000000180000000040000000c0c10e387365d0010000000000000000530000004f00000031535053a114020000000000c0000000000000461100000021000000001300000000000000110000001c00000000030000000000000011000000200000000003000000000000000000000000000000 +26 6 0 80482699999807037 0 0 2097153 0 2 Mar 23, 2015 17:27:48.113002800 Jan 01, 1601 00:00:00.000000000 Apr 18, 2015 17:27:48.113525800 Mar 23, 2015 17:27:48.113002800 Mar 23, 2015 17:27:48.113002800 0 0 0 Visited: informant@http://www.facebook.com/plugins/like.php?href=http%3a%2f%2fwww.facebook.com%2fwindows&locale=en_US&width=227&show_faces=false&send=false&layout=button_count&action=like&colorscheme=light&font=segoe+ui 790000007500000031535053a114020000000000c0000000000000461100000017000000001300000000000000110000000d000000001300000000000000110000000900000000130000000000000011000000060000000013000000000000001500000018000000004000000010606e276d65d0010000000000000000530000004f00000031535053a114020000000000c0000000000000461100000021000000001300000000000000110000001c00000000030000000000000011000000200000000003000000000000000000000000000000 +179 6 0 114854338827885764 0 0 2097153 0 1 Mar 25, 2015 14:47:34.774505500 Jan 01, 1601 00:00:00.000000000 Apr 20, 2015 14:47:34.775028500 Mar 25, 2015 14:47:34.774505500 Mar 25, 2015 14:47:34.774505500 0 1 0 Visited: informant@http://iweb.dl.sourceforge.net/project/eraser/Eraser%206/6.2/Eraser%206.2.0.2962.exe 790000007500000031535053a114020000000000c0000000000000461100000017000000001300000000000000110000000d000000001300000000000000110000000900000000130000000000000011000000060000000013000000000000001500000018000000004000000060c1421ae966d0010000000000000000530000004f00000031535053a114020000000000c0000000000000461100000021000000001300000000000000110000001c00000000030000000000000011000000200000000003000000000000000000000000000000 +118 6 0 165021354652003163 0 0 2097153 0 18 Mar 23, 2015 20:57:32.966427900 Jan 01, 1601 00:00:00.000000000 Apr 18, 2015 20:50:23.470221300 Mar 23, 2015 20:57:32.966427900 Mar 23, 2015 20:57:32.966427900 0 0 0 Visited: informant@javascript:"" 790000007500000031535053a114020000000000c0000000000000461100000017000000001300000000000000110000000d0000000013000000000000001100000009000000001300000000000000110000000600000000130000000000000015000000180000000040000000608c96748a65d0010000000000000000530000004f00000031535053a114020000000000c0000000000000461100000021000000001300000000000000110000001c00000000030000000000000011000000200000000003000000000000000000000000000000 +24 6 0 557063770659717202 0 0 2097153 0 4 Mar 25, 2015 14:48:22.756205500 Jan 01, 1601 00:00:00.000000000 Apr 20, 2015 14:41:13.259998900 Mar 25, 2015 14:48:22.756205500 Mar 25, 2015 14:48:22.756205500 0 0 0 Visited: informant@https://s-static.ak.facebook.com/connect/xd_arbiter/6Dg4oLkBbYq.js?version=41 790000007500000031535053a114020000000000c0000000000000461100000017000000001300000000000000110000000d0000000013000000000000001100000009000000001300000000000000110000000600000000130000000000000015000000180000000040000000403adc36e966d00100000000000000007c0200007802000031535053a114020000000000c0000000000000462902000011000000001f100000040000003c0000006300680061006e006e0065006c003d006600660066006600340031003800630062006400340061006100320026006f0072006900670069006e003d0068007400740070002500330041002500320046002500320046007700770077002e00700069007200690066006f0072006d002e0063006f006d000000450000006300680061006e006e0065006c003d006600660034006200390065003800330061003000310037006600380026006f0072006900670069006e003d0068007400740070002500330041002500320046002500320046007700770077002e0065006e007400650072007400610069006e006d0065006e00740077006900730065002e0063006f006d00000000004a0000006300680061006e006e0065006c003d006600320066003300360033003900630066003800310032003100640026006f0072006900670069006e003d0068007400740070002500330041002500320046002500320046007200650073006f00750072006300650073002e0069006e0066006f0073006500630069006e0073007400690074007500740065002e0063006f006d000000380000006300680061006e006e0065006c003d0066003200650066003500620036006600620062006100340064003000360026006f0072006900670069006e003d0068007400740070002500330041002500320046002500320046007700770077002e006d0073006e002e0063006f006d0000001100000021000000001300000000000000110000001c00000000030000000000000011000000200000000003000000000000000000000000000000 +152 6 0 562763060137796990 0 0 2097153 0 1 Mar 23, 2015 20:56:31.906758000 Jan 01, 1601 00:00:00.000000000 Apr 18, 2015 20:49:22.410551400 Mar 23, 2015 20:56:31.906758000 Mar 23, 2015 20:56:31.906758000 0 1 0 Visited: informant@http://ad.doubleclick.net/ad/N6357.wired.comOX2624/B8219731.115033175;sz=1x1;ord=1011159807? 790000007500000031535053a114020000000000c0000000000000461100000017000000001300000000000000110000000d0000000013000000000000001100000009000000001300000000000000110000000600000000130000000000000015000000180000000040000000208831508a65d0010000000000000000530000004f00000031535053a114020000000000c0000000000000461100000021000000001300000000000000110000001c00000000030000000000000011000000200000000003000000000000000000000000000000 +111 6 0 562763061283567214 0 0 2097153 0 1 Mar 23, 2015 20:44:48.997655700 Jan 01, 1601 00:00:00.000000000 Apr 18, 2015 20:44:48.995678600 Mar 23, 2015 20:44:48.995155600 Mar 23, 2015 20:44:48.997655700 0 1 0 Visited: informant@http://ad.doubleclick.net/adi/N5315.8763.VIBRANTMEDIAINC/B8531616.115372496;click=http://entertainmentwise.us.intellitxt.com/al.asp?ts=1427143458481&at=39&ipid=10258&di=111445982&syid=0&adid=0&pid=2&cc=us&rcc=us&mh=f2e8dec4f302d875005398ca37a64113&ll=0&hbll=0&id=E255F1B859B641DE9F233CB03E0315B4&idh=a2091699af48fdafe012c831edd4cd28&pvu=1408BAD572794420966AEC05E2A8CC2D&pvm=37084ef0a1bcd45cb8e0f864f4e87540&uf=60000000&ur=2099457&llip=0&ttv=1&redir=;sz=300x250;ord=$%7BTIMESTAMP%7D? 790000007500000031535053a114020000000000c0000000000000461100000017000000001300000000000000110000000d000000001300000000000000110000000900000000130000000000000011000000060000000013000000000000001500000018000000004000000030d339ad8865d0010000000000000000530000004f00000031535053a114020000000000c0000000000000461100000021000000001300000000000000110000001c00000000030000000000000011000000200000000003000000000000000000000000000000 +154 6 0 595770428058839883 0 0 2097153 0 1 Mar 23, 2015 20:57:33.518434000 Jan 01, 1601 00:00:00.000000000 Apr 18, 2015 20:50:24.022227400 Mar 23, 2015 20:57:33.518434000 Mar 23, 2015 20:57:33.518434000 0 1 0 Visited: informant@http://s0.2mdn.net/ads/richmedia/studio/pv2/35734276/20150304071314428/index.html?e=5&renderingType=2&leftOffset=300&topOffset=0&c=2Lnk6dOFDf&t=1 790000007500000031535053a114020000000000c0000000000000461100000017000000001300000000000000110000000d0000000013000000000000001100000009000000001300000000000000110000000600000000130000000000000015000000180000000040000000e0c6ea748a65d0010000000000000000530000004f00000031535053a114020000000000c0000000000000461100000021000000001300000000000000110000001c00000000030000000000000011000000200000000003000000000000000000000000000000 +19 6 0 595770430124736629 0 0 2097153 0 1 Mar 23, 2015 17:27:44.923166100 Jan 01, 1601 00:00:00.000000000 Apr 18, 2015 17:27:44.923689100 Mar 23, 2015 17:27:44.923166100 Mar 23, 2015 17:27:44.923166100 0 1 0 Visited: informant@http://s0.2mdn.net/2992003/1426525067236/14-1214_NET_WEB_simple_300x250_AS2.html 790000007500000031535053a114020000000000c0000000000000461100000017000000001300000000000000110000000d0000000013000000000000001100000009000000001300000000000000110000000600000000130000000000000015000000180000000040000000b09e87256d65d0010000000000000000530000004f00000031535053a114020000000000c0000000000000461100000021000000001300000000000000110000001c00000000030000000000000011000000200000000003000000000000000000000000000000 +178 6 0 595770430487682370 0 0 2097153 0 1 Mar 25, 2015 14:47:29.857305500 Jan 01, 1601 00:00:00.000000000 Apr 20, 2015 14:47:29.857828500 Mar 25, 2015 14:47:29.857305500 Mar 25, 2015 14:47:29.857305500 0 1 0 Visited: informant@http://s0.2mdn.net/4130639/1425334475716/GoogleCloud_300x250_Op1_Alt20.html 790000007500000031535053a114020000000000c0000000000000461100000017000000001300000000000000110000000d0000000013000000000000001100000009000000001300000000000000110000000600000000130000000000000015000000180000000040000000107b5417e966d0010000000000000000530000004f00000031535053a114020000000000c0000000000000461100000021000000001300000000000000110000001c00000000030000000000000011000000200000000003000000000000000000000000000000 +15 6 0 732815617030398074 0 0 2097153 4 1 Mar 22, 2015 15:24:21.900252800 Jan 01, 1601 00:00:00.000000000 Apr 17, 2015 15:11:08.000000000 Mar 22, 2015 15:11:06.832000000 Mar 22, 2015 15:24:21.900252800 0 0 0 Visited: informant@https://dl.google.com/update2/1.3.26.9/GoogleInstaller_en.application?appguid%3D%7B8A69D345-D564-463C-AFF1-A69D9E530F96%7D%26iid%3D%7B68685C6D-795B-6A37-5D90-2AB8DC4D402B%7D%26lang%3Den%26browser%3D2%26usagestats%3D0%26appname%3DGoogle%2520Chrome%26needsadmin%3Dprefers%26brand%3DCHNG 1000020000000000000000000000000000000000 +65 6 0 830830949458643696 0 0 2097153 0 1 Mar 23, 2015 18:11:14.957614200 Jan 01, 1601 00:00:00.000000000 Apr 18, 2015 18:04:05.461407600 Mar 23, 2015 18:11:14.957614200 Mar 23, 2015 18:11:14.957614200 0 1 0 Visited: informant@http://fast.wistia.com/embed/iframe_shim 790000007500000031535053a114020000000000c0000000000000461100000017000000001300000000000000110000000d0000000013000000000000001100000009000000001300000000000000110000000600000000130000000000000015000000180000000040000000d0333b397365d0010000000000000000530000004f00000031535053a114020000000000c0000000000000461100000021000000001300000000000000110000001c00000000030000000000000011000000200000000003000000000000000000000000000000 +170 6 0 1261613740057316809 0 0 2097153 0 1 Mar 25, 2015 14:47:04.990405500 Jan 01, 1601 00:00:00.000000000 Apr 20, 2015 14:47:04.990928500 Mar 25, 2015 14:47:04.990405500 Mar 25, 2015 14:47:04.990405500 0 1 0 790000007500000031535053a114020000000000c0000000000000461100000017000000001300000000000000110000000d0000000013000000000000001100000009000000001300000000000000110000000600000000130000000000000015000000180000000040000000e0138208e966d0010000000000000000530000004f00000031535053a114020000000000c0000000000000461100000021000000001300000000000000110000001c00000000030000000000000011000000200000000003000000000000000000000000000000 +151 6 0 1261613740187088581 0 0 2097153 0 1 Mar 23, 2015 20:56:29.621216900 Jan 01, 1601 00:00:00.000000000 Apr 18, 2015 20:49:20.125010300 Mar 23, 2015 20:56:29.621216900 Mar 23, 2015 20:56:29.621216900 0 1 0 790000007500000031535053a114020000000000c0000000000000461100000017000000001300000000000000110000000d000000001300000000000000110000000900000000130000000000000011000000060000000013000000000000001500000018000000004000000050ded44e8a65d0010000000000000000530000004f00000031535053a114020000000000c0000000000000461100000021000000001300000000000000110000001c00000000030000000000000011000000200000000003000000000000000000000000000000 +114 6 0 1261613740373007882 0 0 2097153 0 1 Mar 23, 2015 20:45:20.950223400 Jan 01, 1601 00:00:00.000000000 Apr 18, 2015 20:45:20.940746400 Mar 23, 2015 20:45:20.940223400 Mar 23, 2015 20:45:20.950223400 0 1 0 790000007500000031535053a114020000000000c0000000000000461100000017000000001300000000000000110000000d0000000013000000000000001100000009000000001300000000000000110000000600000000130000000000000015000000180000000040000000c03e44c08865d0010000000000000000530000004f00000031535053a114020000000000c0000000000000461100000021000000001300000000000000110000001c00000000030000000000000011000000200000000003000000000000000000000000000000 +167 6 0 1261613740460408238 0 0 2097153 0 1 Mar 25, 2015 14:47:00.324305500 Jan 01, 1601 00:00:00.000000000 Apr 20, 2015 14:47:00.324828500 Mar 25, 2015 14:47:00.324305500 Mar 25, 2015 14:47:00.324305500 0 1 0 790000007500000031535053a114020000000000c0000000000000461100000017000000001300000000000000110000000d0000000013000000000000001100000009000000001300000000000000110000000600000000130000000000000015000000180000000040000000401aba05e966d0010000000000000000530000004f00000031535053a114020000000000c0000000000000461100000021000000001300000000000000110000001c00000000030000000000000011000000200000000003000000000000000000000000000000 +166 6 0 1261613740567831912 0 0 2097153 0 1 Mar 25, 2015 14:47:00.324305500 Jan 01, 1601 00:00:00.000000000 Apr 20, 2015 14:47:00.324828500 Mar 25, 2015 14:47:00.324305500 Mar 25, 2015 14:47:00.324305500 0 1 0 790000007500000031535053a114020000000000c0000000000000461100000017000000001300000000000000110000000d0000000013000000000000001100000009000000001300000000000000110000000600000000130000000000000015000000180000000040000000401aba05e966d0010000000000000000530000004f00000031535053a114020000000000c0000000000000461100000021000000001300000000000000110000001c00000000030000000000000011000000200000000003000000000000000000000000000000 +100 6 0 1261613740695733666 0 0 2097153 0 3 Mar 23, 2015 20:56:29.403713500 Jan 01, 1601 00:00:00.000000000 Apr 18, 2015 20:49:19.907506900 Mar 23, 2015 20:56:29.403713500 Mar 23, 2015 20:56:29.403713500 0 0 0 Visited: informant@http://googleads.g.doubleclick.net/pagead/html/r20150317/r20150224/zrt_lookup.html 790000007500000031535053a114020000000000c0000000000000461100000017000000001300000000000000110000000d0000000013000000000000001100000009000000001300000000000000110000000600000000130000000000000015000000180000000040000000b09ab34e8a65d0010000000000000000530000004f00000031535053a114020000000000c0000000000000461100000021000000001300000000000000110000001c00000000030000000000000011000000200000000003000000000000000000000000000000 +162 6 0 1261613740869941380 0 0 2097153 0 3 Mar 25, 2015 14:46:59.388305500 Jan 01, 1601 00:00:00.000000000 Apr 20, 2015 14:46:59.388828500 Mar 25, 2015 14:46:59.388305500 Mar 25, 2015 14:46:59.388305500 0 0 0 Visited: informant@http://googleads.g.doubleclick.net/pagead/blank.gif +101 6 0 1261613741143328492 0 0 2097153 0 1 Mar 23, 2015 20:44:26.579888600 Jan 01, 1601 00:00:00.000000000 Apr 18, 2015 20:44:26.580411600 Mar 23, 2015 20:44:26.579888600 Mar 23, 2015 20:44:26.579888600 0 1 0 790000007500000031535053a114020000000000c0000000000000461100000017000000001300000000000000110000000d0000000013000000000000001100000009000000001300000000000000110000000600000000130000000000000015000000180000000040000000306add9f8865d0010000000000000000530000004f00000031535053a114020000000000c0000000000000461100000021000000001300000000000000110000001c00000000030000000000000011000000200000000003000000000000000000000000000000 +184 6 0 1261613742292804371 0 0 2097153 0 1 Mar 25, 2015 14:48:21.830805500 Jan 01, 1601 00:00:00.000000000 Apr 20, 2015 14:41:12.334598900 Mar 25, 2015 14:48:21.830805500 Mar 25, 2015 14:48:21.830805500 0 1 0 Visited: informant@http://googleads.g.doubleclick.net/pagead/viewthroughconversion/1051649941/?random=1427294901831&cv=7&fst=1427294901831&num=1&fmt=1&guid=ON&u_h=1200&u_w=1920&u_ah=1160&u_aw=1920&u_cd=24&u_his=2&u_tz=-240&u_java=true&u_nplug=0&u_nmime=0&frm=0&url=http%3A//www.piriform.com/ccleaner/download/standard&ref=http%3A//www.piriform.com/ccleaner/download&vis=1 790000007500000031535053a114020000000000c0000000000000461100000017000000001300000000000000110000000d000000001300000000000000110000000900000000130000000000000011000000060000000013000000000000001500000018000000004000000060ee4e36e966d0010000000000000000530000004f00000031535053a114020000000000c0000000000000461100000021000000001300000000000000110000001c00000000030000000000000011000000200000000003000000000000000000000000000000 +165 6 0 1261613742346579095 0 0 2097153 0 1 Mar 25, 2015 14:47:00.261905500 Jan 01, 1601 00:00:00.000000000 Apr 20, 2015 14:47:00.262428500 Mar 25, 2015 14:47:00.261905500 Mar 25, 2015 14:47:00.261905500 0 1 0 790000007500000031535053a114020000000000c0000000000000461100000017000000001300000000000000110000000d0000000013000000000000001100000009000000001300000000000000110000000600000000130000000000000015000000180000000040000000507db005e966d0010000000000000000530000004f00000031535053a114020000000000c0000000000000461100000021000000001300000000000000110000001c00000000030000000000000011000000200000000003000000000000000000000000000000 +89 6 0 1261613742672795343 0 0 2097153 0 4 Mar 25, 2015 14:47:00.905905500 Jan 01, 1601 00:00:00.000000000 Apr 20, 2015 14:47:00.906428500 Mar 25, 2015 14:47:00.905905500 Mar 25, 2015 14:47:00.905905500 0 0 0 Visited: informant@http://googleads.g.doubleclick.net/pagead/drt/s?v=r20120211 790000007500000031535053a114020000000000c0000000000000461100000017000000001300000000000000110000000d000000001300000000000000110000000900000000130000000000000011000000060000000013000000000000001500000018000000004000000090c11206e966d0010000000000000000530000004f00000031535053a114020000000000c0000000000000461100000021000000001300000000000000110000001c00000000030000000000000011000000200000000003000000000000000000000000000000 +164 6 0 1261613742878575258 0 0 2097153 0 2 Mar 25, 2015 14:47:04.631605500 Jan 01, 1601 00:00:00.000000000 Apr 20, 2015 14:47:04.632128500 Mar 25, 2015 14:47:04.631605500 Mar 25, 2015 14:47:04.631605500 0 0 0 Visited: informant@http://googleads.g.doubleclick.net/pagead/html/r20150319/r20150224/zrt_lookup.html 790000007500000031535053a114020000000000c0000000000000461100000017000000001300000000000000110000000d0000000013000000000000001100000009000000001300000000000000110000000600000000130000000000000015000000180000000040000000704c4b08e966d0010000000000000000530000004f00000031535053a114020000000000c0000000000000461100000021000000001300000000000000110000001c00000000030000000000000011000000200000000003000000000000000000000000000000 +169 6 0 1261613743006487972 0 0 2097153 0 1 Mar 25, 2015 14:47:04.818805500 Jan 01, 1601 00:00:00.000000000 Apr 20, 2015 14:47:04.819328500 Mar 25, 2015 14:47:04.818805500 Mar 25, 2015 14:47:04.818805500 0 1 0 790000007500000031535053a114020000000000c0000000000000461100000017000000001300000000000000110000000d000000001300000000000000110000000900000000130000000000000011000000060000000013000000000000001500000018000000004000000020d56708e966d0010000000000000000530000004f00000031535053a114020000000000c0000000000000461100000021000000001300000000000000110000001c00000000030000000000000011000000200000000003000000000000000000000000000000 +168 6 0 1261613743568454815 0 0 2097153 0 1 Mar 25, 2015 14:47:04.740805500 Jan 01, 1601 00:00:00.000000000 Apr 20, 2015 14:47:04.741328500 Mar 25, 2015 14:47:04.740805500 Mar 25, 2015 14:47:04.740805500 0 1 0 790000007500000031535053a114020000000000c0000000000000461100000017000000001300000000000000110000000d000000001300000000000000110000000900000000130000000000000011000000060000000013000000000000001500000018000000004000000040ee5b08e966d0010000000000000000530000004f00000031535053a114020000000000c0000000000000461100000021000000001300000000000000110000001c00000000030000000000000011000000200000000003000000000000000000000000000000 +57 6 0 1420844741497507606 0 0 2097153 0 1 Mar 23, 2015 18:11:10.411043900 Jan 01, 1601 00:00:00.000000000 Apr 18, 2015 18:04:00.914837300 Mar 23, 2015 18:11:10.411043900 Mar 23, 2015 18:11:10.411043900 0 1 0 Visited: informant@http://platform.twitter.com/widgets/follow_button.08e6af8d36f276a2b5c6602a155e2fe3.en.html 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 +56 6 0 1420844742693732012 0 0 2097153 0 2 Mar 23, 2015 18:11:10.411043900 Jan 01, 1601 00:00:00.000000000 Apr 18, 2015 18:04:00.914837300 Mar 23, 2015 18:11:10.411043900 Mar 23, 2015 18:11:10.411043900 0 0 0 Visited: informant@http://platform.twitter.com/widgets/tweet_button.493c8c24c1d977b6441c6c398ad48dfb.en.html +120 6 0 1971592819048523885 0 0 2097153 0 1 Mar 23, 2015 20:45:23.515237900 Jan 01, 1601 00:00:00.000000000 Apr 18, 2015 20:45:23.515760900 Mar 23, 2015 20:45:23.515237900 Mar 23, 2015 20:45:23.515237900 0 1 0 790000007500000031535053a114020000000000c0000000000000461100000017000000001300000000000000110000000d0000000013000000000000001100000009000000001300000000000000110000000600000000130000000000000015000000180000000040000000b028cdc18865d0010000000000000000530000004f00000031535053a114020000000000c0000000000000461100000021000000001300000000000000110000001c00000000030000000000000011000000200000000003000000000000000000000000000000 +129 6 0 1971592819660452823 0 0 2097153 0 1 Mar 23, 2015 20:45:56.870799300 Jan 01, 1601 00:00:00.000000000 Apr 18, 2015 20:45:56.871322300 Mar 23, 2015 20:45:56.870799300 Mar 23, 2015 20:45:56.870799300 0 1 0 790000007500000031535053a114020000000000c0000000000000461100000017000000001300000000000000110000000d000000001300000000000000110000000900000000130000000000000011000000060000000013000000000000001500000018000000004000000060baaed58865d0010000000000000000530000004f00000031535053a114020000000000c0000000000000461100000021000000001300000000000000110000001c00000000030000000000000011000000200000000003000000000000000000000000000000 +131 6 0 1971592819982618284 0 0 2097153 0 1 Mar 23, 2015 20:45:57.840802500 Jan 01, 1601 00:00:00.000000000 Apr 18, 2015 20:45:57.841325500 Mar 23, 2015 20:45:57.840802500 Mar 23, 2015 20:45:57.840802500 0 1 0 790000007500000031535053a114020000000000c0000000000000461100000017000000001300000000000000110000000d000000001300000000000000110000000900000000130000000000000011000000060000000013000000000000001500000018000000004000000000bd42d68865d0010000000000000000530000004f00000031535053a114020000000000c0000000000000461100000021000000001300000000000000110000001c00000000030000000000000011000000200000000003000000000000000000000000000000 +123 6 0 1971592820548852488 0 0 2097153 0 1 Mar 23, 2015 20:45:24.365239000 Jan 01, 1601 00:00:00.000000000 Apr 18, 2015 20:45:24.365762000 Mar 23, 2015 20:45:24.365239000 Mar 23, 2015 20:45:24.365239000 0 1 0 790000007500000031535053a114020000000000c0000000000000461100000017000000001300000000000000110000000d0000000013000000000000001100000009000000001300000000000000110000000600000000130000000000000015000000180000000040000000d0db4ec28865d0010000000000000000530000004f00000031535053a114020000000000c0000000000000461100000021000000001300000000000000110000001c00000000030000000000000011000000200000000003000000000000000000000000000000 +122 6 0 1971592820777499027 0 0 2097153 0 1 Mar 23, 2015 20:45:24.335239000 Jan 01, 1601 00:00:00.000000000 Apr 18, 2015 20:45:24.335762000 Mar 23, 2015 20:45:24.335239000 Mar 23, 2015 20:45:24.335239000 0 1 0 790000007500000031535053a114020000000000c0000000000000461100000017000000001300000000000000110000000d0000000013000000000000001100000009000000001300000000000000110000000600000000130000000000000015000000180000000040000000f0474ac28865d0010000000000000000530000004f00000031535053a114020000000000c0000000000000461100000021000000001300000000000000110000001c00000000030000000000000011000000200000000003000000000000000000000000000000 +121 6 0 1971592821250321386 0 0 2097153 0 1 Mar 23, 2015 20:45:23.525237900 Jan 01, 1601 00:00:00.000000000 Apr 18, 2015 20:45:23.525760900 Mar 23, 2015 20:45:23.525237900 Mar 23, 2015 20:45:23.525237900 0 1 0 790000007500000031535053a114020000000000c0000000000000461100000017000000001300000000000000110000000d000000001300000000000000110000000900000000130000000000000011000000060000000013000000000000001500000018000000004000000050afcec18865d0010000000000000000530000004f00000031535053a114020000000000c0000000000000461100000021000000001300000000000000110000001c00000000030000000000000011000000200000000003000000000000000000000000000000 +132 6 0 1971592822452175565 0 0 2097153 0 1 Mar 23, 2015 20:45:57.850802500 Jan 01, 1601 00:00:00.000000000 Apr 18, 2015 20:45:57.851325500 Mar 23, 2015 20:45:57.850802500 Mar 23, 2015 20:45:57.850802500 0 1 0 790000007500000031535053a114020000000000c0000000000000461100000017000000001300000000000000110000000d0000000013000000000000001100000009000000001300000000000000110000000600000000130000000000000015000000180000000040000000a04344d68865d0010000000000000000530000004f00000031535053a114020000000000c0000000000000461100000021000000001300000000000000110000001c00000000030000000000000011000000200000000003000000000000000000000000000000 +130 6 0 1971592822522972422 0 0 2097153 0 1 Mar 23, 2015 20:45:56.870799300 Jan 01, 1601 00:00:00.000000000 Apr 18, 2015 20:45:56.871322300 Mar 23, 2015 20:45:56.870799300 Mar 23, 2015 20:45:56.870799300 0 1 0 790000007500000031535053a114020000000000c0000000000000461100000017000000001300000000000000110000000d000000001300000000000000110000000900000000130000000000000011000000060000000013000000000000001500000018000000004000000060baaed58865d0010000000000000000530000004f00000031535053a114020000000000c0000000000000461100000021000000001300000000000000110000001c00000000030000000000000011000000200000000003000000000000000000000000000000 +102 6 0 2110212282411940435 0 0 2097153 0 1 Mar 23, 2015 20:44:27.279400300 Jan 01, 1601 00:00:00.000000000 Apr 18, 2015 20:44:27.279923300 Mar 23, 2015 20:44:27.279400300 Mar 23, 2015 20:44:27.279400300 0 1 0 790000007500000031535053a114020000000000c0000000000000461100000017000000001300000000000000110000000d0000000013000000000000001100000009000000001300000000000000110000000600000000130000000000000015000000180000000040000000f03948a08865d0010000000000000000530000004f00000031535053a114020000000000c0000000000000461100000021000000001300000000000000110000001c00000000030000000000000011000000200000000003000000000000000000000000000000 +176 6 0 2236799169978934058 0 0 2097153 0 1 Mar 25, 2015 14:47:29.147805500 Jan 01, 1601 00:00:00.000000000 Apr 20, 2015 14:47:29.148328500 Mar 25, 2015 14:47:29.147805500 Mar 25, 2015 14:47:29.147805500 0 1 0 Visited: informant@http://pixel.quantserve.com/pixel/p-01-0VIaSjnOLg.gif?tags=CONTEXTWEB.TECHNOLOGYCOMPUTING.OPERATINGSYSTEMS.LINUX,PUBLISHER.558092,,CAMPAIGN..0,,ADSIZE.728X90 790000007500000031535053a114020000000000c0000000000000461100000017000000001300000000000000110000000d0000000013000000000000001100000009000000001300000000000000110000000600000000130000000000000015000000180000000040000000b024e816e966d0010000000000000000530000004f00000031535053a114020000000000c0000000000000461100000021000000001300000000000000110000001c00000000030000000000000011000000200000000003000000000000000000000000000000 +108 6 0 2304905416015714305 0 0 2097153 0 1 Mar 23, 2015 20:44:30.253960500 Jan 01, 1601 00:00:00.000000000 Apr 18, 2015 20:44:30.234482300 Mar 23, 2015 20:44:30.233959300 Mar 23, 2015 20:44:30.253960500 0 1 0 Visited: informant@http://d.agkn.com/iframe/2649/?che=1427143469&sk=022001015420007205781 790000007500000031535053a114020000000000c0000000000000461100000017000000001300000000000000110000000d000000001300000000000000110000000900000000130000000000000011000000060000000013000000000000001500000018000000004000000090f80aa28865d0010000000000000000530000004f00000031535053a114020000000000c0000000000000461100000021000000001300000000000000110000001c00000000030000000000000011000000200000000003000000000000000000000000000000 +98 6 0 2304905416334280310 0 0 2097153 0 1 Mar 23, 2015 20:44:26.060376800 Jan 01, 1601 00:00:00.000000000 Apr 18, 2015 20:44:26.060899800 Mar 23, 2015 20:44:26.060376800 Mar 23, 2015 20:44:26.060376800 0 1 0 Visited: informant@http://d.agkn.com/iframe/2649/?che=1427143465&sk= 790000007500000031535053a114020000000000c0000000000000461100000017000000001300000000000000110000000d0000000013000000000000001100000009000000001300000000000000110000000600000000130000000000000015000000180000000040000000c0388e9f8865d0010000000000000000530000004f00000031535053a114020000000000c0000000000000461100000021000000001300000000000000110000001c00000000030000000000000011000000200000000003000000000000000000000000000000 +5 6 0 2370379869444909801 0 0 2097153 0 3 Mar 23, 2015 17:27:39.684391300 Jan 01, 1601 00:00:00.000000000 Apr 18, 2015 17:27:39.684914300 Mar 23, 2015 17:27:39.684391300 Mar 23, 2015 17:27:39.684391300 0 0 0 Visited: informant@http://www.msn.com/?ocid=iehp 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 +72 6 0 2398024509590798521 0 0 2097153 0 1 Mar 23, 2015 18:12:43.575281000 Jan 01, 1601 00:00:00.000000000 Apr 18, 2015 18:05:34.079074400 Mar 23, 2015 18:12:43.575281000 Mar 23, 2015 18:12:43.575281000 0 1 0 Visited: informant@https://c1.microsoft.com/c.gif?DI=4050&did=1&t= 790000007500000031535053a114020000000000c0000000000000461100000017000000001300000000000000110000000d0000000013000000000000001100000009000000001300000000000000110000000600000000130000000000000015000000180000000040000000703c0d6e7365d0010000000000000000530000004f00000031535053a114020000000000c0000000000000461100000021000000001300000000000000110000001c00000000030000000000000011000000200000000003000000000000000000000000000000 +53 6 0 2414656720914574268 0 0 2097153 0 1 Mar 23, 2015 18:11:09.697034300 Jan 01, 1601 00:00:00.000000000 Apr 18, 2015 18:04:00.190827700 Mar 23, 2015 18:11:09.687034300 Mar 23, 2015 18:11:09.697034300 0 1 0 Visited: informant@https://apis.google.com/u/0/se/0/_/+1/sharebutton?plusShare=true&usegapi=1&annotation=bubble&action=share&origin=http%3A%2F%2Fresources.infosecinstitute.com&url=http%3A%2F%2Fresources.infosecinstitute.com%2Fwindows-systems-and-artifacts-in-digital-forensics-part-i-registry%2F&gsrc=3p&jsh=m%3B%2F_%2Fscs%2Fapps-static%2F_%2Fjs%2Fk%3Doz.gapi.en_GB.EOlYdPwYAoY.O%2Fm%3D__features__%2Fam%3DEQ%2Frt%3Dj%2Fd%3D1%2Ft%3Dzcms%2Frs%3DAGLTcCOCF8Fgat1F9TP8QrU9SRT5TB9Sew 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 +59 6 0 2414656720938331139 0 0 2097153 0 1 Mar 23, 2015 18:11:12.341579200 Jan 01, 1601 00:00:00.000000000 Apr 18, 2015 18:04:02.845372600 Mar 23, 2015 18:11:12.341579200 Mar 23, 2015 18:11:12.341579200 0 1 0 Visited: informant@https://apis.google.com/se/0/_/+1/sharebutton?plusShare=true&usegapi=1&annotation=bubble&action=share&origin=http%3A%2F%2Fresources.infosecinstitute.com&url=http%3A%2F%2Fresources.infosecinstitute.com%2Fwindows-systems-and-artifacts-in-digital-forensics-part-i-registry%2F&gsrc=3p&jsh=m%3B%2F_%2Fscs%2Fapps-static%2F_%2Fjs%2Fk%3Doz.gapi.en_GB.EOlYdPwYAoY.O%2Fm%3D__features__%2Fam%3DEQ%2Frt%3Dj%2Fd%3D1%2Ft%3Dzcms%2Frs%3DAGLTcCOCF8Fgat1F9TP8QrU9SRT5TB9Sew 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 +60 6 0 2414656720949137676 0 0 2097153 0 1 Mar 23, 2015 18:11:12.356579400 Jan 01, 1601 00:00:00.000000000 Apr 18, 2015 18:04:02.860372800 Mar 23, 2015 18:11:12.356579400 Mar 23, 2015 18:11:12.356579400 0 1 0 Visited: informant@https://apis.google.com/se/0/_/+1/sharebutton?plusShare=true&usegapi=1&annotation=vertical-bubble&action=share&origin=http%3A%2F%2Fresources.infosecinstitute.com&url=http%3A%2F%2Fresources.infosecinstitute.com%2Fwindows-systems-and-artifacts-in-digital-forensics-part-i-registry%2F&gsrc=3p&jsh=m%3B%2F_%2Fscs%2Fapps-static%2F_%2Fjs%2Fk%3Doz.gapi.en_GB.EOlYdPwYAoY.O%2Fm%3D__features__%2Fam%3DEQ%2Frt%3Dj%2Fd%3D1%2Ft%3Dzcms%2Frs%3DAGLTcCOCF8Fgat1F9TP8QrU9SRT5TB9Sew 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 +54 6 0 2414656721110883158 0 0 2097153 0 1 Mar 23, 2015 18:11:09.697034300 Jan 01, 1601 00:00:00.000000000 Apr 18, 2015 18:04:00.200827700 Mar 23, 2015 18:11:09.697034300 Mar 23, 2015 18:11:09.697034300 0 1 0 Visited: informant@https://apis.google.com/u/0/se/0/_/+1/sharebutton?plusShare=true&usegapi=1&annotation=vertical-bubble&action=share&origin=http%3A%2F%2Fresources.infosecinstitute.com&url=http%3A%2F%2Fresources.infosecinstitute.com%2Fwindows-systems-and-artifacts-in-digital-forensics-part-i-registry%2F&gsrc=3p&jsh=m%3B%2F_%2Fscs%2Fapps-static%2F_%2Fjs%2Fk%3Doz.gapi.en_GB.EOlYdPwYAoY.O%2Fm%3D__features__%2Fam%3DEQ%2Frt%3Dj%2Fd%3D1%2Ft%3Dzcms%2Frs%3DAGLTcCOCF8Fgat1F9TP8QrU9SRT5TB9Sew 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 +18 6 0 2566974204257954651 0 0 2097153 0 118 Mar 25, 2015 15:22:09.339405500 Jan 01, 1601 00:00:00.000000000 Apr 20, 2015 15:22:09.339928500 Mar 25, 2015 15:22:09.339405500 Mar 25, 2015 15:22:09.339405500 0 0 0 Visited: informant@about:blank 790000007500000031535053a114020000000000c0000000000000461100000017000000001300000000000000110000000d0000000013000000000000001100000009000000001300000000000000110000000600000000130000000000000015000000180000000040000000b040cceeed66d0010000000000000000530000004f00000031535053a114020000000000c0000000000000461100000021000000001300000000000000110000001c00000000030000000000000011000000200000000003000000000000000000000000000000 +149 6 0 2670404045455281100 0 0 2097153 0 2 Mar 23, 2015 20:56:29.693718000 Jan 01, 1601 00:00:00.000000000 Apr 18, 2015 20:49:20.197511400 Mar 23, 2015 20:56:29.693718000 Mar 23, 2015 20:56:29.693718000 0 0 0 Visited: informant@https://www.youtube.com/embed/EWRk51oB-1Y 790000007500000031535053a114020000000000c0000000000000461100000017000000001300000000000000110000000d0000000013000000000000001100000009000000001300000000000000110000000600000000130000000000000015000000180000000040000000d0dadf4e8a65d0010000000000000000530000004f00000031535053a114020000000000c0000000000000461100000021000000001300000000000000110000001c00000000030000000000000011000000200000000003000000000000000000000000000000 +81 6 0 2706691359434208646 0 0 2097153 0 1 Mar 23, 2015 18:14:24.642450200 Jan 01, 1601 00:00:00.000000000 Apr 18, 2015 18:14:24.642973200 Mar 23, 2015 18:14:24.642450200 Mar 23, 2015 18:14:24.642450200 0 1 0 Visited: informant@http://www.forensicswiki.org/wiki/USB_History_Viewing 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 +183 6 0 3343610096999475294 0 0 2097153 0 1 Mar 25, 2015 14:48:12.400905500 Jan 01, 1601 00:00:00.000000000 Apr 20, 2015 14:41:02.904698900 Mar 25, 2015 14:48:12.400905500 Mar 25, 2015 14:48:12.400905500 0 1 0 Visited: informant@http://www.piriform.com/ccleaner/download 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 +185 6 0 3343610100408096394 0 0 2097153 0 1 Mar 25, 2015 14:48:22.751205500 Jan 01, 1601 00:00:00.000000000 Apr 20, 2015 14:41:13.254998900 Mar 25, 2015 14:48:22.751205500 Mar 25, 2015 14:48:22.751205500 0 1 0 Visited: informant@http://www.piriform.com/ccleaner/download/standard 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 +182 6 0 3343610100444594646 0 0 2097153 0 2 Mar 25, 2015 14:47:55.942305500 Jan 01, 1601 00:00:00.000000000 Apr 20, 2015 14:47:55.942828500 Mar 25, 2015 14:47:55.942305500 Mar 25, 2015 14:47:55.942305500 0 0 0 Visited: informant@http://www.piriform.com/ccleaner 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 +71 6 0 3913208849296032447 0 0 2097153 0 2 Mar 23, 2015 18:12:45.477284900 Jan 01, 1601 00:00:00.000000000 Apr 18, 2015 18:05:35.981078300 Mar 23, 2015 18:12:45.477284900 Mar 23, 2015 18:12:45.477284900 0 0 0 Visited: informant@https://support.microsoft.com/en-us/kb/308427 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 +99 6 0 4017754527633672500 0 0 2097153 0 1 Mar 23, 2015 20:44:26.087877200 Jan 01, 1601 00:00:00.000000000 Apr 18, 2015 20:44:26.088400200 Mar 23, 2015 20:44:26.087877200 Mar 23, 2015 20:44:26.087877200 0 1 0 Visited: informant@http://eu-u.openx.net/w/1.0/pd?plm=5&ph=7df34cb9-ac96-4a51-9ca1-207a79f9b830 790000007500000031535053a114020000000000c0000000000000461100000017000000001300000000000000110000000d00000000130000000000000011000000090000000013000000000000001100000006000000001300000000000000150000001800000000400000007057929f8865d0010000000000000000530000004f00000031535053a114020000000000c0000000000000461100000021000000001300000000000000110000001c00000000030000000000000011000000200000000003000000000000000000000000000000 +110 6 0 4186917000738905301 0 0 2097153 0 2 Mar 23, 2015 20:44:39.967053800 Jan 01, 1601 00:00:00.000000000 Apr 18, 2015 20:44:39.967576800 Mar 23, 2015 20:44:39.967053800 Mar 23, 2015 20:44:39.967053800 0 0 0 Visited: informant@http://trc.taboola.com/giantdigital-entertainmentwise/log/3/visible 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 +189 6 0 4550239538616944386 0 0 2097153 0 1 Mar 25, 2015 15:22:09.058605500 Jan 01, 1601 00:00:00.000000000 Apr 20, 2015 15:22:09.059128500 Mar 25, 2015 15:22:09.058605500 Mar 25, 2015 15:22:09.058605500 0 1 0 Visited: informant@https://accounts.youtube.com/accounts/CheckConnection?pmpo=https%3A%2F%2Faccounts.google.com&v=-438286426×tamp=1427296929058 790000007500000031535053a114020000000000c0000000000000461100000017000000001300000000000000110000000d00000000130000000000000011000000090000000013000000000000001100000006000000001300000000000000150000001800000000400000002060a1eeed66d0010000000000000000530000004f00000031535053a114020000000000c0000000000000461100000021000000001300000000000000110000001c00000000030000000000000011000000200000000003000000000000000000000000000000 +61 6 0 4951298731407506964 0 0 2097153 0 1 Mar 23, 2015 18:11:12.887588100 Jan 01, 1601 00:00:00.000000000 Apr 18, 2015 18:04:03.391381500 Mar 23, 2015 18:11:12.887588100 Mar 23, 2015 18:11:12.887588100 0 1 0 Visited: informant@http://resources.infosecinstitute.com/windows-systems-and-artifacts-in-digital-forensics-part-i-registry/ 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 +78 6 0 5161593631237438890 0 0 2097153 0 1 Mar 23, 2015 18:13:57.502906600 Jan 01, 1601 00:00:00.000000000 Apr 18, 2015 18:13:57.503429600 Mar 23, 2015 18:13:57.502906600 Mar 23, 2015 18:13:57.502906600 0 1 0 Visited: informant@https://msdn.microsoft.com/en-us/library/windows/desktop/dd562212(v=vs.85).aspx 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 +159 6 0 5262052459433746257 0 0 2097153 0 1 Mar 25, 2015 14:46:45.194105500 Jan 01, 1601 00:00:00.000000000 Apr 20, 2015 14:46:45.194628500 Mar 25, 2015 14:46:45.194105500 Mar 25, 2015 14:46:45.194105500 0 1 0 Visited: informant@https://login.live.com/login.srf?wa=wsignin1.0&rpsnv=11&ct=1427294804&rver=6.0.5286.0&wp=MBI&wreply=https:%2F%2fssl.bing.com%2Fsecure%2FPassport.aspx%3Fpopup%3D1&lc=1033&id=264960&checkda=1 790000007500000031535053a114020000000000c0000000000000461100000017000000001300000000000000110000000d0000000013000000000000001100000009000000001300000000000000110000000600000000130000000000000015000000180000000040000000a072b5fce866d0010000000000000000530000004f00000031535053a114020000000000c0000000000000461100000021000000001300000000000000110000001c00000000030000000000000011000000200000000003000000000000000000000000000000 +157 6 0 5262052459491419127 0 0 2097153 0 1 Mar 25, 2015 14:46:07.988405500 Jan 01, 1601 00:00:00.000000000 Apr 20, 2015 14:46:07.988928500 Mar 25, 2015 14:46:07.988405500 Mar 25, 2015 14:46:07.988405500 0 1 0 Visited: informant@https://login.live.com/login.srf?wa=wsignin1.0&rpsnv=11&ct=1427294767&rver=6.0.5286.0&wp=MBI&wreply=https:%2F%2fssl.bing.com%2Fsecure%2FPassport.aspx%3Fpopup%3D1&lc=1033&id=264960&checkda=1 790000007500000031535053a114020000000000c0000000000000461100000017000000001300000000000000110000000d0000000013000000000000001100000009000000001300000000000000110000000600000000130000000000000015000000180000000040000000404388e6e866d0010000000000000000530000004f00000031535053a114020000000000c0000000000000461100000021000000001300000000000000110000001c00000000030000000000000011000000200000000003000000000000000000000000000000 +77 6 0 5262052459791898989 0 0 2097153 0 1 Mar 23, 2015 18:13:40.073879200 Jan 01, 1601 00:00:00.000000000 Apr 18, 2015 18:13:40.074402200 Mar 23, 2015 18:13:40.073879200 Mar 23, 2015 18:13:40.073879200 0 1 0 Visited: informant@https://login.live.com/login.srf?wa=wsignin1.0&rpsnv=11&ct=1427134417&rver=6.0.5286.0&wp=MBI&wreply=https:%2F%2fssl.bing.com%2Fsecure%2FPassport.aspx%3Fpopup%3D1&lc=1033&id=264960&checkda=1 790000007500000031535053a114020000000000c0000000000000461100000017000000001300000000000000110000000d00000000130000000000000011000000090000000013000000000000001100000006000000001300000000000000150000001800000000400000009025ba8f7365d0010000000000000000530000004f00000031535053a114020000000000c0000000000000461100000021000000001300000000000000110000001c00000000030000000000000011000000200000000003000000000000000000000000000000 +34 6 0 5262052459848724846 0 0 2097153 0 1 Mar 23, 2015 18:07:47.501178900 Jan 01, 1601 00:00:00.000000000 Apr 18, 2015 18:07:47.501701900 Mar 23, 2015 18:07:47.501178900 Mar 23, 2015 18:07:47.501178900 0 1 0 Visited: informant@https://login.live.com/login.srf?wa=wsignin1.0&rpsnv=11&ct=1427134064&rver=6.0.5286.0&wp=MBI&wreply=https:%2F%2fssl.bing.com%2Fsecure%2FPassport.aspx%3Fpopup%3D1&lc=1033&id=264960&checkda=1 790000007500000031535053a114020000000000c0000000000000461100000017000000001300000000000000110000000d0000000013000000000000001100000009000000001300000000000000110000000600000000130000000000000015000000180000000040000000d0ed93bd7265d0010000000000000000530000004f00000031535053a114020000000000c0000000000000461100000021000000001300000000000000110000001c00000000030000000000000011000000200000000003000000000000000000000000000000 +44 6 0 5262052460022647845 0 0 2097153 0 1 Mar 23, 2015 18:08:34.190285200 Jan 01, 1601 00:00:00.000000000 Apr 18, 2015 18:08:34.190808200 Mar 23, 2015 18:08:34.190285200 Mar 23, 2015 18:08:34.190285200 0 1 0 Visited: informant@https://login.live.com/login.srf?wa=wsignin1.0&rpsnv=11&ct=1427134111&rver=6.0.5286.0&wp=MBI&wreply=https:%2F%2fssl.bing.com%2Fsecure%2FPassport.aspx%3Fpopup%3D1&lc=1033&id=264960&checkda=1 790000007500000031535053a114020000000000c0000000000000461100000017000000001300000000000000110000000d0000000013000000000000001100000009000000001300000000000000110000000600000000130000000000000015000000180000000040000000e01a68d97265d0010000000000000000530000004f00000031535053a114020000000000c0000000000000461100000021000000001300000000000000110000001c00000000030000000000000011000000200000000003000000000000000000000000000000 +39 6 0 5262052460024945863 0 0 2097153 0 1 Mar 23, 2015 18:08:01.920211300 Jan 01, 1601 00:00:00.000000000 Apr 18, 2015 18:08:01.920734300 Mar 23, 2015 18:08:01.920211300 Mar 23, 2015 18:08:01.920211300 0 1 0 Visited: informant@https://login.live.com/login.srf?wa=wsignin1.0&rpsnv=11&ct=1427134079&rver=6.0.5286.0&wp=MBI&wreply=https:%2F%2fssl.bing.com%2Fsecure%2FPassport.aspx%3Fpopup%3D1&lc=1033&id=264960&checkda=1 790000007500000031535053a114020000000000c0000000000000461100000017000000001300000000000000110000000d000000001300000000000000110000000900000000130000000000000011000000060000000013000000000000001500000018000000004000000000182cc67265d0010000000000000000530000004f00000031535053a114020000000000c0000000000000461100000021000000001300000000000000110000001c00000000030000000000000011000000200000000003000000000000000000000000000000 +181 6 0 5262052460052027209 0 0 2097153 0 1 Mar 25, 2015 14:47:52.167105500 Jan 01, 1601 00:00:00.000000000 Apr 20, 2015 14:47:52.167628500 Mar 25, 2015 14:47:52.167105500 Mar 25, 2015 14:47:52.167105500 0 1 0 Visited: informant@https://login.live.com/login.srf?wa=wsignin1.0&rpsnv=11&ct=1427294871&rver=6.0.5286.0&wp=MBI&wreply=https:%2F%2fssl.bing.com%2Fsecure%2FPassport.aspx%3Fpopup%3D1&lc=1033&id=264960&checkda=1 790000007500000031535053a114020000000000c0000000000000461100000017000000001300000000000000110000000d000000001300000000000000110000000900000000130000000000000011000000060000000013000000000000001500000018000000004000000070b7a024e966d0010000000000000000530000004f00000031535053a114020000000000c0000000000000461100000021000000001300000000000000110000001c00000000030000000000000011000000200000000003000000000000000000000000000000 +148 6 0 5262052460059356904 0 0 2097153 0 1 Mar 23, 2015 20:56:10.572177300 Jan 01, 1601 00:00:00.000000000 Apr 18, 2015 20:49:01.075970700 Mar 23, 2015 20:56:10.572177300 Mar 23, 2015 20:56:10.572177300 0 1 0 Visited: informant@https://login.live.com/login.srf?wa=wsignin1.0&rpsnv=11&ct=1427144169&rver=6.0.5286.0&wp=MBI&wreply=https:%2F%2fssl.bing.com%2Fsecure%2FPassport.aspx%3Fpopup%3D1&lc=1033&id=264960&checkda=1 790000007500000031535053a114020000000000c0000000000000461100000017000000001300000000000000110000000d0000000013000000000000001100000009000000001300000000000000110000000600000000130000000000000015000000180000000040000000c0387a438a65d0010000000000000000530000004f00000031535053a114020000000000c0000000000000461100000021000000001300000000000000110000001c00000000030000000000000011000000200000000003000000000000000000000000000000 +83 6 0 5262052460073727989 0 0 2097153 0 1 Mar 23, 2015 20:43:48.413885400 Jan 01, 1601 00:00:00.000000000 Apr 18, 2015 20:43:48.414408400 Mar 23, 2015 20:43:48.413885400 Mar 23, 2015 20:43:48.413885400 0 1 0 Visited: informant@https://login.live.com/login.srf?wa=wsignin1.0&rpsnv=11&ct=1427143427&rver=6.0.5286.0&wp=MBI&wreply=https:%2F%2fssl.bing.com%2Fsecure%2FPassport.aspx%3Fpopup%3D1&lc=1033&id=264960&checkda=1 790000007500000031535053a114020000000000c0000000000000461100000017000000001300000000000000110000000d0000000013000000000000001100000009000000001300000000000000110000000600000000130000000000000015000000180000000040000000d0be1d898865d0010000000000000000530000004f00000031535053a114020000000000c0000000000000461100000021000000001300000000000000110000001c00000000030000000000000011000000200000000003000000000000000000000000000000 +126 6 0 5262052460141882573 0 0 2097153 0 1 Mar 23, 2015 20:45:32.214751500 Jan 01, 1601 00:00:00.000000000 Apr 18, 2015 20:45:32.215274500 Mar 23, 2015 20:45:32.214751500 Mar 23, 2015 20:45:32.214751500 0 1 0 Visited: informant@https://login.live.com/login.srf?wa=wsignin1.0&rpsnv=11&ct=1427143530&rver=6.0.5286.0&wp=MBI&wreply=https:%2F%2fssl.bing.com%2Fsecure%2FPassport.aspx%3Fpopup%3D1&lc=1033&id=264960&checkda=1 790000007500000031535053a114020000000000c0000000000000461100000017000000001300000000000000110000000d00000000130000000000000011000000090000000013000000000000001100000006000000001300000000000000150000001800000000400000006085fcc68865d0010000000000000000530000004f00000031535053a114020000000000c0000000000000461100000021000000001300000000000000110000001c00000000030000000000000011000000200000000003000000000000000000000000000000 +67 6 0 5262052460154708725 0 0 2097153 0 1 Mar 23, 2015 18:11:52.474698400 Jan 01, 1601 00:00:00.000000000 Apr 18, 2015 18:04:42.978491800 Mar 23, 2015 18:11:52.474698400 Mar 23, 2015 18:11:52.474698400 0 1 0 Visited: informant@https://login.live.com/login.srf?wa=wsignin1.0&rpsnv=11&ct=1427134310&rver=6.0.5286.0&wp=MBI&wreply=https:%2F%2fssl.bing.com%2Fsecure%2FPassport.aspx%3Fpopup%3D1&lc=1033&id=264960&checkda=1 790000007500000031535053a114020000000000c0000000000000461100000017000000001300000000000000110000000d0000000013000000000000001100000009000000001300000000000000110000000600000000130000000000000015000000180000000040000000a0d7974f7365d0010000000000000000530000004f00000031535053a114020000000000c0000000000000461100000021000000001300000000000000110000001c00000000030000000000000011000000200000000003000000000000000000000000000000 +50 6 0 5262052460330430545 0 0 2097153 0 1 Mar 23, 2015 18:10:05.910426300 Jan 01, 1601 00:00:00.000000000 Apr 18, 2015 18:10:05.910949300 Mar 23, 2015 18:10:05.910426300 Mar 23, 2015 18:10:05.910426300 0 1 0 Visited: informant@https://login.live.com/login.srf?wa=wsignin1.0&rpsnv=11&ct=1427134203&rver=6.0.5286.0&wp=MBI&wreply=https:%2F%2fssl.bing.com%2Fsecure%2FPassport.aspx%3Fpopup%3D1&lc=1033&id=264960&checkda=1 790000007500000031535053a114020000000000c0000000000000461100000017000000001300000000000000110000000d0000000013000000000000001100000009000000001300000000000000110000000600000000130000000000000015000000180000000040000000607713107365d0010000000000000000530000004f00000031535053a114020000000000c0000000000000461100000021000000001300000000000000110000001c00000000030000000000000011000000200000000003000000000000000000000000000000 +128 6 0 5262052460381838192 0 0 2097153 0 1 Mar 23, 2015 20:45:48.168785900 Jan 01, 1601 00:00:00.000000000 Apr 18, 2015 20:45:48.169308900 Mar 23, 2015 20:45:48.168785900 Mar 23, 2015 20:45:48.168785900 0 1 0 Visited: informant@https://login.live.com/login.srf?wa=wsignin1.0&rpsnv=11&ct=1427143546&rver=6.0.5286.0&wp=MBI&wreply=https:%2F%2fssl.bing.com%2Fsecure%2FPassport.aspx%3Fpopup%3D1&lc=1033&id=264960&checkda=1 790000007500000031535053a114020000000000c0000000000000461100000017000000001300000000000000110000000d000000001300000000000000110000000900000000130000000000000011000000060000000013000000000000001500000018000000004000000080e87ed08865d0010000000000000000530000004f00000031535053a114020000000000c0000000000000461100000021000000001300000000000000110000001c00000000030000000000000011000000200000000003000000000000000000000000000000 +20 6 0 5262052460479178686 0 0 2097153 0 1 Mar 23, 2015 17:27:45.393173300 Jan 01, 1601 00:00:00.000000000 Apr 18, 2015 17:27:45.386196200 Mar 23, 2015 17:27:45.385673200 Mar 23, 2015 17:27:45.393173300 0 1 0 Visited: informant@https://login.live.com/login.srf?wa=wsignin1.0&rpsnv=12&checkda=1&ct=1427131655&rver=6.1.6195.0&wp=&wreply=https%3a%2f%2fwww.msn.com%2fen-us%2fhomepage%2fsecure%2fsilentpassport&lc=1033&id=1184&mkt=en-us 790000007500000031535053a114020000000000c0000000000000461100000017000000001300000000000000110000000d0000000013000000000000001100000009000000001300000000000000110000000600000000130000000000000015000000180000000040000000901dce256d65d0010000000000000000530000004f00000031535053a114020000000000c0000000000000461100000021000000001300000000000000110000001c00000000030000000000000011000000200000000003000000000000000000000000000000 +87 6 0 5262052460874125058 0 0 2097153 0 1 Mar 23, 2015 20:43:54.679711300 Jan 01, 1601 00:00:00.000000000 Apr 18, 2015 20:43:54.680234300 Mar 23, 2015 20:43:54.679711300 Mar 23, 2015 20:43:54.679711300 0 1 0 Visited: informant@https://login.live.com/login.srf?wa=wsignin1.0&rpsnv=11&ct=1427143432&rver=6.0.5286.0&wp=MBI&wreply=https:%2F%2fssl.bing.com%2Fsecure%2FPassport.aspx%3Fpopup%3D1&lc=1033&id=264960&checkda=1 790000007500000031535053a114020000000000c0000000000000461100000017000000001300000000000000110000000d000000001300000000000000110000000900000000130000000000000011000000060000000013000000000000001500000018000000004000000070dcd98c8865d0010000000000000000530000004f00000031535053a114020000000000c0000000000000461100000021000000001300000000000000110000001c00000000030000000000000011000000200000000003000000000000000000000000000000 +134 6 0 5262052461018587575 0 0 2097153 0 1 Mar 23, 2015 20:53:48.550967900 Jan 01, 1601 00:00:00.000000000 Apr 18, 2015 20:53:48.551490900 Mar 23, 2015 20:53:48.550967900 Mar 23, 2015 20:53:48.550967900 0 1 0 Visited: informant@https://login.live.com/login.srf?wa=wsignin1.0&rpsnv=11&ct=1427144026&rver=6.0.5286.0&wp=MBI&wreply=https:%2F%2fssl.bing.com%2Fsecure%2FPassport.aspx%3Fpopup%3D1&lc=1033&id=264960&checkda=1 790000007500000031535053a114020000000000c0000000000000461100000017000000001300000000000000110000000d00000000130000000000000011000000090000000013000000000000001100000006000000001300000000000000150000001800000000400000006062d3ee8965d0010000000000000000530000004f00000031535053a114020000000000c0000000000000461100000021000000001300000000000000110000001c00000000030000000000000011000000200000000003000000000000000000000000000000 +85 6 0 5262052461031725831 0 0 2097153 0 1 Mar 23, 2015 20:43:50.689493700 Jan 01, 1601 00:00:00.000000000 Apr 18, 2015 20:43:50.690016700 Mar 23, 2015 20:43:50.689493700 Mar 23, 2015 20:43:50.689493700 0 1 0 Visited: informant@https://login.live.com/login.srf?wa=wsignin1.0&rpsnv=11&ct=1427143430&rver=6.0.5286.0&wp=MBI&wreply=https:%2F%2fssl.bing.com%2Fsecure%2FPassport.aspx%3Fpopup%3D1&lc=1033&id=264960&checkda=1 790000007500000031535053a114020000000000c0000000000000461100000017000000001300000000000000110000000d00000000130000000000000011000000090000000013000000000000001100000006000000001300000000000000150000001800000000400000001009798a8865d0010000000000000000530000004f00000031535053a114020000000000c0000000000000461100000021000000001300000000000000110000001c00000000030000000000000011000000200000000003000000000000000000000000000000 +147 6 0 5262052461036043534 0 0 2097153 0 1 Mar 23, 2015 20:56:00.677162800 Jan 01, 1601 00:00:00.000000000 Apr 18, 2015 20:48:51.180956200 Mar 23, 2015 20:56:00.677162800 Mar 23, 2015 20:56:00.677162800 0 1 0 Visited: informant@https://login.live.com/login.srf?wa=wsignin1.0&rpsnv=11&ct=1427144159&rver=6.0.5286.0&wp=MBI&wreply=https:%2F%2fssl.bing.com%2Fsecure%2FPassport.aspx%3Fpopup%3D1&lc=1033&id=264960&checkda=1 790000007500000031535053a114020000000000c0000000000000461100000017000000001300000000000000110000000d0000000013000000000000001100000009000000001300000000000000110000000600000000130000000000000015000000180000000040000000505d943d8a65d0010000000000000000530000004f00000031535053a114020000000000c0000000000000461100000021000000001300000000000000110000001c00000000030000000000000011000000200000000003000000000000000000000000000000 +140 6 0 5262052461204091593 0 0 2097153 0 1 Mar 23, 2015 20:55:20.480600500 Jan 01, 1601 00:00:00.000000000 Apr 18, 2015 20:55:20.481123500 Mar 23, 2015 20:55:20.480600500 Mar 23, 2015 20:55:20.480600500 0 1 0 Visited: informant@https://login.live.com/login.srf?wa=wsignin1.0&rpsnv=11&ct=1427144118&rver=6.0.5286.0&wp=MBI&wreply=https:%2F%2fssl.bing.com%2Fsecure%2FPassport.aspx%3Fpopup%3D1&lc=1033&id=264960&checkda=1 790000007500000031535053a114020000000000c0000000000000461100000017000000001300000000000000110000000d000000001300000000000000110000000900000000130000000000000011000000060000000013000000000000001500000018000000004000000000ca9e258a65d0010000000000000000530000004f00000031535053a114020000000000c0000000000000461100000021000000001300000000000000110000001c00000000030000000000000011000000200000000003000000000000000000000000000000 +80 6 0 5262052461263215454 0 0 2097153 0 1 Mar 23, 2015 18:14:13.442433100 Jan 01, 1601 00:00:00.000000000 Apr 18, 2015 18:14:13.432956100 Mar 23, 2015 18:14:13.432433100 Mar 23, 2015 18:14:13.442433100 0 1 0 Visited: informant@https://login.live.com/login.srf?wa=wsignin1.0&rpsnv=11&ct=1427134452&rver=6.0.5286.0&wp=MBI&wreply=https:%2F%2fssl.bing.com%2Fsecure%2FPassport.aspx%3Fpopup%3D1&lc=1033&id=264960&checkda=1 790000007500000031535053a114020000000000c0000000000000461100000017000000001300000000000000110000000d000000001300000000000000110000000900000000130000000000000011000000060000000013000000000000001500000018000000004000000080539ca37365d0010000000000000000530000004f00000031535053a114020000000000c0000000000000461100000021000000001300000000000000110000001c00000000030000000000000011000000200000000003000000000000000000000000000000 +161 6 0 5262052461272112272 0 0 2097153 0 1 Mar 25, 2015 14:46:55.519505500 Jan 01, 1601 00:00:00.000000000 Apr 20, 2015 14:46:55.520028500 Mar 25, 2015 14:46:55.519505500 Mar 25, 2015 14:46:55.519505500 0 1 0 Visited: informant@https://login.live.com/login.srf?wa=wsignin1.0&rpsnv=11&ct=1427294815&rver=6.0.5286.0&wp=MBI&wreply=https:%2F%2fssl.bing.com%2Fsecure%2FPassport.aspx%3Fpopup%3D1&lc=1033&id=264960&checkda=1 790000007500000031535053a114020000000000c0000000000000461100000017000000001300000000000000110000000d0000000013000000000000001100000009000000001300000000000000110000000600000000130000000000000015000000180000000040000000f0eadc02e966d0010000000000000000530000004f00000031535053a114020000000000c0000000000000461100000021000000001300000000000000110000001c00000000030000000000000011000000200000000003000000000000000000000000000000 +70 6 0 5262052461652305404 0 0 2097153 0 1 Mar 23, 2015 18:12:37.697268400 Jan 01, 1601 00:00:00.000000000 Apr 18, 2015 18:05:28.201061800 Mar 23, 2015 18:12:37.697268400 Mar 23, 2015 18:12:37.697268400 0 1 0 Visited: informant@https://login.live.com/login.srf?wa=wsignin1.0&rpsnv=11&ct=1427134355&rver=6.0.5286.0&wp=MBI&wreply=https:%2F%2fssl.bing.com%2Fsecure%2FPassport.aspx%3Fpopup%3D1&lc=1033&id=264960&checkda=1 790000007500000031535053a114020000000000c0000000000000461100000017000000001300000000000000110000000d000000001300000000000000110000000900000000130000000000000011000000060000000013000000000000001500000018000000004000000010538c6a7365d0010000000000000000530000004f00000031535053a114020000000000c0000000000000461100000021000000001300000000000000110000001c00000000030000000000000011000000200000000003000000000000000000000000000000 +113 6 0 5262052461707732825 0 0 2097153 0 1 Mar 23, 2015 20:44:59.606181800 Jan 01, 1601 00:00:00.000000000 Apr 18, 2015 20:44:59.606704800 Mar 23, 2015 20:44:59.606181800 Mar 23, 2015 20:44:59.606181800 0 1 0 Visited: informant@https://login.live.com/login.srf?wa=wsignin1.0&rpsnv=11&ct=1427143498&rver=6.0.5286.0&wp=MBI&wreply=https:%2F%2fssl.bing.com%2Fsecure%2FPassport.aspx%3Fpopup%3D1&lc=1033&id=264960&checkda=1 790000007500000031535053a114020000000000c0000000000000461100000017000000001300000000000000110000000d000000001300000000000000110000000900000000130000000000000011000000060000000013000000000000001500000018000000004000000060ef8cb38865d0010000000000000000530000004f00000031535053a114020000000000c0000000000000461100000021000000001300000000000000110000001c00000000030000000000000011000000200000000003000000000000000000000000000000 +52 6 0 5262052461754422241 0 0 2097153 0 1 Mar 23, 2015 18:10:29.140965700 Jan 01, 1601 00:00:00.000000000 Apr 18, 2015 18:10:29.141488700 Mar 23, 2015 18:10:29.140965700 Mar 23, 2015 18:10:29.140965700 0 1 0 Visited: informant@https://login.live.com/login.srf?wa=wsignin1.0&rpsnv=11&ct=1427134227&rver=6.0.5286.0&wp=MBI&wreply=https:%2F%2fssl.bing.com%2Fsecure%2FPassport.aspx%3Fpopup%3D1&lc=1033&id=264960&checkda=1 790000007500000031535053a114020000000000c0000000000000461100000017000000001300000000000000110000000d00000000130000000000000011000000090000000013000000000000001100000006000000001300000000000000150000001800000000400000004015ec1d7365d0010000000000000000530000004f00000031535053a114020000000000c0000000000000461100000021000000001300000000000000110000001c00000000030000000000000011000000200000000003000000000000000000000000000000 +142 6 0 5262052461963738741 0 0 2097153 0 1 Mar 23, 2015 20:55:31.035615900 Jan 01, 1601 00:00:00.000000000 Apr 18, 2015 20:48:21.539409300 Mar 23, 2015 20:55:31.035615900 Mar 23, 2015 20:55:31.035615900 0 1 0 Visited: informant@https://login.live.com/login.srf?wa=wsignin1.0&rpsnv=11&ct=1427144129&rver=6.0.5286.0&wp=MBI&wreply=https:%2F%2fssl.bing.com%2Fsecure%2FPassport.aspx%3Fpopup%3D1&lc=1033&id=264960&checkda=1 790000007500000031535053a114020000000000c0000000000000461100000017000000001300000000000000110000000d0000000013000000000000001100000009000000001300000000000000110000000600000000130000000000000015000000180000000040000000b05ae92b8a65d0010000000000000000530000004f00000031535053a114020000000000c0000000000000461100000021000000001300000000000000110000001c00000000030000000000000011000000200000000003000000000000000000000000000000 +137 6 0 5262052462202577867 0 0 2097153 0 1 Mar 23, 2015 20:55:12.365588300 Jan 01, 1601 00:00:00.000000000 Apr 18, 2015 20:55:12.366111300 Mar 23, 2015 20:55:12.365588300 Mar 23, 2015 20:55:12.365588300 0 1 0 Visited: informant@https://login.live.com/login.srf?wa=wsignin1.0&rpsnv=11&ct=1427144110&rver=6.0.5286.0&wp=MBI&wreply=https:%2F%2fssl.bing.com%2Fsecure%2FPassport.aspx%3Fpopup%3D1&lc=1033&id=264960&checkda=1 790000007500000031535053a114020000000000c0000000000000461100000017000000001300000000000000110000000d0000000013000000000000001100000009000000001300000000000000110000000600000000130000000000000015000000180000000040000000d089c8208a65d0010000000000000000530000004f00000031535053a114020000000000c0000000000000461100000021000000001300000000000000110000001c00000000030000000000000011000000200000000003000000000000000000000000000000 +38 6 0 5262052462552545791 0 0 2097153 0 1 Mar 23, 2015 18:07:57.428697200 Jan 01, 1601 00:00:00.000000000 Apr 18, 2015 18:07:57.429220200 Mar 23, 2015 18:07:57.428697200 Mar 23, 2015 18:07:57.428697200 0 1 0 Visited: informant@https://login.live.com/login.srf?wa=wsignin1.0&rpsnv=11&ct=1427134071&rver=6.0.5286.0&wp=MBI&wreply=https:%2F%2fssl.bing.com%2Fsecure%2FPassport.aspx%3Fpopup%3D1&lc=1033&id=264960&checkda=1 790000007500000031535053a114020000000000c0000000000000461100000017000000001300000000000000110000000d000000001300000000000000110000000900000000130000000000000011000000060000000013000000000000001500000018000000004000000040ab7ec37265d0010000000000000000530000004f00000031535053a114020000000000c0000000000000461100000021000000001300000000000000110000001c00000000030000000000000011000000200000000003000000000000000000000000000000 +30 6 0 5262052462643847990 0 0 2097153 0 1 Mar 23, 2015 17:28:19.817907700 Jan 01, 1601 00:00:00.000000000 Apr 18, 2015 17:21:10.321701100 Mar 23, 2015 17:28:19.817907700 Mar 23, 2015 17:28:19.817907700 0 1 0 Visited: informant@https://login.live.com/login.srf?wa=wsignin1.0&rpsnv=11&ct=1427131698&rver=6.0.5286.0&wp=MBI&wreply=https:%2F%2fssl.bing.com%2Fsecure%2FPassport.aspx%3Fpopup%3D1&lc=1033&id=264960&checkda=1 790000007500000031535053a114020000000000c0000000000000461100000017000000001300000000000000110000000d00000000130000000000000011000000090000000013000000000000001100000006000000001300000000000000150000001800000000400000009005543a6d65d0010000000000000000530000004f00000031535053a114020000000000c0000000000000461100000021000000001300000000000000110000001c00000000030000000000000011000000200000000003000000000000000000000000000000 +46 6 0 5262052462851385874 0 0 2097153 0 1 Mar 23, 2015 18:08:55.603822200 Jan 01, 1601 00:00:00.000000000 Apr 18, 2015 18:08:55.604345200 Mar 23, 2015 18:08:55.603822200 Mar 23, 2015 18:08:55.603822200 0 1 0 Visited: informant@https://login.live.com/login.srf?wa=wsignin1.0&rpsnv=11&ct=1427134134&rver=6.0.5286.0&wp=MBI&wreply=https:%2F%2fssl.bing.com%2Fsecure%2FPassport.aspx%3Fpopup%3D1&lc=1033&id=264960&checkda=1 790000007500000031535053a114020000000000c0000000000000461100000017000000001300000000000000110000000d000000001300000000000000110000000900000000130000000000000011000000060000000013000000000000001500000018000000004000000030782be67265d0010000000000000000530000004f00000031535053a114020000000000c0000000000000461100000021000000001300000000000000110000001c00000000030000000000000011000000200000000003000000000000000000000000000000 +75 6 0 5262052463069027380 0 0 2097153 0 1 Mar 23, 2015 18:13:22.366349000 Jan 01, 1601 00:00:00.000000000 Apr 18, 2015 18:13:22.366872000 Mar 23, 2015 18:13:22.366349000 Mar 23, 2015 18:13:22.366349000 0 1 0 Visited: informant@https://login.live.com/login.srf?wa=wsignin1.0&rpsnv=11&ct=1427134400&rver=6.0.5286.0&wp=MBI&wreply=https:%2F%2fssl.bing.com%2Fsecure%2FPassport.aspx%3Fpopup%3D1&lc=1033&id=264960&checkda=1 790000007500000031535053a114020000000000c0000000000000461100000017000000001300000000000000110000000d0000000013000000000000001100000009000000001300000000000000110000000600000000130000000000000015000000180000000040000000e0452c857365d0010000000000000000530000004f00000031535053a114020000000000c0000000000000461100000021000000001300000000000000110000001c00000000030000000000000011000000200000000003000000000000000000000000000000 +48 6 0 5262052463137356552 0 0 2097153 0 1 Mar 23, 2015 18:09:33.466378100 Jan 01, 1601 00:00:00.000000000 Apr 18, 2015 18:09:33.466901100 Mar 23, 2015 18:09:33.466378100 Mar 23, 2015 18:09:33.466378100 0 1 0 Visited: informant@https://login.live.com/login.srf?wa=wsignin1.0&rpsnv=11&ct=1427134171&rver=6.0.5286.0&wp=MBI&wreply=https:%2F%2fssl.bing.com%2Fsecure%2FPassport.aspx%3Fpopup%3D1&lc=1033&id=264960&checkda=1 790000007500000031535053a114020000000000c0000000000000461100000017000000001300000000000000110000000d0000000013000000000000001100000009000000001300000000000000110000000600000000130000000000000015000000180000000040000000a0e7bcfc7265d0010000000000000000530000004f00000031535053a114020000000000c0000000000000461100000021000000001300000000000000110000001c00000000030000000000000011000000200000000003000000000000000000000000000000 +37 6 0 5262052463386732151 0 0 2097153 0 1 Mar 23, 2015 18:07:56.338695600 Jan 01, 1601 00:00:00.000000000 Apr 18, 2015 18:07:56.339218600 Mar 23, 2015 18:07:56.338695600 Mar 23, 2015 18:07:56.338695600 0 1 0 Visited: informant@https://login.live.com/login.srf?wa=wsignin1.0&rpsnv=11&ct=1427134074&rver=6.0.5286.0&wp=MBI&wreply=https:%2F%2fssl.bing.com%2Fsecure%2FPassport.aspx%3Fpopup%3D1&lc=1033&id=264960&checkda=1 790000007500000031535053a114020000000000c0000000000000461100000017000000001300000000000000110000000d00000000130000000000000011000000090000000013000000000000001100000006000000001300000000000000150000001800000000400000002059d8c27265d0010000000000000000530000004f00000031535053a114020000000000c0000000000000461100000021000000001300000000000000110000001c00000000030000000000000011000000200000000003000000000000000000000000000000 +32 6 0 5262052463415160698 0 0 2097153 0 1 Mar 23, 2015 18:07:28.329651000 Jan 01, 1601 00:00:00.000000000 Apr 18, 2015 18:07:28.330174000 Mar 23, 2015 18:07:28.329651000 Mar 23, 2015 18:07:28.329651000 0 1 0 Visited: informant@https://login.live.com/login.srf?wa=wsignin1.0&rpsnv=11&ct=1427134044&rver=6.0.5286.0&wp=MBI&wreply=https:%2F%2fssl.bing.com%2Fsecure%2FPassport.aspx%3Fpopup%3D1&lc=1033&id=264960&checkda=1 790000007500000031535053a114020000000000c0000000000000461100000017000000001300000000000000110000000d0000000013000000000000001100000009000000001300000000000000110000000600000000130000000000000015000000180000000040000000908326b27265d0010000000000000000530000004f00000031535053a114020000000000c0000000000000461100000021000000001300000000000000110000001c00000000030000000000000011000000200000000003000000000000000000000000000000 +119 6 0 5405258141015879268 0 0 2097153 0 4 Mar 23, 2015 20:45:56.728797900 Jan 01, 1601 00:00:00.000000000 Apr 18, 2015 20:45:56.729320900 Mar 23, 2015 20:45:56.728797900 Mar 23, 2015 20:45:56.728797900 0 0 0 Visited: informant@https://cdn3.doubleverify.com/bst2tv3.html 790000007500000031535053a114020000000000c0000000000000461100000017000000001300000000000000110000000d0000000013000000000000001100000009000000001300000000000000110000000600000000130000000000000015000000180000000040000000800f99d58865d0010000000000000000530000004f00000031535053a114020000000000c0000000000000461100000021000000001300000000000000110000001c00000000030000000000000011000000200000000003000000000000000000000000000000 +124 6 0 5405258141612763272 0 0 2097153 0 4 Mar 23, 2015 20:45:58.060802800 Jan 01, 1601 00:00:00.000000000 Apr 18, 2015 20:45:58.061325800 Mar 23, 2015 20:45:58.060802800 Mar 23, 2015 20:45:58.060802800 0 0 0 Visited: informant@https://cdn3.doubleverify.com/t2tv7.html 790000007500000031535053a114020000000000c0000000000000461100000017000000001300000000000000110000000d0000000013000000000000001100000009000000001300000000000000110000000600000000130000000000000015000000180000000040000000c04e64d68865d0010000000000000000530000004f00000031535053a114020000000000c0000000000000461100000021000000001300000000000000110000001c00000000030000000000000011000000200000000003000000000000000000000000000000 +2 6 0 5438136258002239992 0 0 2097153 4 1 Mar 22, 2015 15:24:21.900252800 Jan 01, 1601 00:00:00.000000000 Apr 17, 2015 15:11:16.000000000 Mar 22, 2015 15:11:14.717000000 Mar 22, 2015 15:24:21.900252800 0 0 0 Visited: informant@https://www.google.com/chrome/browser/thankyou.html?brand=CHNG&platform=win&clickonceinstalled=1 100002000000001000000000010000002800101f4300680072006f006d0065002000420072006f007700730065007200000000000000000000000000 +4 6 0 5438136258216303950 0 0 2097153 4 1 Mar 22, 2015 15:24:21.900252800 Jan 01, 1601 00:00:00.000000000 Apr 17, 2015 15:09:48.000000000 Mar 22, 2015 15:09:47.902000000 Mar 22, 2015 15:24:21.900252800 0 0 0 Visited: informant@https://www.google.com/search 1000020000000000000000000000000000000000 +16 6 0 5438136258645291962 0 0 2097153 4 1 Mar 22, 2015 15:24:21.900252800 Jan 01, 1601 00:00:00.000000000 Apr 17, 2015 15:10:58.000000000 Mar 22, 2015 15:10:56.755000000 Mar 22, 2015 15:24:21.900252800 0 0 0 Visited: informant@https://www.google.com/chrome/index.html?hl=en&brand=CHNG&utm_source=en-hpp&utm_medium=hpp&utm_campaign=en 100002000000001000000000010000001800101f4300680072006f006d006500000000000000000000000000 +3 6 0 5438136259382981683 0 0 2097153 4 1 Mar 22, 2015 15:24:21.900252800 Jan 01, 1601 00:00:00.000000000 Apr 17, 2015 15:09:50.000000000 Mar 22, 2015 15:09:48.513000000 Mar 22, 2015 15:24:21.900252800 0 0 0 Visited: informant@https://www.google.com/search?hl=en&source=hp&q=internet+explorer+11&gbv=2&oq=internet+explorer+11&gs_l=heirloom-hp.3..0l10.5163.7893.0.9562.20.13.0.7.7.0.156.1110.11j2.13.0.msedr...0...1ac.1.34.heirloom-hp..0.20.1250.5j7Xm44tv5w 100002000000001000000000010000005400101f69006e007400650072006e006500740020006500780070006c006f0072006500720020003100310020002d00200047006f006f0067006c0065002000530065006100720063006800000000000000000000000000 +90 6 0 5438136260122111778 0 0 2097153 0 4 Mar 25, 2015 14:47:01.024505500 Jan 01, 1601 00:00:00.000000000 Apr 20, 2015 14:47:01.025028500 Mar 25, 2015 14:47:01.024505500 Mar 25, 2015 14:47:01.024505500 0 0 0 Visited: informant@https://www.google.com/pagead/drt/ui 790000007500000031535053a114020000000000c0000000000000461100000017000000001300000000000000110000000d000000001300000000000000110000000900000000130000000000000011000000060000000013000000000000001500000018000000004000000000ea2406e966d0010000000000000000530000004f00000031535053a114020000000000c0000000000000461100000021000000001300000000000000110000001c00000000030000000000000011000000200000000003000000000000000000000000000000 +14 6 0 5438136260583312080 0 0 2097153 4 1 Mar 22, 2015 15:24:21.900252800 Jan 01, 1601 00:00:00.000000000 Apr 17, 2015 15:10:54.000000000 Mar 22, 2015 15:10:52.040000000 Mar 22, 2015 15:24:21.900252800 0 0 0 Visited: informant@https://www.google.com/webhp?hl=en 100002000000001000000000010000001800101f47006f006f0067006c006500000000000000000000000000 +12 6 0 5438136260892057313 0 0 2097153 4 1 Mar 22, 2015 15:24:21.900252800 Jan 01, 1601 00:00:00.000000000 Apr 17, 2015 15:09:40.000000000 Mar 22, 2015 15:09:38.184000000 Mar 22, 2015 15:24:21.900252800 0 0 0 Visited: informant@https://www.google.com/?gws_rd=ssl 100002000000001000000000010000001800101f47006f006f0067006c006500000000000000000000000000 +42 6 0 5554023060429198126 0 0 2097153 0 1 Mar 23, 2015 18:08:18.123259800 Jan 01, 1601 00:00:00.000000000 Apr 18, 2015 18:08:18.123782800 Mar 23, 2015 18:08:18.123259800 Mar 23, 2015 18:08:18.123259800 0 1 0 Visited: informant@http://sysinfotools.com/blog/tethering-internet-files-sharing/ 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 +103 6 0 5605555255557052704 0 0 2097153 0 1 Mar 23, 2015 20:44:27.946910500 Jan 01, 1601 00:00:00.000000000 Apr 18, 2015 20:44:27.944933500 Mar 23, 2015 20:44:27.944410500 Mar 23, 2015 20:44:27.946910500 0 1 0 Visited: informant@http://s7.addthis.com/static/r07/sh200.html +68 6 0 5611597136324297036 0 0 2097153 0 1 Mar 23, 2015 18:12:07.649223700 Jan 01, 1601 00:00:00.000000000 Apr 18, 2015 18:04:58.153017100 Mar 23, 2015 18:12:07.649223700 Mar 23, 2015 18:12:07.649223700 0 1 0 Visited: informant@https://technet.microsoft.com/en-us/library/cc162846.aspx f6000000f200000031535053a114020000000000c0000000000000461100000017000000001300000001000000110000000d00000000130000000000000011000000090000000013000000000000107d00000010000000001f00000035000000460075006e00640061006d0065006e00740061006c00200043006f006d0070007500740065007200200049006e007600650073007400690067006100740069006f006e00200047007500690064006500200066006f0072002000570069006e0064006f007700730000000000110000000600000000130000000100000015000000180000000040000000105da3587365d0010000000000000000790000007500000031535053a114020000000000c00000000000004611000000270000000013000000010000001100000021000000001300000000000000110000001c00000000030000000000000015000000280000000040000000105da3587365d00111000000200000000003000000000000000000000000000000 +13 6 0 5649683603054678394 0 0 2097153 4 1 Mar 22, 2015 15:24:21.900252800 Jan 01, 1601 00:00:00.000000000 Apr 17, 2015 15:09:52.000000000 Mar 22, 2015 15:09:51.243000000 Mar 22, 2015 15:24:21.900252800 0 0 0 Visited: informant@http://www.google.com/url?url=http://windows.microsoft.com/en-us/internet-explorer/download-ie&rct=j&frm=1&q=&esrc=s&sa=U&ei=6ykQVZWLGbeJsQT7goDACg&ved=0CB8QFjAA&usg=AFQjCNEwsIz17kY-jTXbaWPcQDfBbVEi7A 1000020000000010000000000100000000000000 +7 6 0 5649683603564760147 0 0 2097153 4 1 Mar 22, 2015 15:24:21.900252800 Jan 01, 1601 00:00:00.000000000 Apr 17, 2015 15:09:56.000000000 Mar 22, 2015 15:09:54.355000000 Mar 22, 2015 15:24:21.900252800 0 0 0 Visited: informant@http://www.google.com/url?url=http://windows.microsoft.com/en-us/internet-explorer/ie-11-worldwide-languages&rct=j&frm=1&q=&esrc=s&sa=U&ei=6ykQVZWLGbeJsQT7goDACg&ved=0CCoQFjAB&usg=AFQjCNE7UKIWEBiWO2N96IFeo6ZywhRLfw 1000020000000010000000000100000000000000 +174 6 0 5721086857345649277 0 0 2097153 0 1 Mar 25, 2015 14:47:28.053305500 Jan 01, 1601 00:00:00.000000000 Apr 20, 2015 14:47:28.053828500 Mar 25, 2015 14:47:28.053305500 Mar 25, 2015 14:47:28.053305500 0 1 0 790000007500000031535053a114020000000000c0000000000000461100000017000000001300000000000000110000000d000000001300000000000000110000000900000000130000000000000011000000060000000013000000000000001500000018000000004000000050364116e966d0010000000000000000530000004f00000031535053a114020000000000c0000000000000461100000021000000001300000000000000110000001c00000000030000000000000011000000200000000003000000000000000000000000000000 +175 6 0 5721086859038255731 0 0 2097153 0 1 Mar 25, 2015 14:47:28.365305500 Jan 01, 1601 00:00:00.000000000 Apr 20, 2015 14:47:28.365828500 Mar 25, 2015 14:47:28.365305500 Mar 25, 2015 14:47:28.365305500 0 1 0 790000007500000031535053a114020000000000c0000000000000461100000017000000001300000000000000110000000d0000000013000000000000001100000009000000001300000000000000110000000600000000130000000000000015000000180000000040000000d0d17016e966d0010000000000000000530000004f00000031535053a114020000000000c0000000000000461100000021000000001300000000000000110000001c00000000030000000000000011000000200000000003000000000000000000000000000000 +105 6 0 5829060474027756798 0 0 2097153 0 1 Mar 23, 2015 20:44:28.002912500 Jan 01, 1601 00:00:00.000000000 Apr 18, 2015 20:44:28.003435500 Mar 23, 2015 20:44:28.002912500 Mar 23, 2015 20:44:28.002912500 0 1 0 790000007500000031535053a114020000000000c0000000000000461100000017000000001300000000000000110000000d0000000013000000000000001100000009000000001300000000000000110000000600000000130000000000000015000000180000000040000000208cb6a08865d0010000000000000000530000004f00000031535053a114020000000000c0000000000000461100000021000000001300000000000000110000001c00000000030000000000000011000000200000000003000000000000000000000000000000 +25 6 0 5829060475049220716 0 0 2097153 0 1 Mar 23, 2015 17:27:47.430598400 Jan 01, 1601 00:00:00.000000000 Apr 18, 2015 17:27:47.431121400 Mar 23, 2015 17:27:47.430598400 Mar 23, 2015 17:27:47.430598400 0 1 0 Visited: informant@https://www.facebook.com/connect/ping?client_id=132970837947&domain=www.msn.com&origin=1&redirect_uri=http%3A%2F%2Fstatic.ak.facebook.com%2Fconnect%2Fxd_arbiter%2F6Dg4oLkBbYq.js%3Fversion%3D41%23cb%3Df3b2a983adb67e8%26domain%3Dwww.msn.com%26origin%3Dhttp%253A%252F%252Fwww.msn.com%252Ff2ef5b6fbba4d06%26relation%3Dparent&response_type=token%2Csigned_request%2Ccode&sdk=joey 790000007500000031535053a114020000000000c0000000000000461100000017000000001300000000000000110000000d0000000013000000000000001100000009000000001300000000000000110000000600000000130000000000000015000000180000000040000000602806276d65d0010000000000000000530000004f00000031535053a114020000000000c0000000000000461100000021000000001300000000000000110000001c00000000030000000000000011000000200000000003000000000000000000000000000000 +29 6 0 5829060477141506335 0 0 2097153 0 17 Mar 24, 2015 14:05:15.603746200 Jan 01, 1601 00:00:00.000000000 Apr 19, 2015 14:05:15.604269200 Mar 24, 2015 14:05:15.603746200 Mar 24, 2015 14:05:15.603746200 0 0 0 Visited: informant@https://www.facebook.com/dialog/oauth?response_type=extended_info%2ctoken%2csigned_request&display=none&client_id=111239619098&redirect_uri=http%3A%2F%2Fwww.bing.com%2Ffd%2Ffb%2Fu%3Fv%3D9_00_0_3773239%26sId%3D6%23 790000007500000031535053a114020000000000c0000000000000461100000017000000001300000000000000110000000d0000000013000000000000001100000009000000001300000000000000110000000600000000130000000000000015000000180000000040000000304262061a66d0010000000000000000530000004f00000031535053a114020000000000c0000000000000461100000021000000001300000000000000110000001c00000000030000000000000011000000200000000003000000000000000000000000000000 +156 6 0 5829060477568102946 0 0 2097153 0 4 Mar 25, 2015 14:47:52.073505500 Jan 01, 1601 00:00:00.000000000 Apr 20, 2015 14:47:52.074028500 Mar 25, 2015 14:47:52.073505500 Mar 25, 2015 14:47:52.073505500 0 0 0 Visited: informant@https://www.facebook.com/dialog/oauth?response_type=extended_info%2ctoken%2csigned_request&display=none&client_id=111239619098&redirect_uri=http%3A%2F%2Fwww.bing.com%2Ffd%2Ffb%2Fu%3Fv%3D9_00_0_3811931%26sId%3D6%23 790000007500000031535053a114020000000000c0000000000000461100000017000000001300000000000000110000000d0000000013000000000000001100000009000000001300000000000000110000000600000000130000000000000015000000180000000040000000905f9224e966d0010000000000000000530000004f00000031535053a114020000000000c0000000000000461100000021000000001300000000000000110000001c00000000030000000000000011000000200000000003000000000000000000000000000000 +177 6 0 5865224608235791690 0 0 2097153 0 1 Mar 25, 2015 14:47:29.849805500 Jan 01, 1601 00:00:00.000000000 Apr 20, 2015 14:47:29.850328500 Mar 25, 2015 14:47:29.849805500 Mar 25, 2015 14:47:29.849805500 0 1 0 Visited: informant@http://sourceforge.net/projects/eraser/files/Eraser%206/6.2/Eraser%206.2.0.2962.exe/download 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 +117 6 0 5897545560892956959 0 0 2097153 0 2 Mar 23, 2015 20:56:32.898277800 Jan 01, 1601 00:00:00.000000000 Apr 18, 2015 20:49:23.402071200 Mar 23, 2015 20:56:32.898277800 Mar 23, 2015 20:56:32.898277800 0 0 0 Visited: informant@http://fast.condenast.demdex.net/dest3.html?d_nsid=0 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 +88 6 0 6147123587235680191 0 0 2097153 0 6 Mar 25, 2015 14:47:29.085405500 Jan 01, 1601 00:00:00.000000000 Apr 20, 2015 14:47:29.085928500 Mar 25, 2015 14:47:29.085405500 Mar 25, 2015 14:47:29.085405500 0 0 0 Visited: informant@http://tpc.googlesyndication.com/safeframe/1-0-2/html/container.html 790000007500000031535053a114020000000000c0000000000000461100000017000000001300000000000000110000000d0000000013000000000000001100000009000000001300000000000000110000000600000000130000000000000015000000180000000040000000d0aede16e966d0010000000000000000d4000000d000000031535053a114020000000000c00000000000004611000000200000000003000000000000001100000021000000001300000000000000110000001c0000000003000000000000008100000011000000001f10000001000000360000007800700063003d00730066002d00670064006e002d006500780070002d003100260070003d0068007400740070002500330041002f002f007700770077002e0065006e007400650072007400610069006e006d0065006e00740077006900730065002e0063006f006d0000000000000000000000 +21 6 0 6199215049697600896 0 0 2097153 0 2 Mar 23, 2015 17:27:49.150805300 Jan 01, 1601 00:00:00.000000000 Apr 18, 2015 17:27:49.151328300 Mar 23, 2015 17:27:49.150805300 Mar 23, 2015 17:27:49.150805300 0 0 0 Visited: informant@http://www.microsoft.com/en-us/ie-firstrun/win-7/ie-11/vie de000000da00000031535053a114020000000000c0000000000000461100000017000000001300000001000000110000000d00000000130000000000000011000000090000000013000000000000106500000010000000001f0000002a0000004d00650065007400200079006f007500720020006e00650077002000620072006f00770073006500720020002d0020004d006900630072006f0073006f00660074002000570069006e0064006f00770073000000110000000600000000130000000100000015000000180000000040000000e09b0c286d65d0010000000000000000790000007500000031535053a114020000000000c00000000000004611000000270000000013000000010000001100000021000000001300000000000000110000001c00000000030000000000000015000000280000000040000000e09b0c286d65d00111000000200000000003000000000000000000000000000000 +109 6 0 6450165354747481214 0 0 2097153 0 1 Mar 23, 2015 20:44:31.940487900 Jan 01, 1601 00:00:00.000000000 Apr 18, 2015 20:44:31.941010900 Mar 23, 2015 20:44:31.940487900 Mar 23, 2015 20:44:31.940487900 0 1 0 Visited: informant@http://assets.ebz.io/ebzFormats/assets/html/iframe.html?h=2.20.d5fb3bd8d4c47d0d6a4ce38aa9b36e788a58dc3d.20150319083212 790000007500000031535053a114020000000000c0000000000000461100000017000000001300000000000000110000000d000000001300000000000000110000000900000000130000000000000011000000060000000013000000000000001500000018000000004000000040700fa38865d0010000000000000000530000004f00000031535053a114020000000000c0000000000000461100000021000000001300000000000000110000001c00000000030000000000000011000000200000000003000000000000000000000000000000 +41 6 0 6638835726947546647 0 0 2097153 0 1 Mar 23, 2015 18:08:17.473258900 Jan 01, 1601 00:00:00.000000000 Apr 18, 2015 18:08:17.473781900 Mar 23, 2015 18:08:17.473258900 Mar 23, 2015 18:08:17.473258900 0 1 0 Visited: informant@https://public-api.wordpress.com/connect/?googleplus-sign-in=http%3A%2F%2Fjetpack.wordpress.com 790000007500000031535053a114020000000000c0000000000000461100000017000000001300000000000000110000000d0000000013000000000000001100000009000000001300000000000000110000000600000000130000000000000015000000180000000040000000104b71cf7265d0010000000000000000530000004f00000031535053a114020000000000c0000000000000461100000021000000001300000000000000110000001c00000000030000000000000011000000200000000003000000000000000000000000000000 +11 6 0 6902019432854577492 0 0 2097153 4 1 Mar 22, 2015 15:24:21.900252800 Jan 01, 1601 00:00:00.000000000 Apr 17, 2015 15:11:06.000000000 Mar 22, 2015 15:11:04.851000000 Mar 22, 2015 15:24:21.900252800 0 0 0 Visited: informant@http://download.microsoft.com/download/7/1/7/7179A150-F2D2-4502-9D70-4B59EA148EAA/IE11-Windows6.1-x64-en-us.exe 1000020000000010000000000100000000000000 +173 6 0 7369020761812752118 0 0 2097153 0 1 Mar 25, 2015 14:47:05.844005500 Jan 01, 1601 00:00:00.000000000 Apr 20, 2015 14:47:05.844528500 Mar 25, 2015 14:47:05.844005500 Mar 25, 2015 14:47:05.844005500 0 1 0 Visited: informant@http://eraser.heidi.ie/download.php b2000000ae00000031535053a114020000000000c0000000000000461100000017000000001300000001000000110000000d00000000130000000000000011000000090000000013000000000000103900000010000000001f0000001400000045007200610073006500720020003a003a00200044006f0077006e006c006f00610064007300000011000000060000000013000000010000001500000018000000004000000040630409e966d0010000000000000000790000007500000031535053a114020000000000c00000000000004611000000270000000013000000010000001100000021000000001300000000000000110000001c0000000003000000000000001500000028000000004000000040630409e966d00111000000200000000003000000000000000000000000000000 +163 6 0 7369020762451274587 0 0 2097153 0 2 Mar 25, 2015 14:46:59.528705500 Jan 01, 1601 00:00:00.000000000 Apr 20, 2015 14:46:59.529228500 Mar 25, 2015 14:46:59.528705500 Mar 25, 2015 14:46:59.528705500 0 0 0 Visited: informant@http://eraser.heidi.ie/ da000000d600000031535053a114020000000000c0000000000000461100000017000000001300000002000000110000000d00000000130000000000000011000000090000000013000000000000106100000010000000001f0000002700000045007200610073006500720020007c00200049006e007400650072006e0065007400200053006500630075007200690074007900200061006e006400200050007200690076006100630079000000000011000000060000000013000000020000001500000018000000004000000080a44005e966d0010000000000000000790000007500000031535053a114020000000000c00000000000004611000000270000000013000000020000001100000021000000001300000000000000110000001c0000000003000000000000001500000028000000004000000080a44005e966d00111000000200000000003000000000000000000000000000000 +73 6 0 7593891590051166568 0 0 2097153 0 1 Mar 23, 2015 18:12:52.231296800 Jan 01, 1601 00:00:00.000000000 Apr 18, 2015 18:05:42.735090200 Mar 23, 2015 18:12:52.231296800 Mar 23, 2015 18:12:52.231296800 0 1 0 Visited: informant@http://en.wikipedia.org/wiki/Event_Viewer ea000000e600000031535053a114020000000000c0000000000000461100000017000000001300000001000000110000000d00000000130000000000000011000000090000000013000000000000107100000010000000001f000000300000004500760065006e007400200056006900650077006500720020002d002000570069006b006900700065006400690061002c00200074006800650020006600720065006500200065006e006300790063006c006f00700065006400690061000000110000000600000000130000000100000015000000180000000040000000700936737365d0010000000000000000790000007500000031535053a114020000000000c00000000000004611000000270000000013000000010000001100000021000000001300000000000000110000001c00000000030000000000000015000000280000000040000000700936737365d00111000000200000000003000000000000000000000000000000 +40 6 0 7601635173962438590 0 0 2097153 0 1 Mar 23, 2015 18:08:14.929245600 Jan 01, 1601 00:00:00.000000000 Apr 18, 2015 18:08:14.929768600 Mar 23, 2015 18:08:14.929245600 Mar 23, 2015 18:08:14.929245600 0 1 0 Visited: informant@http://jetpack.wordpress.com/jetpack-comment/?blogid=68042730&postid=1426&comment_registration=0&require_name_email=1&stc_enabled=1&stb_enabled=1&show_avatars=1&avatar_default=mystery&greeting=Leave+a+Reply&greeting_reply=Leave+a+Reply+to+%25s&color_scheme=light&lang=en-US&jetpack_version=3.1.1&sig=57b3af0a7704d3e5954f1106683dc18c4bc6f6cd 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 +150 6 0 7615178996374837289 0 0 2097153 0 1 Mar 23, 2015 20:56:29.546215700 Jan 01, 1601 00:00:00.000000000 Apr 18, 2015 20:49:20.050009100 Mar 23, 2015 20:56:29.546215700 Mar 23, 2015 20:56:29.546215700 0 1 0 Visited: informant@http://disqus.com/embed/comments/?base=default&version=0412228992cba47b2894457e70e5008f&f=wired&t_i=1755412%20http%3A%2F%2Fwww.wired.com%2F%3Fp%3D1755412&t_u=http%3A%2F%2Fwww.wired.com%2F2015%2F03%2Fstealing-data-computers-using-heat%2F&t_e=Stealing%20Data%20From%20Computers%20Using%20Heat&t_d=Stealing%20Data%20From%20Computers%20Using%20Heat&t_t=Stealing%20Data%20From%20Computers%20Using%20Heat&s_o=default&l= 790000007500000031535053a114020000000000c0000000000000461100000017000000001300000000000000110000000d0000000013000000000000001100000009000000001300000000000000110000000600000000130000000000000015000000180000000040000000a06cc94e8a65d00100000000000000006c0000006800000031535053a114020000000000c0000000000000461900000011000000001f1000000100000002000000320000001100000021000000001300000000000000110000001c00000000030000000000000011000000200000000003000000000000000000000000000000 +55 6 0 7615178997953071102 0 0 2097153 0 1 Mar 23, 2015 18:11:10.259040700 Jan 01, 1601 00:00:00.000000000 Apr 18, 2015 18:04:00.761834100 Mar 23, 2015 18:11:10.258040700 Mar 23, 2015 18:11:10.259040700 0 1 0 Visited: informant@http://disqus.com/embed/comments/?base=default&version=0412228992cba47b2894457e70e5008f&f=infosecinstituteresources&t_i=21421%20http%3A%2F%2Fresources.infosecinstitute.com%2F%3Fp%3D21421&t_u=http%3A%2F%2Fresources.infosecinstitute.com%2Fwindows-systems-and-artifacts-in-digital-forensics-part-i-registry%2F&t_e=Windows%20Systems%20and%20Artifacts%20in%20Digital%20Forensics%2C%20Part%20I%3A%20Registry&t_d=Windows%20Systems%20and%20Artifacts%20in%20Digital%20Forensics%2C%20Part%20I%3A%20Registry&t_t=Windows%20Systems%20and%20Artifacts%20in%20Digital%20Forensics%2C%20Part%20I%3A%20Registry&s_o=default&l= 790000007500000031535053a114020000000000c0000000000000461100000017000000001300000000000000110000000d000000001300000000000000110000000900000000130000000000000011000000060000000013000000000000001500000018000000004000000020316e367365d00100000000000000006c0000006800000031535053a114020000000000c0000000000000461900000011000000001f1000000100000002000000320000001100000021000000001300000000000000110000001c00000000030000000000000011000000200000000003000000000000000000000000000000 +115 6 0 7615178999314237406 0 0 2097153 0 1 Mar 23, 2015 20:45:21.062224800 Jan 01, 1601 00:00:00.000000000 Apr 18, 2015 20:45:21.062747800 Mar 23, 2015 20:45:21.062224800 Mar 23, 2015 20:45:21.062224800 0 1 0 790000007500000031535053a114020000000000c0000000000000461100000017000000001300000000000000110000000d000000001300000000000000110000000900000000130000000000000011000000060000000013000000000000001500000018000000004000000060dc56c08865d00100000000000000006c0000006800000031535053a114020000000000c0000000000000461900000011000000001f1000000100000002000000320000001100000021000000001300000000000000110000001c00000000030000000000000011000000200000000003000000000000000000000000000000 +92 6 0 7626252952069476166 0 0 2097153 0 2 Mar 23, 2015 20:44:25.732871700 Jan 01, 1601 00:00:00.000000000 Apr 18, 2015 20:44:25.733394700 Mar 23, 2015 20:44:25.732871700 Mar 23, 2015 20:44:25.732871700 0 0 0 Visited: informant@http://ip.casalemedia.com/usermatch?s=175407&cb=http%3A%2F%2Fums.adtech.de%2Fmapuser%3Fproviderid%3D1010%3Buserid= 790000007500000031535053a114020000000000c0000000000000461100000017000000001300000000000000110000000d0000000013000000000000001100000009000000001300000000000000110000000600000000130000000000000015000000180000000040000000402c5c9f8865d0010000000000000000530000004f00000031535053a114020000000000c0000000000000461100000021000000001300000000000000110000001c00000000030000000000000011000000200000000003000000000000000000000000000000 +187 6 0 7922538971664950916 0 0 2097153 0 1 Mar 25, 2015 15:22:08.809005500 Jan 01, 1601 00:00:00.000000000 Apr 20, 2015 15:22:08.809528500 Mar 25, 2015 15:22:08.809005500 Mar 25, 2015 15:22:08.809005500 0 1 0 Visited: informant@https://accounts.google.com/ServiceLogin?continue=https%3A%2F%2Fwww.google.com%2Fsettings%2Fstorage%3Fhl%3Den_US&sacu=1&passive=1209600 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 +58 6 0 7922538972806401287 0 0 2097153 0 1 Mar 23, 2015 18:11:10.487044300 Jan 01, 1601 00:00:00.000000000 Apr 18, 2015 18:04:00.985837400 Mar 23, 2015 18:11:10.482044000 Mar 23, 2015 18:11:10.487044300 0 1 0 Visited: informant@https://accounts.google.com/o/oauth2/postmessageRelay?parent=http%3A%2F%2Fresources.infosecinstitute.com 790000007500000031535053a114020000000000c0000000000000461100000017000000001300000000000000110000000d0000000013000000000000001100000009000000001300000000000000110000000600000000130000000000000015000000180000000040000000205f90367365d0010000000000000000ac000000a800000031535053a114020000000000c0000000000000465900000011000000001f100000010000002200000072007000630074006f006b0065006e003d003100330037003900330032003300340039003900260066006f007200630065007300650063007500720065003d00310000001100000021000000001300000000000000110000001c00000000030000000000000011000000200000000003000000000000000000000000000000 +188 6 0 7922538975181352571 0 0 2097153 0 1 Mar 25, 2015 15:22:08.887005500 Jan 01, 1601 00:00:00.000000000 Apr 20, 2015 15:22:08.887528500 Mar 25, 2015 15:22:08.887005500 Mar 25, 2015 15:22:08.887005500 0 1 0 Visited: informant@https://accounts.google.com/AccountChooser?Email=iaman.informant.personal%40gmail.com&continue=https%3A//www.google.com/settings/storage%3Fhl%3Den_US 790000007500000031535053a114020000000000c0000000000000461100000017000000001300000000000000110000000d0000000013000000000000001100000009000000001300000000000000110000000600000000130000000000000015000000180000000040000000704887eeed66d0010000000000000000530000004f00000031535053a114020000000000c0000000000000461100000021000000001300000000000000110000001c00000000030000000000000011000000200000000003000000000000000000000000000000 +94 6 0 8128507255051849636 0 0 2097153 0 1 Mar 23, 2015 20:44:24.920858300 Jan 01, 1601 00:00:00.000000000 Apr 18, 2015 20:44:24.921381300 Mar 23, 2015 20:44:24.920858300 Mar 23, 2015 20:44:24.920858300 0 1 0 Visited: informant@http://cdn.turn.com/server/ddc.htm?uid=4516626952305582421&rnd=3579878229812519253&fpid=28&nu=y&t=&sp=n&purl=&ctid=1&cyid=2 790000007500000031535053a114020000000000c0000000000000461100000017000000001300000000000000110000000d00000000130000000000000011000000090000000013000000000000001100000006000000001300000000000000150000001800000000400000008045e09e8865d0010000000000000000530000004f00000031535053a114020000000000c0000000000000461100000021000000001300000000000000110000001c00000000030000000000000011000000200000000003000000000000000000000000000000 +107 6 0 8128507255426999137 0 0 2097153 0 1 Mar 23, 2015 20:44:28.821428000 Jan 01, 1601 00:00:00.000000000 Apr 18, 2015 20:44:28.819451000 Mar 23, 2015 20:44:28.818928000 Mar 23, 2015 20:44:28.821428000 0 1 0 Visited: informant@http://cdn.turn.com/server/ddc.htm?uid=4516626952305582421&rnd=7780049849614868821&fpid=28&nu=n&t=&sp=n&purl=&ctid=1&cyid=2 790000007500000031535053a114020000000000c0000000000000461100000017000000001300000000000000110000000d0000000013000000000000001100000009000000001300000000000000110000000600000000130000000000000015000000180000000040000000200f33a18865d0010000000000000000530000004f00000031535053a114020000000000c0000000000000461100000021000000001300000000000000110000001c00000000030000000000000011000000200000000003000000000000000000000000000000 +96 6 0 8128507255512523438 0 0 2097153 0 1 Mar 23, 2015 20:44:25.115362200 Jan 01, 1601 00:00:00.000000000 Apr 18, 2015 20:44:25.115885200 Mar 23, 2015 20:44:25.115362200 Mar 23, 2015 20:44:25.115362200 0 1 0 Visited: informant@http://cdn.turn.com/server/ddc.htm?uid=4516626952305582421&rnd=4177171428927414613&fpid=21&nu=n&t=&sp=y&purl=&ctid=1&cyid=2 790000007500000031535053a114020000000000c0000000000000461100000017000000001300000000000000110000000d0000000013000000000000001100000009000000001300000000000000110000000600000000130000000000000015000000180000000040000000b006fe9e8865d0010000000000000000530000004f00000031535053a114020000000000c0000000000000461100000021000000001300000000000000110000001c00000000030000000000000011000000200000000003000000000000000000000000000000 +97 6 0 8128507257641143482 0 0 2097153 0 1 Mar 23, 2015 20:44:25.805372800 Jan 01, 1601 00:00:00.000000000 Apr 18, 2015 20:44:25.805895800 Mar 23, 2015 20:44:25.805372800 Mar 23, 2015 20:44:25.805372800 0 1 0 Visited: informant@http://cdn.turn.com/server/ddc.htm?uid=4516626952305582421&rnd=4371059309369434453&fpid=28&nu=n&t=&sp=n&purl=&ctid=1&cyid=2 790000007500000031535053a114020000000000c0000000000000461100000017000000001300000000000000110000000d0000000013000000000000001100000009000000001300000000000000110000000600000000130000000000000015000000180000000040000000d04f679f8865d0010000000000000000530000004f00000031535053a114020000000000c0000000000000461100000021000000001300000000000000110000001c00000000030000000000000011000000200000000003000000000000000000000000000000 +95 6 0 8136796877648201093 0 0 2097153 0 1 Mar 23, 2015 20:44:25.070860600 Jan 01, 1601 00:00:00.000000000 Apr 18, 2015 20:44:25.071383600 Mar 23, 2015 20:44:25.070860600 Mar 23, 2015 20:44:25.070860600 0 1 0 Visited: informant@http://ad.turn.com/server/pixel.htm?fpid=21&sp=y 790000007500000031535053a114020000000000c0000000000000461100000017000000001300000000000000110000000d0000000013000000000000001100000009000000001300000000000000110000000600000000130000000000000015000000180000000040000000e028f79e8865d0010000000000000000530000004f00000031535053a114020000000000c0000000000000461100000021000000001300000000000000110000001c00000000030000000000000011000000200000000003000000000000000000000000000000 +93 6 0 8136796878930822154 0 0 2097153 0 3 Mar 23, 2015 20:44:27.646905900 Jan 01, 1601 00:00:00.000000000 Apr 18, 2015 20:44:27.647428900 Mar 23, 2015 20:44:27.646905900 Mar 23, 2015 20:44:27.646905900 0 0 0 Visited: informant@http://ad.turn.com/server/pixel.htm?fpid=28 790000007500000031535053a114020000000000c0000000000000461100000017000000001300000000000000110000000d0000000013000000000000001100000009000000001300000000000000110000000600000000130000000000000015000000180000000040000000e03980a08865d0010000000000000000530000004f00000031535053a114020000000000c0000000000000461100000021000000001300000000000000110000001c00000000030000000000000011000000200000000003000000000000000000000000000000 +91 6 0 8141779613517840261 0 0 2097153 0 3 Mar 25, 2015 14:47:29.709405500 Jan 01, 1601 00:00:00.000000000 Apr 20, 2015 14:47:29.709928500 Mar 25, 2015 14:47:29.709405500 Mar 25, 2015 14:47:29.709405500 0 0 0 Visited: informant@http://c.betrad.com/ba.html?432e97f 790000007500000031535053a114020000000000c0000000000000461100000017000000001300000000000000110000000d0000000013000000000000001100000009000000001300000000000000110000000600000000130000000000000015000000180000000040000000d0e53d17e966d0010000000000000000530000004f00000031535053a114020000000000c0000000000000461100000021000000001300000000000000110000001c00000000030000000000000011000000200000000003000000000000000000000000000000 +23 6 0 8319096221107585106 0 0 2097153 0 4 Mar 25, 2015 14:48:22.753705500 Jan 01, 1601 00:00:00.000000000 Apr 20, 2015 14:41:13.257498900 Mar 25, 2015 14:48:22.753705500 Mar 25, 2015 14:48:22.753705500 0 0 0 Visited: informant@http://static.ak.facebook.com/connect/xd_arbiter/6Dg4oLkBbYq.js?version=41 790000007500000031535053a114020000000000c0000000000000461100000017000000001300000000000000110000000d000000001300000000000000110000000900000000130000000000000011000000060000000013000000000000001500000018000000004000000010c5db36e966d00100000000000000007c0200007802000031535053a114020000000000c0000000000000462902000011000000001f100000040000003c0000006300680061006e006e0065006c003d006600660066006600340031003800630062006400340061006100320026006f0072006900670069006e003d0068007400740070002500330041002500320046002500320046007700770077002e00700069007200690066006f0072006d002e0063006f006d000000450000006300680061006e006e0065006c003d006600660034006200390065003800330061003000310037006600380026006f0072006900670069006e003d0068007400740070002500330041002500320046002500320046007700770077002e0065006e007400650072007400610069006e006d0065006e00740077006900730065002e0063006f006d00000000004a0000006300680061006e006e0065006c003d006600320066003300360033003900630066003800310032003100640026006f0072006900670069006e003d0068007400740070002500330041002500320046002500320046007200650073006f00750072006300650073002e0069006e0066006f0073006500630069006e0073007400690074007500740065002e0063006f006d000000380000006300680061006e006e0065006c003d0066003200650066003500620036006600620062006100340064003000360026006f0072006900670069006e003d0068007400740070002500330041002500320046002500320046007700770077002e006d0073006e002e0063006f006d0000001100000021000000001300000000000000110000001c00000000030000000000000011000000200000000003000000000000000000000000000000 +9 6 0 8589320159043917323 0 0 2097153 4 1 Mar 22, 2015 15:24:21.900252800 Jan 01, 1601 00:00:00.000000000 Apr 17, 2015 15:09:20.000000000 Mar 22, 2015 15:09:19.001000000 Mar 22, 2015 15:24:21.900252800 0 0 0 Visited: informant@http://go.microsoft.com/fwlink/?LinkID=121792 1000020000000000000000000000000000000000 +22 6 0 8589320159416201067 0 0 2097153 0 1 Mar 23, 2015 17:27:46.978197600 Jan 01, 1601 00:00:00.000000000 Apr 18, 2015 17:27:46.978720600 Mar 23, 2015 17:27:46.978197600 Mar 23, 2015 17:27:46.978197600 0 1 0 Visited: informant@http://go.microsoft.com/fwlink/?LinkId=299201 790000007500000031535053a114020000000000c0000000000000461100000017000000001300000000000000110000000d00000000130000000000000011000000090000000013000000000000001100000006000000001300000000000000150000001800000000400000002030c1266d65d0010000000000000000530000004f00000031535053a114020000000000c0000000000000461100000021000000001300000000000000110000001c00000000030000000000000011000000200000000003000000000000000000000000000000 +17 6 0 8589320160976880420 0 0 2097153 0 2 Mar 23, 2015 17:27:36.564385900 Jan 01, 1601 00:00:00.000000000 Apr 18, 2015 17:27:36.564908900 Mar 23, 2015 17:27:36.564385900 Mar 23, 2015 17:27:36.564385900 0 0 0 Visited: informant@http://go.microsoft.com/fwlink/?LinkId=69157 790000007500000031535053a114020000000000c0000000000000461100000017000000001300000000000000110000000d000000001300000000000000110000000900000000130000000000000011000000060000000013000000000000001500000018000000004000000040238c206d65d0010000000000000000530000004f00000031535053a114020000000000c0000000000000461100000021000000001300000000000000110000001c00000000030000000000000011000000200000000003000000000000000000000000000000 +6 6 0 8615516432992300523 0 0 2097153 4 1 Mar 22, 2015 15:24:21.900252800 Jan 01, 1601 00:00:00.000000000 Apr 17, 2015 15:09:54.000000000 Mar 22, 2015 15:09:52.405000000 Mar 22, 2015 15:24:21.900252800 0 0 0 Visited: informant@http://windows.microsoft.com/en-us/internet-explorer/download-ie 100002000000001000000000010000005c00101f44006f0077006e006c006f006100640020005700650062002000420072006f00770073006500720020002d00200049006e007400650072006e006500740020004500780070006c006f00720065007200000000000000000000000000 +8 6 0 8615516433184298324 0 0 2097153 4 1 Mar 22, 2015 15:24:21.900252800 Jan 01, 1601 00:00:00.000000000 Apr 17, 2015 15:09:20.000000000 Mar 22, 2015 15:09:18.596000000 Mar 22, 2015 15:24:21.900252800 0 0 0 Visited: informant@http://windows.microsoft.com/en-US/internet-explorer/products/ie-8/welcome 1000020000000000000000000000000000000000 +10 6 0 8615516433953482181 0 0 2097153 4 1 Mar 22, 2015 15:24:21.900252800 Jan 01, 1601 00:00:00.000000000 Apr 17, 2015 15:09:22.000000000 Mar 22, 2015 15:09:21.185000000 Mar 22, 2015 15:24:21.900252800 0 0 0 Visited: informant@http://windows.microsoft.com/en-us/internet-explorer/ie-8-welcome 100002000000001000000000010000007000101f59006f00750072002000620072006f007700730065007200200068006100730020006200650065006e0020007500700067007200610064006500640020002d0020004d006900630072006f0073006f00660074002000570069006e0064006f0077007300000000000000000000000000 +1 6 0 8615516434318882592 0 0 2097153 4 1 Mar 22, 2015 15:24:21.900252800 Jan 01, 1601 00:00:00.000000000 Apr 17, 2015 15:10:24.000000000 Mar 22, 2015 15:10:23.906000000 Mar 22, 2015 15:24:21.900252800 0 0 0 Visited: informant@http://windows.microsoft.com/en-us/internet-explorer/ie-11-worldwide-languages 100002000000001000000000020000009400101f44006f0077006e006c006f0061006400200049006e007400650072006e006500740020004500780070006c006f00720065007200200031003100200028004f00660066006c0069006e006500200069006e007300740061006c006c0065007200290020002d00200049006e007400650072006e006500740020004500780070006c006f0072006500720000000000000000000000 +43 6 0 8925445200809012348 0 0 2097153 0 1 Mar 23, 2015 18:08:31.817280200 Jan 01, 1601 00:00:00.000000000 Apr 18, 2015 18:08:31.817803200 Mar 23, 2015 18:08:31.817280200 Mar 23, 2015 18:08:31.817280200 0 1 0 Visited: informant@http://www.bing.com/search?q=DLP%20DRM&qs=n&form=QBRE&pq=dlp%20drm&sc=8-7&sp=-1&sk=&cvid=6e206ee8751e4ad89f882ed52daf3aea&sid=BE5E388F8757406CAA32E58334719A20&format=jsonv2&jsoncbid=0 790000007500000031535053a114020000000000c0000000000000461100000017000000001300000000000000110000000d00000000130000000000000011000000090000000013000000000000001100000006000000001300000000000000150000001800000000400000009003fed77265d0010000000000000000530000004f00000031535053a114020000000000c0000000000000461100000021000000001300000000000000110000001c00000000030000000000000011000000200000000003000000000000000000000000000000 +155 6 0 8925445200853921547 0 0 2097153 0 4 Mar 25, 2015 14:47:52.073505500 Jan 01, 1601 00:00:00.000000000 Apr 20, 2015 14:47:52.074028500 Mar 25, 2015 14:47:52.073505500 Mar 25, 2015 14:47:52.073505500 0 0 0 Visited: informant@http://www.bing.com/fd/fb/r?v=9_00_0_3811931&sId=6 790000007500000031535053a114020000000000c0000000000000461100000017000000001300000000000000110000000d0000000013000000000000001100000009000000001300000000000000110000000600000000130000000000000015000000180000000040000000905f9224e966d0010000000000000000530000004f00000031535053a114020000000000c0000000000000461100000021000000001300000000000000110000001c00000000030000000000000011000000200000000003000000000000000000000000000000 +84 6 0 8925445200933148102 0 0 2097153 0 8 Mar 25, 2015 14:49:24.856305500 Jan 01, 1601 00:00:00.000000000 Apr 20, 2015 14:42:15.360098900 Mar 25, 2015 14:49:24.856305500 Mar 25, 2015 14:49:24.856305500 0 0 0 Visited: informant@http://www.bing.com/?FORM=Z9FD1 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 +112 6 0 8925445201034762788 0 0 2097153 0 2 Mar 23, 2015 20:44:57.831177700 Jan 01, 1601 00:00:00.000000000 Apr 18, 2015 20:44:57.831700700 Mar 23, 2015 20:44:57.831177700 Mar 23, 2015 20:44:57.831177700 0 0 0 Visited: informant@http://www.bing.com/news?q=science+technology+news&FORM=NWBTCB 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 +125 6 0 8925445201198389459 0 0 2097153 0 2 Mar 23, 2015 20:45:30.127248300 Jan 01, 1601 00:00:00.000000000 Apr 18, 2015 20:45:30.127771300 Mar 23, 2015 20:45:30.127248300 Mar 23, 2015 20:45:30.127248300 0 0 0 Visited: informant@http://www.bing.com/news?q=Soccer+News&FORM=NSBABR b2000000ae00000031535053a114020000000000c0000000000000461100000017000000001300000002000000110000000d00000000130000000000000011000000090000000013000000000000103900000010000000001f0000001300000053006f00630063006500720020002d002000420069006e00670020004e0065007700730000000000110000000600000000130000000200000015000000180000000040000000f011bec58865d0010000000000000000790000007500000031535053a114020000000000c00000000000004611000000270000000013000000020000001100000021000000001300000000000000110000001c00000000030000000000000015000000280000000040000000f011bec58865d00111000000200000000003000000000000000000000000000000 +51 6 0 8925445201255733057 0 0 2097153 0 1 Mar 23, 2015 18:10:27.643461700 Jan 01, 1601 00:00:00.000000000 Apr 18, 2015 18:10:27.643984700 Mar 23, 2015 18:10:27.643461700 Mar 23, 2015 18:10:27.643461700 0 1 0 Visited: informant@http://www.bing.com/search?q=what%20is%20windows%20system%20artifacts&qs=n&form=QBRE&pq=what%20is%20windows%20system%20artifacts&sc=0-27&sp=-1&sk=&cvid=1ef4ace146854d97acf263b53bf97b8c&sid=BE5E388F8757406CAA32E58334719A20&format=jsonv2&jsoncbid=4 790000007500000031535053a114020000000000c0000000000000461100000017000000001300000000000000110000000d0000000013000000000000001100000009000000001300000000000000110000000600000000130000000000000015000000180000000040000000b0a8071d7365d0010000000000000000530000004f00000031535053a114020000000000c0000000000000461100000021000000001300000000000000110000001c00000000030000000000000011000000200000000003000000000000000000000000000000 +135 6 0 8925445201527285008 0 0 2097153 0 2 Mar 23, 2015 20:55:08.521079900 Jan 01, 1601 00:00:00.000000000 Apr 18, 2015 20:55:08.521602900 Mar 23, 2015 20:55:08.521079900 Mar 23, 2015 20:55:08.521079900 0 0 0 Visited: informant@http://www.bing.com/news?q=us+news&FORM=NSBABR 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 +136 6 0 8925445201529760220 0 0 2097153 0 2 Mar 23, 2015 20:55:10.333085100 Jan 01, 1601 00:00:00.000000000 Apr 18, 2015 20:55:10.333608100 Mar 23, 2015 20:55:10.333085100 Mar 23, 2015 20:55:10.333085100 0 0 0 Visited: informant@http://www.bing.com/news?q=world+news&FORM=NSBABR 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 +144 6 0 8925445201534174870 0 0 2097153 0 2 Mar 23, 2015 20:55:56.134654000 Jan 01, 1601 00:00:00.000000000 Apr 18, 2015 20:48:46.638447400 Mar 23, 2015 20:55:56.134654000 Mar 23, 2015 20:55:56.134654000 0 0 0 Visited: informant@http://www.bing.com/news?q=political+news&FORM=NSBABR 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 +33 6 0 8925445201640160749 0 0 2097153 0 2 Mar 23, 2015 18:07:58.080701500 Jan 01, 1601 00:00:00.000000000 Apr 18, 2015 18:07:58.081224500 Mar 23, 2015 18:07:58.080701500 Mar 23, 2015 18:07:58.080701500 0 0 0 Visited: informant@http://www.bing.com/news/search?q=file+sharing+and+tethering&FORM=HDRSC6 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 +36 6 0 8925445201646453421 0 0 2097153 0 1 Mar 23, 2015 18:07:54.981192800 Jan 01, 1601 00:00:00.000000000 Apr 18, 2015 18:07:54.981715800 Mar 23, 2015 18:07:54.981192800 Mar 23, 2015 18:07:54.981192800 0 1 0 Visited: informant@http://www.bing.com/search?q=Top+Stories&FORM=HDRSC1 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 +27 6 0 8925445201747700571 0 0 2097153 0 1 Mar 23, 2015 17:28:18.700305600 Jan 01, 1601 00:00:00.000000000 Apr 18, 2015 17:21:09.204099000 Mar 23, 2015 17:28:18.700305600 Mar 23, 2015 17:28:18.700305600 0 1 0 Visited: informant@http://www.bing.com/ 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 +127 6 0 8925445201782890599 0 0 2097153 0 4 Mar 23, 2015 20:56:08.707174000 Jan 01, 1601 00:00:00.000000000 Apr 18, 2015 20:48:59.210967400 Mar 23, 2015 20:56:08.707174000 Mar 23, 2015 20:56:08.707174000 0 0 0 Visited: informant@http://www.bing.com/news?q=top+stories&FORM=NSBABR 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 +82 6 0 8925445201853403512 0 0 2097153 0 1 Mar 23, 2015 20:43:47.512480900 Jan 01, 1601 00:00:00.000000000 Apr 18, 2015 20:43:47.513003900 Mar 23, 2015 20:43:47.512480900 Mar 23, 2015 20:43:47.512480900 0 1 0 Visited: informant@http://www.bing.com/search?q=external%20device%20and%20forensics&qs=n&form=QBRE&pq=external%20device%20and%20forensics&sc=8-9&sp=-1&sk=&cvid=c30c4b1f36114b1c9bc683838c69823a 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 +143 6 0 8925445202080277737 0 0 2097153 0 2 Mar 23, 2015 20:55:54.787650400 Jan 01, 1601 00:00:00.000000000 Apr 18, 2015 20:48:45.291443800 Mar 23, 2015 20:55:54.787650400 Mar 23, 2015 20:55:54.787650400 0 0 0 Visited: informant@http://www.bing.com/news?q=business+news&FORM=NSBABR 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 +79 6 0 8925445202191989901 0 0 2097153 0 1 Mar 23, 2015 18:14:11.977428300 Jan 01, 1601 00:00:00.000000000 Apr 18, 2015 18:14:11.977951300 Mar 23, 2015 18:14:11.977428300 Mar 23, 2015 18:14:11.977428300 0 1 0 Visited: informant@http://www.bing.com/search?q=external%20device%20and%20forensics&qs=n&form=QBRE&pq=external%20device%20and%20forensics&sc=8-9&sp=-1&sk=&cvid=c30c4b1f36114b1c9bc683838c69823a&sid=BE5E388F8757406CAA32E58334719A20&format=jsonv2&jsoncbid=9 790000007500000031535053a114020000000000c0000000000000461100000017000000001300000000000000110000000d0000000013000000000000001100000009000000001300000000000000110000000600000000130000000000000015000000180000000040000000904fbea27365d0010000000000000000530000004f00000031535053a114020000000000c0000000000000461100000021000000001300000000000000110000001c00000000030000000000000011000000200000000003000000000000000000000000000000 +49 6 0 8925445202563421753 0 0 2097153 0 1 Mar 23, 2015 18:10:03.820421400 Jan 01, 1601 00:00:00.000000000 Apr 18, 2015 18:10:03.820944400 Mar 23, 2015 18:10:03.820421400 Mar 23, 2015 18:10:03.820421400 0 1 0 Visited: informant@http://www.bing.com/search?q=Forensic+Email+Investigation&FORM=QSRE1&sid=BE5E388F8757406CAA32E58334719A20&format=jsonv2&jsoncbid=3 790000007500000031535053a114020000000000c0000000000000461100000017000000001300000000000000110000000d0000000013000000000000001100000009000000001300000000000000110000000600000000130000000000000015000000180000000040000000c08ed40e7365d0010000000000000000530000004f00000031535053a114020000000000c0000000000000461100000021000000001300000000000000110000001c00000000030000000000000011000000200000000003000000000000000000000000000000 +74 6 0 8925445202568465797 0 0 2097153 0 1 Mar 23, 2015 18:13:20.892344100 Jan 01, 1601 00:00:00.000000000 Apr 18, 2015 18:13:20.892867100 Mar 23, 2015 18:13:20.892344100 Mar 23, 2015 18:13:20.892344100 0 1 0 Visited: informant@http://www.bing.com/search?q=cd%20burning%20method&qs=n&form=QBRE&pq=cd%20burning%20method&sc=8-2&sp=-1&sk=&cvid=b7dbe6fb67424c578172ba57330a0894&sid=BE5E388F8757406CAA32E58334719A20&format=jsonv2&jsoncbid=7 790000007500000031535053a114020000000000c0000000000000461100000017000000001300000000000000110000000d0000000013000000000000001100000009000000001300000000000000110000000600000000130000000000000015000000180000000040000000c05b4b847365d0010000000000000000530000004f00000031535053a114020000000000c0000000000000461100000021000000001300000000000000110000001c00000000030000000000000011000000200000000003000000000000000000000000000000 +47 6 0 8925445202713525207 0 0 2097153 0 1 Mar 23, 2015 18:09:31.496373300 Jan 01, 1601 00:00:00.000000000 Apr 18, 2015 18:09:31.496896300 Mar 23, 2015 18:09:31.496373300 Mar 23, 2015 18:09:31.496373300 0 1 0 Visited: informant@http://www.bing.com/search?q=e-mail+investigation&qs=n&pq=e-mail+investigation&sc=8-7&sp=-1&sk=&cvid=fe1c3738d8c7471284731724166959af&first=9&FORM=PERE&sid=BE5E388F8757406CAA32E58334719A20&format=jsonv2&jsoncbid=2 790000007500000031535053a114020000000000c0000000000000461100000017000000001300000000000000110000000d0000000013000000000000001100000009000000001300000000000000110000000600000000130000000000000015000000180000000040000000804e90fb7265d0010000000000000000530000004f00000031535053a114020000000000c0000000000000461100000021000000001300000000000000110000001c00000000030000000000000011000000200000000003000000000000000000000000000000 +66 6 0 8925445202882871463 0 0 2097153 0 1 Mar 23, 2015 18:11:50.582692100 Jan 01, 1601 00:00:00.000000000 Apr 18, 2015 18:04:41.086485500 Mar 23, 2015 18:11:50.582692100 Mar 23, 2015 18:11:50.582692100 0 1 0 Visited: informant@http://www.bing.com/search?q=investigation%20on%20windows%20machine&qs=n&form=QBRE&pq=investigation%20on%20windows%20machine&sc=8-4&sp=-1&sk=&cvid=eb73de7f523c48769d56201379f55e67&sid=BE5E388F8757406CAA32E58334719A20&format=jsonv2&jsoncbid=5 790000007500000031535053a114020000000000c0000000000000461100000017000000001300000000000000110000000d00000000130000000000000011000000090000000013000000000000001100000006000000001300000000000000150000001800000000400000006025774e7365d0010000000000000000530000004f00000031535053a114020000000000c0000000000000461100000021000000001300000000000000110000001c00000000030000000000000011000000200000000003000000000000000000000000000000 +145 6 0 8925445202945931471 0 0 2097153 0 2 Mar 23, 2015 20:55:57.412156600 Jan 01, 1601 00:00:00.000000000 Apr 18, 2015 20:48:47.915950000 Mar 23, 2015 20:55:57.412156600 Mar 23, 2015 20:55:57.412156600 0 0 0 Visited: informant@http://www.bing.com/news?q=sports+news&FORM=NSBABR b2000000ae00000031535053a114020000000000c0000000000000461100000017000000001300000002000000110000000d00000000130000000000000011000000090000000013000000000000103900000010000000001f00000013000000530070006f0072007400730020002d002000420069006e00670020004e0065007700730000000000110000000600000000130000000200000015000000180000000040000000402aa23b8a65d0010000000000000000790000007500000031535053a114020000000000c00000000000004611000000270000000013000000020000001100000021000000001300000000000000110000001c00000000030000000000000015000000280000000040000000402aa23b8a65d00111000000200000000003000000000000000000000000000000 +138 6 0 8925445203064074335 0 0 2097153 0 2 Mar 23, 2015 20:55:17.465595400 Jan 01, 1601 00:00:00.000000000 Apr 18, 2015 20:55:17.466118400 Mar 23, 2015 20:55:17.465595400 Mar 23, 2015 20:55:17.465595400 0 0 0 Visited: informant@http://www.bing.com/news?q=local&FORM=NSBABR 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 +160 6 0 8925445203372715550 0 0 2097153 0 1 Mar 25, 2015 14:46:54.471205500 Jan 01, 1601 00:00:00.000000000 Apr 20, 2015 14:46:54.471728500 Mar 25, 2015 14:46:54.471205500 Mar 25, 2015 14:46:54.471205500 0 1 0 Visited: informant@http://www.bing.com/search?q=eraser&qs=n&form=QBRE&pq=eraser&sc=8-6&sp=-1&sk=&cvid=e3b983fe889944179093ff5199b2eac4&sid=C7E8F3776E804120B57C623F21EF33C4&format=jsonv2&jsoncbid=0 790000007500000031535053a114020000000000c0000000000000461100000017000000001300000000000000110000000d000000001300000000000000110000000900000000130000000000000011000000060000000013000000000000001500000018000000004000000070013d02e966d0010000000000000000530000004f00000031535053a114020000000000c0000000000000461100000021000000001300000000000000110000001c00000000030000000000000011000000200000000003000000000000000000000000000000 +69 6 0 8925445203521183347 0 0 2097153 0 1 Mar 23, 2015 18:12:35.567263800 Jan 01, 1601 00:00:00.000000000 Apr 18, 2015 18:05:26.071057200 Mar 23, 2015 18:12:35.567263800 Mar 23, 2015 18:12:35.567263800 0 1 0 Visited: informant@http://www.bing.com/search?q=windows%20event%20logs&qs=n&form=QBRE&pq=windows%20event%20logs&sc=0-32&sp=-1&sk=&cvid=36b33ac5151246398f7dc1ca79de069c&sid=BE5E388F8757406CAA32E58334719A20&format=jsonv2&jsoncbid=6 790000007500000031535053a114020000000000c0000000000000461100000017000000001300000000000000110000000d0000000013000000000000001100000009000000001300000000000000110000000600000000130000000000000015000000180000000040000000f04f47697365d0010000000000000000530000004f00000031535053a114020000000000c0000000000000461100000021000000001300000000000000110000001c00000000030000000000000011000000200000000003000000000000000000000000000000 +146 6 0 8925445203734772051 0 0 2097153 0 2 Mar 23, 2015 20:55:58.732158900 Jan 01, 1601 00:00:00.000000000 Apr 18, 2015 20:48:49.235952300 Mar 23, 2015 20:55:58.732158900 Mar 23, 2015 20:55:58.732158900 0 0 0 Visited: informant@http://www.bing.com/news?q=health+news&FORM=NSBABR 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 +28 6 0 8925445203752929520 0 0 2097153 0 17 Mar 24, 2015 14:05:15.518744900 Jan 01, 1601 00:00:00.000000000 Apr 19, 2015 14:05:15.519267900 Mar 24, 2015 14:05:15.518744900 Mar 24, 2015 14:05:15.518744900 0 0 0 Visited: informant@http://www.bing.com/fd/fb/r?v=9_00_0_3773239&sId=6 790000007500000031535053a114020000000000c0000000000000461100000017000000001300000000000000110000000d0000000013000000000000001100000009000000001300000000000000110000000600000000130000000000000015000000180000000040000000e04955061a66d0010000000000000000530000004f00000031535053a114020000000000c0000000000000461100000021000000001300000000000000110000001c00000000030000000000000011000000200000000003000000000000000000000000000000 +141 6 0 8925445203818134024 0 0 2097153 0 2 Mar 23, 2015 20:55:29.240612800 Jan 01, 1601 00:00:00.000000000 Apr 18, 2015 20:48:19.744406200 Mar 23, 2015 20:55:29.240612800 Mar 23, 2015 20:55:29.240612800 0 0 0 Visited: informant@http://www.bing.com/news?q=science+technology+news&FORM=NSBABR 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 +158 6 0 8925445203838826803 0 0 2097153 0 1 Mar 25, 2015 14:46:44.752905500 Jan 01, 1601 00:00:00.000000000 Apr 20, 2015 14:46:44.753428500 Mar 25, 2015 14:46:44.752905500 Mar 25, 2015 14:46:44.752905500 0 1 0 Visited: informant@http://www.bing.com/search?q=anti-forensic+tools&qs=n&form=QBLH&pq=anti-forensic+tools&sc=8-13&sp=-1&sk=&cvid=e799e715fa2244a5a7967675bdcca9d3 c2000000be00000031535053a114020000000000c0000000000000461100000017000000001300000001000000110000000d00000000130000000000000011000000090000000013000000000000104900000010000000001f0000001b00000061006e00740069002d0066006f00720065006e00730069006300200074006f006f006c00730020002d002000420069006e00670000000000110000000600000000130000000100000015000000180000000040000000000172fce866d0010000000000000000790000007500000031535053a114020000000000c00000000000004611000000270000000013000000010000001100000021000000001300000000000000110000001c00000000030000000000000015000000280000000040000000000172fce866d00111000000200000000003000000000000000000000000000000 +45 6 0 8925445203840061715 0 0 2097153 0 1 Mar 23, 2015 18:08:54.101318800 Jan 01, 1601 00:00:00.000000000 Apr 18, 2015 18:08:54.101841800 Mar 23, 2015 18:08:54.101318800 Mar 23, 2015 18:08:54.101318800 0 1 0 Visited: informant@http://www.bing.com/search?q=e-mail%20investigation&qs=n&form=QBRE&pq=e-mail%20investigation&sc=8-7&sp=-1&sk=&cvid=fe1c3738d8c7471284731724166959af&sid=BE5E388F8757406CAA32E58334719A20&format=jsonv2&jsoncbid=1 790000007500000031535053a114020000000000c0000000000000461100000017000000001300000000000000110000000d0000000013000000000000001100000009000000001300000000000000110000000600000000130000000000000015000000180000000040000000504846e57265d0010000000000000000530000004f00000031535053a114020000000000c0000000000000461100000021000000001300000000000000110000001c00000000030000000000000011000000200000000003000000000000000000000000000000 +133 6 0 8925445203932388436 0 0 2097153 0 1 Mar 23, 2015 20:53:46.618464800 Jan 01, 1601 00:00:00.000000000 Apr 18, 2015 20:53:46.618987800 Mar 23, 2015 20:53:46.618464800 Mar 23, 2015 20:53:46.618464800 0 1 0 Visited: informant@http://www.bing.com/news?q=top+stories&FORM=NWRFSH ba000000b600000031535053a114020000000000c0000000000000461100000017000000001300000001000000110000000d00000000130000000000000011000000090000000013000000000000104100000010000000001f0000001800000054006f0070002000530074006f00720069006500730020002d002000420069006e00670020004e006500770073000000110000000600000000130000000100000015000000180000000040000000a095aced8965d0010000000000000000790000007500000031535053a114020000000000c00000000000004611000000270000000013000000010000001100000021000000001300000000000000110000001c00000000030000000000000015000000280000000040000000a095aced8965d00111000000200000000003000000000000000000000000000000 +139 6 0 8925445204260838898 0 0 2097153 0 2 Mar 23, 2015 20:55:18.330597100 Jan 01, 1601 00:00:00.000000000 Apr 18, 2015 20:55:18.331120100 Mar 23, 2015 20:55:18.330597100 Mar 23, 2015 20:55:18.330597100 0 0 0 Visited: informant@http://www.bing.com/news?q=entertainment+news&FORM=NSBABR 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 +76 6 0 8925445204277885410 0 0 2097153 0 1 Mar 23, 2015 18:13:37.494372000 Jan 01, 1601 00:00:00.000000000 Apr 18, 2015 18:13:37.494895000 Mar 23, 2015 18:13:37.494372000 Mar 23, 2015 18:13:37.494372000 0 1 0 Visited: informant@http://www.bing.com/search?q=cd%20burning%20method%20in%20windows&qs=n&form=QBRE&pq=cd%20burning%20method%20in%20windows&sc=0-0&sp=-1&sk=&cvid=acec9b1dcb8146c58258ad65c770d76e&sid=BE5E388F8757406CAA32E58334719A20&format=jsonv2&jsoncbid=8 790000007500000031535053a114020000000000c0000000000000461100000017000000001300000000000000110000000d0000000013000000000000001100000009000000001300000000000000110000000600000000130000000000000015000000180000000040000000609f308e7365d0010000000000000000530000004f00000031535053a114020000000000c0000000000000461100000021000000001300000000000000110000001c00000000030000000000000011000000200000000003000000000000000000000000000000 +180 6 0 8925445204382925123 0 0 2097153 0 1 Mar 25, 2015 14:47:51.248205500 Jan 01, 1601 00:00:00.000000000 Apr 20, 2015 14:47:51.248728500 Mar 25, 2015 14:47:51.248205500 Mar 25, 2015 14:47:51.248205500 0 1 0 Visited: informant@http://www.bing.com/search?q=ccleaner&qs=n&form=QBRE&pq=ccleaner&sc=8-8&sp=-1&sk=&cvid=d434736d4e514ad497f68734a6779104&sid=C7E8F3776E804120B57C623F21EF33C4&format=jsonv2&jsoncbid=1 790000007500000031535053a114020000000000c0000000000000461100000017000000001300000000000000110000000d0000000013000000000000001100000009000000001300000000000000110000000600000000130000000000000015000000180000000040000000007d1424e966d0010000000000000000530000004f00000031535053a114020000000000c0000000000000461100000021000000001300000000000000110000001c00000000030000000000000011000000200000000003000000000000000000000000000000 +86 6 0 8925445204617756730 0 0 2097153 0 1 Mar 23, 2015 20:43:52.457705900 Jan 01, 1601 00:00:00.000000000 Apr 18, 2015 20:43:52.458228900 Mar 23, 2015 20:43:52.457705900 Mar 23, 2015 20:43:52.457705900 0 1 0 Visited: informant@http://www.bing.com/news?FORM=Z9LH3 ba000000b600000031535053a114020000000000c0000000000000461100000017000000001300000001000000110000000d00000000130000000000000011000000090000000013000000000000104100000010000000001f0000001800000054006f0070002000530074006f00720069006500730020002d002000420069006e00670020004e00650077007300000011000000060000000013000000010000001500000018000000004000000090cf868b8865d0010000000000000000790000007500000031535053a114020000000000c00000000000004611000000270000000013000000010000001100000021000000001300000000000000110000001c0000000003000000000000001500000028000000004000000090cf868b8865d00111000000200000000003000000000000000000000000000000 +31 6 0 8925445204719602826 0 0 2097153 0 2 Mar 23, 2015 18:07:59.890207200 Jan 01, 1601 00:00:00.000000000 Apr 18, 2015 18:07:59.890730200 Mar 23, 2015 18:07:59.890207200 Mar 23, 2015 18:07:59.890207200 0 0 0 Visited: informant@http://www.bing.com/search?q=file+sharing+and+tethering&qs=n&form=QBLH&pq=file+sharing+and+tethering&sc=0-18&sp=-1&sk=&cvid=171b77e4ffd54b2a92c4e97abf995fe1 ce000000ca00000031535053a114020000000000c0000000000000461100000017000000001300000002000000110000000d00000000130000000000000011000000090000000013000000000000105500000010000000001f00000022000000660069006c0065002000730068006100720069006e006700200061006e006400200074006500740068006500720069006e00670020002d002000420069006e00670000001100000006000000001300000002000000150000001800000000400000002057f6c47265d0010000000000000000790000007500000031535053a114020000000000c00000000000004611000000270000000013000000020000001100000021000000001300000000000000110000001c000000000300000000000000150000002800000000400000002057f6c47265d00111000000200000000003000000000000000000000000000000 +35 6 0 8925445204819593925 0 0 2097153 0 1 Mar 23, 2015 18:07:52.314187500 Jan 01, 1601 00:00:00.000000000 Apr 18, 2015 18:07:52.314710500 Mar 23, 2015 18:07:52.314187500 Mar 23, 2015 18:07:52.314187500 0 1 0 Visited: informant@http://www.bing.com/news/search?q=Top Stories&FORM=NSBABR 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 +171 6 0 9112686097185244822 0 0 2097153 0 1 Mar 25, 2015 14:47:05.361805500 Jan 01, 1601 00:00:00.000000000 Apr 20, 2015 14:47:05.362328500 Mar 25, 2015 14:47:05.361805500 Mar 25, 2015 14:47:05.361805500 0 1 0 Visited: informant@http://p4-bx45atk7zyxog-7xw6fdnac2wemijo-if-v6exp3-v4.metric.gstatic.com/v6exp3/redir.html 790000007500000031535053a114020000000000c0000000000000461100000017000000001300000000000000110000000d000000001300000000000000110000000900000000130000000000000011000000060000000013000000000000001500000018000000004000000010b0ba08e966d0010000000000000000530000004f00000031535053a114020000000000c0000000000000461100000021000000001300000000000000110000001c00000000030000000000000011000000200000000003000000000000000000000000000000 +172 6 0 9112686099006799848 0 0 2097153 0 1 Mar 25, 2015 14:47:05.649305500 Jan 01, 1601 00:00:00.000000000 Apr 20, 2015 14:47:05.647328500 Mar 25, 2015 14:47:05.646805500 Mar 25, 2015 14:47:05.649305500 0 1 0 Visited: informant@http://p4-bx45atk7zyxog-7xw6fdnac2wemijo-if-v6exp3-v4.metric.gstatic.com/v6exp3/iframe.html 790000007500000031535053a114020000000000c0000000000000461100000017000000001300000000000000110000000d0000000013000000000000001100000009000000001300000000000000110000000600000000130000000000000015000000180000000040000000e02ce608e966d0010000000000000000530000004f00000031535053a114020000000000c0000000000000461100000021000000001300000000000000110000001c00000000030000000000000011000000200000000003000000000000000000000000000000 +106 6 0 9183313204248505179 0 0 2097153 0 1 Mar 23, 2015 20:44:28.188916000 Jan 01, 1601 00:00:00.000000000 Apr 18, 2015 20:44:28.186938900 Mar 23, 2015 20:44:28.186415900 Mar 23, 2015 20:44:28.188916000 0 1 0 Visited: informant@javascript:void(0) 790000007500000031535053a114020000000000c0000000000000461100000017000000001300000000000000110000000d0000000013000000000000001100000009000000001300000000000000110000000600000000130000000000000015000000180000000040000000a09fd2a08865d0010000000000000000530000004f00000031535053a114020000000000c0000000000000461100000021000000001300000000000000110000001c00000000030000000000000011000000200000000003000000000000000000000000000000 +153 6 0 9197386162392984544 0 0 2097153 0 1 Mar 23, 2015 20:56:32.855777200 Jan 01, 1601 00:00:00.000000000 Apr 18, 2015 20:49:23.359570600 Mar 23, 2015 20:56:32.855777200 Mar 23, 2015 20:56:32.855777200 0 1 0 Visited: informant@http://www.wired.com/2015/03/stealing-data-computers-using-heat/ ea000000e600000031535053a114020000000000c0000000000000461100000017000000001300000001000000110000000d00000000130000000000000011000000090000000013000000000000107100000010000000001f0000003000000053007400650061006c0069006e006700200044006100740061002000460072006f006d00200043006f006d0070007500740065007200730020005500730069006e0067002000480065006100740020007c0020005700490052004500440000001100000006000000001300000001000000150000001800000000400000007056c2508a65d0010000000000000000790000007500000031535053a114020000000000c00000000000004611000000270000000013000000010000001100000021000000001300000000000000110000001c000000000300000000000000150000002800000000400000007056c2508a65d00111000000200000000003000000000000000000000000000000 +116 6 0 9197386165000329054 0 0 2097153 0 1 Mar 23, 2015 20:45:22.234227600 Jan 01, 1601 00:00:00.000000000 Apr 18, 2015 20:45:22.234750600 Mar 23, 2015 20:45:22.234227600 Mar 23, 2015 20:45:22.234227600 0 1 0 Visited: informant@http://www.wired.com/?p=1756538 1a0100001601000031535053a114020000000000c0000000000000461100000017000000001300000001000000110000000d0000000013000000000000001100000009000000001300000000000010a100000010000000001f000000480000005400680065002000500072006900760061006300790020005200650076006f006c0074003a0020005400680065002000470072006f00770069006e0067002000440065006d0061006e006400200046006f007200200050007200690076006100630079002d00610073002d0061002d00530065007200760069006300650020007c002000570049005200450044000000110000000600000000130000000100000015000000180000000040000000a0b109c18865d0010000000000000000790000007500000031535053a114020000000000c00000000000004611000000270000000013000000010000001100000021000000001300000000000000110000001c00000000030000000000000015000000280000000040000000a0b109c18865d00111000000200000000003000000000000000000000000000000 diff --git a/NIST_Data_Leakage_Case/py_version/pycode/webhistory_python/hello.ipynb b/NIST_Data_Leakage_Case/py_version/pycode/webhistory_python/hello.ipynb new file mode 100644 index 0000000..bbe5442 --- /dev/null +++ b/NIST_Data_Leakage_Case/py_version/pycode/webhistory_python/hello.ipynb @@ -0,0 +1,52 @@ +{ + "cells": [ + { + "cell_type": "code", + "execution_count": 1, + "source": [ + "print(\"hello Jupyter!\")" + ], + "outputs": [ + { + "output_type": "stream", + "name": "stdout", + "text": [ + "hello Jupyter!\n" + ] + } + ], + "metadata": {} + }, + { + "cell_type": "code", + "execution_count": null, + "source": [], + "outputs": [], + "metadata": {} + } + ], + "metadata": { + "orig_nbformat": 4, + "language_info": { + "name": "python", + "version": "3.11.4", + "mimetype": "text/x-python", + "codemirror_mode": { + "name": "ipython", + "version": 3 + }, + "pygments_lexer": "ipython3", + "nbconvert_exporter": "python", + "file_extension": ".py" + }, + "kernelspec": { + "name": "python3", + "display_name": "Python 3.11.4 64-bit" + }, + "interpreter": { + "hash": "a06e30aee820ff8fe24fb428cece021c5cdfc4bd84062afc0eba853e87fef366" + } + }, + "nbformat": 4, + "nbformat_minor": 2 +} \ No newline at end of file diff --git a/NIST_Data_Leakage_Case/py_version/pycode/webhistory_python/hello.py b/NIST_Data_Leakage_Case/py_version/pycode/webhistory_python/hello.py new file mode 100644 index 0000000..5bdfeb7 --- /dev/null +++ b/NIST_Data_Leakage_Case/py_version/pycode/webhistory_python/hello.py @@ -0,0 +1 @@ +print("Hello, Python!") \ No newline at end of file diff --git a/NIST_Data_Leakage_Case/py_version/pycode/webhistory_python/index.IE8.csv b/NIST_Data_Leakage_Case/py_version/pycode/webhistory_python/index.IE8.csv new file mode 100644 index 0000000..94297d9 --- /dev/null +++ b/NIST_Data_Leakage_Case/py_version/pycode/webhistory_python/index.IE8.csv @@ -0,0 +1,352 @@ +TYPE URL MODIFIED TIME ACCESS TIME FILENAME DIRECTORY HTTP HEADERS +URL http://img.s-msn.com/tenant/amp/entityid/AA42x33.img?h=16&w=16&m=6&q=60&u=t&o=t&l=f&f=png 03/23/2015 05:13:16 03/22/2015 11:09:17 AA42x33[1].png E9RPI3E2 HTTP/1.1 200 OK X-Datacenter: eastus X-ActivityId: 9ba7b033-6b7b-4ed1-89c9-99a7f172cb0e X-Instance: Resizer.Web_IN_5 X-Deployment: c610fbb33f2e4f88b789490c62db1a73 Timing-Allow-Origin: * X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Content-Type: image/png Content-Location: http://img.s-msn.com/tenant/amp/entityid/AA42x33?h=16&w=16&m=6&q=60&u=t&o=t&l=f&f=png X-Source-Length: 378 Content-Length: 316 ~U:informant +URL http://img.s-msn.com/tenant/amp/entityid/BBiBVNI.img?h=194&w=300&m=6&q=60&u=t&o=t&l=f&x=1149&y=926 03/23/2015 10:16:09 03/22/2015 11:09:18 BBiBVNI[1].jpg DUBW47SE HTTP/1.1 200 OK Content-Type: image/jpeg Content-Location: http://img.s-msn.com/tenant/amp/entityid/BBiBVNI?h=194&w=300&m=6&q=60&u=t&o=t&l=f&x=1149&y=926 X-Source-Length: 643255 X-Datacenter: eastus X-ActivityId: 7603a183-0f92-4259-93fc-7df04123ee70 X-Instance: Resizer.Web_IN_6 X-Deployment: c610fbb33f2e4f88b789490c62db1a73 Timing-Allow-Origin: * X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Content-Length: 12694 ~U:informant +URL http://img.s-msn.com/tenant/amp/entityid/BBiBMZk.img?h=75&w=100&m=6&q=60&u=t&o=t&l=f&x=1211&y=1191 03/23/2015 07:47:38 03/22/2015 11:09:18 BBiBMZk[1].jpg DUBW47SE HTTP/1.1 200 OK Content-Type: image/jpeg Content-Location: http://img.s-msn.com/tenant/amp/entityid/BBiBMZk?h=75&w=100&m=6&q=60&u=t&o=t&l=f&x=1211&y=1191 X-Source-Length: 240614 X-Datacenter: eastus X-ActivityId: 69a53a75-2e5b-472f-95fd-afed1ec9ae2d X-Instance: Resizer.Web_IN_3 X-Deployment: c610fbb33f2e4f88b789490c62db1a73 Timing-Allow-Origin: * X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Content-Length: 2032 ~U:informant +URL http://img.s-msn.com/tenant/amp/entityid/BBivFGA.img?h=75&w=100&m=6&q=60&u=t&o=t&l=f 03/20/2015 18:52:38 03/22/2015 11:09:19 BBivFGA[1].jpg DUBW47SE HTTP/1.1 200 OK Content-Type: image/jpeg Content-Location: http://img.s-msn.com/tenant/amp/entityid/BBivFGA?h=75&w=100&m=6&q=60&u=t&o=t&l=f X-Source-Length: 319591 X-Datacenter: eastus X-ActivityId: 1d17c3cc-4c9e-494e-8e3b-d352c89e9e0f X-Instance: Resizer.Web_IN_24 X-Deployment: c610fbb33f2e4f88b789490c62db1a73 Timing-Allow-Origin: * X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Content-Length: 2503 ~U:informant +URL http://ajax.aspnetcdn.com/ajax/jQuery/jquery-1.8.3.min.js 11/13/2012 11:20:44 03/22/2015 11:10:22 jquery-1.8.3.min[1].js 4C689SI3 HTTP/1.1 200 OK Content-Type: application/x-javascript Etag: "016b0d4bac1cd1:0" P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" VTag: 79136656500000000 X-Cache: HIT X-CCC: US X-CID: 2 X-Powered-By: ASP.NET X-Powered-By: ARR/2.5 X-Powered-By: ASP.NET Content-Length: 93637 ~U:informant +URL https://www.google.com/chrome/assets/consumer/images/tiffany/fallback/browser-shadow.png 06/25/2012 15:04:10 03/22/2015 11:10:54 browser-shadow[1].png 7PBK2Z4C HTTP/1.1 200 OK Content-Type: image/png X-Content-Type-Options: nosniff Content-Length: 56340 X-XSS-Protection: 1; mode=block Alternate-Protocol: 443:quic,p=0.5 ~U:informant +URL https://www.google.com/chrome/assets/consumer/images/tiffany/chrome-title.png 08/27/2012 17:36:11 03/22/2015 11:10:54 chrome-title[1].png DUBW47SE HTTP/1.1 200 OK Content-Type: image/png X-Content-Type-Options: nosniff Content-Length: 2544 X-XSS-Protection: 1; mode=block Alternate-Protocol: 443:quic,p=0.5 ~U:informant +URL https://www.google.com/chrome/assets/common/images/fn/fn-devices-sprite.png 10/09/2014 02:33:21 03/22/2015 11:11:12 fn-devices-sprite[1].png 4C689SI3 HTTP/1.1 200 OK Content-Type: image/png X-Content-Type-Options: nosniff Content-Length: 98524 X-XSS-Protection: 1; mode=block Alternate-Protocol: 443:quic,p=0.5 ~U:informant +URL https://www.google.com/chrome/assets/consumer/images/tiffany/carousel/carousel-sidefade-left.png 06/25/2012 15:04:10 03/22/2015 11:10:54 carousel-sidefade-left[1].png 7PBK2Z4C HTTP/1.1 200 OK Content-Type: image/png X-Content-Type-Options: nosniff Content-Length: 799 X-XSS-Protection: 1; mode=block Alternate-Protocol: 443:quic,p=0.5 ~U:informant +URL https://www.google.com/chrome/assets/consumer/images/tiffany/browser/browser-bar-windows.png 06/25/2012 15:04:10 03/22/2015 11:10:55 browser-bar-windows[1].png DUBW47SE HTTP/1.1 200 OK Content-Type: image/png X-Content-Type-Options: nosniff Content-Length: 10719 X-XSS-Protection: 1; mode=block Alternate-Protocol: 443:quic,p=0.5 ~U:informant +URL https://www.google.com/chrome/assets/consumer/images/tiffany/featured/cubelab.jpg 05/19/2014 13:02:09 03/22/2015 11:10:55 cubelab[1].jpg DUBW47SE HTTP/1.1 200 OK Content-Type: image/jpeg X-Content-Type-Options: nosniff Content-Length: 119304 X-XSS-Protection: 1; mode=block Alternate-Protocol: 443:quic,p=0.5 ~U:informant +URL http://pagead2.googlesyndication.com/pagead/js/lidar.js 03/22/2015 11:09:02 f[1].txt DUBW47SE HTTP/1.1 200 OK P3P: policyref="http://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Content-Type: text/javascript; charset=UTF-8 ETag: 14798947301048667436 X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" X-XSS-Protection: 1; mode=block Alternate-Protocol: 80:quic,p=0.5 Content-Length: 54384 ~U:informant +URL https://www.google.com/intl/en/chrome/assets/consumer/images/tiffany/featured/noweverywhere_feat.jpg 03/27/2013 17:02:34 03/22/2015 11:10:55 noweverywhere_feat[1].jpg 4C689SI3 HTTP/1.1 200 OK Content-Type: image/jpeg X-Content-Type-Options: nosniff Content-Length: 36745 X-XSS-Protection: 1; mode=block Alternate-Protocol: 443:quic,p=0.5 ~U:informant +URL http://static-hp-eus.s-msn.com/sc/9b/e151e5.gif 11/25/2014 17:09:36 03/22/2015 11:09:02 e151e5[1].gif 7PBK2Z4C HTTP/1.1 200 OK Content-Type: image/gif ETag: "050a47ffc8d01:0" X-Powered-By: ASP.NET Access-Control-Allow-Origin: * Access-Control-Allow-Methods: HEAD,GET,OPTIONS X-XSS-Protection: 1 Content-Length: 43 ~U:informant +URL https://www.google.com/chrome/assets/consumer/images/tiffany/carousel/carousel-thumb-shadow.png 08/27/2012 20:32:35 03/22/2015 11:10:54 carousel-thumb-shadow[1].png E9RPI3E2 HTTP/1.1 200 OK Content-Type: image/png X-Content-Type-Options: nosniff Content-Length: 2595 X-XSS-Protection: 1; mode=block Alternate-Protocol: 443:quic,p=0.5 ~U:informant +URL http://img.s-msn.com/tenant/amp/entityid/AA3kXQp.img?h=16&w=16&m=6&q=60&u=t&o=t&l=f&f=png 03/20/2015 09:27:32 03/22/2015 11:09:03 AA3kXQp[1].png 4C689SI3 HTTP/1.1 200 OK X-Datacenter: eastus X-ActivityId: 65bd16c0-c893-4e8d-b67a-edc6d3623eae X-Instance: Resizer.Web_IN_19 X-Deployment: c610fbb33f2e4f88b789490c62db1a73 Timing-Allow-Origin: * X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Content-Type: image/png Content-Location: http://img.s-msn.com/tenant/amp/entityid/AA3kXQp?h=16&w=16&m=6&q=60&u=t&o=t&l=f&f=png X-Source-Length: 1365 Content-Length: 638 ~U:informant +URL http://img.s-msn.com/tenant/amp/entityid/BBiBF8f.img?h=194&w=300&m=6&q=60&u=t&o=t&l=f 03/23/2015 07:25:46 03/22/2015 11:09:18 BBiBF8f[1].jpg E9RPI3E2 HTTP/1.1 200 OK Content-Type: image/jpeg Content-Location: http://img.s-msn.com/tenant/amp/entityid/BBiBF8f?h=194&w=300&m=6&q=60&u=t&o=t&l=f X-Source-Length: 160642 X-Datacenter: eastus X-ActivityId: 1633ed80-7529-48c1-a2ba-b85a8580fa4e X-Instance: Resizer.Web_IN_6 X-Deployment: c610fbb33f2e4f88b789490c62db1a73 Timing-Allow-Origin: * X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Content-Length: 6125 ~U:informant +URL http://img.s-msn.com/tenant/amp/entityid/BBiBWww.img?h=75&w=100&m=6&q=60&u=t&o=t&l=f&x=1452&y=842 03/23/2015 10:45:36 03/22/2015 11:09:18 BBiBWww[1].jpg 4C689SI3 HTTP/1.1 200 OK Content-Type: image/jpeg Content-Location: http://img.s-msn.com/tenant/amp/entityid/BBiBWww?h=75&w=100&m=6&q=60&u=t&o=t&l=f&x=1452&y=842 X-Source-Length: 183578 X-Datacenter: eastus X-ActivityId: 14c9bfd1-bc09-42b4-b1e1-950d1847722c X-Instance: Resizer.Web_IN_0 X-Deployment: c610fbb33f2e4f88b789490c62db1a73 Timing-Allow-Origin: * X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Content-Length: 1405 ~U:informant +URL http://img.s-msn.com/tenant/amp/entityid/AA86h7b.img?h=16&w=16&m=6&q=60&u=t&o=t&l=f&f=png 03/21/2015 20:30:03 03/22/2015 11:09:18 AA86h7b[1].png DUBW47SE HTTP/1.1 200 OK X-Datacenter: eastus X-ActivityId: f3949ce4-6ba0-4a26-a45e-bf6857b9c227 X-Instance: Resizer.Web_IN_11 X-Deployment: c610fbb33f2e4f88b789490c62db1a73 Timing-Allow-Origin: * X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Content-Type: image/png Content-Location: http://img.s-msn.com/tenant/amp/entityid/AA86h7b?h=16&w=16&m=6&q=60&u=t&o=t&l=f&f=png X-Source-Length: 225 Content-Length: 238 ~U:informant +URL http://img.s-msn.com/tenant/amp/entityid/BBiqmrh.img?h=75&w=100&m=6&q=60&u=t&o=t&l=f 03/19/2015 08:28:02 03/22/2015 11:09:18 BBiqmrh[1].jpg 7PBK2Z4C HTTP/1.1 200 OK Content-Type: image/jpeg Content-Location: http://img.s-msn.com/tenant/amp/entityid/BBiqmrh?h=75&w=100&m=6&q=60&u=t&o=t&l=f X-Source-Length: 38054 X-Datacenter: eastus X-ActivityId: 374f2529-8d27-4468-8442-0d2f5d81e9a0 X-Instance: Resizer.Web_IN_5 X-Deployment: c610fbb33f2e4f88b789490c62db1a73 Timing-Allow-Origin: * X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Content-Length: 1823 ~U:informant +URL http://img.s-msn.com/tenant/amp/entityid/BB93Uyk.img?h=16&w=16&m=6&q=60&u=t&o=t&l=f&f=png 03/21/2015 05:34:54 03/22/2015 11:09:18 BB93Uyk[1].png 7PBK2Z4C HTTP/1.1 200 OK X-Datacenter: eastus X-ActivityId: fb278713-5c22-4d56-a1f0-dc85655cc988 X-Instance: Resizer.Web_IN_4 X-Deployment: c610fbb33f2e4f88b789490c62db1a73 Timing-Allow-Origin: * X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Content-Type: image/png Content-Location: http://img.s-msn.com/tenant/amp/entityid/BB93Uyk?h=16&w=16&m=6&q=60&u=t&o=t&l=f&f=png X-Source-Length: 366 Content-Length: 531 ~U:informant +URL http://js.microsoft.com/library/svy/windows/broker-config.js?1427037031908 03/18/2015 11:27:17 03/22/2015 11:10:31 broker-config[2].js 7PBK2Z4C HTTP/1.1 200 OK Content-Type: application/x-javascript ETag: "80f85a49061d01:0" VTag: 279450515900000000 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-Powered-By: ASP.NET Content-Length: 11630 ~U:informant +URL http://img.s-msn.com/tenant/amp/entityid/BBiA3co.img?h=250&w=300&m=6&q=60&u=t&o=t&l=f&f=jpg&x=614&y=583 03/23/2015 03:55:08 03/22/2015 11:09:03 BBiA3co[1].jpg 7PBK2Z4C HTTP/1.1 200 OK Content-Type: image/jpeg Content-Location: http://img.s-msn.com/tenant/amp/entityid/BBiA3co?h=250&w=300&m=6&q=60&u=t&o=t&l=f&f=jpg&x=614&y=583 X-Source-Length: 337009 X-Datacenter: eastus X-ActivityId: d425e37a-63b5-4e48-854e-a4ba9f586945 X-Instance: Resizer.Web_IN_0 X-Deployment: c610fbb33f2e4f88b789490c62db1a73 Timing-Allow-Origin: * X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Content-Length: 9759 ~U:informant +URL http://img.s-msn.com/tenant/amp/entityid/AA2vq8h.img?h=16&w=16&m=6&q=60&u=t&o=t&l=f&f=png 03/23/2015 05:47:29 03/22/2015 11:09:35 AA2vq8h[1].png E9RPI3E2 HTTP/1.1 200 OK X-Datacenter: eastus X-ActivityId: 00713c75-ce89-4f9c-a109-5eca910f6644 X-Instance: Resizer.Web_IN_1 X-Deployment: c610fbb33f2e4f88b789490c62db1a73 Timing-Allow-Origin: * X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Content-Type: image/png Content-Location: http://img.s-msn.com/tenant/amp/entityid/AA2vq8h?h=16&w=16&m=6&q=60&u=t&o=t&l=f&f=png X-Source-Length: 736 Content-Length: 718 ~U:informant +URL http://img.s-msn.com/tenant/amp/entityid/AA3ltd8.img?h=16&w=16&m=6&q=60&u=t&o=t&l=f&f=png 03/23/2015 05:18:43 03/22/2015 11:09:19 AA3ltd8[1].png 7PBK2Z4C HTTP/1.1 200 OK X-Datacenter: eastus X-ActivityId: 880ad916-98bd-48cc-b6eb-dbda7bb2d52c X-Instance: Resizer.Web_IN_6 X-Deployment: c610fbb33f2e4f88b789490c62db1a73 Timing-Allow-Origin: * X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Content-Type: image/png Content-Location: http://img.s-msn.com/tenant/amp/entityid/AA3ltd8?h=16&w=16&m=6&q=60&u=t&o=t&l=f&f=png X-Source-Length: 623 Content-Length: 566 ~U:informant +URL http://img.s-msn.com/tenant/amp/entityid/BBimIRn.img?h=75&w=100&m=6&q=60&u=t&o=t&l=f&x=1352&y=1428 03/20/2015 12:12:44 03/22/2015 11:09:18 BBimIRn[1].jpg E9RPI3E2 HTTP/1.1 200 OK Content-Type: image/jpeg Content-Location: http://img.s-msn.com/tenant/amp/entityid/BBimIRn?h=75&w=100&m=6&q=60&u=t&o=t&l=f&x=1352&y=1428 X-Source-Length: 330776 X-Datacenter: eastus X-ActivityId: e63ede21-9532-41f7-8ade-a9613dbfc938 X-Instance: Resizer.Web_IN_17 X-Deployment: c610fbb33f2e4f88b789490c62db1a73 Timing-Allow-Origin: * X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Content-Length: 1800 ~U:informant +URL http://img.s-msn.com/tenant/amp/entityid/BBiwzT8.img?h=75&w=100&m=6&q=60&u=t&o=t&l=f 03/23/2015 03:01:06 03/22/2015 11:09:18 BBiwzT8[1].jpg 4C689SI3 HTTP/1.1 200 OK Content-Type: image/jpeg Content-Location: http://img.s-msn.com/tenant/amp/entityid/BBiwzT8?h=75&w=100&m=6&q=60&u=t&o=t&l=f X-Source-Length: 267991 X-Datacenter: eastus X-ActivityId: 4d8b0661-987a-47a9-b10f-95fd32469803 X-Instance: Resizer.Web_IN_8 X-Deployment: c610fbb33f2e4f88b789490c62db1a73 Timing-Allow-Origin: * X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Content-Length: 1916 ~U:informant +URL http://static-hp-eus.s-msn.com/en-us/homepage/_sc/css/6670b51d-4362b864/direction=ltr.locales=en-us.themes=start.dpi=resolution1x/f5-7a3cb8-969465db/1e-9052e9-b5dfbc45/a3-69a061-853256c4/e8-423075-975f196e/cc-237af5-6a253a1/9b-7e6c2a-77bb67e3/ec-460ef6-81407e19/fa-341338-ff50ebbf/fb-82d27d-551c61c6/7e-e8c7a5-891ac6ad/f3-6e62ff-5ccf2d3e/finance-css-0e-ba5a09926d8a0f5ba48fa8af9b3e0a-60c9bccb/cb-0b5559-e4c1ac9/d7-0f7049-19b2889c?ver=2.0.5557.39756&fdhead=muidflt3cf&ocid=iehp 03/23/2015 02:19:07 03/22/2015 11:09:01 d7-0f7049-19b2889c[1].txt 7PBK2Z4C HTTP/1.1 200 OK Content-Type: text/css; charset=utf-8 X-AspNetMvc-Version: 5.2 X-AppVersion: 2.0.5555.11669 X-Activity-Id: 00000000-3ea7-48c8-9ade-368c1f678a4c X-Az: {did:f08db8f3b6194a418d4507ddba3fea60, rid: 202, sn: eastus-hp, dt: 2015-03-23T05:12:43.5153490Z, bt: O} X-Content-Type-Options: nosniff X-FRAME-OPTIONS: SAMEORIGIN X-S1: 2015-03-23T06:19:08 Access-Control-Allow-Origin: * X-Powered-By: ASP.NET Access-Control-Allow-Methods: HEAD,GET,OPTIONS X-XSS-Protection: 1 Content-Length: 117904 ~U:informant +URL http://img.s-msn.com/tenant/amp/entityid/BBiBAfg.img?h=75&w=100&m=6&q=60&u=t&o=t&l=f&f=jpg&x=142&y=106 03/23/2015 10:38:38 03/22/2015 11:09:03 BBiBAfg[1].jpg E9RPI3E2 HTTP/1.1 200 OK Content-Type: image/jpeg Content-Location: http://img.s-msn.com/tenant/amp/entityid/BBiBAfg?h=75&w=100&m=6&q=60&u=t&o=t&l=f&f=jpg&x=142&y=106 X-Source-Length: 30721 X-Datacenter: eastus X-ActivityId: 14436a87-269b-41ff-940b-c6c50f5097c9 X-Instance: Resizer.Web_IN_0 X-Deployment: c610fbb33f2e4f88b789490c62db1a73 Timing-Allow-Origin: * X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Content-Length: 2291 ~U:informant +URL http://img.s-msn.com/tenant/amp/entityid/BBizEAe.img?h=75&w=100&m=6&q=60&u=t&o=t&l=f&x=485&y=242 03/22/2015 16:30:52 03/22/2015 11:09:18 BBizEAe[1].jpg DUBW47SE HTTP/1.1 200 OK Content-Type: image/jpeg Content-Location: http://img.s-msn.com/tenant/amp/entityid/BBizEAe?h=75&w=100&m=6&q=60&u=t&o=t&l=f&x=485&y=242 X-Source-Length: 53068 X-Datacenter: eastus X-ActivityId: c45e1a01-5507-4116-8d41-1f463a1d6a0b X-Instance: Resizer.Web_IN_0 X-Deployment: c610fbb33f2e4f88b789490c62db1a73 Timing-Allow-Origin: * X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Content-Length: 2076 ~U:informant +URL http://img.s-msn.com/tenant/amp/entityid/AA6zYWg.img?h=16&w=16&m=6&q=60&u=t&o=t&l=f&f=png 03/23/2015 05:19:35 03/22/2015 11:09:18 AA6zYWg[1].png 7PBK2Z4C HTTP/1.1 200 OK X-Datacenter: eastus X-ActivityId: 8b133fb5-8c6c-4757-81ea-3b4fb8f23c29 X-Instance: Resizer.Web_IN_9 X-Deployment: c610fbb33f2e4f88b789490c62db1a73 Timing-Allow-Origin: * X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Content-Type: image/png Content-Location: http://img.s-msn.com/tenant/amp/entityid/AA6zYWg?h=16&w=16&m=6&q=60&u=t&o=t&l=f&f=png X-Source-Length: 284 Content-Length: 413 ~U:informant +URL http://img.s-msn.com/tenant/amp/entityid/BBixvFr.img?h=194&w=300&m=6&q=60&u=t&o=t&l=f 03/21/2015 12:05:52 03/22/2015 11:09:18 BBixvFr[1].jpg 7PBK2Z4C HTTP/1.1 200 OK Content-Type: image/jpeg Content-Location: http://img.s-msn.com/tenant/amp/entityid/BBixvFr?h=194&w=300&m=6&q=60&u=t&o=t&l=f X-Source-Length: 406463 X-Datacenter: eastus X-ActivityId: a0d4ba54-adce-49dc-b8c5-395ef0b52b44 X-Instance: Resizer.Web_IN_6 X-Deployment: c610fbb33f2e4f88b789490c62db1a73 Timing-Allow-Origin: * X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Content-Length: 8994 ~U:informant +URL http://img.s-msn.com/tenant/amp/entityid/BBiA4MY.img?h=75&w=100&m=6&q=60&u=t&o=t&l=f 03/23/2015 03:01:06 03/22/2015 11:09:18 BBiA4MY[1].jpg DUBW47SE HTTP/1.1 200 OK Content-Type: image/jpeg Content-Location: http://img.s-msn.com/tenant/amp/entityid/BBiA4MY?h=75&w=100&m=6&q=60&u=t&o=t&l=f X-Source-Length: 133021 X-Datacenter: eastus X-ActivityId: f6ad57bd-6358-49c6-bf22-68f92d05a40b X-Instance: Resizer.Web_IN_7 X-Deployment: c610fbb33f2e4f88b789490c62db1a73 Timing-Allow-Origin: * X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Content-Length: 2395 ~U:informant +URL http://res1.windows.microsoft.com/siteresources/siteresource.ashx?id=wolNotificationJS&hash=b803fb6b47dbaa3919c292ff3b405a5f93f07ccd413a81d86f12598fa342ac6d 10/17/2013 19:12:05 03/22/2015 11:10:22 siteresource[1].ashx 7PBK2Z4C HTTP/1.1 200 OK Content-Type: application/javascript X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Content-Length: 3102 ~U:informant +URL http://img.s-msn.com/tenant/amp/entityid/BBiuI12.img?h=75&w=100&m=6&q=60&u=t&o=t&l=f&x=668&y=745 03/21/2015 13:52:55 03/22/2015 11:09:18 BBiuI12[1].jpg 7PBK2Z4C HTTP/1.1 200 OK Content-Type: image/jpeg Content-Location: http://img.s-msn.com/tenant/amp/entityid/BBiuI12?h=75&w=100&m=6&q=60&u=t&o=t&l=f&x=668&y=745 X-Source-Length: 278004 X-Datacenter: eastus X-ActivityId: 08cce1e1-9151-42f2-9d01-ea8d5b2d6296 X-Instance: Resizer.Web_IN_0 X-Deployment: c610fbb33f2e4f88b789490c62db1a73 Timing-Allow-Origin: * X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Content-Length: 1960 ~U:informant +URL http://img.s-msn.com/tenant/amp/entityid/BBiBXCt.img?h=75&w=100&m=6&q=60&u=t&o=t&l=f 03/23/2015 10:32:49 03/22/2015 11:09:18 BBiBXCt[1].jpg 4C689SI3 HTTP/1.1 200 OK Content-Type: image/jpeg Content-Location: http://img.s-msn.com/tenant/amp/entityid/BBiBXCt?h=75&w=100&m=6&q=60&u=t&o=t&l=f X-Source-Length: 85900 X-Datacenter: eastus X-ActivityId: bd659e6f-b798-421d-8389-f7ea21429d84 X-Instance: Resizer.Web_IN_10 X-Deployment: c610fbb33f2e4f88b789490c62db1a73 Timing-Allow-Origin: * X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Content-Length: 3086 ~U:informant +URL http://img.s-msn.com/tenant/amp/entityid/BBiBxBl.img?h=194&w=300&m=6&q=60&u=t&o=t&l=f&x=1135&y=292 03/23/2015 07:32:17 03/22/2015 11:09:18 BBiBxBl[1].jpg E9RPI3E2 HTTP/1.1 200 OK Content-Type: image/jpeg Content-Location: http://img.s-msn.com/tenant/amp/entityid/BBiBxBl?h=194&w=300&m=6&q=60&u=t&o=t&l=f&x=1135&y=292 X-Source-Length: 505767 X-Datacenter: eastus X-ActivityId: 7c7a693b-15b9-4ea5-a7c5-bc3d7a896e83 X-Instance: Resizer.Web_IN_4 X-Deployment: c610fbb33f2e4f88b789490c62db1a73 Timing-Allow-Origin: * X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Content-Length: 12277 ~U:informant +URL http://img.s-msn.com/tenant/amp/entityid/BBizpZr.img?h=75&w=100&m=6&q=60&u=t&o=t&l=f 03/23/2015 00:13:25 03/22/2015 11:09:18 BBizpZr[1].jpg 4C689SI3 HTTP/1.1 200 OK Content-Type: image/jpeg Content-Location: http://img.s-msn.com/tenant/amp/entityid/BBizpZr?h=75&w=100&m=6&q=60&u=t&o=t&l=f X-Source-Length: 1059551 X-Datacenter: eastus X-ActivityId: a4211c63-f7d6-453a-8e6b-bf67b847a2e7 X-Instance: Resizer.Web_IN_5 X-Deployment: c610fbb33f2e4f88b789490c62db1a73 Timing-Allow-Origin: * X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Content-Length: 1816 ~U:informant +URL https://www.google.com/intl/en/chrome/assets/consumer/images/tiffany/featured/cubeslam-marquee.jpg 06/11/2013 17:32:55 03/22/2015 11:10:55 cubeslam-marquee[1].jpg 4C689SI3 HTTP/1.1 200 OK Content-Type: image/jpeg X-Content-Type-Options: nosniff Content-Length: 70228 X-XSS-Protection: 1; mode=block Alternate-Protocol: 443:quic,p=0.5 ~U:informant +URL https://apis.google.com/js/plusone.js 03/22/2015 11:11:13 plusone[1].js 4C689SI3 HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 X-UA-Compatible: IE=edge, chrome=1 Timing-Allow-Origin: * ETag: "0b64e1c2caaa9d06b6fc6f2c39da05e5" Strict-Transport-Security: max-age=10886400 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block Alternate-Protocol: 443:quic,p=0.5 Transfer-Encoding: chunked ~U:informant +URL http://h2.msn.com/CIS/56/000/000/000/000/000.gif 03/22/2015 11:09:02 000[1].gif 4C689SI3 HTTP/1.1 200 OK Content-Type: image/gif X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Content-Length: 85 ~U:informant +URL http://img.s-msn.com/tenant/amp/entityid/BBirh1d.img?h=194&w=300&m=6&q=60&u=t&o=t&l=f&x=316&y=266 03/23/2015 10:23:30 03/22/2015 11:09:18 BBirh1d[1].jpg 7PBK2Z4C HTTP/1.1 200 OK Content-Type: image/jpeg Content-Location: http://img.s-msn.com/tenant/amp/entityid/BBirh1d?h=194&w=300&m=6&q=60&u=t&o=t&l=f&x=316&y=266 X-Source-Length: 72162 X-Datacenter: eastus X-ActivityId: 5f373e77-9912-40e3-ba7c-2c419870f1f9 X-Instance: Resizer.Web_IN_13 X-Deployment: c610fbb33f2e4f88b789490c62db1a73 Timing-Allow-Origin: * X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Content-Length: 11244 ~U:informant +URL http://ajax.aspnetcdn.com/ajax/4.5.1/1/MicrosoftAjax.js 04/16/2013 01:49:53 03/22/2015 11:10:22 MicrosoftAjax[2].js 4C689SI3 HTTP/1.1 200 OK Content-Type: application/x-javascript Etag: "f89b9837663ace1:0" P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" VTag: 27985243200000000 X-Cache: HIT X-Powered-By: ASP.NET X-Powered-By: ARR/2.5 X-Powered-By: ASP.NET Content-Length: 99202 ~U:informant +REDR http://google.com/ +URL http://res2.windows.microsoft.com/resbox/en/windows/main/c641cc8d-f054-4fdf-9456-ee8259186e1b_5.png 02/12/2013 22:48:05 03/22/2015 11:10:23 c641cc8d-f054-4fdf-9456-ee8259186e1b_5[1].png 7PBK2Z4C HTTP/1.1 200 OK Content-Type: image/png X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET X-Content-Type-Options: nosniff Content-Length: 3396 ~U:informant +URL http://img.s-msn.com/tenant/amp/entityid/BBiBuV3.img?h=250&w=206&m=6&q=60&u=t&o=t&l=f&f=jpg&x=932&y=775 03/23/2015 08:23:38 03/22/2015 11:09:02 BBiBuV3[1].jpg 7PBK2Z4C HTTP/1.1 200 OK Content-Type: image/jpeg Content-Location: http://img.s-msn.com/tenant/amp/entityid/BBiBuV3?h=250&w=206&m=6&q=60&u=t&o=t&l=f&f=jpg&x=932&y=775 X-Source-Length: 373269 X-Datacenter: eastus X-ActivityId: b15782e0-19ec-45f6-8385-3386d47dd865 X-Instance: Resizer.Web_IN_5 X-Deployment: c610fbb33f2e4f88b789490c62db1a73 Timing-Allow-Origin: * X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Content-Length: 6917 ~U:informant +URL http://static.chartbeat.com/js/chartbeat.js 03/17/2015 23:38:49 03/22/2015 11:09:17 chartbeat[1].js E9RPI3E2 HTTP/1.1 200 OK Content-Type: application/x-javascript ETag: "5508f349-6146" Content-Length: 24902 ~U:informant +URL res://ieframe.dll/ielogo.png 03/22/2015 11:09:28 ielogo[1] 7PBK2Z4C +URL https://www.google.com/chrome/assets/consumer/images/tiffany/thumbs/jam.jpg 11/08/2012 05:32:59 03/22/2015 11:10:54 jam[1].jpg E9RPI3E2 HTTP/1.1 200 OK Content-Type: image/jpeg X-Content-Type-Options: nosniff Content-Length: 5859 X-XSS-Protection: 1; mode=block Alternate-Protocol: 443:quic,p=0.5 ~U:informant +URL http://s0.2mdn.net/ads/studio/cached_libs/modernizr_2.8.3_ec185bb44fe5e6bf7455d6e8ef37ed0e_no-classes.js 12/10/2014 17:02:22 03/22/2015 11:09:02 modernizr_2.8.3_ec185bb44fe5e6bf7455d6e8ef37ed0e_no-classes[1].js DUBW47SE HTTP/1.1 200 OK Content-Type: text/javascript Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Alternate-Protocol: 80:quic,p=0.5 Content-Length: 10077 ~U:informant +URL http://img.s-msn.com/tenant/amp/entityid/BBisn5n.img?h=75&w=100&m=6&q=60&u=t&o=t&l=f&f=jpg 03/19/2015 16:26:41 03/22/2015 11:09:03 BBisn5n[1].jpg 7PBK2Z4C HTTP/1.1 200 OK Content-Type: image/jpeg Content-Location: http://img.s-msn.com/tenant/amp/entityid/BBisn5n?h=75&w=100&m=6&q=60&u=t&o=t&l=f&f=jpg X-Source-Length: 100973 X-Datacenter: eastus X-ActivityId: a6970b97-052e-442d-94ba-7695c76d4387 X-Instance: Resizer.Web_IN_9 X-Deployment: c610fbb33f2e4f88b789490c62db1a73 Timing-Allow-Origin: * X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Content-Length: 1857 ~U:informant +URL http://img.s-msn.com/tenant/amp/entityid/AA3ebBd.img?h=16&w=16&m=6&q=60&u=t&o=t&l=f&f=png 03/20/2015 15:25:50 03/22/2015 11:09:03 AA3ebBd[2].png 4C689SI3 HTTP/1.1 200 OK X-Datacenter: eastus X-ActivityId: 59408158-d40b-496b-ad59-ab0de6e46054 X-Instance: Resizer.Web_IN_9 X-Deployment: c610fbb33f2e4f88b789490c62db1a73 Timing-Allow-Origin: * X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Content-Type: image/png Content-Location: http://img.s-msn.com/tenant/amp/entityid/AA3ebBd?h=16&w=16&m=6&q=60&u=t&o=t&l=f&f=png X-Source-Length: 1583 Content-Length: 882 ~U:informant +URL http://img.s-msn.com/tenant/amp/entityid/BBivonY.img?h=75&w=100&m=6&q=60&u=t&o=t&l=f 03/23/2015 09:03:20 03/22/2015 11:09:18 BBivonY[1].jpg E9RPI3E2 HTTP/1.1 200 OK Content-Type: image/jpeg Content-Location: http://img.s-msn.com/tenant/amp/entityid/BBivonY?h=75&w=100&m=6&q=60&u=t&o=t&l=f X-Source-Length: 385546 X-Datacenter: eastus X-ActivityId: 7b72d351-70b4-408c-9cbd-4bf197d58606 X-Instance: Resizer.Web_IN_6 X-Deployment: c610fbb33f2e4f88b789490c62db1a73 Timing-Allow-Origin: * X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Content-Length: 2013 ~U:informant +URL http://img.s-msn.com/tenant/amp/entityid/AA4YFW8.img?h=75&w=100&m=6&q=60&u=t&o=t&l=f 03/23/2015 07:53:30 03/22/2015 11:09:18 AA4YFW8[1].jpg DUBW47SE HTTP/1.1 200 OK X-Datacenter: eastus X-ActivityId: ba2aa3d4-09c2-4e2b-948a-498b443998ad X-Instance: Resizer.Web_IN_7 X-Deployment: c610fbb33f2e4f88b789490c62db1a73 Timing-Allow-Origin: * X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Content-Type: image/jpeg Content-Location: http://img.s-msn.com/tenant/amp/entityid/AA4YFW8?h=75&w=100&m=6&q=60&u=t&o=t&l=f X-Source-Length: 295285 Content-Length: 2761 ~U:informant +URL http://img.s-msn.com/tenant/amp/entityid/AA9BMT2.img?h=75&w=100&m=6&q=60&u=t&o=t&l=f 03/21/2015 22:57:49 03/22/2015 11:09:18 AA9BMT2[1].jpg 7PBK2Z4C HTTP/1.1 200 OK X-Datacenter: eastus X-ActivityId: 0d3ba6da-6050-4ccf-a546-b4684c523c15 X-Instance: Resizer.Web_IN_3 X-Deployment: c610fbb33f2e4f88b789490c62db1a73 Timing-Allow-Origin: * X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Content-Type: image/jpeg Content-Location: http://img.s-msn.com/tenant/amp/entityid/AA9BMT2?h=75&w=100&m=6&q=60&u=t&o=t&l=f X-Source-Length: 244178 Content-Length: 2585 ~U:informant +URL http://img.s-msn.com/tenant/amp/entityid/BBgIdBn.img?h=194&w=300&m=6&q=60&u=t&o=t&l=f 03/23/2015 03:01:06 03/22/2015 11:09:18 BBgIdBn[1].jpg DUBW47SE HTTP/1.1 200 OK Content-Type: image/jpeg Content-Location: http://img.s-msn.com/tenant/amp/entityid/BBgIdBn?h=194&w=300&m=6&q=60&u=t&o=t&l=f X-Source-Length: 319374 X-Datacenter: eastus X-ActivityId: 804869bf-42b1-4ab0-8041-37aa77a73dc7 X-Instance: Resizer.Web_IN_9 X-Deployment: c610fbb33f2e4f88b789490c62db1a73 Timing-Allow-Origin: * X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Content-Length: 8936 ~U:informant +URL http://cdn.adnxs.com/ANX_async_usersync.js 08/26/2013 17:25:34 03/22/2015 11:09:03 ANX_async_usersync[1].js 4C689SI3 HTTP/1.1 200 OK ETag: "e3de0e76c13e81e3b0683dac240498eb:1377552334" Content-Type: application/x-javascript Content-Length: 1383 ~U:informant +URL http://img.s-msn.com/tenant/amp/entityid/BBiBePJ.img?h=75&w=100&m=6&q=60&u=t&o=t&l=f 03/23/2015 06:52:23 03/22/2015 11:09:18 BBiBePJ[1].jpg E9RPI3E2 HTTP/1.1 200 OK Content-Type: image/jpeg Content-Location: http://img.s-msn.com/tenant/amp/entityid/BBiBePJ?h=75&w=100&m=6&q=60&u=t&o=t&l=f X-Source-Length: 422122 X-Datacenter: eastus X-ActivityId: 6577027a-0e08-44ec-b63e-17506029648b X-Instance: Resizer.Web_IN_10 X-Deployment: c610fbb33f2e4f88b789490c62db1a73 Timing-Allow-Origin: * X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Content-Length: 1924 ~U:informant +URL http://img.s-msn.com/tenant/amp/entityid/BBipdf8.img?h=75&w=100&m=6&q=60&u=t&o=t&l=f 03/22/2015 19:13:28 03/22/2015 11:09:18 BBipdf8[1].jpg 7PBK2Z4C HTTP/1.1 200 OK Content-Type: image/jpeg Content-Location: http://img.s-msn.com/tenant/amp/entityid/BBipdf8?h=75&w=100&m=6&q=60&u=t&o=t&l=f X-Source-Length: 27922 X-Datacenter: eastus X-ActivityId: 741be19d-0d33-4215-8240-a202ad0b3347 X-Instance: Resizer.Web_IN_8 X-Deployment: c610fbb33f2e4f88b789490c62db1a73 Timing-Allow-Origin: * X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Content-Length: 2057 ~U:informant +URL https://www.google.com/chrome/assets/consumer/images/tiffany/thumbs/cubelab.jpg 05/19/2014 13:02:09 03/22/2015 11:10:54 cubelab[1].jpg E9RPI3E2 HTTP/1.1 200 OK Content-Type: image/jpeg X-Content-Type-Options: nosniff Content-Length: 8721 X-XSS-Protection: 1; mode=block Alternate-Protocol: 443:quic,p=0.5 ~U:informant +URL https://ssl.gstatic.com/s2/oz/images/widget/working-aaaaaa-16.gif 05/29/2013 14:29:01 03/22/2015 11:11:14 working-aaaaaa-16[1].gif 7PBK2Z4C HTTP/1.1 200 OK Content-Type: image/gif X-Content-Type-Options: nosniff Content-Length: 533 X-XSS-Protection: 1; mode=block Alternate-Protocol: 443:quic,p=0.5 ~U:informant +URL http://img.s-msn.com/tenant/amp/entityid/AA3HMVU.img?h=16&w=16&m=6&q=60&u=t&o=t&l=f&f=png 03/19/2015 08:16:15 03/22/2015 11:09:18 AA3HMVU[1].png DUBW47SE HTTP/1.1 200 OK X-Datacenter: eastus X-ActivityId: 66ac12bd-cf69-4ec5-bea0-866ee589c955 X-Instance: Resizer.Web_IN_9 X-Deployment: c610fbb33f2e4f88b789490c62db1a73 Timing-Allow-Origin: * X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Content-Type: image/png Content-Location: http://img.s-msn.com/tenant/amp/entityid/AA3HMVU?h=16&w=16&m=6&q=60&u=t&o=t&l=f&f=png X-Source-Length: 565 Content-Length: 677 ~U:informant +URL http://img.s-msn.com/tenant/amp/entityid/BBhywwx.img?h=75&w=100&m=6&q=60&u=t&o=t&l=f&x=991&y=573 03/22/2015 02:32:16 03/22/2015 11:09:18 BBhywwx[1].jpg 7PBK2Z4C HTTP/1.1 200 OK Content-Type: image/jpeg Content-Location: http://img.s-msn.com/tenant/amp/entityid/BBhywwx?h=75&w=100&m=6&q=60&u=t&o=t&l=f&x=991&y=573 X-Source-Length: 2029108 X-Datacenter: eastus X-ActivityId: acbd0186-6b45-4822-b476-a97d923789e3 X-Instance: Resizer.Web_IN_4 X-Deployment: c610fbb33f2e4f88b789490c62db1a73 Timing-Allow-Origin: * X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Content-Length: 2671 ~U:informant +URL https://encrypted-tbn0.gstatic.com/images?q=tbn:ANd9GcSaxe2KQIvqhG5AXxx-gHKrqHqU-IGKMQ6qhHv3eHB_FpYIKnU8wrySIxP8C1VO2dkrFis 03/23/2015 07:35:43 03/22/2015 11:09:48 images[1].jpg DUBW47SE HTTP/1.1 200 OK Content-Type: image/jpeg X-Content-Type-Options: nosniff Content-Length: 2800 X-XSS-Protection: 1; mode=block Alternate-Protocol: 443:quic,p=0.5 ~U:informant +URL https://www.google.com/chrome/assets/consumer/images/tiffany/thumbs/spacecraft.jpg 08/28/2014 09:03:25 03/22/2015 11:10:54 spacecraft[1].jpg DUBW47SE HTTP/1.1 200 OK Content-Type: image/jpeg X-Content-Type-Options: nosniff Content-Length: 14038 X-XSS-Protection: 1; mode=block Alternate-Protocol: 443:quic,p=0.5 ~U:informant +URL https://www.google.com/chrome/assets/common/images/marquee/benefits-1.jpg 12/11/2014 14:16:10 03/22/2015 11:11:12 benefits-1[1].jpg 4C689SI3 HTTP/1.1 200 OK Content-Type: image/jpeg X-Content-Type-Options: nosniff Content-Length: 53964 X-XSS-Protection: 1; mode=block Alternate-Protocol: 443:quic,p=0.5 ~U:informant +URL http://img.s-msn.com/tenant/amp/entityid/BBirPj3.img?h=75&w=100&m=6&q=60&u=t&o=t&l=f&f=jpg&x=675&y=342 03/19/2015 13:31:15 03/22/2015 11:09:03 BBirPj3[1].jpg DUBW47SE HTTP/1.1 200 OK Content-Type: image/jpeg Content-Location: http://img.s-msn.com/tenant/amp/entityid/BBirPj3?h=75&w=100&m=6&q=60&u=t&o=t&l=f&f=jpg&x=675&y=342 X-Source-Length: 325734 X-Datacenter: eastus X-ActivityId: 6bad74d3-96cb-442a-bf17-cc20001157d7 X-Instance: Resizer.Web_IN_1 X-Deployment: c610fbb33f2e4f88b789490c62db1a73 Timing-Allow-Origin: * X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Content-Length: 1699 ~U:informant +URL http://img.s-msn.com/tenant/amp/entityid/BBiA9OW.img?h=75&w=100&m=6&q=60&u=t&o=t&l=f 03/22/2015 15:14:33 03/22/2015 11:09:18 BBiA9OW[1].jpg DUBW47SE HTTP/1.1 200 OK Content-Type: image/jpeg Content-Location: http://img.s-msn.com/tenant/amp/entityid/BBiA9OW?h=75&w=100&m=6&q=60&u=t&o=t&l=f X-Source-Length: 362166 X-Datacenter: eastus X-ActivityId: 8c21799e-4510-4916-ae7f-f38fc1ba4c70 X-Instance: Resizer.Web_IN_5 X-Deployment: c610fbb33f2e4f88b789490c62db1a73 Timing-Allow-Origin: * X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Content-Length: 1738 ~U:informant +URL http://img.s-msn.com/tenant/amp/entityid/BBiA58r.img?h=194&w=300&m=6&q=60&u=t&o=t&l=f 03/23/2015 10:38:33 03/22/2015 11:09:18 BBiA58r[1].jpg DUBW47SE HTTP/1.1 200 OK Content-Type: image/jpeg Content-Location: http://img.s-msn.com/tenant/amp/entityid/BBiA58r?h=194&w=300&m=6&q=60&u=t&o=t&l=f X-Source-Length: 66349 X-Datacenter: eastus X-ActivityId: fa69549d-e99e-43b1-aa8f-9caa8585eb03 X-Instance: Resizer.Web_IN_21 X-Deployment: c610fbb33f2e4f88b789490c62db1a73 Timing-Allow-Origin: * X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Content-Length: 14557 ~U:informant +URL https://fbstatic-a.akamaihd.net/rsrc.php/v2/yy/r/UtqCQ_Jg0Ox.js 01/01/2001 03:00:00 03/22/2015 11:10:23 UtqCQ_Jg0Ox[1].js DUBW47SE HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Content-Type: application/x-javascript; charset=utf-8 X-Content-Type-Options: nosniff Content-MD5: KWri3k+EE8mfOMLmz9QSqw== X-FB-Debug: kiuNK645hXXtX0PAdtBv+vLMmRJlzMhHeq9wCj/tV9+PHXyhdUlxowAB7nR3ieYvM6OQibc8LYsWSHx5EzTTmQ== Content-Length: 256984 ~U:informant +URL http://res1.windows.microsoft.com/resbox/en/windows/main/e9979a8b-c439-452a-a09f-d3b32df0e5b1_13.png 02/26/2013 18:27:14 03/22/2015 11:10:23 e9979a8b-c439-452a-a09f-d3b32df0e5b1_13[1].png E9RPI3E2 HTTP/1.1 200 OK Content-Type: image/png X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET X-Content-Type-Options: nosniff Content-Length: 307 ~U:informant +URL http://res2.windows.microsoft.com/resbox/en/windows/main/1f5c1661-b1b6-4675-820e-67f729bc7eb6_13.png 10/11/2013 11:53:59 03/22/2015 11:10:23 1f5c1661-b1b6-4675-820e-67f729bc7eb6_13[1].png DUBW47SE HTTP/1.1 200 OK Content-Type: image/png X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET X-Content-Type-Options: nosniff Content-Length: 337 ~U:informant +URL https://www.google.com/chrome/assets/common/images/marquee/chrome-existing.jpg 12/11/2014 14:16:10 03/22/2015 11:11:12 chrome-existing[1].jpg 4C689SI3 HTTP/1.1 200 OK Content-Type: image/jpeg X-Content-Type-Options: nosniff Content-Length: 48750 X-XSS-Protection: 1; mode=block Alternate-Protocol: 443:quic,p=0.5 ~U:informant +URL http://img.s-msn.com/tenant/amp/entityid/AA8I0Dg.img?h=16&w=16&m=6&q=60&u=t&o=t&l=f&f=png 03/19/2015 20:09:52 03/22/2015 11:09:03 AA8I0Dg[1].png E9RPI3E2 HTTP/1.1 200 OK X-Datacenter: eastus X-ActivityId: 5fb63869-f6f1-49b6-890b-5bccbe162a40 X-Instance: Resizer.Web_IN_4 X-Deployment: c610fbb33f2e4f88b789490c62db1a73 Timing-Allow-Origin: * X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Content-Type: image/png Content-Location: http://img.s-msn.com/tenant/amp/entityid/AA8I0Dg?h=16&w=16&m=6&q=60&u=t&o=t&l=f&f=png X-Source-Length: 621 Content-Length: 633 ~U:informant +URL http://img.s-msn.com/tenant/amp/entityid/AA9sS2l.img?h=75&w=100&m=6&q=60&u=t&o=t&l=f&x=1342&y=1524 03/22/2015 00:06:15 03/22/2015 11:09:18 AA9sS2l[1].jpg E9RPI3E2 HTTP/1.1 200 OK Content-Type: image/jpeg Content-Location: http://img.s-msn.com/tenant/amp/entityid/AA9sS2l?h=75&w=100&m=6&q=60&u=t&o=t&l=f&x=1342&y=1524 X-Source-Length: 404807 X-Datacenter: eastus X-ActivityId: 45276637-de2a-4db2-a42e-521ed9240e79 X-Instance: Resizer.Web_IN_1 X-Deployment: c610fbb33f2e4f88b789490c62db1a73 Timing-Allow-Origin: * X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Content-Length: 2477 ~U:informant +URL http://windows.microsoft.com/en-us/internet-explorer/ie-8-welcome 03/22/2015 21:35:38 03/22/2015 11:09:19 ie-8-welcome[1].htm 4C689SI3 HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET X-Content-Type-Options: nosniff X-UA-Compatible: IE=11 Content-Length: 48850 ~U:informant +URL http://js.microsoft.com/library/svy/windows/broker.js 03/18/2015 12:11:48 03/22/2015 11:10:22 broker[1].js 4C689SI3 HTTP/1.1 200 OK Content-Type: application/x-javascript ETag: "03a653c9661d01:0" VTag: 279236043700000000 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-Powered-By: ASP.NET Content-Length: 16960 ~U:informant +URL http://res1.windows.microsoft.com/resbox/en/internet%20explorer/main/125ffa03-7e1c-4609-a37c-8b7236ac3eb9_14.png 01/23/2014 12:44:58 03/22/2015 11:09:19 125ffa03-7e1c-4609-a37c-8b7236ac3eb9_14[1].png 4C689SI3 HTTP/1.1 200 OK Content-Type: image/png X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET X-Content-Type-Options: nosniff Content-Length: 259366 ~U:informant +URL https://fbstatic-a.akamaihd.net/rsrc.php/v2/y1/r/LVx-xkvaJ0b.png 01/01/2001 03:00:00 03/22/2015 11:10:23 LVx-xkvaJ0b[2].png 7PBK2Z4C HTTP/1.1 200 OK Access-Control-Allow-Origin: * Content-MD5: mQCwCAAKHD+AV8oddNLhdw== Content-Type: image/png X-Content-Type-Options: nosniff X-FB-Debug: J6ex4YjvrQ+7d7WEDUYmB91bIp1aPRfsu1WVVi5MWvU= Content-Length: 1329 ~U:informant +URL http://www.google.com/url?url=http://windows.microsoft.com/en-us/internet-explorer/ie-11-worldwide-languages&rct=j&frm=1&q=&esrc=s&sa=U&ei=6ykQVZWLGbeJsQT7goDACg&ved=0CCoQFjAB&usg=AFQjCNE7UKIWEBiWO2N96IFeo6ZywhRLfw 03/22/2015 11:09:54 url[1].htm DUBW47SE HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 X-XSS-Protection: 1; mode=block Alternate-Protocol: 80:quic,p=0.5 Content-Length: 1211 ~U:informant +URL http://c.go-mpulse.net/boomerang/URRYV-HX35J-LK4WZ-4TRKG-NBMKC 03/22/2015 11:09:02 URRYV-HX35J-LK4WZ-4TRKG-NBMKC[1] DUBW47SE HTTP/1.1 200 OK Content-Type: application/javascript;charset=UTF-8 Transfer-Encoding: chunked Timing-Allow-Origin: * CF-Cache-Status: HIT CF-RAY: 1cbafc80d7d00099-IAD ~U:informant +URL http://img.s-msn.com/tenant/amp/entityid/BBiBkSj.img?h=75&w=100&m=6&q=60&u=t&o=t&l=f&f=jpg&x=597&y=644 03/23/2015 10:45:11 03/22/2015 11:09:03 BBiBkSj[1].jpg E9RPI3E2 HTTP/1.1 200 OK Content-Type: image/jpeg Content-Location: http://img.s-msn.com/tenant/amp/entityid/BBiBkSj?h=75&w=100&m=6&q=60&u=t&o=t&l=f&f=jpg&x=597&y=644 X-Source-Length: 1100246 X-Datacenter: eastus X-ActivityId: 3d7fb437-cfde-47cf-b103-149f3fcbc5ae X-Instance: Resizer.Web_IN_20 X-Deployment: c610fbb33f2e4f88b789490c62db1a73 Timing-Allow-Origin: * X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Content-Length: 2093 ~U:informant +URL http://img.s-msn.com/tenant/amp/entityid/AA9QOgB.img?h=333&w=311&m=6&q=60&u=t&o=t&l=f&f=jpg&x=1597&y=907 03/23/2015 04:37:57 03/22/2015 11:09:19 AA9QOgB[1].jpg 7PBK2Z4C HTTP/1.1 200 OK Content-Type: image/jpeg Content-Location: http://img.s-msn.com/tenant/amp/entityid/AA9QOgB?h=333&w=311&m=6&q=60&u=t&o=t&l=f&f=jpg&x=1597&y=907 X-Source-Length: 649818 X-Datacenter: eastus X-ActivityId: 43925dff-7b50-41e4-b663-81a36e6eae38 X-Instance: Resizer.Web_IN_9 X-Deployment: c610fbb33f2e4f88b789490c62db1a73 Timing-Allow-Origin: * X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Content-Length: 18903 ~U:informant +URL http://windows.microsoft.com/scripts/4.2/wol/modernizr.wol.js 11/06/2013 03:04:56 03/22/2015 11:10:22 modernizr.wol[1].js DUBW47SE HTTP/1.1 200 OK Content-Type: text/javascript ETag: "0462e1c6dace1:0" X-Powered-By: ASP.NET X-Content-Type-Options: nosniff Access-Control-Allow-Origin: * Content-Length: 11837 ~U:informant +URL http://res1.windows.microsoft.com/resbox/en/internet%20explorer/main/03d292e7-98d0-4ec5-b257-9cc7419a5144_15.png 01/23/2014 12:43:06 03/22/2015 11:09:19 03d292e7-98d0-4ec5-b257-9cc7419a5144_15[1].png 7PBK2Z4C HTTP/1.1 200 OK Content-Type: image/png X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET X-Content-Type-Options: nosniff Content-Length: 233992 ~U:informant +URL http://api.bing.com/qsonhs.aspx?form=PRUSML&mkt=en-US&type=cb&cb=sa_inst.apiCB&q=&cp=0&sid=00&qt=1427036972043&o=p+l+hs 03/22/2015 11:09:32 qsonhs[1].aspx E9RPI3E2 HTTP/1.1 200 OK Content-Type: application/x-javascript; charset=utf-8 X-Content-Type-Options: nosniff Content-Length: 586 ~U:informant +URL https://www.google.com/chrome/assets/consumer/images/tiffany/featured/sss.jpg 02/27/2013 11:32:59 03/22/2015 11:10:55 sss[1].jpg E9RPI3E2 HTTP/1.1 200 OK Content-Type: image/jpeg X-Content-Type-Options: nosniff Content-Length: 78603 X-XSS-Protection: 1; mode=block Alternate-Protocol: 443:quic,p=0.5 ~U:informant +URL http://img.s-msn.com/tenant/amp/entityid/AA8nSkR.img?h=16&w=16&m=6&q=60&u=t&o=t&l=f&f=png 03/20/2015 02:04:51 03/22/2015 11:09:18 AA8nSkR[1].png DUBW47SE HTTP/1.1 200 OK X-Datacenter: eastus X-ActivityId: 69048ab5-c43a-43db-a9c3-3c378a045c2d X-Instance: Resizer.Web_IN_10 X-Deployment: c610fbb33f2e4f88b789490c62db1a73 Timing-Allow-Origin: * X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Content-Type: image/png Content-Location: http://img.s-msn.com/tenant/amp/entityid/AA8nSkR?h=16&w=16&m=6&q=60&u=t&o=t&l=f&f=png X-Source-Length: 248 Content-Length: 342 ~U:informant +URL http://res2.windows.microsoft.com/resources/4.2/wol/shared/css/windows8_site_ltr.css 12/09/2013 15:04:46 03/22/2015 11:10:22 windows8_site_ltr[1].css 7PBK2Z4C HTTP/1.1 200 OK Content-Type: text/css ETag: "0c342e819f5ce1:0" X-Powered-By: ASP.NET X-Content-Type-Options: nosniff Access-Control-Allow-Origin: * Content-Length: 185579 ~U:informant +URL http://api.bing.com/qsonhs.aspx?form=PRUSML&q= 03/22/2015 11:09:19 qsonhs[1].aspx DUBW47SE HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 X-Content-Type-Options: nosniff Content-Length: 35 ~U:informant +URL https://www.google.com/images/mgyhp_sm.png 04/01/2012 22:13:37 03/22/2015 11:10:52 mgyhp_sm[1].png 4C689SI3 HTTP/1.1 200 OK Content-Type: image/png X-Content-Type-Options: nosniff Content-Length: 331 X-XSS-Protection: 1; mode=block Alternate-Protocol: 443:quic,p=0.5 ~U:informant +URL https://www.google.com/chrome/assets/common/css/chrome.min.css 03/11/2015 14:34:04 03/22/2015 11:11:12 chrome.min[1].css 4C689SI3 HTTP/1.1 200 OK Content-Type: text/css X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Alternate-Protocol: 443:quic,p=0.5 Transfer-Encoding: chunked ~U:informant +URL https://www.google.com/chrome/assets/common/images/fn/fn-cast-sprite.png 10/15/2013 15:01:58 03/22/2015 11:11:12 fn-cast-sprite[1].png 4C689SI3 HTTP/1.1 200 OK Content-Type: image/png X-Content-Type-Options: nosniff Content-Length: 10798 X-XSS-Protection: 1; mode=block Alternate-Protocol: 443:quic,p=0.5 ~U:informant +URL https://www.google.com/chrome/assets/consumer/images/tiffany/carousel/carousel-arrow-right.png 06/25/2012 15:04:10 03/22/2015 11:10:54 carousel-arrow-right[1].png E9RPI3E2 HTTP/1.1 200 OK Content-Type: image/png X-Content-Type-Options: nosniff Content-Length: 223 X-XSS-Protection: 1; mode=block Alternate-Protocol: 443:quic,p=0.5 ~U:informant +URL http://img.s-msn.com/tenant/amp/entityid/BB4yIJu.img?h=16&w=16&m=6&q=60&u=t&o=t&l=f&f=png 03/22/2015 21:45:01 03/22/2015 11:09:03 BB4yIJu[1].png DUBW47SE HTTP/1.1 200 OK X-Datacenter: eastus X-ActivityId: 2181c96f-70c1-4166-920b-dce8ffde7240 X-Instance: Resizer.Web_IN_6 X-Deployment: c610fbb33f2e4f88b789490c62db1a73 Timing-Allow-Origin: * X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Content-Type: image/png Content-Location: http://img.s-msn.com/tenant/amp/entityid/BB4yIJu?h=16&w=16&m=6&q=60&u=t&o=t&l=f&f=png X-Source-Length: 589 Content-Length: 726 ~U:informant +URL http://img.s-msn.com/tenant/amp/entityid/BB1uPMT.img?h=16&w=16&m=6&q=60&u=t&o=t&l=f&f=png 03/23/2015 06:44:45 03/22/2015 11:09:35 BB1uPMT[1].png 7PBK2Z4C HTTP/1.1 200 OK X-Datacenter: eastus X-ActivityId: e57019a9-241a-47a2-8622-c1ee03ea0954 X-Instance: Resizer.Web_IN_1 X-Deployment: c610fbb33f2e4f88b789490c62db1a73 Timing-Allow-Origin: * X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Content-Type: image/png Content-Location: http://img.s-msn.com/tenant/amp/entityid/BB1uPMT?h=16&w=16&m=6&q=60&u=t&o=t&l=f&f=png X-Source-Length: 351 Content-Length: 466 ~U:informant +URL http://img.s-msn.com/tenant/amp/entityid/BBiwB07.img?h=194&w=300&m=6&q=60&u=t&o=t&l=f 03/23/2015 10:14:33 03/22/2015 11:09:18 BBiwB07[1].jpg 4C689SI3 HTTP/1.1 200 OK Content-Type: image/jpeg Content-Location: http://img.s-msn.com/tenant/amp/entityid/BBiwB07?h=194&w=300&m=6&q=60&u=t&o=t&l=f X-Source-Length: 372813 X-Datacenter: eastus X-ActivityId: 47490829-bfcb-40db-a797-74bdba6929ae X-Instance: Resizer.Web_IN_11 X-Deployment: c610fbb33f2e4f88b789490c62db1a73 Timing-Allow-Origin: * X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Content-Length: 10730 ~U:informant +URL http://img.s-msn.com/tenant/amp/entityid/BB5OcwT.img?h=16&w=16&m=6&q=60&u=t&o=t&l=f&f=png 03/23/2015 08:27:43 03/22/2015 11:09:18 BB5OcwT[1].png 7PBK2Z4C HTTP/1.1 200 OK X-Datacenter: eastus X-ActivityId: fa9bf338-5ebe-497c-9dc0-4e5fc45fed3c X-Instance: Resizer.Web_IN_8 X-Deployment: c610fbb33f2e4f88b789490c62db1a73 Timing-Allow-Origin: * X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Content-Type: image/png Content-Location: http://img.s-msn.com/tenant/amp/entityid/BB5OcwT?h=16&w=16&m=6&q=60&u=t&o=t&l=f&f=png X-Source-Length: 530 Content-Length: 562 ~U:informant +URL http://res1.windows.microsoft.com/resbox/en/internet%20explorer/main/446706f9-59e1-4e52-8aa9-71a82cfb0af9_19.png 01/22/2014 19:44:39 03/22/2015 11:09:52 446706f9-59e1-4e52-8aa9-71a82cfb0af9_19[1].png E9RPI3E2 HTTP/1.1 200 OK Content-Type: image/png X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET X-Content-Type-Options: nosniff Content-Length: 153725 ~U:informant +URL http://ads1.msads.net/CAE/IAFScreens/js/iafPlugin.js 11/14/2014 01:53:27 03/22/2015 11:09:02 iafPlugin[1].js E9RPI3E2 HTTP/1.1 200 OK Content-Type: application/x-javascript ETag: "fa963eb1d7ffcf1:0" P3P: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo" Content-Length: 2446 ~U:informant +URL http://img.s-msn.com/tenant/amp/entityid/BBikSwY.img?h=75&w=100&m=6&q=60&u=t&o=t&l=f&f=jpg&x=380&y=135 03/23/2015 00:39:51 03/22/2015 11:09:03 BBikSwY[1].jpg 7PBK2Z4C HTTP/1.1 200 OK X-Datacenter: eastus X-ActivityId: 81810b7a-372c-44c9-8b37-95f8783779b4 X-Instance: Resizer.Web_IN_9 X-Deployment: c610fbb33f2e4f88b789490c62db1a73 Timing-Allow-Origin: * X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Content-Type: image/jpeg Content-Location: http://img.s-msn.com/tenant/amp/entityid/BBikSwY?h=75&w=100&m=6&q=60&u=t&o=t&l=f&f=jpg&x=380&y=135 X-Source-Length: 44270 Content-Length: 1835 ~U:informant +URL http://img.s-msn.com/tenant/amp/entityid/BBi2SuX.img?h=75&w=100&m=6&q=60&u=t&o=t&l=f 03/20/2015 12:12:44 03/22/2015 11:09:18 BBi2SuX[1].jpg 7PBK2Z4C HTTP/1.1 200 OK Content-Type: image/jpeg Content-Location: http://img.s-msn.com/tenant/amp/entityid/BBi2SuX?h=75&w=100&m=6&q=60&u=t&o=t&l=f X-Source-Length: 38186 X-Datacenter: eastus X-ActivityId: 12f6f786-b856-4978-a08e-c70c14ee1141 X-Instance: Resizer.Web_IN_17 X-Deployment: c610fbb33f2e4f88b789490c62db1a73 Timing-Allow-Origin: * X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Content-Length: 2179 ~U:informant +URL http://res2.windows.microsoft.com/resources/4.2/wol/shared/images/merged/gl_site.png 12/09/2013 15:04:32 03/22/2015 11:10:30 gl_site[1].png 7PBK2Z4C HTTP/1.1 200 OK Content-Type: image/png ETag: "088eadf19f5ce1:0" X-Powered-By: ASP.NET X-Content-Type-Options: nosniff Access-Control-Allow-Origin: * Content-Length: 5220 ~U:informant +URL http://img.s-msn.com/tenant/amp/entityid/BBiAjWi.img?h=166&w=310&m=6&q=60&u=t&o=t&l=f&f=jpg&x=369&y=85 03/23/2015 09:31:52 03/22/2015 11:09:35 BBiAjWi[1].jpg 7PBK2Z4C HTTP/1.1 200 OK Content-Type: image/jpeg Content-Location: http://img.s-msn.com/tenant/amp/entityid/BBiAjWi?h=166&w=310&m=6&q=60&u=t&o=t&l=f&f=jpg&x=369&y=85 X-Source-Length: 75376 X-Datacenter: eastus X-ActivityId: 7544dcdc-a4ba-4bbf-b086-11ad6fd3fc1f X-Instance: Resizer.Web_IN_4 X-Deployment: c610fbb33f2e4f88b789490c62db1a73 Timing-Allow-Origin: * X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Content-Length: 5654 ~U:informant +URL http://res2.windows.microsoft.com/resbox/en/windows/main/eb4f0171-7cb7-428a-afcc-d93a6b84525c_33.png 06/17/2013 19:35:14 03/22/2015 11:10:23 eb4f0171-7cb7-428a-afcc-d93a6b84525c_33[1].png 4C689SI3 HTTP/1.1 200 OK Content-Type: image/png X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET X-Content-Type-Options: nosniff Content-Length: 181 ~U:informant +URL https://www.google.com/intl/en/chrome/assets/consumer/images/tiffany/featured/foreveryone_feat.jpg 03/27/2013 17:02:34 03/22/2015 11:10:55 foreveryone_feat[1].jpg 4C689SI3 HTTP/1.1 200 OK Content-Type: image/jpeg X-Content-Type-Options: nosniff Content-Length: 125257 X-XSS-Protection: 1; mode=block Alternate-Protocol: 443:quic,p=0.5 ~U:informant +URL http://js.microsoft.com/library/svy/windows/pre_broker.js 01/13/2015 17:11:17 03/22/2015 11:10:22 pre_broker[1].js 4C689SI3 HTTP/1.1 200 OK Content-Type: application/x-javascript ETag: "807015da7d2fd01:0" VTag: 791531916500000000 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-Powered-By: ASP.NET Content-Length: 4364 ~U:informant +URL https://www.google.com/chrome/assets/consumer/images/tiffany/fallback/browser-front.png 06/25/2012 15:04:10 03/22/2015 11:10:54 browser-front[1].png 7PBK2Z4C HTTP/1.1 200 OK Content-Type: image/png X-Content-Type-Options: nosniff Content-Length: 108441 X-XSS-Protection: 1; mode=block Alternate-Protocol: 443:quic,p=0.5 ~U:informant +URL https://www.google.com/chrome/assets/common/images/marquee/benefits-5.jpg 12/11/2014 14:16:10 03/22/2015 11:11:12 benefits-5[1].jpg 4C689SI3 HTTP/1.1 200 OK Content-Type: image/jpeg X-Content-Type-Options: nosniff Content-Length: 40134 X-XSS-Protection: 1; mode=block Alternate-Protocol: 443:quic,p=0.5 ~U:informant +URL http://res1.windows.microsoft.com/resbox/en/windows/main/15d2470f-0fcf-45e9-bf5b-c943236a61cf_377.css 03/20/2015 05:40:45 03/22/2015 11:10:22 15d2470f-0fcf-45e9-bf5b-c943236a61cf_377[1].css E9RPI3E2 HTTP/1.1 200 OK Content-Type: text/css X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET X-Content-Type-Options: nosniff Content-Length: 44766 ~U:informant +URL http://ajax.microsoft.com/ajax/4.0/4/MicrosoftAjax.js 11/16/2012 15:11:03 03/22/2015 11:09:51 MicrosoftAjax[1].js 4C689SI3 HTTP/1.1 200 OK Content-Type: application/x-javascript Etag: "bb2828136c4cd1:0" P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" VTag: 279715807900000000 X-Cache: HIT X-Powered-By: ASP.NET X-Powered-By: ARR/2.5 X-Powered-By: ASP.NET Content-Length: 98832 ~U:informant +URL http://img.s-msn.com/tenant/amp/entityid/BBiA5gZ.img?h=166&w=310&m=6&q=60&u=t&o=t&l=f&f=jpg&x=795&y=356 03/23/2015 10:21:08 03/22/2015 11:09:30 BBiA5gZ[1].jpg E9RPI3E2 HTTP/1.1 200 OK Content-Type: image/jpeg Content-Location: http://img.s-msn.com/tenant/amp/entityid/BBiA5gZ?h=166&w=310&m=6&q=60&u=t&o=t&l=f&f=jpg&x=795&y=356 X-Source-Length: 444821 X-Datacenter: eastus X-ActivityId: ef7c3eac-0b9c-4c9f-868c-025ded7a1e1e X-Instance: Resizer.Web_IN_18 X-Deployment: c610fbb33f2e4f88b789490c62db1a73 Timing-Allow-Origin: * X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Content-Length: 5447 ~U:informant +URL https://www.google.com/images/icons/product/chrome-48.png 04/01/2012 22:13:37 03/22/2015 11:10:51 chrome-48[1].png DUBW47SE HTTP/1.1 200 OK Content-Type: image/png X-Content-Type-Options: nosniff Content-Length: 1834 X-XSS-Protection: 1; mode=block Alternate-Protocol: 443:quic,p=0.5 ~U:informant +URL http://img.s-msn.com/tenant/amp/entityid/BBiBb76.img?h=75&w=100&m=6&q=60&u=t&o=t&l=f&f=jpg&x=1227&y=529 03/23/2015 06:00:20 03/22/2015 11:09:03 BBiBb76[1].jpg 4C689SI3 HTTP/1.1 200 OK Content-Type: image/jpeg Content-Location: http://img.s-msn.com/tenant/amp/entityid/BBiBb76?h=75&w=100&m=6&q=60&u=t&o=t&l=f&f=jpg&x=1227&y=529 X-Source-Length: 431401 X-Datacenter: eastus X-ActivityId: 0effe087-8b6f-4632-a43d-ca0469ff1e43 X-Instance: Resizer.Web_IN_2 X-Deployment: c610fbb33f2e4f88b789490c62db1a73 Timing-Allow-Origin: * X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Content-Length: 2742 ~U:informant +URL http://img.s-msn.com/tenant/amp/entityid/BBijS0f.img?h=75&w=100&m=6&q=60&u=t&o=t&l=f&x=293&y=62 03/22/2015 13:30:03 03/22/2015 11:09:18 BBijS0f[1].jpg 4C689SI3 HTTP/1.1 200 OK Content-Type: image/jpeg Content-Location: http://img.s-msn.com/tenant/amp/entityid/BBijS0f?h=75&w=100&m=6&q=60&u=t&o=t&l=f&x=293&y=62 X-Source-Length: 56011 X-Datacenter: eastus X-ActivityId: 94b8fce2-18ed-4ccf-a9e4-85f6f563d306 X-Instance: Resizer.Web_IN_1 X-Deployment: c610fbb33f2e4f88b789490c62db1a73 Timing-Allow-Origin: * X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Content-Length: 2372 ~U:informant +URL http://img.s-msn.com/tenant/amp/entityid/BBiBDXv.img?h=75&w=100&m=6&q=60&u=t&o=t&l=f&x=1008&y=1234 03/23/2015 08:49:21 03/22/2015 11:09:18 BBiBDXv[1].jpg E9RPI3E2 HTTP/1.1 200 OK Content-Type: image/jpeg Content-Location: http://img.s-msn.com/tenant/amp/entityid/BBiBDXv?h=75&w=100&m=6&q=60&u=t&o=t&l=f&x=1008&y=1234 X-Source-Length: 356166 X-Datacenter: eastus X-ActivityId: ea4217a8-f66a-4fcd-aa72-12f8cc79fc23 X-Instance: Resizer.Web_IN_10 X-Deployment: c610fbb33f2e4f88b789490c62db1a73 Timing-Allow-Origin: * X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Content-Length: 2366 ~U:informant +URL http://img.s-msn.com/tenant/amp/entityid/AA9QDIj.img?h=75&w=100&m=6&q=60&u=t&o=t&l=f 03/22/2015 02:32:16 03/22/2015 11:09:18 AA9QDIj[1].png 7PBK2Z4C HTTP/1.1 200 OK Content-Type: image/png Content-Location: http://img.s-msn.com/tenant/amp/entityid/AA9QDIj?h=75&w=100&m=6&q=60&u=t&o=t&l=f X-Source-Length: 396013 X-Datacenter: eastus X-ActivityId: 47bb37b2-41d8-45bb-8d12-48fc02fdf979 X-Instance: Resizer.Web_IN_2 X-Deployment: c610fbb33f2e4f88b789490c62db1a73 Timing-Allow-Origin: * X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Content-Length: 8293 ~U:informant +URL http://img.s-msn.com/tenant/amp/entityid/BBiAyNr.img?h=368&w=622&m=6&q=60&u=t&o=t&l=f&f=jpg 03/23/2015 10:38:37 03/22/2015 11:09:24 BBiAyNr[1].jpg 4C689SI3 HTTP/1.1 200 OK Content-Type: image/jpeg Content-Location: http://img.s-msn.com/tenant/amp/entityid/BBiAyNr?h=368&w=622&m=6&q=60&u=t&o=t&l=f&f=jpg X-Source-Length: 57294 X-Datacenter: eastus X-ActivityId: cd2e4f5d-8689-48d3-b7ae-59726fa94e1a X-Instance: Resizer.Web_IN_10 X-Deployment: c610fbb33f2e4f88b789490c62db1a73 Timing-Allow-Origin: * X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Content-Length: 25478 ~U:informant +URL https://www.google.com/webhp?hl=en 03/22/2015 11:10:51 webhp[1].htm 4C689SI3 HTTP/1.1 200 OK Link: ;rel="canonical" Content-Type: text/html; charset=UTF-8 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Alternate-Protocol: 443:quic,p=0.5 Transfer-Encoding: chunked ~U:informant +URL https://www.google.com/chrome/assets/consumer/images/tiffany/featured/spacecraft.jpg 08/28/2014 09:03:25 03/22/2015 11:10:55 spacecraft[2].jpg DUBW47SE HTTP/1.1 200 OK Content-Type: image/jpeg X-Content-Type-Options: nosniff Content-Length: 57565 X-XSS-Protection: 1; mode=block Alternate-Protocol: 443:quic,p=0.5 ~U:informant +URL http://img.s-msn.com/tenant/amp/entityid/BBikqnc.img?h=75&w=100&m=6&q=60&u=t&o=t&l=f&f=jpg&x=538&y=190 03/22/2015 14:41:34 03/22/2015 11:09:03 BBikqnc[1].jpg E9RPI3E2 HTTP/1.1 200 OK X-Datacenter: eastus X-ActivityId: 99b0b029-18c8-4b1a-bd49-c32359427642 X-Instance: Resizer.Web_IN_4 X-Deployment: c610fbb33f2e4f88b789490c62db1a73 Timing-Allow-Origin: * X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Content-Type: image/jpeg Content-Location: http://img.s-msn.com/tenant/amp/entityid/BBikqnc?h=75&w=100&m=6&q=60&u=t&o=t&l=f&f=jpg&x=538&y=190 X-Source-Length: 138251 Content-Length: 3007 ~U:informant +URL https://ssl.gstatic.com/gb/images/b_8d5afc09.png 04/01/2012 20:13:23 03/22/2015 11:10:51 b_8d5afc09[1].png DUBW47SE HTTP/1.1 200 OK Content-Type: image/png X-Content-Type-Options: nosniff Content-Length: 9760 X-XSS-Protection: 1; mode=block Alternate-Protocol: 443:quic,p=0.5 ~U:informant +URL https://www.google.com/chrome/assets/consumer/images/tiffany/featured/spellup.png 05/13/2014 10:01:47 03/22/2015 11:10:55 spellup[1].png 7PBK2Z4C HTTP/1.1 200 OK Content-Type: image/png X-Content-Type-Options: nosniff Content-Length: 23303 X-XSS-Protection: 1; mode=block Alternate-Protocol: 443:quic,p=0.5 ~U:informant +URL http://img.s-msn.com/tenant/amp/entityid/BBiyV8e.img?h=75&w=100&m=6&q=60&u=t&o=t&l=f 03/22/2015 18:31:25 03/22/2015 11:09:18 BBiyV8e[1].jpg E9RPI3E2 HTTP/1.1 200 OK Content-Type: image/jpeg Content-Location: http://img.s-msn.com/tenant/amp/entityid/BBiyV8e?h=75&w=100&m=6&q=60&u=t&o=t&l=f X-Source-Length: 486236 X-Datacenter: eastus X-ActivityId: 585c073d-e51b-42a4-b17c-342d83f49737 X-Instance: Resizer.Web_IN_0 X-Deployment: c610fbb33f2e4f88b789490c62db1a73 Timing-Allow-Origin: * X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Content-Length: 1825 ~U:informant +URL https://www.google.com/chrome/assets/consumer/images/tiffany/featured/build-marquee.jpg 03/19/2014 13:05:06 03/22/2015 11:10:55 build-marquee[1].jpg 4C689SI3 HTTP/1.1 200 OK Content-Type: image/jpeg X-Content-Type-Options: nosniff Content-Length: 71302 X-XSS-Protection: 1; mode=block Alternate-Protocol: 443:quic,p=0.5 ~U:informant +URL http://download.microsoft.com/download/7/1/7/7179A150-F2D2-4502-9D70-4B59EA148EAA/IE11-Windows6.1-x64-en-us.exe 10/14/2013 22:32:57 03/22/2015 11:11:04 IE11-Windows6.1-x64-en-us[1].exe DUBW47SE HTTP/1.1 200 Content-Type: application/octet-stream Content-Disposition: attachment ETag: "8052a5db4ec9ce1:0" Content-Length: 55915216 ~U:informant +URL https://www.google.com/chrome/browser/thankyou.html?brand=CHNG&platform=win&clickonceinstalled=1 02/02/2015 15:34:37 03/22/2015 11:11:12 thankyou[1].htm 7PBK2Z4C HTTP/1.1 200 OK Content-Type: text/html X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Alternate-Protocol: 443:quic,p=0.5 Transfer-Encoding: chunked ~U:informant +URL http://img.s-msn.com/tenant/amp/entityid/BBiskd6.img?h=75&w=100&m=6&q=60&u=t&o=t&l=f 03/20/2015 09:30:15 03/22/2015 11:09:18 BBiskd6[1].jpg 7PBK2Z4C HTTP/1.1 200 OK Content-Type: image/jpeg Content-Location: http://img.s-msn.com/tenant/amp/entityid/BBiskd6?h=75&w=100&m=6&q=60&u=t&o=t&l=f X-Source-Length: 197243 X-Datacenter: eastus X-ActivityId: 25ee6e05-9013-4ff7-b68b-8d2f9df476f3 X-Instance: Resizer.Web_IN_17 X-Deployment: c610fbb33f2e4f88b789490c62db1a73 Timing-Allow-Origin: * X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Content-Length: 2255 ~U:informant +URL http://img.s-msn.com/tenant/amp/entityid/BBhHuu9.img?h=75&w=100&m=6&q=60&u=t&o=t&l=f&x=598&y=473 03/20/2015 19:06:17 03/22/2015 11:09:18 BBhHuu9[1].jpg 4C689SI3 HTTP/1.1 200 OK Content-Type: image/jpeg Content-Location: http://img.s-msn.com/tenant/amp/entityid/BBhHuu9?h=75&w=100&m=6&q=60&u=t&o=t&l=f&x=598&y=473 X-Source-Length: 746132 X-Datacenter: eastus X-ActivityId: a272b0ce-9afc-4cf0-b6aa-4661e2889e83 X-Instance: Resizer.Web_IN_0 X-Deployment: c610fbb33f2e4f88b789490c62db1a73 Timing-Allow-Origin: * X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Content-Length: 2551 ~U:informant +URL http://img.s-msn.com/tenant/amp/entityid/AA2CNVO.img?h=16&w=16&m=6&q=60&u=t&o=t&l=f&f=png 03/23/2015 05:22:20 03/22/2015 11:09:18 AA2CNVO[1].png E9RPI3E2 HTTP/1.1 200 OK X-Datacenter: eastus X-ActivityId: 39dbb05a-37c9-4462-ae03-7feb0048095d X-Instance: Resizer.Web_IN_0 X-Deployment: c610fbb33f2e4f88b789490c62db1a73 Timing-Allow-Origin: * X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Content-Type: image/png Content-Location: http://img.s-msn.com/tenant/amp/entityid/AA2CNVO?h=16&w=16&m=6&q=60&u=t&o=t&l=f&f=png X-Source-Length: 1354 Content-Length: 858 ~U:informant +URL http://img.s-msn.com/tenant/amp/entityid/BBd5X.img?h=16&w=16&m=6&q=60&u=t&o=t&l=f&f=png 03/19/2015 14:13:12 03/22/2015 11:09:18 BBd5X[1].png E9RPI3E2 HTTP/1.1 200 OK X-Datacenter: eastus X-ActivityId: 3103e0f7-da8c-4fa8-bb5c-aa4dba987fbe X-Instance: Resizer.Web_IN_14 X-Deployment: c610fbb33f2e4f88b789490c62db1a73 Timing-Allow-Origin: * X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Content-Type: image/png Content-Location: http://img.s-msn.com/tenant/amp/entityid/BBd5X?h=16&w=16&m=6&q=60&u=t&o=t&l=f&f=png X-Source-Length: 343 Content-Length: 327 ~U:informant +URL https://apis.google.com/_/scs/apps-static/_/js/k=oz.plusone.en.AIDx_pw_nnE.O/m=p1b,p1p/rt=j/sv=1/d=1/ed=1/am=AQ/rs=AGLTcCPGtCmi04Fy5ePCLAKXdddLxQwtsg/t=zcms/cb=gapi.loaded_1 03/19/2015 19:51:12 03/22/2015 11:11:14 cb=gapi[1].loaded_1 E9RPI3E2 HTTP/1.1 200 OK Content-Type: text/javascript; charset=UTF-8 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Alternate-Protocol: 443:quic,p=0.5 Content-Length: 72250 ~U:informant +URL http://c.go-mpulse.net/boomerang/config.js?key=URRYV-HX35J-LK4WZ-4TRKG-NBMKC&d=www.msn.com&t=4756790&v=0.9.1422498372&if=&sl=0&si=tns1xpxqisg4-NaN&plugins=MSN,PageParams,RT,BW,NavigationTiming,ResourceTiming,Memory,CACHE_RELOAD,LOGN 03/22/2015 11:09:02 config[1].js E9RPI3E2 HTTP/1.1 200 OK Content-Type: application/javascript;charset=utf-8 Transfer-Encoding: chunked Timing-Allow-Origin: * CF-RAY: 1cbafc81b7e80099-IAD ~U:informant +URL http://cdn.adnxs.com/p/c3/5e/72/94/c35e729453d37d643331b3e14d64444f.gif 02/02/2015 12:54:26 03/22/2015 11:09:03 c35e729453d37d643331b3e14d64444f[1].gif DUBW47SE HTTP/1.1 200 OK ETag: "c35e729453d37d643331b3e14d64444f:1422899667" Content-Length: 39236 Content-Type: image/gif ~U:informant +URL http://img.s-msn.com/tenant/amp/entityid/BBiAy9J.img?h=75&w=100&m=6&q=60&u=t&o=t&l=f&x=1224&y=619 03/23/2015 06:20:26 03/22/2015 11:09:18 BBiAy9J[1].jpg E9RPI3E2 HTTP/1.1 200 OK Content-Type: image/jpeg Content-Location: http://img.s-msn.com/tenant/amp/entityid/BBiAy9J?h=75&w=100&m=6&q=60&u=t&o=t&l=f&x=1224&y=619 X-Source-Length: 176028 X-Datacenter: eastus X-ActivityId: ade885de-b473-468c-8114-d835ecd2a05b X-Instance: Resizer.Web_IN_3 X-Deployment: c610fbb33f2e4f88b789490c62db1a73 Timing-Allow-Origin: * X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Content-Length: 1904 ~U:informant +URL https://apis.google.com/js/api.js 03/22/2015 11:11:13 api[1].js DUBW47SE HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 X-UA-Compatible: IE=edge, chrome=1 Timing-Allow-Origin: * ETag: "2edd47e0f1afe8e7d84be92a837129fc" Strict-Transport-Security: max-age=10886400 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block Alternate-Protocol: 443:quic,p=0.5 Transfer-Encoding: chunked ~U:informant +URL http://img.s-msn.com/tenant/amp/entityid/AA9TlSL.img?h=75&w=100&m=6&q=60&u=t&o=t&l=f&f=jpg 03/22/2015 01:53:43 03/22/2015 11:09:03 AA9TlSL[1].jpg 4C689SI3 HTTP/1.1 200 OK X-Datacenter: eastus X-ActivityId: 2f5efd9f-abc5-4668-9144-e26ba90e2bd8 X-Instance: Resizer.Web_IN_6 X-Deployment: c610fbb33f2e4f88b789490c62db1a73 Timing-Allow-Origin: * X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Content-Type: image/jpeg Content-Location: http://img.s-msn.com/tenant/amp/entityid/AA9TlSL?h=75&w=100&m=6&q=60&u=t&o=t&l=f&f=jpg X-Source-Length: 107388 Content-Length: 2703 ~U:informant +URL http://img.s-msn.com/tenant/amp/entityid/BBiBAZB.img?h=194&w=300&m=6&q=60&u=t&o=t&l=f 03/23/2015 08:38:38 03/22/2015 11:09:18 BBiBAZB[1].jpg 7PBK2Z4C HTTP/1.1 200 OK Content-Type: image/jpeg Content-Location: http://img.s-msn.com/tenant/amp/entityid/BBiBAZB?h=194&w=300&m=6&q=60&u=t&o=t&l=f X-Source-Length: 421882 X-Datacenter: eastus X-ActivityId: 543e9280-8574-466c-b442-e85b1cceb35d X-Instance: Resizer.Web_IN_3 X-Deployment: c610fbb33f2e4f88b789490c62db1a73 Timing-Allow-Origin: * X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Content-Length: 10138 ~U:informant +URL http://img.s-msn.com/tenant/amp/entityid/BBivzDB.img?h=194&w=300&m=6&q=60&u=t&o=t&l=f 03/22/2015 06:18:06 03/22/2015 11:09:18 BBivzDB[1].jpg 7PBK2Z4C HTTP/1.1 200 OK Content-Type: image/jpeg Content-Location: http://img.s-msn.com/tenant/amp/entityid/BBivzDB?h=194&w=300&m=6&q=60&u=t&o=t&l=f X-Source-Length: 1699527 X-Datacenter: eastus X-ActivityId: 47c34555-a4b5-442c-9c5b-749e362b8cc1 X-Instance: Resizer.Web_IN_4 X-Deployment: c610fbb33f2e4f88b789490c62db1a73 Timing-Allow-Origin: * X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Content-Length: 9154 ~U:informant +URL http://res1.windows.microsoft.com/resbox/en/6.2/main/1f9ad235-787b-42fa-bfb5-12f191dc0c23_38.js 07/25/2013 14:06:08 03/22/2015 11:10:22 1f9ad235-787b-42fa-bfb5-12f191dc0c23_38[1].js E9RPI3E2 HTTP/1.1 200 OK Content-Type: application/javascript X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET X-Content-Type-Options: nosniff Content-Length: 6142 ~U:informant +URL https://www.google.com/chrome/assets/consumer/images/tiffany/featured/jam.png 11/08/2012 05:32:59 03/22/2015 11:10:55 jam[1].png E9RPI3E2 HTTP/1.1 200 OK Content-Type: image/png X-Content-Type-Options: nosniff Content-Length: 112466 X-XSS-Protection: 1; mode=block Alternate-Protocol: 443:quic,p=0.5 ~U:informant +URL http://img.s-msn.com/tenant/amp/entityid/BB3dBUk.img?h=16&w=16&m=6&q=60&u=t&o=t&l=f&f=png 03/19/2015 05:24:25 03/22/2015 11:09:18 BB3dBUk[1].png E9RPI3E2 HTTP/1.1 200 OK X-Datacenter: eastus X-ActivityId: 4956ab85-1363-48bb-b9bb-3d8aa653de40 X-Instance: Resizer.Web_IN_0 X-Deployment: c610fbb33f2e4f88b789490c62db1a73 Timing-Allow-Origin: * X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Content-Type: image/png Content-Location: http://img.s-msn.com/tenant/amp/entityid/BB3dBUk?h=16&w=16&m=6&q=60&u=t&o=t&l=f&f=png X-Source-Length: 379 Content-Length: 468 ~U:informant +URL http://img.s-msn.com/tenant/amp/entityid/AA6pevu.img?h=16&w=16&m=6&q=60&u=t&o=t&l=f&f=png 03/23/2015 06:46:37 03/22/2015 11:09:18 AA6pevu[1].png 4C689SI3 HTTP/1.1 200 OK X-Datacenter: eastus X-ActivityId: 01d96575-efdf-456f-ba67-76c2e5ad2cd7 X-Instance: Resizer.Web_IN_10 X-Deployment: c610fbb33f2e4f88b789490c62db1a73 Timing-Allow-Origin: * X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Content-Type: image/png Content-Location: http://img.s-msn.com/tenant/amp/entityid/AA6pevu?h=16&w=16&m=6&q=60&u=t&o=t&l=f&f=png X-Source-Length: 320 Content-Length: 478 ~U:informant +URL http://img.s-msn.com/tenant/amp/entityid/BBisXtQ.img?h=75&w=100&m=6&q=60&u=t&o=t&l=f&x=1479&y=495 03/20/2015 21:36:49 03/22/2015 11:09:18 BBisXtQ[1].jpg DUBW47SE HTTP/1.1 200 OK Content-Type: image/jpeg Content-Location: http://img.s-msn.com/tenant/amp/entityid/BBisXtQ?h=75&w=100&m=6&q=60&u=t&o=t&l=f&x=1479&y=495 X-Source-Length: 752671 X-Datacenter: eastus X-ActivityId: 78e688c5-91cc-42a7-a8f4-457a44a20271 X-Instance: Resizer.Web_IN_6 X-Deployment: c610fbb33f2e4f88b789490c62db1a73 Timing-Allow-Origin: * X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Content-Length: 2212 ~U:informant +URL http://img.s-msn.com/tenant/amp/entityid/BBisAQz.img?h=75&w=100&m=6&q=60&u=t&o=t&l=f 03/20/2015 13:22:32 03/22/2015 11:09:18 BBisAQz[1].png 7PBK2Z4C HTTP/1.1 200 OK Content-Type: image/png Content-Location: http://img.s-msn.com/tenant/amp/entityid/BBisAQz?h=75&w=100&m=6&q=60&u=t&o=t&l=f X-Source-Length: 746913 X-Datacenter: eastus X-ActivityId: 5e501549-64f2-4fb9-8629-b2ff89c2d611 X-Instance: Resizer.Web_IN_7 X-Deployment: c610fbb33f2e4f88b789490c62db1a73 Timing-Allow-Origin: * X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Content-Length: 18703 ~U:informant +URL http://img.s-msn.com/tenant/amp/entityid/AA9yI4A.img?h=194&w=300&m=6&q=60&u=t&o=t&l=f&x=1293&y=926 03/22/2015 02:32:16 03/22/2015 11:09:18 AA9yI4A[1].jpg DUBW47SE HTTP/1.1 200 OK Content-Type: image/jpeg Content-Location: http://img.s-msn.com/tenant/amp/entityid/AA9yI4A?h=194&w=300&m=6&q=60&u=t&o=t&l=f&x=1293&y=926 X-Source-Length: 356816 X-Datacenter: eastus X-ActivityId: db1083d0-0a0f-4c1b-a541-011adf31543b X-Instance: Resizer.Web_IN_8 X-Deployment: c610fbb33f2e4f88b789490c62db1a73 Timing-Allow-Origin: * X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Content-Length: 9062 ~U:informant +URL http://res2.windows.microsoft.com/resbox/en/windows/main/08ce8e54-41ba-4695-9963-a7669022faec_12.eot? 07/03/2013 14:25:43 03/22/2015 11:10:22 08ce8e54-41ba-4695-9963-a7669022faec_12[1].eot DUBW47SE HTTP/1.1 200 OK Content-Type: application/vnd.ms-fontobject Access-Control-Allow-Origin: * X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET X-Content-Type-Options: nosniff Content-Length: 28677 ~U:informant +URL http://nexus.ensighten.com/wol/Bootstrap.js 03/19/2015 18:27:41 03/22/2015 11:09:51 Bootstrap[1].js 7PBK2Z4C HTTP/1.1 200 OK Content-Type: application/x-javascript transfer-encoding: chunked ~U:informant +URL http://static-hp-eus.s-msn.com/sc/87/a01786.eot? 02/19/2015 17:35:50 03/22/2015 11:09:02 a01786[1].eot 4C689SI3 HTTP/1.1 200 OK Content-Type: application/vnd.ms-fontobject ETag: "0275869944cd01:0" X-Powered-By: ASP.NET Access-Control-Allow-Origin: * Access-Control-Allow-Methods: HEAD,GET,OPTIONS X-XSS-Protection: 1 Content-Length: 38752 ~U:informant +URL http://img.s-msn.com/tenant/amp/entityid/BBijWr7.img?h=75&w=100&m=6&q=60&u=t&o=t&l=f&x=187&y=141 03/23/2015 10:14:16 03/22/2015 11:09:18 BBijWr7[1].jpg E9RPI3E2 HTTP/1.1 200 OK Content-Type: image/jpeg Content-Location: http://img.s-msn.com/tenant/amp/entityid/BBijWr7?h=75&w=100&m=6&q=60&u=t&o=t&l=f&x=187&y=141 X-Source-Length: 58416 X-Datacenter: eastus X-ActivityId: 8d373a3b-f749-47dd-b3d1-ff0d9e5d2376 X-Instance: Resizer.Web_IN_3 X-Deployment: c610fbb33f2e4f88b789490c62db1a73 Timing-Allow-Origin: * X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Content-Length: 2056 ~U:informant +URL http://windows.microsoft.com/en-us/internet-explorer/download-ie 03/22/2015 21:35:38 03/22/2015 11:09:51 download-ie[1].htm E9RPI3E2 HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET X-Content-Type-Options: nosniff X-UA-Compatible: IE=11 Content-Length: 80413 ~U:informant +URL https://www.google.com/chrome/assets/consumer/images/tiffany/thumbs/racer-thumb.png 06/11/2013 17:32:55 03/22/2015 11:10:54 racer-thumb[1].png DUBW47SE HTTP/1.1 200 OK Content-Type: image/png X-Content-Type-Options: nosniff Content-Length: 4026 X-XSS-Protection: 1; mode=block Alternate-Protocol: 443:quic,p=0.5 ~U:informant +URL https://www.google.com/chrome/assets/consumer/images/tiffany/featured/photowall-marquee.jpg 03/24/2014 14:02:51 03/22/2015 11:10:55 photowall-marquee[1].jpg 7PBK2Z4C HTTP/1.1 200 OK Content-Type: image/jpeg X-Content-Type-Options: nosniff Content-Length: 126968 X-XSS-Protection: 1; mode=block Alternate-Protocol: 443:quic,p=0.5 ~U:informant +URL http://img.s-msn.com/tenant/amp/entityid/BB47wtI.img?h=16&w=16&m=6&q=60&u=t&o=t&l=f&f=png 03/23/2015 10:40:20 03/22/2015 11:09:18 BB47wtI[1].png DUBW47SE HTTP/1.1 200 OK X-Datacenter: eastus X-ActivityId: 7759f11c-f75f-42a1-b871-7039cc3e2cc8 X-Instance: Resizer.Web_IN_0 X-Deployment: c610fbb33f2e4f88b789490c62db1a73 Timing-Allow-Origin: * X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Content-Type: image/png Content-Location: http://img.s-msn.com/tenant/amp/entityid/BB47wtI?h=16&w=16&m=6&q=60&u=t&o=t&l=f&f=png X-Source-Length: 351 Content-Length: 466 ~U:informant +URL http://img.s-msn.com/tenant/amp/entityid/BBiyswS.img?h=75&w=100&m=6&q=60&u=t&o=t&l=f&x=1558&y=403 03/22/2015 01:03:08 03/22/2015 11:09:18 BBiyswS[1].jpg 4C689SI3 HTTP/1.1 200 OK Content-Type: image/jpeg Content-Location: http://img.s-msn.com/tenant/amp/entityid/BBiyswS?h=75&w=100&m=6&q=60&u=t&o=t&l=f&x=1558&y=403 X-Source-Length: 401545 X-Datacenter: eastus X-ActivityId: 93aff395-4219-42f1-817e-7fd0f048d2b1 X-Instance: Resizer.Web_IN_11 X-Deployment: c610fbb33f2e4f88b789490c62db1a73 Timing-Allow-Origin: * X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Content-Length: 2528 ~U:informant +REDR http://go.microsoft.com/fwlink/?LinkID=121792 +URL http://res2.windows.microsoft.com/resbox/en/windows/main/566128a7-5192-449d-99b0-11b4459eaf1d_8.js 02/27/2014 14:51:35 03/22/2015 11:10:22 566128a7-5192-449d-99b0-11b4459eaf1d_8[1].js E9RPI3E2 HTTP/1.1 200 OK Content-Type: application/javascript X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET X-Content-Type-Options: nosniff Content-Length: 637 ~U:informant +URL http://res2.windows.microsoft.com/resbox/en/windows/main/e64030e7-ad8c-4be8-a45a-b69a2df3caef_13.eot? 07/03/2013 14:25:43 03/22/2015 11:10:22 e64030e7-ad8c-4be8-a45a-b69a2df3caef_13[1].eot E9RPI3E2 HTTP/1.1 200 OK Content-Type: application/vnd.ms-fontobject Access-Control-Allow-Origin: * X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET X-Content-Type-Options: nosniff Content-Length: 26455 ~U:informant +URL https://clients1.google.com/complete/search?client=heirloom-hp&hl=en&sugexp=msedr&gs_rn=34&gs_ri=heirloom-hp&cp=3&gs_id=a&q=int&gs_gbg=KMs0PvK3XqW7x 03/22/2015 11:09:43 f[2].txt DUBW47SE HTTP/1.1 200 OK Content-Type: text/javascript; charset=UTF-8 Content-Disposition: attachment; filename="f.txt" X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Alternate-Protocol: 443:quic,p=0.5 Transfer-Encoding: chunked ~U:informant +URL https://ssl.gstatic.com/images/icons/gplus-16.png 02/07/2013 14:52:00 03/22/2015 11:11:12 gplus-16[1].png 4C689SI3 HTTP/1.1 200 OK Content-Type: image/png X-Content-Type-Options: nosniff Content-Length: 492 X-XSS-Protection: 1; mode=block Alternate-Protocol: 443:quic,p=0.5 ~U:informant +URL http://img.s-msn.com/tenant/amp/entityid/BB6qRzt.img?h=16&w=16&m=6&q=60&u=t&o=t&l=f&f=png 03/23/2015 06:46:25 03/22/2015 11:09:18 BB6qRzt[1].png 4C689SI3 HTTP/1.1 200 OK X-Datacenter: eastus X-ActivityId: 17b374a9-94b8-4daf-8616-159c7053f5c2 X-Instance: Resizer.Web_IN_1 X-Deployment: c610fbb33f2e4f88b789490c62db1a73 Timing-Allow-Origin: * X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Content-Type: image/png Content-Location: http://img.s-msn.com/tenant/amp/entityid/BB6qRzt?h=16&w=16&m=6&q=60&u=t&o=t&l=f&f=png X-Source-Length: 282 Content-Length: 360 ~U:informant +URL http://img.s-msn.com/tenant/amp/entityid/BBiB1Re.img?h=75&w=100&m=6&q=60&u=t&o=t&l=f&x=1395&y=610 03/23/2015 06:22:43 03/22/2015 11:09:18 BBiB1Re[1].jpg DUBW47SE HTTP/1.1 200 OK Content-Type: image/jpeg Content-Location: http://img.s-msn.com/tenant/amp/entityid/BBiB1Re?h=75&w=100&m=6&q=60&u=t&o=t&l=f&x=1395&y=610 X-Source-Length: 364574 X-Datacenter: eastus X-ActivityId: 2032aa61-9a3c-4d34-9444-0d1ed6a55ca6 X-Instance: Resizer.Web_IN_0 X-Deployment: c610fbb33f2e4f88b789490c62db1a73 Timing-Allow-Origin: * X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Content-Length: 2227 ~U:informant +URL http://img.s-msn.com/tenant/amp/entityid/AA9sWtD.img?h=75&w=100&m=6&q=60&u=t&o=t&l=f&x=1085&y=1115 03/23/2015 04:03:31 03/22/2015 11:09:18 AA9sWtD[1].jpg 4C689SI3 HTTP/1.1 200 OK X-Datacenter: eastus X-ActivityId: f637d5f4-4c95-4b51-9d05-1c908d5e7ac3 X-Instance: Resizer.Web_IN_0 X-Deployment: c610fbb33f2e4f88b789490c62db1a73 Timing-Allow-Origin: * X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Content-Type: image/jpeg Content-Location: http://img.s-msn.com/tenant/amp/entityid/AA9sWtD?h=75&w=100&m=6&q=60&u=t&o=t&l=f&x=1085&y=1115 X-Source-Length: 399862 Content-Length: 2314 ~U:informant +URL https://www.google.com/search?hl=en&source=hp&q=internet+explorer+11&gbv=2&oq=internet+explorer+11&gs_l=heirloom-hp.3..0l10.5163.7893.0.9562.20.13.0.7.7.0.156.1110.11j2.13.0.msedr...0...1ac.1.34.heirloom-hp..0.20.1250.5j7Xm44tv5w 03/22/2015 11:09:48 search[1].htm 4C689SI3 HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Alternate-Protocol: 443:quic,p=0.5 Transfer-Encoding: chunked ~U:informant +URL http://res1.windows.microsoft.com/resources/4.2/wol/shared/images/merged/gl_site.png 12/09/2013 15:04:32 03/22/2015 11:10:31 gl_site[2].png 7PBK2Z4C HTTP/1.1 200 OK Content-Type: image/png ETag: "088eadf19f5ce1:0" X-Powered-By: ASP.NET X-Content-Type-Options: nosniff Access-Control-Allow-Origin: * Content-Length: 5220 ~U:informant +URL https://www.google.com/chrome/assets/consumer/images/tiffany/bg.png 06/25/2012 15:04:10 03/22/2015 11:10:54 bg[1].png 7PBK2Z4C HTTP/1.1 200 OK Content-Type: image/png X-Content-Type-Options: nosniff Content-Length: 1023 X-XSS-Protection: 1; mode=block Alternate-Protocol: 443:quic,p=0.5 ~U:informant +URL https://www.google.com/chrome/assets/common/images/marquee/mobile-benefits-4.jpg 12/02/2014 13:04:39 03/22/2015 11:11:12 mobile-benefits-4[1].jpg 4C689SI3 HTTP/1.1 200 OK Content-Type: image/jpeg X-Content-Type-Options: nosniff Content-Length: 28651 X-XSS-Protection: 1; mode=block Alternate-Protocol: 443:quic,p=0.5 ~U:informant +URL http://s0.2mdn.net/2992003/1-14-1214_NET_WEB_simple_300x250_AS2.jpg 03/16/2015 12:57:39 03/22/2015 11:09:03 1-14-1214_NET_WEB_simple_300x250_AS2[1].jpg E9RPI3E2 HTTP/1.1 200 OK Content-Type: image/jpeg Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Content-Length: 20087 X-XSS-Protection: 1; mode=block Alternate-Protocol: 80:quic,p=0.5 ~U:informant +URL http://img.s-msn.com/tenant/amp/entityid/BB55gcf.img?h=16&w=16&m=6&q=60&u=t&o=t&l=f&f=png 03/19/2015 02:36:03 03/22/2015 11:09:18 BB55gcf[1].png E9RPI3E2 HTTP/1.1 200 OK X-Datacenter: eastus X-ActivityId: 7b57e847-89df-4992-ba42-027293885f83 X-Instance: Resizer.Web_IN_3 X-Deployment: c610fbb33f2e4f88b789490c62db1a73 Timing-Allow-Origin: * X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Content-Type: image/png Content-Location: http://img.s-msn.com/tenant/amp/entityid/BB55gcf?h=16&w=16&m=6&q=60&u=t&o=t&l=f&f=png X-Source-Length: 571 Content-Length: 663 ~U:informant +URL http://img.s-msn.com/tenant/amp/entityid/AA9u2Q7.img?h=75&w=100&m=6&q=60&u=t&o=t&l=f 03/23/2015 04:03:31 03/22/2015 11:09:18 AA9u2Q7[1].jpg E9RPI3E2 HTTP/1.1 200 OK Content-Type: image/jpeg Content-Location: http://img.s-msn.com/tenant/amp/entityid/AA9u2Q7?h=75&w=100&m=6&q=60&u=t&o=t&l=f X-Source-Length: 116823 X-Datacenter: eastus X-ActivityId: dd6efe64-c854-49a5-9f16-adfa2366f6ad X-Instance: Resizer.Web_IN_8 X-Deployment: c610fbb33f2e4f88b789490c62db1a73 Timing-Allow-Origin: * X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Content-Length: 2067 ~U:informant +URL http://res1.windows.microsoft.com/resbox/en/windows/main/49eb9f77-0c92-450c-a267-999f2caaa56b_18.png 09/03/2014 12:51:45 03/22/2015 11:10:23 49eb9f77-0c92-450c-a267-999f2caaa56b_18[1].png 4C689SI3 HTTP/1.1 200 OK Content-Type: image/png X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET X-Content-Type-Options: nosniff Content-Length: 1371 ~U:informant +URL http://nexus.ensighten.com/wol/prod/code/dc03d35b723c8be574a55bce3e34cfaa.js?conditionId0=350222 03/19/2015 18:27:41 03/22/2015 11:09:52 dc03d35b723c8be574a55bce3e34cfaa[1].js DUBW47SE HTTP/1.1 200 OK Content-Type: application/x-javascript transfer-encoding: chunked ~U:informant +URL https://www.google.com/chrome/assets/consumer/images/tiffany/browser/browser-play.png 06/25/2012 15:04:10 03/22/2015 11:10:54 browser-play[1].png 7PBK2Z4C HTTP/1.1 200 OK Content-Type: image/png X-Content-Type-Options: nosniff Content-Length: 2262 X-XSS-Protection: 1; mode=block Alternate-Protocol: 443:quic,p=0.5 ~U:informant +URL https://www.google.com/chrome/assets/consumer/images/tiffany/featured/evolution.png 06/25/2012 15:04:10 03/22/2015 11:10:55 evolution[1].png 7PBK2Z4C HTTP/1.1 200 OK Content-Type: image/png X-Content-Type-Options: nosniff Content-Length: 172232 X-XSS-Protection: 1; mode=block Alternate-Protocol: 443:quic,p=0.5 ~U:informant +URL http://img.s-msn.com/tenant/amp/entityid/BBil0Dw.img?h=75&w=100&m=6&q=60&u=t&o=t&l=f&f=jpg 03/22/2015 14:52:08 03/22/2015 11:09:03 BBil0Dw[1].jpg DUBW47SE HTTP/1.1 200 OK X-Datacenter: eastus X-ActivityId: 6f8ea89c-992f-46a5-a3fb-c70521eb3c72 X-Instance: Resizer.Web_IN_2 X-Deployment: c610fbb33f2e4f88b789490c62db1a73 Timing-Allow-Origin: * X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Content-Type: image/jpeg Content-Location: http://img.s-msn.com/tenant/amp/entityid/BBil0Dw?h=75&w=100&m=6&q=60&u=t&o=t&l=f&f=jpg X-Source-Length: 30239 Content-Length: 1287 ~U:informant +URL http://img.s-msn.com/tenant/amp/entityid/BBiBvW7.img?h=75&w=100&m=6&q=60&u=t&o=t&l=f&x=126&y=165 03/23/2015 09:39:22 03/22/2015 11:09:18 BBiBvW7[1].jpg DUBW47SE HTTP/1.1 200 OK Content-Type: image/jpeg Content-Location: http://img.s-msn.com/tenant/amp/entityid/BBiBvW7?h=75&w=100&m=6&q=60&u=t&o=t&l=f&x=126&y=165 X-Source-Length: 24383 X-Datacenter: eastus X-ActivityId: ec797e58-bc7c-464e-b45b-d107dae1d331 X-Instance: Resizer.Web_IN_10 X-Deployment: c610fbb33f2e4f88b789490c62db1a73 Timing-Allow-Origin: * X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Content-Length: 1073 ~U:informant +URL http://img.s-msn.com/tenant/amp/entityid/BBinKFA.img?h=75&w=100&m=6&q=60&u=t&o=t&l=f&x=775&y=383 03/23/2015 08:09:43 03/22/2015 11:09:18 BBinKFA[1].jpg 7PBK2Z4C HTTP/1.1 200 OK Content-Type: image/jpeg Content-Location: http://img.s-msn.com/tenant/amp/entityid/BBinKFA?h=75&w=100&m=6&q=60&u=t&o=t&l=f&x=775&y=383 X-Source-Length: 375586 X-Datacenter: eastus X-ActivityId: 5b831e1d-7411-43ba-9b11-88a0a3ee28c3 X-Instance: Resizer.Web_IN_2 X-Deployment: c610fbb33f2e4f88b789490c62db1a73 Timing-Allow-Origin: * X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Content-Length: 1798 ~U:informant +URL http://img.s-msn.com/tenant/amp/entityid/AA8wBsQ.img?h=16&w=16&m=6&q=60&u=t&o=t&l=f&f=png 03/21/2015 13:55:08 03/22/2015 11:09:18 AA8wBsQ[1].png 7PBK2Z4C HTTP/1.1 200 OK X-Datacenter: eastus X-ActivityId: b09a4311-0150-4821-9b88-8e95d4167e5f X-Instance: Resizer.Web_IN_6 X-Deployment: c610fbb33f2e4f88b789490c62db1a73 Timing-Allow-Origin: * X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Content-Type: image/png Content-Location: http://img.s-msn.com/tenant/amp/entityid/AA8wBsQ?h=16&w=16&m=6&q=60&u=t&o=t&l=f&f=png X-Source-Length: 336 Content-Length: 485 ~U:informant +URL http://img.s-msn.com/tenant/amp/entityid/BBiBGaO.img?h=75&w=100&m=6&q=60&u=t&o=t&l=f&x=1271&y=766 03/23/2015 09:56:33 03/22/2015 11:09:18 BBiBGaO[1].jpg E9RPI3E2 HTTP/1.1 200 OK Content-Type: image/jpeg Content-Location: http://img.s-msn.com/tenant/amp/entityid/BBiBGaO?h=75&w=100&m=6&q=60&u=t&o=t&l=f&x=1271&y=766 X-Source-Length: 441594 X-Datacenter: eastus X-ActivityId: 80b00a8a-e263-4318-8e9b-f2282afe0788 X-Instance: Resizer.Web_IN_1 X-Deployment: c610fbb33f2e4f88b789490c62db1a73 Timing-Allow-Origin: * X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Content-Length: 2537 ~U:informant +URL http://img.s-msn.com/tenant/amp/entityid/BBisahq.img?h=75&w=100&m=6&q=60&u=t&o=t&l=f 03/22/2015 02:32:16 03/22/2015 11:09:18 BBisahq[1].jpg E9RPI3E2 HTTP/1.1 200 OK Content-Type: image/jpeg Content-Location: http://img.s-msn.com/tenant/amp/entityid/BBisahq?h=75&w=100&m=6&q=60&u=t&o=t&l=f X-Source-Length: 846319 X-Datacenter: eastus X-ActivityId: 478ede2b-7f50-4e83-8e71-9b409e906a62 X-Instance: Resizer.Web_IN_10 X-Deployment: c610fbb33f2e4f88b789490c62db1a73 Timing-Allow-Origin: * X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Content-Length: 2301 ~U:informant +URL http://img.s-msn.com/tenant/amp/entityid/BB1GkQd.img?h=16&w=16&m=6&q=60&u=t&o=t&l=f&f=png 03/23/2015 06:12:00 03/22/2015 11:09:30 BB1GkQd[1].png 4C689SI3 HTTP/1.1 200 OK X-Datacenter: eastus X-ActivityId: 915c99a1-6db1-47a2-953b-f22c9cf4f72c X-Instance: Resizer.Web_IN_2 X-Deployment: c610fbb33f2e4f88b789490c62db1a73 Timing-Allow-Origin: * X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Content-Type: image/png Content-Location: http://img.s-msn.com/tenant/amp/entityid/BB1GkQd?h=16&w=16&m=6&q=60&u=t&o=t&l=f&f=png X-Source-Length: 452 Content-Length: 534 ~U:informant +URL http://res1.windows.microsoft.com/siteresources/siteresource.ashx?id=AtlasFrameStyle&hash=44a2dec542072ee96a270e3b80167d5497ad9ce023ea4374271e47e4ff50b121&us=WOLWebUrl&var=LTR 02/04/2014 19:45:15 03/22/2015 11:10:22 siteresource[2].css 4C689SI3 HTTP/1.1 200 OK Content-Type: text/css X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Content-Length: 176 ~U:informant +URL http://res1.windows.microsoft.com/resbox/en/internet%20explorer/2012-win8ga/1125b14f-653f-405e-96fb-a77ab0c8a856_8.png 04/15/2013 23:09:51 03/22/2015 11:09:51 1125b14f-653f-405e-96fb-a77ab0c8a856_8[1].png E9RPI3E2 HTTP/1.1 200 OK Content-Type: image/png X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET X-Content-Type-Options: nosniff Content-Length: 12614 ~U:informant +URL http://img.s-msn.com/tenant/amp/entityid/BBiB07V.img?h=250&w=206&m=6&q=60&u=t&o=t&l=f&f=jpg&x=1441&y=1440 03/23/2015 02:48:29 03/22/2015 11:09:02 BBiB07V[1].jpg 4C689SI3 HTTP/1.1 200 OK Content-Type: image/jpeg Content-Location: http://img.s-msn.com/tenant/amp/entityid/BBiB07V?h=250&w=206&m=6&q=60&u=t&o=t&l=f&f=jpg&x=1441&y=1440 X-Source-Length: 727094 X-Datacenter: eastus X-ActivityId: e5e3e6cc-3966-4ecf-ad99-9457073ab05f X-Instance: Resizer.Web_IN_3 X-Deployment: c610fbb33f2e4f88b789490c62db1a73 Timing-Allow-Origin: * X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Content-Length: 10370 ~U:informant +URL http://c.microsoft.com/ms.js 03/24/2014 20:30:25 03/22/2015 11:09:52 ms[1].js 4C689SI3 HTTP/1.1 200 OK Content-Type: application/x-javascript ETag: "80e646ac147cf1:0" X-Powered-By: ASP.NET P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" Content-Length: 12487 ~U:informant +URL http://js.microsoft.com/library/svy/windows/broker-config.js?1427036992998 03/18/2015 11:27:17 03/22/2015 11:09:53 broker-config[2].js DUBW47SE HTTP/1.1 200 OK Content-Type: application/x-javascript ETag: "88e9a149061d01:0" VTag: 438811627200000000 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-Powered-By: ASP.NET Content-Length: 11630 ~U:informant +URL https://apis.google.com/_/scs/apps-static/_/js/k=oz.gapi.en_US.QMkB6_tgC9o.O/m=auth/exm=plusone/rt=j/sv=1/d=1/ed=1/am=IQ/rs=AGLTcCMM6sUV4upHstQFnF6IwtkZZy1xGg/t=zcms/cb=gapi.loaded_1 03/19/2015 20:05:16 03/22/2015 11:11:13 cb=gapi[1].loaded_1 4C689SI3 HTTP/1.1 200 OK Content-Type: text/javascript; charset=UTF-8 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Alternate-Protocol: 443:quic,p=0.5 Content-Length: 57667 ~U:informant +URL http://img.s-msn.com/tenant/amp/entityid/AA9H4sf.img?h=75&w=100&m=6&q=60&u=t&o=t&l=f&x=453&y=585 03/19/2015 03:59:09 03/22/2015 11:09:18 AA9H4sf[1].png 4C689SI3 HTTP/1.1 200 OK Content-Type: image/png Content-Location: http://img.s-msn.com/tenant/amp/entityid/AA9H4sf?h=75&w=100&m=6&q=60&u=t&o=t&l=f&x=453&y=585 X-Source-Length: 1535538 X-Datacenter: eastus X-ActivityId: 2c39c059-2d83-4e32-b98f-b628c00194d1 X-Instance: Resizer.Web_IN_2 X-Deployment: c610fbb33f2e4f88b789490c62db1a73 Timing-Allow-Origin: * X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Content-Length: 21834 ~U:informant +URL http://res2.windows.microsoft.com/resbox/en/windows/main/5a7873a1-fd4e-4462-8ab2-32bd729117c6_7.png 08/28/2013 20:57:17 03/22/2015 11:10:22 5a7873a1-fd4e-4462-8ab2-32bd729117c6_7[1].png DUBW47SE HTTP/1.1 200 OK Content-Type: image/png X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET X-Content-Type-Options: nosniff Content-Length: 344 ~U:informant +URL https://ssl.google-analytics.com/ga.js 02/05/2015 12:35:24 03/22/2015 11:11:13 ga[1].js DUBW47SE HTTP/1.1 200 OK X-Content-Type-Options: nosniff Content-Type: text/javascript Alternate-Protocol: 443:quic,p=0.5 Content-Length: 40916 ~U:informant +URL https://www.google.com/intl/en/chrome/assets/consumer/images/tiffany/thumbs/noweverywhere_thumb.jpg 03/27/2013 17:02:34 03/22/2015 11:10:54 noweverywhere_thumb[1].jpg E9RPI3E2 HTTP/1.1 200 OK Content-Type: image/jpeg X-Content-Type-Options: nosniff Content-Length: 3874 X-XSS-Protection: 1; mode=block Alternate-Protocol: 443:quic,p=0.5 ~U:informant +URL https://www.google.com/chrome/assets/consumer/css/tiffany.css 04/24/2014 17:02:09 03/22/2015 11:10:53 tiffany[1].css E9RPI3E2 HTTP/1.1 200 OK Content-Type: text/css X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Alternate-Protocol: 443:quic,p=0.5 Transfer-Encoding: chunked ~U:informant +URL http://ads1.msads.net/library/8.3/dapmsn.js 12/09/2014 15:51:27 03/22/2015 11:09:02 dapmsn[1].js DUBW47SE HTTP/1.1 200 OK Content-Type: application/x-javascript ETag: "9848d6e6f113d01:0" P3P: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo" Content-Length: 18992 ~U:informant +URL http://img.s-msn.com/tenant/amp/entityid/AA9Aicg.img?h=16&w=16&m=6&q=60&u=t&o=t&l=f&f=png 03/19/2015 05:38:35 03/22/2015 11:09:18 AA9Aicg[1].png 4C689SI3 HTTP/1.1 200 OK X-Datacenter: eastus X-ActivityId: 9d3eb8b4-6663-46ff-9d7f-1fc7f8d2ff7b X-Instance: Resizer.Web_IN_5 X-Deployment: c610fbb33f2e4f88b789490c62db1a73 Timing-Allow-Origin: * X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Content-Type: image/png Content-Location: http://img.s-msn.com/tenant/amp/entityid/AA9Aicg?h=16&w=16&m=6&q=60&u=t&o=t&l=f&f=png X-Source-Length: 237 Content-Length: 254 ~U:informant +URL http://res2.windows.microsoft.com/resbox/en/internet%20explorer/main/e7a2d666-8177-4623-a1f8-da3b7053844f_28.js 08/22/2013 18:17:44 03/22/2015 11:09:51 e7a2d666-8177-4623-a1f8-da3b7053844f_28[1].js DUBW47SE HTTP/1.1 200 OK Content-Type: application/javascript X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET X-Content-Type-Options: nosniff Content-Length: 644 ~U:informant +URL http://res2.windows.microsoft.com/resbox/en/windows/main/4300ae64-546c-4bbe-9026-6779b3684fb9_18.png 08/21/2012 16:47:41 03/22/2015 11:10:22 4300ae64-546c-4bbe-9026-6779b3684fb9_18[1].png DUBW47SE HTTP/1.1 200 OK Content-Type: image/png X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET X-Content-Type-Options: nosniff Content-Length: 4165 ~U:informant +URL https://www.google.com/chrome/assets/consumer/images/tiffany/featured/kickwithchrome.jpg 06/19/2014 17:32:52 03/22/2015 11:10:55 kickwithchrome[1].jpg DUBW47SE HTTP/1.1 200 OK Content-Type: image/jpeg X-Content-Type-Options: nosniff Content-Length: 70111 X-XSS-Protection: 1; mode=block Alternate-Protocol: 443:quic,p=0.5 ~U:informant +URL http://img.s-msn.com/tenant/amp/entityid/BB6D3Lx.img?h=16&w=16&m=6&q=60&u=t&o=t&l=f&f=png 03/23/2015 06:19:01 03/22/2015 11:09:18 BB6D3Lx[1].png E9RPI3E2 HTTP/1.1 200 OK X-Datacenter: eastus X-ActivityId: b299420e-2814-426a-9a88-bec029fa2a67 X-Instance: Resizer.Web_IN_2 X-Deployment: c610fbb33f2e4f88b789490c62db1a73 Timing-Allow-Origin: * X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Content-Type: image/png Content-Location: http://img.s-msn.com/tenant/amp/entityid/BB6D3Lx?h=16&w=16&m=6&q=60&u=t&o=t&l=f&f=png X-Source-Length: 649 Content-Length: 744 ~U:informant +URL http://img.s-msn.com/tenant/amp/entityid/BBinWm2.img?h=75&w=100&m=6&q=60&u=t&o=t&l=f&x=921&y=1281 03/21/2015 07:48:55 03/22/2015 11:09:18 BBinWm2[1].jpg DUBW47SE HTTP/1.1 200 OK Content-Type: image/jpeg Content-Location: http://img.s-msn.com/tenant/amp/entityid/BBinWm2?h=75&w=100&m=6&q=60&u=t&o=t&l=f&x=921&y=1281 X-Source-Length: 344655 X-Datacenter: eastus X-ActivityId: 05d6a8fe-fc28-447f-bf22-564a91013cca X-Instance: Resizer.Web_IN_2 X-Deployment: c610fbb33f2e4f88b789490c62db1a73 Timing-Allow-Origin: * X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Content-Length: 2391 ~U:informant +URL http://s0.2mdn.net/879366/dfa7banner_flash_html_inpage_rendering_lib_200_70.js 03/16/2015 13:39:08 03/22/2015 11:09:02 dfa7banner_flash_html_inpage_rendering_lib_200_70[1].js DUBW47SE HTTP/1.1 200 OK Content-Type: text/javascript Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Alternate-Protocol: 80:quic,p=0.5 Content-Length: 100491 ~U:informant +URL http://img.s-msn.com/tenant/amp/entityid/AA90cIE.img?h=16&w=16&m=6&q=60&u=t&o=t&l=f&f=png 03/21/2015 20:56:04 03/22/2015 11:09:18 AA90cIE[1].png E9RPI3E2 HTTP/1.1 200 OK X-Datacenter: eastus X-ActivityId: 3aba9d81-32a4-43a9-8209-ffde9d31e5a2 X-Instance: Resizer.Web_IN_6 X-Deployment: c610fbb33f2e4f88b789490c62db1a73 Timing-Allow-Origin: * X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Content-Type: image/png Content-Location: http://img.s-msn.com/tenant/amp/entityid/AA90cIE?h=16&w=16&m=6&q=60&u=t&o=t&l=f&f=png X-Source-Length: 566 Content-Length: 614 ~U:informant +URL http://img.s-msn.com/tenant/amp/entityid/BBgF1kV.img?h=194&w=300&m=6&q=60&u=t&o=t&l=f&x=1377&y=713 03/23/2015 08:06:02 03/22/2015 11:09:18 BBgF1kV[1].jpg DUBW47SE HTTP/1.1 200 OK Content-Type: image/jpeg Content-Location: http://img.s-msn.com/tenant/amp/entityid/BBgF1kV?h=194&w=300&m=6&q=60&u=t&o=t&l=f&x=1377&y=713 X-Source-Length: 528290 X-Datacenter: eastus X-ActivityId: 59c8ed57-2796-4c74-8ab2-6bce67cf0012 X-Instance: Resizer.Web_IN_10 X-Deployment: c610fbb33f2e4f88b789490c62db1a73 Timing-Allow-Origin: * X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Content-Length: 11032 ~U:informant +URL http://res1.windows.microsoft.com/siteresources/siteresource.ashx?id=wolNotificationCSS&hash=82512a82d6c2cb2120298514a390b3a6f2023c70e80c6401d351bc5f357b0368&us=WOLWebUrl&var=LTR 10/17/2013 19:12:05 03/22/2015 11:10:22 siteresource[1].css 4C689SI3 HTTP/1.1 200 OK Content-Type: text/css X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Content-Length: 683 ~U:informant +URL http://windows.microsoft.com/scripts/4.2/wol/wol.common.js 04/29/2014 02:16:24 03/22/2015 11:10:22 wol.common[1].js DUBW47SE HTTP/1.1 200 OK Content-Type: text/javascript ETag: "02cce8b7263cf1:0" X-Powered-By: ASP.NET X-Content-Type-Options: nosniff Access-Control-Allow-Origin: * Content-Length: 180969 ~U:informant +URL http://res1.windows.microsoft.com/resbox/en/windows/main/4300ae64-546c-4bbe-9026-6779b3684fb8_32.png 05/31/2013 21:19:56 03/22/2015 11:10:23 4300ae64-546c-4bbe-9026-6779b3684fb8_32[1].png E9RPI3E2 HTTP/1.1 200 OK Content-Type: image/png X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET X-Content-Type-Options: nosniff Content-Length: 3844 ~U:informant +URL https://www.google.com/xjs/_/js/k=xjs.hp.en_US.votPZMqb6rk.O/m=sb_he,jsa,d,csi/rt=j/d=1/t=zcms/rs=ACT90oGWU4duK4Q5aR8xKQcV-eqzv5iDFw 03/16/2015 17:28:16 03/22/2015 11:10:52 rs=ACT90oGWU4duK4Q5aR8xKQcV-eqzv5iDFw[1] E9RPI3E2 HTTP/1.1 200 OK Content-Type: text/javascript; charset=UTF-8 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Alternate-Protocol: 443:quic,p=0.5 Content-Length: 151777 ~U:informant +URL http://img.s-msn.com/tenant/amp/entityid/AA3l39r.img?h=16&w=16&m=6&q=60&u=t&o=t&l=f&f=png 03/21/2015 19:39:50 03/22/2015 11:09:03 AA3l39r[1].png 4C689SI3 HTTP/1.1 200 OK X-Datacenter: eastus X-ActivityId: 1049b1cd-3b7a-4bf7-af65-262a0ebb1497 X-Instance: Resizer.Web_IN_8 X-Deployment: c610fbb33f2e4f88b789490c62db1a73 Timing-Allow-Origin: * X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Content-Type: image/png Content-Location: http://img.s-msn.com/tenant/amp/entityid/AA3l39r?h=16&w=16&m=6&q=60&u=t&o=t&l=f&f=png X-Source-Length: 353 Content-Length: 373 ~U:informant +URL http://img.s-msn.com/tenant/amp/entityid/BBfOhY0.img?h=194&w=300&m=6&q=60&u=t&o=t&l=f&x=1346&y=387 03/19/2015 08:50:50 03/22/2015 11:09:18 BBfOhY0[1].jpg 4C689SI3 HTTP/1.1 200 OK Content-Type: image/jpeg Content-Location: http://img.s-msn.com/tenant/amp/entityid/BBfOhY0?h=194&w=300&m=6&q=60&u=t&o=t&l=f&x=1346&y=387 X-Source-Length: 384443 X-Datacenter: eastus X-ActivityId: 623818c0-8ede-4216-ab9f-8b49480a352f X-Instance: Resizer.Web_IN_9 X-Deployment: c610fbb33f2e4f88b789490c62db1a73 Timing-Allow-Origin: * X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Content-Length: 8212 ~U:informant +URL https://clients1.google.com/complete/search?client=heirloom-hp&hl=en&sugexp=msedr&gs_rn=34&gs_ri=heirloom-hp&cp=6&gs_id=i&q=intern&gs_gbg=33ar7m 03/22/2015 11:09:44 f[3].txt 4C689SI3 HTTP/1.1 200 OK Content-Type: text/javascript; charset=UTF-8 Content-Disposition: attachment; filename="f.txt" X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Alternate-Protocol: 443:quic,p=0.5 Transfer-Encoding: chunked ~U:informant +URL https://clients1.google.com/complete/search?client=heirloom-hp&hl=en&sugexp=msedr&gs_rn=34&gs_ri=heirloom-hp&cp=20&gs_id=1p&q=internet%20explorer%2011&gs_gbg=Gjt8O1zomhwA7jy76TvcK8Ii35VRdueU2 03/22/2015 11:09:46 f[4].txt 7PBK2Z4C HTTP/1.1 200 OK Content-Type: text/javascript; charset=UTF-8 Content-Disposition: attachment; filename="f.txt" X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Alternate-Protocol: 443:quic,p=0.5 Transfer-Encoding: chunked ~U:informant +URL https://www.google.com/chrome/assets/common/images/fn/fn-download-sprite.png 12/02/2014 13:04:39 03/22/2015 11:11:12 fn-download-sprite[1].png 4C689SI3 HTTP/1.1 200 OK Content-Type: image/png X-Content-Type-Options: nosniff Content-Length: 14064 X-XSS-Protection: 1; mode=block Alternate-Protocol: 443:quic,p=0.5 ~U:informant +URL http://img.s-msn.com/tenant/amp/entityid/AA6u4ZP.img?h=16&w=16&m=6&q=60&u=t&o=t&l=f&f=png 03/23/2015 05:19:36 03/22/2015 11:09:18 AA6u4ZP[1].png 7PBK2Z4C HTTP/1.1 200 OK X-Datacenter: eastus X-ActivityId: 920df86c-a2a3-4657-b559-f4bcd6aa59ae X-Instance: Resizer.Web_IN_4 X-Deployment: c610fbb33f2e4f88b789490c62db1a73 Timing-Allow-Origin: * X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Content-Type: image/png Content-Location: http://img.s-msn.com/tenant/amp/entityid/AA6u4ZP?h=16&w=16&m=6&q=60&u=t&o=t&l=f&f=png X-Source-Length: 684 Content-Length: 722 ~U:informant +URL http://img.s-msn.com/tenant/amp/entityid/BBiphG3.img?h=75&w=100&m=6&q=60&u=t&o=t&l=f&x=867&y=330 03/22/2015 16:48:50 03/22/2015 11:09:18 BBiphG3[1].jpg E9RPI3E2 HTTP/1.1 200 OK Content-Type: image/jpeg Content-Location: http://img.s-msn.com/tenant/amp/entityid/BBiphG3?h=75&w=100&m=6&q=60&u=t&o=t&l=f&x=867&y=330 X-Source-Length: 244881 X-Datacenter: eastus X-ActivityId: aa3992e9-7655-44cd-8b4b-366cebb998f5 X-Instance: Resizer.Web_IN_5 X-Deployment: c610fbb33f2e4f88b789490c62db1a73 Timing-Allow-Origin: * X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Content-Length: 1519 ~U:informant +URL http://res2.windows.microsoft.com/resbox/en/internet%20explorer/main/faeeabcb-551d-42b8-bc2e-f7b80ae3da47_4.png 01/23/2014 15:38:37 03/22/2015 11:09:19 faeeabcb-551d-42b8-bc2e-f7b80ae3da47_4[1].png 7PBK2Z4C HTTP/1.1 200 OK Content-Type: image/png X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET X-Content-Type-Options: nosniff Content-Length: 6266 ~U:informant +URL http://cdn.adnxs.com/v/s/13/trk.js 02/17/2015 11:13:05 03/22/2015 11:09:03 trk[1].js 4C689SI3 HTTP/1.1 200 OK ETag: "eb5262dbb103521bf06ff1b69e02f828:1424189585" Content-Type: application/x-javascript Content-Length: 51861 ~U:informant +URL http://res2.windows.microsoft.com/resources/4.2/wol/shared/images/merged/gl_social.svg 12/09/2013 15:04:32 03/22/2015 11:10:23 gl_social[1].svg 4C689SI3 HTTP/1.1 200 OK Content-Type: image/svg+xml ETag: "088eadf19f5ce1:0" X-Powered-By: ASP.NET X-Content-Type-Options: nosniff Access-Control-Allow-Origin: * Content-Length: 3269 ~U:informant +URL https://www.google.com/?gws_rd=ssl 03/22/2015 11:09:37 google_com[1].htm 4C689SI3 HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 P3P: CP="This is not a P3P policy! See http://www.google.com/support/accounts/bin/answer.py?hl=en&answer=151657 for more info." X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Alternate-Protocol: 443:quic,p=0.5 Transfer-Encoding: chunked ~U:informant +URL https://www.google.com/images/srpr/nav_logo80.png 11/09/2012 16:19:30 03/22/2015 11:10:52 nav_logo80[1].png DUBW47SE HTTP/1.1 200 OK Content-Type: image/png X-Content-Type-Options: nosniff Content-Length: 35615 X-XSS-Protection: 1; mode=block Alternate-Protocol: 443:quic,p=0.5 ~U:informant +URL https://clients1.google.com/complete/search?client=heirloom-hp&hl=en&sugexp=msedr&gs_rn=34&gs_ri=heirloom-hp&cp=10&gs_id=v&q=internet%20e&gs_gbg=oNM699B6 03/22/2015 11:09:44 f[3].txt 7PBK2Z4C HTTP/1.1 200 OK Content-Type: text/javascript; charset=UTF-8 Content-Disposition: attachment; filename="f.txt" X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Alternate-Protocol: 443:quic,p=0.5 Transfer-Encoding: chunked ~U:informant +URL http://static-hp-eus.s-msn.com/en-us/homepage/_sc/js/6670b51d-245bff56/direction=ltr.locales=en-us.themes=start.dpi=resolution1x/77-1b874c-55f4847b/86-2bc290-4cae40a2/55-300a76-68ddb2ab/dd-f6dce3-71a2afc2/finance-js-45-93ed8bb3fb55a96556fc791616b51e-e5780970/70-bc3872-177cf897?ver=2.0.5557.39756&fdhead=muidflt3cf&ocid=iehp 03/23/2015 02:57:42 03/22/2015 11:09:02 70-bc3872-177cf897[1] E9RPI3E2 HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 X-AspNetMvc-Version: 5.2 X-AppVersion: 2.0.5557.39756 X-Activity-Id: 00000000-93d7-4c0e-8aee-dcc451fe1fff X-Az: {did:f08db8f3b6194a418d4507ddba3fea60, rid: 165, sn: eastus-hp, dt: 2015-03-23T06:22:26.8508950Z, bt: O} X-Content-Type-Options: nosniff X-FRAME-OPTIONS: SAMEORIGIN X-S1: 2015-03-23T06:57:42 X-S2: 2015-03-23T06:57:42 Timing-Allow-Origin: * Access-Control-Allow-Origin: * X-Powered-By: ASP.NET Access-Control-Allow-Methods: HEAD,GET,OPTIONS X-XSS-Protection: 1 Content-Length: 180068 ~U:informant +URL http://img.s-msn.com/tenant/amp/entityid/BBiAtof.img?h=75&w=100&m=6&q=60&u=t&o=t&l=f&f=jpg&x=1581&y=812 03/22/2015 22:23:10 03/22/2015 11:09:03 BBiAtof[1].jpg 7PBK2Z4C HTTP/1.1 200 OK Content-Type: image/jpeg Content-Location: http://img.s-msn.com/tenant/amp/entityid/BBiAtof?h=75&w=100&m=6&q=60&u=t&o=t&l=f&f=jpg&x=1581&y=812 X-Source-Length: 347368 X-Datacenter: eastus X-ActivityId: 90dc4092-0237-4ced-a351-cc78bcc32cfb X-Instance: Resizer.Web_IN_11 X-Deployment: c610fbb33f2e4f88b789490c62db1a73 Timing-Allow-Origin: * X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Content-Length: 2279 ~U:informant +URL http://img.s-msn.com/tenant/amp/entityid/AA9tx0G.img?h=75&w=100&m=6&q=60&u=t&o=t&l=f 03/23/2015 04:03:31 03/22/2015 11:09:18 AA9tx0G[1].jpg 7PBK2Z4C HTTP/1.1 200 OK Content-Type: image/jpeg Content-Location: http://img.s-msn.com/tenant/amp/entityid/AA9tx0G?h=75&w=100&m=6&q=60&u=t&o=t&l=f X-Source-Length: 8051 X-Datacenter: eastus X-ActivityId: a0e0aedb-68dd-4612-9ab3-a112af46ad10 X-Instance: Resizer.Web_IN_2 X-Deployment: c610fbb33f2e4f88b789490c62db1a73 Timing-Allow-Origin: * X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Content-Length: 2250 ~U:informant +URL http://img.s-msn.com/tenant/amp/entityid/BBi6pvi.img?h=75&w=100&m=6&q=60&u=t&o=t&l=f&x=192&y=264 03/22/2015 02:32:17 03/22/2015 11:09:18 BBi6pvi[1].jpg 7PBK2Z4C HTTP/1.1 200 OK Content-Type: image/jpeg Content-Location: http://img.s-msn.com/tenant/amp/entityid/BBi6pvi?h=75&w=100&m=6&q=60&u=t&o=t&l=f&x=192&y=264 X-Source-Length: 28820 X-Datacenter: eastus X-ActivityId: 8dc0a941-c381-419e-a364-9f9a3eb3dc1f X-Instance: Resizer.Web_IN_9 X-Deployment: c610fbb33f2e4f88b789490c62db1a73 Timing-Allow-Origin: * X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Content-Length: 2018 ~U:informant +URL http://img.s-msn.com/tenant/amp/entityid/BBimjCJ.img?h=75&w=100&m=6&q=60&u=t&o=t&l=f 03/23/2015 00:58:35 03/22/2015 11:09:18 BBimjCJ[1].jpg 4C689SI3 HTTP/1.1 200 OK X-Datacenter: eastus X-ActivityId: 5841739c-ab79-4d43-90bf-ffad962819d6 X-Instance: Resizer.Web_IN_6 X-Deployment: c610fbb33f2e4f88b789490c62db1a73 Timing-Allow-Origin: * X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Content-Type: image/jpeg Content-Location: http://img.s-msn.com/tenant/amp/entityid/BBimjCJ?h=75&w=100&m=6&q=60&u=t&o=t&l=f X-Source-Length: 357079 Content-Length: 2591 ~U:informant +URL https://clients1.google.com/complete/search?client=heirloom-hp&hl=en&sugexp=msedr&gs_rn=34&gs_ri=heirloom-hp&cp=1&gs_id=4&q=i&gs_gbg=Ud4I84VhLe2Y 03/22/2015 11:09:43 f[1].txt 7PBK2Z4C HTTP/1.1 200 OK Content-Type: text/javascript; charset=UTF-8 Content-Disposition: attachment; filename="f.txt" X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Alternate-Protocol: 443:quic,p=0.5 Transfer-Encoding: chunked ~U:informant +URL https://clients1.google.com/complete/search?client=heirloom-hp&hl=en&sugexp=msedr&gs_rn=34&gs_ri=heirloom-hp&cp=7&gs_id=m&q=interne&gs_gbg=XI0O6E0UA4Plr30JLx 03/22/2015 11:09:44 f[3].txt DUBW47SE HTTP/1.1 200 OK Content-Type: text/javascript; charset=UTF-8 Content-Disposition: attachment; filename="f.txt" X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Alternate-Protocol: 443:quic,p=0.5 Transfer-Encoding: chunked ~U:informant +URL http://img.s-msn.com/tenant/amp/entityid/BBiytP8.img?h=75&w=100&m=6&q=60&u=t&o=t&l=f&x=1376&y=749 03/21/2015 22:05:50 03/22/2015 11:09:18 BBiytP8[1].jpg DUBW47SE HTTP/1.1 200 OK Content-Type: image/jpeg Content-Location: http://img.s-msn.com/tenant/amp/entityid/BBiytP8?h=75&w=100&m=6&q=60&u=t&o=t&l=f&x=1376&y=749 X-Source-Length: 409672 X-Datacenter: eastus X-ActivityId: 3cc40800-d559-4ac0-a63b-6ccbc600914d X-Instance: Resizer.Web_IN_1 X-Deployment: c610fbb33f2e4f88b789490c62db1a73 Timing-Allow-Origin: * X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Content-Length: 2594 ~U:informant +URL http://img.s-msn.com/tenant/amp/entityid/BB1FUYS.img?h=16&w=16&m=6&q=60&u=t&o=t&l=f&f=png 03/20/2015 10:00:42 03/22/2015 11:09:18 BB1FUYS[1].png 7PBK2Z4C HTTP/1.1 200 OK X-Datacenter: eastus X-ActivityId: 3365b239-f953-4043-9b44-822c8ac7c5a8 X-Instance: Resizer.Web_IN_11 X-Deployment: c610fbb33f2e4f88b789490c62db1a73 Timing-Allow-Origin: * X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Content-Type: image/png Content-Location: http://img.s-msn.com/tenant/amp/entityid/BB1FUYS?h=16&w=16&m=6&q=60&u=t&o=t&l=f&f=png X-Source-Length: 351 Content-Length: 466 ~U:informant +URL http://img.s-msn.com/tenant/amp/entityid/AA42mEQ.img?h=16&w=16&m=6&q=60&u=t&o=t&l=f&f=png 03/19/2015 03:27:08 03/22/2015 11:09:18 AA42mEQ[1].png 4C689SI3 HTTP/1.1 200 OK X-Datacenter: eastus X-ActivityId: 37d140f3-9373-4bf5-b80a-cbf692ce888a X-Instance: Resizer.Web_IN_8 X-Deployment: c610fbb33f2e4f88b789490c62db1a73 Timing-Allow-Origin: * X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Content-Type: image/png Content-Location: http://img.s-msn.com/tenant/amp/entityid/AA42mEQ?h=16&w=16&m=6&q=60&u=t&o=t&l=f&f=png X-Source-Length: 3116 Content-Length: 482 ~U:informant +URL https://clients1.google.com/complete/search?client=heirloom-hp&hl=en&sugexp=msedr&gs_rn=34&gs_ri=heirloom-hp&cp=11&gs_id=y&q=internet%20ex&gs_gbg=dc0i 03/22/2015 11:09:44 f[4].txt 4C689SI3 HTTP/1.1 200 OK Content-Type: text/javascript; charset=UTF-8 Content-Disposition: attachment; filename="f.txt" X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Alternate-Protocol: 443:quic,p=0.5 Transfer-Encoding: chunked ~U:informant +URL http://res2.windows.microsoft.com/resbox/en/windows/main/03df314e-c18c-4d6c-9b89-f5490b1b5c0b_17.png 09/03/2014 12:51:45 03/22/2015 11:10:23 03df314e-c18c-4d6c-9b89-f5490b1b5c0b_17[1].png 7PBK2Z4C HTTP/1.1 200 OK Content-Type: image/png X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET X-Content-Type-Options: nosniff Content-Length: 1461 ~U:informant +URL https://www.google.com/chrome/assets/consumer/images/tiffany/thumbs/story.jpg 08/27/2012 17:03:40 03/22/2015 11:10:54 story[1].jpg 7PBK2Z4C HTTP/1.1 200 OK Content-Type: image/jpeg X-Content-Type-Options: nosniff Content-Length: 4266 X-XSS-Protection: 1; mode=block Alternate-Protocol: 443:quic,p=0.5 ~U:informant +URL https://www.google.com/chrome/assets/consumer/images/tiffany/thumbs/sss.png 02/27/2013 11:32:59 03/22/2015 11:10:54 sss[1].png DUBW47SE HTTP/1.1 200 OK Content-Type: image/png X-Content-Type-Options: nosniff Content-Length: 5014 X-XSS-Protection: 1; mode=block Alternate-Protocol: 443:quic,p=0.5 ~U:informant +URL https://clients1.google.com/complete/search?client=heirloom-hp&hl=en&sugexp=msedr&gs_rn=34&gs_ri=heirloom-hp&cp=18&gs_id=1j&q=internet%20explorer%20&gs_gbg=1dv7b12pXQu4GH9sX34NO5JZbgYy4BK 03/22/2015 11:09:45 f[4].txt DUBW47SE HTTP/1.1 200 OK Content-Type: text/javascript; charset=UTF-8 Content-Disposition: attachment; filename="f.txt" X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Alternate-Protocol: 443:quic,p=0.5 Transfer-Encoding: chunked ~U:informant +URL https://www.gstatic.com/external_hosted/threejs-r49/Three.js 01/31/2013 15:21:46 03/22/2015 11:10:54 Three[1].js 7PBK2Z4C HTTP/1.1 200 OK Content-Type: text/javascript X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Alternate-Protocol: 443:quic,p=0.5 Content-Length: 365261 ~U:informant +URL https://www.google.com/chrome/assets/consumer/images/tiffany/thumbs/spellup.png 05/13/2014 10:01:47 03/22/2015 11:10:54 spellup[1].png DUBW47SE HTTP/1.1 200 OK Content-Type: image/png X-Content-Type-Options: nosniff Content-Length: 1718 X-XSS-Protection: 1; mode=block Alternate-Protocol: 443:quic,p=0.5 ~U:informant +URL http://img.s-msn.com/tenant/amp/entityid/BBiC5ob.img?h=194&w=300&m=6&q=60&u=t&o=t&l=f 03/23/2015 10:48:26 03/22/2015 11:09:18 BBiC5ob[1].jpg 4C689SI3 HTTP/1.1 200 OK Content-Type: image/jpeg Content-Location: http://img.s-msn.com/tenant/amp/entityid/BBiC5ob?h=194&w=300&m=6&q=60&u=t&o=t&l=f X-Source-Length: 659080 X-Datacenter: eastus X-ActivityId: a7b038f3-6dc1-4b43-8a9b-e7c6f5cebe69 X-Instance: Resizer.Web_IN_14 X-Deployment: c610fbb33f2e4f88b789490c62db1a73 Timing-Allow-Origin: * X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Content-Length: 13069 ~U:informant +URL http://res1.windows.microsoft.com/resbox/en/internet%20explorer/main/55494218-ac03-4875-a911-6032365741c1_14.png 01/23/2014 12:43:38 03/22/2015 11:09:19 55494218-ac03-4875-a911-6032365741c1_14[1].png 4C689SI3 HTTP/1.1 200 OK Content-Type: image/png X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET X-Content-Type-Options: nosniff Content-Length: 271691 ~U:informant +URL https://www.google.com/logos/doodles/2015/emmy-noethers-133rd-birthday-5681045017985024-hp.jpg 03/18/2015 18:11:35 03/22/2015 11:10:51 emmy-noethers-133rd-birthday-5681045017985024-hp[1].jpg E9RPI3E2 HTTP/1.1 200 OK Content-Type: image/jpeg X-Content-Type-Options: nosniff Content-Length: 96566 X-XSS-Protection: 1; mode=block Alternate-Protocol: 443:quic,p=0.5 ~U:informant +URL http://www.google.com/url?url=http://windows.microsoft.com/en-us/internet-explorer/download-ie&rct=j&frm=1&q=&esrc=s&sa=U&ei=6ykQVZWLGbeJsQT7goDACg&ved=0CB8QFjAA&usg=AFQjCNEwsIz17kY-jTXbaWPcQDfBbVEi7A 03/22/2015 11:09:51 url[1].htm 7PBK2Z4C HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 X-XSS-Protection: 1; mode=block Alternate-Protocol: 80:quic,p=0.5 Content-Length: 1169 ~U:informant +URL https://www.google.com/chrome/assets/common/images/content/close-icon.png 03/13/2012 11:37:55 03/22/2015 11:11:12 close-icon[1].png E9RPI3E2 HTTP/1.1 200 OK Content-Type: image/png X-Content-Type-Options: nosniff Content-Length: 317 X-XSS-Protection: 1; mode=block Alternate-Protocol: 443:quic,p=0.5 ~U:informant +URL https://www.google.com/chrome/assets/consumer/images/tiffany/carousel/carousel-thumb-video.png 06/25/2012 15:04:10 03/22/2015 11:10:54 carousel-thumb-video[1].png E9RPI3E2 HTTP/1.1 200 OK Content-Type: image/png X-Content-Type-Options: nosniff Content-Length: 1042 X-XSS-Protection: 1; mode=block Alternate-Protocol: 443:quic,p=0.5 ~U:informant +URL https://ssl.gstatic.com/accounts/o/2006856415-postmessagerelay.js 03/16/2015 17:38:46 03/22/2015 11:11:13 2006856415-postmessagerelay[1].js 7PBK2Z4C HTTP/1.1 200 OK Content-Type: text/javascript X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Alternate-Protocol: 443:quic,p=0.5 Content-Length: 8522 ~U:informant +URL http://img.s-msn.com/tenant/amp/entityid/BB6Dp75.img?h=16&w=16&m=6&q=60&u=t&o=t&l=f&f=png 03/23/2015 08:35:32 03/22/2015 11:09:03 BB6Dp75[1].png 7PBK2Z4C HTTP/1.1 200 OK X-Datacenter: eastus X-ActivityId: 48ec24bb-8044-4a67-94a8-d9745dea4e0d X-Instance: Resizer.Web_IN_2 X-Deployment: c610fbb33f2e4f88b789490c62db1a73 Timing-Allow-Origin: * X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Content-Type: image/png Content-Location: http://img.s-msn.com/tenant/amp/entityid/BB6Dp75?h=16&w=16&m=6&q=60&u=t&o=t&l=f&f=png X-Source-Length: 3068 Content-Length: 384 ~U:informant +URL http://img.s-msn.com/tenant/amp/entityid/BBiC6Bn.img?h=75&w=100&m=6&q=60&u=t&o=t&l=f&x=317&y=509 03/23/2015 10:48:52 03/22/2015 11:09:18 BBiC6Bn[1].jpg 4C689SI3 HTTP/1.1 200 OK Content-Type: image/jpeg Content-Location: http://img.s-msn.com/tenant/amp/entityid/BBiC6Bn?h=75&w=100&m=6&q=60&u=t&o=t&l=f&x=317&y=509 X-Source-Length: 490716 X-Datacenter: eastus X-ActivityId: 6178283c-7ad4-49ab-9866-f18514fb76d8 X-Instance: Resizer.Web_IN_18 X-Deployment: c610fbb33f2e4f88b789490c62db1a73 Timing-Allow-Origin: * X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Content-Length: 1607 ~U:informant +URL http://img.s-msn.com/tenant/amp/entityid/BBivlpc.img?h=75&w=100&m=6&q=60&u=t&o=t&l=f 03/23/2015 03:01:06 03/22/2015 11:09:18 BBivlpc[1].jpg 4C689SI3 HTTP/1.1 200 OK Content-Type: image/jpeg Content-Location: http://img.s-msn.com/tenant/amp/entityid/BBivlpc?h=75&w=100&m=6&q=60&u=t&o=t&l=f X-Source-Length: 669322 X-Datacenter: eastus X-ActivityId: 0c80229c-a3dc-4fee-9fa1-caaa1cafb5f5 X-Instance: Resizer.Web_IN_0 X-Deployment: c610fbb33f2e4f88b789490c62db1a73 Timing-Allow-Origin: * X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Content-Length: 2201 ~U:informant +URL http://img.s-msn.com/tenant/amp/entityid/BB1Prxu.img?h=16&w=16&m=6&q=60&u=t&o=t&l=f&f=png 03/23/2015 09:52:04 03/22/2015 11:09:18 BB1Prxu[1].png DUBW47SE HTTP/1.1 200 OK X-Datacenter: eastus X-ActivityId: a4e5ce8d-d327-4808-a1db-9b57f5006cf3 X-Instance: Resizer.Web_IN_4 X-Deployment: c610fbb33f2e4f88b789490c62db1a73 Timing-Allow-Origin: * X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Content-Type: image/png Content-Location: http://img.s-msn.com/tenant/amp/entityid/BB1Prxu?h=16&w=16&m=6&q=60&u=t&o=t&l=f&f=png X-Source-Length: 675 Content-Length: 710 ~U:informant +URL http://img.s-msn.com/tenant/amp/entityid/BBivpfH.img?h=194&w=300&m=6&q=60&u=t&o=t&l=f 03/22/2015 19:13:28 03/22/2015 11:09:18 BBivpfH[1].jpg DUBW47SE HTTP/1.1 200 OK Content-Type: image/jpeg Content-Location: http://img.s-msn.com/tenant/amp/entityid/BBivpfH?h=194&w=300&m=6&q=60&u=t&o=t&l=f X-Source-Length: 62413 X-Datacenter: eastus X-ActivityId: e1aaea7c-1b11-4a2e-8c75-ed2859e5d85e X-Instance: Resizer.Web_IN_8 X-Deployment: c610fbb33f2e4f88b789490c62db1a73 Timing-Allow-Origin: * X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Content-Length: 7758 ~U:informant +URL https://www.google.com/chrome/assets/consumer/images/tiffany/thumbs/evolution.jpg 06/25/2012 15:04:10 03/22/2015 11:10:54 evolution[1].jpg 7PBK2Z4C HTTP/1.1 200 OK Content-Type: image/jpeg X-Content-Type-Options: nosniff Content-Length: 3393 X-XSS-Protection: 1; mode=block Alternate-Protocol: 443:quic,p=0.5 ~U:informant +URL https://www.google.com/chrome/assets/consumer/js/tiffany/tiffany.min.js 01/22/2015 17:35:28 03/22/2015 11:10:55 tiffany.min[1].js 4C689SI3 HTTP/1.1 200 OK Content-Type: text/javascript X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Alternate-Protocol: 443:quic,p=0.5 Transfer-Encoding: chunked ~U:informant +URL http://res2.windows.microsoft.com/resbox/en/internet%20explorer/main/747c11c9-c083-4d40-950c-a46cd0d47afe_25.jpg 11/19/2013 12:39:31 03/22/2015 11:09:52 747c11c9-c083-4d40-950c-a46cd0d47afe_25[1].jpg E9RPI3E2 HTTP/1.1 200 OK Content-Type: image/jpeg X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET X-Content-Type-Options: nosniff Content-Length: 35455 ~U:informant +URL https://fonts.googleapis.com/css?family=Open+Sans:300,400,600,700&subset=latin 03/22/2015 11:11:12 css[2].css E9RPI3E2 HTTP/1.1 200 OK Content-Type: text/css Timing-Allow-Origin: * Content-Length: 187 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block Alternate-Protocol: 443:quic,p=0.5 ~U:informant +URL https://www.google.com/chrome/assets/consumer/images/tiffany/browser/browser-spin-info.png 06/25/2012 15:04:10 03/22/2015 11:10:54 browser-spin-info[1].png DUBW47SE HTTP/1.1 200 OK Content-Type: image/png X-Content-Type-Options: nosniff Content-Length: 559 X-XSS-Protection: 1; mode=block Alternate-Protocol: 443:quic,p=0.5 ~U:informant +URL https://ssl.gstatic.com/s2/oz/images/sprites/plus-button-svg-9b2dfccb6db9dfc9b153277b81e1dec8.png 10/23/2013 17:45:02 03/22/2015 11:11:14 plus-button-svg-9b2dfccb6db9dfc9b153277b81e1dec8[1].png DUBW47SE HTTP/1.1 200 OK Content-Type: image/png X-Content-Type-Options: nosniff Content-Length: 1797 X-XSS-Protection: 1; mode=block Alternate-Protocol: 443:quic,p=0.5 ~U:informant +URL https://oauth.googleusercontent.com/gadgets/js/core:rpc:shindig.random:shindig.sha1.js?c=2 03/22/2015 11:11:14 core_rpc_shindig.random_shindig.sha1[1].js DUBW47SE HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block Alternate-Protocol: 443:quic,p=0.5 Content-Length: 68179 ~U:informant +URL http://img.s-msn.com/tenant/amp/entityid/AA9H9ZD.img?h=16&w=16&m=6&q=60&u=t&o=t&l=f&f=png 03/20/2015 23:59:34 03/22/2015 11:09:03 AA9H9ZD[1].png E9RPI3E2 HTTP/1.1 200 OK X-Datacenter: eastus X-ActivityId: bb42134f-0ce9-4cea-81d4-6ca9fddf9ff1 X-Instance: Resizer.Web_IN_0 X-Deployment: c610fbb33f2e4f88b789490c62db1a73 Timing-Allow-Origin: * X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Content-Type: image/png Content-Location: http://img.s-msn.com/tenant/amp/entityid/AA9H9ZD?h=16&w=16&m=6&q=60&u=t&o=t&l=f&f=png X-Source-Length: 385 Content-Length: 404 ~U:informant +URL http://img.s-msn.com/tenant/amp/entityid/AA3lqJx.img?h=16&w=16&m=6&q=60&u=t&o=t&l=f&f=png 03/23/2015 06:01:38 03/22/2015 11:09:18 AA3lqJx[1].png 4C689SI3 HTTP/1.1 200 OK X-Datacenter: eastus X-ActivityId: 75cadb9a-6950-40fa-a128-5277f11c412c X-Instance: Resizer.Web_IN_2 X-Deployment: c610fbb33f2e4f88b789490c62db1a73 Timing-Allow-Origin: * X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Content-Type: image/png Content-Location: http://img.s-msn.com/tenant/amp/entityid/AA3lqJx?h=16&w=16&m=6&q=60&u=t&o=t&l=f&f=png X-Source-Length: 423 Content-Length: 519 ~U:informant +URL http://img.s-msn.com/tenant/amp/entityid/BBip5DU.img?h=75&w=100&m=6&q=60&u=t&o=t&l=f&x=1283&y=703 03/19/2015 13:40:14 03/22/2015 11:09:18 BBip5DU[1].jpg E9RPI3E2 HTTP/1.1 200 OK Content-Type: image/jpeg Content-Location: http://img.s-msn.com/tenant/amp/entityid/BBip5DU?h=75&w=100&m=6&q=60&u=t&o=t&l=f&x=1283&y=703 X-Source-Length: 301212 X-Datacenter: eastus X-ActivityId: 2d0ef820-2b7b-46ca-890b-105baa936fd8 X-Instance: Resizer.Web_IN_0 X-Deployment: c610fbb33f2e4f88b789490c62db1a73 Timing-Allow-Origin: * X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Content-Length: 2516 ~U:informant +URL http://res2.windows.microsoft.com/resbox/en/windows/main/67706439-4969-4bc3-9e3b-50770f40b20e_42.js 05/22/2014 17:29:47 03/22/2015 11:10:22 67706439-4969-4bc3-9e3b-50770f40b20e_42[1].js E9RPI3E2 HTTP/1.1 200 OK Content-Type: application/javascript X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET X-Content-Type-Options: nosniff Content-Length: 1194 ~U:informant +URL http://img.s-msn.com/tenant/amp/entityid/BBik7kX.img?h=333&w=311&m=6&q=60&u=t&o=t&l=f&f=jpg&x=1392&y=968 03/23/2015 04:37:57 03/22/2015 11:09:19 BBik7kX[1].jpg 7PBK2Z4C HTTP/1.1 200 OK Content-Type: image/jpeg Content-Location: http://img.s-msn.com/tenant/amp/entityid/BBik7kX?h=333&w=311&m=6&q=60&u=t&o=t&l=f&f=jpg&x=1392&y=968 X-Source-Length: 702946 X-Datacenter: eastus X-ActivityId: 004cd239-2dc6-44f8-a4da-affa64039b8a X-Instance: Resizer.Web_IN_10 X-Deployment: c610fbb33f2e4f88b789490c62db1a73 Timing-Allow-Origin: * X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Content-Length: 18736 ~U:informant +URL res://ieframe.dll/about.js 03/22/2015 11:09:28 about[1] E9RPI3E2 +URL https://www.google.com/chrome/assets/common/images/chrome_logo_2x.png 09/17/2012 08:02:27 03/22/2015 11:11:12 chrome_logo_2x[1].png 7PBK2Z4C HTTP/1.1 200 OK Content-Type: image/png X-Content-Type-Options: nosniff Content-Length: 3920 X-XSS-Protection: 1; mode=block Alternate-Protocol: 443:quic,p=0.5 ~U:informant +URL http://img.s-msn.com/tenant/amp/entityid/BBioS3I.img?h=75&w=100&m=6&q=60&u=t&o=t&l=f&f=jpg&x=744&y=631 03/23/2015 03:55:09 03/22/2015 11:09:03 BBioS3I[1].jpg 7PBK2Z4C HTTP/1.1 200 OK X-Datacenter: eastus X-ActivityId: 03549d09-e9f8-4e82-98fb-acf0847dba13 X-Instance: Resizer.Web_IN_7 X-Deployment: c610fbb33f2e4f88b789490c62db1a73 Timing-Allow-Origin: * X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Content-Type: image/jpeg Content-Location: http://img.s-msn.com/tenant/amp/entityid/BBioS3I?h=75&w=100&m=6&q=60&u=t&o=t&l=f&f=jpg&x=744&y=631 X-Source-Length: 807428 Content-Length: 2550 ~U:informant +URL http://img.s-msn.com/tenant/amp/entityid/BBiyEnw.img?h=75&w=100&m=6&q=60&u=t&o=t&l=f&x=538&y=230 03/22/2015 04:17:10 03/22/2015 11:09:18 BBiyEnw[1].jpg 4C689SI3 HTTP/1.1 200 OK Content-Type: image/jpeg Content-Location: http://img.s-msn.com/tenant/amp/entityid/BBiyEnw?h=75&w=100&m=6&q=60&u=t&o=t&l=f&x=538&y=230 X-Source-Length: 184682 X-Datacenter: eastus X-ActivityId: 89f46730-25fd-4256-8204-ddfb795ec8c5 X-Instance: Resizer.Web_IN_10 X-Deployment: c610fbb33f2e4f88b789490c62db1a73 Timing-Allow-Origin: * X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Content-Length: 2314 ~U:informant +URL http://img.s-msn.com/tenant/amp/entityid/AA9QA7z.img?h=75&w=100&m=6&q=60&u=t&o=t&l=f 03/21/2015 10:18:12 03/22/2015 11:09:18 AA9QA7z[1].jpg 4C689SI3 HTTP/1.1 200 OK Content-Type: image/jpeg Content-Location: http://img.s-msn.com/tenant/amp/entityid/AA9QA7z?h=75&w=100&m=6&q=60&u=t&o=t&l=f X-Source-Length: 62570 X-Datacenter: eastus X-ActivityId: 8da702c6-7e72-4652-aac6-c66889ace9ac X-Instance: Resizer.Web_IN_2 X-Deployment: c610fbb33f2e4f88b789490c62db1a73 Timing-Allow-Origin: * X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Content-Length: 1728 ~U:informant +URL http://res1.windows.microsoft.com/resbox/en/windows/main/93e33485-fea3-4687-a642-2c5dd233522f_12.eot? 07/03/2013 14:25:43 03/22/2015 11:10:22 93e33485-fea3-4687-a642-2c5dd233522f_12[1].eot E9RPI3E2 HTTP/1.1 200 OK Content-Type: application/vnd.ms-fontobject Access-Control-Allow-Origin: * X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET X-Content-Type-Options: nosniff Content-Length: 31346 ~U:informant +URL http://img.s-msn.com/tenant/amp/entityid/AA3ltd9.img?h=16&w=16&m=6&q=60&u=t&o=t&l=f&f=png 03/23/2015 08:01:11 03/22/2015 11:09:18 AA3ltd9[1].png DUBW47SE HTTP/1.1 200 OK X-Datacenter: eastus X-ActivityId: 5a15c479-911f-4fc6-be39-302a46ee7108 X-Instance: Resizer.Web_IN_6 X-Deployment: c610fbb33f2e4f88b789490c62db1a73 Timing-Allow-Origin: * X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Content-Type: image/png Content-Location: http://img.s-msn.com/tenant/amp/entityid/AA3ltd9?h=16&w=16&m=6&q=60&u=t&o=t&l=f&f=png X-Source-Length: 369 Content-Length: 411 ~U:informant +URL http://img.s-msn.com/tenant/amp/entityid/AA9sPuy.img?h=75&w=100&m=6&q=60&u=t&o=t&l=f 03/19/2015 17:29:33 03/22/2015 11:09:18 AA9sPuy[1].jpg E9RPI3E2 HTTP/1.1 200 OK Content-Type: image/jpeg Content-Location: http://img.s-msn.com/tenant/amp/entityid/AA9sPuy?h=75&w=100&m=6&q=60&u=t&o=t&l=f X-Source-Length: 666774 X-Datacenter: eastus X-ActivityId: 56c6c179-5157-4d2f-b76b-faba81dc5d39 X-Instance: Resizer.Web_IN_8 X-Deployment: c610fbb33f2e4f88b789490c62db1a73 Timing-Allow-Origin: * X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Content-Length: 2604 ~U:informant +URL http://img.s-msn.com/tenant/amp/entityid/BBgX3ni.img?h=16&w=16&m=6&q=60&u=t&o=t&l=f&f=png 03/23/2015 05:20:09 03/22/2015 11:09:30 BBgX3ni[1].png DUBW47SE HTTP/1.1 200 OK X-Datacenter: eastus X-ActivityId: 19f0f2a3-4e02-4516-9314-b41b58cd4c4b X-Instance: Resizer.Web_IN_3 X-Deployment: c610fbb33f2e4f88b789490c62db1a73 Timing-Allow-Origin: * X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Content-Type: image/png Content-Location: http://img.s-msn.com/tenant/amp/entityid/BBgX3ni?h=16&w=16&m=6&q=60&u=t&o=t&l=f&f=png X-Source-Length: 442 Content-Length: 483 ~U:informant +URL http://img.s-msn.com/tenant/amp/entityid/BBiqU1f.img?h=75&w=100&m=6&q=60&u=t&o=t&l=f&f=jpg 03/19/2015 10:35:25 03/22/2015 11:09:03 BBiqU1f[1].jpg 7PBK2Z4C HTTP/1.1 200 OK Content-Type: image/jpeg Content-Location: http://img.s-msn.com/tenant/amp/entityid/BBiqU1f?h=75&w=100&m=6&q=60&u=t&o=t&l=f&f=jpg X-Source-Length: 232585 X-Datacenter: eastus X-ActivityId: 5369a4af-66ff-4ac6-abc6-670568dcb98c X-Instance: Resizer.Web_IN_7 X-Deployment: c610fbb33f2e4f88b789490c62db1a73 Timing-Allow-Origin: * X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Content-Length: 2702 ~U:informant +URL http://windows.microsoft.com/scripts/4.2/wol/ClientBiSettings.Wol.js?t=1427036400000 09/13/2013 03:17:38 03/22/2015 11:10:23 ClientBiSettings.Wol[1].js E9RPI3E2 HTTP/1.1 200 OK Content-Type: text/javascript ETag: "0157f5351b0ce1:0" X-Powered-By: ASP.NET X-Content-Type-Options: nosniff Access-Control-Allow-Origin: * Content-Length: 389 ~U:informant +URL https://clients1.google.com/complete/search?client=heirloom-hp&hl=en&sugexp=msedr&gs_rn=34&gs_ri=heirloom-hp&cp=19&gs_id=1m&q=internet%20explorer%201&gs_gbg=5I3Z0y3d7l116Sm9Pk 03/22/2015 11:09:46 f[3].txt E9RPI3E2 HTTP/1.1 200 OK Content-Type: text/javascript; charset=UTF-8 Content-Disposition: attachment; filename="f.txt" X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Alternate-Protocol: 443:quic,p=0.5 Transfer-Encoding: chunked ~U:informant +URL https://www.gstatic.com/external_hosted/modernizr/modernizr.js 12/11/2012 22:51:46 03/22/2015 11:11:13 modernizr[1].js 7PBK2Z4C HTTP/1.1 200 OK Content-Type: text/javascript X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Alternate-Protocol: 443:quic,p=0.5 Content-Length: 18121 ~U:informant +URL http://cdn.adnxs.com/msft/ContainerTag.js?tag_id=3282770&domain=pixelus.alephd.com&switch=on&height=90&width=728&user_id=3052188718541915848&bid_price=1.033449&price_paid=1.033449&reserve_price=0.45&auction_id=6431624833605973326&publisher_id=&site_id=804502&creative_id=24886359&ecp=10&user_ip=129.6.58.42&pmt_rule_id=56036&user_city=Gaithersburg&user_country=US&use_cookies=1&carrier_id=1&referer_url= 03/04/2015 13:01:29 03/22/2015 11:09:03 ContainerTag[1].js DUBW47SE HTTP/1.1 200 OK ETag: "113f8a5aa6f061f0047ef448527790bf:1425492089" Content-Type: application/x-javascript Content-Length: 1311 ~U:informant +URL http://img.s-msn.com/tenant/amp/entityid/BBdi2hw.img?h=75&w=100&m=6&q=60&u=t&o=t&l=f&x=316&y=185 03/22/2015 12:32:40 03/22/2015 11:09:18 BBdi2hw[1].jpg 7PBK2Z4C HTTP/1.1 200 OK Content-Type: image/jpeg Content-Location: http://img.s-msn.com/tenant/amp/entityid/BBdi2hw?h=75&w=100&m=6&q=60&u=t&o=t&l=f&x=316&y=185 X-Source-Length: 59734 X-Datacenter: eastus X-ActivityId: 4d637e00-235b-411e-bd8b-c12261940930 X-Instance: Resizer.Web_IN_11 X-Deployment: c610fbb33f2e4f88b789490c62db1a73 Timing-Allow-Origin: * X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Content-Length: 2302 ~U:informant +URL http://img.s-msn.com/tenant/amp/entityid/AA9Eys7.img?h=75&w=100&m=6&q=60&u=t&o=t&l=f&x=1270&y=944 03/21/2015 09:24:14 03/22/2015 11:09:18 AA9Eys7[1].jpg DUBW47SE HTTP/1.1 200 OK X-Datacenter: eastus X-ActivityId: 1eb9ce9c-2825-483e-9a34-906521b2b2b2 X-Instance: Resizer.Web_IN_8 X-Deployment: c610fbb33f2e4f88b789490c62db1a73 Timing-Allow-Origin: * X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Content-Type: image/jpeg Content-Location: http://img.s-msn.com/tenant/amp/entityid/AA9Eys7?h=75&w=100&m=6&q=60&u=t&o=t&l=f&x=1270&y=944 X-Source-Length: 293003 Content-Length: 2356 ~U:informant +URL http://res2.windows.microsoft.com/resbox/en/windows/main/736e3781-6a19-4119-b717-e61f0d8982c0_12.eot? 07/03/2013 14:25:43 03/22/2015 11:10:22 736e3781-6a19-4119-b717-e61f0d8982c0_12[1].eot E9RPI3E2 HTTP/1.1 200 OK Content-Type: application/vnd.ms-fontobject Access-Control-Allow-Origin: * X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET X-Content-Type-Options: nosniff Content-Length: 28923 ~U:informant +URL https://clients1.google.com/complete/search?client=heirloom-hp&hl=en&sugexp=msedr&gs_rn=34&gs_ri=heirloom-hp&cp=5&gs_id=f&q=inter&gs_gbg=Lr6vfqgQlW1re1jrXlO16 03/22/2015 11:09:43 f[2].txt 7PBK2Z4C HTTP/1.1 200 OK Content-Type: text/javascript; charset=UTF-8 Content-Disposition: attachment; filename="f.txt" X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Alternate-Protocol: 443:quic,p=0.5 Transfer-Encoding: chunked ~U:informant +URL http://res1.windows.microsoft.com/resbox/en/windows/main/ab21605f-82f5-4052-8125-d13b96cc9075_5.png 12/03/2014 17:49:33 03/22/2015 11:10:23 ab21605f-82f5-4052-8125-d13b96cc9075_5[1].png E9RPI3E2 HTTP/1.1 200 OK Content-Type: image/png X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET X-Content-Type-Options: nosniff Content-Length: 3391 ~U:informant +URL http://h2.msn.com/CIS/18/000/000/000/040/613.gif 03/22/2015 11:09:02 613[1].gif 4C689SI3 HTTP/1.1 200 OK Content-Type: image/gif X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Content-Length: 13128 ~U:informant +URL http://img.s-msn.com/tenant/amp/entityid/BB7785z.img?h=75&w=100&m=6&q=60&u=t&o=t&l=f&x=935&y=814 03/14/2015 01:48:27 03/22/2015 11:09:18 BB7785z[1].jpg 7PBK2Z4C HTTP/1.1 200 OK X-Datacenter: eastus X-ActivityId: dd7ec8cd-3c10-492d-b1a4-ceacc5f215d0 X-Instance: Resizer.Web_IN_0 X-Deployment: c610fbb33f2e4f88b789490c62db1a73 Timing-Allow-Origin: * X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Content-Type: image/jpeg Content-Location: http://img.s-msn.com/tenant/amp/entityid/BB7785z?h=75&w=100&m=6&q=60&u=t&o=t&l=f&x=935&y=814 X-Source-Length: 219746 Content-Length: 1874 ~U:informant +URL http://res2.windows.microsoft.com/resources/4.2/wol/shared/images/merged/gl_social.png 04/29/2014 02:16:24 03/22/2015 11:10:31 gl_social[1].png 7PBK2Z4C HTTP/1.1 200 OK Content-Type: image/png ETag: "02cce8b7263cf1:0" X-Powered-By: ASP.NET X-Content-Type-Options: nosniff Access-Control-Allow-Origin: * Content-Length: 1397 ~U:informant +URL http://res1.windows.microsoft.com/siteresources/siteresource.ashx?id=AtlasFrameScripts&hash=b8e04233157003161e5885b423599659e6c4373c7f003e5dba858991c7e76a99 02/04/2014 19:45:15 03/22/2015 11:10:22 siteresource[1].ashx DUBW47SE HTTP/1.1 200 OK Content-Type: application/javascript X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Content-Length: 6142 ~U:informant +URL http://windows.microsoft.com/en-us/internet-explorer/ie-11-worldwide-languages 03/22/2015 21:35:38 03/22/2015 11:10:22 ie-11-worldwide-languages[1].htm 4C689SI3 HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET X-Content-Type-Options: nosniff X-UA-Compatible: IE=11 Content-Length: 350041 ~U:informant +URL https://www.google.com/chrome/index.html?hl=en&brand=CHNG&utm_source=en-hpp&utm_medium=hpp&utm_campaign=en 02/02/2015 15:34:37 03/22/2015 11:10:53 index[1].htm DUBW47SE HTTP/1.1 200 OK Content-Type: text/html X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Alternate-Protocol: 443:quic,p=0.5 Transfer-Encoding: chunked ~U:informant +URL https://www.google.com/tools/dlpage/res/chrome/images/chrome_throbber_fast_16.gif 08/26/2008 16:48:06 03/22/2015 11:11:12 chrome_throbber_fast_16[1].gif DUBW47SE HTTP/1.1 200 OK Content-Type: image/gif Content-Length: 1548 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block Alternate-Protocol: 443:quic,p=0.5 ~U:informant +URL http://img.s-msn.com/tenant/amp/entityid/BBiLCz.img?h=16&w=16&m=6&q=60&u=t&o=t&l=f&f=png 03/22/2015 09:03:36 03/22/2015 11:09:18 BBiLCz[1].png DUBW47SE HTTP/1.1 200 OK X-Datacenter: eastus X-ActivityId: 274ff114-3e97-4b73-a72d-30fa8dad3e74 X-Instance: Resizer.Web_IN_7 X-Deployment: c610fbb33f2e4f88b789490c62db1a73 Timing-Allow-Origin: * X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Content-Type: image/png Content-Location: http://img.s-msn.com/tenant/amp/entityid/BBiLCz?h=16&w=16&m=6&q=60&u=t&o=t&l=f&f=png X-Source-Length: 288 Content-Length: 382 ~U:informant +URL http://img.s-msn.com/tenant/amp/entityid/BB1T53B.img?h=16&w=16&m=6&q=60&u=t&o=t&l=f&f=png 03/23/2015 08:30:08 03/22/2015 11:09:18 BB1T53B[1].png E9RPI3E2 HTTP/1.1 200 OK X-Datacenter: eastus X-ActivityId: 56b88d9b-a7fc-4011-a177-3b18dade3850 X-Instance: Resizer.Web_IN_8 X-Deployment: c610fbb33f2e4f88b789490c62db1a73 Timing-Allow-Origin: * X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Content-Type: image/png Content-Location: http://img.s-msn.com/tenant/amp/entityid/BB1T53B?h=16&w=16&m=6&q=60&u=t&o=t&l=f&f=png X-Source-Length: 509 Content-Length: 591 ~U:informant +URL http://img.s-msn.com/tenant/amp/entityid/BBivSbK.img?h=194&w=300&m=6&q=60&u=t&o=t&l=f&x=1016&y=367 03/23/2015 09:58:42 03/22/2015 11:09:18 BBivSbK[1].jpg 7PBK2Z4C HTTP/1.1 200 OK Content-Type: image/jpeg Content-Location: http://img.s-msn.com/tenant/amp/entityid/BBivSbK?h=194&w=300&m=6&q=60&u=t&o=t&l=f&x=1016&y=367 X-Source-Length: 258361 X-Datacenter: eastus X-ActivityId: 3108b931-74a6-4838-88f6-0175511a34b3 X-Instance: Resizer.Web_IN_11 X-Deployment: c610fbb33f2e4f88b789490c62db1a73 Timing-Allow-Origin: * X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Content-Length: 4862 ~U:informant +URL https://ssl.gstatic.com/gb/js/sem_cad439dbb41f1ffcf4bd69ea4aa642d9.js 03/10/2015 23:21:11 03/22/2015 11:10:52 sem_cad439dbb41f1ffcf4bd69ea4aa642d9[1].js 4C689SI3 HTTP/1.1 200 OK Content-Type: text/javascript X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Alternate-Protocol: 443:quic,p=0.5 Content-Length: 52551 ~U:informant +URL http://img.s-msn.com/tenant/amp/entityid/BBiApFJ.img?h=250&w=206&m=6&q=60&u=t&o=t&l=f&f=jpg&x=381&y=186 03/23/2015 10:20:49 03/22/2015 11:09:02 BBiApFJ[1].jpg 7PBK2Z4C HTTP/1.1 200 OK Content-Type: image/jpeg Content-Location: http://img.s-msn.com/tenant/amp/entityid/BBiApFJ?h=250&w=206&m=6&q=60&u=t&o=t&l=f&f=jpg&x=381&y=186 X-Source-Length: 145063 X-Datacenter: eastus X-ActivityId: ad42d712-c67f-4385-a231-068e853d0bea X-Instance: Resizer.Web_IN_19 X-Deployment: c610fbb33f2e4f88b789490c62db1a73 Timing-Allow-Origin: * X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Content-Length: 6459 ~U:informant +URL http://img.s-msn.com/tenant/amp/entityid/AA5KWCN.img?h=16&w=16&m=6&q=60&u=t&o=t&l=f&f=png 03/23/2015 05:14:31 03/22/2015 11:09:18 AA5KWCN[1].png E9RPI3E2 HTTP/1.1 200 OK X-Datacenter: eastus X-ActivityId: b3abcec3-c961-4cd9-88e1-a30246c2fe9f X-Instance: Resizer.Web_IN_3 X-Deployment: c610fbb33f2e4f88b789490c62db1a73 Timing-Allow-Origin: * X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Content-Type: image/png Content-Location: http://img.s-msn.com/tenant/amp/entityid/AA5KWCN?h=16&w=16&m=6&q=60&u=t&o=t&l=f&f=png X-Source-Length: 453 Content-Length: 587 ~U:informant +URL http://img.s-msn.com/tenant/amp/entityid/BBiBObG.img?h=333&w=311&m=6&q=60&u=t&o=t&l=f&f=jpg&x=1033&y=473 03/23/2015 10:23:47 03/22/2015 11:09:30 BBiBObG[1].jpg E9RPI3E2 HTTP/1.1 200 OK Content-Type: image/jpeg Content-Location: http://img.s-msn.com/tenant/amp/entityid/BBiBObG?h=333&w=311&m=6&q=60&u=t&o=t&l=f&f=jpg&x=1033&y=473 X-Source-Length: 597043 X-Datacenter: eastus X-ActivityId: 5ff2b252-b17a-486b-8ee6-4247834439e1 X-Instance: Resizer.Web_IN_15 X-Deployment: c610fbb33f2e4f88b789490c62db1a73 Timing-Allow-Origin: * X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Content-Length: 14830 ~U:informant +URL http://js.microsoft.com/library/svy/windows/broker-config.js?1427037004736 03/18/2015 11:27:17 03/22/2015 11:10:04 broker-config[1].js 7PBK2Z4C HTTP/1.1 200 OK Content-Type: application/x-javascript ETag: "80f85a49061d01:0" VTag: 279450515900000000 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-Powered-By: ASP.NET Content-Length: 11630 ~U:informant +URL https://fonts.gstatic.com/s/opensans/v10/cJZKeOuBrn4kERxqtaUH3fY6323mHUZFJMgTvxaG2iE.eot 08/21/2014 14:06:58 03/22/2015 11:11:12 cJZKeOuBrn4kERxqtaUH3fY6323mHUZFJMgTvxaG2iE[1].eot 4C689SI3 HTTP/1.1 200 OK Content-Type: font/eot Access-Control-Allow-Origin: * Timing-Allow-Origin: * X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Alternate-Protocol: 443:quic,p=0.5 Content-Length: 18218 ~U:informant +URL https://www.google.com/intl/en/chrome/browser/privacy/eula_text.html 12/09/2014 18:34:17 03/22/2015 11:11:12 eula_text[1].htm 4C689SI3 HTTP/1.1 200 OK Content-Type: text/html X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Alternate-Protocol: 443:quic,p=0.5 Transfer-Encoding: chunked ~U:informant +URL res://ieframe.dll/about.dlg 03/22/2015 11:09:28 about[1] DUBW47SE +URL http://img.s-msn.com/tenant/amp/entityid/BBiB7KA.img?h=166&w=310&m=6&q=60&u=t&o=t&l=f&f=jpg&x=1378&y=822 03/23/2015 06:21:01 03/22/2015 11:09:35 BBiB7KA[1].jpg 7PBK2Z4C HTTP/1.1 200 OK Content-Type: image/jpeg Content-Location: http://img.s-msn.com/tenant/amp/entityid/BBiB7KA?h=166&w=310&m=6&q=60&u=t&o=t&l=f&f=jpg&x=1378&y=822 X-Source-Length: 1370923 X-Datacenter: eastus X-ActivityId: e2dc89c5-8819-41b2-9970-480daa869fd0 X-Instance: Resizer.Web_IN_1 X-Deployment: c610fbb33f2e4f88b789490c62db1a73 Timing-Allow-Origin: * X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Content-Length: 9117 ~U:informant +URL https://www.google.com/images/nav_logo176.png 11/11/2013 12:33:19 03/22/2015 11:10:52 nav_logo176[1].png E9RPI3E2 HTTP/1.1 200 OK Content-Type: image/png X-Content-Type-Options: nosniff Content-Length: 14160 X-XSS-Protection: 1; mode=block Alternate-Protocol: 443:quic,p=0.5 ~U:informant +URL https://clients1.google.com/complete/search?client=heirloom-hp&hl=en&sugexp=msedr&gs_rn=34&gs_ri=heirloom-hp&cp=4&gs_id=d&q=inte&gs_gbg=Q3OiSp8 03/22/2015 11:09:43 f[1].txt E9RPI3E2 HTTP/1.1 200 OK Content-Type: text/javascript; charset=UTF-8 Content-Disposition: attachment; filename="f.txt" X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Alternate-Protocol: 443:quic,p=0.5 Transfer-Encoding: chunked ~U:informant +URL http://static-hp-eus.s-msn.com/_h/804ff984/webcore/externalscripts/jquery/jquery-1.11.1.min.js 11/26/2014 15:11:18 03/22/2015 11:09:02 jquery-1.11.1.min[1].js DUBW47SE HTTP/1.1 200 OK Content-Type: application/javascript X-AspNetMvc-Version: 5.2 X-AppVersion: 2.0.5442.29569 X-Activity-Id: 00000000-0a37-4f91-9e37-2a8a68645c34 X-Az: {did:f08db8f3b6194a418d4507ddba3fea60, rid: 346, sn: eastus-hp, dt: 2014-11-26T07:37:08.2902871Z, bt: 2014-11-26T00:26:06.1789107Z} X-Content-Type-Options: nosniff X-FRAME-OPTIONS: SAMEORIGIN X-Powered-By: ASP.NET Access-Control-Allow-Origin: * Access-Control-Allow-Methods: HEAD,GET,OPTIONS X-XSS-Protection: 1 Content-Length: 95786 ~U:informant +URL http://img.s-msn.com/tenant/amp/entityid/AA3dLwz.img?h=16&w=16&m=6&q=60&u=t&o=t&l=f&f=png 03/23/2015 08:54:25 03/22/2015 11:09:19 AA3dLwz[1].png 7PBK2Z4C HTTP/1.1 200 OK X-Datacenter: eastus X-ActivityId: a0d085a0-fd88-40b1-b42e-df7623b39fe2 X-Instance: Resizer.Web_IN_14 X-Deployment: c610fbb33f2e4f88b789490c62db1a73 Timing-Allow-Origin: * X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Content-Type: image/png Content-Location: http://img.s-msn.com/tenant/amp/entityid/AA3dLwz?h=16&w=16&m=6&q=60&u=t&o=t&l=f&f=png X-Source-Length: 481 Content-Length: 766 ~U:informant +URL http://res2.windows.microsoft.com/resbox/en/windows/main/3ef01e72-0832-46f0-a6e1-23f9d5a07d86_14.png 01/14/2014 11:06:16 03/22/2015 11:10:23 3ef01e72-0832-46f0-a6e1-23f9d5a07d86_14[1].png E9RPI3E2 HTTP/1.1 200 OK Content-Type: image/png X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET X-Content-Type-Options: nosniff Content-Length: 778 ~U:informant +URL https://www.google.com/chrome/assets/consumer/images/tiffany/thumbs/photowall.jpg 03/24/2014 14:02:51 03/22/2015 11:10:54 photowall[1].jpg E9RPI3E2 HTTP/1.1 200 OK Content-Type: image/jpeg X-Content-Type-Options: nosniff Content-Length: 6647 X-XSS-Protection: 1; mode=block Alternate-Protocol: 443:quic,p=0.5 ~U:informant +URL https://www.google.com/chrome/assets/consumer/images/tiffany/carousel/carousel-arrow-left.png 06/25/2012 15:04:10 03/22/2015 11:10:54 carousel-arrow-left[1].png DUBW47SE HTTP/1.1 200 OK Content-Type: image/png X-Content-Type-Options: nosniff Content-Length: 223 X-XSS-Protection: 1; mode=block Alternate-Protocol: 443:quic,p=0.5 ~U:informant +URL https://www.google.com/chrome/assets/consumer/images/tiffany/featured/awesomebook_feat.jpg 10/08/2012 16:33:49 03/22/2015 11:10:55 awesomebook_feat[1].jpg E9RPI3E2 HTTP/1.1 200 OK Content-Type: image/jpeg X-Content-Type-Options: nosniff Content-Length: 279879 X-XSS-Protection: 1; mode=block Alternate-Protocol: 443:quic,p=0.5 ~U:informant +URL https://www.google.com/chrome/assets/common/js/chrome-installer.min.js 01/20/2015 14:34:37 03/22/2015 11:11:13 chrome-installer.min[1].js E9RPI3E2 HTTP/1.1 200 OK Content-Type: text/javascript X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Alternate-Protocol: 443:quic,p=0.5 Transfer-Encoding: chunked ~U:informant +URL http://img.s-msn.com/tenant/amp/entityid/BBiAI1e.img?h=368&w=522&m=6&q=60&u=t&o=t&l=f&f=jpg&x=1061&y=352 03/23/2015 00:48:05 03/22/2015 11:09:18 BBiAI1e[1].jpg DUBW47SE HTTP/1.1 200 OK Content-Type: image/jpeg Content-Location: http://img.s-msn.com/tenant/amp/entityid/BBiAI1e?h=368&w=522&m=6&q=60&u=t&o=t&l=f&f=jpg&x=1061&y=352 X-Source-Length: 718126 X-Datacenter: eastus X-ActivityId: 4f30434f-be55-4615-9856-914f9bbc78a9 X-Instance: Resizer.Web_IN_7 X-Deployment: c610fbb33f2e4f88b789490c62db1a73 Timing-Allow-Origin: * X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Content-Length: 24542 ~U:informant +URL http://img.s-msn.com/tenant/amp/entityid/BBijUBA.img?h=75&w=100&m=6&q=60&u=t&o=t&l=f 03/23/2015 02:06:06 03/22/2015 11:09:18 BBijUBA[1].jpg 4C689SI3 HTTP/1.1 200 OK X-Datacenter: eastus X-ActivityId: 1a20c222-c19a-4c37-b491-dc55db6b8578 X-Instance: Resizer.Web_IN_1 X-Deployment: c610fbb33f2e4f88b789490c62db1a73 Timing-Allow-Origin: * X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Content-Type: image/jpeg Content-Location: http://img.s-msn.com/tenant/amp/entityid/BBijUBA?h=75&w=100&m=6&q=60&u=t&o=t&l=f X-Source-Length: 472183 Content-Length: 2216 ~U:informant +URL http://img.s-msn.com/tenant/amp/entityid/BBh0W6o.img?h=194&w=300&m=6&q=60&u=t&o=t&l=f 03/23/2015 08:10:13 03/22/2015 11:09:19 BBh0W6o[1].jpg 4C689SI3 HTTP/1.1 200 OK Content-Type: image/jpeg Content-Location: http://img.s-msn.com/tenant/amp/entityid/BBh0W6o?h=194&w=300&m=6&q=60&u=t&o=t&l=f X-Source-Length: 73434 X-Datacenter: eastus X-ActivityId: 1191a72c-642e-46d9-83c9-6c99711ecdc4 X-Instance: Resizer.Web_IN_4 X-Deployment: c610fbb33f2e4f88b789490c62db1a73 Timing-Allow-Origin: * X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Content-Length: 7523 ~U:informant +URL https://www.facebook.com/fr/u.php?p=391363987594223&m=3052188718541915848 03/22/2015 11:09:19 u[1].gif DUBW47SE HTTP/1.1 200 OK Strict-Transport-Security: max-age=15552000; preload X-XSS-Protection: 0 Content-Type: image/gif X-Content-Type-Options: nosniff Pragma: public X-UA-Compatible: IE=edge,chrome=1 X-FB-Debug: CxjQs05q13GFSmv3IBIDa2jbL1Cs6FjGflgsUMOA7Xq7mcXixwO3LNC90fX243KCSgH5I2mY+gj1h1IrxXVWig== Transfer-Encoding: chunked ~U:informant +URL https://2542116.fls.doubleclick.net/activityi;src=2542116;type=clien612;cat=chromx2;ord=8752873150730.09? 03/22/2015 11:11:13 activityi;src=2542116;type=clien612;cat=chromx2;ord=8752873150730[1].htm E9RPI3E2 HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Alternate-Protocol: 443:quic,p=0.5 Transfer-Encoding: chunked ~U:informant +URL http://img.s-msn.com/tenant/amp/entityid/BB4kwB1.img?h=16&w=16&m=6&q=60&u=t&o=t&l=f&f=png 03/23/2015 05:20:25 03/22/2015 11:09:18 BB4kwB1[1].png E9RPI3E2 HTTP/1.1 200 OK X-Datacenter: eastus X-ActivityId: 53cba33e-4d5b-497b-a9a2-4f8b7594db5f X-Instance: Resizer.Web_IN_8 X-Deployment: c610fbb33f2e4f88b789490c62db1a73 Timing-Allow-Origin: * X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Content-Type: image/png Content-Location: http://img.s-msn.com/tenant/amp/entityid/BB4kwB1?h=16&w=16&m=6&q=60&u=t&o=t&l=f&f=png X-Source-Length: 224 Content-Length: 329 ~U:informant +URL http://img.s-msn.com/tenant/amp/entityid/AA9NTYc.img?h=75&w=100&m=6&q=60&u=t&o=t&l=f 03/20/2015 12:26:06 03/22/2015 11:09:18 AA9NTYc[1].jpg DUBW47SE HTTP/1.1 200 OK Content-Type: image/jpeg Content-Location: http://img.s-msn.com/tenant/amp/entityid/AA9NTYc?h=75&w=100&m=6&q=60&u=t&o=t&l=f X-Source-Length: 62544 X-Datacenter: eastus X-ActivityId: c3331dd4-57bd-4f8d-ac73-d23a22be3b39 X-Instance: Resizer.Web_IN_8 X-Deployment: c610fbb33f2e4f88b789490c62db1a73 Timing-Allow-Origin: * X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Content-Length: 1967 ~U:informant +URL http://img.s-msn.com/tenant/amp/entityid/AA9TnuR.img?h=75&w=100&m=6&q=60&u=t&o=t&l=f 03/22/2015 19:13:27 03/22/2015 11:09:18 AA9TnuR[1].jpg 4C689SI3 HTTP/1.1 200 OK Content-Type: image/jpeg Content-Location: http://img.s-msn.com/tenant/amp/entityid/AA9TnuR?h=75&w=100&m=6&q=60&u=t&o=t&l=f X-Source-Length: 44490 X-Datacenter: eastus X-ActivityId: 3dd2d93d-43ab-4b77-8964-ed982de38b06 X-Instance: Resizer.Web_IN_1 X-Deployment: c610fbb33f2e4f88b789490c62db1a73 Timing-Allow-Origin: * X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Content-Length: 2119 ~U:informant +URL http://img.s-msn.com/tenant/amp/entityid/BBiydF6.img?h=333&w=311&m=6&q=60&u=t&o=t&l=f&f=jpg&x=482&y=176 03/23/2015 07:53:46 03/22/2015 11:09:35 BBiydF6[1].jpg 7PBK2Z4C HTTP/1.1 200 OK Content-Type: image/jpeg Content-Location: http://img.s-msn.com/tenant/amp/entityid/BBiydF6?h=333&w=311&m=6&q=60&u=t&o=t&l=f&f=jpg&x=482&y=176 X-Source-Length: 85581 X-Datacenter: eastus X-ActivityId: 6fc5c215-3b76-4fde-976d-ad8973345418 X-Instance: Resizer.Web_IN_0 X-Deployment: c610fbb33f2e4f88b789490c62db1a73 Timing-Allow-Origin: * X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Content-Length: 14591 ~U:informant +URL http://res1.windows.microsoft.com/resbox/en/internet%20explorer/2013-responsive/17c8f1a9-a948-4885-b91d-8f40265dcccb_24.css 08/29/2014 00:55:32 03/22/2015 11:09:51 17c8f1a9-a948-4885-b91d-8f40265dcccb_24[1].css 4C689SI3 HTTP/1.1 200 OK Content-Type: text/css X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET X-Content-Type-Options: nosniff Content-Length: 337 ~U:informant +URL https://apis.google.com/_/scs/apps-static/_/js/k=oz.gapi.en_US.QMkB6_tgC9o.O/m=plusone/rt=j/sv=1/d=1/ed=1/am=IQ/rs=AGLTcCMM6sUV4upHstQFnF6IwtkZZy1xGg/t=zcms/cb=gapi.loaded_0 03/19/2015 20:05:16 03/22/2015 11:11:13 cb=gapi[1].loaded_0 7PBK2Z4C HTTP/1.1 200 OK Content-Type: text/javascript; charset=UTF-8 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Alternate-Protocol: 443:quic,p=0.5 Content-Length: 114953 ~U:informant +URL https://2542116.fls.doubleclick.net/activityi;src=2542116;type=clien612;cat=chromx;ord=2681336258749.9375? 03/22/2015 11:11:13 activityi;src=2542116;type=clien612;cat=chromx;ord=2681336258749[1].htm DUBW47SE HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Alternate-Protocol: 443:quic,p=0.5 Transfer-Encoding: chunked ~U:informant +URL http://img.s-msn.com/tenant/amp/entityid/BB5SfLo.img?h=16&w=16&m=6&q=60&u=t&o=t&l=f&f=png 03/23/2015 05:24:04 03/22/2015 11:09:18 BB5SfLo[1].png DUBW47SE HTTP/1.1 200 OK X-Datacenter: eastus X-ActivityId: 2bcc158b-16a5-478c-a53f-715327aba97f X-Instance: Resizer.Web_IN_3 X-Deployment: c610fbb33f2e4f88b789490c62db1a73 Timing-Allow-Origin: * X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Content-Type: image/png Content-Location: http://img.s-msn.com/tenant/amp/entityid/BB5SfLo?h=16&w=16&m=6&q=60&u=t&o=t&l=f&f=png X-Source-Length: 731 Content-Length: 790 ~U:informant +URL http://img.s-msn.com/tenant/amp/entityid/BBizSjS.img?h=166&w=310&m=6&q=60&u=t&o=t&l=f&f=jpg&x=1097&y=408 03/22/2015 22:52:31 03/22/2015 11:09:30 BBizSjS[1].jpg 4C689SI3 HTTP/1.1 200 OK Content-Type: image/jpeg Content-Location: http://img.s-msn.com/tenant/amp/entityid/BBizSjS?h=166&w=310&m=6&q=60&u=t&o=t&l=f&f=jpg&x=1097&y=408 X-Source-Length: 522210 X-Datacenter: eastus X-ActivityId: 0ea0d314-8faa-4fa2-ae8a-6ec23af7d707 X-Instance: Resizer.Web_IN_18 X-Deployment: c610fbb33f2e4f88b789490c62db1a73 Timing-Allow-Origin: * X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Content-Length: 5403 ~U:informant +URL https://www.google.com/chrome/assets/consumer/images/tiffany/thumbs/download.jpg 08/27/2012 17:03:40 03/22/2015 11:10:54 download[1].jpg 4C689SI3 HTTP/1.1 200 OK Content-Type: image/jpeg X-Content-Type-Options: nosniff Content-Length: 2284 X-XSS-Protection: 1; mode=block Alternate-Protocol: 443:quic,p=0.5 ~U:informant +URL https://www.google.com/chrome/assets/consumer/images/tiffany/featured/hobbit.jpg 11/25/2014 02:03:07 03/22/2015 11:10:55 hobbit[1].jpg DUBW47SE HTTP/1.1 200 OK Content-Type: image/jpeg X-Content-Type-Options: nosniff Content-Length: 235245 X-XSS-Protection: 1; mode=block Alternate-Protocol: 443:quic,p=0.5 ~U:informant +URL https://www.google.com/chrome/assets/consumer/images/tiffany/thumbs/hobbit.jpg 11/25/2014 02:03:07 03/22/2015 11:10:54 hobbit[1].jpg 4C689SI3 HTTP/1.1 200 OK Content-Type: image/jpeg X-Content-Type-Options: nosniff Content-Length: 9039 X-XSS-Protection: 1; mode=block Alternate-Protocol: 443:quic,p=0.5 ~U:informant +URL http://js.microsoft.com/library/svy/windows/broker-config.js?1427036960483 03/18/2015 11:27:17 03/22/2015 11:09:20 broker-config[1].js DUBW47SE HTTP/1.1 200 OK Content-Type: application/x-javascript ETag: "88e9a149061d01:0" VTag: 791595257900000000 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-Powered-By: ASP.NET Content-Length: 11630 ~U:informant +URL https://www.google.com/chrome/assets/consumer/images/tiffany/thumbs/oz.jpg 02/05/2013 11:02:52 03/22/2015 11:10:54 oz[1].jpg 7PBK2Z4C HTTP/1.1 200 OK Content-Type: image/jpeg X-Content-Type-Options: nosniff Content-Length: 7190 X-XSS-Protection: 1; mode=block Alternate-Protocol: 443:quic,p=0.5 ~U:informant +URL https://www.google.com/intl/en/chrome/assets/consumer/images/tiffany/thumbs/cubeslam-thumb.png 06/11/2013 17:32:55 03/22/2015 11:10:54 cubeslam-thumb[1].png E9RPI3E2 HTTP/1.1 200 OK Content-Type: image/png X-Content-Type-Options: nosniff Content-Length: 10547 X-XSS-Protection: 1; mode=block Alternate-Protocol: 443:quic,p=0.5 ~U:informant +URL http://res1.windows.microsoft.com/resbox/en/windows/2012-win8ga/6ef177b8-1a15-4e39-bdda-6b672064860b_31.png 09/03/2014 12:51:45 03/22/2015 11:10:23 6ef177b8-1a15-4e39-bdda-6b672064860b_31[1].png E9RPI3E2 HTTP/1.1 200 OK Content-Type: image/png X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET X-Content-Type-Options: nosniff Content-Length: 1182 ~U:informant +URL https://www.google.com/intl/en/chrome/assets/consumer/images/tiffany/thumbs/foreveryone_thumb.jpg 03/27/2013 17:02:34 03/22/2015 11:10:54 foreveryone_thumb[1].jpg E9RPI3E2 HTTP/1.1 200 OK Content-Type: image/jpeg X-Content-Type-Options: nosniff Content-Length: 8376 X-XSS-Protection: 1; mode=block Alternate-Protocol: 443:quic,p=0.5 ~U:informant +URL https://www.google.com/chrome/assets/consumer/images/tiffany/thumbs/kickwithchrome.jpg 06/19/2014 17:32:52 03/22/2015 11:10:54 kickwithchrome[1].jpg 4C689SI3 HTTP/1.1 200 OK Content-Type: image/jpeg X-Content-Type-Options: nosniff Content-Length: 10612 X-XSS-Protection: 1; mode=block Alternate-Protocol: 443:quic,p=0.5 ~U:informant +URL https://www.google.com/chrome/assets/consumer/images/tiffany/thumbs/awesomebook.jpg 10/08/2012 16:33:49 03/22/2015 11:10:54 awesomebook[1].jpg 7PBK2Z4C HTTP/1.1 200 OK Content-Type: image/jpeg X-Content-Type-Options: nosniff Content-Length: 9409 X-XSS-Protection: 1; mode=block Alternate-Protocol: 443:quic,p=0.5 ~U:informant +URL https://www.google.com/chrome/assets/consumer/images/tiffany/featured/racer-marquee.jpg 06/11/2013 17:32:55 03/22/2015 11:10:55 racer-marquee[1].jpg 7PBK2Z4C HTTP/1.1 200 OK Content-Type: image/jpeg X-Content-Type-Options: nosniff Content-Length: 163785 X-XSS-Protection: 1; mode=block Alternate-Protocol: 443:quic,p=0.5 ~U:informant +REDR https://dl.google.com/update2/installers/clickonce/GoogleInstaller_en.application?appguid%3D%7B8A69D345-D564-463C-AFF1-A69D9E530F96%7D%26iid%3D%7B68685C6D-795B-6A37-5D90-2AB8DC4D402B%7D%26lang%3Den%26browser%3D2%26usagestats%3D0%26appname%3DGoogle%2520Chrome%26needsadmin%3Dprefers%26brand%3DCHNG +URL https://www.google.com/chrome/assets/consumer/images/tiffany/fallback/home_win.png 06/25/2012 15:04:10 03/22/2015 11:10:55 home_win[1].png DUBW47SE HTTP/1.1 200 OK Content-Type: image/png X-Content-Type-Options: nosniff Content-Length: 87269 X-XSS-Protection: 1; mode=block Alternate-Protocol: 443:quic,p=0.5 ~U:informant +URL https://www.google.com/chrome/assets/common/images/marquee/mobile-benefits-2.jpg 12/11/2014 17:34:20 03/22/2015 11:11:12 mobile-benefits-2[1].jpg 4C689SI3 HTTP/1.1 200 OK Content-Type: image/jpeg X-Content-Type-Options: nosniff Content-Length: 44737 X-XSS-Protection: 1; mode=block Alternate-Protocol: 443:quic,p=0.5 ~U:informant +URL https://www.google.com/chrome/assets/common/images/marquee/mobile-benefits-3.jpg 12/11/2014 14:16:10 03/22/2015 11:11:12 mobile-benefits-3[1].jpg 4C689SI3 HTTP/1.1 200 OK Content-Type: image/jpeg X-Content-Type-Options: nosniff Content-Length: 18232 X-XSS-Protection: 1; mode=block Alternate-Protocol: 443:quic,p=0.5 ~U:informant +URL https://www.google.com/chrome/assets/consumer/images/tiffany/featured/story.png 08/27/2012 17:36:11 03/22/2015 11:10:55 story[1].png 7PBK2Z4C HTTP/1.1 200 OK Content-Type: image/png X-Content-Type-Options: nosniff Content-Length: 453541 X-XSS-Protection: 1; mode=block Alternate-Protocol: 443:quic,p=0.5 ~U:informant +URL https://clients1.google.com/complete/search?client=heirloom-hp&hl=en&sugexp=msedr&gs_rn=34&gs_ri=heirloom-hp&cp=2&gs_id=6&q=in&gs_gbg=tkCF7k1 03/22/2015 11:09:43 f[2].txt 4C689SI3 HTTP/1.1 200 OK Content-Type: text/javascript; charset=UTF-8 Content-Disposition: attachment; filename="f.txt" X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Alternate-Protocol: 443:quic,p=0.5 Transfer-Encoding: chunked ~U:informant +URL https://clients1.google.com/complete/search?client=heirloom-hp&hl=en&sugexp=msedr&gs_rn=34&gs_ri=heirloom-hp&cp=9&gs_id=s&q=internet%20&gs_gbg=Sl3MSlZCss5J0p5e0Sj 03/22/2015 11:09:44 f[2].txt E9RPI3E2 HTTP/1.1 200 OK Content-Type: text/javascript; charset=UTF-8 Content-Disposition: attachment; filename="f.txt" X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Alternate-Protocol: 443:quic,p=0.5 Transfer-Encoding: chunked ~U:informant +URL https://www.google.com/chrome/assets/consumer/images/tiffany/thumbs/build.jpg 03/19/2014 13:05:06 03/22/2015 11:10:54 build[1].jpg E9RPI3E2 HTTP/1.1 200 OK Content-Type: image/jpeg X-Content-Type-Options: nosniff Content-Length: 4717 X-XSS-Protection: 1; mode=block Alternate-Protocol: 443:quic,p=0.5 ~U:informant +URL https://www.google.com/chrome/assets/common/images/fn/fn-custom-sprite.png 10/08/2013 08:02:54 03/22/2015 11:11:12 fn-custom-sprite[1].png 4C689SI3 HTTP/1.1 200 OK Content-Type: image/png X-Content-Type-Options: nosniff Content-Length: 11863 X-XSS-Protection: 1; mode=block Alternate-Protocol: 443:quic,p=0.5 ~U:informant +URL https://www.google.com/chrome/assets/consumer/images/tiffany/carousel/carousel-sidefade-right.png 06/25/2012 15:04:10 03/22/2015 11:10:54 carousel-sidefade-right[1].png DUBW47SE HTTP/1.1 200 OK Content-Type: image/png X-Content-Type-Options: nosniff Content-Length: 792 X-XSS-Protection: 1; mode=block Alternate-Protocol: 443:quic,p=0.5 ~U:informant +URL http://res1.windows.microsoft.com/resbox/en/windows/main/cbc6f38d-b79c-4bff-8b67-b81eb9676ab3_5.png 02/12/2013 22:48:05 03/22/2015 11:10:23 cbc6f38d-b79c-4bff-8b67-b81eb9676ab3_5[1].png 4C689SI3 HTTP/1.1 200 OK Content-Type: image/png X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET X-Content-Type-Options: nosniff Content-Length: 3234 ~U:informant +URL https://www.google.com/js/gweb/analytics/autotrack.js 04/01/2014 20:36:24 03/22/2015 11:11:13 autotrack[1].js DUBW47SE HTTP/1.1 200 OK Content-Type: text/javascript X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Alternate-Protocol: 443:quic,p=0.5 Transfer-Encoding: chunked ~U:informant +URL https://accounts.google.com/o/oauth2/postmessageRelay?parent=https%3A%2F%2Fwww.google.com 03/22/2015 11:11:13 postmessageRelay[1].htm 4C689SI3 HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Alternate-Protocol: 443:quic,p=0.5 Transfer-Encoding: chunked ~U:informant +URL https://apis.google.com/_/scs/apps-static/_/js/k=oz.gapi.en_US.QMkB6_tgC9o.O/m=googleapis_client,iframes_styles_bubble_internal,gapi_iframes_style_common,gapi_iframes_iframer/rt=j/sv=1/d=1/ed=1/am=IQ/rs=AGLTcCMM6sUV4upHstQFnF6IwtkZZy1xGg/t=zcms/cb=gapi.loaded_0 03/19/2015 20:05:16 03/22/2015 11:11:14 cb=gapi[1].loaded_0 E9RPI3E2 HTTP/1.1 200 OK Content-Type: text/javascript; charset=UTF-8 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Alternate-Protocol: 443:quic,p=0.5 Content-Length: 149523 ~U:informant +URL https://2542116.fls.doubleclick.net/activityi;src=2542116;type=clien612;cat=Chrom0;ord=5059526300148.386? 03/22/2015 11:11:14 activityi;src=2542116;type=clien612;cat=Chrom0;ord=5059526300148[1].htm 7PBK2Z4C HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Alternate-Protocol: 443:quic,p=0.5 Transfer-Encoding: chunked ~U:informant +URL https://s.ytimg.com/yts/jsbin/www-widgetapi-vflr-TgN1/www-widgetapi.js 03/18/2015 03:25:51 03/22/2015 11:10:55 www-widgetapi[1].js E9RPI3E2 HTTP/1.1 200 OK Content-Type: text/javascript Timing-Allow-Origin: https://www.youtube.com X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Alternate-Protocol: 443:quic,p=0.5 Content-Length: 22474 ~U:informant +URL https://dl.google.com/update2/1.3.26.9/GoogleInstaller_en.application?appguid%3D%7B8A69D345-D564-463C-AFF1-A69D9E530F96%7D%26iid%3D%7B68685C6D-795B-6A37-5D90-2AB8DC4D402B%7D%26lang%3Den%26browser%3D2%26usagestats%3D0%26appname%3DGoogle%2520Chrome%26needsadmin%3Dprefers%26brand%3DCHNG 01/28/2015 16:47:00 03/22/2015 11:11:06 GoogleInstaller_en[1].application 7PBK2Z4C HTTP/1.1 200 OK Content-Length: 13828 Content-Type: application/x-ms-application Etag: "4eaed" X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Xss-Protection: 1; mode=block Alternate-Protocol: 443:quic,p=0.5 ~U:informant +URL https://www.google.com/chrome/assets/consumer/images/tiffany/fallback/browser-shine.png 06/25/2012 15:04:10 03/22/2015 11:10:54 browser-shine[1].png E9RPI3E2 HTTP/1.1 200 OK Content-Type: image/png X-Content-Type-Options: nosniff Content-Length: 3243 X-XSS-Protection: 1; mode=block Alternate-Protocol: 443:quic,p=0.5 ~U:informant +URL https://www.google.com/chrome/assets/common/images/icons-sprite.png 12/02/2014 13:04:39 03/22/2015 11:11:13 icons-sprite[1].png 7PBK2Z4C HTTP/1.1 200 OK Content-Type: image/png X-Content-Type-Options: nosniff Content-Length: 1869 X-XSS-Protection: 1; mode=block Alternate-Protocol: 443:quic,p=0.5 ~U:informant diff --git a/NIST_Data_Leakage_Case/py_version/pycode/webhistory_python/list_colum_names.ipynb b/NIST_Data_Leakage_Case/py_version/pycode/webhistory_python/list_colum_names.ipynb new file mode 100644 index 0000000..525fbdf --- /dev/null +++ b/NIST_Data_Leakage_Case/py_version/pycode/webhistory_python/list_colum_names.ipynb @@ -0,0 +1,86 @@ +{ + "cells": [ + { + "cell_type": "code", + "execution_count": 3, + "source": [ + "import pandas as pd\r\n", + "\r\n", + "# Read the CSV file into a DataFrame\r\n", + "df = pd.read_csv('IE11_container14.csv', delimiter='\\t')\r\n", + "\r\n", + "# List all columns in the DataFrame\r\n", + "columns = df.columns.tolist()\r\n", + "\r\n", + "# Print the list of columns line by line\r\n", + "for column in columns:\r\n", + " print(column)" + ], + "outputs": [ + { + "output_type": "stream", + "name": "stdout", + "text": [ + "EntryId\n", + "ContainerId\n", + "CacheId\n", + "UrlHash\n", + "SecureDirectory\n", + "FileSize\n", + "Type\n", + "Flags\n", + "AccessCount\n", + "SyncTime\n", + "CreationTime\n", + "ExpiryTime\n", + "ModifiedTime\n", + "AccessedTime\n", + "PostCheckTime\n", + "SyncCount\n", + "ExemptionDelta\n", + "Url\n", + "Filename\n", + "FileExtension\n", + "RequestHeaders\n", + "ResponseHeaders\n", + "RedirectUrl\n", + "Group\n", + "ExtraData\n" + ] + } + ], + "metadata": {} + }, + { + "cell_type": "code", + "execution_count": null, + "source": [], + "outputs": [], + "metadata": {} + } + ], + "metadata": { + "orig_nbformat": 4, + "language_info": { + "name": "python", + "version": "3.11.4", + "mimetype": "text/x-python", + "codemirror_mode": { + "name": "ipython", + "version": 3 + }, + "pygments_lexer": "ipython3", + "nbconvert_exporter": "python", + "file_extension": ".py" + }, + "kernelspec": { + "name": "python3", + "display_name": "Python 3.11.4 64-bit" + }, + "interpreter": { + "hash": "a06e30aee820ff8fe24fb428cece021c5cdfc4bd84062afc0eba853e87fef366" + } + }, + "nbformat": 4, + "nbformat_minor": 2 +} \ No newline at end of file diff --git a/NIST_Data_Leakage_Case/py_version/pycode/webhistory_python/list_colum_names_ie8.ipynb b/NIST_Data_Leakage_Case/py_version/pycode/webhistory_python/list_colum_names_ie8.ipynb new file mode 100644 index 0000000..03d9765 --- /dev/null +++ b/NIST_Data_Leakage_Case/py_version/pycode/webhistory_python/list_colum_names_ie8.ipynb @@ -0,0 +1,62 @@ +{ + "cells": [ + { + "cell_type": "code", + "execution_count": 4, + "source": [ + "import pandas as pd\r\n", + "\r\n", + "# Read the CSV file into a DataFrame\r\n", + "df = pd.read_csv('index.IE8.csv', delimiter='\\t')\r\n", + "\r\n", + "# List all columns in the DataFrame\r\n", + "columns = df.columns.tolist()\r\n", + "\r\n", + "# Print the list of columns line by line\r\n", + "for column in columns:\r\n", + " print(column)" + ], + "outputs": [ + { + "output_type": "stream", + "name": "stdout", + "text": [ + "History File: index.dat Version: 5.2\n" + ] + } + ], + "metadata": {} + }, + { + "cell_type": "code", + "execution_count": null, + "source": [], + "outputs": [], + "metadata": {} + } + ], + "metadata": { + "orig_nbformat": 4, + "language_info": { + "name": "python", + "version": "3.11.4", + "mimetype": "text/x-python", + "codemirror_mode": { + "name": "ipython", + "version": 3 + }, + "pygments_lexer": "ipython3", + "nbconvert_exporter": "python", + "file_extension": ".py" + }, + "kernelspec": { + "name": "python3", + "display_name": "Python 3.11.4 64-bit" + }, + "interpreter": { + "hash": "a06e30aee820ff8fe24fb428cece021c5cdfc4bd84062afc0eba853e87fef366" + } + }, + "nbformat": 4, + "nbformat_minor": 2 +} \ No newline at end of file diff --git a/NIST_Data_Leakage_Case/py_version/pycode/webhistory_python/list_search_keywords_IE11.ipynb b/NIST_Data_Leakage_Case/py_version/pycode/webhistory_python/list_search_keywords_IE11.ipynb new file mode 100644 index 0000000..4af6b59 --- /dev/null +++ b/NIST_Data_Leakage_Case/py_version/pycode/webhistory_python/list_search_keywords_IE11.ipynb @@ -0,0 +1,153 @@ +{ + "cells": [ + { + "cell_type": "code", + "execution_count": 7, + "source": [ + "import pandas as pd\r\n", + "\r\n", + "# Set Pandas display options\r\n", + "pd.set_option('display.max_colwidth', 150) # Disable column width truncation\r\n", + "pd.set_option('display.max_rows', 50) # Display the number of rows\r\n", + "\r\n", + "# Read the CSV file into a DataFrame\r\n", + "df = pd.read_csv('IE11_container_6_9.csv', delimiter='\\t')\r\n", + "\r\n", + "# Specify the columns you want to display\r\n", + "selected_columns = [ 'Url']\r\n", + "\r\n", + "# Create a new DataFrame containing only the selected columns\r\n", + "df[selected_columns]" + ], + "outputs": [ + { + "output_type": "execute_result", + "data": { + "text/plain": [ + " Url\n", + "0 Visited: informant@http://www.facebook.com/v2.0/plugins/like.php?action=like&app_id=&channel=http%3A%2F%2Fstatic.ak.facebook.com%2Fconnect%2Fxd_ar...\n", + "1 Visited: informant@http://www.facebook.com/plugins/like.php?action=like&app_id=&channel=http%3A%2F%2Fstatic.ak.facebook.com%2Fconnect%2Fxd_arbiter...\n", + "2 NaN\n", + "3 NaN\n", + "4 NaN\n", + ".. ...\n", + "184 Visited: informant@http://p4-bx45atk7zyxog-7xw6fdnac2wemijo-if-v6exp3-v4.metric.gstatic.com/v6exp3/redir.html\n", + "185 Visited: informant@http://p4-bx45atk7zyxog-7xw6fdnac2wemijo-if-v6exp3-v4.metric.gstatic.com/v6exp3/iframe.html\n", + "186 Visited: informant@javascript:void(0)\n", + "187 Visited: informant@http://www.wired.com/2015/03/stealing-data-computers-using-heat/\n", + "188 Visited: informant@http://www.wired.com/?p=1756538\n", + "\n", + "[189 rows x 1 columns]" + ], + "text/html": [ + "
\n", + "\n", + "\n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + "
Url
0Visited: informant@http://www.facebook.com/v2.0/plugins/like.php?action=like&app_id=&channel=http%3A%2F%2Fstatic.ak.facebook.com%2Fconnect%2Fxd_ar...
1Visited: informant@http://www.facebook.com/plugins/like.php?action=like&app_id=&channel=http%3A%2F%2Fstatic.ak.facebook.com%2Fconnect%2Fxd_arbiter...
2NaN
3NaN
4NaN
......
184Visited: informant@http://p4-bx45atk7zyxog-7xw6fdnac2wemijo-if-v6exp3-v4.metric.gstatic.com/v6exp3/redir.html
185Visited: informant@http://p4-bx45atk7zyxog-7xw6fdnac2wemijo-if-v6exp3-v4.metric.gstatic.com/v6exp3/iframe.html
186Visited: informant@javascript:void(0)
187Visited: informant@http://www.wired.com/2015/03/stealing-data-computers-using-heat/
188Visited: informant@http://www.wired.com/?p=1756538
\n", + "

189 rows × 1 columns

\n", + "
" + ] + }, + "metadata": {}, + "execution_count": 7 + } + ], + "metadata": {} + }, + { + "cell_type": "code", + "execution_count": null, + "source": [], + "outputs": [], + "metadata": {} + } + ], + "metadata": { + "orig_nbformat": 4, + "language_info": { + "name": "python", + "version": "3.11.4", + "mimetype": "text/x-python", + "codemirror_mode": { + "name": "ipython", + "version": 3 + }, + "pygments_lexer": "ipython3", + "nbconvert_exporter": "python", + "file_extension": ".py" + }, + "kernelspec": { + "name": "python3", + "display_name": "Python 3.11.4 64-bit" + }, + "interpreter": { + "hash": "a06e30aee820ff8fe24fb428cece021c5cdfc4bd84062afc0eba853e87fef366" + } + }, + "nbformat": 4, + "nbformat_minor": 2 +} \ No newline at end of file diff --git a/NIST_Data_Leakage_Case/py_version/pycode/webhistory_python/list_urls.ipynb b/NIST_Data_Leakage_Case/py_version/pycode/webhistory_python/list_urls.ipynb new file mode 100644 index 0000000..5bc0565 --- /dev/null +++ b/NIST_Data_Leakage_Case/py_version/pycode/webhistory_python/list_urls.ipynb @@ -0,0 +1,555 @@ +{ + "cells": [ + { + "cell_type": "code", + "execution_count": 24, + "source": [ + "import pandas as pd\r\n", + "\r\n", + "# Set Pandas display options\r\n", + "pd.set_option('display.max_colwidth', 100) # Disable column width truncation\r\n", + "pd.set_option('display.max_rows', None) # Display all rows\r\n", + "\r\n", + "# Read the CSV file into a DataFrame\r\n", + "df = pd.read_csv('IE11_container14.csv', delimiter='\\t')\r\n", + "\r\n", + "# Specify the columns you want to display\r\n", + "selected_columns = [ 'Url', 'AccessedTime', 'AccessCount']\r\n", + "\r\n", + "# Create a new DataFrame containing only the selected columns\r\n", + "df[selected_columns].sort_values(by=['AccessCount'],ascending=[False])\r\n" + ], + "outputs": [ + { + "output_type": "execute_result", + "data": { + "text/plain": [ + " Url \\\n", + "28 https://odc.officeapps.live.com/odc/jsonstrings?b=3914.1000&g=EmailHrd&mkt=1033 \n", + "19 https://odc.officeapps.live.com/odc/stat/images/OrgIdAccount.png?b=3914.1000 \n", + "32 https://odc.officeapps.live.com/odc/stat/CommonDiagnostics.js?b=3914.1000 \n", + "31 https://odc.officeapps.live.com/odc/stat/EmailHrd.css?b=3914.1000 \n", + "30 https://odc.officeapps.live.com/odc/stat/jquery.js?b=3914.1000 \n", + "26 https://odc.officeapps.live.com/odc/stat/MicrosoftAjax.js?b=3914.1000 \n", + "25 https://odc.officeapps.live.com/odc/stat/Telemetry.js?b=3914.1000 \n", + "23 https://odc.officeapps.live.com/odc/stat/images/MSAccount.png?b=3914.1000 \n", + "21 https://odc.officeapps.live.com/odc/stat/images/spinner_16x16.gif?b=3914.1000 \n", + "20 https://odc.officeapps.live.com/odc/stat/EmailHrd.js?b=3914.1000 \n", + "56 https://iecvlist.microsoft.com/IE11/1387494476607/iecompatviewlist.xml \n", + "22 https://odc.officeapps.live.com/odc/emailhrd?lcid=1033&syslcid=1033&uilcid=1033&app=5&ver=15&bui... \n", + "29 https://odc.officeapps.live.com/odc/emailhrd?lcid=1033&syslcid=1033&uilcid=1033&app=0&ver=15&bui... \n", + "49 https://r20swj13mr.microsoft.com/ieblocklist/v1/urlblockindex.bin \n", + "27 https://odc.officeapps.live.com/odc/emailhrd?lcid=1033&syslcid=1033&uilcid=1033&app=3&ver=15&bui... \n", + "11 https://ssl.gstatic.com/accounts/o/2006856415-postmessagerelay.js \n", + "37 https://oauth.googleusercontent.com/gadgets/js/core:rpc:shindig.random:shindig.sha1.js?c=2 \n", + "12 https://ssl.gstatic.com/docs/documents/share/images/sprite-18.svg \n", + "43 http://www.bing.com/favicon.ico \n", + "46 https://www.gstatic.com/common_sharing/static/client/css/2251474084-share_application_jfk_ltr.css \n", + "47 https://www.gstatic.com/common_sharing/static/client/js/1432103611-sharing_core.js \n", + "7 https://apis.google.com/_/scs/apps-static/_/js/k=oz.gapi.en.Vh6dPmTLRzs.O/m=googleapis_proxy/rt=... \n", + "6 https://apis.google.com/_/scs/apps-static/_/js/k=oz.gapi.en.Vh6dPmTLRzs.O/m=client/rt=j/sv=1/d=1... \n", + "8 https://apis.google.com/js/client.js \n", + "9 https://apis.google.com/js/api.js \n", + "10 https://clients6.google.com/static/proxy.html?jsh=m%3B%2F_%2Fscs%2Fapps-static%2F_%2Fjs%2Fk%3Doz... \n", + "51 http://sysinfotools.com/blog/wp-content/themes/beautiful-pro/images/favicon.ico \n", + "55 https://accounts.google.com/o/oauth2/postmessageRelay?parent=https%3A%2F%2Fdrive.google.com \n", + "39 https://ieonline.microsoft.com/ie/known_providers_download_v1.xml \n", + "48 http://eraser2.heidi.ie/wp-content/uploads/2013/01/favicon.ico \n", + "50 https://r20swj13mr.microsoft.com/ieblocklist/v1/urlblocklist.bin \n", + "52 http://www.microsoft.com/favicon.ico \n", + "45 http://s1.pir.fm/favicon.ico \n", + "44 http://bits.wikimedia.org/favicon/wikipedia.ico \n", + "53 https://www.microsoft.com/favicon.ico?v2 \n", + "54 res://C:\\\\Program%20Files\\\\Microsoft%20Office\\\\Office15\\\\1033\\\\OUTLWVW.DLL/gap.gif \n", + "42 http://www.bing.com/s/a/bing_p_lg.ico \n", + "41 https://www.piriform.com/go/app_cc_pro_trialkey \n", + "40 https://ieonline.microsoft.com/iedomainsuggestions/ie11/suggestions.en-US \n", + "34 http://a.fsdn.com/con/img/sftheme/favicon.ico \n", + "38 http://static-hp-eus.s-msn.com/sc/54/4f1880.ico \n", + "24 https://odc.officeapps.live.com/odc/emailhrd?lcid=1033&syslcid=1033&uilcid=1033&app=1&ver=15&bui... \n", + "13 https://ssl.gstatic.com/accounts/ui/avatar_2x.png \n", + "14 https://ssl.gstatic.com/accounts/ui/logo_strip_2x.png \n", + "15 https://ssl.gstatic.com/accounts/ui/logo_2x.png \n", + "16 https://ssl.gstatic.com/accounts/ui/progress_spinner_color_20dp_4x.gif \n", + "17 https://fonts.gstatic.com/s/opensans/v10/DXI1ORHCpsQm3Vp6mXoaTXZ2MAKAc2x4R1uOSeegc5U.eot \n", + "18 https://fonts.gstatic.com/s/opensans/v10/cJZKeOuBrn4kERxqtaUH3fY6323mHUZFJMgTvxaG2iE.eot \n", + "5 http://eraser.heidi.ie/favicon.ico \n", + "36 https://msdn.microsoft.com/Areas/Epx/Themes/Windows/Content/Winlogo_favicon.ico \n", + "1 http://www.wired.com/wp-content/themes/Phoenix/assets/images/favicon.ico \n", + "4 https://www.bing.com/getLogo?language=en-US&scale=100&contrast=gray \n", + "3 https://license.piriform.com/verify/?p=ccpro&c=cc&cv=5.04.5151&l=1033&lk=CJ9T-J7CU-SPNV-GWMB-WBE... \n", + "2 http://www.wired.com/favicon.ico \n", + "33 https://go.microsoft.com/fwlink/?LinkId=251136 \n", + "35 http://service.piriform.com/installcheck.aspx?p=1&v=5.04.5151&vx=&l=1033&b=1&o=6.1W6&g=2&i=1&a=0 \n", + "0 https://technet.microsoft.com/favicon.ico \n", + "\n", + " AccessedTime AccessCount \n", + "28 Mar 25, 2015 15:24:51.578405500 21 \n", + "19 Mar 25, 2015 15:24:51.516005500 11 \n", + "32 Mar 25, 2015 15:24:51.516005500 11 \n", + "31 Mar 25, 2015 15:24:51.516005500 11 \n", + "30 Mar 25, 2015 15:24:51.516005500 11 \n", + "26 Mar 25, 2015 15:24:51.516005500 11 \n", + "25 Mar 25, 2015 15:24:51.516005500 11 \n", + "23 Mar 25, 2015 15:24:51.516005500 11 \n", + "21 Mar 25, 2015 15:24:51.516005500 11 \n", + "20 Mar 25, 2015 15:24:51.516005500 11 \n", + "56 Mar 25, 2015 14:46:37.045605500 10 \n", + "22 Mar 25, 2015 14:41:13.121405500 7 \n", + "29 Mar 25, 2015 15:24:51.500405500 7 \n", + "49 Mar 25, 2015 14:46:37.045605500 4 \n", + "27 Mar 23, 2015 20:27:39.556879200 3 \n", + "11 Mar 23, 2015 20:34:29.099416100 2 \n", + "37 Mar 23, 2015 20:34:29.099416100 2 \n", + "12 Mar 23, 2015 20:34:29.239816300 2 \n", + "43 Mar 23, 2015 17:27:41.338111000 2 \n", + "46 Mar 23, 2015 20:34:28.943415800 2 \n", + "47 Mar 23, 2015 20:34:28.943415800 2 \n", + "7 Mar 23, 2015 20:34:29.271016400 2 \n", + "6 Mar 23, 2015 20:34:29.052616000 2 \n", + "8 Mar 23, 2015 20:34:29.037016000 2 \n", + "9 Mar 23, 2015 20:34:29.099416100 2 \n", + "10 Mar 23, 2015 20:34:29.239816300 2 \n", + "51 Mar 23, 2015 18:08:18.463260300 2 \n", + "55 Mar 23, 2015 20:34:29.099416100 2 \n", + "39 Mar 23, 2015 17:27:41.333110900 1 \n", + "48 Mar 25, 2015 14:46:59.450705500 1 \n", + "50 Mar 23, 2015 17:28:01.863172900 1 \n", + "52 Mar 23, 2015 17:27:50.180407100 1 \n", + "45 Mar 25, 2015 14:47:55.349505500 1 \n", + "44 Mar 23, 2015 18:12:52.663301400 1 \n", + "53 Mar 23, 2015 18:12:47.181289700 1 \n", + "54 Mar 24, 2015 13:34:23.550041900 1 \n", + "42 Mar 23, 2015 17:28:18.780805800 1 \n", + "41 Mar 25, 2015 15:15:55.376005500 1 \n", + "40 Mar 23, 2015 17:28:40.228145200 1 \n", + "34 Mar 25, 2015 14:47:30.032105500 1 \n", + "38 Mar 23, 2015 17:27:39.918391700 1 \n", + "24 Mar 23, 2015 20:26:59.199003100 1 \n", + "13 Mar 23, 2015 20:04:18.921167800 1 \n", + "14 Mar 23, 2015 20:04:18.921167800 1 \n", + "15 Mar 23, 2015 20:04:18.921167800 1 \n", + "16 Mar 23, 2015 20:04:54.079030200 1 \n", + "17 Mar 23, 2015 20:04:19.248768400 1 \n", + "18 Mar 23, 2015 20:04:19.233168400 1 \n", + "5 Mar 25, 2015 14:47:06.132305500 1 \n", + "36 Mar 23, 2015 18:13:58.382908000 1 \n", + "1 Mar 23, 2015 20:45:22.349231400 1 \n", + "4 Mar 23, 2015 17:28:55.700342200 1 \n", + "3 Mar 25, 2015 15:15:56.842405500 1 \n", + "2 Mar 23, 2015 20:56:32.953278700 1 \n", + "33 Mar 23, 2015 17:27:40.870603800 1 \n", + "35 Mar 25, 2015 14:58:35.148805500 1 \n", + "0 Mar 23, 2015 18:12:08.184224700 1 " + ], + "text/html": [ + "
\n", + "\n", + "\n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + "
UrlAccessedTimeAccessCount
28https://odc.officeapps.live.com/odc/jsonstrings?b=3914.1000&g=EmailHrd&mkt=1033Mar 25, 2015 15:24:51.57840550021
19https://odc.officeapps.live.com/odc/stat/images/OrgIdAccount.png?b=3914.1000Mar 25, 2015 15:24:51.51600550011
32https://odc.officeapps.live.com/odc/stat/CommonDiagnostics.js?b=3914.1000Mar 25, 2015 15:24:51.51600550011
31https://odc.officeapps.live.com/odc/stat/EmailHrd.css?b=3914.1000Mar 25, 2015 15:24:51.51600550011
30https://odc.officeapps.live.com/odc/stat/jquery.js?b=3914.1000Mar 25, 2015 15:24:51.51600550011
26https://odc.officeapps.live.com/odc/stat/MicrosoftAjax.js?b=3914.1000Mar 25, 2015 15:24:51.51600550011
25https://odc.officeapps.live.com/odc/stat/Telemetry.js?b=3914.1000Mar 25, 2015 15:24:51.51600550011
23https://odc.officeapps.live.com/odc/stat/images/MSAccount.png?b=3914.1000Mar 25, 2015 15:24:51.51600550011
21https://odc.officeapps.live.com/odc/stat/images/spinner_16x16.gif?b=3914.1000Mar 25, 2015 15:24:51.51600550011
20https://odc.officeapps.live.com/odc/stat/EmailHrd.js?b=3914.1000Mar 25, 2015 15:24:51.51600550011
56https://iecvlist.microsoft.com/IE11/1387494476607/iecompatviewlist.xmlMar 25, 2015 14:46:37.04560550010
22https://odc.officeapps.live.com/odc/emailhrd?lcid=1033&syslcid=1033&uilcid=1033&app=5&ver=15&bui...Mar 25, 2015 14:41:13.1214055007
29https://odc.officeapps.live.com/odc/emailhrd?lcid=1033&syslcid=1033&uilcid=1033&app=0&ver=15&bui...Mar 25, 2015 15:24:51.5004055007
49https://r20swj13mr.microsoft.com/ieblocklist/v1/urlblockindex.binMar 25, 2015 14:46:37.0456055004
27https://odc.officeapps.live.com/odc/emailhrd?lcid=1033&syslcid=1033&uilcid=1033&app=3&ver=15&bui...Mar 23, 2015 20:27:39.5568792003
11https://ssl.gstatic.com/accounts/o/2006856415-postmessagerelay.jsMar 23, 2015 20:34:29.0994161002
37https://oauth.googleusercontent.com/gadgets/js/core:rpc:shindig.random:shindig.sha1.js?c=2Mar 23, 2015 20:34:29.0994161002
12https://ssl.gstatic.com/docs/documents/share/images/sprite-18.svgMar 23, 2015 20:34:29.2398163002
43http://www.bing.com/favicon.icoMar 23, 2015 17:27:41.3381110002
46https://www.gstatic.com/common_sharing/static/client/css/2251474084-share_application_jfk_ltr.cssMar 23, 2015 20:34:28.9434158002
47https://www.gstatic.com/common_sharing/static/client/js/1432103611-sharing_core.jsMar 23, 2015 20:34:28.9434158002
7https://apis.google.com/_/scs/apps-static/_/js/k=oz.gapi.en.Vh6dPmTLRzs.O/m=googleapis_proxy/rt=...Mar 23, 2015 20:34:29.2710164002
6https://apis.google.com/_/scs/apps-static/_/js/k=oz.gapi.en.Vh6dPmTLRzs.O/m=client/rt=j/sv=1/d=1...Mar 23, 2015 20:34:29.0526160002
8https://apis.google.com/js/client.jsMar 23, 2015 20:34:29.0370160002
9https://apis.google.com/js/api.jsMar 23, 2015 20:34:29.0994161002
10https://clients6.google.com/static/proxy.html?jsh=m%3B%2F_%2Fscs%2Fapps-static%2F_%2Fjs%2Fk%3Doz...Mar 23, 2015 20:34:29.2398163002
51http://sysinfotools.com/blog/wp-content/themes/beautiful-pro/images/favicon.icoMar 23, 2015 18:08:18.4632603002
55https://accounts.google.com/o/oauth2/postmessageRelay?parent=https%3A%2F%2Fdrive.google.comMar 23, 2015 20:34:29.0994161002
39https://ieonline.microsoft.com/ie/known_providers_download_v1.xmlMar 23, 2015 17:27:41.3331109001
48http://eraser2.heidi.ie/wp-content/uploads/2013/01/favicon.icoMar 25, 2015 14:46:59.4507055001
50https://r20swj13mr.microsoft.com/ieblocklist/v1/urlblocklist.binMar 23, 2015 17:28:01.8631729001
52http://www.microsoft.com/favicon.icoMar 23, 2015 17:27:50.1804071001
45http://s1.pir.fm/favicon.icoMar 25, 2015 14:47:55.3495055001
44http://bits.wikimedia.org/favicon/wikipedia.icoMar 23, 2015 18:12:52.6633014001
53https://www.microsoft.com/favicon.ico?v2Mar 23, 2015 18:12:47.1812897001
54res://C:\\\\Program%20Files\\\\Microsoft%20Office\\\\Office15\\\\1033\\\\OUTLWVW.DLL/gap.gifMar 24, 2015 13:34:23.5500419001
42http://www.bing.com/s/a/bing_p_lg.icoMar 23, 2015 17:28:18.7808058001
41https://www.piriform.com/go/app_cc_pro_trialkeyMar 25, 2015 15:15:55.3760055001
40https://ieonline.microsoft.com/iedomainsuggestions/ie11/suggestions.en-USMar 23, 2015 17:28:40.2281452001
34http://a.fsdn.com/con/img/sftheme/favicon.icoMar 25, 2015 14:47:30.0321055001
38http://static-hp-eus.s-msn.com/sc/54/4f1880.icoMar 23, 2015 17:27:39.9183917001
24https://odc.officeapps.live.com/odc/emailhrd?lcid=1033&syslcid=1033&uilcid=1033&app=1&ver=15&bui...Mar 23, 2015 20:26:59.1990031001
13https://ssl.gstatic.com/accounts/ui/avatar_2x.pngMar 23, 2015 20:04:18.9211678001
14https://ssl.gstatic.com/accounts/ui/logo_strip_2x.pngMar 23, 2015 20:04:18.9211678001
15https://ssl.gstatic.com/accounts/ui/logo_2x.pngMar 23, 2015 20:04:18.9211678001
16https://ssl.gstatic.com/accounts/ui/progress_spinner_color_20dp_4x.gifMar 23, 2015 20:04:54.0790302001
17https://fonts.gstatic.com/s/opensans/v10/DXI1ORHCpsQm3Vp6mXoaTXZ2MAKAc2x4R1uOSeegc5U.eotMar 23, 2015 20:04:19.2487684001
18https://fonts.gstatic.com/s/opensans/v10/cJZKeOuBrn4kERxqtaUH3fY6323mHUZFJMgTvxaG2iE.eotMar 23, 2015 20:04:19.2331684001
5http://eraser.heidi.ie/favicon.icoMar 25, 2015 14:47:06.1323055001
36https://msdn.microsoft.com/Areas/Epx/Themes/Windows/Content/Winlogo_favicon.icoMar 23, 2015 18:13:58.3829080001
1http://www.wired.com/wp-content/themes/Phoenix/assets/images/favicon.icoMar 23, 2015 20:45:22.3492314001
4https://www.bing.com/getLogo?language=en-US&scale=100&contrast=grayMar 23, 2015 17:28:55.7003422001
3https://license.piriform.com/verify/?p=ccpro&c=cc&cv=5.04.5151&l=1033&lk=CJ9T-J7CU-SPNV-GWMB-WBE...Mar 25, 2015 15:15:56.8424055001
2http://www.wired.com/favicon.icoMar 23, 2015 20:56:32.9532787001
33https://go.microsoft.com/fwlink/?LinkId=251136Mar 23, 2015 17:27:40.8706038001
35http://service.piriform.com/installcheck.aspx?p=1&v=5.04.5151&vx=&l=1033&b=1&o=6.1W6&g=2&i=1&a=0Mar 25, 2015 14:58:35.1488055001
0https://technet.microsoft.com/favicon.icoMar 23, 2015 18:12:08.1842247001
\n", + "
" + ] + }, + "metadata": {}, + "execution_count": 24 + } + ], + "metadata": {} + }, + { + "cell_type": "code", + "execution_count": null, + "source": [], + "outputs": [], + "metadata": {} + } + ], + "metadata": { + "orig_nbformat": 4, + "language_info": { + "name": "python", + "version": "3.11.4", + "mimetype": "text/x-python", + "codemirror_mode": { + "name": "ipython", + "version": 3 + }, + "pygments_lexer": "ipython3", + "nbconvert_exporter": "python", + "file_extension": ".py" + }, + "kernelspec": { + "name": "python3", + "display_name": "Python 3.11.4 64-bit" + }, + "interpreter": { + "hash": "a06e30aee820ff8fe24fb428cece021c5cdfc4bd84062afc0eba853e87fef366" + } + }, + "nbformat": 4, + "nbformat_minor": 2 +} \ No newline at end of file diff --git a/NIST_Data_Leakage_Case/py_version/pycode/webhistory_python/list_urls_ie8.ipynb b/NIST_Data_Leakage_Case/py_version/pycode/webhistory_python/list_urls_ie8.ipynb new file mode 100644 index 0000000..29ab252 --- /dev/null +++ b/NIST_Data_Leakage_Case/py_version/pycode/webhistory_python/list_urls_ie8.ipynb @@ -0,0 +1,2555 @@ +{ + "cells": [ + { + "cell_type": "code", + "execution_count": 6, + "source": [ + "import pandas as pd\r\n", + "\r\n", + "# Set Pandas display options\r\n", + "pd.set_option('display.max_colwidth', 100) # Disable column width truncation\r\n", + "pd.set_option('display.max_rows', None) # Display all rows\r\n", + "\r\n", + "# Read the CSV file into a DataFrame\r\n", + "df = pd.read_csv('index.IE8.csv', delimiter='\\t')\r\n", + "\r\n", + "# Specify the columns you want to display\r\n", + "selected_columns = [ 'URL', 'ACCESS TIME']\r\n", + "\r\n", + "# Create a new DataFrame containing only the selected columns\r\n", + "df[selected_columns]\r\n" + ], + "outputs": [ + { + "output_type": "execute_result", + "data": { + "text/plain": [ + " URL \\\n", + "0 http://img.s-msn.com/tenant/amp/entityid/AA42x33.img?h=16&w=16&m=6&q=60&u=t&o=t&l=f&f=png \n", + "1 http://img.s-msn.com/tenant/amp/entityid/BBiBVNI.img?h=194&w=300&m=6&q=60&u=t&o=t&l=f&x=1149&y=926 \n", + "2 http://img.s-msn.com/tenant/amp/entityid/BBiBMZk.img?h=75&w=100&m=6&q=60&u=t&o=t&l=f&x=1211&y=1191 \n", + "3 http://img.s-msn.com/tenant/amp/entityid/BBivFGA.img?h=75&w=100&m=6&q=60&u=t&o=t&l=f \n", + "4 http://ajax.aspnetcdn.com/ajax/jQuery/jquery-1.8.3.min.js \n", + "5 https://www.google.com/chrome/assets/consumer/images/tiffany/fallback/browser-shadow.png \n", + "6 https://www.google.com/chrome/assets/consumer/images/tiffany/chrome-title.png \n", + "7 https://www.google.com/chrome/assets/common/images/fn/fn-devices-sprite.png \n", + "8 https://www.google.com/chrome/assets/consumer/images/tiffany/carousel/carousel-sidefade-left.png \n", + "9 https://www.google.com/chrome/assets/consumer/images/tiffany/browser/browser-bar-windows.png \n", + "10 https://www.google.com/chrome/assets/consumer/images/tiffany/featured/cubelab.jpg \n", + "11 http://pagead2.googlesyndication.com/pagead/js/lidar.js \n", + "12 https://www.google.com/intl/en/chrome/assets/consumer/images/tiffany/featured/noweverywhere_feat... \n", + "13 http://static-hp-eus.s-msn.com/sc/9b/e151e5.gif \n", + "14 https://www.google.com/chrome/assets/consumer/images/tiffany/carousel/carousel-thumb-shadow.png \n", + "15 http://img.s-msn.com/tenant/amp/entityid/AA3kXQp.img?h=16&w=16&m=6&q=60&u=t&o=t&l=f&f=png \n", + "16 http://img.s-msn.com/tenant/amp/entityid/BBiBF8f.img?h=194&w=300&m=6&q=60&u=t&o=t&l=f \n", + "17 http://img.s-msn.com/tenant/amp/entityid/BBiBWww.img?h=75&w=100&m=6&q=60&u=t&o=t&l=f&x=1452&y=842 \n", + "18 http://img.s-msn.com/tenant/amp/entityid/AA86h7b.img?h=16&w=16&m=6&q=60&u=t&o=t&l=f&f=png \n", + "19 http://img.s-msn.com/tenant/amp/entityid/BBiqmrh.img?h=75&w=100&m=6&q=60&u=t&o=t&l=f \n", + "20 http://img.s-msn.com/tenant/amp/entityid/BB93Uyk.img?h=16&w=16&m=6&q=60&u=t&o=t&l=f&f=png \n", + "21 http://js.microsoft.com/library/svy/windows/broker-config.js?1427037031908 \n", + "22 http://img.s-msn.com/tenant/amp/entityid/BBiA3co.img?h=250&w=300&m=6&q=60&u=t&o=t&l=f&f=jpg&x=61... \n", + "23 http://img.s-msn.com/tenant/amp/entityid/AA2vq8h.img?h=16&w=16&m=6&q=60&u=t&o=t&l=f&f=png \n", + "24 http://img.s-msn.com/tenant/amp/entityid/AA3ltd8.img?h=16&w=16&m=6&q=60&u=t&o=t&l=f&f=png \n", + "25 http://img.s-msn.com/tenant/amp/entityid/BBimIRn.img?h=75&w=100&m=6&q=60&u=t&o=t&l=f&x=1352&y=1428 \n", + "26 http://img.s-msn.com/tenant/amp/entityid/BBiwzT8.img?h=75&w=100&m=6&q=60&u=t&o=t&l=f \n", + "27 http://static-hp-eus.s-msn.com/en-us/homepage/_sc/css/6670b51d-4362b864/direction=ltr.locales=en... \n", + "28 http://img.s-msn.com/tenant/amp/entityid/BBiBAfg.img?h=75&w=100&m=6&q=60&u=t&o=t&l=f&f=jpg&x=142... \n", + "29 http://img.s-msn.com/tenant/amp/entityid/BBizEAe.img?h=75&w=100&m=6&q=60&u=t&o=t&l=f&x=485&y=242 \n", + "30 http://img.s-msn.com/tenant/amp/entityid/AA6zYWg.img?h=16&w=16&m=6&q=60&u=t&o=t&l=f&f=png \n", + "31 http://img.s-msn.com/tenant/amp/entityid/BBixvFr.img?h=194&w=300&m=6&q=60&u=t&o=t&l=f \n", + "32 http://img.s-msn.com/tenant/amp/entityid/BBiA4MY.img?h=75&w=100&m=6&q=60&u=t&o=t&l=f \n", + "33 http://res1.windows.microsoft.com/siteresources/siteresource.ashx?id=wolNotificationJS&hash=b803... \n", + "34 http://img.s-msn.com/tenant/amp/entityid/BBiuI12.img?h=75&w=100&m=6&q=60&u=t&o=t&l=f&x=668&y=745 \n", + "35 http://img.s-msn.com/tenant/amp/entityid/BBiBXCt.img?h=75&w=100&m=6&q=60&u=t&o=t&l=f \n", + "36 http://img.s-msn.com/tenant/amp/entityid/BBiBxBl.img?h=194&w=300&m=6&q=60&u=t&o=t&l=f&x=1135&y=292 \n", + "37 http://img.s-msn.com/tenant/amp/entityid/BBizpZr.img?h=75&w=100&m=6&q=60&u=t&o=t&l=f \n", + "38 https://www.google.com/intl/en/chrome/assets/consumer/images/tiffany/featured/cubeslam-marquee.jpg \n", + "39 https://apis.google.com/js/plusone.js \n", + "40 http://h2.msn.com/CIS/56/000/000/000/000/000.gif \n", + "41 http://img.s-msn.com/tenant/amp/entityid/BBirh1d.img?h=194&w=300&m=6&q=60&u=t&o=t&l=f&x=316&y=266 \n", + "42 http://ajax.aspnetcdn.com/ajax/4.5.1/1/MicrosoftAjax.js \n", + "43 http://google.com/ \n", + "44 http://res2.windows.microsoft.com/resbox/en/windows/main/c641cc8d-f054-4fdf-9456-ee8259186e1b_5.png \n", + "45 http://img.s-msn.com/tenant/amp/entityid/BBiBuV3.img?h=250&w=206&m=6&q=60&u=t&o=t&l=f&f=jpg&x=93... \n", + "46 http://static.chartbeat.com/js/chartbeat.js \n", + "47 res://ieframe.dll/ielogo.png \n", + "48 https://www.google.com/chrome/assets/consumer/images/tiffany/thumbs/jam.jpg \n", + "49 http://s0.2mdn.net/ads/studio/cached_libs/modernizr_2.8.3_ec185bb44fe5e6bf7455d6e8ef37ed0e_no-cl... \n", + "50 http://img.s-msn.com/tenant/amp/entityid/BBisn5n.img?h=75&w=100&m=6&q=60&u=t&o=t&l=f&f=jpg \n", + "51 http://img.s-msn.com/tenant/amp/entityid/AA3ebBd.img?h=16&w=16&m=6&q=60&u=t&o=t&l=f&f=png \n", + "52 http://img.s-msn.com/tenant/amp/entityid/BBivonY.img?h=75&w=100&m=6&q=60&u=t&o=t&l=f \n", + "53 http://img.s-msn.com/tenant/amp/entityid/AA4YFW8.img?h=75&w=100&m=6&q=60&u=t&o=t&l=f \n", + "54 http://img.s-msn.com/tenant/amp/entityid/AA9BMT2.img?h=75&w=100&m=6&q=60&u=t&o=t&l=f \n", + "55 http://img.s-msn.com/tenant/amp/entityid/BBgIdBn.img?h=194&w=300&m=6&q=60&u=t&o=t&l=f \n", + "56 http://cdn.adnxs.com/ANX_async_usersync.js \n", + "57 http://img.s-msn.com/tenant/amp/entityid/BBiBePJ.img?h=75&w=100&m=6&q=60&u=t&o=t&l=f \n", + "58 http://img.s-msn.com/tenant/amp/entityid/BBipdf8.img?h=75&w=100&m=6&q=60&u=t&o=t&l=f \n", + "59 https://www.google.com/chrome/assets/consumer/images/tiffany/thumbs/cubelab.jpg \n", + "60 https://ssl.gstatic.com/s2/oz/images/widget/working-aaaaaa-16.gif \n", + "61 http://img.s-msn.com/tenant/amp/entityid/AA3HMVU.img?h=16&w=16&m=6&q=60&u=t&o=t&l=f&f=png \n", + "62 http://img.s-msn.com/tenant/amp/entityid/BBhywwx.img?h=75&w=100&m=6&q=60&u=t&o=t&l=f&x=991&y=573 \n", + "63 https://encrypted-tbn0.gstatic.com/images?q=tbn:ANd9GcSaxe2KQIvqhG5AXxx-gHKrqHqU-IGKMQ6qhHv3eHB_... \n", + "64 https://www.google.com/chrome/assets/consumer/images/tiffany/thumbs/spacecraft.jpg \n", + "65 https://www.google.com/chrome/assets/common/images/marquee/benefits-1.jpg \n", + "66 http://img.s-msn.com/tenant/amp/entityid/BBirPj3.img?h=75&w=100&m=6&q=60&u=t&o=t&l=f&f=jpg&x=675... \n", + "67 http://img.s-msn.com/tenant/amp/entityid/BBiA9OW.img?h=75&w=100&m=6&q=60&u=t&o=t&l=f \n", + "68 http://img.s-msn.com/tenant/amp/entityid/BBiA58r.img?h=194&w=300&m=6&q=60&u=t&o=t&l=f \n", + "69 https://fbstatic-a.akamaihd.net/rsrc.php/v2/yy/r/UtqCQ_Jg0Ox.js \n", + "70 http://res1.windows.microsoft.com/resbox/en/windows/main/e9979a8b-c439-452a-a09f-d3b32df0e5b1_13... \n", + "71 http://res2.windows.microsoft.com/resbox/en/windows/main/1f5c1661-b1b6-4675-820e-67f729bc7eb6_13... \n", + "72 https://www.google.com/chrome/assets/common/images/marquee/chrome-existing.jpg \n", + "73 http://img.s-msn.com/tenant/amp/entityid/AA8I0Dg.img?h=16&w=16&m=6&q=60&u=t&o=t&l=f&f=png \n", + "74 http://img.s-msn.com/tenant/amp/entityid/AA9sS2l.img?h=75&w=100&m=6&q=60&u=t&o=t&l=f&x=1342&y=1524 \n", + "75 http://windows.microsoft.com/en-us/internet-explorer/ie-8-welcome \n", + "76 http://js.microsoft.com/library/svy/windows/broker.js \n", + "77 http://res1.windows.microsoft.com/resbox/en/internet%20explorer/main/125ffa03-7e1c-4609-a37c-8b7... \n", + "78 https://fbstatic-a.akamaihd.net/rsrc.php/v2/y1/r/LVx-xkvaJ0b.png \n", + "79 http://www.google.com/url?url=http://windows.microsoft.com/en-us/internet-explorer/ie-11-worldwi... \n", + "80 http://c.go-mpulse.net/boomerang/URRYV-HX35J-LK4WZ-4TRKG-NBMKC \n", + "81 http://img.s-msn.com/tenant/amp/entityid/BBiBkSj.img?h=75&w=100&m=6&q=60&u=t&o=t&l=f&f=jpg&x=597... \n", + "82 http://img.s-msn.com/tenant/amp/entityid/AA9QOgB.img?h=333&w=311&m=6&q=60&u=t&o=t&l=f&f=jpg&x=15... \n", + "83 http://windows.microsoft.com/scripts/4.2/wol/modernizr.wol.js \n", + "84 http://res1.windows.microsoft.com/resbox/en/internet%20explorer/main/03d292e7-98d0-4ec5-b257-9cc... \n", + "85 http://api.bing.com/qsonhs.aspx?form=PRUSML&mkt=en-US&type=cb&cb=sa_inst.apiCB&q=&cp=0&sid=00&qt... \n", + "86 https://www.google.com/chrome/assets/consumer/images/tiffany/featured/sss.jpg \n", + "87 http://img.s-msn.com/tenant/amp/entityid/AA8nSkR.img?h=16&w=16&m=6&q=60&u=t&o=t&l=f&f=png \n", + "88 http://res2.windows.microsoft.com/resources/4.2/wol/shared/css/windows8_site_ltr.css \n", + "89 http://api.bing.com/qsonhs.aspx?form=PRUSML&q= \n", + "90 https://www.google.com/images/mgyhp_sm.png \n", + "91 https://www.google.com/chrome/assets/common/css/chrome.min.css \n", + "92 https://www.google.com/chrome/assets/common/images/fn/fn-cast-sprite.png \n", + "93 https://www.google.com/chrome/assets/consumer/images/tiffany/carousel/carousel-arrow-right.png \n", + "94 http://img.s-msn.com/tenant/amp/entityid/BB4yIJu.img?h=16&w=16&m=6&q=60&u=t&o=t&l=f&f=png \n", + "95 http://img.s-msn.com/tenant/amp/entityid/BB1uPMT.img?h=16&w=16&m=6&q=60&u=t&o=t&l=f&f=png \n", + "96 http://img.s-msn.com/tenant/amp/entityid/BBiwB07.img?h=194&w=300&m=6&q=60&u=t&o=t&l=f \n", + "97 http://img.s-msn.com/tenant/amp/entityid/BB5OcwT.img?h=16&w=16&m=6&q=60&u=t&o=t&l=f&f=png \n", + "98 http://res1.windows.microsoft.com/resbox/en/internet%20explorer/main/446706f9-59e1-4e52-8aa9-71a... \n", + "99 http://ads1.msads.net/CAE/IAFScreens/js/iafPlugin.js \n", + "100 http://img.s-msn.com/tenant/amp/entityid/BBikSwY.img?h=75&w=100&m=6&q=60&u=t&o=t&l=f&f=jpg&x=380... \n", + "101 http://img.s-msn.com/tenant/amp/entityid/BBi2SuX.img?h=75&w=100&m=6&q=60&u=t&o=t&l=f \n", + "102 http://res2.windows.microsoft.com/resources/4.2/wol/shared/images/merged/gl_site.png \n", + "103 http://img.s-msn.com/tenant/amp/entityid/BBiAjWi.img?h=166&w=310&m=6&q=60&u=t&o=t&l=f&f=jpg&x=36... \n", + "104 http://res2.windows.microsoft.com/resbox/en/windows/main/eb4f0171-7cb7-428a-afcc-d93a6b84525c_33... \n", + "105 https://www.google.com/intl/en/chrome/assets/consumer/images/tiffany/featured/foreveryone_feat.jpg \n", + "106 http://js.microsoft.com/library/svy/windows/pre_broker.js \n", + "107 https://www.google.com/chrome/assets/consumer/images/tiffany/fallback/browser-front.png \n", + "108 https://www.google.com/chrome/assets/common/images/marquee/benefits-5.jpg \n", + "109 http://res1.windows.microsoft.com/resbox/en/windows/main/15d2470f-0fcf-45e9-bf5b-c943236a61cf_37... \n", + "110 http://ajax.microsoft.com/ajax/4.0/4/MicrosoftAjax.js \n", + "111 http://img.s-msn.com/tenant/amp/entityid/BBiA5gZ.img?h=166&w=310&m=6&q=60&u=t&o=t&l=f&f=jpg&x=79... \n", + "112 https://www.google.com/images/icons/product/chrome-48.png \n", + "113 http://img.s-msn.com/tenant/amp/entityid/BBiBb76.img?h=75&w=100&m=6&q=60&u=t&o=t&l=f&f=jpg&x=122... \n", + "114 http://img.s-msn.com/tenant/amp/entityid/BBijS0f.img?h=75&w=100&m=6&q=60&u=t&o=t&l=f&x=293&y=62 \n", + "115 http://img.s-msn.com/tenant/amp/entityid/BBiBDXv.img?h=75&w=100&m=6&q=60&u=t&o=t&l=f&x=1008&y=1234 \n", + "116 http://img.s-msn.com/tenant/amp/entityid/AA9QDIj.img?h=75&w=100&m=6&q=60&u=t&o=t&l=f \n", + "117 http://img.s-msn.com/tenant/amp/entityid/BBiAyNr.img?h=368&w=622&m=6&q=60&u=t&o=t&l=f&f=jpg \n", + "118 https://www.google.com/webhp?hl=en \n", + "119 https://www.google.com/chrome/assets/consumer/images/tiffany/featured/spacecraft.jpg \n", + "120 http://img.s-msn.com/tenant/amp/entityid/BBikqnc.img?h=75&w=100&m=6&q=60&u=t&o=t&l=f&f=jpg&x=538... \n", + "121 https://ssl.gstatic.com/gb/images/b_8d5afc09.png \n", + "122 https://www.google.com/chrome/assets/consumer/images/tiffany/featured/spellup.png \n", + "123 http://img.s-msn.com/tenant/amp/entityid/BBiyV8e.img?h=75&w=100&m=6&q=60&u=t&o=t&l=f \n", + "124 https://www.google.com/chrome/assets/consumer/images/tiffany/featured/build-marquee.jpg \n", + "125 http://download.microsoft.com/download/7/1/7/7179A150-F2D2-4502-9D70-4B59EA148EAA/IE11-Windows6.... \n", + "126 https://www.google.com/chrome/browser/thankyou.html?brand=CHNG&platform=win&clickonceinstalled=1 \n", + "127 http://img.s-msn.com/tenant/amp/entityid/BBiskd6.img?h=75&w=100&m=6&q=60&u=t&o=t&l=f \n", + "128 http://img.s-msn.com/tenant/amp/entityid/BBhHuu9.img?h=75&w=100&m=6&q=60&u=t&o=t&l=f&x=598&y=473 \n", + "129 http://img.s-msn.com/tenant/amp/entityid/AA2CNVO.img?h=16&w=16&m=6&q=60&u=t&o=t&l=f&f=png \n", + "130 http://img.s-msn.com/tenant/amp/entityid/BBd5X.img?h=16&w=16&m=6&q=60&u=t&o=t&l=f&f=png \n", + "131 https://apis.google.com/_/scs/apps-static/_/js/k=oz.plusone.en.AIDx_pw_nnE.O/m=p1b,p1p/rt=j/sv=1... \n", + "132 http://c.go-mpulse.net/boomerang/config.js?key=URRYV-HX35J-LK4WZ-4TRKG-NBMKC&d=www.msn.com&t=475... \n", + "133 http://cdn.adnxs.com/p/c3/5e/72/94/c35e729453d37d643331b3e14d64444f.gif \n", + "134 http://img.s-msn.com/tenant/amp/entityid/BBiAy9J.img?h=75&w=100&m=6&q=60&u=t&o=t&l=f&x=1224&y=619 \n", + "135 https://apis.google.com/js/api.js \n", + "136 http://img.s-msn.com/tenant/amp/entityid/AA9TlSL.img?h=75&w=100&m=6&q=60&u=t&o=t&l=f&f=jpg \n", + "137 http://img.s-msn.com/tenant/amp/entityid/BBiBAZB.img?h=194&w=300&m=6&q=60&u=t&o=t&l=f \n", + "138 http://img.s-msn.com/tenant/amp/entityid/BBivzDB.img?h=194&w=300&m=6&q=60&u=t&o=t&l=f \n", + "139 http://res1.windows.microsoft.com/resbox/en/6.2/main/1f9ad235-787b-42fa-bfb5-12f191dc0c23_38.js \n", + "140 https://www.google.com/chrome/assets/consumer/images/tiffany/featured/jam.png \n", + "141 http://img.s-msn.com/tenant/amp/entityid/BB3dBUk.img?h=16&w=16&m=6&q=60&u=t&o=t&l=f&f=png \n", + "142 http://img.s-msn.com/tenant/amp/entityid/AA6pevu.img?h=16&w=16&m=6&q=60&u=t&o=t&l=f&f=png \n", + "143 http://img.s-msn.com/tenant/amp/entityid/BBisXtQ.img?h=75&w=100&m=6&q=60&u=t&o=t&l=f&x=1479&y=495 \n", + "144 http://img.s-msn.com/tenant/amp/entityid/BBisAQz.img?h=75&w=100&m=6&q=60&u=t&o=t&l=f \n", + "145 http://img.s-msn.com/tenant/amp/entityid/AA9yI4A.img?h=194&w=300&m=6&q=60&u=t&o=t&l=f&x=1293&y=926 \n", + "146 http://res2.windows.microsoft.com/resbox/en/windows/main/08ce8e54-41ba-4695-9963-a7669022faec_12... \n", + "147 http://nexus.ensighten.com/wol/Bootstrap.js \n", + "148 http://static-hp-eus.s-msn.com/sc/87/a01786.eot? \n", + "149 http://img.s-msn.com/tenant/amp/entityid/BBijWr7.img?h=75&w=100&m=6&q=60&u=t&o=t&l=f&x=187&y=141 \n", + "150 http://windows.microsoft.com/en-us/internet-explorer/download-ie \n", + "151 https://www.google.com/chrome/assets/consumer/images/tiffany/thumbs/racer-thumb.png \n", + "152 https://www.google.com/chrome/assets/consumer/images/tiffany/featured/photowall-marquee.jpg \n", + "153 http://img.s-msn.com/tenant/amp/entityid/BB47wtI.img?h=16&w=16&m=6&q=60&u=t&o=t&l=f&f=png \n", + "154 http://img.s-msn.com/tenant/amp/entityid/BBiyswS.img?h=75&w=100&m=6&q=60&u=t&o=t&l=f&x=1558&y=403 \n", + "155 http://go.microsoft.com/fwlink/?LinkID=121792 \n", + "156 http://res2.windows.microsoft.com/resbox/en/windows/main/566128a7-5192-449d-99b0-11b4459eaf1d_8.js \n", + "157 http://res2.windows.microsoft.com/resbox/en/windows/main/e64030e7-ad8c-4be8-a45a-b69a2df3caef_13... \n", + "158 https://clients1.google.com/complete/search?client=heirloom-hp&hl=en&sugexp=msedr&gs_rn=34&gs_ri... \n", + "159 https://ssl.gstatic.com/images/icons/gplus-16.png \n", + "160 http://img.s-msn.com/tenant/amp/entityid/BB6qRzt.img?h=16&w=16&m=6&q=60&u=t&o=t&l=f&f=png \n", + "161 http://img.s-msn.com/tenant/amp/entityid/BBiB1Re.img?h=75&w=100&m=6&q=60&u=t&o=t&l=f&x=1395&y=610 \n", + "162 http://img.s-msn.com/tenant/amp/entityid/AA9sWtD.img?h=75&w=100&m=6&q=60&u=t&o=t&l=f&x=1085&y=1115 \n", + "163 https://www.google.com/search?hl=en&source=hp&q=internet+explorer+11&gbv=2&oq=internet+explorer+... \n", + "164 http://res1.windows.microsoft.com/resources/4.2/wol/shared/images/merged/gl_site.png \n", + "165 https://www.google.com/chrome/assets/consumer/images/tiffany/bg.png \n", + "166 https://www.google.com/chrome/assets/common/images/marquee/mobile-benefits-4.jpg \n", + "167 http://s0.2mdn.net/2992003/1-14-1214_NET_WEB_simple_300x250_AS2.jpg \n", + "168 http://img.s-msn.com/tenant/amp/entityid/BB55gcf.img?h=16&w=16&m=6&q=60&u=t&o=t&l=f&f=png \n", + "169 http://img.s-msn.com/tenant/amp/entityid/AA9u2Q7.img?h=75&w=100&m=6&q=60&u=t&o=t&l=f \n", + "170 http://res1.windows.microsoft.com/resbox/en/windows/main/49eb9f77-0c92-450c-a267-999f2caaa56b_18... \n", + "171 http://nexus.ensighten.com/wol/prod/code/dc03d35b723c8be574a55bce3e34cfaa.js?conditionId0=350222 \n", + "172 https://www.google.com/chrome/assets/consumer/images/tiffany/browser/browser-play.png \n", + "173 https://www.google.com/chrome/assets/consumer/images/tiffany/featured/evolution.png \n", + "174 http://img.s-msn.com/tenant/amp/entityid/BBil0Dw.img?h=75&w=100&m=6&q=60&u=t&o=t&l=f&f=jpg \n", + "175 http://img.s-msn.com/tenant/amp/entityid/BBiBvW7.img?h=75&w=100&m=6&q=60&u=t&o=t&l=f&x=126&y=165 \n", + "176 http://img.s-msn.com/tenant/amp/entityid/BBinKFA.img?h=75&w=100&m=6&q=60&u=t&o=t&l=f&x=775&y=383 \n", + "177 http://img.s-msn.com/tenant/amp/entityid/AA8wBsQ.img?h=16&w=16&m=6&q=60&u=t&o=t&l=f&f=png \n", + "178 http://img.s-msn.com/tenant/amp/entityid/BBiBGaO.img?h=75&w=100&m=6&q=60&u=t&o=t&l=f&x=1271&y=766 \n", + "179 http://img.s-msn.com/tenant/amp/entityid/BBisahq.img?h=75&w=100&m=6&q=60&u=t&o=t&l=f \n", + "180 http://img.s-msn.com/tenant/amp/entityid/BB1GkQd.img?h=16&w=16&m=6&q=60&u=t&o=t&l=f&f=png \n", + "181 http://res1.windows.microsoft.com/siteresources/siteresource.ashx?id=AtlasFrameStyle&hash=44a2de... \n", + "182 http://res1.windows.microsoft.com/resbox/en/internet%20explorer/2012-win8ga/1125b14f-653f-405e-9... \n", + "183 http://img.s-msn.com/tenant/amp/entityid/BBiB07V.img?h=250&w=206&m=6&q=60&u=t&o=t&l=f&f=jpg&x=14... \n", + "184 http://c.microsoft.com/ms.js \n", + "185 http://js.microsoft.com/library/svy/windows/broker-config.js?1427036992998 \n", + "186 https://apis.google.com/_/scs/apps-static/_/js/k=oz.gapi.en_US.QMkB6_tgC9o.O/m=auth/exm=plusone/... \n", + "187 http://img.s-msn.com/tenant/amp/entityid/AA9H4sf.img?h=75&w=100&m=6&q=60&u=t&o=t&l=f&x=453&y=585 \n", + "188 http://res2.windows.microsoft.com/resbox/en/windows/main/5a7873a1-fd4e-4462-8ab2-32bd729117c6_7.png \n", + "189 https://ssl.google-analytics.com/ga.js \n", + "190 https://www.google.com/intl/en/chrome/assets/consumer/images/tiffany/thumbs/noweverywhere_thumb.jpg \n", + "191 https://www.google.com/chrome/assets/consumer/css/tiffany.css \n", + "192 http://ads1.msads.net/library/8.3/dapmsn.js \n", + "193 http://img.s-msn.com/tenant/amp/entityid/AA9Aicg.img?h=16&w=16&m=6&q=60&u=t&o=t&l=f&f=png \n", + "194 http://res2.windows.microsoft.com/resbox/en/internet%20explorer/main/e7a2d666-8177-4623-a1f8-da3... \n", + "195 http://res2.windows.microsoft.com/resbox/en/windows/main/4300ae64-546c-4bbe-9026-6779b3684fb9_18... \n", + "196 https://www.google.com/chrome/assets/consumer/images/tiffany/featured/kickwithchrome.jpg \n", + "197 http://img.s-msn.com/tenant/amp/entityid/BB6D3Lx.img?h=16&w=16&m=6&q=60&u=t&o=t&l=f&f=png \n", + "198 http://img.s-msn.com/tenant/amp/entityid/BBinWm2.img?h=75&w=100&m=6&q=60&u=t&o=t&l=f&x=921&y=1281 \n", + "199 http://s0.2mdn.net/879366/dfa7banner_flash_html_inpage_rendering_lib_200_70.js \n", + "200 http://img.s-msn.com/tenant/amp/entityid/AA90cIE.img?h=16&w=16&m=6&q=60&u=t&o=t&l=f&f=png \n", + "201 http://img.s-msn.com/tenant/amp/entityid/BBgF1kV.img?h=194&w=300&m=6&q=60&u=t&o=t&l=f&x=1377&y=713 \n", + "202 http://res1.windows.microsoft.com/siteresources/siteresource.ashx?id=wolNotificationCSS&hash=825... \n", + "203 http://windows.microsoft.com/scripts/4.2/wol/wol.common.js \n", + "204 http://res1.windows.microsoft.com/resbox/en/windows/main/4300ae64-546c-4bbe-9026-6779b3684fb8_32... \n", + "205 https://www.google.com/xjs/_/js/k=xjs.hp.en_US.votPZMqb6rk.O/m=sb_he,jsa,d,csi/rt=j/d=1/t=zcms/r... \n", + "206 http://img.s-msn.com/tenant/amp/entityid/AA3l39r.img?h=16&w=16&m=6&q=60&u=t&o=t&l=f&f=png \n", + "207 http://img.s-msn.com/tenant/amp/entityid/BBfOhY0.img?h=194&w=300&m=6&q=60&u=t&o=t&l=f&x=1346&y=387 \n", + "208 https://clients1.google.com/complete/search?client=heirloom-hp&hl=en&sugexp=msedr&gs_rn=34&gs_ri... \n", + "209 https://clients1.google.com/complete/search?client=heirloom-hp&hl=en&sugexp=msedr&gs_rn=34&gs_ri... \n", + "210 https://www.google.com/chrome/assets/common/images/fn/fn-download-sprite.png \n", + "211 http://img.s-msn.com/tenant/amp/entityid/AA6u4ZP.img?h=16&w=16&m=6&q=60&u=t&o=t&l=f&f=png \n", + "212 http://img.s-msn.com/tenant/amp/entityid/BBiphG3.img?h=75&w=100&m=6&q=60&u=t&o=t&l=f&x=867&y=330 \n", + "213 http://res2.windows.microsoft.com/resbox/en/internet%20explorer/main/faeeabcb-551d-42b8-bc2e-f7b... \n", + "214 http://cdn.adnxs.com/v/s/13/trk.js \n", + "215 http://res2.windows.microsoft.com/resources/4.2/wol/shared/images/merged/gl_social.svg \n", + "216 https://www.google.com/?gws_rd=ssl \n", + "217 https://www.google.com/images/srpr/nav_logo80.png \n", + "218 https://clients1.google.com/complete/search?client=heirloom-hp&hl=en&sugexp=msedr&gs_rn=34&gs_ri... \n", + "219 http://static-hp-eus.s-msn.com/en-us/homepage/_sc/js/6670b51d-245bff56/direction=ltr.locales=en-... \n", + "220 http://img.s-msn.com/tenant/amp/entityid/BBiAtof.img?h=75&w=100&m=6&q=60&u=t&o=t&l=f&f=jpg&x=158... \n", + "221 http://img.s-msn.com/tenant/amp/entityid/AA9tx0G.img?h=75&w=100&m=6&q=60&u=t&o=t&l=f \n", + "222 http://img.s-msn.com/tenant/amp/entityid/BBi6pvi.img?h=75&w=100&m=6&q=60&u=t&o=t&l=f&x=192&y=264 \n", + "223 http://img.s-msn.com/tenant/amp/entityid/BBimjCJ.img?h=75&w=100&m=6&q=60&u=t&o=t&l=f \n", + "224 https://clients1.google.com/complete/search?client=heirloom-hp&hl=en&sugexp=msedr&gs_rn=34&gs_ri... \n", + "225 https://clients1.google.com/complete/search?client=heirloom-hp&hl=en&sugexp=msedr&gs_rn=34&gs_ri... \n", + "226 http://img.s-msn.com/tenant/amp/entityid/BBiytP8.img?h=75&w=100&m=6&q=60&u=t&o=t&l=f&x=1376&y=749 \n", + "227 http://img.s-msn.com/tenant/amp/entityid/BB1FUYS.img?h=16&w=16&m=6&q=60&u=t&o=t&l=f&f=png \n", + "228 http://img.s-msn.com/tenant/amp/entityid/AA42mEQ.img?h=16&w=16&m=6&q=60&u=t&o=t&l=f&f=png \n", + "229 https://clients1.google.com/complete/search?client=heirloom-hp&hl=en&sugexp=msedr&gs_rn=34&gs_ri... \n", + "230 http://res2.windows.microsoft.com/resbox/en/windows/main/03df314e-c18c-4d6c-9b89-f5490b1b5c0b_17... \n", + "231 https://www.google.com/chrome/assets/consumer/images/tiffany/thumbs/story.jpg \n", + "232 https://www.google.com/chrome/assets/consumer/images/tiffany/thumbs/sss.png \n", + "233 https://clients1.google.com/complete/search?client=heirloom-hp&hl=en&sugexp=msedr&gs_rn=34&gs_ri... \n", + "234 https://www.gstatic.com/external_hosted/threejs-r49/Three.js \n", + "235 https://www.google.com/chrome/assets/consumer/images/tiffany/thumbs/spellup.png \n", + "236 http://img.s-msn.com/tenant/amp/entityid/BBiC5ob.img?h=194&w=300&m=6&q=60&u=t&o=t&l=f \n", + "237 http://res1.windows.microsoft.com/resbox/en/internet%20explorer/main/55494218-ac03-4875-a911-603... \n", + "238 https://www.google.com/logos/doodles/2015/emmy-noethers-133rd-birthday-5681045017985024-hp.jpg \n", + "239 http://www.google.com/url?url=http://windows.microsoft.com/en-us/internet-explorer/download-ie&r... \n", + "240 https://www.google.com/chrome/assets/common/images/content/close-icon.png \n", + "241 https://www.google.com/chrome/assets/consumer/images/tiffany/carousel/carousel-thumb-video.png \n", + "242 https://ssl.gstatic.com/accounts/o/2006856415-postmessagerelay.js \n", + "243 http://img.s-msn.com/tenant/amp/entityid/BB6Dp75.img?h=16&w=16&m=6&q=60&u=t&o=t&l=f&f=png \n", + "244 http://img.s-msn.com/tenant/amp/entityid/BBiC6Bn.img?h=75&w=100&m=6&q=60&u=t&o=t&l=f&x=317&y=509 \n", + "245 http://img.s-msn.com/tenant/amp/entityid/BBivlpc.img?h=75&w=100&m=6&q=60&u=t&o=t&l=f \n", + "246 http://img.s-msn.com/tenant/amp/entityid/BB1Prxu.img?h=16&w=16&m=6&q=60&u=t&o=t&l=f&f=png \n", + "247 http://img.s-msn.com/tenant/amp/entityid/BBivpfH.img?h=194&w=300&m=6&q=60&u=t&o=t&l=f \n", + "248 https://www.google.com/chrome/assets/consumer/images/tiffany/thumbs/evolution.jpg \n", + "249 https://www.google.com/chrome/assets/consumer/js/tiffany/tiffany.min.js \n", + "250 http://res2.windows.microsoft.com/resbox/en/internet%20explorer/main/747c11c9-c083-4d40-950c-a46... \n", + "251 https://fonts.googleapis.com/css?family=Open+Sans:300,400,600,700&subset=latin \n", + "252 https://www.google.com/chrome/assets/consumer/images/tiffany/browser/browser-spin-info.png \n", + "253 https://ssl.gstatic.com/s2/oz/images/sprites/plus-button-svg-9b2dfccb6db9dfc9b153277b81e1dec8.png \n", + "254 https://oauth.googleusercontent.com/gadgets/js/core:rpc:shindig.random:shindig.sha1.js?c=2 \n", + "255 http://img.s-msn.com/tenant/amp/entityid/AA9H9ZD.img?h=16&w=16&m=6&q=60&u=t&o=t&l=f&f=png \n", + "256 http://img.s-msn.com/tenant/amp/entityid/AA3lqJx.img?h=16&w=16&m=6&q=60&u=t&o=t&l=f&f=png \n", + "257 http://img.s-msn.com/tenant/amp/entityid/BBip5DU.img?h=75&w=100&m=6&q=60&u=t&o=t&l=f&x=1283&y=703 \n", + "258 http://res2.windows.microsoft.com/resbox/en/windows/main/67706439-4969-4bc3-9e3b-50770f40b20e_42.js \n", + "259 http://img.s-msn.com/tenant/amp/entityid/BBik7kX.img?h=333&w=311&m=6&q=60&u=t&o=t&l=f&f=jpg&x=13... \n", + "260 res://ieframe.dll/about.js \n", + "261 https://www.google.com/chrome/assets/common/images/chrome_logo_2x.png \n", + "262 http://img.s-msn.com/tenant/amp/entityid/BBioS3I.img?h=75&w=100&m=6&q=60&u=t&o=t&l=f&f=jpg&x=744... \n", + "263 http://img.s-msn.com/tenant/amp/entityid/BBiyEnw.img?h=75&w=100&m=6&q=60&u=t&o=t&l=f&x=538&y=230 \n", + "264 http://img.s-msn.com/tenant/amp/entityid/AA9QA7z.img?h=75&w=100&m=6&q=60&u=t&o=t&l=f \n", + "265 http://res1.windows.microsoft.com/resbox/en/windows/main/93e33485-fea3-4687-a642-2c5dd233522f_12... \n", + "266 http://img.s-msn.com/tenant/amp/entityid/AA3ltd9.img?h=16&w=16&m=6&q=60&u=t&o=t&l=f&f=png \n", + "267 http://img.s-msn.com/tenant/amp/entityid/AA9sPuy.img?h=75&w=100&m=6&q=60&u=t&o=t&l=f \n", + "268 http://img.s-msn.com/tenant/amp/entityid/BBgX3ni.img?h=16&w=16&m=6&q=60&u=t&o=t&l=f&f=png \n", + "269 http://img.s-msn.com/tenant/amp/entityid/BBiqU1f.img?h=75&w=100&m=6&q=60&u=t&o=t&l=f&f=jpg \n", + "270 http://windows.microsoft.com/scripts/4.2/wol/ClientBiSettings.Wol.js?t=1427036400000 \n", + "271 https://clients1.google.com/complete/search?client=heirloom-hp&hl=en&sugexp=msedr&gs_rn=34&gs_ri... \n", + "272 https://www.gstatic.com/external_hosted/modernizr/modernizr.js \n", + "273 http://cdn.adnxs.com/msft/ContainerTag.js?tag_id=3282770&domain=pixelus.alephd.com&switch=on&hei... \n", + "274 http://img.s-msn.com/tenant/amp/entityid/BBdi2hw.img?h=75&w=100&m=6&q=60&u=t&o=t&l=f&x=316&y=185 \n", + "275 http://img.s-msn.com/tenant/amp/entityid/AA9Eys7.img?h=75&w=100&m=6&q=60&u=t&o=t&l=f&x=1270&y=944 \n", + "276 http://res2.windows.microsoft.com/resbox/en/windows/main/736e3781-6a19-4119-b717-e61f0d8982c0_12... \n", + "277 https://clients1.google.com/complete/search?client=heirloom-hp&hl=en&sugexp=msedr&gs_rn=34&gs_ri... \n", + "278 http://res1.windows.microsoft.com/resbox/en/windows/main/ab21605f-82f5-4052-8125-d13b96cc9075_5.png \n", + "279 http://h2.msn.com/CIS/18/000/000/000/040/613.gif \n", + "280 http://img.s-msn.com/tenant/amp/entityid/BB7785z.img?h=75&w=100&m=6&q=60&u=t&o=t&l=f&x=935&y=814 \n", + "281 http://res2.windows.microsoft.com/resources/4.2/wol/shared/images/merged/gl_social.png \n", + "282 http://res1.windows.microsoft.com/siteresources/siteresource.ashx?id=AtlasFrameScripts&hash=b8e0... \n", + "283 http://windows.microsoft.com/en-us/internet-explorer/ie-11-worldwide-languages \n", + "284 https://www.google.com/chrome/index.html?hl=en&brand=CHNG&utm_source=en-hpp&utm_medium=hpp&utm_c... \n", + "285 https://www.google.com/tools/dlpage/res/chrome/images/chrome_throbber_fast_16.gif \n", + "286 http://img.s-msn.com/tenant/amp/entityid/BBiLCz.img?h=16&w=16&m=6&q=60&u=t&o=t&l=f&f=png \n", + "287 http://img.s-msn.com/tenant/amp/entityid/BB1T53B.img?h=16&w=16&m=6&q=60&u=t&o=t&l=f&f=png \n", + "288 http://img.s-msn.com/tenant/amp/entityid/BBivSbK.img?h=194&w=300&m=6&q=60&u=t&o=t&l=f&x=1016&y=367 \n", + "289 https://ssl.gstatic.com/gb/js/sem_cad439dbb41f1ffcf4bd69ea4aa642d9.js \n", + "290 http://img.s-msn.com/tenant/amp/entityid/BBiApFJ.img?h=250&w=206&m=6&q=60&u=t&o=t&l=f&f=jpg&x=38... \n", + "291 http://img.s-msn.com/tenant/amp/entityid/AA5KWCN.img?h=16&w=16&m=6&q=60&u=t&o=t&l=f&f=png \n", + "292 http://img.s-msn.com/tenant/amp/entityid/BBiBObG.img?h=333&w=311&m=6&q=60&u=t&o=t&l=f&f=jpg&x=10... \n", + "293 http://js.microsoft.com/library/svy/windows/broker-config.js?1427037004736 \n", + "294 https://fonts.gstatic.com/s/opensans/v10/cJZKeOuBrn4kERxqtaUH3fY6323mHUZFJMgTvxaG2iE.eot \n", + "295 https://www.google.com/intl/en/chrome/browser/privacy/eula_text.html \n", + "296 res://ieframe.dll/about.dlg \n", + "297 http://img.s-msn.com/tenant/amp/entityid/BBiB7KA.img?h=166&w=310&m=6&q=60&u=t&o=t&l=f&f=jpg&x=13... \n", + "298 https://www.google.com/images/nav_logo176.png \n", + "299 https://clients1.google.com/complete/search?client=heirloom-hp&hl=en&sugexp=msedr&gs_rn=34&gs_ri... \n", + "300 http://static-hp-eus.s-msn.com/_h/804ff984/webcore/externalscripts/jquery/jquery-1.11.1.min.js \n", + "301 http://img.s-msn.com/tenant/amp/entityid/AA3dLwz.img?h=16&w=16&m=6&q=60&u=t&o=t&l=f&f=png \n", + "302 http://res2.windows.microsoft.com/resbox/en/windows/main/3ef01e72-0832-46f0-a6e1-23f9d5a07d86_14... \n", + "303 https://www.google.com/chrome/assets/consumer/images/tiffany/thumbs/photowall.jpg \n", + "304 https://www.google.com/chrome/assets/consumer/images/tiffany/carousel/carousel-arrow-left.png \n", + "305 https://www.google.com/chrome/assets/consumer/images/tiffany/featured/awesomebook_feat.jpg \n", + "306 https://www.google.com/chrome/assets/common/js/chrome-installer.min.js \n", + "307 http://img.s-msn.com/tenant/amp/entityid/BBiAI1e.img?h=368&w=522&m=6&q=60&u=t&o=t&l=f&f=jpg&x=10... \n", + "308 http://img.s-msn.com/tenant/amp/entityid/BBijUBA.img?h=75&w=100&m=6&q=60&u=t&o=t&l=f \n", + "309 http://img.s-msn.com/tenant/amp/entityid/BBh0W6o.img?h=194&w=300&m=6&q=60&u=t&o=t&l=f \n", + "310 https://www.facebook.com/fr/u.php?p=391363987594223&m=3052188718541915848 \n", + "311 https://2542116.fls.doubleclick.net/activityi;src=2542116;type=clien612;cat=chromx2;ord=87528731... \n", + "312 http://img.s-msn.com/tenant/amp/entityid/BB4kwB1.img?h=16&w=16&m=6&q=60&u=t&o=t&l=f&f=png \n", + "313 http://img.s-msn.com/tenant/amp/entityid/AA9NTYc.img?h=75&w=100&m=6&q=60&u=t&o=t&l=f \n", + "314 http://img.s-msn.com/tenant/amp/entityid/AA9TnuR.img?h=75&w=100&m=6&q=60&u=t&o=t&l=f \n", + "315 http://img.s-msn.com/tenant/amp/entityid/BBiydF6.img?h=333&w=311&m=6&q=60&u=t&o=t&l=f&f=jpg&x=48... \n", + "316 http://res1.windows.microsoft.com/resbox/en/internet%20explorer/2013-responsive/17c8f1a9-a948-48... \n", + "317 https://apis.google.com/_/scs/apps-static/_/js/k=oz.gapi.en_US.QMkB6_tgC9o.O/m=plusone/rt=j/sv=1... \n", + "318 https://2542116.fls.doubleclick.net/activityi;src=2542116;type=clien612;cat=chromx;ord=268133625... \n", + "319 http://img.s-msn.com/tenant/amp/entityid/BB5SfLo.img?h=16&w=16&m=6&q=60&u=t&o=t&l=f&f=png \n", + "320 http://img.s-msn.com/tenant/amp/entityid/BBizSjS.img?h=166&w=310&m=6&q=60&u=t&o=t&l=f&f=jpg&x=10... \n", + "321 https://www.google.com/chrome/assets/consumer/images/tiffany/thumbs/download.jpg \n", + "322 https://www.google.com/chrome/assets/consumer/images/tiffany/featured/hobbit.jpg \n", + "323 https://www.google.com/chrome/assets/consumer/images/tiffany/thumbs/hobbit.jpg \n", + "324 http://js.microsoft.com/library/svy/windows/broker-config.js?1427036960483 \n", + "325 https://www.google.com/chrome/assets/consumer/images/tiffany/thumbs/oz.jpg \n", + "326 https://www.google.com/intl/en/chrome/assets/consumer/images/tiffany/thumbs/cubeslam-thumb.png \n", + "327 http://res1.windows.microsoft.com/resbox/en/windows/2012-win8ga/6ef177b8-1a15-4e39-bdda-6b672064... \n", + "328 https://www.google.com/intl/en/chrome/assets/consumer/images/tiffany/thumbs/foreveryone_thumb.jpg \n", + "329 https://www.google.com/chrome/assets/consumer/images/tiffany/thumbs/kickwithchrome.jpg \n", + "330 https://www.google.com/chrome/assets/consumer/images/tiffany/thumbs/awesomebook.jpg \n", + "331 https://www.google.com/chrome/assets/consumer/images/tiffany/featured/racer-marquee.jpg \n", + "332 https://dl.google.com/update2/installers/clickonce/GoogleInstaller_en.application?appguid%3D%7B8... \n", + "333 https://www.google.com/chrome/assets/consumer/images/tiffany/fallback/home_win.png \n", + "334 https://www.google.com/chrome/assets/common/images/marquee/mobile-benefits-2.jpg \n", + "335 https://www.google.com/chrome/assets/common/images/marquee/mobile-benefits-3.jpg \n", + "336 https://www.google.com/chrome/assets/consumer/images/tiffany/featured/story.png \n", + "337 https://clients1.google.com/complete/search?client=heirloom-hp&hl=en&sugexp=msedr&gs_rn=34&gs_ri... \n", + "338 https://clients1.google.com/complete/search?client=heirloom-hp&hl=en&sugexp=msedr&gs_rn=34&gs_ri... \n", + "339 https://www.google.com/chrome/assets/consumer/images/tiffany/thumbs/build.jpg \n", + "340 https://www.google.com/chrome/assets/common/images/fn/fn-custom-sprite.png \n", + "341 https://www.google.com/chrome/assets/consumer/images/tiffany/carousel/carousel-sidefade-right.png \n", + "342 http://res1.windows.microsoft.com/resbox/en/windows/main/cbc6f38d-b79c-4bff-8b67-b81eb9676ab3_5.png \n", + "343 https://www.google.com/js/gweb/analytics/autotrack.js \n", + "344 https://accounts.google.com/o/oauth2/postmessageRelay?parent=https%3A%2F%2Fwww.google.com \n", + "345 https://apis.google.com/_/scs/apps-static/_/js/k=oz.gapi.en_US.QMkB6_tgC9o.O/m=googleapis_client... \n", + "346 https://2542116.fls.doubleclick.net/activityi;src=2542116;type=clien612;cat=Chrom0;ord=505952630... \n", + "347 https://s.ytimg.com/yts/jsbin/www-widgetapi-vflr-TgN1/www-widgetapi.js \n", + "348 https://dl.google.com/update2/1.3.26.9/GoogleInstaller_en.application?appguid%3D%7B8A69D345-D564... \n", + "349 https://www.google.com/chrome/assets/consumer/images/tiffany/fallback/browser-shine.png \n", + "350 https://www.google.com/chrome/assets/common/images/icons-sprite.png \n", + "\n", + " ACCESS TIME \n", + "0 03/22/2015 11:09:17 \n", + "1 03/22/2015 11:09:18 \n", + "2 03/22/2015 11:09:18 \n", + "3 03/22/2015 11:09:19 \n", + "4 03/22/2015 11:10:22 \n", + "5 03/22/2015 11:10:54 \n", + "6 03/22/2015 11:10:54 \n", + "7 03/22/2015 11:11:12 \n", + "8 03/22/2015 11:10:54 \n", + "9 03/22/2015 11:10:55 \n", + "10 03/22/2015 11:10:55 \n", + "11 03/22/2015 11:09:02 \n", + "12 03/22/2015 11:10:55 \n", + "13 03/22/2015 11:09:02 \n", + "14 03/22/2015 11:10:54 \n", + "15 03/22/2015 11:09:03 \n", + "16 03/22/2015 11:09:18 \n", + "17 03/22/2015 11:09:18 \n", + "18 03/22/2015 11:09:18 \n", + "19 03/22/2015 11:09:18 \n", + "20 03/22/2015 11:09:18 \n", + "21 03/22/2015 11:10:31 \n", + "22 03/22/2015 11:09:03 \n", + "23 03/22/2015 11:09:35 \n", + "24 03/22/2015 11:09:19 \n", + "25 03/22/2015 11:09:18 \n", + "26 03/22/2015 11:09:18 \n", + "27 03/22/2015 11:09:01 \n", + "28 03/22/2015 11:09:03 \n", + "29 03/22/2015 11:09:18 \n", + "30 03/22/2015 11:09:18 \n", + "31 03/22/2015 11:09:18 \n", + "32 03/22/2015 11:09:18 \n", + "33 03/22/2015 11:10:22 \n", + "34 03/22/2015 11:09:18 \n", + "35 03/22/2015 11:09:18 \n", + "36 03/22/2015 11:09:18 \n", + "37 03/22/2015 11:09:18 \n", + "38 03/22/2015 11:10:55 \n", + "39 03/22/2015 11:11:13 \n", + "40 03/22/2015 11:09:02 \n", + "41 03/22/2015 11:09:18 \n", + "42 03/22/2015 11:10:22 \n", + "43 NaN \n", + "44 03/22/2015 11:10:23 \n", + "45 03/22/2015 11:09:02 \n", + "46 03/22/2015 11:09:17 \n", + "47 03/22/2015 11:09:28 \n", + "48 03/22/2015 11:10:54 \n", + "49 03/22/2015 11:09:02 \n", + "50 03/22/2015 11:09:03 \n", + "51 03/22/2015 11:09:03 \n", + "52 03/22/2015 11:09:18 \n", + "53 03/22/2015 11:09:18 \n", + "54 03/22/2015 11:09:18 \n", + "55 03/22/2015 11:09:18 \n", + "56 03/22/2015 11:09:03 \n", + "57 03/22/2015 11:09:18 \n", + "58 03/22/2015 11:09:18 \n", + "59 03/22/2015 11:10:54 \n", + "60 03/22/2015 11:11:14 \n", + "61 03/22/2015 11:09:18 \n", + "62 03/22/2015 11:09:18 \n", + "63 03/22/2015 11:09:48 \n", + "64 03/22/2015 11:10:54 \n", + "65 03/22/2015 11:11:12 \n", + "66 03/22/2015 11:09:03 \n", + "67 03/22/2015 11:09:18 \n", + "68 03/22/2015 11:09:18 \n", + "69 03/22/2015 11:10:23 \n", + "70 03/22/2015 11:10:23 \n", + "71 03/22/2015 11:10:23 \n", + "72 03/22/2015 11:11:12 \n", + "73 03/22/2015 11:09:03 \n", + "74 03/22/2015 11:09:18 \n", + "75 03/22/2015 11:09:19 \n", + "76 03/22/2015 11:10:22 \n", + "77 03/22/2015 11:09:19 \n", + "78 03/22/2015 11:10:23 \n", + "79 03/22/2015 11:09:54 \n", + "80 03/22/2015 11:09:02 \n", + "81 03/22/2015 11:09:03 \n", + "82 03/22/2015 11:09:19 \n", + "83 03/22/2015 11:10:22 \n", + "84 03/22/2015 11:09:19 \n", + "85 03/22/2015 11:09:32 \n", + "86 03/22/2015 11:10:55 \n", + "87 03/22/2015 11:09:18 \n", + "88 03/22/2015 11:10:22 \n", + "89 03/22/2015 11:09:19 \n", + "90 03/22/2015 11:10:52 \n", + "91 03/22/2015 11:11:12 \n", + "92 03/22/2015 11:11:12 \n", + "93 03/22/2015 11:10:54 \n", + "94 03/22/2015 11:09:03 \n", + "95 03/22/2015 11:09:35 \n", + "96 03/22/2015 11:09:18 \n", + "97 03/22/2015 11:09:18 \n", + "98 03/22/2015 11:09:52 \n", + "99 03/22/2015 11:09:02 \n", + "100 03/22/2015 11:09:03 \n", + "101 03/22/2015 11:09:18 \n", + "102 03/22/2015 11:10:30 \n", + "103 03/22/2015 11:09:35 \n", + "104 03/22/2015 11:10:23 \n", + "105 03/22/2015 11:10:55 \n", + "106 03/22/2015 11:10:22 \n", + "107 03/22/2015 11:10:54 \n", + "108 03/22/2015 11:11:12 \n", + "109 03/22/2015 11:10:22 \n", + "110 03/22/2015 11:09:51 \n", + "111 03/22/2015 11:09:30 \n", + "112 03/22/2015 11:10:51 \n", + "113 03/22/2015 11:09:03 \n", + "114 03/22/2015 11:09:18 \n", + "115 03/22/2015 11:09:18 \n", + "116 03/22/2015 11:09:18 \n", + "117 03/22/2015 11:09:24 \n", + "118 03/22/2015 11:10:51 \n", + "119 03/22/2015 11:10:55 \n", + "120 03/22/2015 11:09:03 \n", + "121 03/22/2015 11:10:51 \n", + "122 03/22/2015 11:10:55 \n", + "123 03/22/2015 11:09:18 \n", + "124 03/22/2015 11:10:55 \n", + "125 03/22/2015 11:11:04 \n", + "126 03/22/2015 11:11:12 \n", + "127 03/22/2015 11:09:18 \n", + "128 03/22/2015 11:09:18 \n", + "129 03/22/2015 11:09:18 \n", + "130 03/22/2015 11:09:18 \n", + "131 03/22/2015 11:11:14 \n", + "132 03/22/2015 11:09:02 \n", + "133 03/22/2015 11:09:03 \n", + "134 03/22/2015 11:09:18 \n", + "135 03/22/2015 11:11:13 \n", + "136 03/22/2015 11:09:03 \n", + "137 03/22/2015 11:09:18 \n", + "138 03/22/2015 11:09:18 \n", + "139 03/22/2015 11:10:22 \n", + "140 03/22/2015 11:10:55 \n", + "141 03/22/2015 11:09:18 \n", + "142 03/22/2015 11:09:18 \n", + "143 03/22/2015 11:09:18 \n", + "144 03/22/2015 11:09:18 \n", + "145 03/22/2015 11:09:18 \n", + "146 03/22/2015 11:10:22 \n", + "147 03/22/2015 11:09:51 \n", + "148 03/22/2015 11:09:02 \n", + "149 03/22/2015 11:09:18 \n", + "150 03/22/2015 11:09:51 \n", + "151 03/22/2015 11:10:54 \n", + "152 03/22/2015 11:10:55 \n", + "153 03/22/2015 11:09:18 \n", + "154 03/22/2015 11:09:18 \n", + "155 NaN \n", + "156 03/22/2015 11:10:22 \n", + "157 03/22/2015 11:10:22 \n", + "158 03/22/2015 11:09:43 \n", + "159 03/22/2015 11:11:12 \n", + "160 03/22/2015 11:09:18 \n", + "161 03/22/2015 11:09:18 \n", + "162 03/22/2015 11:09:18 \n", + "163 03/22/2015 11:09:48 \n", + "164 03/22/2015 11:10:31 \n", + "165 03/22/2015 11:10:54 \n", + "166 03/22/2015 11:11:12 \n", + "167 03/22/2015 11:09:03 \n", + "168 03/22/2015 11:09:18 \n", + "169 03/22/2015 11:09:18 \n", + "170 03/22/2015 11:10:23 \n", + "171 03/22/2015 11:09:52 \n", + "172 03/22/2015 11:10:54 \n", + "173 03/22/2015 11:10:55 \n", + "174 03/22/2015 11:09:03 \n", + "175 03/22/2015 11:09:18 \n", + "176 03/22/2015 11:09:18 \n", + "177 03/22/2015 11:09:18 \n", + "178 03/22/2015 11:09:18 \n", + "179 03/22/2015 11:09:18 \n", + "180 03/22/2015 11:09:30 \n", + "181 03/22/2015 11:10:22 \n", + "182 03/22/2015 11:09:51 \n", + "183 03/22/2015 11:09:02 \n", + "184 03/22/2015 11:09:52 \n", + "185 03/22/2015 11:09:53 \n", + "186 03/22/2015 11:11:13 \n", + "187 03/22/2015 11:09:18 \n", + "188 03/22/2015 11:10:22 \n", + "189 03/22/2015 11:11:13 \n", + "190 03/22/2015 11:10:54 \n", + "191 03/22/2015 11:10:53 \n", + "192 03/22/2015 11:09:02 \n", + "193 03/22/2015 11:09:18 \n", + "194 03/22/2015 11:09:51 \n", + "195 03/22/2015 11:10:22 \n", + "196 03/22/2015 11:10:55 \n", + "197 03/22/2015 11:09:18 \n", + "198 03/22/2015 11:09:18 \n", + "199 03/22/2015 11:09:02 \n", + "200 03/22/2015 11:09:18 \n", + "201 03/22/2015 11:09:18 \n", + "202 03/22/2015 11:10:22 \n", + "203 03/22/2015 11:10:22 \n", + "204 03/22/2015 11:10:23 \n", + "205 03/22/2015 11:10:52 \n", + "206 03/22/2015 11:09:03 \n", + "207 03/22/2015 11:09:18 \n", + "208 03/22/2015 11:09:44 \n", + "209 03/22/2015 11:09:46 \n", + "210 03/22/2015 11:11:12 \n", + "211 03/22/2015 11:09:18 \n", + "212 03/22/2015 11:09:18 \n", + "213 03/22/2015 11:09:19 \n", + "214 03/22/2015 11:09:03 \n", + "215 03/22/2015 11:10:23 \n", + "216 03/22/2015 11:09:37 \n", + "217 03/22/2015 11:10:52 \n", + "218 03/22/2015 11:09:44 \n", + "219 03/22/2015 11:09:02 \n", + "220 03/22/2015 11:09:03 \n", + "221 03/22/2015 11:09:18 \n", + "222 03/22/2015 11:09:18 \n", + "223 03/22/2015 11:09:18 \n", + "224 03/22/2015 11:09:43 \n", + "225 03/22/2015 11:09:44 \n", + "226 03/22/2015 11:09:18 \n", + "227 03/22/2015 11:09:18 \n", + "228 03/22/2015 11:09:18 \n", + "229 03/22/2015 11:09:44 \n", + "230 03/22/2015 11:10:23 \n", + "231 03/22/2015 11:10:54 \n", + "232 03/22/2015 11:10:54 \n", + "233 03/22/2015 11:09:45 \n", + "234 03/22/2015 11:10:54 \n", + "235 03/22/2015 11:10:54 \n", + "236 03/22/2015 11:09:18 \n", + "237 03/22/2015 11:09:19 \n", + "238 03/22/2015 11:10:51 \n", + "239 03/22/2015 11:09:51 \n", + "240 03/22/2015 11:11:12 \n", + "241 03/22/2015 11:10:54 \n", + "242 03/22/2015 11:11:13 \n", + "243 03/22/2015 11:09:03 \n", + "244 03/22/2015 11:09:18 \n", + "245 03/22/2015 11:09:18 \n", + "246 03/22/2015 11:09:18 \n", + "247 03/22/2015 11:09:18 \n", + "248 03/22/2015 11:10:54 \n", + "249 03/22/2015 11:10:55 \n", + "250 03/22/2015 11:09:52 \n", + "251 03/22/2015 11:11:12 \n", + "252 03/22/2015 11:10:54 \n", + "253 03/22/2015 11:11:14 \n", + "254 03/22/2015 11:11:14 \n", + "255 03/22/2015 11:09:03 \n", + "256 03/22/2015 11:09:18 \n", + "257 03/22/2015 11:09:18 \n", + "258 03/22/2015 11:10:22 \n", + "259 03/22/2015 11:09:19 \n", + "260 03/22/2015 11:09:28 \n", + "261 03/22/2015 11:11:12 \n", + "262 03/22/2015 11:09:03 \n", + "263 03/22/2015 11:09:18 \n", + "264 03/22/2015 11:09:18 \n", + "265 03/22/2015 11:10:22 \n", + "266 03/22/2015 11:09:18 \n", + "267 03/22/2015 11:09:18 \n", + "268 03/22/2015 11:09:30 \n", + "269 03/22/2015 11:09:03 \n", + "270 03/22/2015 11:10:23 \n", + "271 03/22/2015 11:09:46 \n", + "272 03/22/2015 11:11:13 \n", + "273 03/22/2015 11:09:03 \n", + "274 03/22/2015 11:09:18 \n", + "275 03/22/2015 11:09:18 \n", + "276 03/22/2015 11:10:22 \n", + "277 03/22/2015 11:09:43 \n", + "278 03/22/2015 11:10:23 \n", + "279 03/22/2015 11:09:02 \n", + "280 03/22/2015 11:09:18 \n", + "281 03/22/2015 11:10:31 \n", + "282 03/22/2015 11:10:22 \n", + "283 03/22/2015 11:10:22 \n", + "284 03/22/2015 11:10:53 \n", + "285 03/22/2015 11:11:12 \n", + "286 03/22/2015 11:09:18 \n", + "287 03/22/2015 11:09:18 \n", + "288 03/22/2015 11:09:18 \n", + "289 03/22/2015 11:10:52 \n", + "290 03/22/2015 11:09:02 \n", + "291 03/22/2015 11:09:18 \n", + "292 03/22/2015 11:09:30 \n", + "293 03/22/2015 11:10:04 \n", + "294 03/22/2015 11:11:12 \n", + "295 03/22/2015 11:11:12 \n", + "296 03/22/2015 11:09:28 \n", + "297 03/22/2015 11:09:35 \n", + "298 03/22/2015 11:10:52 \n", + "299 03/22/2015 11:09:43 \n", + "300 03/22/2015 11:09:02 \n", + "301 03/22/2015 11:09:19 \n", + "302 03/22/2015 11:10:23 \n", + "303 03/22/2015 11:10:54 \n", + "304 03/22/2015 11:10:54 \n", + "305 03/22/2015 11:10:55 \n", + "306 03/22/2015 11:11:13 \n", + "307 03/22/2015 11:09:18 \n", + "308 03/22/2015 11:09:18 \n", + "309 03/22/2015 11:09:19 \n", + "310 03/22/2015 11:09:19 \n", + "311 03/22/2015 11:11:13 \n", + "312 03/22/2015 11:09:18 \n", + "313 03/22/2015 11:09:18 \n", + "314 03/22/2015 11:09:18 \n", + "315 03/22/2015 11:09:35 \n", + "316 03/22/2015 11:09:51 \n", + "317 03/22/2015 11:11:13 \n", + "318 03/22/2015 11:11:13 \n", + "319 03/22/2015 11:09:18 \n", + "320 03/22/2015 11:09:30 \n", + "321 03/22/2015 11:10:54 \n", + "322 03/22/2015 11:10:55 \n", + "323 03/22/2015 11:10:54 \n", + "324 03/22/2015 11:09:20 \n", + "325 03/22/2015 11:10:54 \n", + "326 03/22/2015 11:10:54 \n", + "327 03/22/2015 11:10:23 \n", + "328 03/22/2015 11:10:54 \n", + "329 03/22/2015 11:10:54 \n", + "330 03/22/2015 11:10:54 \n", + "331 03/22/2015 11:10:55 \n", + "332 NaN \n", + "333 03/22/2015 11:10:55 \n", + "334 03/22/2015 11:11:12 \n", + "335 03/22/2015 11:11:12 \n", + "336 03/22/2015 11:10:55 \n", + "337 03/22/2015 11:09:43 \n", + "338 03/22/2015 11:09:44 \n", + "339 03/22/2015 11:10:54 \n", + "340 03/22/2015 11:11:12 \n", + "341 03/22/2015 11:10:54 \n", + "342 03/22/2015 11:10:23 \n", + "343 03/22/2015 11:11:13 \n", + "344 03/22/2015 11:11:13 \n", + "345 03/22/2015 11:11:14 \n", + "346 03/22/2015 11:11:14 \n", + "347 03/22/2015 11:10:55 \n", + "348 03/22/2015 11:11:06 \n", + "349 03/22/2015 11:10:54 \n", + "350 03/22/2015 11:11:13 " + ], + "text/html": [ + "
\n", + "\n", + "\n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + " \n", + "
URLACCESS TIME
0http://img.s-msn.com/tenant/amp/entityid/AA42x33.img?h=16&w=16&m=6&q=60&u=t&o=t&l=f&f=png03/22/2015 11:09:17
1http://img.s-msn.com/tenant/amp/entityid/BBiBVNI.img?h=194&w=300&m=6&q=60&u=t&o=t&l=f&x=1149&y=92603/22/2015 11:09:18
2http://img.s-msn.com/tenant/amp/entityid/BBiBMZk.img?h=75&w=100&m=6&q=60&u=t&o=t&l=f&x=1211&y=119103/22/2015 11:09:18
3http://img.s-msn.com/tenant/amp/entityid/BBivFGA.img?h=75&w=100&m=6&q=60&u=t&o=t&l=f03/22/2015 11:09:19
4http://ajax.aspnetcdn.com/ajax/jQuery/jquery-1.8.3.min.js03/22/2015 11:10:22
5https://www.google.com/chrome/assets/consumer/images/tiffany/fallback/browser-shadow.png03/22/2015 11:10:54
6https://www.google.com/chrome/assets/consumer/images/tiffany/chrome-title.png03/22/2015 11:10:54
7https://www.google.com/chrome/assets/common/images/fn/fn-devices-sprite.png03/22/2015 11:11:12
8https://www.google.com/chrome/assets/consumer/images/tiffany/carousel/carousel-sidefade-left.png03/22/2015 11:10:54
9https://www.google.com/chrome/assets/consumer/images/tiffany/browser/browser-bar-windows.png03/22/2015 11:10:55
10https://www.google.com/chrome/assets/consumer/images/tiffany/featured/cubelab.jpg03/22/2015 11:10:55
11http://pagead2.googlesyndication.com/pagead/js/lidar.js03/22/2015 11:09:02
12https://www.google.com/intl/en/chrome/assets/consumer/images/tiffany/featured/noweverywhere_feat...03/22/2015 11:10:55
13http://static-hp-eus.s-msn.com/sc/9b/e151e5.gif03/22/2015 11:09:02
14https://www.google.com/chrome/assets/consumer/images/tiffany/carousel/carousel-thumb-shadow.png03/22/2015 11:10:54
15http://img.s-msn.com/tenant/amp/entityid/AA3kXQp.img?h=16&w=16&m=6&q=60&u=t&o=t&l=f&f=png03/22/2015 11:09:03
16http://img.s-msn.com/tenant/amp/entityid/BBiBF8f.img?h=194&w=300&m=6&q=60&u=t&o=t&l=f03/22/2015 11:09:18
17http://img.s-msn.com/tenant/amp/entityid/BBiBWww.img?h=75&w=100&m=6&q=60&u=t&o=t&l=f&x=1452&y=84203/22/2015 11:09:18
18http://img.s-msn.com/tenant/amp/entityid/AA86h7b.img?h=16&w=16&m=6&q=60&u=t&o=t&l=f&f=png03/22/2015 11:09:18
19http://img.s-msn.com/tenant/amp/entityid/BBiqmrh.img?h=75&w=100&m=6&q=60&u=t&o=t&l=f03/22/2015 11:09:18
20http://img.s-msn.com/tenant/amp/entityid/BB93Uyk.img?h=16&w=16&m=6&q=60&u=t&o=t&l=f&f=png03/22/2015 11:09:18
21http://js.microsoft.com/library/svy/windows/broker-config.js?142703703190803/22/2015 11:10:31
22http://img.s-msn.com/tenant/amp/entityid/BBiA3co.img?h=250&w=300&m=6&q=60&u=t&o=t&l=f&f=jpg&x=61...03/22/2015 11:09:03
23http://img.s-msn.com/tenant/amp/entityid/AA2vq8h.img?h=16&w=16&m=6&q=60&u=t&o=t&l=f&f=png03/22/2015 11:09:35
24http://img.s-msn.com/tenant/amp/entityid/AA3ltd8.img?h=16&w=16&m=6&q=60&u=t&o=t&l=f&f=png03/22/2015 11:09:19
25http://img.s-msn.com/tenant/amp/entityid/BBimIRn.img?h=75&w=100&m=6&q=60&u=t&o=t&l=f&x=1352&y=142803/22/2015 11:09:18
26http://img.s-msn.com/tenant/amp/entityid/BBiwzT8.img?h=75&w=100&m=6&q=60&u=t&o=t&l=f03/22/2015 11:09:18
27http://static-hp-eus.s-msn.com/en-us/homepage/_sc/css/6670b51d-4362b864/direction=ltr.locales=en...03/22/2015 11:09:01
28http://img.s-msn.com/tenant/amp/entityid/BBiBAfg.img?h=75&w=100&m=6&q=60&u=t&o=t&l=f&f=jpg&x=142...03/22/2015 11:09:03
29http://img.s-msn.com/tenant/amp/entityid/BBizEAe.img?h=75&w=100&m=6&q=60&u=t&o=t&l=f&x=485&y=24203/22/2015 11:09:18
30http://img.s-msn.com/tenant/amp/entityid/AA6zYWg.img?h=16&w=16&m=6&q=60&u=t&o=t&l=f&f=png03/22/2015 11:09:18
31http://img.s-msn.com/tenant/amp/entityid/BBixvFr.img?h=194&w=300&m=6&q=60&u=t&o=t&l=f03/22/2015 11:09:18
32http://img.s-msn.com/tenant/amp/entityid/BBiA4MY.img?h=75&w=100&m=6&q=60&u=t&o=t&l=f03/22/2015 11:09:18
33http://res1.windows.microsoft.com/siteresources/siteresource.ashx?id=wolNotificationJS&hash=b803...03/22/2015 11:10:22
34http://img.s-msn.com/tenant/amp/entityid/BBiuI12.img?h=75&w=100&m=6&q=60&u=t&o=t&l=f&x=668&y=74503/22/2015 11:09:18
35http://img.s-msn.com/tenant/amp/entityid/BBiBXCt.img?h=75&w=100&m=6&q=60&u=t&o=t&l=f03/22/2015 11:09:18
36http://img.s-msn.com/tenant/amp/entityid/BBiBxBl.img?h=194&w=300&m=6&q=60&u=t&o=t&l=f&x=1135&y=29203/22/2015 11:09:18
37http://img.s-msn.com/tenant/amp/entityid/BBizpZr.img?h=75&w=100&m=6&q=60&u=t&o=t&l=f03/22/2015 11:09:18
38https://www.google.com/intl/en/chrome/assets/consumer/images/tiffany/featured/cubeslam-marquee.jpg03/22/2015 11:10:55
39https://apis.google.com/js/plusone.js03/22/2015 11:11:13
40http://h2.msn.com/CIS/56/000/000/000/000/000.gif03/22/2015 11:09:02
41http://img.s-msn.com/tenant/amp/entityid/BBirh1d.img?h=194&w=300&m=6&q=60&u=t&o=t&l=f&x=316&y=26603/22/2015 11:09:18
42http://ajax.aspnetcdn.com/ajax/4.5.1/1/MicrosoftAjax.js03/22/2015 11:10:22
43http://google.com/NaN
44http://res2.windows.microsoft.com/resbox/en/windows/main/c641cc8d-f054-4fdf-9456-ee8259186e1b_5.png03/22/2015 11:10:23
45http://img.s-msn.com/tenant/amp/entityid/BBiBuV3.img?h=250&w=206&m=6&q=60&u=t&o=t&l=f&f=jpg&x=93...03/22/2015 11:09:02
46http://static.chartbeat.com/js/chartbeat.js03/22/2015 11:09:17
47res://ieframe.dll/ielogo.png03/22/2015 11:09:28
48https://www.google.com/chrome/assets/consumer/images/tiffany/thumbs/jam.jpg03/22/2015 11:10:54
49http://s0.2mdn.net/ads/studio/cached_libs/modernizr_2.8.3_ec185bb44fe5e6bf7455d6e8ef37ed0e_no-cl...03/22/2015 11:09:02
50http://img.s-msn.com/tenant/amp/entityid/BBisn5n.img?h=75&w=100&m=6&q=60&u=t&o=t&l=f&f=jpg03/22/2015 11:09:03
51http://img.s-msn.com/tenant/amp/entityid/AA3ebBd.img?h=16&w=16&m=6&q=60&u=t&o=t&l=f&f=png03/22/2015 11:09:03
52http://img.s-msn.com/tenant/amp/entityid/BBivonY.img?h=75&w=100&m=6&q=60&u=t&o=t&l=f03/22/2015 11:09:18
53http://img.s-msn.com/tenant/amp/entityid/AA4YFW8.img?h=75&w=100&m=6&q=60&u=t&o=t&l=f03/22/2015 11:09:18
54http://img.s-msn.com/tenant/amp/entityid/AA9BMT2.img?h=75&w=100&m=6&q=60&u=t&o=t&l=f03/22/2015 11:09:18
55http://img.s-msn.com/tenant/amp/entityid/BBgIdBn.img?h=194&w=300&m=6&q=60&u=t&o=t&l=f03/22/2015 11:09:18
56http://cdn.adnxs.com/ANX_async_usersync.js03/22/2015 11:09:03
57http://img.s-msn.com/tenant/amp/entityid/BBiBePJ.img?h=75&w=100&m=6&q=60&u=t&o=t&l=f03/22/2015 11:09:18
58http://img.s-msn.com/tenant/amp/entityid/BBipdf8.img?h=75&w=100&m=6&q=60&u=t&o=t&l=f03/22/2015 11:09:18
59https://www.google.com/chrome/assets/consumer/images/tiffany/thumbs/cubelab.jpg03/22/2015 11:10:54
60https://ssl.gstatic.com/s2/oz/images/widget/working-aaaaaa-16.gif03/22/2015 11:11:14
61http://img.s-msn.com/tenant/amp/entityid/AA3HMVU.img?h=16&w=16&m=6&q=60&u=t&o=t&l=f&f=png03/22/2015 11:09:18
62http://img.s-msn.com/tenant/amp/entityid/BBhywwx.img?h=75&w=100&m=6&q=60&u=t&o=t&l=f&x=991&y=57303/22/2015 11:09:18
63https://encrypted-tbn0.gstatic.com/images?q=tbn:ANd9GcSaxe2KQIvqhG5AXxx-gHKrqHqU-IGKMQ6qhHv3eHB_...03/22/2015 11:09:48
64https://www.google.com/chrome/assets/consumer/images/tiffany/thumbs/spacecraft.jpg03/22/2015 11:10:54
65https://www.google.com/chrome/assets/common/images/marquee/benefits-1.jpg03/22/2015 11:11:12
66http://img.s-msn.com/tenant/amp/entityid/BBirPj3.img?h=75&w=100&m=6&q=60&u=t&o=t&l=f&f=jpg&x=675...03/22/2015 11:09:03
67http://img.s-msn.com/tenant/amp/entityid/BBiA9OW.img?h=75&w=100&m=6&q=60&u=t&o=t&l=f03/22/2015 11:09:18
68http://img.s-msn.com/tenant/amp/entityid/BBiA58r.img?h=194&w=300&m=6&q=60&u=t&o=t&l=f03/22/2015 11:09:18
69https://fbstatic-a.akamaihd.net/rsrc.php/v2/yy/r/UtqCQ_Jg0Ox.js03/22/2015 11:10:23
70http://res1.windows.microsoft.com/resbox/en/windows/main/e9979a8b-c439-452a-a09f-d3b32df0e5b1_13...03/22/2015 11:10:23
71http://res2.windows.microsoft.com/resbox/en/windows/main/1f5c1661-b1b6-4675-820e-67f729bc7eb6_13...03/22/2015 11:10:23
72https://www.google.com/chrome/assets/common/images/marquee/chrome-existing.jpg03/22/2015 11:11:12
73http://img.s-msn.com/tenant/amp/entityid/AA8I0Dg.img?h=16&w=16&m=6&q=60&u=t&o=t&l=f&f=png03/22/2015 11:09:03
74http://img.s-msn.com/tenant/amp/entityid/AA9sS2l.img?h=75&w=100&m=6&q=60&u=t&o=t&l=f&x=1342&y=152403/22/2015 11:09:18
75http://windows.microsoft.com/en-us/internet-explorer/ie-8-welcome03/22/2015 11:09:19
76http://js.microsoft.com/library/svy/windows/broker.js03/22/2015 11:10:22
77http://res1.windows.microsoft.com/resbox/en/internet%20explorer/main/125ffa03-7e1c-4609-a37c-8b7...03/22/2015 11:09:19
78https://fbstatic-a.akamaihd.net/rsrc.php/v2/y1/r/LVx-xkvaJ0b.png03/22/2015 11:10:23
79http://www.google.com/url?url=http://windows.microsoft.com/en-us/internet-explorer/ie-11-worldwi...03/22/2015 11:09:54
80http://c.go-mpulse.net/boomerang/URRYV-HX35J-LK4WZ-4TRKG-NBMKC03/22/2015 11:09:02
81http://img.s-msn.com/tenant/amp/entityid/BBiBkSj.img?h=75&w=100&m=6&q=60&u=t&o=t&l=f&f=jpg&x=597...03/22/2015 11:09:03
82http://img.s-msn.com/tenant/amp/entityid/AA9QOgB.img?h=333&w=311&m=6&q=60&u=t&o=t&l=f&f=jpg&x=15...03/22/2015 11:09:19
83http://windows.microsoft.com/scripts/4.2/wol/modernizr.wol.js03/22/2015 11:10:22
84http://res1.windows.microsoft.com/resbox/en/internet%20explorer/main/03d292e7-98d0-4ec5-b257-9cc...03/22/2015 11:09:19
85http://api.bing.com/qsonhs.aspx?form=PRUSML&mkt=en-US&type=cb&cb=sa_inst.apiCB&q=&cp=0&sid=00&qt...03/22/2015 11:09:32
86https://www.google.com/chrome/assets/consumer/images/tiffany/featured/sss.jpg03/22/2015 11:10:55
87http://img.s-msn.com/tenant/amp/entityid/AA8nSkR.img?h=16&w=16&m=6&q=60&u=t&o=t&l=f&f=png03/22/2015 11:09:18
88http://res2.windows.microsoft.com/resources/4.2/wol/shared/css/windows8_site_ltr.css03/22/2015 11:10:22
89http://api.bing.com/qsonhs.aspx?form=PRUSML&q=03/22/2015 11:09:19
90https://www.google.com/images/mgyhp_sm.png03/22/2015 11:10:52
91https://www.google.com/chrome/assets/common/css/chrome.min.css03/22/2015 11:11:12
92https://www.google.com/chrome/assets/common/images/fn/fn-cast-sprite.png03/22/2015 11:11:12
93https://www.google.com/chrome/assets/consumer/images/tiffany/carousel/carousel-arrow-right.png03/22/2015 11:10:54
94http://img.s-msn.com/tenant/amp/entityid/BB4yIJu.img?h=16&w=16&m=6&q=60&u=t&o=t&l=f&f=png03/22/2015 11:09:03
95http://img.s-msn.com/tenant/amp/entityid/BB1uPMT.img?h=16&w=16&m=6&q=60&u=t&o=t&l=f&f=png03/22/2015 11:09:35
96http://img.s-msn.com/tenant/amp/entityid/BBiwB07.img?h=194&w=300&m=6&q=60&u=t&o=t&l=f03/22/2015 11:09:18
97http://img.s-msn.com/tenant/amp/entityid/BB5OcwT.img?h=16&w=16&m=6&q=60&u=t&o=t&l=f&f=png03/22/2015 11:09:18
98http://res1.windows.microsoft.com/resbox/en/internet%20explorer/main/446706f9-59e1-4e52-8aa9-71a...03/22/2015 11:09:52
99http://ads1.msads.net/CAE/IAFScreens/js/iafPlugin.js03/22/2015 11:09:02
100http://img.s-msn.com/tenant/amp/entityid/BBikSwY.img?h=75&w=100&m=6&q=60&u=t&o=t&l=f&f=jpg&x=380...03/22/2015 11:09:03
101http://img.s-msn.com/tenant/amp/entityid/BBi2SuX.img?h=75&w=100&m=6&q=60&u=t&o=t&l=f03/22/2015 11:09:18
102http://res2.windows.microsoft.com/resources/4.2/wol/shared/images/merged/gl_site.png03/22/2015 11:10:30
103http://img.s-msn.com/tenant/amp/entityid/BBiAjWi.img?h=166&w=310&m=6&q=60&u=t&o=t&l=f&f=jpg&x=36...03/22/2015 11:09:35
104http://res2.windows.microsoft.com/resbox/en/windows/main/eb4f0171-7cb7-428a-afcc-d93a6b84525c_33...03/22/2015 11:10:23
105https://www.google.com/intl/en/chrome/assets/consumer/images/tiffany/featured/foreveryone_feat.jpg03/22/2015 11:10:55
106http://js.microsoft.com/library/svy/windows/pre_broker.js03/22/2015 11:10:22
107https://www.google.com/chrome/assets/consumer/images/tiffany/fallback/browser-front.png03/22/2015 11:10:54
108https://www.google.com/chrome/assets/common/images/marquee/benefits-5.jpg03/22/2015 11:11:12
109http://res1.windows.microsoft.com/resbox/en/windows/main/15d2470f-0fcf-45e9-bf5b-c943236a61cf_37...03/22/2015 11:10:22
110http://ajax.microsoft.com/ajax/4.0/4/MicrosoftAjax.js03/22/2015 11:09:51
111http://img.s-msn.com/tenant/amp/entityid/BBiA5gZ.img?h=166&w=310&m=6&q=60&u=t&o=t&l=f&f=jpg&x=79...03/22/2015 11:09:30
112https://www.google.com/images/icons/product/chrome-48.png03/22/2015 11:10:51
113http://img.s-msn.com/tenant/amp/entityid/BBiBb76.img?h=75&w=100&m=6&q=60&u=t&o=t&l=f&f=jpg&x=122...03/22/2015 11:09:03
114http://img.s-msn.com/tenant/amp/entityid/BBijS0f.img?h=75&w=100&m=6&q=60&u=t&o=t&l=f&x=293&y=6203/22/2015 11:09:18
115http://img.s-msn.com/tenant/amp/entityid/BBiBDXv.img?h=75&w=100&m=6&q=60&u=t&o=t&l=f&x=1008&y=123403/22/2015 11:09:18
116http://img.s-msn.com/tenant/amp/entityid/AA9QDIj.img?h=75&w=100&m=6&q=60&u=t&o=t&l=f03/22/2015 11:09:18
117http://img.s-msn.com/tenant/amp/entityid/BBiAyNr.img?h=368&w=622&m=6&q=60&u=t&o=t&l=f&f=jpg03/22/2015 11:09:24
118https://www.google.com/webhp?hl=en03/22/2015 11:10:51
119https://www.google.com/chrome/assets/consumer/images/tiffany/featured/spacecraft.jpg03/22/2015 11:10:55
120http://img.s-msn.com/tenant/amp/entityid/BBikqnc.img?h=75&w=100&m=6&q=60&u=t&o=t&l=f&f=jpg&x=538...03/22/2015 11:09:03
121https://ssl.gstatic.com/gb/images/b_8d5afc09.png03/22/2015 11:10:51
122https://www.google.com/chrome/assets/consumer/images/tiffany/featured/spellup.png03/22/2015 11:10:55
123http://img.s-msn.com/tenant/amp/entityid/BBiyV8e.img?h=75&w=100&m=6&q=60&u=t&o=t&l=f03/22/2015 11:09:18
124https://www.google.com/chrome/assets/consumer/images/tiffany/featured/build-marquee.jpg03/22/2015 11:10:55
125http://download.microsoft.com/download/7/1/7/7179A150-F2D2-4502-9D70-4B59EA148EAA/IE11-Windows6....03/22/2015 11:11:04
126https://www.google.com/chrome/browser/thankyou.html?brand=CHNG&platform=win&clickonceinstalled=103/22/2015 11:11:12
127http://img.s-msn.com/tenant/amp/entityid/BBiskd6.img?h=75&w=100&m=6&q=60&u=t&o=t&l=f03/22/2015 11:09:18
128http://img.s-msn.com/tenant/amp/entityid/BBhHuu9.img?h=75&w=100&m=6&q=60&u=t&o=t&l=f&x=598&y=47303/22/2015 11:09:18
129http://img.s-msn.com/tenant/amp/entityid/AA2CNVO.img?h=16&w=16&m=6&q=60&u=t&o=t&l=f&f=png03/22/2015 11:09:18
130http://img.s-msn.com/tenant/amp/entityid/BBd5X.img?h=16&w=16&m=6&q=60&u=t&o=t&l=f&f=png03/22/2015 11:09:18
131https://apis.google.com/_/scs/apps-static/_/js/k=oz.plusone.en.AIDx_pw_nnE.O/m=p1b,p1p/rt=j/sv=1...03/22/2015 11:11:14
132http://c.go-mpulse.net/boomerang/config.js?key=URRYV-HX35J-LK4WZ-4TRKG-NBMKC&d=www.msn.com&t=475...03/22/2015 11:09:02
133http://cdn.adnxs.com/p/c3/5e/72/94/c35e729453d37d643331b3e14d64444f.gif03/22/2015 11:09:03
134http://img.s-msn.com/tenant/amp/entityid/BBiAy9J.img?h=75&w=100&m=6&q=60&u=t&o=t&l=f&x=1224&y=61903/22/2015 11:09:18
135https://apis.google.com/js/api.js03/22/2015 11:11:13
136http://img.s-msn.com/tenant/amp/entityid/AA9TlSL.img?h=75&w=100&m=6&q=60&u=t&o=t&l=f&f=jpg03/22/2015 11:09:03
137http://img.s-msn.com/tenant/amp/entityid/BBiBAZB.img?h=194&w=300&m=6&q=60&u=t&o=t&l=f03/22/2015 11:09:18
138http://img.s-msn.com/tenant/amp/entityid/BBivzDB.img?h=194&w=300&m=6&q=60&u=t&o=t&l=f03/22/2015 11:09:18
139http://res1.windows.microsoft.com/resbox/en/6.2/main/1f9ad235-787b-42fa-bfb5-12f191dc0c23_38.js03/22/2015 11:10:22
140https://www.google.com/chrome/assets/consumer/images/tiffany/featured/jam.png03/22/2015 11:10:55
141http://img.s-msn.com/tenant/amp/entityid/BB3dBUk.img?h=16&w=16&m=6&q=60&u=t&o=t&l=f&f=png03/22/2015 11:09:18
142http://img.s-msn.com/tenant/amp/entityid/AA6pevu.img?h=16&w=16&m=6&q=60&u=t&o=t&l=f&f=png03/22/2015 11:09:18
143http://img.s-msn.com/tenant/amp/entityid/BBisXtQ.img?h=75&w=100&m=6&q=60&u=t&o=t&l=f&x=1479&y=49503/22/2015 11:09:18
144http://img.s-msn.com/tenant/amp/entityid/BBisAQz.img?h=75&w=100&m=6&q=60&u=t&o=t&l=f03/22/2015 11:09:18
145http://img.s-msn.com/tenant/amp/entityid/AA9yI4A.img?h=194&w=300&m=6&q=60&u=t&o=t&l=f&x=1293&y=92603/22/2015 11:09:18
146http://res2.windows.microsoft.com/resbox/en/windows/main/08ce8e54-41ba-4695-9963-a7669022faec_12...03/22/2015 11:10:22
147http://nexus.ensighten.com/wol/Bootstrap.js03/22/2015 11:09:51
148http://static-hp-eus.s-msn.com/sc/87/a01786.eot?03/22/2015 11:09:02
149http://img.s-msn.com/tenant/amp/entityid/BBijWr7.img?h=75&w=100&m=6&q=60&u=t&o=t&l=f&x=187&y=14103/22/2015 11:09:18
150http://windows.microsoft.com/en-us/internet-explorer/download-ie03/22/2015 11:09:51
151https://www.google.com/chrome/assets/consumer/images/tiffany/thumbs/racer-thumb.png03/22/2015 11:10:54
152https://www.google.com/chrome/assets/consumer/images/tiffany/featured/photowall-marquee.jpg03/22/2015 11:10:55
153http://img.s-msn.com/tenant/amp/entityid/BB47wtI.img?h=16&w=16&m=6&q=60&u=t&o=t&l=f&f=png03/22/2015 11:09:18
154http://img.s-msn.com/tenant/amp/entityid/BBiyswS.img?h=75&w=100&m=6&q=60&u=t&o=t&l=f&x=1558&y=40303/22/2015 11:09:18
155http://go.microsoft.com/fwlink/?LinkID=121792NaN
156http://res2.windows.microsoft.com/resbox/en/windows/main/566128a7-5192-449d-99b0-11b4459eaf1d_8.js03/22/2015 11:10:22
157http://res2.windows.microsoft.com/resbox/en/windows/main/e64030e7-ad8c-4be8-a45a-b69a2df3caef_13...03/22/2015 11:10:22
158https://clients1.google.com/complete/search?client=heirloom-hp&hl=en&sugexp=msedr&gs_rn=34&gs_ri...03/22/2015 11:09:43
159https://ssl.gstatic.com/images/icons/gplus-16.png03/22/2015 11:11:12
160http://img.s-msn.com/tenant/amp/entityid/BB6qRzt.img?h=16&w=16&m=6&q=60&u=t&o=t&l=f&f=png03/22/2015 11:09:18
161http://img.s-msn.com/tenant/amp/entityid/BBiB1Re.img?h=75&w=100&m=6&q=60&u=t&o=t&l=f&x=1395&y=61003/22/2015 11:09:18
162http://img.s-msn.com/tenant/amp/entityid/AA9sWtD.img?h=75&w=100&m=6&q=60&u=t&o=t&l=f&x=1085&y=111503/22/2015 11:09:18
163https://www.google.com/search?hl=en&source=hp&q=internet+explorer+11&gbv=2&oq=internet+explorer+...03/22/2015 11:09:48
164http://res1.windows.microsoft.com/resources/4.2/wol/shared/images/merged/gl_site.png03/22/2015 11:10:31
165https://www.google.com/chrome/assets/consumer/images/tiffany/bg.png03/22/2015 11:10:54
166https://www.google.com/chrome/assets/common/images/marquee/mobile-benefits-4.jpg03/22/2015 11:11:12
167http://s0.2mdn.net/2992003/1-14-1214_NET_WEB_simple_300x250_AS2.jpg03/22/2015 11:09:03
168http://img.s-msn.com/tenant/amp/entityid/BB55gcf.img?h=16&w=16&m=6&q=60&u=t&o=t&l=f&f=png03/22/2015 11:09:18
169http://img.s-msn.com/tenant/amp/entityid/AA9u2Q7.img?h=75&w=100&m=6&q=60&u=t&o=t&l=f03/22/2015 11:09:18
170http://res1.windows.microsoft.com/resbox/en/windows/main/49eb9f77-0c92-450c-a267-999f2caaa56b_18...03/22/2015 11:10:23
171http://nexus.ensighten.com/wol/prod/code/dc03d35b723c8be574a55bce3e34cfaa.js?conditionId0=35022203/22/2015 11:09:52
172https://www.google.com/chrome/assets/consumer/images/tiffany/browser/browser-play.png03/22/2015 11:10:54
173https://www.google.com/chrome/assets/consumer/images/tiffany/featured/evolution.png03/22/2015 11:10:55
174http://img.s-msn.com/tenant/amp/entityid/BBil0Dw.img?h=75&w=100&m=6&q=60&u=t&o=t&l=f&f=jpg03/22/2015 11:09:03
175http://img.s-msn.com/tenant/amp/entityid/BBiBvW7.img?h=75&w=100&m=6&q=60&u=t&o=t&l=f&x=126&y=16503/22/2015 11:09:18
176http://img.s-msn.com/tenant/amp/entityid/BBinKFA.img?h=75&w=100&m=6&q=60&u=t&o=t&l=f&x=775&y=38303/22/2015 11:09:18
177http://img.s-msn.com/tenant/amp/entityid/AA8wBsQ.img?h=16&w=16&m=6&q=60&u=t&o=t&l=f&f=png03/22/2015 11:09:18
178http://img.s-msn.com/tenant/amp/entityid/BBiBGaO.img?h=75&w=100&m=6&q=60&u=t&o=t&l=f&x=1271&y=76603/22/2015 11:09:18
179http://img.s-msn.com/tenant/amp/entityid/BBisahq.img?h=75&w=100&m=6&q=60&u=t&o=t&l=f03/22/2015 11:09:18
180http://img.s-msn.com/tenant/amp/entityid/BB1GkQd.img?h=16&w=16&m=6&q=60&u=t&o=t&l=f&f=png03/22/2015 11:09:30
181http://res1.windows.microsoft.com/siteresources/siteresource.ashx?id=AtlasFrameStyle&hash=44a2de...03/22/2015 11:10:22
182http://res1.windows.microsoft.com/resbox/en/internet%20explorer/2012-win8ga/1125b14f-653f-405e-9...03/22/2015 11:09:51
183http://img.s-msn.com/tenant/amp/entityid/BBiB07V.img?h=250&w=206&m=6&q=60&u=t&o=t&l=f&f=jpg&x=14...03/22/2015 11:09:02
184http://c.microsoft.com/ms.js03/22/2015 11:09:52
185http://js.microsoft.com/library/svy/windows/broker-config.js?142703699299803/22/2015 11:09:53
186https://apis.google.com/_/scs/apps-static/_/js/k=oz.gapi.en_US.QMkB6_tgC9o.O/m=auth/exm=plusone/...03/22/2015 11:11:13
187http://img.s-msn.com/tenant/amp/entityid/AA9H4sf.img?h=75&w=100&m=6&q=60&u=t&o=t&l=f&x=453&y=58503/22/2015 11:09:18
188http://res2.windows.microsoft.com/resbox/en/windows/main/5a7873a1-fd4e-4462-8ab2-32bd729117c6_7.png03/22/2015 11:10:22
189https://ssl.google-analytics.com/ga.js03/22/2015 11:11:13
190https://www.google.com/intl/en/chrome/assets/consumer/images/tiffany/thumbs/noweverywhere_thumb.jpg03/22/2015 11:10:54
191https://www.google.com/chrome/assets/consumer/css/tiffany.css03/22/2015 11:10:53
192http://ads1.msads.net/library/8.3/dapmsn.js03/22/2015 11:09:02
193http://img.s-msn.com/tenant/amp/entityid/AA9Aicg.img?h=16&w=16&m=6&q=60&u=t&o=t&l=f&f=png03/22/2015 11:09:18
194http://res2.windows.microsoft.com/resbox/en/internet%20explorer/main/e7a2d666-8177-4623-a1f8-da3...03/22/2015 11:09:51
195http://res2.windows.microsoft.com/resbox/en/windows/main/4300ae64-546c-4bbe-9026-6779b3684fb9_18...03/22/2015 11:10:22
196https://www.google.com/chrome/assets/consumer/images/tiffany/featured/kickwithchrome.jpg03/22/2015 11:10:55
197http://img.s-msn.com/tenant/amp/entityid/BB6D3Lx.img?h=16&w=16&m=6&q=60&u=t&o=t&l=f&f=png03/22/2015 11:09:18
198http://img.s-msn.com/tenant/amp/entityid/BBinWm2.img?h=75&w=100&m=6&q=60&u=t&o=t&l=f&x=921&y=128103/22/2015 11:09:18
199http://s0.2mdn.net/879366/dfa7banner_flash_html_inpage_rendering_lib_200_70.js03/22/2015 11:09:02
200http://img.s-msn.com/tenant/amp/entityid/AA90cIE.img?h=16&w=16&m=6&q=60&u=t&o=t&l=f&f=png03/22/2015 11:09:18
201http://img.s-msn.com/tenant/amp/entityid/BBgF1kV.img?h=194&w=300&m=6&q=60&u=t&o=t&l=f&x=1377&y=71303/22/2015 11:09:18
202http://res1.windows.microsoft.com/siteresources/siteresource.ashx?id=wolNotificationCSS&hash=825...03/22/2015 11:10:22
203http://windows.microsoft.com/scripts/4.2/wol/wol.common.js03/22/2015 11:10:22
204http://res1.windows.microsoft.com/resbox/en/windows/main/4300ae64-546c-4bbe-9026-6779b3684fb8_32...03/22/2015 11:10:23
205https://www.google.com/xjs/_/js/k=xjs.hp.en_US.votPZMqb6rk.O/m=sb_he,jsa,d,csi/rt=j/d=1/t=zcms/r...03/22/2015 11:10:52
206http://img.s-msn.com/tenant/amp/entityid/AA3l39r.img?h=16&w=16&m=6&q=60&u=t&o=t&l=f&f=png03/22/2015 11:09:03
207http://img.s-msn.com/tenant/amp/entityid/BBfOhY0.img?h=194&w=300&m=6&q=60&u=t&o=t&l=f&x=1346&y=38703/22/2015 11:09:18
208https://clients1.google.com/complete/search?client=heirloom-hp&hl=en&sugexp=msedr&gs_rn=34&gs_ri...03/22/2015 11:09:44
209https://clients1.google.com/complete/search?client=heirloom-hp&hl=en&sugexp=msedr&gs_rn=34&gs_ri...03/22/2015 11:09:46
210https://www.google.com/chrome/assets/common/images/fn/fn-download-sprite.png03/22/2015 11:11:12
211http://img.s-msn.com/tenant/amp/entityid/AA6u4ZP.img?h=16&w=16&m=6&q=60&u=t&o=t&l=f&f=png03/22/2015 11:09:18
212http://img.s-msn.com/tenant/amp/entityid/BBiphG3.img?h=75&w=100&m=6&q=60&u=t&o=t&l=f&x=867&y=33003/22/2015 11:09:18
213http://res2.windows.microsoft.com/resbox/en/internet%20explorer/main/faeeabcb-551d-42b8-bc2e-f7b...03/22/2015 11:09:19
214http://cdn.adnxs.com/v/s/13/trk.js03/22/2015 11:09:03
215http://res2.windows.microsoft.com/resources/4.2/wol/shared/images/merged/gl_social.svg03/22/2015 11:10:23
216https://www.google.com/?gws_rd=ssl03/22/2015 11:09:37
217https://www.google.com/images/srpr/nav_logo80.png03/22/2015 11:10:52
218https://clients1.google.com/complete/search?client=heirloom-hp&hl=en&sugexp=msedr&gs_rn=34&gs_ri...03/22/2015 11:09:44
219http://static-hp-eus.s-msn.com/en-us/homepage/_sc/js/6670b51d-245bff56/direction=ltr.locales=en-...03/22/2015 11:09:02
220http://img.s-msn.com/tenant/amp/entityid/BBiAtof.img?h=75&w=100&m=6&q=60&u=t&o=t&l=f&f=jpg&x=158...03/22/2015 11:09:03
221http://img.s-msn.com/tenant/amp/entityid/AA9tx0G.img?h=75&w=100&m=6&q=60&u=t&o=t&l=f03/22/2015 11:09:18
222http://img.s-msn.com/tenant/amp/entityid/BBi6pvi.img?h=75&w=100&m=6&q=60&u=t&o=t&l=f&x=192&y=26403/22/2015 11:09:18
223http://img.s-msn.com/tenant/amp/entityid/BBimjCJ.img?h=75&w=100&m=6&q=60&u=t&o=t&l=f03/22/2015 11:09:18
224https://clients1.google.com/complete/search?client=heirloom-hp&hl=en&sugexp=msedr&gs_rn=34&gs_ri...03/22/2015 11:09:43
225https://clients1.google.com/complete/search?client=heirloom-hp&hl=en&sugexp=msedr&gs_rn=34&gs_ri...03/22/2015 11:09:44
226http://img.s-msn.com/tenant/amp/entityid/BBiytP8.img?h=75&w=100&m=6&q=60&u=t&o=t&l=f&x=1376&y=74903/22/2015 11:09:18
227http://img.s-msn.com/tenant/amp/entityid/BB1FUYS.img?h=16&w=16&m=6&q=60&u=t&o=t&l=f&f=png03/22/2015 11:09:18
228http://img.s-msn.com/tenant/amp/entityid/AA42mEQ.img?h=16&w=16&m=6&q=60&u=t&o=t&l=f&f=png03/22/2015 11:09:18
229https://clients1.google.com/complete/search?client=heirloom-hp&hl=en&sugexp=msedr&gs_rn=34&gs_ri...03/22/2015 11:09:44
230http://res2.windows.microsoft.com/resbox/en/windows/main/03df314e-c18c-4d6c-9b89-f5490b1b5c0b_17...03/22/2015 11:10:23
231https://www.google.com/chrome/assets/consumer/images/tiffany/thumbs/story.jpg03/22/2015 11:10:54
232https://www.google.com/chrome/assets/consumer/images/tiffany/thumbs/sss.png03/22/2015 11:10:54
233https://clients1.google.com/complete/search?client=heirloom-hp&hl=en&sugexp=msedr&gs_rn=34&gs_ri...03/22/2015 11:09:45
234https://www.gstatic.com/external_hosted/threejs-r49/Three.js03/22/2015 11:10:54
235https://www.google.com/chrome/assets/consumer/images/tiffany/thumbs/spellup.png03/22/2015 11:10:54
236http://img.s-msn.com/tenant/amp/entityid/BBiC5ob.img?h=194&w=300&m=6&q=60&u=t&o=t&l=f03/22/2015 11:09:18
237http://res1.windows.microsoft.com/resbox/en/internet%20explorer/main/55494218-ac03-4875-a911-603...03/22/2015 11:09:19
238https://www.google.com/logos/doodles/2015/emmy-noethers-133rd-birthday-5681045017985024-hp.jpg03/22/2015 11:10:51
239http://www.google.com/url?url=http://windows.microsoft.com/en-us/internet-explorer/download-ie&r...03/22/2015 11:09:51
240https://www.google.com/chrome/assets/common/images/content/close-icon.png03/22/2015 11:11:12
241https://www.google.com/chrome/assets/consumer/images/tiffany/carousel/carousel-thumb-video.png03/22/2015 11:10:54
242https://ssl.gstatic.com/accounts/o/2006856415-postmessagerelay.js03/22/2015 11:11:13
243http://img.s-msn.com/tenant/amp/entityid/BB6Dp75.img?h=16&w=16&m=6&q=60&u=t&o=t&l=f&f=png03/22/2015 11:09:03
244http://img.s-msn.com/tenant/amp/entityid/BBiC6Bn.img?h=75&w=100&m=6&q=60&u=t&o=t&l=f&x=317&y=50903/22/2015 11:09:18
245http://img.s-msn.com/tenant/amp/entityid/BBivlpc.img?h=75&w=100&m=6&q=60&u=t&o=t&l=f03/22/2015 11:09:18
246http://img.s-msn.com/tenant/amp/entityid/BB1Prxu.img?h=16&w=16&m=6&q=60&u=t&o=t&l=f&f=png03/22/2015 11:09:18
247http://img.s-msn.com/tenant/amp/entityid/BBivpfH.img?h=194&w=300&m=6&q=60&u=t&o=t&l=f03/22/2015 11:09:18
248https://www.google.com/chrome/assets/consumer/images/tiffany/thumbs/evolution.jpg03/22/2015 11:10:54
249https://www.google.com/chrome/assets/consumer/js/tiffany/tiffany.min.js03/22/2015 11:10:55
250http://res2.windows.microsoft.com/resbox/en/internet%20explorer/main/747c11c9-c083-4d40-950c-a46...03/22/2015 11:09:52
251https://fonts.googleapis.com/css?family=Open+Sans:300,400,600,700&subset=latin03/22/2015 11:11:12
252https://www.google.com/chrome/assets/consumer/images/tiffany/browser/browser-spin-info.png03/22/2015 11:10:54
253https://ssl.gstatic.com/s2/oz/images/sprites/plus-button-svg-9b2dfccb6db9dfc9b153277b81e1dec8.png03/22/2015 11:11:14
254https://oauth.googleusercontent.com/gadgets/js/core:rpc:shindig.random:shindig.sha1.js?c=203/22/2015 11:11:14
255http://img.s-msn.com/tenant/amp/entityid/AA9H9ZD.img?h=16&w=16&m=6&q=60&u=t&o=t&l=f&f=png03/22/2015 11:09:03
256http://img.s-msn.com/tenant/amp/entityid/AA3lqJx.img?h=16&w=16&m=6&q=60&u=t&o=t&l=f&f=png03/22/2015 11:09:18
257http://img.s-msn.com/tenant/amp/entityid/BBip5DU.img?h=75&w=100&m=6&q=60&u=t&o=t&l=f&x=1283&y=70303/22/2015 11:09:18
258http://res2.windows.microsoft.com/resbox/en/windows/main/67706439-4969-4bc3-9e3b-50770f40b20e_42.js03/22/2015 11:10:22
259http://img.s-msn.com/tenant/amp/entityid/BBik7kX.img?h=333&w=311&m=6&q=60&u=t&o=t&l=f&f=jpg&x=13...03/22/2015 11:09:19
260res://ieframe.dll/about.js03/22/2015 11:09:28
261https://www.google.com/chrome/assets/common/images/chrome_logo_2x.png03/22/2015 11:11:12
262http://img.s-msn.com/tenant/amp/entityid/BBioS3I.img?h=75&w=100&m=6&q=60&u=t&o=t&l=f&f=jpg&x=744...03/22/2015 11:09:03
263http://img.s-msn.com/tenant/amp/entityid/BBiyEnw.img?h=75&w=100&m=6&q=60&u=t&o=t&l=f&x=538&y=23003/22/2015 11:09:18
264http://img.s-msn.com/tenant/amp/entityid/AA9QA7z.img?h=75&w=100&m=6&q=60&u=t&o=t&l=f03/22/2015 11:09:18
265http://res1.windows.microsoft.com/resbox/en/windows/main/93e33485-fea3-4687-a642-2c5dd233522f_12...03/22/2015 11:10:22
266http://img.s-msn.com/tenant/amp/entityid/AA3ltd9.img?h=16&w=16&m=6&q=60&u=t&o=t&l=f&f=png03/22/2015 11:09:18
267http://img.s-msn.com/tenant/amp/entityid/AA9sPuy.img?h=75&w=100&m=6&q=60&u=t&o=t&l=f03/22/2015 11:09:18
268http://img.s-msn.com/tenant/amp/entityid/BBgX3ni.img?h=16&w=16&m=6&q=60&u=t&o=t&l=f&f=png03/22/2015 11:09:30
269http://img.s-msn.com/tenant/amp/entityid/BBiqU1f.img?h=75&w=100&m=6&q=60&u=t&o=t&l=f&f=jpg03/22/2015 11:09:03
270http://windows.microsoft.com/scripts/4.2/wol/ClientBiSettings.Wol.js?t=142703640000003/22/2015 11:10:23
271https://clients1.google.com/complete/search?client=heirloom-hp&hl=en&sugexp=msedr&gs_rn=34&gs_ri...03/22/2015 11:09:46
272https://www.gstatic.com/external_hosted/modernizr/modernizr.js03/22/2015 11:11:13
273http://cdn.adnxs.com/msft/ContainerTag.js?tag_id=3282770&domain=pixelus.alephd.com&switch=on&hei...03/22/2015 11:09:03
274http://img.s-msn.com/tenant/amp/entityid/BBdi2hw.img?h=75&w=100&m=6&q=60&u=t&o=t&l=f&x=316&y=18503/22/2015 11:09:18
275http://img.s-msn.com/tenant/amp/entityid/AA9Eys7.img?h=75&w=100&m=6&q=60&u=t&o=t&l=f&x=1270&y=94403/22/2015 11:09:18
276http://res2.windows.microsoft.com/resbox/en/windows/main/736e3781-6a19-4119-b717-e61f0d8982c0_12...03/22/2015 11:10:22
277https://clients1.google.com/complete/search?client=heirloom-hp&hl=en&sugexp=msedr&gs_rn=34&gs_ri...03/22/2015 11:09:43
278http://res1.windows.microsoft.com/resbox/en/windows/main/ab21605f-82f5-4052-8125-d13b96cc9075_5.png03/22/2015 11:10:23
279http://h2.msn.com/CIS/18/000/000/000/040/613.gif03/22/2015 11:09:02
280http://img.s-msn.com/tenant/amp/entityid/BB7785z.img?h=75&w=100&m=6&q=60&u=t&o=t&l=f&x=935&y=81403/22/2015 11:09:18
281http://res2.windows.microsoft.com/resources/4.2/wol/shared/images/merged/gl_social.png03/22/2015 11:10:31
282http://res1.windows.microsoft.com/siteresources/siteresource.ashx?id=AtlasFrameScripts&hash=b8e0...03/22/2015 11:10:22
283http://windows.microsoft.com/en-us/internet-explorer/ie-11-worldwide-languages03/22/2015 11:10:22
284https://www.google.com/chrome/index.html?hl=en&brand=CHNG&utm_source=en-hpp&utm_medium=hpp&utm_c...03/22/2015 11:10:53
285https://www.google.com/tools/dlpage/res/chrome/images/chrome_throbber_fast_16.gif03/22/2015 11:11:12
286http://img.s-msn.com/tenant/amp/entityid/BBiLCz.img?h=16&w=16&m=6&q=60&u=t&o=t&l=f&f=png03/22/2015 11:09:18
287http://img.s-msn.com/tenant/amp/entityid/BB1T53B.img?h=16&w=16&m=6&q=60&u=t&o=t&l=f&f=png03/22/2015 11:09:18
288http://img.s-msn.com/tenant/amp/entityid/BBivSbK.img?h=194&w=300&m=6&q=60&u=t&o=t&l=f&x=1016&y=36703/22/2015 11:09:18
289https://ssl.gstatic.com/gb/js/sem_cad439dbb41f1ffcf4bd69ea4aa642d9.js03/22/2015 11:10:52
290http://img.s-msn.com/tenant/amp/entityid/BBiApFJ.img?h=250&w=206&m=6&q=60&u=t&o=t&l=f&f=jpg&x=38...03/22/2015 11:09:02
291http://img.s-msn.com/tenant/amp/entityid/AA5KWCN.img?h=16&w=16&m=6&q=60&u=t&o=t&l=f&f=png03/22/2015 11:09:18
292http://img.s-msn.com/tenant/amp/entityid/BBiBObG.img?h=333&w=311&m=6&q=60&u=t&o=t&l=f&f=jpg&x=10...03/22/2015 11:09:30
293http://js.microsoft.com/library/svy/windows/broker-config.js?142703700473603/22/2015 11:10:04
294https://fonts.gstatic.com/s/opensans/v10/cJZKeOuBrn4kERxqtaUH3fY6323mHUZFJMgTvxaG2iE.eot03/22/2015 11:11:12
295https://www.google.com/intl/en/chrome/browser/privacy/eula_text.html03/22/2015 11:11:12
296res://ieframe.dll/about.dlg03/22/2015 11:09:28
297http://img.s-msn.com/tenant/amp/entityid/BBiB7KA.img?h=166&w=310&m=6&q=60&u=t&o=t&l=f&f=jpg&x=13...03/22/2015 11:09:35
298https://www.google.com/images/nav_logo176.png03/22/2015 11:10:52
299https://clients1.google.com/complete/search?client=heirloom-hp&hl=en&sugexp=msedr&gs_rn=34&gs_ri...03/22/2015 11:09:43
300http://static-hp-eus.s-msn.com/_h/804ff984/webcore/externalscripts/jquery/jquery-1.11.1.min.js03/22/2015 11:09:02
301http://img.s-msn.com/tenant/amp/entityid/AA3dLwz.img?h=16&w=16&m=6&q=60&u=t&o=t&l=f&f=png03/22/2015 11:09:19
302http://res2.windows.microsoft.com/resbox/en/windows/main/3ef01e72-0832-46f0-a6e1-23f9d5a07d86_14...03/22/2015 11:10:23
303https://www.google.com/chrome/assets/consumer/images/tiffany/thumbs/photowall.jpg03/22/2015 11:10:54
304https://www.google.com/chrome/assets/consumer/images/tiffany/carousel/carousel-arrow-left.png03/22/2015 11:10:54
305https://www.google.com/chrome/assets/consumer/images/tiffany/featured/awesomebook_feat.jpg03/22/2015 11:10:55
306https://www.google.com/chrome/assets/common/js/chrome-installer.min.js03/22/2015 11:11:13
307http://img.s-msn.com/tenant/amp/entityid/BBiAI1e.img?h=368&w=522&m=6&q=60&u=t&o=t&l=f&f=jpg&x=10...03/22/2015 11:09:18
308http://img.s-msn.com/tenant/amp/entityid/BBijUBA.img?h=75&w=100&m=6&q=60&u=t&o=t&l=f03/22/2015 11:09:18
309http://img.s-msn.com/tenant/amp/entityid/BBh0W6o.img?h=194&w=300&m=6&q=60&u=t&o=t&l=f03/22/2015 11:09:19
310https://www.facebook.com/fr/u.php?p=391363987594223&m=305218871854191584803/22/2015 11:09:19
311https://2542116.fls.doubleclick.net/activityi;src=2542116;type=clien612;cat=chromx2;ord=87528731...03/22/2015 11:11:13
312http://img.s-msn.com/tenant/amp/entityid/BB4kwB1.img?h=16&w=16&m=6&q=60&u=t&o=t&l=f&f=png03/22/2015 11:09:18
313http://img.s-msn.com/tenant/amp/entityid/AA9NTYc.img?h=75&w=100&m=6&q=60&u=t&o=t&l=f03/22/2015 11:09:18
314http://img.s-msn.com/tenant/amp/entityid/AA9TnuR.img?h=75&w=100&m=6&q=60&u=t&o=t&l=f03/22/2015 11:09:18
315http://img.s-msn.com/tenant/amp/entityid/BBiydF6.img?h=333&w=311&m=6&q=60&u=t&o=t&l=f&f=jpg&x=48...03/22/2015 11:09:35
316http://res1.windows.microsoft.com/resbox/en/internet%20explorer/2013-responsive/17c8f1a9-a948-48...03/22/2015 11:09:51
317https://apis.google.com/_/scs/apps-static/_/js/k=oz.gapi.en_US.QMkB6_tgC9o.O/m=plusone/rt=j/sv=1...03/22/2015 11:11:13
318https://2542116.fls.doubleclick.net/activityi;src=2542116;type=clien612;cat=chromx;ord=268133625...03/22/2015 11:11:13
319http://img.s-msn.com/tenant/amp/entityid/BB5SfLo.img?h=16&w=16&m=6&q=60&u=t&o=t&l=f&f=png03/22/2015 11:09:18
320http://img.s-msn.com/tenant/amp/entityid/BBizSjS.img?h=166&w=310&m=6&q=60&u=t&o=t&l=f&f=jpg&x=10...03/22/2015 11:09:30
321https://www.google.com/chrome/assets/consumer/images/tiffany/thumbs/download.jpg03/22/2015 11:10:54
322https://www.google.com/chrome/assets/consumer/images/tiffany/featured/hobbit.jpg03/22/2015 11:10:55
323https://www.google.com/chrome/assets/consumer/images/tiffany/thumbs/hobbit.jpg03/22/2015 11:10:54
324http://js.microsoft.com/library/svy/windows/broker-config.js?142703696048303/22/2015 11:09:20
325https://www.google.com/chrome/assets/consumer/images/tiffany/thumbs/oz.jpg03/22/2015 11:10:54
326https://www.google.com/intl/en/chrome/assets/consumer/images/tiffany/thumbs/cubeslam-thumb.png03/22/2015 11:10:54
327http://res1.windows.microsoft.com/resbox/en/windows/2012-win8ga/6ef177b8-1a15-4e39-bdda-6b672064...03/22/2015 11:10:23
328https://www.google.com/intl/en/chrome/assets/consumer/images/tiffany/thumbs/foreveryone_thumb.jpg03/22/2015 11:10:54
329https://www.google.com/chrome/assets/consumer/images/tiffany/thumbs/kickwithchrome.jpg03/22/2015 11:10:54
330https://www.google.com/chrome/assets/consumer/images/tiffany/thumbs/awesomebook.jpg03/22/2015 11:10:54
331https://www.google.com/chrome/assets/consumer/images/tiffany/featured/racer-marquee.jpg03/22/2015 11:10:55
332https://dl.google.com/update2/installers/clickonce/GoogleInstaller_en.application?appguid%3D%7B8...NaN
333https://www.google.com/chrome/assets/consumer/images/tiffany/fallback/home_win.png03/22/2015 11:10:55
334https://www.google.com/chrome/assets/common/images/marquee/mobile-benefits-2.jpg03/22/2015 11:11:12
335https://www.google.com/chrome/assets/common/images/marquee/mobile-benefits-3.jpg03/22/2015 11:11:12
336https://www.google.com/chrome/assets/consumer/images/tiffany/featured/story.png03/22/2015 11:10:55
337https://clients1.google.com/complete/search?client=heirloom-hp&hl=en&sugexp=msedr&gs_rn=34&gs_ri...03/22/2015 11:09:43
338https://clients1.google.com/complete/search?client=heirloom-hp&hl=en&sugexp=msedr&gs_rn=34&gs_ri...03/22/2015 11:09:44
339https://www.google.com/chrome/assets/consumer/images/tiffany/thumbs/build.jpg03/22/2015 11:10:54
340https://www.google.com/chrome/assets/common/images/fn/fn-custom-sprite.png03/22/2015 11:11:12
341https://www.google.com/chrome/assets/consumer/images/tiffany/carousel/carousel-sidefade-right.png03/22/2015 11:10:54
342http://res1.windows.microsoft.com/resbox/en/windows/main/cbc6f38d-b79c-4bff-8b67-b81eb9676ab3_5.png03/22/2015 11:10:23
343https://www.google.com/js/gweb/analytics/autotrack.js03/22/2015 11:11:13
344https://accounts.google.com/o/oauth2/postmessageRelay?parent=https%3A%2F%2Fwww.google.com03/22/2015 11:11:13
345https://apis.google.com/_/scs/apps-static/_/js/k=oz.gapi.en_US.QMkB6_tgC9o.O/m=googleapis_client...03/22/2015 11:11:14
346https://2542116.fls.doubleclick.net/activityi;src=2542116;type=clien612;cat=Chrom0;ord=505952630...03/22/2015 11:11:14
347https://s.ytimg.com/yts/jsbin/www-widgetapi-vflr-TgN1/www-widgetapi.js03/22/2015 11:10:55
348https://dl.google.com/update2/1.3.26.9/GoogleInstaller_en.application?appguid%3D%7B8A69D345-D564...03/22/2015 11:11:06
349https://www.google.com/chrome/assets/consumer/images/tiffany/fallback/browser-shine.png03/22/2015 11:10:54
350https://www.google.com/chrome/assets/common/images/icons-sprite.png03/22/2015 11:11:13
\n", + "
" + ] + }, + "metadata": {}, + "execution_count": 6 + } + ], + "metadata": {} + }, + { + "cell_type": "code", + "execution_count": null, + "source": [], + "outputs": [], + "metadata": {} + } + ], + "metadata": { + "orig_nbformat": 4, + "language_info": { + "name": "python", + "version": "3.11.4", + "mimetype": "text/x-python", + "codemirror_mode": { + "name": "ipython", + "version": 3 + }, + "pygments_lexer": "ipython3", + "nbconvert_exporter": "python", + "file_extension": ".py" + }, + "kernelspec": { + "name": "python3", + "display_name": "Python 3.11.4 64-bit" + }, + "interpreter": { + "hash": "a06e30aee820ff8fe24fb428cece021c5cdfc4bd84062afc0eba853e87fef366" + } + }, + "nbformat": 4, + "nbformat_minor": 2 +} \ No newline at end of file