13/04/2018 10:04:42 [4172,88] #############################################################
13/04/2018 10:04:42 [4172,88] Request processing started
13/04/2018 10:04:42 [4172,88] Url: https://mail.domainb.com/owa/forms/premium/StartPage.aspx
13/04/2018 10:04:42 [4172,88] RawUrl: /owa/
13/04/2018 10:04:42 [4172,88] Query String parameters:
13/04/2018 10:04:42 [4172,88] Cookies
13/04/2018 10:04:42 [4172,88]     OutlookSession: 0c3904e053cb4107810b3b2b671352aa
13/04/2018 10:04:42 [4172,88]     PBack: 0
13/04/2018 10:04:42 [4172,88]     sessionid: 3f0f3d75-7f22-4133-a639-f02cb4b6cede
13/04/2018 10:04:42 [4172,88]     cadata: "2hqi32JS7FcpJRE0wq3bxlH9/5DqUjcsOKleRXok+8gtm1XxzTOpnOH/8Q03MClvG14Z2agqNemnz+9tNnxUXzD/HZEY4ASdBrDf8ra1lQs0="
13/04/2018 10:04:42 [4172,88]     UserContext: TKwsBQg9PUOYZIkEcZYyJeuIVV-VptUIFyx8lqZ5E3Hn4UqiUoPwBORdE0TK29OuBDVjXUJEx8Y.
13/04/2018 10:04:42 [4172,88]     tzid: Romance Standard Time
13/04/2018 10:04:42 [4172,88] Form: 
13/04/2018 10:04:42 [4172,88] OWA Session details
13/04/2018 10:04:42 [4172,88]     User agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko
13/04/2018 10:04:42 [4172,88]     Authentication type: Basic
13/04/2018 10:04:42 [4172,88]     Authenticated user: DomainPRI\user
13/04/2018 10:04:42 [4172,88]     Client IP Address: x.x.x.x
13/04/2018 10:04:42 [4172,88]     Server IP Address: y.y.y.y
13/04/2018 10:04:42 [4172,88]     Host: mail.domainb.com
13/04/2018 10:04:42 [4172,88] Primary SMTP Address: user@domainb.com
13/04/2018 10:04:42 [4172,88] Explicit Logon: False
13/04/2018 10:04:42 [4172,88] Explicit Logon Address: owa
13/04/2018 10:04:42 [4172,88] EV Extensions DLL version: 10.0.4.0
13/04/2018 10:04:42 [4172,88] [ImpersonationManager::StartImpersonation] Entry: Current user: AUTORITE NT\Système
13/04/2018 10:04:42 [4172,88] [ImpersonationManager::StartImpersonation] Entry: Impersonation Level: None
13/04/2018 10:04:42 [4172,88] [ImpersonationManager::StartImpersonation] Impersonating logged on user
13/04/2018 10:04:42 [4172,88] [ImpersonationManager::StartImpersonation] Exit: Current user: DomainPRI\user
13/04/2018 10:04:42 [4172,88] [ImpersonationManager::StartImpersonation] Exit: Impersonation Level: Impersonation
13/04/2018 10:04:42 [4172,88] [EVContext::Initialise] Loading EVContext
13/04/2018 10:04:42 [4172,88] [Resources::LoadLanguageFile] Trying to opening language file: D:\Program Files\Microsoft\Exchange Server\V14\ClientAccess\owa\EnterpriseVault\Exch2010\v10.0.4.1354\Languages\fr-fr.lan
13/04/2018 10:04:42 [4172,88] [Resources::LoadLanguageFile] Language file not found
13/04/2018 10:04:42 [4172,88] [Resources::LoadLanguageFile] Trying to opening language file: D:\Program Files\Microsoft\Exchange Server\V14\ClientAccess\owa\EnterpriseVault\Exch2010\v10.0.4.1354\Languages\fr.lan
13/04/2018 10:04:42 [4172,88] [Resources::LoadLanguageFile] Loaded language: fr
13/04/2018 10:04:42 [4172,88] [EVContext::ResetHiddenSettings] Resetting hidden settings to defaults
13/04/2018 10:04:42 [4172,88] [EVContext::LoadHiddenSettings] Loading hidden settings
13/04/2018 10:04:42 [4172,88] [EWSBase::Init] Connecting to Exchange Web Services using: https://localhost/ews/exchange.asmx
13/04/2018 10:04:42 [4172,88] [EWSBase::GetEVHiddenMessageId] Retrieving hidden settings
13/04/2018 10:04:42 [4172,88] [EWSBase::GetEVHiddenMessageId] Looking in mailbox: user@domainb.com
13/04/2018 10:04:42 [4172,88] EwsRequest:
<Trace Tag="EwsRequest" Tid="88" Time="2018-04-13 08:04:42Z" Version="14.01.0218.002">
  <?xml version="1.0" encoding="utf-8"?>
  <soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:m="http://schemas.microsoft.com/exchange/services/2006/messages" xmlns:t="http://schemas.microsoft.com/exchange/services/2006/types" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/">
    <soap:Header>
      <t:RequestServerVersion Version="Exchange2010_SP1" />
    </soap:Header>
    <soap:Body>
      <m:FindItem Traversal="Associated">
        <m:ItemShape>
          <t:BaseShape>IdOnly</t:BaseShape>
          <t:AdditionalProperties>
            <t:FieldURI FieldURI="item:HasAttachments" />
          </t:AdditionalProperties>
        </m:ItemShape>
        <m:IndexedPageItemView MaxEntriesReturned="2" Offset="0" BasePoint="Beginning" />
        <m:Restriction>
          <t:IsEqualTo>
            <t:FieldURI FieldURI="item:ItemClass" />
            <t:FieldURIOrConstant>
              <t:Constant Value="IPM.Note.EnterpriseVault.Settings" />
            </t:FieldURIOrConstant>
          </t:IsEqualTo>
        </m:Restriction>
        <m:ParentFolderIds>
          <t:DistinguishedFolderId Id="inbox">
            <t:Mailbox>
              <t:EmailAddress>user@domainb.com</t:EmailAddress>
            </t:Mailbox>
          </t:DistinguishedFolderId>
        </m:ParentFolderIds>
      </m:FindItem>
    </soap:Body>
  </soap:Envelope>
</Trace>

13/04/2018 10:04:42 [4172,88] EwsResponse:
<Trace Tag="EwsResponse" Tid="88" Time="2018-04-13 08:04:42Z" Version="14.01.0218.002">
  <?xml version="1.0" encoding="utf-8"?>
  <s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/">
    <s:Header>
      <h:ServerVersionInfo MajorVersion="14" MinorVersion="3" MajorBuildNumber="388" MinorBuildNumber="0" Version="Exchange2010_SP2" xmlns:h="http://schemas.microsoft.com/exchange/services/2006/types" xmlns="http://schemas.microsoft.com/exchange/services/2006/types" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" />
    </s:Header>
    <s:Body xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema">
      <m:FindItemResponse xmlns:m="http://schemas.microsoft.com/exchange/services/2006/messages" xmlns:t="http://schemas.microsoft.com/exchange/services/2006/types">
        <m:ResponseMessages>
          <m:FindItemResponseMessage ResponseClass="Success">
            <m:ResponseCode>NoError</m:ResponseCode>
            <m:RootFolder IndexedPagingOffset="1" TotalItemsInView="1" IncludesLastItemInRange="true">
              <t:Items>
                <t:Message>
                  <t:ItemId Id="AAMkADg0YzY3Mzg1LTU1ZWMtNDUyNy1hZTFiLTM5ODU1N2I1NmRlNgBGAAAAAADIA3gwRBEPRrvFmmpCynIBBwC3qqxLkXm2T51zhWCLd4yUAAAAiAOBAABLx3PVAtJcR7pHEkF0EjCUAAE5MtQBAAA=" ChangeKey="CQAAABYAAABLx3PVAtJcR7pHEkF0EjCUAAE5N4Ha" />
                  <t:HasAttachments>true</t:HasAttachments>
                </t:Message>
              </t:Items>
            </m:RootFolder>
          </m:FindItemResponseMessage>
        </m:ResponseMessages>
      </m:FindItemResponse>
    </s:Body>
  </s:Envelope>
</Trace>

13/04/2018 10:04:42 [4172,88] [EWSBase::GetEVHiddenMessageId] Item count: 1
13/04/2018 10:04:42 [4172,88] [EWSBase::GetEVHiddenMessageId] Has Attachment: True
13/04/2018 10:04:42 [4172,88] EwsRequest:
<Trace Tag="EwsRequest" Tid="88" Time="2018-04-13 08:04:42Z" Version="14.01.0218.002">
  <?xml version="1.0" encoding="utf-8"?>
  <soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:m="http://schemas.microsoft.com/exchange/services/2006/messages" xmlns:t="http://schemas.microsoft.com/exchange/services/2006/types" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/">
    <soap:Header>
      <t:RequestServerVersion Version="Exchange2010_SP1" />
    </soap:Header>
    <soap:Body>
      <m:GetItem>
        <m:ItemShape>
          <t:BaseShape>IdOnly</t:BaseShape>
          <t:AdditionalProperties>
            <t:FieldURI FieldURI="item:Attachments" />
          </t:AdditionalProperties>
        </m:ItemShape>
        <m:ItemIds>
          <t:ItemId Id="AAMkADg0YzY3Mzg1LTU1ZWMtNDUyNy1hZTFiLTM5ODU1N2I1NmRlNgBGAAAAAADIA3gwRBEPRrvFmmpCynIBBwC3qqxLkXm2T51zhWCLd4yUAAAAiAOBAABLx3PVAtJcR7pHEkF0EjCUAAE5MtQBAAA=" ChangeKey="CQAAABYAAABLx3PVAtJcR7pHEkF0EjCUAAE5N4Ha" />
        </m:ItemIds>
      </m:GetItem>
    </soap:Body>
  </soap:Envelope>
</Trace>

13/04/2018 10:04:42 [4172,88] EwsResponse:
<Trace Tag="EwsResponse" Tid="88" Time="2018-04-13 08:04:42Z" Version="14.01.0218.002">
  <?xml version="1.0" encoding="utf-8"?>
  <s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/">
    <s:Header>
      <h:ServerVersionInfo MajorVersion="14" MinorVersion="3" MajorBuildNumber="388" MinorBuildNumber="0" Version="Exchange2010_SP2" xmlns:h="http://schemas.microsoft.com/exchange/services/2006/types" xmlns="http://schemas.microsoft.com/exchange/services/2006/types" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" />
    </s:Header>
    <s:Body xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema">
      <m:GetItemResponse xmlns:m="http://schemas.microsoft.com/exchange/services/2006/messages" xmlns:t="http://schemas.microsoft.com/exchange/services/2006/types">
        <m:ResponseMessages>
          <m:GetItemResponseMessage ResponseClass="Success">
            <m:ResponseCode>NoError</m:ResponseCode>
            <m:Items>
              <t:Message>
                <t:ItemId Id="AAMkADg0YzY3Mzg1LTU1ZWMtNDUyNy1hZTFiLTM5ODU1N2I1NmRlNgBGAAAAAADIA3gwRBEPRrvFmmpCynIBBwC3qqxLkXm2T51zhWCLd4yUAAAAiAOBAABLx3PVAtJcR7pHEkF0EjCUAAE5MtQBAAA=" ChangeKey="CQAAABYAAABLx3PVAtJcR7pHEkF0EjCUAAE5N4Ha" />
                <t:Attachments>
                  <t:FileAttachment>
                    <t:AttachmentId Id="AAMkADg0YzY3Mzg1LTU1ZWMtNDUyNy1hZTFiLTM5ODU1N2I1NmRlNgBGAAAAAADIA3gwRBEPRrvFmmpCynIBBwC3qqxLkXm2T51zhWCLd4yUAAAAiAOBAABLx3PVAtJcR7pHEkF0EjCUAAE5MtQBAAABEgAQAKGemZ4G7XJKk6a70PLZnkA=" />
                    <t:Name>EnterpriseVaultSettings.txt</t:Name>
                    <t:Size>4244</t:Size>
                    <t:LastModifiedTime>2018-04-13T00:04:04</t:LastModifiedTime>
                    <t:IsInline>false</t:IsInline>
                    <t:IsContactPhoto>false</t:IsContactPhoto>
                  </t:FileAttachment>
                </t:Attachments>
              </t:Message>
            </m:Items>
          </m:GetItemResponseMessage>
        </m:ResponseMessages>
      </m:GetItemResponse>
    </s:Body>
  </s:Envelope>
</Trace>

13/04/2018 10:04:42 [4172,88] [EWSBase::GetEVHiddenMessageId] Attachment count: 1
13/04/2018 10:04:42 [4172,88] EwsRequest:
<Trace Tag="EwsRequest" Tid="88" Time="2018-04-13 08:04:42Z" Version="14.01.0218.002">
  <?xml version="1.0" encoding="utf-8"?>
  <soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:m="http://schemas.microsoft.com/exchange/services/2006/messages" xmlns:t="http://schemas.microsoft.com/exchange/services/2006/types" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/">
    <soap:Header>
      <t:RequestServerVersion Version="Exchange2010_SP1" />
    </soap:Header>
    <soap:Body>
      <m:GetAttachment>
        <m:AttachmentIds>
          <t:AttachmentId Id="AAMkADg0YzY3Mzg1LTU1ZWMtNDUyNy1hZTFiLTM5ODU1N2I1NmRlNgBGAAAAAADIA3gwRBEPRrvFmmpCynIBBwC3qqxLkXm2T51zhWCLd4yUAAAAiAOBAABLx3PVAtJcR7pHEkF0EjCUAAE5MtQBAAABEgAQAKGemZ4G7XJKk6a70PLZnkA=" />
        </m:AttachmentIds>
      </m:GetAttachment>
    </soap:Body>
  </soap:Envelope>
</Trace>

13/04/2018 10:04:42 [4172,88] EwsResponse:
<Trace Tag="EwsResponse" Tid="88" Time="2018-04-13 08:04:42Z" Version="14.01.0218.002">
  <?xml version="1.0" encoding="utf-8"?>
  <s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/">
    <s:Header>
      <h:ServerVersionInfo MajorVersion="14" MinorVersion="3" MajorBuildNumber="388" MinorBuildNumber="0" Version="Exchange2010_SP2" xmlns:h="http://schemas.microsoft.com/exchange/services/2006/types" xmlns="http://schemas.microsoft.com/exchange/services/2006/types" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" />
    </s:Header>
    <s:Body xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema">
      <m:GetAttachmentResponse xmlns:m="http://schemas.microsoft.com/exchange/services/2006/messages" xmlns:t="http://schemas.microsoft.com/exchange/services/2006/types">
        <m:ResponseMessages>
          <m:GetAttachmentResponseMessage ResponseClass="Success">
            <m:ResponseCode>NoError</m:ResponseCode>
            <m:Attachments>
              <t:FileAttachment>
                <t:AttachmentId Id="AAMkADg0YzY3Mzg1LTU1ZWMtNDUyNy1hZTFiLTM5ODU1N2I1NmRlNgBGAAAAAADIA3gwRBEPRrvFmmpCynIBBwC3qqxLkXm2T51zhWCLd4yUAAAAiAOBAABLx3PVAtJcR7pHEkF0EjCUAAE5MtQBAAABEgAQAKGemZ4G7XJKk6a70PLZnkA=" />
                <t:Name>EnterpriseVaultSettings.txt</t:Name>
                <t:Content>UwBpAHQAZQBFAG4AdAByAHkASQBkAD0AMQBCAEYARAA2ADAANAA1ADQAOAA4AEEAMAA1ADkANAAyADkARAAwAEMANABDAEEARgA2ADIANwAzADgAOQAwADcAMQBkADEAMAAwADAAMABlAHYAcwBlAHIAdgBlAHIAMQANAAoARABlAGYAYQB1AGwAdABEAG8AdQBiAGwAZQBDAGwAaQBjAGsAVgBpAGUAdwA9ADAADQAKAEQAZQBmAGEAdQBsAHQAVwBlAGIAQQBwAHAAVQBSAEwAPQBoAHQAdABwADoALwAvAGUAdgBzAGUAcgB2AGUAcgAxAC4AZAB2AGQALgBwAHIAaQAvAEUAbgB0AGUAcgBwAHIAaQBzAGUAVgBhAHUAbAB0AA0ACgBPAFcAQQBXAGUAYgBBAHAAcABVAFIATAA9AGgAdAB0AHAAOgAvAC8AZQB2AHMAZQByAHYAZQByADEALgBkAHYAZAAuAHAAcgBpAC8ARQBWAEEAbgBvAG4ADQAKAE0AYQBpAGwAYgBvAHgAUwBlAHIAdgBlAHIAPQBEAFYARABWAEUAWABDAE0AQgBYADAAMAAxAA0ACgBTAHkAcwB0AGUAbQBNAGEAaQBsAGIAbwB4AD0AUwBNAFQAUAA6AGMAcwBhAHIAYwBoAGkAdgBlAG0AYgB4ADEAQABkAG8AbQB1AHMAdgBpAC4AYwBvAG0ADQAKAFUAcwBlAHIAcwBDAGEAbgBEAGUAbABlAHQAZQBJAHQAZQBtAHMAPQAxAA0ACgBTAGUAcgB2AGUAcgBWAGUAcgBzAGkAbwBuAD0AMQAwAC4AMAA0AA0ACgBNAGEAaQBsAGIAbwB4AFMAdABhAHQAZQA9ADEADQAKAE0AYQBpAGwAYgBvAHgARABOAD0ALwBvAD0ARABWAEQALwBvAHUAPQBFAHgAYwBoAGEAbgBnAGUAIABBAGQAbQBpAG4AaQBzAHQAcgBhAHQAaQB2AGUAIABHAHIAbwB1AHAAIAAoAEYAWQBEAEkAQgBPAEgARgAyADMAUwBQAEQATABUACkALwBjAG4APQBSAGUAYwBpAHAAaQBlAG4AdABzAC8AYwBuAD0ASgBBAE8AVQBFAE4AIABQAGgAaQBsAGkAcABwAGUADQAKAEQAZQBmAGEAdQBsAHQAQQByAGMAaABpAHYAZQBJAGQAPQAxADkAMQA1ADYAMgBFADIANgAyADIAOQAyADIAMQA0AEUAQgAyADcAMABFADAAOAA1AEMANAAxADQANAA4AEYANgAxADEAMQAwADAAMAAwAGUAdgBzAGUAcgB2AGUAcgAxAA0ACgBVAHMAZQBJAG4AYQBjAHQAaQB2AGkAdAB5AFAAZQByAGkAbwBkAD0AMQANAAoAVQBzAGUAUQB1AG8AdABhAEwAaQBtAGkAdAA9ADEADQAKAEkAbgBhAGMAdABpAHYAaQB0AHkAUABlAHIAaQBvAGQAVQBuAGkAdABzAD0AMgANAAoASQBuAGEAYwB0AGkAdgBpAHQAeQBQAGUAcgBpAG8AZAA9ADEAMgANAAoATQBpAG4AQQBnAGUAUABlAHIAaQBvAGQAVQBuAGkAdABzAD0AMgANAAoATQBpAG4AQQBnAGUAUABlAHIAaQBvAGQAPQAwAA0ACgBVAHMAZQBMAGEAcgBnAGUASQB0AGUAbQBzAFMAaQB6AGUAPQAwAA0ACgBMAGEAcgBnAGUASQB0AGUAbQBzAFMAaQB6AGUASwBCAD0AMQAwADIANAANAAoAQQByAGMAaABpAHYAZQBPAG4AbAB5AFcAaQB0AGgAQQB0AHQAYQBjAGgAPQAwAA0ACgBBAHIAYwBoAGkAdgBlAEQAZQBsAEkAdABlAG0AcwBGAG8AbABkAGUAcgA9ADEADQAKAFAARgBJAG4AYQBjAHQAaQB2AGkAdAB5AFAAZQByAGkAbwBkAFUAbgBpAHQAcwA9ADIADQAKAFAARgBJAG4AYQBjAHQAaQB2AGkAdAB5AFAAZQByAGkAbwBkAD0ANgANAAoAUABGAE0AaQBuAEEAZwBlAFAAZQByAGkAbwBkAFUAbgBpAHQAcwA9ADEADQAKAFAARgBNAGkAbgBBAGcAZQBQAGUAcgBpAG8AZAA9ADIADQAKAFAARgBVAHMAZQBMAGEAcgBnAGUASQB0AGUAbQBzAFMAaQB6AGUAPQAwAA0ACgBQAEYATABhAHIAZwBlAEkAdABlAG0AcwBTAGkAegBlAEsAQgA9ADEAMAAyADQAMAANAAoAUABvAGwAaQBjAHkARQBuAHQAcgB5AEkAZAA9ADEAQgAyADgARABEADYARABDADgAMAA5AEMAMQBGADQAMQA4AEIARQA5AEIANABEADUAOABBADcANQBFADkARAA1ADEAcwAxADAAMAAwADAAZQB2AHMAZQByAHYAZQByADEADQAKAFAAUwBUAFAAbwBsAGkAYwB5AEUAbgB0AHIAeQBJAGQAPQAxADQARQA2AEYAOQBFAEQAMwA2ADQANgA3ADkAMAA0AEEAQgAxADYARABEADMAMABDAEIARAAwAEQAQwA1AEEAMwAxADAAMQAyADcAMAAwAGUAdgBzAGUAcgB2AGUAcgAxAA0ACgBEAGUAZgBhAHUAbAB0AFIAZQB0AGUAbgB0AGkAbwBuAEMAYQB0AGUAZwBvAHIAeQBJAGQAPQAxADEARgA4AEUAQQA1ADUARAA0AEIANABGADYANQA0ADIAQgAyAEQAMQA4AEIAQQBBAEIANQAxADMARQA4AEEAQwAxAGIAMQAwADAAMAAwAGUAdgBzAGUAcgB2AGUAcgAxAA0ACgBQAFMAVABJAG0AcABvAHIAdABFAG4AYQBiAGwAZQBkAD0AMAANAAoAQQByAGMAaABpAHYAZQBNAGEAbgBhAGcAZQBkAEYAbwBsAGQAZQByAHMAPQAwAA0ACgBNAGEAbgBhAGcAZQBkAEYAbwBsAGQAZQByAEgAYQBuAGQAbABpAG4AZwA9ADIADQAKAEEAcgBjAGgAaQB2AGUAUwBlAHQAdABpAG4AZwBzAEwAbwBjAGsAZQBkAD0AMQANAAoAUABzAHQAQQBsAGwAbwB3AEQAbwBuAGEAdABpAG8AbgA9ADAADQAKAFAAcwB0AEEAbABsAG8AdwBPAHYAZQByAHIAaQBkAGUAUgBlAHQAZQBuAHQAaQBvAG4AQwBhAHQAPQAwAA0ACgBBAGQAZABTAGUAcgB2AGUAcgBUAG8ASQBuAHQAcgBhAE4AZQB0AFoAbwBuAGUAPQBlAHYAcwBlAHIAdgBlAHIAMQA7AGUAdgBzAGUAcgB2AGUAcgAxAC4AZAB2AGQALgBwAHIAaQA7AGQAdgBkAHYAZQB2ADAAMAAxADsAZAB2AGQAdgBlAHYAMAAwADEALgBkAHYAZAAuAHAAcgBpAA0ACgBBAGwAbABvAHcAUwBjAHIAaQBwAHQAUAB1AGIAbABpAGMARgBvAGwAZABlAHIAcwA9ADEADQAKAEEAbABsAG8AdwBTAGMAcgBpAHAAdABTAGgAYQByAGUAZABGAG8AbABkAGUAcgBzAD0AMQANAAoAQQByAGMAaABpAHYAZQBCAHQAbgBWAGkAcwBpAGIAbABlAD0AMAANAAoAQQByAGMAaABpAHYAZQBFAHgAcABsAG8AcgBlAHIAQgB0AG4AVgBpAHMAaQBiAGwAZQA9ADEADQAKAEMAYQBuAGMAZQBsAEIAdABuAFYAaQBzAGkAYgBsAGUAPQAwAA0ACgBEAGUAbABlAHQAZQBPAHIAaQBnAGkAbgBhAGwASQB0AGUAbQA9ADEADQAKAEQAZQBwAGwAbwB5AEYAbwByAG0AcwBMAG8AYwBhAGwAbAB5AD0AMgANAAoATQBhAHIAawBQAFMAVABzAD0AMQANAAoATwBWAEUAbgBhAGIAbABlAGQAPQAyAA0ACgBPAFYAUwBlAHQAdQBwAFcAaQB6AGEAcgBkAD0AMAANAAoATwBWAFMAdABhAHIAdABEAG8AdwBuAGwAbwBhAGQAQgB0AG4AVgBpAHMAaQBiAGwAZQA9ADIADQAKAFIAZQBzAHQAbwByAGUAQgB0AG4AVgBpAHMAaQBiAGwAZQA9ADAADQAKAFIAUABDAE8AdgBlAHIASABUAFQAUABSAGUAcwB0AHIAaQBjAHQAaQBvAG4AcwA9ADAADQAKAFUAcwBlAFMAZQBsAGYASQBuAHMAdABhAGwAbABGAHUAbgBjAHQAPQAxAA0ACgBWAFYARQBuAGEAYgBsAGUAZAA9ADEADQAKAFYAVgBSAGUAYQBkAGkAbgBnAFAAYQBuAGUAQwBvAG4AdABlAG4AdAA9ADEADQAKAE8AVwBBADIAMAAwADMAQQByAGMAaABpAHYAZQBGAHIAbwBtAEMAbwBuAHQAZQB4AHQATQBlAG4AdQA9ADAADQAKAE8AVwBBADIAMAAwADMAQQByAGMAaABpAHYAZQBGAHIAbwBtAFQAbwBvAGwAYgBhAHIAPQAwAA0ACgBPAFcAQQAyADAAMAAzAEMAYQBuAGMAZQBsAEYAcgBvAG0AQwBvAG4AdABlAHgAdABNAGUAbgB1AD0AMAANAAoATwBXAEEAMgAwADAAMwBDAGEAbgBjAGUAbABGAHIAbwBtAFQAbwBvAGwAYgBhAHIAPQAwAA0ACgBPAFcAQQAyADAAMAAzAFAAcgBlAG0AaQB1AG0AQQByAGMAaABpAHYAZQBGAHUAbgBjAHQAaQBvAG4APQAwAA0ACgBPAFcAQQAyADAAMAAzAFAAcgBlAG0AaQB1AG0AUgBlAHMAdABvAHIAZQBGAHUAbgBjAHQAaQBvAG4APQAwAA0ACgBPAFcAQQAyADAAMAAzAFIAZQBzAHQAbwByAGUARgByAG8AbQBDAG8AbgB0AGUAeAB0AE0AZQBuAHUAPQAwAA0ACgBPAFcAQQAyADAAMAAzAFIAZQBzAHQAbwByAGUARgByAG8AbQBUAG8AbwBsAGIAYQByAD0AMAANAAoARQBWAFMARQBSAFYARQBSAFMAPQBlAHYAcwBlAHIAdgBlAHIAMQAuAGQAdgBkAC4AcAByAGkAOwBEAFYARABWAEUAVgAwADAAMQA7AGUAdgBzAGUAcgB2AGUAcgAyAC4AZAB2AGQALgBwAHIAaQA7AEQAVgBEAFYARQBWADAAMAAyADsAZQB2AHMAZQByAHYAZQByADMALgBkAHYAZAAuAHAAcgBpADsARABWAEQAVgBFAFYAMAAwADMAOwBlAHYAcwBlAHIAdgBlAHIANAAuAGQAdgBkAC4AcAByAGkAOwBEAFYARABWAEUAVgAwADAANAA7AA0ACgBPAFYATQBlAHMAcwBhAGcAZQBDAGwAYQBzAHMASQBuAGMAbAB1AGQAZQA9AEkAUABNAC4AUABvAHMAdAAqADsASQBQAE0ALgBOAG8AdABlACoAOwBJAFAATQAuAEQAbwBjAHUAbQBlAG4AdAAqADsASQBQAE0ALgBBAHAAcABvAGkAbgB0AG0AZQBuAHQAKgA7AA==</t:Content>
              </t:FileAttachment>
            </m:Attachments>
          </m:GetAttachmentResponseMessage>
        </m:ResponseMessages>
      </m:GetAttachmentResponse>
    </s:Body>
  </s:Envelope>
</Trace>

13/04/2018 10:04:42 [4172,88] [EWSBase::GetEVHiddenMessageId] Retrieved settings
13/04/2018 10:04:42 [4172,88] [EVContext::LoadHiddenSettings] Retrieved hidden message from web services
13/04/2018 10:04:42 [4172,88] [EVContext::LoadHiddenSettings] Settings from hidden message:
13/04/2018 10:04:42 [4172,88] [EVContext::LoadHiddenSettings]     SiteEntryId=1BFD6045488A059429D0C4CAF627389071d10000srvev1
13/04/2018 10:04:42 [4172,88] [EVContext::LoadHiddenSettings]     DefaultDoubleClickView=0
13/04/2018 10:04:42 [4172,88] [EVContext::LoadHiddenSettings]     DefaultWebAppURL=http://srvev1.domainb.pri/EnterpriseVault
13/04/2018 10:04:42 [4172,88] [EVContext::LoadHiddenSettings]     OWAWebAppURL=http://srvev1.domainb.pri/EVAnon
13/04/2018 10:04:42 [4172,88] [EVContext::LoadHiddenSettings]     MailboxServer=SRVEXCMBX001
13/04/2018 10:04:42 [4172,88] [EVContext::LoadHiddenSettings]     SystemMailbox=SMTP:csarchivembx1@domainb.com
13/04/2018 10:04:42 [4172,88] [EVContext::LoadHiddenSettings]     UsersCanDeleteItems=1
13/04/2018 10:04:42 [4172,88] [EVContext::LoadHiddenSettings]     ServerVersion=10.04
13/04/2018 10:04:42 [4172,88] [EVContext::LoadHiddenSettings]     MailboxState=1
13/04/2018 10:04:42 [4172,88] [EVContext::LoadHiddenSettings]     MailboxDN=/o=DomainPRI/ou=Exchange Administrative Group (FYDIBOHF23SPDLT)/cn=Recipients/cn=User Test
13/04/2018 10:04:42 [4172,88] [EVContext::LoadHiddenSettings]     DefaultArchiveId=191562E262292214EB270E085C41448F61110000srvev1
13/04/2018 10:04:42 [4172,88] [EVContext::LoadHiddenSettings]     UseInactivityPeriod=1
13/04/2018 10:04:42 [4172,88] [EVContext::LoadHiddenSettings]     UseQuotaLimit=1
13/04/2018 10:04:42 [4172,88] [EVContext::LoadHiddenSettings]     InactivityPeriodUnits=2
13/04/2018 10:04:42 [4172,88] [EVContext::LoadHiddenSettings]     InactivityPeriod=12
13/04/2018 10:04:42 [4172,88] [EVContext::LoadHiddenSettings]     MinAgePeriodUnits=2
13/04/2018 10:04:42 [4172,88] [EVContext::LoadHiddenSettings]     MinAgePeriod=0
13/04/2018 10:04:42 [4172,88] [EVContext::LoadHiddenSettings]     UseLargeItemsSize=0
13/04/2018 10:04:42 [4172,88] [EVContext::LoadHiddenSettings]     LargeItemsSizeKB=1024
13/04/2018 10:04:42 [4172,88] [EVContext::LoadHiddenSettings]     ArchiveOnlyWithAttach=0
13/04/2018 10:04:42 [4172,88] [EVContext::LoadHiddenSettings]     ArchiveDelItemsFolder=1
13/04/2018 10:04:42 [4172,88] [EVContext::LoadHiddenSettings]     PFInactivityPeriodUnits=2
13/04/2018 10:04:42 [4172,88] [EVContext::LoadHiddenSettings]     PFInactivityPeriod=6
13/04/2018 10:04:42 [4172,88] [EVContext::LoadHiddenSettings]     PFMinAgePeriodUnits=1
13/04/2018 10:04:42 [4172,88] [EVContext::LoadHiddenSettings]     PFMinAgePeriod=2
13/04/2018 10:04:42 [4172,88] [EVContext::LoadHiddenSettings]     PFUseLargeItemsSize=0
13/04/2018 10:04:42 [4172,88] [EVContext::LoadHiddenSettings]     PFLargeItemsSizeKB=10240
13/04/2018 10:04:42 [4172,88] [EVContext::LoadHiddenSettings]     PolicyEntryId=1B28DD6DC809C1F418BE9B4D58A75E9D51s10000srvev1
13/04/2018 10:04:42 [4172,88] [EVContext::LoadHiddenSettings]     PSTPolicyEntryId=14E6F9ED36467904AB16DD30CBD0DC5A31012700srvev1
13/04/2018 10:04:42 [4172,88] [EVContext::LoadHiddenSettings]     DefaultRetentionCategoryId=11F8EA55D4B4F6542B2D18BAAB513E8AC1b10000srvev1
13/04/2018 10:04:42 [4172,88] [EVContext::LoadHiddenSettings]     PSTImportEnabled=0
13/04/2018 10:04:42 [4172,88] [EVContext::LoadHiddenSettings]     ArchiveManagedFolders=0
13/04/2018 10:04:42 [4172,88] [EVContext::LoadHiddenSettings]     ManagedFolderHandling=2
13/04/2018 10:04:42 [4172,88] [EVContext::LoadHiddenSettings]     ArchiveSettingsLocked=1
13/04/2018 10:04:42 [4172,88] [EVContext::LoadHiddenSettings]     PstAllowDonation=0
13/04/2018 10:04:42 [4172,88] [EVContext::LoadHiddenSettings]     PstAllowOverrideRetentionCat=0
13/04/2018 10:04:42 [4172,88] [EVContext::LoadHiddenSettings]     AddServerToIntraNetZone=srvev1;srvev1.domainb.pri;srvev001;srvev001.domainb.pri
13/04/2018 10:04:42 [4172,88] [EVContext::LoadHiddenSettings]     AllowScriptPublicFolders=1
13/04/2018 10:04:42 [4172,88] [EVContext::LoadHiddenSettings]     AllowScriptSharedFolders=1
13/04/2018 10:04:42 [4172,88] [EVContext::LoadHiddenSettings]     ArchiveBtnVisible=0
13/04/2018 10:04:42 [4172,88] [EVContext::LoadHiddenSettings]     ArchiveExplorerBtnVisible=1
13/04/2018 10:04:42 [4172,88] [EVContext::LoadHiddenSettings]     CancelBtnVisible=0
13/04/2018 10:04:42 [4172,88] [EVContext::LoadHiddenSettings]     DeleteOriginalItem=1
13/04/2018 10:04:42 [4172,88] [EVContext::LoadHiddenSettings]     DeployFormsLocally=2
13/04/2018 10:04:42 [4172,88] [EVContext::LoadHiddenSettings]     MarkPSTs=1
13/04/2018 10:04:42 [4172,88] [EVContext::LoadHiddenSettings]     OVEnabled=2
13/04/2018 10:04:42 [4172,88] [EVContext::LoadHiddenSettings]     OVSetupWizard=0
13/04/2018 10:04:42 [4172,88] [EVContext::LoadHiddenSettings]     OVStartDownloadBtnVisible=2
13/04/2018 10:04:42 [4172,88] [EVContext::LoadHiddenSettings]     RestoreBtnVisible=0
13/04/2018 10:04:42 [4172,88] [EVContext::LoadHiddenSettings]     RPCOverHTTPRestrictions=0
13/04/2018 10:04:42 [4172,88] [EVContext::LoadHiddenSettings]     UseSelfInstallFunct=1
13/04/2018 10:04:42 [4172,88] [EVContext::LoadHiddenSettings]     VVEnabled=1
13/04/2018 10:04:42 [4172,88] [EVContext::LoadHiddenSettings]     VVReadingPaneContent=1
13/04/2018 10:04:42 [4172,88] [EVContext::LoadHiddenSettings]     OWA2003ArchiveFromContextMenu=0
13/04/2018 10:04:42 [4172,88] [EVContext::LoadHiddenSettings]     OWA2003ArchiveFromToolbar=0
13/04/2018 10:04:42 [4172,88] [EVContext::LoadHiddenSettings]     OWA2003CancelFromContextMenu=0
13/04/2018 10:04:42 [4172,88] [EVContext::LoadHiddenSettings]     OWA2003CancelFromToolbar=0
13/04/2018 10:04:42 [4172,88] [EVContext::LoadHiddenSettings]     OWA2003PremiumArchiveFunction=0
13/04/2018 10:04:42 [4172,88] [EVContext::LoadHiddenSettings]     OWA2003PremiumRestoreFunction=0
13/04/2018 10:04:42 [4172,88] [EVContext::LoadHiddenSettings]     OWA2003RestoreFromContextMenu=0
13/04/2018 10:04:42 [4172,88] [EVContext::LoadHiddenSettings]     OWA2003RestoreFromToolbar=0
13/04/2018 10:04:42 [4172,88] [EVContext::LoadHiddenSettings]     srvevS=srvev001.domainb.pri;srvev001;srvev002.domainb.pri;srvev002;srvev3.domainb.pri;srvev003;srvev4.domainb.pri;srvev004;
13/04/2018 10:04:42 [4172,88] [EVContext::LoadHiddenSettings]     OVMessageClassInclude=IPM.Post*;IPM.Note*;IPM.Document*;IPM.Appointment*;
13/04/2018 10:04:42 [4172,88] [EVContext::LoadHiddenSettings] Finished loading hidden settings
13/04/2018 10:04:42 [4172,88] [EVContext::LogHiddenSettings] Mailbox Settings loaded at: vendredi 13 avril 2018, 10:04:42
13/04/2018 10:04:42 [4172,88] [EVContext::LogHiddenSettings]     Enabled for archiving: Enabled
13/04/2018 10:04:42 [4172,88] [EVContext::LogHiddenSettings]     Web App Url: http://srvev1.domainb.pri/EVAnon
13/04/2018 10:04:42 [4172,88] [EVContext::LogHiddenSettings]     Default Web App Url: http://srvev1.domainb.pri/EnterpriseVault
13/04/2018 10:04:42 [4172,88] [EVContext::LogHiddenSettings]     External Web App Url: <https>/enterprisevault
13/04/2018 10:04:42 [4172,88] [EVContext::LogHiddenSettings]     Mailbox DN: /o=DomainPRI/ou=Exchange Administrative Group (FYDIBOHF23SPDLT)/cn=Recipients/cn=User Test
13/04/2018 10:04:42 [4172,88] [EVContext::LogHiddenSettings]     Default Archive Id: 191562E262292214EB270E085C41448F61110000srvev1
13/04/2018 10:04:42 [4172,88] [EVContext::LogHiddenSettings]     Default Ret Cat Id: 11F8EA55D4B4F6542B2D18BAAB513E8AC1b10000srvev1
13/04/2018 10:04:42 [4172,88] [EVContext::LogHiddenSettings]     Site Entry Id: 1BFD6045488A059429D0C4CAF627389071d10000srvev1
13/04/2018 10:04:42 [4172,88] [EVContext::LogHiddenSettings]     Users Can Delete Items: True
13/04/2018 10:04:42 [4172,88] [EVContext::LogHiddenSettings]     EV Server Version: 10.04
13/04/2018 10:04:42 [4172,88] [EVContext::LogHiddenSettings]     View Mode: OWA
13/04/2018 10:04:42 [4172,88] [EVContext::LogHiddenSettings]     Open Mode: ArchivedItem
13/04/2018 10:04:42 [4172,88] [EVContext::LogHiddenSettings]     Reply Mode: ArchivedItem
13/04/2018 10:04:42 [4172,88] [EVContext::LogHiddenSettings]     Reply to All Mode: ArchivedItem
13/04/2018 10:04:42 [4172,88] [EVContext::LogHiddenSettings]     Forward Mode: ArchivedItem
13/04/2018 10:04:42 [4172,88] [EVContext::LogHiddenSettings]     Delete Mode: Both
13/04/2018 10:04:42 [4172,88] [EVContext::LogHiddenSettings]     Archive on Toolbar: False
13/04/2018 10:04:42 [4172,88] [EVContext::LogHiddenSettings]     Restore on Toolbar: False
13/04/2018 10:04:42 [4172,88] [EVContext::LogHiddenSettings]     Cancel on Toolbar: False
13/04/2018 10:04:42 [4172,88] [EVContext::LogHiddenSettings]     Delete on Toolbar: True
13/04/2018 10:04:42 [4172,88] [EVContext::LogHiddenSettings]     Help on Toolbar: True
13/04/2018 10:04:42 [4172,88] [EVContext::LogHiddenSettings]     Archive on Context Menu: False
13/04/2018 10:04:42 [4172,88] [EVContext::LogHiddenSettings]     Restore on Context Menu: False
13/04/2018 10:04:42 [4172,88] [EVContext::LogHiddenSettings]     Cancel on Context Menu: False
13/04/2018 10:04:42 [4172,88] [EVContext::LogHiddenSettings]     Delete on Context Menu: True
13/04/2018 10:04:42 [4172,88] [EVContext::LogHiddenSettings]     Archive Explorer in Light Client: True
13/04/2018 10:04:42 [4172,88] [EVContext::LogHiddenSettings]     Archive Explorer in Premium Client: True
13/04/2018 10:04:42 [4172,88] [EVContext::LogHiddenSettings]     Search in Light Client: True
13/04/2018 10:04:42 [4172,88] [EVContext::LogHiddenSettings]     Search in Premium Client: True
13/04/2018 10:04:42 [4172,88] [EVContext::LogHiddenSettings]     Browser Search Link: True
13/04/2018 10:04:42 [4172,88] [EVContext::LogHiddenSettings]     Archive Managed Folders: False
13/04/2018 10:04:42 [4172,88] [EVContext::LogHiddenSettings]     Managed Folder Handling: Managed
13/04/2018 10:04:42 [4172,88] [EVContext::LogHiddenSettings]     Archive function in Light Client: Basic
13/04/2018 10:04:42 [4172,88] [EVContext::LogHiddenSettings]     Archive function in Premium Client: Basic
13/04/2018 10:04:42 [4172,88] [EVContext::LogHiddenSettings]     Archive Confirmation (basic function): True
13/04/2018 10:04:42 [4172,88] [EVContext::LogHiddenSettings]     Archive Sub Folders (basic function): False
13/04/2018 10:04:42 [4172,88] [EVContext::LogHiddenSettings]     Restore function in Light Client: Basic
13/04/2018 10:04:42 [4172,88] [EVContext::LogHiddenSettings]     Restore function in Premium Client: Basic
13/04/2018 10:04:42 [4172,88] [EVContext::LogHiddenSettings]     Delete Shortcut on restore (basic function): True
13/04/2018 10:04:42 [4172,88] [EVContext::LogHiddenSettings]     Restore confirmation (basic function): True
13/04/2018 10:04:42 [4172,88] [EVContext::LogHiddenSettings]     Restore to restored items folder (basic function): False
13/04/2018 10:04:42 [4172,88] [EVContext::LogHiddenSettings]     Hide OWA Archive Policy: False
13/04/2018 10:04:42 [4172,88] [EVContext::Initialise] EVContext intialised at 13/04/2018 10:04:42
13/04/2018 10:04:42 [4172,88] [EVContext::Initialise] Hidden settings loaded at 13/04/2018 10:04:42
13/04/2018 10:04:42 [4172,88] [EVContext::IsValidBrowser] Checking browser...
13/04/2018 10:04:42 [4172,88] [EVContext::IsValidBrowser] User agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko
13/04/2018 10:04:42 [4172,88] [EVContext::IsValidBrowser] Checking for MSIE in user agent
13/04/2018 10:04:42 [4172,88] [EVContext::IsValidBrowser] Returning: False
13/04/2018 10:04:42 [4172,88] [ImpersonationManager:StopImpersonation] Stopped impersonation
13/04/2018 10:04:42 [4172,88] Request processing finished
13/04/2018 10:04:42 [4172,88] #############################################################
13/04/2018 10:04:42 [4172,88] Request processing started
13/04/2018 10:04:42 [4172,88] Url: https://mail.domainb.com/owa/forms/premium/StartPage.aspx
13/04/2018 10:04:42 [4172,88] RawUrl: /owa/
13/04/2018 10:04:42 [4172,88] Query String parameters:
13/04/2018 10:04:42 [4172,88] Cookies
13/04/2018 10:04:42 [4172,88]     OutlookSession: 0c3904e053cb4107810b3b2b671352aa
13/04/2018 10:04:42 [4172,88]     PBack: 0
13/04/2018 10:04:42 [4172,88]     sessionid: 3f0f3d75-7f22-4133-a639-f02cb4b6cede
13/04/2018 10:04:42 [4172,88]     cadata: "2hqi32JS7FcpJRE0wq3bxlH9/5DqUjcsOKleRXok+8gtm1XxzTOpnOH/8Q03MClvG14Z2agqNemnz+9tNnxUXzD/HZEY4ASdBrDf8ra1lQs0="
13/04/2018 10:04:42 [4172,88]     UserContext: TKwsBQg9PUOYZIkEcZYyJeuIVV-VptUIFyx8lqZ5E3Hn4UqiUoPwBORdE0TK29OuBDVjXUJEx8Y.
13/04/2018 10:04:42 [4172,88]     tzid: Romance Standard Time
13/04/2018 10:04:42 [4172,88]     owacsdc: 
13/04/2018 10:04:42 [4172,88] Form: 
13/04/2018 10:04:42 [4172,88] OWA Session details
13/04/2018 10:04:42 [4172,88]     User agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko
13/04/2018 10:04:42 [4172,88]     Authentication type: Basic
13/04/2018 10:04:42 [4172,88]     Authenticated user: DomainPRI\user
13/04/2018 10:04:42 [4172,88]     Client IP Address: x.x.x.x
13/04/2018 10:04:42 [4172,88]     Server IP Address: y.y.y.y
13/04/2018 10:04:42 [4172,88]     Host: mail.domainb.com
13/04/2018 10:04:42 [4172,88] Primary SMTP Address: user@domainb.com
13/04/2018 10:04:42 [4172,88] Explicit Logon: False
13/04/2018 10:04:42 [4172,88] Explicit Logon Address: owa
13/04/2018 10:04:42 [4172,88] EV Extensions DLL version: 10.0.4.0
13/04/2018 10:04:42 [4172,88] [ImpersonationManager::StartImpersonation] Entry: Current user: AUTORITE NT\Système
13/04/2018 10:04:42 [4172,88] [ImpersonationManager::StartImpersonation] Entry: Impersonation Level: None
13/04/2018 10:04:42 [4172,88] [ImpersonationManager::StartImpersonation] Impersonating logged on user
13/04/2018 10:04:42 [4172,88] [ImpersonationManager::StartImpersonation] Exit: Current user: DomainPRI\user
13/04/2018 10:04:42 [4172,88] [ImpersonationManager::StartImpersonation] Exit: Impersonation Level: Impersonation
13/04/2018 10:04:42 [4172,88] [EVContext::Initialise] EVContext intialised at 13/04/2018 10:04:42
13/04/2018 10:04:42 [4172,88] [EVContext::Initialise] Hidden settings loaded at 13/04/2018 10:04:42
13/04/2018 10:04:42 [4172,88] [EVContext::IsValidBrowser] Returning: False
13/04/2018 10:04:42 [4172,88] [ImpersonationManager:StopImpersonation] Stopped impersonation
13/04/2018 10:04:42 [4172,88] Request processing finished
13/04/2018 10:04:43 [4172,23] #############################################################
13/04/2018 10:04:43 [4172,23] Request processing started
13/04/2018 10:04:43 [4172,23] Url: https://mail.domainb.com/owa/ev.owa?oeh=1&ns=PendingRequest&ev=FinishNotificationRequest&Fn=1&UA=0&cpc=787521;C0:0;C1:0;C2:0;C3:0;C4:0;C5:0;C6:0;C7:0;C8:0;C9:0;C10:0
13/04/2018 10:04:43 [4172,23] RawUrl: /owa/ev.owa?oeh=1&ns=PendingRequest&ev=FinishNotificationRequest&Fn=1&UA=0&cpc=787521;C0:0;C1:0;C2:0;C3:0;C4:0;C5:0;C6:0;C7:0;C8:0;C9:0;C10:0
13/04/2018 10:04:43 [4172,23] Query String parameters:
13/04/2018 10:04:43 [4172,23]     oeh: 1
13/04/2018 10:04:43 [4172,23]     ns: PendingRequest
13/04/2018 10:04:43 [4172,23]     ev: FinishNotificationRequest
13/04/2018 10:04:43 [4172,23]     Fn: 1
13/04/2018 10:04:43 [4172,23]     UA: 0
13/04/2018 10:04:43 [4172,23]     cpc: 787521;C0:0;C1:0;C2:0;C3:0;C4:0;C5:0;C6:0;C7:0;C8:0;C9:0;C10:0
13/04/2018 10:04:43 [4172,23] Cookies
13/04/2018 10:04:43 [4172,23]     MstrPgLd1: 1
13/04/2018 10:04:43 [4172,23]     MstrPgLd2: 1
13/04/2018 10:04:43 [4172,23]     OutlookSession: 0c3904e053cb4107810b3b2b671352aa
13/04/2018 10:04:43 [4172,23]     PBack: 0
13/04/2018 10:04:43 [4172,23]     sessionid: 3f0f3d75-7f22-4133-a639-f02cb4b6cede
13/04/2018 10:04:43 [4172,23]     cadata: "2hqi32JS7FcpJRE0wq3bxlH9/5DqUjcsOKleRXok+8gtm1XxzTOpnOH/8Q03MClvG14Z2agqNemnz+9tNnxUXzD/HZEY4ASdBrDf8ra1lQs0="
13/04/2018 10:04:43 [4172,23]     UserContext: TKwsBQg9PUOYZIkEcZYyJeuIVV-VptUIFyx8lqZ5E3Hn4UqiUoPwBORdE0TK29OuBDVjXUJEx8Y.
13/04/2018 10:04:43 [4172,23]     tzid: Romance Standard Time
13/04/2018 10:04:43 [4172,23] Form: 
13/04/2018 10:04:43 [4172,23] OWA Session details
13/04/2018 10:04:43 [4172,23]     User agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko
13/04/2018 10:04:43 [4172,23]     Authentication type: Basic
13/04/2018 10:04:43 [4172,23]     Authenticated user: DomainPRI\user
13/04/2018 10:04:43 [4172,23]     Client IP Address: x.x.x.x
13/04/2018 10:04:43 [4172,23]     Server IP Address: y.y.y.y
13/04/2018 10:04:43 [4172,23]     Host: mail.domainb.com
13/04/2018 10:04:43 [4172,23] Primary SMTP Address: user@domainb.com
13/04/2018 10:04:43 [4172,23] Explicit Logon: False
13/04/2018 10:04:43 [4172,23] Explicit Logon Address: owa
13/04/2018 10:04:43 [4172,23] EV Extensions DLL version: 10.0.4.0
13/04/2018 10:04:43 [4172,23] [ImpersonationManager::StartImpersonation] Entry: Current user: AUTORITE NT\Système
13/04/2018 10:04:43 [4172,23] [ImpersonationManager::StartImpersonation] Entry: Impersonation Level: None
13/04/2018 10:04:43 [4172,23] [ImpersonationManager::StartImpersonation] Impersonating logged on user
13/04/2018 10:04:43 [4172,23] [ImpersonationManager::StartImpersonation] Exit: Current user: DomainPRI\user
13/04/2018 10:04:43 [4172,23] [ImpersonationManager::StartImpersonation] Exit: Impersonation Level: Impersonation
13/04/2018 10:04:43 [4172,23] [EVContext::Initialise] EVContext intialised at 13/04/2018 10:04:42
13/04/2018 10:04:43 [4172,23] [EVContext::Initialise] Hidden settings loaded at 13/04/2018 10:04:42
13/04/2018 10:04:43 [4172,23] [EVContext::IsValidBrowser] Returning: False
13/04/2018 10:04:43 [4172,23] [ImpersonationManager:StopImpersonation] Stopped impersonation
13/04/2018 10:04:43 [4172,23] Request processing finished
13/04/2018 10:04:43 [4172,23] #############################################################
13/04/2018 10:04:43 [4172,23] Request processing started
13/04/2018 10:04:43 [4172,23] Url: https://mail.domainb.com/owa/ev.owa?oeh=1&ns=PendingRequest&ev=FinishNotificationRequest&Fn=1&UA=0&cpc=787521;C0:0;C1:0;C2:0;C3:0;C4:0;C5:0;C6:0;C7:0;C8:0;C9:0;C10:0
13/04/2018 10:04:43 [4172,23] RawUrl: /owa/ev.owa?oeh=1&ns=PendingRequest&ev=FinishNotificationRequest&Fn=1&UA=0&cpc=787521;C0:0;C1:0;C2:0;C3:0;C4:0;C5:0;C6:0;C7:0;C8:0;C9:0;C10:0
13/04/2018 10:04:43 [4172,23] Query String parameters:
13/04/2018 10:04:43 [4172,23]     oeh: 1
13/04/2018 10:04:43 [4172,23]     ns: PendingRequest
13/04/2018 10:04:43 [4172,23]     ev: FinishNotificationRequest
13/04/2018 10:04:43 [4172,23]     Fn: 1
13/04/2018 10:04:43 [4172,23]     UA: 0
13/04/2018 10:04:43 [4172,23]     cpc: 787521;C0:0;C1:0;C2:0;C3:0;C4:0;C5:0;C6:0;C7:0;C8:0;C9:0;C10:0
13/04/2018 10:04:43 [4172,23] Cookies
13/04/2018 10:04:43 [4172,23]     MstrPgLd1: 1
13/04/2018 10:04:43 [4172,23]     MstrPgLd2: 1
13/04/2018 10:04:43 [4172,23]     OutlookSession: 0c3904e053cb4107810b3b2b671352aa
13/04/2018 10:04:43 [4172,23]     PBack: 0
13/04/2018 10:04:43 [4172,23]     sessionid: 3f0f3d75-7f22-4133-a639-f02cb4b6cede
13/04/2018 10:04:43 [4172,23]     cadata: "2hqi32JS7FcpJRE0wq3bxlH9/5DqUjcsOKleRXok+8gtm1XxzTOpnOH/8Q03MClvG14Z2agqNemnz+9tNnxUXzD/HZEY4ASdBrDf8ra1lQs0="
13/04/2018 10:04:43 [4172,23]     UserContext: TKwsBQg9PUOYZIkEcZYyJeuIVV-VptUIFyx8lqZ5E3Hn4UqiUoPwBORdE0TK29OuBDVjXUJEx8Y.
13/04/2018 10:04:43 [4172,23]     tzid: Romance Standard Time
13/04/2018 10:04:43 [4172,23] Form: 
13/04/2018 10:04:43 [4172,23] OWA Session details
13/04/2018 10:04:43 [4172,23]     User agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko
13/04/2018 10:04:43 [4172,23]     Authentication type: Basic
13/04/2018 10:04:43 [4172,23]     Authenticated user: DomainPRI\user
13/04/2018 10:04:43 [4172,23]     Client IP Address: x.x.x.x
13/04/2018 10:04:43 [4172,23]     Server IP Address: y.y.y.y
13/04/2018 10:04:43 [4172,23]     Host: mail.domainb.com
13/04/2018 10:04:43 [4172,23] Primary SMTP Address: user@domainb.com
13/04/2018 10:04:43 [4172,23] Explicit Logon: False
13/04/2018 10:04:43 [4172,23] Explicit Logon Address: owa
13/04/2018 10:04:43 [4172,23] EV Extensions DLL version: 10.0.4.0
13/04/2018 10:04:43 [4172,23] [ImpersonationManager::StartImpersonation] Entry: Current user: AUTORITE NT\Système
13/04/2018 10:04:43 [4172,23] [ImpersonationManager::StartImpersonation] Entry: Impersonation Level: None
13/04/2018 10:04:43 [4172,23] [ImpersonationManager::StartImpersonation] Impersonating logged on user
13/04/2018 10:04:43 [4172,23] [ImpersonationManager::StartImpersonation] Exit: Current user: DomainPRI\user
13/04/2018 10:04:43 [4172,23] [ImpersonationManager::StartImpersonation] Exit: Impersonation Level: Impersonation
13/04/2018 10:04:43 [4172,23] [EVContext::Initialise] EVContext intialised at 13/04/2018 10:04:42
13/04/2018 10:04:43 [4172,23] [EVContext::Initialise] Hidden settings loaded at 13/04/2018 10:04:42
13/04/2018 10:04:43 [4172,23] [EVContext::IsValidBrowser] Returning: False
13/04/2018 10:04:43 [4172,23] [ImpersonationManager:StopImpersonation] Stopped impersonation
13/04/2018 10:04:43 [4172,23] Request processing finished
13/04/2018 10:04:43 [4172,88] #############################################################
13/04/2018 10:04:43 [4172,88] Request processing started
13/04/2018 10:04:43 [4172,88] Url: https://mail.domainb.com/owa/ev.owa?UA=0&oeh=1&ns=PendingRequest&ev=PendingNotificationRequest&canary=TKwsBQg9PUOYZIkEcZYyJeuIVV-VptUIFyx8lqZ5E3Hn4UqiUoPwBORdE0TK29OuBDVjXUJEx8Y.
13/04/2018 10:04:43 [4172,88] RawUrl: /owa/ev.owa?UA=0&oeh=1&ns=PendingRequest&ev=PendingNotificationRequest&canary=TKwsBQg9PUOYZIkEcZYyJeuIVV-VptUIFyx8lqZ5E3Hn4UqiUoPwBORdE0TK29OuBDVjXUJEx8Y.
13/04/2018 10:04:43 [4172,88] Query String parameters:
13/04/2018 10:04:43 [4172,88]     UA: 0
13/04/2018 10:04:43 [4172,88]     oeh: 1
13/04/2018 10:04:43 [4172,88]     ns: PendingRequest
13/04/2018 10:04:43 [4172,88]     ev: PendingNotificationRequest
13/04/2018 10:04:43 [4172,88]     canary: TKwsBQg9PUOYZIkEcZYyJeuIVV-VptUIFyx8lqZ5E3Hn4UqiUoPwBORdE0TK29OuBDVjXUJEx8Y.
13/04/2018 10:04:43 [4172,88] Cookies
13/04/2018 10:04:43 [4172,88]     MstrPgLd1: 1
13/04/2018 10:04:43 [4172,88]     MstrPgLd2: 1
13/04/2018 10:04:43 [4172,88]     OutlookSession: 0c3904e053cb4107810b3b2b671352aa
13/04/2018 10:04:43 [4172,88]     PBack: 0
13/04/2018 10:04:43 [4172,88]     sessionid: 3f0f3d75-7f22-4133-a639-f02cb4b6cede
13/04/2018 10:04:43 [4172,88]     cadata: "2hqi32JS7FcpJRE0wq3bxlH9/5DqUjcsOKleRXok+8gtm1XxzTOpnOH/8Q03MClvG14Z2agqNemnz+9tNnxUXzD/HZEY4ASdBrDf8ra1lQs0="
13/04/2018 10:04:43 [4172,88]     UserContext: TKwsBQg9PUOYZIkEcZYyJeuIVV-VptUIFyx8lqZ5E3Hn4UqiUoPwBORdE0TK29OuBDVjXUJEx8Y.
13/04/2018 10:04:43 [4172,88]     tzid: Romance Standard Time
13/04/2018 10:04:43 [4172,88] Form: 
13/04/2018 10:04:43 [4172,88] OWA Session details
13/04/2018 10:04:43 [4172,88]     User agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko
13/04/2018 10:04:43 [4172,88]     Authentication type: Basic
13/04/2018 10:04:43 [4172,88]     Authenticated user: DomainPRI\user
13/04/2018 10:04:43 [4172,88]     Client IP Address: x.x.x.x
13/04/2018 10:04:43 [4172,88]     Server IP Address: y.y.y.y
13/04/2018 10:04:43 [4172,88]     Host: mail.domainb.com
13/04/2018 10:04:43 [4172,88] Primary SMTP Address: user@domainb.com
13/04/2018 10:04:43 [4172,88] Explicit Logon: False
13/04/2018 10:04:43 [4172,88] Explicit Logon Address: owa
13/04/2018 10:04:43 [4172,88] EV Extensions DLL version: 10.0.4.0
13/04/2018 10:04:43 [4172,88] [ImpersonationManager::StartImpersonation] Entry: Current user: AUTORITE NT\Système
13/04/2018 10:04:43 [4172,88] [ImpersonationManager::StartImpersonation] Entry: Impersonation Level: None
13/04/2018 10:04:43 [4172,88] [ImpersonationManager::StartImpersonation] Impersonating logged on user
13/04/2018 10:04:43 [4172,88] [ImpersonationManager::StartImpersonation] Exit: Current user: DomainPRI\user
13/04/2018 10:04:43 [4172,88] [ImpersonationManager::StartImpersonation] Exit: Impersonation Level: Impersonation
13/04/2018 10:04:43 [4172,88] [EVContext::Initialise] EVContext intialised at 13/04/2018 10:04:42
13/04/2018 10:04:43 [4172,88] [EVContext::Initialise] Hidden settings loaded at 13/04/2018 10:04:42
13/04/2018 10:04:43 [4172,88] [EVContext::IsValidBrowser] Returning: False
13/04/2018 10:04:43 [4172,88] [ImpersonationManager:StopImpersonation] Stopped impersonation
13/04/2018 10:04:43 [4172,88] Request processing finished
13/04/2018 10:04:43 [4172,88] #############################################################
13/04/2018 10:04:43 [4172,88] Request processing started
13/04/2018 10:04:43 [4172,88] Url: https://mail.domainb.com/owa/ev.owa?oeh=1&ns=ClientCache&ev=Get
13/04/2018 10:04:43 [4172,88] RawUrl: /owa/ev.owa?oeh=1&ns=ClientCache&ev=Get
13/04/2018 10:04:43 [4172,88] Query String parameters:
13/04/2018 10:04:43 [4172,88]     oeh: 1
13/04/2018 10:04:43 [4172,88]     ns: ClientCache
13/04/2018 10:04:43 [4172,88]     ev: Get
13/04/2018 10:04:43 [4172,88] Cookies
13/04/2018 10:04:43 [4172,88]     MstrPgLd1: 1
13/04/2018 10:04:43 [4172,88]     MstrPgLd2: 1
13/04/2018 10:04:43 [4172,88]     OutlookSession: 0c3904e053cb4107810b3b2b671352aa
13/04/2018 10:04:43 [4172,88]     PBack: 0
13/04/2018 10:04:43 [4172,88]     sessionid: 3f0f3d75-7f22-4133-a639-f02cb4b6cede
13/04/2018 10:04:43 [4172,88]     cadata: "2hqi32JS7FcpJRE0wq3bxlH9/5DqUjcsOKleRXok+8gtm1XxzTOpnOH/8Q03MClvG14Z2agqNemnz+9tNnxUXzD/HZEY4ASdBrDf8ra1lQs0="
13/04/2018 10:04:43 [4172,88]     UserContext: TKwsBQg9PUOYZIkEcZYyJeuIVV-VptUIFyx8lqZ5E3Hn4UqiUoPwBORdE0TK29OuBDVjXUJEx8Y.
13/04/2018 10:04:43 [4172,88]     tzid: Romance Standard Time
13/04/2018 10:04:43 [4172,88] Form: 
13/04/2018 10:04:43 [4172,88] OWA Session details
13/04/2018 10:04:43 [4172,88]     User agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko
13/04/2018 10:04:43 [4172,88]     Authentication type: Basic
13/04/2018 10:04:43 [4172,88]     Authenticated user: DomainPRI\user
13/04/2018 10:04:43 [4172,88]     Client IP Address: x.x.x.x
13/04/2018 10:04:43 [4172,88]     Server IP Address: y.y.y.y
13/04/2018 10:04:43 [4172,88]     Host: mail.domainb.com
13/04/2018 10:04:43 [4172,88] Primary SMTP Address: user@domainb.com
13/04/2018 10:04:43 [4172,88] Explicit Logon: False
13/04/2018 10:04:43 [4172,88] Explicit Logon Address: owa
13/04/2018 10:04:43 [4172,88] EV Extensions DLL version: 10.0.4.0
13/04/2018 10:04:43 [4172,88] [ImpersonationManager::StartImpersonation] Entry: Current user: AUTORITE NT\Système
13/04/2018 10:04:43 [4172,88] [ImpersonationManager::StartImpersonation] Entry: Impersonation Level: None
13/04/2018 10:04:43 [4172,88] [ImpersonationManager::StartImpersonation] Impersonating logged on user
13/04/2018 10:04:43 [4172,88] [ImpersonationManager::StartImpersonation] Exit: Current user: DomainPRI\user
13/04/2018 10:04:43 [4172,88] [ImpersonationManager::StartImpersonation] Exit: Impersonation Level: Impersonation
13/04/2018 10:04:43 [4172,88] [EVContext::Initialise] EVContext intialised at 13/04/2018 10:04:42
13/04/2018 10:04:43 [4172,88] [EVContext::Initialise] Hidden settings loaded at 13/04/2018 10:04:42
13/04/2018 10:04:43 [4172,88] [EVContext::IsValidBrowser] Returning: False
13/04/2018 10:04:43 [4172,88] [ImpersonationManager:StopImpersonation] Stopped impersonation
13/04/2018 10:04:43 [4172,88] Request processing finished
13/04/2018 10:04:43 [4172,88] #############################################################
13/04/2018 10:04:43 [4172,88] Request processing started
13/04/2018 10:04:43 [4172,88] Url: https://mail.domainb.com/owa/ev.owa?oeh=1&ns=ClientCache&ev=Get
13/04/2018 10:04:43 [4172,88] RawUrl: /owa/ev.owa?oeh=1&ns=ClientCache&ev=Get
13/04/2018 10:04:43 [4172,88] Query String parameters:
13/04/2018 10:04:43 [4172,88]     oeh: 1
13/04/2018 10:04:43 [4172,88]     ns: ClientCache
13/04/2018 10:04:43 [4172,88]     ev: Get
13/04/2018 10:04:43 [4172,88] Cookies
13/04/2018 10:04:43 [4172,88]     MstrPgLd1: 1
13/04/2018 10:04:43 [4172,88]     MstrPgLd2: 1
13/04/2018 10:04:43 [4172,88]     OutlookSession: 0c3904e053cb4107810b3b2b671352aa
13/04/2018 10:04:43 [4172,88]     PBack: 0
13/04/2018 10:04:43 [4172,88]     sessionid: 3f0f3d75-7f22-4133-a639-f02cb4b6cede
13/04/2018 10:04:43 [4172,88]     cadata: "2hqi32JS7FcpJRE0wq3bxlH9/5DqUjcsOKleRXok+8gtm1XxzTOpnOH/8Q03MClvG14Z2agqNemnz+9tNnxUXzD/HZEY4ASdBrDf8ra1lQs0="
13/04/2018 10:04:43 [4172,88]     UserContext: TKwsBQg9PUOYZIkEcZYyJeuIVV-VptUIFyx8lqZ5E3Hn4UqiUoPwBORdE0TK29OuBDVjXUJEx8Y.
13/04/2018 10:04:43 [4172,88]     tzid: Romance Standard Time
13/04/2018 10:04:43 [4172,88] Form: 
13/04/2018 10:04:43 [4172,88] OWA Session details
13/04/2018 10:04:43 [4172,88]     User agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko
13/04/2018 10:04:43 [4172,88]     Authentication type: Basic
13/04/2018 10:04:43 [4172,88]     Authenticated user: DomainPRI\user
13/04/2018 10:04:43 [4172,88]     Client IP Address: x.x.x.x
13/04/2018 10:04:43 [4172,88]     Server IP Address: y.y.y.y
13/04/2018 10:04:43 [4172,88]     Host: mail.domainb.com
13/04/2018 10:04:43 [4172,88] Primary SMTP Address: user@domainb.com
13/04/2018 10:04:43 [4172,88] Explicit Logon: False
13/04/2018 10:04:43 [4172,88] Explicit Logon Address: owa
13/04/2018 10:04:43 [4172,88] EV Extensions DLL version: 10.0.4.0
13/04/2018 10:04:43 [4172,88] [ImpersonationManager::StartImpersonation] Entry: Current user: AUTORITE NT\Système
13/04/2018 10:04:43 [4172,88] [ImpersonationManager::StartImpersonation] Entry: Impersonation Level: None
13/04/2018 10:04:43 [4172,88] [ImpersonationManager::StartImpersonation] Impersonating logged on user
13/04/2018 10:04:43 [4172,88] [ImpersonationManager::StartImpersonation] Exit: Current user: DomainPRI\user
13/04/2018 10:04:43 [4172,88] [ImpersonationManager::StartImpersonation] Exit: Impersonation Level: Impersonation
13/04/2018 10:04:43 [4172,88] [EVContext::Initialise] EVContext intialised at 13/04/2018 10:04:42
13/04/2018 10:04:43 [4172,88] [EVContext::Initialise] Hidden settings loaded at 13/04/2018 10:04:42
13/04/2018 10:04:43 [4172,88] [EVContext::IsValidBrowser] Returning: False
13/04/2018 10:04:43 [4172,88] [ImpersonationManager:StopImpersonation] Stopped impersonation
13/04/2018 10:04:43 [4172,88] Request processing finished
13/04/2018 10:04:44 [4172,1] #############################################################
13/04/2018 10:04:44 [4172,1] Request processing started
13/04/2018 10:04:44 [4172,1] Url: https://mail.domainb.com/owa/ev.owa?oeh=1&ns=MsgVLV2&ev=Preread
13/04/2018 10:04:44 [4172,1] RawUrl: /owa/ev.owa?oeh=1&ns=MsgVLV2&ev=Preread
13/04/2018 10:04:44 [4172,1] Query String parameters:
13/04/2018 10:04:44 [4172,1]     oeh: 1
13/04/2018 10:04:44 [4172,1]     ns: MsgVLV2
13/04/2018 10:04:44 [4172,1]     ev: Preread
13/04/2018 10:04:44 [4172,1] Cookies
13/04/2018 10:04:44 [4172,1]     MstrPgLd1: 1
13/04/2018 10:04:44 [4172,1]     MstrPgLd2: 1
13/04/2018 10:04:44 [4172,1]     OutlookSession: 0c3904e053cb4107810b3b2b671352aa
13/04/2018 10:04:44 [4172,1]     PBack: 0
13/04/2018 10:04:44 [4172,1]     sessionid: 3f0f3d75-7f22-4133-a639-f02cb4b6cede
13/04/2018 10:04:44 [4172,1]     cadata: "2hqi32JS7FcpJRE0wq3bxlH9/5DqUjcsOKleRXok+8gtm1XxzTOpnOH/8Q03MClvG14Z2agqNemnz+9tNnxUXzD/HZEY4ASdBrDf8ra1lQs0="
13/04/2018 10:04:44 [4172,1]     UserContext: TKwsBQg9PUOYZIkEcZYyJeuIVV-VptUIFyx8lqZ5E3Hn4UqiUoPwBORdE0TK29OuBDVjXUJEx8Y.
13/04/2018 10:04:44 [4172,1]     tzid: Romance Standard Time
13/04/2018 10:04:44 [4172,1] Form: 
13/04/2018 10:04:44 [4172,1] OWA Session details
13/04/2018 10:04:44 [4172,1]     User agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko
13/04/2018 10:04:44 [4172,1]     Authentication type: Basic
13/04/2018 10:04:44 [4172,1]     Authenticated user: DomainPRI\user
13/04/2018 10:04:44 [4172,1]     Client IP Address: x.x.x.x
13/04/2018 10:04:44 [4172,1]     Server IP Address: y.y.y.y
13/04/2018 10:04:44 [4172,1]     Host: mail.domainb.com
13/04/2018 10:04:44 [4172,1] Primary SMTP Address: user@domainb.com
13/04/2018 10:04:44 [4172,1] Explicit Logon: False
13/04/2018 10:04:44 [4172,1] Explicit Logon Address: owa
13/04/2018 10:04:44 [4172,1] EV Extensions DLL version: 10.0.4.0
13/04/2018 10:04:44 [4172,1] [ImpersonationManager::StartImpersonation] Entry: Current user: AUTORITE NT\Système
13/04/2018 10:04:44 [4172,1] [ImpersonationManager::StartImpersonation] Entry: Impersonation Level: None
13/04/2018 10:04:44 [4172,1] [ImpersonationManager::StartImpersonation] Impersonating logged on user
13/04/2018 10:04:44 [4172,1] [ImpersonationManager::StartImpersonation] Exit: Current user: DomainPRI\user
13/04/2018 10:04:44 [4172,1] [ImpersonationManager::StartImpersonation] Exit: Impersonation Level: Impersonation
13/04/2018 10:04:44 [4172,1] [EVContext::Initialise] EVContext intialised at 13/04/2018 10:04:42
13/04/2018 10:04:44 [4172,1] [EVContext::Initialise] Hidden settings loaded at 13/04/2018 10:04:42
13/04/2018 10:04:44 [4172,1] [EVContext::IsValidBrowser] Returning: False
13/04/2018 10:04:44 [4172,1] [ImpersonationManager:StopImpersonation] Stopped impersonation
13/04/2018 10:04:44 [4172,1] Request processing finished
13/04/2018 10:04:44 [4172,1] #############################################################
13/04/2018 10:04:44 [4172,1] Request processing started
13/04/2018 10:04:44 [4172,1] Url: https://mail.domainb.com/owa/ev.owa?oeh=1&ns=MsgVLV2&ev=Preread
13/04/2018 10:04:44 [4172,1] RawUrl: /owa/ev.owa?oeh=1&ns=MsgVLV2&ev=Preread
13/04/2018 10:04:44 [4172,1] Query String parameters:
13/04/2018 10:04:44 [4172,1]     oeh: 1
13/04/2018 10:04:44 [4172,1]     ns: MsgVLV2
13/04/2018 10:04:44 [4172,1]     ev: Preread
13/04/2018 10:04:44 [4172,1] Cookies
13/04/2018 10:04:44 [4172,1]     MstrPgLd1: 1
13/04/2018 10:04:44 [4172,1]     MstrPgLd2: 1
13/04/2018 10:04:44 [4172,1]     OutlookSession: 0c3904e053cb4107810b3b2b671352aa
13/04/2018 10:04:44 [4172,1]     PBack: 0
13/04/2018 10:04:44 [4172,1]     sessionid: 3f0f3d75-7f22-4133-a639-f02cb4b6cede
13/04/2018 10:04:44 [4172,1]     cadata: "2hqi32JS7FcpJRE0wq3bxlH9/5DqUjcsOKleRXok+8gtm1XxzTOpnOH/8Q03MClvG14Z2agqNemnz+9tNnxUXzD/HZEY4ASdBrDf8ra1lQs0="
13/04/2018 10:04:44 [4172,1]     UserContext: TKwsBQg9PUOYZIkEcZYyJeuIVV-VptUIFyx8lqZ5E3Hn4UqiUoPwBORdE0TK29OuBDVjXUJEx8Y.
13/04/2018 10:04:44 [4172,1]     tzid: Romance Standard Time
13/04/2018 10:04:44 [4172,1] Form: 
13/04/2018 10:04:44 [4172,1] OWA Session details
13/04/2018 10:04:44 [4172,1]     User agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko
13/04/2018 10:04:44 [4172,1]     Authentication type: Basic
13/04/2018 10:04:44 [4172,1]     Authenticated user: DomainPRI\user
13/04/2018 10:04:44 [4172,1]     Client IP Address: x.x.x.x
13/04/2018 10:04:44 [4172,1]     Server IP Address: y.y.y.y
13/04/2018 10:04:44 [4172,1]     Host: mail.domainb.com
13/04/2018 10:04:44 [4172,1] Primary SMTP Address: user@domainb.com
13/04/2018 10:04:44 [4172,1] Explicit Logon: False
13/04/2018 10:04:44 [4172,1] Explicit Logon Address: owa
13/04/2018 10:04:44 [4172,1] EV Extensions DLL version: 10.0.4.0
13/04/2018 10:04:44 [4172,1] [ImpersonationManager::StartImpersonation] Entry: Current user: AUTORITE NT\Système
13/04/2018 10:04:44 [4172,1] [ImpersonationManager::StartImpersonation] Entry: Impersonation Level: None
13/04/2018 10:04:44 [4172,1] [ImpersonationManager::StartImpersonation] Impersonating logged on user
13/04/2018 10:04:44 [4172,1] [ImpersonationManager::StartImpersonation] Exit: Current user: DomainPRI\user
13/04/2018 10:04:44 [4172,1] [ImpersonationManager::StartImpersonation] Exit: Impersonation Level: Impersonation
13/04/2018 10:04:44 [4172,1] [EVContext::Initialise] EVContext intialised at 13/04/2018 10:04:42
13/04/2018 10:04:44 [4172,1] [EVContext::Initialise] Hidden settings loaded at 13/04/2018 10:04:42
13/04/2018 10:04:44 [4172,1] [EVContext::IsValidBrowser] Returning: False
13/04/2018 10:04:44 [4172,1] [ImpersonationManager:StopImpersonation] Stopped impersonation
13/04/2018 10:04:44 [4172,1] Request processing finished
13/04/2018 10:04:44 [4172,23] #############################################################
13/04/2018 10:04:44 [4172,23] Request processing started
13/04/2018 10:04:44 [4172,23] Url: https://mail.domainb.com/owa/forms/premium/SubPageEventHandler.aspx?ae=Item&a=Preview&t=IPM.Note&id=RgAAAADIA3gwRBEPRrvFmmpCynIBBwC3qqxLkXm2T51zhWCLd4yUAAAAiAOBAABLx3PVAtJcR7pHEkF0EjCUAAE5MtQ/AAAJ&pf=1&UA=0&canary=TKwsBQg9PUOYZIkEcZYyJeuIVV-VptUIFyx8lqZ5E3Hn4UqiUoPwBORdE0TK29OuBDVjXUJEx8Y.&SP=1&subpage=ReadMessage.ascx
13/04/2018 10:04:44 [4172,23] RawUrl: /owa/?ae=Item&a=Preview&t=IPM.Note&id=RgAAAADIA3gwRBEPRrvFmmpCynIBBwC3qqxLkXm2T51zhWCLd4yUAAAAiAOBAABLx3PVAtJcR7pHEkF0EjCUAAE5MtQ%2fAAAJ&pf=1&UA=0&canary=TKwsBQg9PUOYZIkEcZYyJeuIVV-VptUIFyx8lqZ5E3Hn4UqiUoPwBORdE0TK29OuBDVjXUJEx8Y.&SP=1
13/04/2018 10:04:44 [4172,23] Query String parameters:
13/04/2018 10:04:44 [4172,23]     ae: Item
13/04/2018 10:04:44 [4172,23]     a: Preview
13/04/2018 10:04:44 [4172,23]     t: IPM.Note
13/04/2018 10:04:44 [4172,23]     id: RgAAAADIA3gwRBEPRrvFmmpCynIBBwC3qqxLkXm2T51zhWCLd4yUAAAAiAOBAABLx3PVAtJcR7pHEkF0EjCUAAE5MtQ/AAAJ
13/04/2018 10:04:44 [4172,23]     pf: 1
13/04/2018 10:04:44 [4172,23]     UA: 0
13/04/2018 10:04:44 [4172,23]     canary: TKwsBQg9PUOYZIkEcZYyJeuIVV-VptUIFyx8lqZ5E3Hn4UqiUoPwBORdE0TK29OuBDVjXUJEx8Y.
13/04/2018 10:04:44 [4172,23]     SP: 1
13/04/2018 10:04:44 [4172,23]     subpage: ReadMessage.ascx
13/04/2018 10:04:44 [4172,23] Cookies
13/04/2018 10:04:44 [4172,23]     MstrPgLd1: 1
13/04/2018 10:04:44 [4172,23]     MstrPgLd2: 1
13/04/2018 10:04:44 [4172,23]     OutlookSession: 0c3904e053cb4107810b3b2b671352aa
13/04/2018 10:04:44 [4172,23]     PBack: 0
13/04/2018 10:04:44 [4172,23]     sessionid: 3f0f3d75-7f22-4133-a639-f02cb4b6cede
13/04/2018 10:04:44 [4172,23]     cadata: "2hqi32JS7FcpJRE0wq3bxlH9/5DqUjcsOKleRXok+8gtm1XxzTOpnOH/8Q03MClvG14Z2agqNemnz+9tNnxUXzD/HZEY4ASdBrDf8ra1lQs0="
13/04/2018 10:04:44 [4172,23]     UserContext: TKwsBQg9PUOYZIkEcZYyJeuIVV-VptUIFyx8lqZ5E3Hn4UqiUoPwBORdE0TK29OuBDVjXUJEx8Y.
13/04/2018 10:04:44 [4172,23]     tzid: Romance Standard Time
13/04/2018 10:04:44 [4172,23] Form: 
13/04/2018 10:04:44 [4172,23] OWA Session details
13/04/2018 10:04:44 [4172,23]     User agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko
13/04/2018 10:04:44 [4172,23]     Authentication type: Basic
13/04/2018 10:04:44 [4172,23]     Authenticated user: DomainPRI\user
13/04/2018 10:04:44 [4172,23]     Client IP Address: x.x.x.x
13/04/2018 10:04:44 [4172,23]     Server IP Address: y.y.y.y
13/04/2018 10:04:44 [4172,23]     Host: mail.domainb.com
13/04/2018 10:04:44 [4172,23] Primary SMTP Address: user@domainb.com
13/04/2018 10:04:44 [4172,23] Explicit Logon: False
13/04/2018 10:04:44 [4172,23] Explicit Logon Address: owa
13/04/2018 10:04:44 [4172,23] EV Extensions DLL version: 10.0.4.0
13/04/2018 10:04:44 [4172,23] [ImpersonationManager::StartImpersonation] Entry: Current user: AUTORITE NT\Système
13/04/2018 10:04:44 [4172,23] [ImpersonationManager::StartImpersonation] Entry: Impersonation Level: None
13/04/2018 10:04:44 [4172,23] [ImpersonationManager::StartImpersonation] Impersonating logged on user
13/04/2018 10:04:44 [4172,23] [ImpersonationManager::StartImpersonation] Exit: Current user: DomainPRI\user
13/04/2018 10:04:44 [4172,23] [ImpersonationManager::StartImpersonation] Exit: Impersonation Level: Impersonation
13/04/2018 10:04:44 [4172,23] [EVContext::Initialise] EVContext intialised at 13/04/2018 10:04:42
13/04/2018 10:04:44 [4172,23] [EVContext::Initialise] Hidden settings loaded at 13/04/2018 10:04:42
13/04/2018 10:04:44 [4172,23] [EVContext::IsValidBrowser] Returning: False
13/04/2018 10:04:44 [4172,23] [ImpersonationManager:StopImpersonation] Stopped impersonation
13/04/2018 10:04:44 [4172,23] Request processing finished
13/04/2018 10:04:44 [4172,23] #############################################################
13/04/2018 10:04:44 [4172,23] Request processing started
13/04/2018 10:04:44 [4172,23] Url: https://mail.domainb.com/owa/forms/premium/SubPageEventHandler.aspx?ae=Item&a=Preview&t=IPM.Note&id=RgAAAADIA3gwRBEPRrvFmmpCynIBBwC3qqxLkXm2T51zhWCLd4yUAAAAiAOBAABLx3PVAtJcR7pHEkF0EjCUAAE5MtQ/AAAJ&pf=1&UA=0&canary=TKwsBQg9PUOYZIkEcZYyJeuIVV-VptUIFyx8lqZ5E3Hn4UqiUoPwBORdE0TK29OuBDVjXUJEx8Y.&SP=1&subpage=ReadMessage.ascx
13/04/2018 10:04:44 [4172,23] RawUrl: /owa/?ae=Item&a=Preview&t=IPM.Note&id=RgAAAADIA3gwRBEPRrvFmmpCynIBBwC3qqxLkXm2T51zhWCLd4yUAAAAiAOBAABLx3PVAtJcR7pHEkF0EjCUAAE5MtQ%2fAAAJ&pf=1&UA=0&canary=TKwsBQg9PUOYZIkEcZYyJeuIVV-VptUIFyx8lqZ5E3Hn4UqiUoPwBORdE0TK29OuBDVjXUJEx8Y.&SP=1
13/04/2018 10:04:44 [4172,23] Query String parameters:
13/04/2018 10:04:44 [4172,23]     ae: Item
13/04/2018 10:04:44 [4172,23]     a: Preview
13/04/2018 10:04:44 [4172,23]     t: IPM.Note
13/04/2018 10:04:44 [4172,23]     id: RgAAAADIA3gwRBEPRrvFmmpCynIBBwC3qqxLkXm2T51zhWCLd4yUAAAAiAOBAABLx3PVAtJcR7pHEkF0EjCUAAE5MtQ/AAAJ
13/04/2018 10:04:44 [4172,23]     pf: 1
13/04/2018 10:04:44 [4172,23]     UA: 0
13/04/2018 10:04:44 [4172,23]     canary: TKwsBQg9PUOYZIkEcZYyJeuIVV-VptUIFyx8lqZ5E3Hn4UqiUoPwBORdE0TK29OuBDVjXUJEx8Y.
13/04/2018 10:04:44 [4172,23]     SP: 1
13/04/2018 10:04:44 [4172,23]     subpage: ReadMessage.ascx
13/04/2018 10:04:44 [4172,23] Cookies
13/04/2018 10:04:44 [4172,23]     MstrPgLd1: 1
13/04/2018 10:04:44 [4172,23]     MstrPgLd2: 1
13/04/2018 10:04:44 [4172,23]     OutlookSession: 0c3904e053cb4107810b3b2b671352aa
13/04/2018 10:04:44 [4172,23]     PBack: 0
13/04/2018 10:04:44 [4172,23]     sessionid: 3f0f3d75-7f22-4133-a639-f02cb4b6cede
13/04/2018 10:04:44 [4172,23]     cadata: "2hqi32JS7FcpJRE0wq3bxlH9/5DqUjcsOKleRXok+8gtm1XxzTOpnOH/8Q03MClvG14Z2agqNemnz+9tNnxUXzD/HZEY4ASdBrDf8ra1lQs0="
13/04/2018 10:04:44 [4172,23]     UserContext: TKwsBQg9PUOYZIkEcZYyJeuIVV-VptUIFyx8lqZ5E3Hn4UqiUoPwBORdE0TK29OuBDVjXUJEx8Y.
13/04/2018 10:04:44 [4172,23]     tzid: Romance Standard Time
13/04/2018 10:04:44 [4172,23] Form: 
13/04/2018 10:04:44 [4172,23] OWA Session details
13/04/2018 10:04:44 [4172,23]     User agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko
13/04/2018 10:04:44 [4172,23]     Authentication type: Basic
13/04/2018 10:04:44 [4172,23]     Authenticated user: DomainPRI\user
13/04/2018 10:04:44 [4172,23]     Client IP Address: x.x.x.x
13/04/2018 10:04:44 [4172,23]     Server IP Address: y.y.y.y
13/04/2018 10:04:44 [4172,23]     Host: mail.domainb.com
13/04/2018 10:04:44 [4172,23] Primary SMTP Address: user@domainb.com
13/04/2018 10:04:44 [4172,23] Explicit Logon: False
13/04/2018 10:04:44 [4172,23] Explicit Logon Address: owa
13/04/2018 10:04:44 [4172,23] EV Extensions DLL version: 10.0.4.0
13/04/2018 10:04:44 [4172,23] [ImpersonationManager::StartImpersonation] Entry: Current user: AUTORITE NT\Système
13/04/2018 10:04:44 [4172,23] [ImpersonationManager::StartImpersonation] Entry: Impersonation Level: None
13/04/2018 10:04:44 [4172,23] [ImpersonationManager::StartImpersonation] Impersonating logged on user
13/04/2018 10:04:44 [4172,23] [ImpersonationManager::StartImpersonation] Exit: Current user: DomainPRI\user
13/04/2018 10:04:44 [4172,23] [ImpersonationManager::StartImpersonation] Exit: Impersonation Level: Impersonation
13/04/2018 10:04:44 [4172,23] [EVContext::Initialise] EVContext intialised at 13/04/2018 10:04:42
13/04/2018 10:04:44 [4172,23] [EVContext::Initialise] Hidden settings loaded at 13/04/2018 10:04:42
13/04/2018 10:04:44 [4172,23] [EVContext::IsValidBrowser] Returning: False
13/04/2018 10:04:44 [4172,23] [ImpersonationManager:StopImpersonation] Stopped impersonation
13/04/2018 10:04:44 [4172,23] Request processing finished
13/04/2018 10:04:44 [4172,23] #############################################################
13/04/2018 10:04:44 [4172,23] Request processing started
13/04/2018 10:04:44 [4172,23] Url: https://mail.domainb.com/owa/forms/premium/SubPageEventHandler.aspx?ae=Item&a=Preview&t=IPM.Note&id=RgAAAADIA3gwRBEPRrvFmmpCynIBBwC3qqxLkXm2T51zhWCLd4yUAAAAiAOBAABLx3PVAtJcR7pHEkF0EjCUAAE5MtQ+AAAJ&pf=1&UA=0&canary=TKwsBQg9PUOYZIkEcZYyJeuIVV-VptUIFyx8lqZ5E3Hn4UqiUoPwBORdE0TK29OuBDVjXUJEx8Y.&SP=1&subpage=ReadMessage.ascx
13/04/2018 10:04:44 [4172,23] RawUrl: /owa/?ae=Item&a=Preview&t=IPM.Note&id=RgAAAADIA3gwRBEPRrvFmmpCynIBBwC3qqxLkXm2T51zhWCLd4yUAAAAiAOBAABLx3PVAtJcR7pHEkF0EjCUAAE5MtQ%2bAAAJ&pf=1&UA=0&canary=TKwsBQg9PUOYZIkEcZYyJeuIVV-VptUIFyx8lqZ5E3Hn4UqiUoPwBORdE0TK29OuBDVjXUJEx8Y.&SP=1
13/04/2018 10:04:44 [4172,23] Query String parameters:
13/04/2018 10:04:44 [4172,23]     ae: Item
13/04/2018 10:04:44 [4172,23]     a: Preview
13/04/2018 10:04:44 [4172,23]     t: IPM.Note
13/04/2018 10:04:44 [4172,23]     id: RgAAAADIA3gwRBEPRrvFmmpCynIBBwC3qqxLkXm2T51zhWCLd4yUAAAAiAOBAABLx3PVAtJcR7pHEkF0EjCUAAE5MtQ+AAAJ
13/04/2018 10:04:44 [4172,23]     pf: 1
13/04/2018 10:04:44 [4172,23]     UA: 0
13/04/2018 10:04:44 [4172,23]     canary: TKwsBQg9PUOYZIkEcZYyJeuIVV-VptUIFyx8lqZ5E3Hn4UqiUoPwBORdE0TK29OuBDVjXUJEx8Y.
13/04/2018 10:04:44 [4172,23]     SP: 1
13/04/2018 10:04:44 [4172,23]     subpage: ReadMessage.ascx
13/04/2018 10:04:44 [4172,23] Cookies
13/04/2018 10:04:44 [4172,23]     MstrPgLd1: 1
13/04/2018 10:04:44 [4172,23]     MstrPgLd2: 1
13/04/2018 10:04:44 [4172,23]     OutlookSession: 0c3904e053cb4107810b3b2b671352aa
13/04/2018 10:04:44 [4172,23]     PBack: 0
13/04/2018 10:04:44 [4172,23]     sessionid: 3f0f3d75-7f22-4133-a639-f02cb4b6cede
13/04/2018 10:04:44 [4172,23]     cadata: "2hqi32JS7FcpJRE0wq3bxlH9/5DqUjcsOKleRXok+8gtm1XxzTOpnOH/8Q03MClvG14Z2agqNemnz+9tNnxUXzD/HZEY4ASdBrDf8ra1lQs0="
13/04/2018 10:04:44 [4172,23]     UserContext: TKwsBQg9PUOYZIkEcZYyJeuIVV-VptUIFyx8lqZ5E3Hn4UqiUoPwBORdE0TK29OuBDVjXUJEx8Y.
13/04/2018 10:04:44 [4172,23]     tzid: Romance Standard Time
13/04/2018 10:04:44 [4172,23] Form: 
13/04/2018 10:04:44 [4172,23] OWA Session details
13/04/2018 10:04:44 [4172,23]     User agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko
13/04/2018 10:04:44 [4172,23]     Authentication type: Basic
13/04/2018 10:04:44 [4172,23]     Authenticated user: DomainPRI\user
13/04/2018 10:04:44 [4172,23]     Client IP Address: x.x.x.x
13/04/2018 10:04:44 [4172,23]     Server IP Address: y.y.y.y
13/04/2018 10:04:44 [4172,23]     Host: mail.domainb.com
13/04/2018 10:04:44 [4172,23] Primary SMTP Address: user@domainb.com
13/04/2018 10:04:44 [4172,23] Explicit Logon: False
13/04/2018 10:04:44 [4172,23] Explicit Logon Address: owa
13/04/2018 10:04:44 [4172,23] EV Extensions DLL version: 10.0.4.0
13/04/2018 10:04:44 [4172,23] [ImpersonationManager::StartImpersonation] Entry: Current user: AUTORITE NT\Système
13/04/2018 10:04:44 [4172,23] [ImpersonationManager::StartImpersonation] Entry: Impersonation Level: None
13/04/2018 10:04:44 [4172,23] [ImpersonationManager::StartImpersonation] Impersonating logged on user
13/04/2018 10:04:44 [4172,23] [ImpersonationManager::StartImpersonation] Exit: Current user: DomainPRI\user
13/04/2018 10:04:44 [4172,23] [ImpersonationManager::StartImpersonation] Exit: Impersonation Level: Impersonation
13/04/2018 10:04:44 [4172,23] [EVContext::Initialise] EVContext intialised at 13/04/2018 10:04:42
13/04/2018 10:04:44 [4172,23] [EVContext::Initialise] Hidden settings loaded at 13/04/2018 10:04:42
13/04/2018 10:04:44 [4172,23] [EVContext::IsValidBrowser] Returning: False
13/04/2018 10:04:44 [4172,23] [ImpersonationManager:StopImpersonation] Stopped impersonation
13/04/2018 10:04:44 [4172,23] Request processing finished
13/04/2018 10:04:44 [4172,23] #############################################################
13/04/2018 10:04:44 [4172,23] Request processing started
13/04/2018 10:04:44 [4172,23] Url: https://mail.domainb.com/owa/forms/premium/SubPageEventHandler.aspx?ae=Item&a=Preview&t=IPM.Note&id=RgAAAADIA3gwRBEPRrvFmmpCynIBBwC3qqxLkXm2T51zhWCLd4yUAAAAiAOBAABLx3PVAtJcR7pHEkF0EjCUAAE5MtQ+AAAJ&pf=1&UA=0&canary=TKwsBQg9PUOYZIkEcZYyJeuIVV-VptUIFyx8lqZ5E3Hn4UqiUoPwBORdE0TK29OuBDVjXUJEx8Y.&SP=1&subpage=ReadMessage.ascx
13/04/2018 10:04:44 [4172,23] RawUrl: /owa/?ae=Item&a=Preview&t=IPM.Note&id=RgAAAADIA3gwRBEPRrvFmmpCynIBBwC3qqxLkXm2T51zhWCLd4yUAAAAiAOBAABLx3PVAtJcR7pHEkF0EjCUAAE5MtQ%2bAAAJ&pf=1&UA=0&canary=TKwsBQg9PUOYZIkEcZYyJeuIVV-VptUIFyx8lqZ5E3Hn4UqiUoPwBORdE0TK29OuBDVjXUJEx8Y.&SP=1
13/04/2018 10:04:44 [4172,23] Query String parameters:
13/04/2018 10:04:44 [4172,23]     ae: Item
13/04/2018 10:04:44 [4172,23]     a: Preview
13/04/2018 10:04:44 [4172,23]     t: IPM.Note
13/04/2018 10:04:44 [4172,23]     id: RgAAAADIA3gwRBEPRrvFmmpCynIBBwC3qqxLkXm2T51zhWCLd4yUAAAAiAOBAABLx3PVAtJcR7pHEkF0EjCUAAE5MtQ+AAAJ
13/04/2018 10:04:44 [4172,23]     pf: 1
13/04/2018 10:04:44 [4172,23]     UA: 0
13/04/2018 10:04:44 [4172,23]     canary: TKwsBQg9PUOYZIkEcZYyJeuIVV-VptUIFyx8lqZ5E3Hn4UqiUoPwBORdE0TK29OuBDVjXUJEx8Y.
13/04/2018 10:04:44 [4172,23]     SP: 1
13/04/2018 10:04:44 [4172,23]     subpage: ReadMessage.ascx
13/04/2018 10:04:44 [4172,23] Cookies
13/04/2018 10:04:44 [4172,23]     MstrPgLd1: 1
13/04/2018 10:04:44 [4172,23]     MstrPgLd2: 1
13/04/2018 10:04:44 [4172,23]     OutlookSession: 0c3904e053cb4107810b3b2b671352aa
13/04/2018 10:04:44 [4172,23]     PBack: 0
13/04/2018 10:04:44 [4172,23]     sessionid: 3f0f3d75-7f22-4133-a639-f02cb4b6cede
13/04/2018 10:04:44 [4172,23]     cadata: "2hqi32JS7FcpJRE0wq3bxlH9/5DqUjcsOKleRXok+8gtm1XxzTOpnOH/8Q03MClvG14Z2agqNemnz+9tNnxUXzD/HZEY4ASdBrDf8ra1lQs0="
13/04/2018 10:04:44 [4172,23]     UserContext: TKwsBQg9PUOYZIkEcZYyJeuIVV-VptUIFyx8lqZ5E3Hn4UqiUoPwBORdE0TK29OuBDVjXUJEx8Y.
13/04/2018 10:04:44 [4172,23]     tzid: Romance Standard Time
13/04/2018 10:04:44 [4172,23] Form: 
13/04/2018 10:04:44 [4172,23] OWA Session details
13/04/2018 10:04:44 [4172,23]     User agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko
13/04/2018 10:04:44 [4172,23]     Authentication type: Basic
13/04/2018 10:04:44 [4172,23]     Authenticated user: DomainPRI\user
13/04/2018 10:04:44 [4172,23]     Client IP Address: x.x.x.x
13/04/2018 10:04:44 [4172,23]     Server IP Address: y.y.y.y
13/04/2018 10:04:44 [4172,23]     Host: mail.domainb.com
13/04/2018 10:04:44 [4172,23] Primary SMTP Address: user@domainb.com
13/04/2018 10:04:44 [4172,23] Explicit Logon: False
13/04/2018 10:04:44 [4172,23] Explicit Logon Address: owa
13/04/2018 10:04:44 [4172,23] EV Extensions DLL version: 10.0.4.0
13/04/2018 10:04:44 [4172,23] [ImpersonationManager::StartImpersonation] Entry: Current user: AUTORITE NT\Système
13/04/2018 10:04:44 [4172,23] [ImpersonationManager::StartImpersonation] Entry: Impersonation Level: None
13/04/2018 10:04:44 [4172,23] [ImpersonationManager::StartImpersonation] Impersonating logged on user
13/04/2018 10:04:44 [4172,23] [ImpersonationManager::StartImpersonation] Exit: Current user: DomainPRI\user
13/04/2018 10:04:44 [4172,23] [ImpersonationManager::StartImpersonation] Exit: Impersonation Level: Impersonation
13/04/2018 10:04:44 [4172,23] [EVContext::Initialise] EVContext intialised at 13/04/2018 10:04:42
13/04/2018 10:04:44 [4172,23] [EVContext::Initialise] Hidden settings loaded at 13/04/2018 10:04:42
13/04/2018 10:04:44 [4172,23] [EVContext::IsValidBrowser] Returning: False
13/04/2018 10:04:44 [4172,23] [ImpersonationManager:StopImpersonation] Stopped impersonation
13/04/2018 10:04:44 [4172,23] Request processing finished
13/04/2018 10:04:44 [4172,23] #############################################################
13/04/2018 10:04:44 [4172,23] Request processing started
13/04/2018 10:04:44 [4172,23] Url: https://mail.domainb.com/owa/forms/premium/SubPageEventHandler.aspx?ae=Item&a=Preview&t=IPM.Note&id=RgAAAADIA3gwRBEPRrvFmmpCynIBBwC3qqxLkXm2T51zhWCLd4yUAAAAiAOBAABLx3PVAtJcR7pHEkF0EjCUAAE5MtQ9AAAJ&pf=1&UA=0&canary=TKwsBQg9PUOYZIkEcZYyJeuIVV-VptUIFyx8lqZ5E3Hn4UqiUoPwBORdE0TK29OuBDVjXUJEx8Y.&SP=1&subpage=ReadMessage.ascx
13/04/2018 10:04:44 [4172,23] RawUrl: /owa/?ae=Item&a=Preview&t=IPM.Note&id=RgAAAADIA3gwRBEPRrvFmmpCynIBBwC3qqxLkXm2T51zhWCLd4yUAAAAiAOBAABLx3PVAtJcR7pHEkF0EjCUAAE5MtQ9AAAJ&pf=1&UA=0&canary=TKwsBQg9PUOYZIkEcZYyJeuIVV-VptUIFyx8lqZ5E3Hn4UqiUoPwBORdE0TK29OuBDVjXUJEx8Y.&SP=1
13/04/2018 10:04:44 [4172,23] Query String parameters:
13/04/2018 10:04:44 [4172,23]     ae: Item
13/04/2018 10:04:44 [4172,23]     a: Preview
13/04/2018 10:04:44 [4172,23]     t: IPM.Note
13/04/2018 10:04:44 [4172,23]     id: RgAAAADIA3gwRBEPRrvFmmpCynIBBwC3qqxLkXm2T51zhWCLd4yUAAAAiAOBAABLx3PVAtJcR7pHEkF0EjCUAAE5MtQ9AAAJ
13/04/2018 10:04:44 [4172,23]     pf: 1
13/04/2018 10:04:44 [4172,23]     UA: 0
13/04/2018 10:04:44 [4172,23]     canary: TKwsBQg9PUOYZIkEcZYyJeuIVV-VptUIFyx8lqZ5E3Hn4UqiUoPwBORdE0TK29OuBDVjXUJEx8Y.
13/04/2018 10:04:44 [4172,23]     SP: 1
13/04/2018 10:04:44 [4172,23]     subpage: ReadMessage.ascx
13/04/2018 10:04:44 [4172,23] Cookies
13/04/2018 10:04:44 [4172,23]     MstrPgLd1: 1
13/04/2018 10:04:44 [4172,23]     MstrPgLd2: 1
13/04/2018 10:04:44 [4172,23]     OutlookSession: 0c3904e053cb4107810b3b2b671352aa
13/04/2018 10:04:44 [4172,23]     PBack: 0
13/04/2018 10:04:44 [4172,23]     sessionid: 3f0f3d75-7f22-4133-a639-f02cb4b6cede
13/04/2018 10:04:44 [4172,23]     cadata: "2hqi32JS7FcpJRE0wq3bxlH9/5DqUjcsOKleRXok+8gtm1XxzTOpnOH/8Q03MClvG14Z2agqNemnz+9tNnxUXzD/HZEY4ASdBrDf8ra1lQs0="
13/04/2018 10:04:44 [4172,23]     UserContext: TKwsBQg9PUOYZIkEcZYyJeuIVV-VptUIFyx8lqZ5E3Hn4UqiUoPwBORdE0TK29OuBDVjXUJEx8Y.
13/04/2018 10:04:44 [4172,23]     tzid: Romance Standard Time
13/04/2018 10:04:44 [4172,23] Form: 
13/04/2018 10:04:44 [4172,23] OWA Session details
13/04/2018 10:04:44 [4172,23]     User agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko
13/04/2018 10:04:44 [4172,23]     Authentication type: Basic
13/04/2018 10:04:44 [4172,23]     Authenticated user: DomainPRI\user
13/04/2018 10:04:44 [4172,23]     Client IP Address: x.x.x.x
13/04/2018 10:04:44 [4172,23]     Server IP Address: y.y.y.y
13/04/2018 10:04:44 [4172,23]     Host: mail.domainb.com
13/04/2018 10:04:44 [4172,23] Primary SMTP Address: user@domainb.com
13/04/2018 10:04:44 [4172,23] Explicit Logon: False
13/04/2018 10:04:44 [4172,23] Explicit Logon Address: owa
13/04/2018 10:04:44 [4172,23] EV Extensions DLL version: 10.0.4.0
13/04/2018 10:04:44 [4172,23] [ImpersonationManager::StartImpersonation] Entry: Current user: AUTORITE NT\Système
13/04/2018 10:04:44 [4172,23] [ImpersonationManager::StartImpersonation] Entry: Impersonation Level: None
13/04/2018 10:04:44 [4172,23] [ImpersonationManager::StartImpersonation] Impersonating logged on user
13/04/2018 10:04:44 [4172,23] [ImpersonationManager::StartImpersonation] Exit: Current user: DomainPRI\user
13/04/2018 10:04:44 [4172,23] [ImpersonationManager::StartImpersonation] Exit: Impersonation Level: Impersonation
13/04/2018 10:04:44 [4172,23] [EVContext::Initialise] EVContext intialised at 13/04/2018 10:04:42
13/04/2018 10:04:44 [4172,23] [EVContext::Initialise] Hidden settings loaded at 13/04/2018 10:04:42
13/04/2018 10:04:44 [4172,23] [EVContext::IsValidBrowser] Returning: False
13/04/2018 10:04:44 [4172,23] [ImpersonationManager:StopImpersonation] Stopped impersonation
13/04/2018 10:04:44 [4172,23] Request processing finished
13/04/2018 10:04:44 [4172,23] #############################################################
13/04/2018 10:04:44 [4172,23] Request processing started
13/04/2018 10:04:44 [4172,23] Url: https://mail.domainb.com/owa/forms/premium/SubPageEventHandler.aspx?ae=Item&a=Preview&t=IPM.Note&id=RgAAAADIA3gwRBEPRrvFmmpCynIBBwC3qqxLkXm2T51zhWCLd4yUAAAAiAOBAABLx3PVAtJcR7pHEkF0EjCUAAE5MtQ9AAAJ&pf=1&UA=0&canary=TKwsBQg9PUOYZIkEcZYyJeuIVV-VptUIFyx8lqZ5E3Hn4UqiUoPwBORdE0TK29OuBDVjXUJEx8Y.&SP=1&subpage=ReadMessage.ascx
13/04/2018 10:04:44 [4172,23] RawUrl: /owa/?ae=Item&a=Preview&t=IPM.Note&id=RgAAAADIA3gwRBEPRrvFmmpCynIBBwC3qqxLkXm2T51zhWCLd4yUAAAAiAOBAABLx3PVAtJcR7pHEkF0EjCUAAE5MtQ9AAAJ&pf=1&UA=0&canary=TKwsBQg9PUOYZIkEcZYyJeuIVV-VptUIFyx8lqZ5E3Hn4UqiUoPwBORdE0TK29OuBDVjXUJEx8Y.&SP=1
13/04/2018 10:04:44 [4172,23] Query String parameters:
13/04/2018 10:04:44 [4172,23]     ae: Item
13/04/2018 10:04:44 [4172,23]     a: Preview
13/04/2018 10:04:44 [4172,23]     t: IPM.Note
13/04/2018 10:04:44 [4172,23]     id: RgAAAADIA3gwRBEPRrvFmmpCynIBBwC3qqxLkXm2T51zhWCLd4yUAAAAiAOBAABLx3PVAtJcR7pHEkF0EjCUAAE5MtQ9AAAJ
13/04/2018 10:04:44 [4172,23]     pf: 1
13/04/2018 10:04:44 [4172,23]     UA: 0
13/04/2018 10:04:44 [4172,23]     canary: TKwsBQg9PUOYZIkEcZYyJeuIVV-VptUIFyx8lqZ5E3Hn4UqiUoPwBORdE0TK29OuBDVjXUJEx8Y.
13/04/2018 10:04:44 [4172,23]     SP: 1
13/04/2018 10:04:44 [4172,23]     subpage: ReadMessage.ascx
13/04/2018 10:04:44 [4172,23] Cookies
13/04/2018 10:04:44 [4172,23]     MstrPgLd1: 1
13/04/2018 10:04:44 [4172,23]     MstrPgLd2: 1
13/04/2018 10:04:44 [4172,23]     OutlookSession: 0c3904e053cb4107810b3b2b671352aa
13/04/2018 10:04:44 [4172,23]     PBack: 0
13/04/2018 10:04:44 [4172,23]     sessionid: 3f0f3d75-7f22-4133-a639-f02cb4b6cede
13/04/2018 10:04:44 [4172,23]     cadata: "2hqi32JS7FcpJRE0wq3bxlH9/5DqUjcsOKleRXok+8gtm1XxzTOpnOH/8Q03MClvG14Z2agqNemnz+9tNnxUXzD/HZEY4ASdBrDf8ra1lQs0="
13/04/2018 10:04:44 [4172,23]     UserContext: TKwsBQg9PUOYZIkEcZYyJeuIVV-VptUIFyx8lqZ5E3Hn4UqiUoPwBORdE0TK29OuBDVjXUJEx8Y.
13/04/2018 10:04:44 [4172,23]     tzid: Romance Standard Time
13/04/2018 10:04:44 [4172,23] Form: 
13/04/2018 10:04:44 [4172,23] OWA Session details
13/04/2018 10:04:44 [4172,23]     User agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko
13/04/2018 10:04:44 [4172,23]     Authentication type: Basic
13/04/2018 10:04:44 [4172,23]     Authenticated user: DomainPRI\user
13/04/2018 10:04:44 [4172,23]     Client IP Address: x.x.x.x
13/04/2018 10:04:44 [4172,23]     Server IP Address: y.y.y.y
13/04/2018 10:04:44 [4172,23]     Host: mail.domainb.com
13/04/2018 10:04:44 [4172,23] Primary SMTP Address: user@domainb.com
13/04/2018 10:04:44 [4172,23] Explicit Logon: False
13/04/2018 10:04:44 [4172,23] Explicit Logon Address: owa
13/04/2018 10:04:44 [4172,23] EV Extensions DLL version: 10.0.4.0
13/04/2018 10:04:44 [4172,23] [ImpersonationManager::StartImpersonation] Entry: Current user: AUTORITE NT\Système
13/04/2018 10:04:44 [4172,23] [ImpersonationManager::StartImpersonation] Entry: Impersonation Level: None
13/04/2018 10:04:44 [4172,23] [ImpersonationManager::StartImpersonation] Impersonating logged on user
13/04/2018 10:04:44 [4172,23] [ImpersonationManager::StartImpersonation] Exit: Current user: DomainPRI\user
13/04/2018 10:04:44 [4172,23] [ImpersonationManager::StartImpersonation] Exit: Impersonation Level: Impersonation
13/04/2018 10:04:44 [4172,23] [EVContext::Initialise] EVContext intialised at 13/04/2018 10:04:42
13/04/2018 10:04:44 [4172,23] [EVContext::Initialise] Hidden settings loaded at 13/04/2018 10:04:42
13/04/2018 10:04:44 [4172,23] [EVContext::IsValidBrowser] Returning: False
13/04/2018 10:04:44 [4172,23] [ImpersonationManager:StopImpersonation] Stopped impersonation
13/04/2018 10:04:44 [4172,23] Request processing finished
13/04/2018 10:04:44 [4172,23] #############################################################
13/04/2018 10:04:44 [4172,23] Request processing started
13/04/2018 10:04:44 [4172,23] Url: https://mail.domainb.com/owa/forms/premium/SubPageEventHandler.aspx?ae=Item&a=Preview&t=IPM.Note&id=RgAAAADIA3gwRBEPRrvFmmpCynIBBwC3qqxLkXm2T51zhWCLd4yUAAAAiAOBAABLx3PVAtJcR7pHEkF0EjCUAAE5MtQ7AAAJ&pf=1&UA=0&canary=TKwsBQg9PUOYZIkEcZYyJeuIVV-VptUIFyx8lqZ5E3Hn4UqiUoPwBORdE0TK29OuBDVjXUJEx8Y.&SP=1&subpage=ReadMessage.ascx
13/04/2018 10:04:44 [4172,23] RawUrl: /owa/?ae=Item&a=Preview&t=IPM.Note&id=RgAAAADIA3gwRBEPRrvFmmpCynIBBwC3qqxLkXm2T51zhWCLd4yUAAAAiAOBAABLx3PVAtJcR7pHEkF0EjCUAAE5MtQ7AAAJ&pf=1&UA=0&canary=TKwsBQg9PUOYZIkEcZYyJeuIVV-VptUIFyx8lqZ5E3Hn4UqiUoPwBORdE0TK29OuBDVjXUJEx8Y.&SP=1
13/04/2018 10:04:44 [4172,23] Query String parameters:
13/04/2018 10:04:44 [4172,23]     ae: Item
13/04/2018 10:04:44 [4172,23]     a: Preview
13/04/2018 10:04:44 [4172,23]     t: IPM.Note
13/04/2018 10:04:44 [4172,23]     id: RgAAAADIA3gwRBEPRrvFmmpCynIBBwC3qqxLkXm2T51zhWCLd4yUAAAAiAOBAABLx3PVAtJcR7pHEkF0EjCUAAE5MtQ7AAAJ
13/04/2018 10:04:44 [4172,23]     pf: 1
13/04/2018 10:04:44 [4172,23]     UA: 0
13/04/2018 10:04:44 [4172,23]     canary: TKwsBQg9PUOYZIkEcZYyJeuIVV-VptUIFyx8lqZ5E3Hn4UqiUoPwBORdE0TK29OuBDVjXUJEx8Y.
13/04/2018 10:04:44 [4172,23]     SP: 1
13/04/2018 10:04:44 [4172,23]     subpage: ReadMessage.ascx
13/04/2018 10:04:44 [4172,23] Cookies
13/04/2018 10:04:44 [4172,23]     MstrPgLd1: 1
13/04/2018 10:04:44 [4172,23]     MstrPgLd2: 1
13/04/2018 10:04:44 [4172,23]     OutlookSession: 0c3904e053cb4107810b3b2b671352aa
13/04/2018 10:04:44 [4172,23]     PBack: 0
13/04/2018 10:04:44 [4172,23]     sessionid: 3f0f3d75-7f22-4133-a639-f02cb4b6cede
13/04/2018 10:04:44 [4172,23]     cadata: "2hqi32JS7FcpJRE0wq3bxlH9/5DqUjcsOKleRXok+8gtm1XxzTOpnOH/8Q03MClvG14Z2agqNemnz+9tNnxUXzD/HZEY4ASdBrDf8ra1lQs0="
13/04/2018 10:04:44 [4172,23]     UserContext: TKwsBQg9PUOYZIkEcZYyJeuIVV-VptUIFyx8lqZ5E3Hn4UqiUoPwBORdE0TK29OuBDVjXUJEx8Y.
13/04/2018 10:04:44 [4172,23]     tzid: Romance Standard Time
13/04/2018 10:04:44 [4172,23] Form: 
13/04/2018 10:04:44 [4172,23] OWA Session details
13/04/2018 10:04:44 [4172,23]     User agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko
13/04/2018 10:04:44 [4172,23]     Authentication type: Basic
13/04/2018 10:04:44 [4172,23]     Authenticated user: DomainPRI\user
13/04/2018 10:04:44 [4172,23]     Client IP Address: x.x.x.x
13/04/2018 10:04:44 [4172,23]     Server IP Address: y.y.y.y
13/04/2018 10:04:44 [4172,23]     Host: mail.domainb.com
13/04/2018 10:04:44 [4172,23] Primary SMTP Address: user@domainb.com
13/04/2018 10:04:44 [4172,23] Explicit Logon: False
13/04/2018 10:04:44 [4172,23] Explicit Logon Address: owa
13/04/2018 10:04:44 [4172,23] EV Extensions DLL version: 10.0.4.0
13/04/2018 10:04:44 [4172,23] [ImpersonationManager::StartImpersonation] Entry: Current user: AUTORITE NT\Système
13/04/2018 10:04:44 [4172,23] [ImpersonationManager::StartImpersonation] Entry: Impersonation Level: None
13/04/2018 10:04:44 [4172,23] [ImpersonationManager::StartImpersonation] Impersonating logged on user
13/04/2018 10:04:44 [4172,23] [ImpersonationManager::StartImpersonation] Exit: Current user: DomainPRI\user
13/04/2018 10:04:44 [4172,23] [ImpersonationManager::StartImpersonation] Exit: Impersonation Level: Impersonation
13/04/2018 10:04:44 [4172,23] [EVContext::Initialise] EVContext intialised at 13/04/2018 10:04:42
13/04/2018 10:04:44 [4172,23] [EVContext::Initialise] Hidden settings loaded at 13/04/2018 10:04:42
13/04/2018 10:04:44 [4172,23] [EVContext::IsValidBrowser] Returning: False
13/04/2018 10:04:44 [4172,23] [ImpersonationManager:StopImpersonation] Stopped impersonation
13/04/2018 10:04:44 [4172,23] Request processing finished
13/04/2018 10:04:44 [4172,23] #############################################################
13/04/2018 10:04:44 [4172,23] Request processing started
13/04/2018 10:04:44 [4172,23] Url: https://mail.domainb.com/owa/forms/premium/SubPageEventHandler.aspx?ae=Item&a=Preview&t=IPM.Note&id=RgAAAADIA3gwRBEPRrvFmmpCynIBBwC3qqxLkXm2T51zhWCLd4yUAAAAiAOBAABLx3PVAtJcR7pHEkF0EjCUAAE5MtQ7AAAJ&pf=1&UA=0&canary=TKwsBQg9PUOYZIkEcZYyJeuIVV-VptUIFyx8lqZ5E3Hn4UqiUoPwBORdE0TK29OuBDVjXUJEx8Y.&SP=1&subpage=ReadMessage.ascx
13/04/2018 10:04:44 [4172,23] RawUrl: /owa/?ae=Item&a=Preview&t=IPM.Note&id=RgAAAADIA3gwRBEPRrvFmmpCynIBBwC3qqxLkXm2T51zhWCLd4yUAAAAiAOBAABLx3PVAtJcR7pHEkF0EjCUAAE5MtQ7AAAJ&pf=1&UA=0&canary=TKwsBQg9PUOYZIkEcZYyJeuIVV-VptUIFyx8lqZ5E3Hn4UqiUoPwBORdE0TK29OuBDVjXUJEx8Y.&SP=1
13/04/2018 10:04:44 [4172,23] Query String parameters:
13/04/2018 10:04:44 [4172,23]     ae: Item
13/04/2018 10:04:44 [4172,23]     a: Preview
13/04/2018 10:04:44 [4172,23]     t: IPM.Note
13/04/2018 10:04:44 [4172,23]     id: RgAAAADIA3gwRBEPRrvFmmpCynIBBwC3qqxLkXm2T51zhWCLd4yUAAAAiAOBAABLx3PVAtJcR7pHEkF0EjCUAAE5MtQ7AAAJ
13/04/2018 10:04:44 [4172,23]     pf: 1
13/04/2018 10:04:44 [4172,23]     UA: 0
13/04/2018 10:04:44 [4172,23]     canary: TKwsBQg9PUOYZIkEcZYyJeuIVV-VptUIFyx8lqZ5E3Hn4UqiUoPwBORdE0TK29OuBDVjXUJEx8Y.
13/04/2018 10:04:44 [4172,23]     SP: 1
13/04/2018 10:04:44 [4172,23]     subpage: ReadMessage.ascx
13/04/2018 10:04:44 [4172,23] Cookies
13/04/2018 10:04:44 [4172,23]     MstrPgLd1: 1
13/04/2018 10:04:44 [4172,23]     MstrPgLd2: 1
13/04/2018 10:04:44 [4172,23]     OutlookSession: 0c3904e053cb4107810b3b2b671352aa
13/04/2018 10:04:44 [4172,23]     PBack: 0
13/04/2018 10:04:44 [4172,23]     sessionid: 3f0f3d75-7f22-4133-a639-f02cb4b6cede
13/04/2018 10:04:44 [4172,23]     cadata: "2hqi32JS7FcpJRE0wq3bxlH9/5DqUjcsOKleRXok+8gtm1XxzTOpnOH/8Q03MClvG14Z2agqNemnz+9tNnxUXzD/HZEY4ASdBrDf8ra1lQs0="
13/04/2018 10:04:44 [4172,23]     UserContext: TKwsBQg9PUOYZIkEcZYyJeuIVV-VptUIFyx8lqZ5E3Hn4UqiUoPwBORdE0TK29OuBDVjXUJEx8Y.
13/04/2018 10:04:44 [4172,23]     tzid: Romance Standard Time
13/04/2018 10:04:44 [4172,23] Form: 
13/04/2018 10:04:44 [4172,23] OWA Session details
13/04/2018 10:04:44 [4172,23]     User agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko
13/04/2018 10:04:44 [4172,23]     Authentication type: Basic
13/04/2018 10:04:44 [4172,23]     Authenticated user: DomainPRI\user
13/04/2018 10:04:44 [4172,23]     Client IP Address: x.x.x.x
13/04/2018 10:04:44 [4172,23]     Server IP Address: y.y.y.y
13/04/2018 10:04:44 [4172,23]     Host: mail.domainb.com
13/04/2018 10:04:44 [4172,23] Primary SMTP Address: user@domainb.com
13/04/2018 10:04:44 [4172,23] Explicit Logon: False
13/04/2018 10:04:44 [4172,23] Explicit Logon Address: owa
13/04/2018 10:04:44 [4172,23] EV Extensions DLL version: 10.0.4.0
13/04/2018 10:04:44 [4172,23] [ImpersonationManager::StartImpersonation] Entry: Current user: AUTORITE NT\Système
13/04/2018 10:04:44 [4172,23] [ImpersonationManager::StartImpersonation] Entry: Impersonation Level: None
13/04/2018 10:04:44 [4172,23] [ImpersonationManager::StartImpersonation] Impersonating logged on user
13/04/2018 10:04:44 [4172,23] [ImpersonationManager::StartImpersonation] Exit: Current user: DomainPRI\user
13/04/2018 10:04:44 [4172,23] [ImpersonationManager::StartImpersonation] Exit: Impersonation Level: Impersonation
13/04/2018 10:04:44 [4172,23] [EVContext::Initialise] EVContext intialised at 13/04/2018 10:04:42
13/04/2018 10:04:44 [4172,23] [EVContext::Initialise] Hidden settings loaded at 13/04/2018 10:04:42
13/04/2018 10:04:44 [4172,23] [EVContext::IsValidBrowser] Returning: False
13/04/2018 10:04:44 [4172,23] [ImpersonationManager:StopImpersonation] Stopped impersonation
13/04/2018 10:04:44 [4172,23] Request processing finished
13/04/2018 10:05:01 [4172,23] #############################################################
13/04/2018 10:05:01 [4172,23] Request processing started
13/04/2018 10:05:01 [4172,23] Url: https://mail.domainb.com/owa/ev.owa?UA=0&oeh=1&ns=PendingRequest&ev=PendingNotificationRequest&canary=TKwsBQg9PUOYZIkEcZYyJeuIVV-VptUIFyx8lqZ5E3Hn4UqiUoPwBORdE0TK29OuBDVjXUJEx8Y.
13/04/2018 10:05:01 [4172,23] RawUrl: /owa/ev.owa?UA=0&oeh=1&ns=PendingRequest&ev=PendingNotificationRequest&canary=TKwsBQg9PUOYZIkEcZYyJeuIVV-VptUIFyx8lqZ5E3Hn4UqiUoPwBORdE0TK29OuBDVjXUJEx8Y.
13/04/2018 10:05:01 [4172,23] Query String parameters:
13/04/2018 10:05:01 [4172,23]     UA: 0
13/04/2018 10:05:01 [4172,23]     oeh: 1
13/04/2018 10:05:01 [4172,23]     ns: PendingRequest
13/04/2018 10:05:01 [4172,23]     ev: PendingNotificationRequest
13/04/2018 10:05:01 [4172,23]     canary: TKwsBQg9PUOYZIkEcZYyJeuIVV-VptUIFyx8lqZ5E3Hn4UqiUoPwBORdE0TK29OuBDVjXUJEx8Y.
13/04/2018 10:05:01 [4172,23] Cookies
13/04/2018 10:05:01 [4172,23]     MstrPgLd1: 1
13/04/2018 10:05:01 [4172,23]     MstrPgLd2: 1
13/04/2018 10:05:01 [4172,23]     OutlookSession: 0c3904e053cb4107810b3b2b671352aa
13/04/2018 10:05:01 [4172,23]     PBack: 0
13/04/2018 10:05:01 [4172,23]     sessionid: 3f0f3d75-7f22-4133-a639-f02cb4b6cede
13/04/2018 10:05:01 [4172,23]     cadata: "2hqi32JS7FcpJRE0wq3bxlH9/5DqUjcsOKleRXok+8gtm1XxzTOpnOH/8Q03MClvG14Z2agqNemnz+9tNnxUXzD/HZEY4ASdBrDf8ra1lQs0="
13/04/2018 10:05:01 [4172,23]     UserContext: TKwsBQg9PUOYZIkEcZYyJeuIVV-VptUIFyx8lqZ5E3Hn4UqiUoPwBORdE0TK29OuBDVjXUJEx8Y.
13/04/2018 10:05:01 [4172,23]     tzid: Romance Standard Time
13/04/2018 10:05:01 [4172,23] Form: 
13/04/2018 10:05:01 [4172,23] OWA Session details
13/04/2018 10:05:01 [4172,23]     User agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko
13/04/2018 10:05:01 [4172,23]     Authentication type: Basic
13/04/2018 10:05:01 [4172,23]     Authenticated user: DomainPRI\user
13/04/2018 10:05:01 [4172,23]     Client IP Address: x.x.x.x
13/04/2018 10:05:01 [4172,23]     Server IP Address: y.y.y.y
13/04/2018 10:05:01 [4172,23]     Host: mail.domainb.com
13/04/2018 10:05:01 [4172,23] Primary SMTP Address: user@domainb.com
13/04/2018 10:05:01 [4172,23] Explicit Logon: False
13/04/2018 10:05:01 [4172,23] Explicit Logon Address: owa
13/04/2018 10:05:01 [4172,23] EV Extensions DLL version: 10.0.4.0
13/04/2018 10:05:01 [4172,23] [ImpersonationManager::StartImpersonation] Entry: Current user: AUTORITE NT\Système
13/04/2018 10:05:01 [4172,23] [ImpersonationManager::StartImpersonation] Entry: Impersonation Level: None
13/04/2018 10:05:01 [4172,23] [ImpersonationManager::StartImpersonation] Impersonating logged on user
13/04/2018 10:05:01 [4172,23] [ImpersonationManager::StartImpersonation] Exit: Current user: DomainPRI\user
13/04/2018 10:05:01 [4172,23] [ImpersonationManager::StartImpersonation] Exit: Impersonation Level: Impersonation
13/04/2018 10:05:01 [4172,23] [EVContext::Initialise] EVContext intialised at 13/04/2018 10:04:42
13/04/2018 10:05:01 [4172,23] [EVContext::Initialise] Hidden settings loaded at 13/04/2018 10:04:42
13/04/2018 10:05:01 [4172,23] [EVContext::IsValidBrowser] Returning: False
13/04/2018 10:05:01 [4172,23] [ImpersonationManager:StopImpersonation] Stopped impersonation
13/04/2018 10:05:01 [4172,23] Request processing finished
13/04/2018 10:05:01 [4172,1] #############################################################
13/04/2018 10:05:01 [4172,1] Request processing started
13/04/2018 10:05:01 [4172,1] Url: https://mail.domainb.com/owa/ev.owa?oeh=1&ns=PendingRequest&ev=FinishNotificationRequest&UA=0
13/04/2018 10:05:01 [4172,1] RawUrl: /owa/ev.owa?oeh=1&ns=PendingRequest&ev=FinishNotificationRequest&UA=0
13/04/2018 10:05:01 [4172,1] Query String parameters:
13/04/2018 10:05:01 [4172,1]     oeh: 1
13/04/2018 10:05:01 [4172,1]     ns: PendingRequest
13/04/2018 10:05:01 [4172,1]     ev: FinishNotificationRequest
13/04/2018 10:05:01 [4172,1]     UA: 0
13/04/2018 10:05:01 [4172,1] Cookies
13/04/2018 10:05:01 [4172,1]     MstrPgLd1: 1
13/04/2018 10:05:01 [4172,1]     MstrPgLd2: 1
13/04/2018 10:05:01 [4172,1]     OutlookSession: 0c3904e053cb4107810b3b2b671352aa
13/04/2018 10:05:01 [4172,1]     PBack: 0
13/04/2018 10:05:01 [4172,1]     sessionid: 3f0f3d75-7f22-4133-a639-f02cb4b6cede
13/04/2018 10:05:01 [4172,1]     cadata: "2hqi32JS7FcpJRE0wq3bxlH9/5DqUjcsOKleRXok+8gtm1XxzTOpnOH/8Q03MClvG14Z2agqNemnz+9tNnxUXzD/HZEY4ASdBrDf8ra1lQs0="
13/04/2018 10:05:01 [4172,1]     UserContext: TKwsBQg9PUOYZIkEcZYyJeuIVV-VptUIFyx8lqZ5E3Hn4UqiUoPwBORdE0TK29OuBDVjXUJEx8Y.
13/04/2018 10:05:01 [4172,1]     tzid: Romance Standard Time
13/04/2018 10:05:01 [4172,1] Form: 
13/04/2018 10:05:01 [4172,1] OWA Session details
13/04/2018 10:05:01 [4172,1]     User agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko
13/04/2018 10:05:01 [4172,1]     Authentication type: Basic
13/04/2018 10:05:01 [4172,1]     Authenticated user: DomainPRI\user
13/04/2018 10:05:01 [4172,1]     Client IP Address: x.x.x.x
13/04/2018 10:05:01 [4172,1]     Server IP Address: y.y.y.y
13/04/2018 10:05:01 [4172,1]     Host: mail.domainb.com
13/04/2018 10:05:01 [4172,1] Primary SMTP Address: user@domainb.com
13/04/2018 10:05:01 [4172,1] Explicit Logon: False
13/04/2018 10:05:01 [4172,1] Explicit Logon Address: owa
13/04/2018 10:05:01 [4172,1] EV Extensions DLL version: 10.0.4.0
13/04/2018 10:05:01 [4172,1] [ImpersonationManager::StartImpersonation] Entry: Current user: AUTORITE NT\Système
13/04/2018 10:05:01 [4172,1] [ImpersonationManager::StartImpersonation] Entry: Impersonation Level: None
13/04/2018 10:05:01 [4172,1] [ImpersonationManager::StartImpersonation] Impersonating logged on user
13/04/2018 10:05:01 [4172,1] [ImpersonationManager::StartImpersonation] Exit: Current user: DomainPRI\user
13/04/2018 10:05:01 [4172,1] [ImpersonationManager::StartImpersonation] Exit: Impersonation Level: Impersonation
13/04/2018 10:05:01 [4172,1] [EVContext::Initialise] EVContext intialised at 13/04/2018 10:04:42
13/04/2018 10:05:01 [4172,1] [EVContext::Initialise] Hidden settings loaded at 13/04/2018 10:04:42
13/04/2018 10:05:01 [4172,1] [EVContext::IsValidBrowser] Returning: False
13/04/2018 10:05:01 [4172,1] [ImpersonationManager:StopImpersonation] Stopped impersonation
13/04/2018 10:05:01 [4172,1] Request processing finished
13/04/2018 10:05:01 [4172,1] #############################################################
13/04/2018 10:05:01 [4172,1] Request processing started
13/04/2018 10:05:01 [4172,1] Url: https://mail.domainb.com/owa/ev.owa?oeh=1&ns=PendingRequest&ev=FinishNotificationRequest&UA=0
13/04/2018 10:05:01 [4172,1] RawUrl: /owa/ev.owa?oeh=1&ns=PendingRequest&ev=FinishNotificationRequest&UA=0
13/04/2018 10:05:01 [4172,1] Query String parameters:
13/04/2018 10:05:01 [4172,1]     oeh: 1
13/04/2018 10:05:01 [4172,1]     ns: PendingRequest
13/04/2018 10:05:01 [4172,1]     ev: FinishNotificationRequest
13/04/2018 10:05:01 [4172,1]     UA: 0
13/04/2018 10:05:01 [4172,1] Cookies
13/04/2018 10:05:01 [4172,1]     MstrPgLd1: 1
13/04/2018 10:05:01 [4172,1]     MstrPgLd2: 1
13/04/2018 10:05:01 [4172,1]     OutlookSession: 0c3904e053cb4107810b3b2b671352aa
13/04/2018 10:05:01 [4172,1]     PBack: 0
13/04/2018 10:05:01 [4172,1]     sessionid: 3f0f3d75-7f22-4133-a639-f02cb4b6cede
13/04/2018 10:05:01 [4172,1]     cadata: "2hqi32JS7FcpJRE0wq3bxlH9/5DqUjcsOKleRXok+8gtm1XxzTOpnOH/8Q03MClvG14Z2agqNemnz+9tNnxUXzD/HZEY4ASdBrDf8ra1lQs0="
13/04/2018 10:05:01 [4172,1]     UserContext: TKwsBQg9PUOYZIkEcZYyJeuIVV-VptUIFyx8lqZ5E3Hn4UqiUoPwBORdE0TK29OuBDVjXUJEx8Y.
13/04/2018 10:05:01 [4172,1]     tzid: Romance Standard Time
13/04/2018 10:05:01 [4172,1] Form: 
13/04/2018 10:05:01 [4172,1] OWA Session details
13/04/2018 10:05:01 [4172,1]     User agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko
13/04/2018 10:05:01 [4172,1]     Authentication type: Basic
13/04/2018 10:05:01 [4172,1]     Authenticated user: DomainPRI\user
13/04/2018 10:05:01 [4172,1]     Client IP Address: x.x.x.x
13/04/2018 10:05:01 [4172,1]     Server IP Address: y.y.y.y
13/04/2018 10:05:01 [4172,1]     Host: mail.domainb.com
13/04/2018 10:05:01 [4172,1] Primary SMTP Address: user@domainb.com
13/04/2018 10:05:01 [4172,1] Explicit Logon: False
13/04/2018 10:05:01 [4172,1] Explicit Logon Address: owa
13/04/2018 10:05:01 [4172,1] EV Extensions DLL version: 10.0.4.0
13/04/2018 10:05:01 [4172,1] [ImpersonationManager::StartImpersonation] Entry: Current user: AUTORITE NT\Système
13/04/2018 10:05:01 [4172,1] [ImpersonationManager::StartImpersonation] Entry: Impersonation Level: None
13/04/2018 10:05:01 [4172,1] [ImpersonationManager::StartImpersonation] Impersonating logged on user
13/04/2018 10:05:01 [4172,1] [ImpersonationManager::StartImpersonation] Exit: Current user: DomainPRI\user
13/04/2018 10:05:01 [4172,1] [ImpersonationManager::StartImpersonation] Exit: Impersonation Level: Impersonation
13/04/2018 10:05:01 [4172,1] [EVContext::Initialise] EVContext intialised at 13/04/2018 10:04:42
13/04/2018 10:05:01 [4172,1] [EVContext::Initialise] Hidden settings loaded at 13/04/2018 10:04:42
13/04/2018 10:05:01 [4172,1] [EVContext::IsValidBrowser] Returning: False
13/04/2018 10:05:01 [4172,1] [ImpersonationManager:StopImpersonation] Stopped impersonation
13/04/2018 10:05:01 [4172,1] Request processing finished
13/04/2018 10:05:01 [4172,27] #############################################################
13/04/2018 10:05:01 [4172,27] Request processing started
13/04/2018 10:05:01 [4172,27] Url: https://mail.domainb.com/owa/ev.owa?UA=0&oeh=1&ns=PendingRequest&ev=PendingNotificationRequest&canary=TKwsBQg9PUOYZIkEcZYyJeuIVV-VptUIFyx8lqZ5E3Hn4UqiUoPwBORdE0TK29OuBDVjXUJEx8Y.
13/04/2018 10:05:01 [4172,27] RawUrl: /owa/ev.owa?UA=0&oeh=1&ns=PendingRequest&ev=PendingNotificationRequest&canary=TKwsBQg9PUOYZIkEcZYyJeuIVV-VptUIFyx8lqZ5E3Hn4UqiUoPwBORdE0TK29OuBDVjXUJEx8Y.
13/04/2018 10:05:01 [4172,27] Query String parameters:
13/04/2018 10:05:01 [4172,27]     UA: 0
13/04/2018 10:05:01 [4172,27]     oeh: 1
13/04/2018 10:05:01 [4172,27]     ns: PendingRequest
13/04/2018 10:05:01 [4172,27]     ev: PendingNotificationRequest
13/04/2018 10:05:01 [4172,27]     canary: TKwsBQg9PUOYZIkEcZYyJeuIVV-VptUIFyx8lqZ5E3Hn4UqiUoPwBORdE0TK29OuBDVjXUJEx8Y.
13/04/2018 10:05:01 [4172,27] Cookies
13/04/2018 10:05:01 [4172,27]     MstrPgLd1: 1
13/04/2018 10:05:01 [4172,27]     MstrPgLd2: 1
13/04/2018 10:05:01 [4172,27]     OutlookSession: 0c3904e053cb4107810b3b2b671352aa
13/04/2018 10:05:01 [4172,27]     PBack: 0
13/04/2018 10:05:01 [4172,27]     sessionid: 3f0f3d75-7f22-4133-a639-f02cb4b6cede
13/04/2018 10:05:01 [4172,27]     cadata: "2hqi32JS7FcpJRE0wq3bxlH9/5DqUjcsOKleRXok+8gtm1XxzTOpnOH/8Q03MClvG14Z2agqNemnz+9tNnxUXzD/HZEY4ASdBrDf8ra1lQs0="
13/04/2018 10:05:01 [4172,27]     UserContext: TKwsBQg9PUOYZIkEcZYyJeuIVV-VptUIFyx8lqZ5E3Hn4UqiUoPwBORdE0TK29OuBDVjXUJEx8Y.
13/04/2018 10:05:01 [4172,27]     tzid: Romance Standard Time
13/04/2018 10:05:01 [4172,27] Form: 
13/04/2018 10:05:01 [4172,27] OWA Session details
13/04/2018 10:05:01 [4172,27]     User agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko
13/04/2018 10:05:01 [4172,27]     Authentication type: Basic
13/04/2018 10:05:01 [4172,27]     Authenticated user: DomainPRI\user
13/04/2018 10:05:01 [4172,27]     Client IP Address: x.x.x.x
13/04/2018 10:05:01 [4172,27]     Server IP Address: y.y.y.y
13/04/2018 10:05:01 [4172,27]     Host: mail.domainb.com
13/04/2018 10:05:01 [4172,27] Primary SMTP Address: user@domainb.com
13/04/2018 10:05:01 [4172,27] Explicit Logon: False
13/04/2018 10:05:01 [4172,27] Explicit Logon Address: owa
13/04/2018 10:05:01 [4172,27] EV Extensions DLL version: 10.0.4.0
13/04/2018 10:05:01 [4172,27] [ImpersonationManager::StartImpersonation] Entry: Current user: AUTORITE NT\Système
13/04/2018 10:05:01 [4172,27] [ImpersonationManager::StartImpersonation] Entry: Impersonation Level: None
13/04/2018 10:05:01 [4172,27] [ImpersonationManager::StartImpersonation] Impersonating logged on user
13/04/2018 10:05:01 [4172,27] [ImpersonationManager::StartImpersonation] Exit: Current user: DomainPRI\user
13/04/2018 10:05:01 [4172,27] [ImpersonationManager::StartImpersonation] Exit: Impersonation Level: Impersonation
13/04/2018 10:05:01 [4172,27] [EVContext::Initialise] EVContext intialised at 13/04/2018 10:04:42
13/04/2018 10:05:01 [4172,27] [EVContext::Initialise] Hidden settings loaded at 13/04/2018 10:04:42
13/04/2018 10:05:01 [4172,27] [EVContext::IsValidBrowser] Returning: False
13/04/2018 10:05:01 [4172,27] [ImpersonationManager:StopImpersonation] Stopped impersonation
13/04/2018 10:05:01 [4172,27] Request processing finished
13/04/2018 10:05:13 [4172,88] #############################################################
13/04/2018 10:05:13 [4172,88] Request processing started
13/04/2018 10:05:13 [4172,88] Url: https://mail.domainb.com/owa/ev.owa?oeh=1&ns=Notify&ev=ReminderPoll&UA=0
13/04/2018 10:05:13 [4172,88] RawUrl: /owa/ev.owa?oeh=1&ns=Notify&ev=ReminderPoll&UA=0
13/04/2018 10:05:13 [4172,88] Query String parameters:
13/04/2018 10:05:13 [4172,88]     oeh: 1
13/04/2018 10:05:13 [4172,88]     ns: Notify
13/04/2018 10:05:13 [4172,88]     ev: ReminderPoll
13/04/2018 10:05:13 [4172,88]     UA: 0
13/04/2018 10:05:13 [4172,88] Cookies
13/04/2018 10:05:13 [4172,88]     MstrPgLd1: 1
13/04/2018 10:05:13 [4172,88]     MstrPgLd2: 1
13/04/2018 10:05:13 [4172,88]     OutlookSession: 0c3904e053cb4107810b3b2b671352aa
13/04/2018 10:05:13 [4172,88]     PBack: 0
13/04/2018 10:05:13 [4172,88]     sessionid: 3f0f3d75-7f22-4133-a639-f02cb4b6cede
13/04/2018 10:05:13 [4172,88]     cadata: "2hqi32JS7FcpJRE0wq3bxlH9/5DqUjcsOKleRXok+8gtm1XxzTOpnOH/8Q03MClvG14Z2agqNemnz+9tNnxUXzD/HZEY4ASdBrDf8ra1lQs0="
13/04/2018 10:05:13 [4172,88]     UserContext: TKwsBQg9PUOYZIkEcZYyJeuIVV-VptUIFyx8lqZ5E3Hn4UqiUoPwBORdE0TK29OuBDVjXUJEx8Y.
13/04/2018 10:05:13 [4172,88]     tzid: Romance Standard Time
13/04/2018 10:05:13 [4172,88] Form: 
13/04/2018 10:05:13 [4172,88] OWA Session details
13/04/2018 10:05:13 [4172,88]     User agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko
13/04/2018 10:05:13 [4172,88]     Authentication type: Basic
13/04/2018 10:05:13 [4172,88]     Authenticated user: DomainPRI\user
13/04/2018 10:05:13 [4172,88]     Client IP Address: x.x.x.x
13/04/2018 10:05:13 [4172,88]     Server IP Address: y.y.y.y
13/04/2018 10:05:13 [4172,88]     Host: mail.domainb.com
13/04/2018 10:05:13 [4172,88] Primary SMTP Address: user@domainb.com
13/04/2018 10:05:13 [4172,88] Explicit Logon: False
13/04/2018 10:05:13 [4172,88] Explicit Logon Address: owa
13/04/2018 10:05:13 [4172,88] EV Extensions DLL version: 10.0.4.0
13/04/2018 10:05:13 [4172,88] [ImpersonationManager::StartImpersonation] Entry: Current user: AUTORITE NT\Système
13/04/2018 10:05:13 [4172,88] [ImpersonationManager::StartImpersonation] Entry: Impersonation Level: None
13/04/2018 10:05:13 [4172,88] [ImpersonationManager::StartImpersonation] Impersonating logged on user
13/04/2018 10:05:13 [4172,88] [ImpersonationManager::StartImpersonation] Exit: Current user: DomainPRI\user
13/04/2018 10:05:13 [4172,88] [ImpersonationManager::StartImpersonation] Exit: Impersonation Level: Impersonation
13/04/2018 10:05:13 [4172,88] [EVContext::Initialise] EVContext intialised at 13/04/2018 10:04:42
13/04/2018 10:05:13 [4172,88] [EVContext::Initialise] Hidden settings loaded at 13/04/2018 10:04:42
13/04/2018 10:05:13 [4172,88] [EVContext::IsValidBrowser] Returning: False
13/04/2018 10:05:13 [4172,88] [ImpersonationManager:StopImpersonation] Stopped impersonation
13/04/2018 10:05:13 [4172,88] Request processing finished
13/04/2018 10:05:13 [4172,88] #############################################################
13/04/2018 10:05:13 [4172,88] Request processing started
13/04/2018 10:05:13 [4172,88] Url: https://mail.domainb.com/owa/ev.owa?oeh=1&ns=Notify&ev=ReminderPoll&UA=0
13/04/2018 10:05:13 [4172,88] RawUrl: /owa/ev.owa?oeh=1&ns=Notify&ev=ReminderPoll&UA=0
13/04/2018 10:05:13 [4172,88] Query String parameters:
13/04/2018 10:05:13 [4172,88]     oeh: 1
13/04/2018 10:05:13 [4172,88]     ns: Notify
13/04/2018 10:05:13 [4172,88]     ev: ReminderPoll
13/04/2018 10:05:13 [4172,88]     UA: 0
13/04/2018 10:05:13 [4172,88] Cookies
13/04/2018 10:05:13 [4172,88]     MstrPgLd1: 1
13/04/2018 10:05:13 [4172,88]     MstrPgLd2: 1
13/04/2018 10:05:13 [4172,88]     OutlookSession: 0c3904e053cb4107810b3b2b671352aa
13/04/2018 10:05:13 [4172,88]     PBack: 0
13/04/2018 10:05:13 [4172,88]     sessionid: 3f0f3d75-7f22-4133-a639-f02cb4b6cede
13/04/2018 10:05:13 [4172,88]     cadata: "2hqi32JS7FcpJRE0wq3bxlH9/5DqUjcsOKleRXok+8gtm1XxzTOpnOH/8Q03MClvG14Z2agqNemnz+9tNnxUXzD/HZEY4ASdBrDf8ra1lQs0="
13/04/2018 10:05:13 [4172,88]     UserContext: TKwsBQg9PUOYZIkEcZYyJeuIVV-VptUIFyx8lqZ5E3Hn4UqiUoPwBORdE0TK29OuBDVjXUJEx8Y.
13/04/2018 10:05:13 [4172,88]     tzid: Romance Standard Time
13/04/2018 10:05:13 [4172,88] Form: 
13/04/2018 10:05:13 [4172,88] OWA Session details
13/04/2018 10:05:13 [4172,88]     User agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko
13/04/2018 10:05:13 [4172,88]     Authentication type: Basic
13/04/2018 10:05:13 [4172,88]     Authenticated user: DomainPRI\user
13/04/2018 10:05:13 [4172,88]     Client IP Address: x.x.x.x
13/04/2018 10:05:13 [4172,88]     Server IP Address: y.y.y.y
13/04/2018 10:05:13 [4172,88]     Host: mail.domainb.com
13/04/2018 10:05:13 [4172,88] Primary SMTP Address: user@domainb.com
13/04/2018 10:05:13 [4172,88] Explicit Logon: False
13/04/2018 10:05:13 [4172,88] Explicit Logon Address: owa
13/04/2018 10:05:13 [4172,88] EV Extensions DLL version: 10.0.4.0
13/04/2018 10:05:13 [4172,88] [ImpersonationManager::StartImpersonation] Entry: Current user: AUTORITE NT\Système
13/04/2018 10:05:13 [4172,88] [ImpersonationManager::StartImpersonation] Entry: Impersonation Level: None
13/04/2018 10:05:13 [4172,88] [ImpersonationManager::StartImpersonation] Impersonating logged on user
13/04/2018 10:05:13 [4172,88] [ImpersonationManager::StartImpersonation] Exit: Current user: DomainPRI\user
13/04/2018 10:05:13 [4172,88] [ImpersonationManager::StartImpersonation] Exit: Impersonation Level: Impersonation
13/04/2018 10:05:13 [4172,88] [EVContext::Initialise] EVContext intialised at 13/04/2018 10:04:42
13/04/2018 10:05:13 [4172,88] [EVContext::Initialise] Hidden settings loaded at 13/04/2018 10:04:42
13/04/2018 10:05:13 [4172,88] [EVContext::IsValidBrowser] Returning: False
13/04/2018 10:05:13 [4172,88] [ImpersonationManager:StopImpersonation] Stopped impersonation
13/04/2018 10:05:13 [4172,88] Request processing finished
13/04/2018 10:08:19 [4172,23] #############################################################
13/04/2018 10:08:19 [4172,23] Request processing started
13/04/2018 10:08:19 [4172,23] Url: https://mail.domainb.com/owa/forms/premium/SubPageEventHandler.aspx?ae=Item&a=Preview&t=IPM.Note&id=RgAAAADIA3gwRBEPRrvFmmpCynIBBwC3qqxLkXm2T51zhWCLd4yUAAAAiAOBAABLx3PVAtJcR7pHEkF0EjCUAAE5MtRBAAAJ&pf=1&UA=0&canary=TKwsBQg9PUOYZIkEcZYyJeuIVV-VptUIFyx8lqZ5E3Hn4UqiUoPwBORdE0TK29OuBDVjXUJEx8Y.&SP=1&subpage=ReadMessage.ascx
13/04/2018 10:08:19 [4172,23] RawUrl: /owa/?ae=Item&a=Preview&t=IPM.Note&id=RgAAAADIA3gwRBEPRrvFmmpCynIBBwC3qqxLkXm2T51zhWCLd4yUAAAAiAOBAABLx3PVAtJcR7pHEkF0EjCUAAE5MtRBAAAJ&pf=1&UA=0&canary=TKwsBQg9PUOYZIkEcZYyJeuIVV-VptUIFyx8lqZ5E3Hn4UqiUoPwBORdE0TK29OuBDVjXUJEx8Y.&SP=1
13/04/2018 10:08:19 [4172,23] Query String parameters:
13/04/2018 10:08:19 [4172,23]     ae: Item
13/04/2018 10:08:19 [4172,23]     a: Preview
13/04/2018 10:08:19 [4172,23]     t: IPM.Note
13/04/2018 10:08:19 [4172,23]     id: RgAAAADIA3gwRBEPRrvFmmpCynIBBwC3qqxLkXm2T51zhWCLd4yUAAAAiAOBAABLx3PVAtJcR7pHEkF0EjCUAAE5MtRBAAAJ
13/04/2018 10:08:19 [4172,23]     pf: 1
13/04/2018 10:08:19 [4172,23]     UA: 0
13/04/2018 10:08:19 [4172,23]     canary: TKwsBQg9PUOYZIkEcZYyJeuIVV-VptUIFyx8lqZ5E3Hn4UqiUoPwBORdE0TK29OuBDVjXUJEx8Y.
13/04/2018 10:08:19 [4172,23]     SP: 1
13/04/2018 10:08:19 [4172,23]     subpage: ReadMessage.ascx
13/04/2018 10:08:19 [4172,23] Cookies
13/04/2018 10:08:19 [4172,23]     MstrPgLd1: 1
13/04/2018 10:08:19 [4172,23]     MstrPgLd2: 1
13/04/2018 10:08:19 [4172,23]     OutlookSession: 0c3904e053cb4107810b3b2b671352aa
13/04/2018 10:08:19 [4172,23]     PBack: 0
13/04/2018 10:08:19 [4172,23]     sessionid: 3f0f3d75-7f22-4133-a639-f02cb4b6cede
13/04/2018 10:08:19 [4172,23]     cadata: "2hqi32JS7FcpJRE0wq3bxlH9/5DqUjcsOKleRXok+8gtm1XxzTOpnOH/8Q03MClvG14Z2agqNemnz+9tNnxUXzD/HZEY4ASdBrDf8ra1lQs0="
13/04/2018 10:08:19 [4172,23]     UserContext: TKwsBQg9PUOYZIkEcZYyJeuIVV-VptUIFyx8lqZ5E3Hn4UqiUoPwBORdE0TK29OuBDVjXUJEx8Y.
13/04/2018 10:08:19 [4172,23]     tzid: Romance Standard Time
13/04/2018 10:08:19 [4172,23] Form: 
13/04/2018 10:08:19 [4172,23] OWA Session details
13/04/2018 10:08:19 [4172,23]     User agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko
13/04/2018 10:08:19 [4172,23]     Authentication type: Basic
13/04/2018 10:08:19 [4172,23]     Authenticated user: DomainPRI\user
13/04/2018 10:08:19 [4172,23]     Client IP Address: x.x.x.x
13/04/2018 10:08:19 [4172,23]     Server IP Address: y.y.y.y
13/04/2018 10:08:19 [4172,23]     Host: mail.domainb.com
13/04/2018 10:08:19 [4172,23] Primary SMTP Address: user@domainb.com
13/04/2018 10:08:19 [4172,23] Explicit Logon: False
13/04/2018 10:08:19 [4172,23] Explicit Logon Address: owa
13/04/2018 10:08:19 [4172,23] EV Extensions DLL version: 10.0.4.0
13/04/2018 10:08:19 [4172,23] [ImpersonationManager::StartImpersonation] Entry: Current user: AUTORITE NT\Système
13/04/2018 10:08:19 [4172,23] [ImpersonationManager::StartImpersonation] Entry: Impersonation Level: None
13/04/2018 10:08:19 [4172,23] [ImpersonationManager::StartImpersonation] Impersonating logged on user
13/04/2018 10:08:19 [4172,23] [ImpersonationManager::StartImpersonation] Exit: Current user: DomainPRI\user
13/04/2018 10:08:19 [4172,23] [ImpersonationManager::StartImpersonation] Exit: Impersonation Level: Impersonation
13/04/2018 10:08:19 [4172,23] [EVContext::Initialise] EVContext intialised at 13/04/2018 10:04:42
13/04/2018 10:08:19 [4172,23] [EVContext::Initialise] Hidden settings loaded at 13/04/2018 10:04:42
13/04/2018 10:08:19 [4172,23] [EVContext::IsValidBrowser] Returning: False
13/04/2018 10:08:19 [4172,23] [ImpersonationManager:StopImpersonation] Stopped impersonation
13/04/2018 10:08:19 [4172,23] Request processing finished
13/04/2018 10:08:19 [4172,23] #############################################################
13/04/2018 10:08:19 [4172,23] Request processing started
13/04/2018 10:08:19 [4172,23] Url: https://mail.domainb.com/owa/forms/premium/SubPageEventHandler.aspx?ae=Item&a=Preview&t=IPM.Note&id=RgAAAADIA3gwRBEPRrvFmmpCynIBBwC3qqxLkXm2T51zhWCLd4yUAAAAiAOBAABLx3PVAtJcR7pHEkF0EjCUAAE5MtRBAAAJ&pf=1&UA=0&canary=TKwsBQg9PUOYZIkEcZYyJeuIVV-VptUIFyx8lqZ5E3Hn4UqiUoPwBORdE0TK29OuBDVjXUJEx8Y.&SP=1&subpage=ReadMessage.ascx
13/04/2018 10:08:19 [4172,23] RawUrl: /owa/?ae=Item&a=Preview&t=IPM.Note&id=RgAAAADIA3gwRBEPRrvFmmpCynIBBwC3qqxLkXm2T51zhWCLd4yUAAAAiAOBAABLx3PVAtJcR7pHEkF0EjCUAAE5MtRBAAAJ&pf=1&UA=0&canary=TKwsBQg9PUOYZIkEcZYyJeuIVV-VptUIFyx8lqZ5E3Hn4UqiUoPwBORdE0TK29OuBDVjXUJEx8Y.&SP=1
13/04/2018 10:08:19 [4172,23] Query String parameters:
13/04/2018 10:08:19 [4172,23]     ae: Item
13/04/2018 10:08:19 [4172,23]     a: Preview
13/04/2018 10:08:19 [4172,23]     t: IPM.Note
13/04/2018 10:08:19 [4172,23]     id: RgAAAADIA3gwRBEPRrvFmmpCynIBBwC3qqxLkXm2T51zhWCLd4yUAAAAiAOBAABLx3PVAtJcR7pHEkF0EjCUAAE5MtRBAAAJ
13/04/2018 10:08:19 [4172,23]     pf: 1
13/04/2018 10:08:19 [4172,23]     UA: 0
13/04/2018 10:08:19 [4172,23]     canary: TKwsBQg9PUOYZIkEcZYyJeuIVV-VptUIFyx8lqZ5E3Hn4UqiUoPwBORdE0TK29OuBDVjXUJEx8Y.
13/04/2018 10:08:19 [4172,23]     SP: 1
13/04/2018 10:08:19 [4172,23]     subpage: ReadMessage.ascx
13/04/2018 10:08:19 [4172,23] Cookies
13/04/2018 10:08:19 [4172,23]     MstrPgLd1: 1
13/04/2018 10:08:19 [4172,23]     MstrPgLd2: 1
13/04/2018 10:08:19 [4172,23]     OutlookSession: 0c3904e053cb4107810b3b2b671352aa
13/04/2018 10:08:19 [4172,23]     PBack: 0
13/04/2018 10:08:19 [4172,23]     sessionid: 3f0f3d75-7f22-4133-a639-f02cb4b6cede
13/04/2018 10:08:19 [4172,23]     cadata: "2hqi32JS7FcpJRE0wq3bxlH9/5DqUjcsOKleRXok+8gtm1XxzTOpnOH/8Q03MClvG14Z2agqNemnz+9tNnxUXzD/HZEY4ASdBrDf8ra1lQs0="
13/04/2018 10:08:19 [4172,23]     UserContext: TKwsBQg9PUOYZIkEcZYyJeuIVV-VptUIFyx8lqZ5E3Hn4UqiUoPwBORdE0TK29OuBDVjXUJEx8Y.
13/04/2018 10:08:19 [4172,23]     tzid: Romance Standard Time
13/04/2018 10:08:19 [4172,23] Form: 
13/04/2018 10:08:19 [4172,23] OWA Session details
13/04/2018 10:08:19 [4172,23]     User agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko
13/04/2018 10:08:19 [4172,23]     Authentication type: Basic
13/04/2018 10:08:19 [4172,23]     Authenticated user: DomainPRI\user
13/04/2018 10:08:19 [4172,23]     Client IP Address: x.x.x.x
13/04/2018 10:08:19 [4172,23]     Server IP Address: y.y.y.y
13/04/2018 10:08:19 [4172,23]     Host: mail.domainb.com
13/04/2018 10:08:19 [4172,23] Primary SMTP Address: user@domainb.com
13/04/2018 10:08:19 [4172,23] Explicit Logon: False
13/04/2018 10:08:19 [4172,23] Explicit Logon Address: owa
13/04/2018 10:08:19 [4172,23] EV Extensions DLL version: 10.0.4.0
13/04/2018 10:08:19 [4172,23] [ImpersonationManager::StartImpersonation] Entry: Current user: AUTORITE NT\Système
13/04/2018 10:08:19 [4172,23] [ImpersonationManager::StartImpersonation] Entry: Impersonation Level: None
13/04/2018 10:08:19 [4172,23] [ImpersonationManager::StartImpersonation] Impersonating logged on user
13/04/2018 10:08:19 [4172,23] [ImpersonationManager::StartImpersonation] Exit: Current user: DomainPRI\user
13/04/2018 10:08:19 [4172,23] [ImpersonationManager::StartImpersonation] Exit: Impersonation Level: Impersonation
13/04/2018 10:08:19 [4172,23] [EVContext::Initialise] EVContext intialised at 13/04/2018 10:04:42
13/04/2018 10:08:19 [4172,23] [EVContext::Initialise] Hidden settings loaded at 13/04/2018 10:04:42
13/04/2018 10:08:19 [4172,23] [EVContext::IsValidBrowser] Returning: False
13/04/2018 10:08:19 [4172,23] [ImpersonationManager:StopImpersonation] Stopped impersonation
13/04/2018 10:08:19 [4172,23] Request processing finished
13/04/2018 10:09:23 [4172,88] #############################################################
13/04/2018 10:09:23 [4172,88] Request processing started
13/04/2018 10:09:23 [4172,88] Url: https://mail.domainb.com/owa/attachment.ashx?id=RgAAAADIA3gwRBEPRrvFmmpCynIBBwC3qqxLkXm2T51zhWCLd4yUAAAAiAOBAABLx3PVAtJcR7pHEkF0EjCUAAE5MtQ7AAAJ&attcnt=1&attid0=BAAFAAAA&attcid0=image008.jpg@01D3D309.979CFA10
13/04/2018 10:09:23 [4172,88] RawUrl: /owa/attachment.ashx?id=RgAAAADIA3gwRBEPRrvFmmpCynIBBwC3qqxLkXm2T51zhWCLd4yUAAAAiAOBAABLx3PVAtJcR7pHEkF0EjCUAAE5MtQ7AAAJ&attcnt=1&attid0=BAAFAAAA&attcid0=image008.jpg%4001D3D309.979CFA10
13/04/2018 10:09:23 [4172,88] Query String parameters:
13/04/2018 10:09:23 [4172,88]     id: RgAAAADIA3gwRBEPRrvFmmpCynIBBwC3qqxLkXm2T51zhWCLd4yUAAAAiAOBAABLx3PVAtJcR7pHEkF0EjCUAAE5MtQ7AAAJ
13/04/2018 10:09:23 [4172,88]     attcnt: 1
13/04/2018 10:09:23 [4172,88]     attid0: BAAFAAAA
13/04/2018 10:09:23 [4172,88]     attcid0: image008.jpg@01D3D309.979CFA10
13/04/2018 10:09:23 [4172,88] Cookies
13/04/2018 10:09:23 [4172,88]     MstrPgLd1: 1
13/04/2018 10:09:23 [4172,88]     MstrPgLd2: 1
13/04/2018 10:09:23 [4172,88]     OutlookSession: 0c3904e053cb4107810b3b2b671352aa
13/04/2018 10:09:23 [4172,88]     PBack: 0
13/04/2018 10:09:23 [4172,88]     sessionid: 3f0f3d75-7f22-4133-a639-f02cb4b6cede
13/04/2018 10:09:23 [4172,88]     cadata: "2hqi32JS7FcpJRE0wq3bxlH9/5DqUjcsOKleRXok+8gtm1XxzTOpnOH/8Q03MClvG14Z2agqNemnz+9tNnxUXzD/HZEY4ASdBrDf8ra1lQs0="
13/04/2018 10:09:23 [4172,88]     UserContext: TKwsBQg9PUOYZIkEcZYyJeuIVV-VptUIFyx8lqZ5E3Hn4UqiUoPwBORdE0TK29OuBDVjXUJEx8Y.
13/04/2018 10:09:23 [4172,88]     tzid: Romance Standard Time
13/04/2018 10:09:23 [4172,88] Form: 
13/04/2018 10:09:23 [4172,88] OWA Session details
13/04/2018 10:09:23 [4172,88]     User agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko
13/04/2018 10:09:23 [4172,88]     Authentication type: Basic
13/04/2018 10:09:23 [4172,88]     Authenticated user: DomainPRI\user
13/04/2018 10:09:23 [4172,88]     Client IP Address: x.x.x.x
13/04/2018 10:09:23 [4172,88]     Server IP Address: y.y.y.y
13/04/2018 10:09:23 [4172,88]     Host: mail.domainb.com
13/04/2018 10:09:23 [4172,88] Primary SMTP Address: user@domainb.com
13/04/2018 10:09:23 [4172,88] Explicit Logon: False
13/04/2018 10:09:23 [4172,88] Explicit Logon Address: owa
13/04/2018 10:09:23 [4172,88] EV Extensions DLL version: 10.0.4.0
13/04/2018 10:09:23 [4172,88] [ImpersonationManager::StartImpersonation] Entry: Current user: AUTORITE NT\Système
13/04/2018 10:09:23 [4172,88] [ImpersonationManager::StartImpersonation] Entry: Impersonation Level: None
13/04/2018 10:09:23 [4172,88] [ImpersonationManager::StartImpersonation] Impersonating logged on user
13/04/2018 10:09:23 [4172,88] [ImpersonationManager::StartImpersonation] Exit: Current user: DomainPRI\user
13/04/2018 10:09:23 [4172,88] [ImpersonationManager::StartImpersonation] Exit: Impersonation Level: Impersonation
13/04/2018 10:09:23 [4172,88] [EVContext::Initialise] EVContext intialised at 13/04/2018 10:04:42
13/04/2018 10:09:23 [4172,88] [EVContext::Initialise] Hidden settings loaded at 13/04/2018 10:04:42
13/04/2018 10:09:23 [4172,88] [EVContext::IsValidBrowser] Returning: False
13/04/2018 10:09:23 [4172,88] [ImpersonationManager:StopImpersonation] Stopped impersonation
13/04/2018 10:09:23 [4172,88] Request processing finished
13/04/2018 10:09:23 [4172,88] #############################################################
13/04/2018 10:09:23 [4172,88] Request processing started
13/04/2018 10:09:23 [4172,88] Url: https://mail.domainb.com/owa/attachment.ashx?id=RgAAAADIA3gwRBEPRrvFmmpCynIBBwC3qqxLkXm2T51zhWCLd4yUAAAAiAOBAABLx3PVAtJcR7pHEkF0EjCUAAE5MtQ7AAAJ&attcnt=1&attid0=BAAFAAAA&attcid0=image008.jpg@01D3D309.979CFA10
13/04/2018 10:09:23 [4172,88] RawUrl: /owa/attachment.ashx?id=RgAAAADIA3gwRBEPRrvFmmpCynIBBwC3qqxLkXm2T51zhWCLd4yUAAAAiAOBAABLx3PVAtJcR7pHEkF0EjCUAAE5MtQ7AAAJ&attcnt=1&attid0=BAAFAAAA&attcid0=image008.jpg%4001D3D309.979CFA10
13/04/2018 10:09:23 [4172,88] Query String parameters:
13/04/2018 10:09:23 [4172,88]     id: RgAAAADIA3gwRBEPRrvFmmpCynIBBwC3qqxLkXm2T51zhWCLd4yUAAAAiAOBAABLx3PVAtJcR7pHEkF0EjCUAAE5MtQ7AAAJ
13/04/2018 10:09:23 [4172,88]     attcnt: 1
13/04/2018 10:09:23 [4172,88]     attid0: BAAFAAAA
13/04/2018 10:09:23 [4172,88]     attcid0: image008.jpg@01D3D309.979CFA10
13/04/2018 10:09:23 [4172,88] Cookies
13/04/2018 10:09:23 [4172,88]     MstrPgLd1: 1
13/04/2018 10:09:23 [4172,88]     MstrPgLd2: 1
13/04/2018 10:09:23 [4172,88]     OutlookSession: 0c3904e053cb4107810b3b2b671352aa
13/04/2018 10:09:23 [4172,88]     PBack: 0
13/04/2018 10:09:23 [4172,88]     sessionid: 3f0f3d75-7f22-4133-a639-f02cb4b6cede
13/04/2018 10:09:23 [4172,88]     cadata: "2hqi32JS7FcpJRE0wq3bxlH9/5DqUjcsOKleRXok+8gtm1XxzTOpnOH/8Q03MClvG14Z2agqNemnz+9tNnxUXzD/HZEY4ASdBrDf8ra1lQs0="
13/04/2018 10:09:23 [4172,88]     UserContext: TKwsBQg9PUOYZIkEcZYyJeuIVV-VptUIFyx8lqZ5E3Hn4UqiUoPwBORdE0TK29OuBDVjXUJEx8Y.
13/04/2018 10:09:23 [4172,88]     tzid: Romance Standard Time
13/04/2018 10:09:23 [4172,88] Form: 
13/04/2018 10:09:23 [4172,88] OWA Session details
13/04/2018 10:09:23 [4172,88]     User agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko
13/04/2018 10:09:23 [4172,88]     Authentication type: Basic
13/04/2018 10:09:23 [4172,88]     Authenticated user: DomainPRI\user
13/04/2018 10:09:23 [4172,88]     Client IP Address: x.x.x.x
13/04/2018 10:09:23 [4172,88]     Server IP Address: y.y.y.y
13/04/2018 10:09:23 [4172,88]     Host: mail.domainb.com
13/04/2018 10:09:23 [4172,88] Primary SMTP Address: user@domainb.com
13/04/2018 10:09:23 [4172,88] Explicit Logon: False
13/04/2018 10:09:23 [4172,88] Explicit Logon Address: owa
13/04/2018 10:09:23 [4172,88] EV Extensions DLL version: 10.0.4.0
13/04/2018 10:09:23 [4172,88] [ImpersonationManager::StartImpersonation] Entry: Current user: AUTORITE NT\Système
13/04/2018 10:09:23 [4172,88] [ImpersonationManager::StartImpersonation] Entry: Impersonation Level: None
13/04/2018 10:09:23 [4172,88] [ImpersonationManager::StartImpersonation] Impersonating logged on user
13/04/2018 10:09:23 [4172,88] [ImpersonationManager::StartImpersonation] Exit: Current user: DomainPRI\user
13/04/2018 10:09:23 [4172,88] [ImpersonationManager::StartImpersonation] Exit: Impersonation Level: Impersonation
13/04/2018 10:09:23 [4172,88] [EVContext::Initialise] EVContext intialised at 13/04/2018 10:04:42
13/04/2018 10:09:23 [4172,88] [EVContext::Initialise] Hidden settings loaded at 13/04/2018 10:04:42
13/04/2018 10:09:23 [4172,88] [EVContext::IsValidBrowser] Returning: False
13/04/2018 10:09:23 [4172,88] [ImpersonationManager:StopImpersonation] Stopped impersonation
13/04/2018 10:09:23 [4172,88] Request processing finished
13/04/2018 10:09:23 [4172,154] #############################################################
13/04/2018 10:09:23 [4172,154] Request processing started
13/04/2018 10:09:23 [4172,154] Url: https://mail.domainb.com/owa/attachment.ashx?id=RgAAAADIA3gwRBEPRrvFmmpCynIBBwC3qqxLkXm2T51zhWCLd4yUAAAAiAOBAABLx3PVAtJcR7pHEkF0EjCUAAE5MtQ7AAAJ&attcnt=1&attid0=BAABAAAA&attcid0=image004.jpg@01D3D309.979CFA10
13/04/2018 10:09:23 [4172,154] RawUrl: /owa/attachment.ashx?id=RgAAAADIA3gwRBEPRrvFmmpCynIBBwC3qqxLkXm2T51zhWCLd4yUAAAAiAOBAABLx3PVAtJcR7pHEkF0EjCUAAE5MtQ7AAAJ&attcnt=1&attid0=BAABAAAA&attcid0=image004.jpg%4001D3D309.979CFA10
13/04/2018 10:09:23 [4172,154] Query String parameters:
13/04/2018 10:09:23 [4172,154]     id: RgAAAADIA3gwRBEPRrvFmmpCynIBBwC3qqxLkXm2T51zhWCLd4yUAAAAiAOBAABLx3PVAtJcR7pHEkF0EjCUAAE5MtQ7AAAJ
13/04/2018 10:09:23 [4172,154]     attcnt: 1
13/04/2018 10:09:23 [4172,154]     attid0: BAABAAAA
13/04/2018 10:09:23 [4172,154]     attcid0: image004.jpg@01D3D309.979CFA10
13/04/2018 10:09:23 [4172,154] Cookies
13/04/2018 10:09:23 [4172,154]     MstrPgLd1: 1
13/04/2018 10:09:23 [4172,154]     MstrPgLd2: 1
13/04/2018 10:09:23 [4172,154]     OutlookSession: 0c3904e053cb4107810b3b2b671352aa
13/04/2018 10:09:23 [4172,154]     PBack: 0
13/04/2018 10:09:23 [4172,154]     sessionid: 3f0f3d75-7f22-4133-a639-f02cb4b6cede
13/04/2018 10:09:23 [4172,154]     cadata: "2hqi32JS7FcpJRE0wq3bxlH9/5DqUjcsOKleRXok+8gtm1XxzTOpnOH/8Q03MClvG14Z2agqNemnz+9tNnxUXzD/HZEY4ASdBrDf8ra1lQs0="
13/04/2018 10:09:23 [4172,154]     UserContext: TKwsBQg9PUOYZIkEcZYyJeuIVV-VptUIFyx8lqZ5E3Hn4UqiUoPwBORdE0TK29OuBDVjXUJEx8Y.
13/04/2018 10:09:23 [4172,154]     tzid: Romance Standard Time
13/04/2018 10:09:23 [4172,154] Form: 
13/04/2018 10:09:23 [4172,154] OWA Session details
13/04/2018 10:09:23 [4172,154]     User agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko
13/04/2018 10:09:23 [4172,154]     Authentication type: Basic
13/04/2018 10:09:23 [4172,154]     Authenticated user: DomainPRI\user
13/04/2018 10:09:23 [4172,154]     Client IP Address: x.x.x.x
13/04/2018 10:09:23 [4172,154]     Server IP Address: y.y.y.y
13/04/2018 10:09:23 [4172,154]     Host: mail.domainb.com
13/04/2018 10:09:23 [4172,154] Primary SMTP Address: user@domainb.com
13/04/2018 10:09:23 [4172,154] Explicit Logon: False
13/04/2018 10:09:23 [4172,154] Explicit Logon Address: owa
13/04/2018 10:09:23 [4172,154] EV Extensions DLL version: 10.0.4.0
13/04/2018 10:09:23 [4172,154] [ImpersonationManager::StartImpersonation] Entry: Current user: AUTORITE NT\Système
13/04/2018 10:09:23 [4172,154] [ImpersonationManager::StartImpersonation] Entry: Impersonation Level: None
13/04/2018 10:09:23 [4172,154] [ImpersonationManager::StartImpersonation] Impersonating logged on user
13/04/2018 10:09:23 [4172,154] [ImpersonationManager::StartImpersonation] Exit: Current user: DomainPRI\user
13/04/2018 10:09:23 [4172,154] [ImpersonationManager::StartImpersonation] Exit: Impersonation Level: Impersonation
13/04/2018 10:09:23 [4172,154] [EVContext::Initialise] EVContext intialised at 13/04/2018 10:04:42
13/04/2018 10:09:23 [4172,154] [EVContext::Initialise] Hidden settings loaded at 13/04/2018 10:04:42
13/04/2018 10:09:23 [4172,154] [EVContext::IsValidBrowser] Returning: False
13/04/2018 10:09:23 [4172,154] [ImpersonationManager:StopImpersonation] Stopped impersonation
13/04/2018 10:09:23 [4172,154] Request processing finished
13/04/2018 10:09:23 [4172,154] #############################################################
13/04/2018 10:09:23 [4172,154] Request processing started
13/04/2018 10:09:23 [4172,154] Url: https://mail.domainb.com/owa/attachment.ashx?id=RgAAAADIA3gwRBEPRrvFmmpCynIBBwC3qqxLkXm2T51zhWCLd4yUAAAAiAOBAABLx3PVAtJcR7pHEkF0EjCUAAE5MtQ7AAAJ&attcnt=1&attid0=BAABAAAA&attcid0=image004.jpg@01D3D309.979CFA10
13/04/2018 10:09:23 [4172,154] RawUrl: /owa/attachment.ashx?id=RgAAAADIA3gwRBEPRrvFmmpCynIBBwC3qqxLkXm2T51zhWCLd4yUAAAAiAOBAABLx3PVAtJcR7pHEkF0EjCUAAE5MtQ7AAAJ&attcnt=1&attid0=BAABAAAA&attcid0=image004.jpg%4001D3D309.979CFA10
13/04/2018 10:09:23 [4172,154] Query String parameters:
13/04/2018 10:09:23 [4172,154]     id: RgAAAADIA3gwRBEPRrvFmmpCynIBBwC3qqxLkXm2T51zhWCLd4yUAAAAiAOBAABLx3PVAtJcR7pHEkF0EjCUAAE5MtQ7AAAJ
13/04/2018 10:09:23 [4172,154]     attcnt: 1
13/04/2018 10:09:23 [4172,154]     attid0: BAABAAAA
13/04/2018 10:09:23 [4172,154]     attcid0: image004.jpg@01D3D309.979CFA10
13/04/2018 10:09:23 [4172,154] Cookies
13/04/2018 10:09:23 [4172,154]     MstrPgLd1: 1
13/04/2018 10:09:23 [4172,154]     MstrPgLd2: 1
13/04/2018 10:09:23 [4172,154]     OutlookSession: 0c3904e053cb4107810b3b2b671352aa
13/04/2018 10:09:23 [4172,154]     PBack: 0
13/04/2018 10:09:23 [4172,154]     sessionid: 3f0f3d75-7f22-4133-a639-f02cb4b6cede
13/04/2018 10:09:23 [4172,154]     cadata: "2hqi32JS7FcpJRE0wq3bxlH9/5DqUjcsOKleRXok+8gtm1XxzTOpnOH/8Q03MClvG14Z2agqNemnz+9tNnxUXzD/HZEY4ASdBrDf8ra1lQs0="
13/04/2018 10:09:23 [4172,154]     UserContext: TKwsBQg9PUOYZIkEcZYyJeuIVV-VptUIFyx8lqZ5E3Hn4UqiUoPwBORdE0TK29OuBDVjXUJEx8Y.
13/04/2018 10:09:23 [4172,154]     tzid: Romance Standard Time
13/04/2018 10:09:23 [4172,154] Form: 
13/04/2018 10:09:23 [4172,154] OWA Session details
13/04/2018 10:09:23 [4172,154]     User agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko
13/04/2018 10:09:23 [4172,154]     Authentication type: Basic
13/04/2018 10:09:23 [4172,154]     Authenticated user: DomainPRI\user
13/04/2018 10:09:23 [4172,154]     Client IP Address: x.x.x.x
13/04/2018 10:09:23 [4172,154]     Server IP Address: y.y.y.y
13/04/2018 10:09:23 [4172,154]     Host: mail.domainb.com
13/04/2018 10:09:23 [4172,154] Primary SMTP Address: user@domainb.com
13/04/2018 10:09:23 [4172,154] Explicit Logon: False
13/04/2018 10:09:23 [4172,154] Explicit Logon Address: owa
13/04/2018 10:09:23 [4172,154] EV Extensions DLL version: 10.0.4.0
13/04/2018 10:09:23 [4172,154] [ImpersonationManager::StartImpersonation] Entry: Current user: AUTORITE NT\Système
13/04/2018 10:09:23 [4172,154] [ImpersonationManager::StartImpersonation] Entry: Impersonation Level: None
13/04/2018 10:09:23 [4172,154] [ImpersonationManager::StartImpersonation] Impersonating logged on user
13/04/2018 10:09:23 [4172,154] [ImpersonationManager::StartImpersonation] Exit: Current user: DomainPRI\user
13/04/2018 10:09:23 [4172,154] [ImpersonationManager::StartImpersonation] Exit: Impersonation Level: Impersonation
13/04/2018 10:09:23 [4172,154] [EVContext::Initialise] EVContext intialised at 13/04/2018 10:04:42
13/04/2018 10:09:23 [4172,154] [EVContext::Initialise] Hidden settings loaded at 13/04/2018 10:04:42
13/04/2018 10:09:23 [4172,154] [EVContext::IsValidBrowser] Returning: False
13/04/2018 10:09:23 [4172,154] [ImpersonationManager:StopImpersonation] Stopped impersonation
13/04/2018 10:09:23 [4172,154] Request processing finished
13/04/2018 10:09:23 [4172,23] #############################################################
13/04/2018 10:09:23 [4172,23] Request processing started
13/04/2018 10:09:23 [4172,23] Url: https://mail.domainb.com/owa/attachment.ashx?id=RgAAAADIA3gwRBEPRrvFmmpCynIBBwC3qqxLkXm2T51zhWCLd4yUAAAAiAOBAABLx3PVAtJcR7pHEkF0EjCUAAE5MtQ7AAAJ&attcnt=1&attid0=BAACAAAA&attcid0=image005.png@01D3D309.979CFA10
13/04/2018 10:09:23 [4172,23] RawUrl: /owa/attachment.ashx?id=RgAAAADIA3gwRBEPRrvFmmpCynIBBwC3qqxLkXm2T51zhWCLd4yUAAAAiAOBAABLx3PVAtJcR7pHEkF0EjCUAAE5MtQ7AAAJ&attcnt=1&attid0=BAACAAAA&attcid0=image005.png%4001D3D309.979CFA10
13/04/2018 10:09:23 [4172,23] Query String parameters:
13/04/2018 10:09:23 [4172,23]     id: RgAAAADIA3gwRBEPRrvFmmpCynIBBwC3qqxLkXm2T51zhWCLd4yUAAAAiAOBAABLx3PVAtJcR7pHEkF0EjCUAAE5MtQ7AAAJ
13/04/2018 10:09:23 [4172,23]     attcnt: 1
13/04/2018 10:09:23 [4172,23]     attid0: BAACAAAA
13/04/2018 10:09:23 [4172,23]     attcid0: image005.png@01D3D309.979CFA10
13/04/2018 10:09:23 [4172,23] Cookies
13/04/2018 10:09:23 [4172,23]     MstrPgLd1: 1
13/04/2018 10:09:23 [4172,23]     MstrPgLd2: 1
13/04/2018 10:09:23 [4172,23]     OutlookSession: 0c3904e053cb4107810b3b2b671352aa
13/04/2018 10:09:23 [4172,23]     PBack: 0
13/04/2018 10:09:23 [4172,23]     sessionid: 3f0f3d75-7f22-4133-a639-f02cb4b6cede
13/04/2018 10:09:23 [4172,23]     cadata: "2hqi32JS7FcpJRE0wq3bxlH9/5DqUjcsOKleRXok+8gtm1XxzTOpnOH/8Q03MClvG14Z2agqNemnz+9tNnxUXzD/HZEY4ASdBrDf8ra1lQs0="
13/04/2018 10:09:23 [4172,23]     UserContext: TKwsBQg9PUOYZIkEcZYyJeuIVV-VptUIFyx8lqZ5E3Hn4UqiUoPwBORdE0TK29OuBDVjXUJEx8Y.
13/04/2018 10:09:23 [4172,23]     tzid: Romance Standard Time
13/04/2018 10:09:23 [4172,23] Form: 
13/04/2018 10:09:23 [4172,23] OWA Session details
13/04/2018 10:09:23 [4172,23]     User agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko
13/04/2018 10:09:23 [4172,23]     Authentication type: Basic
13/04/2018 10:09:23 [4172,23]     Authenticated user: DomainPRI\user
13/04/2018 10:09:23 [4172,23]     Client IP Address: x.x.x.x
13/04/2018 10:09:23 [4172,23]     Server IP Address: y.y.y.y
13/04/2018 10:09:23 [4172,23]     Host: mail.domainb.com
13/04/2018 10:09:23 [4172,23] Primary SMTP Address: user@domainb.com
13/04/2018 10:09:23 [4172,23] Explicit Logon: False
13/04/2018 10:09:23 [4172,23] Explicit Logon Address: owa
13/04/2018 10:09:23 [4172,23] EV Extensions DLL version: 10.0.4.0
13/04/2018 10:09:23 [4172,23] [ImpersonationManager::StartImpersonation] Entry: Current user: AUTORITE NT\Système
13/04/2018 10:09:23 [4172,23] [ImpersonationManager::StartImpersonation] Entry: Impersonation Level: None
13/04/2018 10:09:23 [4172,23] [ImpersonationManager::StartImpersonation] Impersonating logged on user
13/04/2018 10:09:23 [4172,23] [ImpersonationManager::StartImpersonation] Exit: Current user: DomainPRI\user
13/04/2018 10:09:23 [4172,23] [ImpersonationManager::StartImpersonation] Exit: Impersonation Level: Impersonation
13/04/2018 10:09:23 [4172,23] [EVContext::Initialise] EVContext intialised at 13/04/2018 10:04:42
13/04/2018 10:09:23 [4172,23] [EVContext::Initialise] Hidden settings loaded at 13/04/2018 10:04:42
13/04/2018 10:09:23 [4172,23] [EVContext::IsValidBrowser] Returning: False
13/04/2018 10:09:23 [4172,23] [ImpersonationManager:StopImpersonation] Stopped impersonation
13/04/2018 10:09:23 [4172,23] Request processing finished
13/04/2018 10:09:23 [4172,23] #############################################################
13/04/2018 10:09:23 [4172,23] Request processing started
13/04/2018 10:09:23 [4172,23] Url: https://mail.domainb.com/owa/attachment.ashx?id=RgAAAADIA3gwRBEPRrvFmmpCynIBBwC3qqxLkXm2T51zhWCLd4yUAAAAiAOBAABLx3PVAtJcR7pHEkF0EjCUAAE5MtQ7AAAJ&attcnt=1&attid0=BAACAAAA&attcid0=image005.png@01D3D309.979CFA10
13/04/2018 10:09:23 [4172,23] RawUrl: /owa/attachment.ashx?id=RgAAAADIA3gwRBEPRrvFmmpCynIBBwC3qqxLkXm2T51zhWCLd4yUAAAAiAOBAABLx3PVAtJcR7pHEkF0EjCUAAE5MtQ7AAAJ&attcnt=1&attid0=BAACAAAA&attcid0=image005.png%4001D3D309.979CFA10
13/04/2018 10:09:23 [4172,23] Query String parameters:
13/04/2018 10:09:23 [4172,23]     id: RgAAAADIA3gwRBEPRrvFmmpCynIBBwC3qqxLkXm2T51zhWCLd4yUAAAAiAOBAABLx3PVAtJcR7pHEkF0EjCUAAE5MtQ7AAAJ
13/04/2018 10:09:23 [4172,23]     attcnt: 1
13/04/2018 10:09:23 [4172,23]     attid0: BAACAAAA
13/04/2018 10:09:23 [4172,23]     attcid0: image005.png@01D3D309.979CFA10
13/04/2018 10:09:23 [4172,23] Cookies
13/04/2018 10:09:23 [4172,23]     MstrPgLd1: 1
13/04/2018 10:09:23 [4172,23]     MstrPgLd2: 1
13/04/2018 10:09:23 [4172,23]     OutlookSession: 0c3904e053cb4107810b3b2b671352aa
13/04/2018 10:09:23 [4172,23]     PBack: 0
13/04/2018 10:09:23 [4172,23]     sessionid: 3f0f3d75-7f22-4133-a639-f02cb4b6cede
13/04/2018 10:09:23 [4172,23]     cadata: "2hqi32JS7FcpJRE0wq3bxlH9/5DqUjcsOKleRXok+8gtm1XxzTOpnOH/8Q03MClvG14Z2agqNemnz+9tNnxUXzD/HZEY4ASdBrDf8ra1lQs0="
13/04/2018 10:09:23 [4172,23]     UserContext: TKwsBQg9PUOYZIkEcZYyJeuIVV-VptUIFyx8lqZ5E3Hn4UqiUoPwBORdE0TK29OuBDVjXUJEx8Y.
13/04/2018 10:09:23 [4172,23]     tzid: Romance Standard Time
13/04/2018 10:09:23 [4172,23] Form: 
13/04/2018 10:09:23 [4172,23] OWA Session details
13/04/2018 10:09:23 [4172,23]     User agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko
13/04/2018 10:09:23 [4172,23]     Authentication type: Basic
13/04/2018 10:09:23 [4172,23]     Authenticated user: DomainPRI\user
13/04/2018 10:09:23 [4172,23]     Client IP Address: x.x.x.x
13/04/2018 10:09:23 [4172,23]     Server IP Address: y.y.y.y
13/04/2018 10:09:23 [4172,23]     Host: mail.domainb.com
13/04/2018 10:09:23 [4172,23] Primary SMTP Address: user@domainb.com
13/04/2018 10:09:23 [4172,23] Explicit Logon: False
13/04/2018 10:09:23 [4172,23] Explicit Logon Address: owa
13/04/2018 10:09:23 [4172,23] EV Extensions DLL version: 10.0.4.0
13/04/2018 10:09:23 [4172,23] [ImpersonationManager::StartImpersonation] Entry: Current user: AUTORITE NT\Système
13/04/2018 10:09:23 [4172,23] [ImpersonationManager::StartImpersonation] Entry: Impersonation Level: None
13/04/2018 10:09:23 [4172,23] [ImpersonationManager::StartImpersonation] Impersonating logged on user
13/04/2018 10:09:23 [4172,23] [ImpersonationManager::StartImpersonation] Exit: Current user: DomainPRI\user
13/04/2018 10:09:23 [4172,23] [ImpersonationManager::StartImpersonation] Exit: Impersonation Level: Impersonation
13/04/2018 10:09:23 [4172,23] [EVContext::Initialise] EVContext intialised at 13/04/2018 10:04:42
13/04/2018 10:09:23 [4172,23] [EVContext::Initialise] Hidden settings loaded at 13/04/2018 10:04:42
13/04/2018 10:09:23 [4172,23] [EVContext::IsValidBrowser] Returning: False
13/04/2018 10:09:23 [4172,23] [ImpersonationManager:StopImpersonation] Stopped impersonation
13/04/2018 10:09:23 [4172,23] Request processing finished
13/04/2018 10:09:23 [4172,1] #############################################################
13/04/2018 10:09:23 [4172,1] Request processing started
13/04/2018 10:09:23 [4172,1] Url: https://mail.domainb.com/owa/attachment.ashx?id=RgAAAADIA3gwRBEPRrvFmmpCynIBBwC3qqxLkXm2T51zhWCLd4yUAAAAiAOBAABLx3PVAtJcR7pHEkF0EjCUAAE5MtQ7AAAJ&attcnt=1&attid0=BAADAAAA&attcid0=image006.png@01D3D309.979CFA10
13/04/2018 10:09:23 [4172,1] RawUrl: /owa/attachment.ashx?id=RgAAAADIA3gwRBEPRrvFmmpCynIBBwC3qqxLkXm2T51zhWCLd4yUAAAAiAOBAABLx3PVAtJcR7pHEkF0EjCUAAE5MtQ7AAAJ&attcnt=1&attid0=BAADAAAA&attcid0=image006.png%4001D3D309.979CFA10
13/04/2018 10:09:23 [4172,1] Query String parameters:
13/04/2018 10:09:23 [4172,1]     id: RgAAAADIA3gwRBEPRrvFmmpCynIBBwC3qqxLkXm2T51zhWCLd4yUAAAAiAOBAABLx3PVAtJcR7pHEkF0EjCUAAE5MtQ7AAAJ
13/04/2018 10:09:23 [4172,1]     attcnt: 1
13/04/2018 10:09:23 [4172,1]     attid0: BAADAAAA
13/04/2018 10:09:23 [4172,1]     attcid0: image006.png@01D3D309.979CFA10
13/04/2018 10:09:23 [4172,1] Cookies
13/04/2018 10:09:23 [4172,1]     MstrPgLd1: 1
13/04/2018 10:09:23 [4172,1]     MstrPgLd2: 1
13/04/2018 10:09:23 [4172,1]     OutlookSession: 0c3904e053cb4107810b3b2b671352aa
13/04/2018 10:09:23 [4172,1]     PBack: 0
13/04/2018 10:09:23 [4172,1]     sessionid: 3f0f3d75-7f22-4133-a639-f02cb4b6cede
13/04/2018 10:09:23 [4172,1]     cadata: "2hqi32JS7FcpJRE0wq3bxlH9/5DqUjcsOKleRXok+8gtm1XxzTOpnOH/8Q03MClvG14Z2agqNemnz+9tNnxUXzD/HZEY4ASdBrDf8ra1lQs0="
13/04/2018 10:09:23 [4172,1]     UserContext: TKwsBQg9PUOYZIkEcZYyJeuIVV-VptUIFyx8lqZ5E3Hn4UqiUoPwBORdE0TK29OuBDVjXUJEx8Y.
13/04/2018 10:09:23 [4172,1]     tzid: Romance Standard Time
13/04/2018 10:09:23 [4172,1] Form: 
13/04/2018 10:09:23 [4172,1] OWA Session details
13/04/2018 10:09:23 [4172,1]     User agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko
13/04/2018 10:09:23 [4172,1]     Authentication type: Basic
13/04/2018 10:09:23 [4172,1]     Authenticated user: DomainPRI\user
13/04/2018 10:09:23 [4172,1]     Client IP Address: x.x.x.x
13/04/2018 10:09:23 [4172,1]     Server IP Address: y.y.y.y
13/04/2018 10:09:23 [4172,1]     Host: mail.domainb.com
13/04/2018 10:09:23 [4172,1] Primary SMTP Address: user@domainb.com
13/04/2018 10:09:23 [4172,1] Explicit Logon: False
13/04/2018 10:09:23 [4172,1] Explicit Logon Address: owa
13/04/2018 10:09:23 [4172,1] EV Extensions DLL version: 10.0.4.0
13/04/2018 10:09:23 [4172,1] [ImpersonationManager::StartImpersonation] Entry: Current user: AUTORITE NT\Système
13/04/2018 10:09:23 [4172,1] [ImpersonationManager::StartImpersonation] Entry: Impersonation Level: None
13/04/2018 10:09:23 [4172,1] [ImpersonationManager::StartImpersonation] Impersonating logged on user
13/04/2018 10:09:23 [4172,1] [ImpersonationManager::StartImpersonation] Exit: Current user: DomainPRI\user
13/04/2018 10:09:23 [4172,1] [ImpersonationManager::StartImpersonation] Exit: Impersonation Level: Impersonation
13/04/2018 10:09:23 [4172,1] [EVContext::Initialise] EVContext intialised at 13/04/2018 10:04:42
13/04/2018 10:09:23 [4172,1] [EVContext::Initialise] Hidden settings loaded at 13/04/2018 10:04:42
13/04/2018 10:09:23 [4172,1] [EVContext::IsValidBrowser] Returning: False
13/04/2018 10:09:23 [4172,1] [ImpersonationManager:StopImpersonation] Stopped impersonation
13/04/2018 10:09:23 [4172,1] Request processing finished
13/04/2018 10:09:23 [4172,1] #############################################################
13/04/2018 10:09:23 [4172,1] Request processing started
13/04/2018 10:09:23 [4172,1] Url: https://mail.domainb.com/owa/attachment.ashx?id=RgAAAADIA3gwRBEPRrvFmmpCynIBBwC3qqxLkXm2T51zhWCLd4yUAAAAiAOBAABLx3PVAtJcR7pHEkF0EjCUAAE5MtQ7AAAJ&attcnt=1&attid0=BAADAAAA&attcid0=image006.png@01D3D309.979CFA10
13/04/2018 10:09:23 [4172,1] RawUrl: /owa/attachment.ashx?id=RgAAAADIA3gwRBEPRrvFmmpCynIBBwC3qqxLkXm2T51zhWCLd4yUAAAAiAOBAABLx3PVAtJcR7pHEkF0EjCUAAE5MtQ7AAAJ&attcnt=1&attid0=BAADAAAA&attcid0=image006.png%4001D3D309.979CFA10
13/04/2018 10:09:23 [4172,1] Query String parameters:
13/04/2018 10:09:23 [4172,1]     id: RgAAAADIA3gwRBEPRrvFmmpCynIBBwC3qqxLkXm2T51zhWCLd4yUAAAAiAOBAABLx3PVAtJcR7pHEkF0EjCUAAE5MtQ7AAAJ
13/04/2018 10:09:23 [4172,1]     attcnt: 1
13/04/2018 10:09:23 [4172,1]     attid0: BAADAAAA
13/04/2018 10:09:23 [4172,1]     attcid0: image006.png@01D3D309.979CFA10
13/04/2018 10:09:23 [4172,1] Cookies
13/04/2018 10:09:23 [4172,1]     MstrPgLd1: 1
13/04/2018 10:09:23 [4172,1]     MstrPgLd2: 1
13/04/2018 10:09:23 [4172,1]     OutlookSession: 0c3904e053cb4107810b3b2b671352aa
13/04/2018 10:09:23 [4172,1]     PBack: 0
13/04/2018 10:09:23 [4172,1]     sessionid: 3f0f3d75-7f22-4133-a639-f02cb4b6cede
13/04/2018 10:09:23 [4172,1]     cadata: "2hqi32JS7FcpJRE0wq3bxlH9/5DqUjcsOKleRXok+8gtm1XxzTOpnOH/8Q03MClvG14Z2agqNemnz+9tNnxUXzD/HZEY4ASdBrDf8ra1lQs0="
13/04/2018 10:09:23 [4172,1]     UserContext: TKwsBQg9PUOYZIkEcZYyJeuIVV-VptUIFyx8lqZ5E3Hn4UqiUoPwBORdE0TK29OuBDVjXUJEx8Y.
13/04/2018 10:09:23 [4172,1]     tzid: Romance Standard Time
13/04/2018 10:09:23 [4172,1] Form: 
13/04/2018 10:09:23 [4172,1] OWA Session details
13/04/2018 10:09:23 [4172,1]     User agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko
13/04/2018 10:09:23 [4172,1]     Authentication type: Basic
13/04/2018 10:09:23 [4172,1]     Authenticated user: DomainPRI\user
13/04/2018 10:09:23 [4172,1]     Client IP Address: x.x.x.x
13/04/2018 10:09:23 [4172,1]     Server IP Address: y.y.y.y
13/04/2018 10:09:23 [4172,1]     Host: mail.domainb.com
13/04/2018 10:09:23 [4172,1] Primary SMTP Address: user@domainb.com
13/04/2018 10:09:23 [4172,1] Explicit Logon: False
13/04/2018 10:09:23 [4172,1] Explicit Logon Address: owa
13/04/2018 10:09:23 [4172,1] EV Extensions DLL version: 10.0.4.0
13/04/2018 10:09:23 [4172,1] [ImpersonationManager::StartImpersonation] Entry: Current user: AUTORITE NT\Système
13/04/2018 10:09:23 [4172,1] [ImpersonationManager::StartImpersonation] Entry: Impersonation Level: None
13/04/2018 10:09:23 [4172,1] [ImpersonationManager::StartImpersonation] Impersonating logged on user
13/04/2018 10:09:23 [4172,1] [ImpersonationManager::StartImpersonation] Exit: Current user: DomainPRI\user
13/04/2018 10:09:23 [4172,1] [ImpersonationManager::StartImpersonation] Exit: Impersonation Level: Impersonation
13/04/2018 10:09:23 [4172,1] [EVContext::Initialise] EVContext intialised at 13/04/2018 10:04:42
13/04/2018 10:09:23 [4172,1] [EVContext::Initialise] Hidden settings loaded at 13/04/2018 10:04:42
13/04/2018 10:09:23 [4172,1] [EVContext::IsValidBrowser] Returning: False
13/04/2018 10:09:23 [4172,1] [ImpersonationManager:StopImpersonation] Stopped impersonation
13/04/2018 10:09:23 [4172,1] Request processing finished
13/04/2018 10:09:23 [4172,27] #############################################################
13/04/2018 10:09:23 [4172,27] Request processing started
13/04/2018 10:09:23 [4172,27] Url: https://mail.domainb.com/owa/attachment.ashx?id=RgAAAADIA3gwRBEPRrvFmmpCynIBBwC3qqxLkXm2T51zhWCLd4yUAAAAiAOBAABLx3PVAtJcR7pHEkF0EjCUAAE5MtQ7AAAJ&attcnt=1&attid0=BAAEAAAA&attcid0=image007.jpg@01D3D309.979CFA10
13/04/2018 10:09:23 [4172,27] RawUrl: /owa/attachment.ashx?id=RgAAAADIA3gwRBEPRrvFmmpCynIBBwC3qqxLkXm2T51zhWCLd4yUAAAAiAOBAABLx3PVAtJcR7pHEkF0EjCUAAE5MtQ7AAAJ&attcnt=1&attid0=BAAEAAAA&attcid0=image007.jpg%4001D3D309.979CFA10
13/04/2018 10:09:23 [4172,27] Query String parameters:
13/04/2018 10:09:23 [4172,27]     id: RgAAAADIA3gwRBEPRrvFmmpCynIBBwC3qqxLkXm2T51zhWCLd4yUAAAAiAOBAABLx3PVAtJcR7pHEkF0EjCUAAE5MtQ7AAAJ
13/04/2018 10:09:23 [4172,27]     attcnt: 1
13/04/2018 10:09:23 [4172,27]     attid0: BAAEAAAA
13/04/2018 10:09:23 [4172,27]     attcid0: image007.jpg@01D3D309.979CFA10
13/04/2018 10:09:23 [4172,27] Cookies
13/04/2018 10:09:23 [4172,27]     MstrPgLd1: 1
13/04/2018 10:09:23 [4172,27]     MstrPgLd2: 1
13/04/2018 10:09:23 [4172,27]     OutlookSession: 0c3904e053cb4107810b3b2b671352aa
13/04/2018 10:09:23 [4172,27]     PBack: 0
13/04/2018 10:09:23 [4172,27]     sessionid: 3f0f3d75-7f22-4133-a639-f02cb4b6cede
13/04/2018 10:09:23 [4172,27]     cadata: "2hqi32JS7FcpJRE0wq3bxlH9/5DqUjcsOKleRXok+8gtm1XxzTOpnOH/8Q03MClvG14Z2agqNemnz+9tNnxUXzD/HZEY4ASdBrDf8ra1lQs0="
13/04/2018 10:09:23 [4172,27]     UserContext: TKwsBQg9PUOYZIkEcZYyJeuIVV-VptUIFyx8lqZ5E3Hn4UqiUoPwBORdE0TK29OuBDVjXUJEx8Y.
13/04/2018 10:09:23 [4172,27]     tzid: Romance Standard Time
13/04/2018 10:09:23 [4172,27] Form: 
13/04/2018 10:09:23 [4172,27] OWA Session details
13/04/2018 10:09:23 [4172,27]     User agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko
13/04/2018 10:09:23 [4172,27]     Authentication type: Basic
13/04/2018 10:09:23 [4172,27]     Authenticated user: DomainPRI\user
13/04/2018 10:09:23 [4172,27]     Client IP Address: x.x.x.x
13/04/2018 10:09:23 [4172,27]     Server IP Address: y.y.y.y
13/04/2018 10:09:23 [4172,27]     Host: mail.domainb.com
13/04/2018 10:09:23 [4172,27] Primary SMTP Address: user@domainb.com
13/04/2018 10:09:23 [4172,27] Explicit Logon: False
13/04/2018 10:09:23 [4172,27] Explicit Logon Address: owa
13/04/2018 10:09:23 [4172,27] EV Extensions DLL version: 10.0.4.0
13/04/2018 10:09:23 [4172,27] [ImpersonationManager::StartImpersonation] Entry: Current user: AUTORITE NT\Système
13/04/2018 10:09:23 [4172,27] [ImpersonationManager::StartImpersonation] Entry: Impersonation Level: None
13/04/2018 10:09:23 [4172,27] [ImpersonationManager::StartImpersonation] Impersonating logged on user
13/04/2018 10:09:23 [4172,27] [ImpersonationManager::StartImpersonation] Exit: Current user: DomainPRI\user
13/04/2018 10:09:23 [4172,27] [ImpersonationManager::StartImpersonation] Exit: Impersonation Level: Impersonation
13/04/2018 10:09:23 [4172,27] [EVContext::Initialise] EVContext intialised at 13/04/2018 10:04:42
13/04/2018 10:09:23 [4172,27] [EVContext::Initialise] Hidden settings loaded at 13/04/2018 10:04:42
13/04/2018 10:09:23 [4172,27] [EVContext::IsValidBrowser] Returning: False
13/04/2018 10:09:23 [4172,27] [ImpersonationManager:StopImpersonation] Stopped impersonation
13/04/2018 10:09:23 [4172,27] Request processing finished
13/04/2018 10:09:23 [4172,27] #############################################################
13/04/2018 10:09:23 [4172,27] Request processing started
13/04/2018 10:09:23 [4172,27] Url: https://mail.domainb.com/owa/attachment.ashx?id=RgAAAADIA3gwRBEPRrvFmmpCynIBBwC3qqxLkXm2T51zhWCLd4yUAAAAiAOBAABLx3PVAtJcR7pHEkF0EjCUAAE5MtQ7AAAJ&attcnt=1&attid0=BAAEAAAA&attcid0=image007.jpg@01D3D309.979CFA10
13/04/2018 10:09:23 [4172,27] RawUrl: /owa/attachment.ashx?id=RgAAAADIA3gwRBEPRrvFmmpCynIBBwC3qqxLkXm2T51zhWCLd4yUAAAAiAOBAABLx3PVAtJcR7pHEkF0EjCUAAE5MtQ7AAAJ&attcnt=1&attid0=BAAEAAAA&attcid0=image007.jpg%4001D3D309.979CFA10
13/04/2018 10:09:23 [4172,27] Query String parameters:
13/04/2018 10:09:23 [4172,27]     id: RgAAAADIA3gwRBEPRrvFmmpCynIBBwC3qqxLkXm2T51zhWCLd4yUAAAAiAOBAABLx3PVAtJcR7pHEkF0EjCUAAE5MtQ7AAAJ
13/04/2018 10:09:23 [4172,27]     attcnt: 1
13/04/2018 10:09:23 [4172,27]     attid0: BAAEAAAA
13/04/2018 10:09:23 [4172,27]     attcid0: image007.jpg@01D3D309.979CFA10
13/04/2018 10:09:23 [4172,27] Cookies
13/04/2018 10:09:23 [4172,27]     MstrPgLd1: 1
13/04/2018 10:09:23 [4172,27]     MstrPgLd2: 1
13/04/2018 10:09:23 [4172,27]     OutlookSession: 0c3904e053cb4107810b3b2b671352aa
13/04/2018 10:09:23 [4172,27]     PBack: 0
13/04/2018 10:09:23 [4172,27]     sessionid: 3f0f3d75-7f22-4133-a639-f02cb4b6cede
13/04/2018 10:09:23 [4172,27]     cadata: "2hqi32JS7FcpJRE0wq3bxlH9/5DqUjcsOKleRXok+8gtm1XxzTOpnOH/8Q03MClvG14Z2agqNemnz+9tNnxUXzD/HZEY4ASdBrDf8ra1lQs0="
13/04/2018 10:09:23 [4172,27]     UserContext: TKwsBQg9PUOYZIkEcZYyJeuIVV-VptUIFyx8lqZ5E3Hn4UqiUoPwBORdE0TK29OuBDVjXUJEx8Y.
13/04/2018 10:09:23 [4172,27]     tzid: Romance Standard Time
13/04/2018 10:09:23 [4172,27] Form: 
13/04/2018 10:09:23 [4172,27] OWA Session details
13/04/2018 10:09:23 [4172,27]     User agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko
13/04/2018 10:09:23 [4172,27]     Authentication type: Basic
13/04/2018 10:09:23 [4172,27]     Authenticated user: DomainPRI\user
13/04/2018 10:09:23 [4172,27]     Client IP Address: x.x.x.x
13/04/2018 10:09:23 [4172,27]     Server IP Address: y.y.y.y
13/04/2018 10:09:23 [4172,27]     Host: mail.domainb.com
13/04/2018 10:09:23 [4172,27] Primary SMTP Address: user@domainb.com
13/04/2018 10:09:23 [4172,27] Explicit Logon: False
13/04/2018 10:09:23 [4172,27] Explicit Logon Address: owa
13/04/2018 10:09:23 [4172,27] EV Extensions DLL version: 10.0.4.0
13/04/2018 10:09:23 [4172,27] [ImpersonationManager::StartImpersonation] Entry: Current user: AUTORITE NT\Système
13/04/2018 10:09:23 [4172,27] [ImpersonationManager::StartImpersonation] Entry: Impersonation Level: None
13/04/2018 10:09:23 [4172,27] [ImpersonationManager::StartImpersonation] Impersonating logged on user
13/04/2018 10:09:23 [4172,27] [ImpersonationManager::StartImpersonation] Exit: Current user: DomainPRI\user
13/04/2018 10:09:23 [4172,27] [ImpersonationManager::StartImpersonation] Exit: Impersonation Level: Impersonation
13/04/2018 10:09:23 [4172,27] [EVContext::Initialise] EVContext intialised at 13/04/2018 10:04:42
13/04/2018 10:09:23 [4172,27] [EVContext::Initialise] Hidden settings loaded at 13/04/2018 10:04:42
13/04/2018 10:09:23 [4172,27] [EVContext::IsValidBrowser] Returning: False
13/04/2018 10:09:23 [4172,27] [ImpersonationManager:StopImpersonation] Stopped impersonation
13/04/2018 10:09:23 [4172,27] Request processing finished
13/04/2018 10:09:23 [4172,88] #############################################################
13/04/2018 10:09:23 [4172,88] Request processing started
13/04/2018 10:09:23 [4172,88] Url: https://mail.domainb.com/owa/attachment.ashx?id=RgAAAADIA3gwRBEPRrvFmmpCynIBBwC3qqxLkXm2T51zhWCLd4yUAAAAiAOBAABLx3PVAtJcR7pHEkF0EjCUAAE5MtQ7AAAJ&attcnt=1&attid0=BAAGAAAA&attcid0=image009.png@01D3D309.979CFA10
13/04/2018 10:09:23 [4172,88] RawUrl: /owa/attachment.ashx?id=RgAAAADIA3gwRBEPRrvFmmpCynIBBwC3qqxLkXm2T51zhWCLd4yUAAAAiAOBAABLx3PVAtJcR7pHEkF0EjCUAAE5MtQ7AAAJ&attcnt=1&attid0=BAAGAAAA&attcid0=image009.png%4001D3D309.979CFA10
13/04/2018 10:09:23 [4172,88] Query String parameters:
13/04/2018 10:09:23 [4172,88]     id: RgAAAADIA3gwRBEPRrvFmmpCynIBBwC3qqxLkXm2T51zhWCLd4yUAAAAiAOBAABLx3PVAtJcR7pHEkF0EjCUAAE5MtQ7AAAJ
13/04/2018 10:09:23 [4172,88]     attcnt: 1
13/04/2018 10:09:23 [4172,88]     attid0: BAAGAAAA
13/04/2018 10:09:23 [4172,88]     attcid0: image009.png@01D3D309.979CFA10
13/04/2018 10:09:23 [4172,88] Cookies
13/04/2018 10:09:23 [4172,88]     MstrPgLd1: 1
13/04/2018 10:09:23 [4172,88]     MstrPgLd2: 1
13/04/2018 10:09:23 [4172,88]     OutlookSession: 0c3904e053cb4107810b3b2b671352aa
13/04/2018 10:09:23 [4172,88]     PBack: 0
13/04/2018 10:09:23 [4172,88]     sessionid: 3f0f3d75-7f22-4133-a639-f02cb4b6cede
13/04/2018 10:09:23 [4172,88]     cadata: "2hqi32JS7FcpJRE0wq3bxlH9/5DqUjcsOKleRXok+8gtm1XxzTOpnOH/8Q03MClvG14Z2agqNemnz+9tNnxUXzD/HZEY4ASdBrDf8ra1lQs0="
13/04/2018 10:09:23 [4172,88]     UserContext: TKwsBQg9PUOYZIkEcZYyJeuIVV-VptUIFyx8lqZ5E3Hn4UqiUoPwBORdE0TK29OuBDVjXUJEx8Y.
13/04/2018 10:09:23 [4172,88]     tzid: Romance Standard Time
13/04/2018 10:09:23 [4172,88] Form: 
13/04/2018 10:09:23 [4172,88] OWA Session details
13/04/2018 10:09:23 [4172,88]     User agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko
13/04/2018 10:09:23 [4172,88]     Authentication type: Basic
13/04/2018 10:09:23 [4172,88]     Authenticated user: DomainPRI\user
13/04/2018 10:09:23 [4172,88]     Client IP Address: x.x.x.x
13/04/2018 10:09:23 [4172,88]     Server IP Address: y.y.y.y
13/04/2018 10:09:23 [4172,88]     Host: mail.domainb.com
13/04/2018 10:09:23 [4172,88] Primary SMTP Address: user@domainb.com
13/04/2018 10:09:23 [4172,88] Explicit Logon: False
13/04/2018 10:09:23 [4172,88] Explicit Logon Address: owa
13/04/2018 10:09:23 [4172,88] EV Extensions DLL version: 10.0.4.0
13/04/2018 10:09:23 [4172,88] [ImpersonationManager::StartImpersonation] Entry: Current user: AUTORITE NT\Système
13/04/2018 10:09:23 [4172,88] [ImpersonationManager::StartImpersonation] Entry: Impersonation Level: None
13/04/2018 10:09:23 [4172,88] [ImpersonationManager::StartImpersonation] Impersonating logged on user
13/04/2018 10:09:23 [4172,88] [ImpersonationManager::StartImpersonation] Exit: Current user: DomainPRI\user
13/04/2018 10:09:23 [4172,88] [ImpersonationManager::StartImpersonation] Exit: Impersonation Level: Impersonation
13/04/2018 10:09:23 [4172,88] [EVContext::Initialise] EVContext intialised at 13/04/2018 10:04:42
13/04/2018 10:09:23 [4172,88] [EVContext::Initialise] Hidden settings loaded at 13/04/2018 10:04:42
13/04/2018 10:09:23 [4172,88] [EVContext::IsValidBrowser] Returning: False
13/04/2018 10:09:23 [4172,88] [ImpersonationManager:StopImpersonation] Stopped impersonation
13/04/2018 10:09:23 [4172,88] Request processing finished
13/04/2018 10:09:23 [4172,88] #############################################################
13/04/2018 10:09:23 [4172,88] Request processing started
13/04/2018 10:09:23 [4172,88] Url: https://mail.domainb.com/owa/attachment.ashx?id=RgAAAADIA3gwRBEPRrvFmmpCynIBBwC3qqxLkXm2T51zhWCLd4yUAAAAiAOBAABLx3PVAtJcR7pHEkF0EjCUAAE5MtQ7AAAJ&attcnt=1&attid0=BAAGAAAA&attcid0=image009.png@01D3D309.979CFA10
13/04/2018 10:09:23 [4172,88] RawUrl: /owa/attachment.ashx?id=RgAAAADIA3gwRBEPRrvFmmpCynIBBwC3qqxLkXm2T51zhWCLd4yUAAAAiAOBAABLx3PVAtJcR7pHEkF0EjCUAAE5MtQ7AAAJ&attcnt=1&attid0=BAAGAAAA&attcid0=image009.png%4001D3D309.979CFA10
13/04/2018 10:09:23 [4172,88] Query String parameters:
13/04/2018 10:09:23 [4172,88]     id: RgAAAADIA3gwRBEPRrvFmmpCynIBBwC3qqxLkXm2T51zhWCLd4yUAAAAiAOBAABLx3PVAtJcR7pHEkF0EjCUAAE5MtQ7AAAJ
13/04/2018 10:09:23 [4172,88]     attcnt: 1
13/04/2018 10:09:23 [4172,88]     attid0: BAAGAAAA
13/04/2018 10:09:23 [4172,88]     attcid0: image009.png@01D3D309.979CFA10
13/04/2018 10:09:23 [4172,88] Cookies
13/04/2018 10:09:23 [4172,88]     MstrPgLd1: 1
13/04/2018 10:09:23 [4172,88]     MstrPgLd2: 1
13/04/2018 10:09:23 [4172,88]     OutlookSession: 0c3904e053cb4107810b3b2b671352aa
13/04/2018 10:09:23 [4172,88]     PBack: 0
13/04/2018 10:09:23 [4172,88]     sessionid: 3f0f3d75-7f22-4133-a639-f02cb4b6cede
13/04/2018 10:09:23 [4172,88]     cadata: "2hqi32JS7FcpJRE0wq3bxlH9/5DqUjcsOKleRXok+8gtm1XxzTOpnOH/8Q03MClvG14Z2agqNemnz+9tNnxUXzD/HZEY4ASdBrDf8ra1lQs0="
13/04/2018 10:09:23 [4172,88]     UserContext: TKwsBQg9PUOYZIkEcZYyJeuIVV-VptUIFyx8lqZ5E3Hn4UqiUoPwBORdE0TK29OuBDVjXUJEx8Y.
13/04/2018 10:09:23 [4172,88]     tzid: Romance Standard Time
13/04/2018 10:09:23 [4172,88] Form: 
13/04/2018 10:09:23 [4172,88] OWA Session details
13/04/2018 10:09:23 [4172,88]     User agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko
13/04/2018 10:09:23 [4172,88]     Authentication type: Basic
13/04/2018 10:09:23 [4172,88]     Authenticated user: DomainPRI\user
13/04/2018 10:09:23 [4172,88]     Client IP Address: x.x.x.x
13/04/2018 10:09:23 [4172,88]     Server IP Address: y.y.y.y
13/04/2018 10:09:23 [4172,88]     Host: mail.domainb.com
13/04/2018 10:09:23 [4172,88] Primary SMTP Address: user@domainb.com
13/04/2018 10:09:23 [4172,88] Explicit Logon: False
13/04/2018 10:09:23 [4172,88] Explicit Logon Address: owa
13/04/2018 10:09:23 [4172,88] EV Extensions DLL version: 10.0.4.0
13/04/2018 10:09:23 [4172,88] [ImpersonationManager::StartImpersonation] Entry: Current user: AUTORITE NT\Système
13/04/2018 10:09:23 [4172,88] [ImpersonationManager::StartImpersonation] Entry: Impersonation Level: None
13/04/2018 10:09:23 [4172,88] [ImpersonationManager::StartImpersonation] Impersonating logged on user
13/04/2018 10:09:23 [4172,88] [ImpersonationManager::StartImpersonation] Exit: Current user: DomainPRI\user
13/04/2018 10:09:23 [4172,88] [ImpersonationManager::StartImpersonation] Exit: Impersonation Level: Impersonation
13/04/2018 10:09:23 [4172,88] [EVContext::Initialise] EVContext intialised at 13/04/2018 10:04:42
13/04/2018 10:09:23 [4172,88] [EVContext::Initialise] Hidden settings loaded at 13/04/2018 10:04:42
13/04/2018 10:09:23 [4172,88] [EVContext::IsValidBrowser] Returning: False
13/04/2018 10:09:23 [4172,88] [ImpersonationManager:StopImpersonation] Stopped impersonation
13/04/2018 10:09:23 [4172,88] Request processing finished
13/04/2018 10:10:03 [4172,88] #############################################################
13/04/2018 10:10:03 [4172,88] Request processing started
13/04/2018 10:10:03 [4172,88] Url: https://mail.domainb.com/owa/ev.owa?oeh=1&ns=PendingRequest&ev=FinishNotificationRequest&UA=0&cpc=787521;C0:1;C1:25581;C2:5;C3:1;C4:4;C5:0;C6:0;C7:0;C8:0;C9:0;C10:0
13/04/2018 10:10:03 [4172,88] RawUrl: /owa/ev.owa?oeh=1&ns=PendingRequest&ev=FinishNotificationRequest&UA=0&cpc=787521;C0:1;C1:25581;C2:5;C3:1;C4:4;C5:0;C6:0;C7:0;C8:0;C9:0;C10:0
13/04/2018 10:10:03 [4172,88] Query String parameters:
13/04/2018 10:10:03 [4172,88]     oeh: 1
13/04/2018 10:10:03 [4172,88]     ns: PendingRequest
13/04/2018 10:10:03 [4172,88]     ev: FinishNotificationRequest
13/04/2018 10:10:03 [4172,88]     UA: 0
13/04/2018 10:10:03 [4172,88]     cpc: 787521;C0:1;C1:25581;C2:5;C3:1;C4:4;C5:0;C6:0;C7:0;C8:0;C9:0;C10:0
13/04/2018 10:10:03 [4172,88] Cookies
13/04/2018 10:10:03 [4172,88]     MstrPgLd1: 1
13/04/2018 10:10:03 [4172,88]     MstrPgLd2: 1
13/04/2018 10:10:03 [4172,88]     OutlookSession: 0c3904e053cb4107810b3b2b671352aa
13/04/2018 10:10:03 [4172,88]     PBack: 0
13/04/2018 10:10:03 [4172,88]     sessionid: 3f0f3d75-7f22-4133-a639-f02cb4b6cede
13/04/2018 10:10:03 [4172,88]     cadata: "2hqi32JS7FcpJRE0wq3bxlH9/5DqUjcsOKleRXok+8gtm1XxzTOpnOH/8Q03MClvG14Z2agqNemnz+9tNnxUXzD/HZEY4ASdBrDf8ra1lQs0="
13/04/2018 10:10:03 [4172,88]     UserContext: TKwsBQg9PUOYZIkEcZYyJeuIVV-VptUIFyx8lqZ5E3Hn4UqiUoPwBORdE0TK29OuBDVjXUJEx8Y.
13/04/2018 10:10:03 [4172,88]     tzid: Romance Standard Time
13/04/2018 10:10:03 [4172,88] Form: 
13/04/2018 10:10:03 [4172,88] OWA Session details
13/04/2018 10:10:03 [4172,88]     User agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko
13/04/2018 10:10:03 [4172,88]     Authentication type: Basic
13/04/2018 10:10:03 [4172,88]     Authenticated user: DomainPRI\user
13/04/2018 10:10:03 [4172,88]     Client IP Address: x.x.x.x
13/04/2018 10:10:03 [4172,88]     Server IP Address: y.y.y.y
13/04/2018 10:10:03 [4172,88]     Host: mail.domainb.com
13/04/2018 10:10:03 [4172,88] Primary SMTP Address: user@domainb.com
13/04/2018 10:10:03 [4172,88] Explicit Logon: False
13/04/2018 10:10:03 [4172,88] Explicit Logon Address: owa
13/04/2018 10:10:03 [4172,88] EV Extensions DLL version: 10.0.4.0
13/04/2018 10:10:03 [4172,88] [ImpersonationManager::StartImpersonation] Entry: Current user: AUTORITE NT\Système
13/04/2018 10:10:03 [4172,88] [ImpersonationManager::StartImpersonation] Entry: Impersonation Level: None
13/04/2018 10:10:03 [4172,88] [ImpersonationManager::StartImpersonation] Impersonating logged on user
13/04/2018 10:10:03 [4172,88] [ImpersonationManager::StartImpersonation] Exit: Current user: DomainPRI\user
13/04/2018 10:10:03 [4172,88] [ImpersonationManager::StartImpersonation] Exit: Impersonation Level: Impersonation
13/04/2018 10:10:03 [4172,88] [EVContext::Initialise] EVContext intialised at 13/04/2018 10:04:42
13/04/2018 10:10:03 [4172,88] [EVContext::Initialise] Hidden settings loaded at 13/04/2018 10:04:42
13/04/2018 10:10:03 [4172,88] [EVContext::IsValidBrowser] Returning: False
13/04/2018 10:10:03 [4172,88] [ImpersonationManager:StopImpersonation] Stopped impersonation
13/04/2018 10:10:03 [4172,88] Request processing finished
13/04/2018 10:10:03 [4172,88] #############################################################
13/04/2018 10:10:03 [4172,88] Request processing started
13/04/2018 10:10:03 [4172,88] Url: https://mail.domainb.com/owa/ev.owa?oeh=1&ns=PendingRequest&ev=FinishNotificationRequest&UA=0&cpc=787521;C0:1;C1:25581;C2:5;C3:1;C4:4;C5:0;C6:0;C7:0;C8:0;C9:0;C10:0
13/04/2018 10:10:03 [4172,88] RawUrl: /owa/ev.owa?oeh=1&ns=PendingRequest&ev=FinishNotificationRequest&UA=0&cpc=787521;C0:1;C1:25581;C2:5;C3:1;C4:4;C5:0;C6:0;C7:0;C8:0;C9:0;C10:0
13/04/2018 10:10:03 [4172,88] Query String parameters:
13/04/2018 10:10:03 [4172,88]     oeh: 1
13/04/2018 10:10:03 [4172,88]     ns: PendingRequest
13/04/2018 10:10:03 [4172,88]     ev: FinishNotificationRequest
13/04/2018 10:10:03 [4172,88]     UA: 0
13/04/2018 10:10:03 [4172,88]     cpc: 787521;C0:1;C1:25581;C2:5;C3:1;C4:4;C5:0;C6:0;C7:0;C8:0;C9:0;C10:0
13/04/2018 10:10:03 [4172,88] Cookies
13/04/2018 10:10:03 [4172,88]     MstrPgLd1: 1
13/04/2018 10:10:03 [4172,88]     MstrPgLd2: 1
13/04/2018 10:10:03 [4172,88]     OutlookSession: 0c3904e053cb4107810b3b2b671352aa
13/04/2018 10:10:03 [4172,88]     PBack: 0
13/04/2018 10:10:03 [4172,88]     sessionid: 3f0f3d75-7f22-4133-a639-f02cb4b6cede
13/04/2018 10:10:03 [4172,88]     cadata: "2hqi32JS7FcpJRE0wq3bxlH9/5DqUjcsOKleRXok+8gtm1XxzTOpnOH/8Q03MClvG14Z2agqNemnz+9tNnxUXzD/HZEY4ASdBrDf8ra1lQs0="
13/04/2018 10:10:03 [4172,88]     UserContext: TKwsBQg9PUOYZIkEcZYyJeuIVV-VptUIFyx8lqZ5E3Hn4UqiUoPwBORdE0TK29OuBDVjXUJEx8Y.
13/04/2018 10:10:03 [4172,88]     tzid: Romance Standard Time
13/04/2018 10:10:03 [4172,88] Form: 
13/04/2018 10:10:03 [4172,88] OWA Session details
13/04/2018 10:10:03 [4172,88]     User agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko
13/04/2018 10:10:03 [4172,88]     Authentication type: Basic
13/04/2018 10:10:03 [4172,88]     Authenticated user: DomainPRI\user
13/04/2018 10:10:03 [4172,88]     Client IP Address: x.x.x.x
13/04/2018 10:10:03 [4172,88]     Server IP Address: y.y.y.y
13/04/2018 10:10:03 [4172,88]     Host: mail.domainb.com
13/04/2018 10:10:03 [4172,88] Primary SMTP Address: user@domainb.com
13/04/2018 10:10:03 [4172,88] Explicit Logon: False
13/04/2018 10:10:03 [4172,88] Explicit Logon Address: owa
13/04/2018 10:10:03 [4172,88] EV Extensions DLL version: 10.0.4.0
13/04/2018 10:10:03 [4172,88] [ImpersonationManager::StartImpersonation] Entry: Current user: AUTORITE NT\Système
13/04/2018 10:10:03 [4172,88] [ImpersonationManager::StartImpersonation] Entry: Impersonation Level: None
13/04/2018 10:10:03 [4172,88] [ImpersonationManager::StartImpersonation] Impersonating logged on user
13/04/2018 10:10:03 [4172,88] [ImpersonationManager::StartImpersonation] Exit: Current user: DomainPRI\user
13/04/2018 10:10:03 [4172,88] [ImpersonationManager::StartImpersonation] Exit: Impersonation Level: Impersonation
13/04/2018 10:10:03 [4172,88] [EVContext::Initialise] EVContext intialised at 13/04/2018 10:04:42
13/04/2018 10:10:03 [4172,88] [EVContext::Initialise] Hidden settings loaded at 13/04/2018 10:04:42
13/04/2018 10:10:03 [4172,88] [EVContext::IsValidBrowser] Returning: False
13/04/2018 10:10:03 [4172,88] [ImpersonationManager:StopImpersonation] Stopped impersonation
13/04/2018 10:10:03 [4172,88] Request processing finished
13/04/2018 10:10:03 [4172,88] #############################################################
13/04/2018 10:10:03 [4172,88] Request processing started
13/04/2018 10:10:03 [4172,88] Url: https://mail.domainb.com/owa/ev.owa?UA=0&oeh=1&ns=PendingRequest&ev=PendingNotificationRequest&canary=TKwsBQg9PUOYZIkEcZYyJeuIVV-VptUIFyx8lqZ5E3Hn4UqiUoPwBORdE0TK29OuBDVjXUJEx8Y.
13/04/2018 10:10:03 [4172,88] RawUrl: /owa/ev.owa?UA=0&oeh=1&ns=PendingRequest&ev=PendingNotificationRequest&canary=TKwsBQg9PUOYZIkEcZYyJeuIVV-VptUIFyx8lqZ5E3Hn4UqiUoPwBORdE0TK29OuBDVjXUJEx8Y.
13/04/2018 10:10:03 [4172,88] Query String parameters:
13/04/2018 10:10:03 [4172,88]     UA: 0
13/04/2018 10:10:03 [4172,88]     oeh: 1
13/04/2018 10:10:03 [4172,88]     ns: PendingRequest
13/04/2018 10:10:03 [4172,88]     ev: PendingNotificationRequest
13/04/2018 10:10:03 [4172,88]     canary: TKwsBQg9PUOYZIkEcZYyJeuIVV-VptUIFyx8lqZ5E3Hn4UqiUoPwBORdE0TK29OuBDVjXUJEx8Y.
13/04/2018 10:10:03 [4172,88] Cookies
13/04/2018 10:10:03 [4172,88]     MstrPgLd1: 1
13/04/2018 10:10:03 [4172,88]     MstrPgLd2: 1
13/04/2018 10:10:03 [4172,88]     OutlookSession: 0c3904e053cb4107810b3b2b671352aa
13/04/2018 10:10:03 [4172,88]     PBack: 0
13/04/2018 10:10:03 [4172,88]     sessionid: 3f0f3d75-7f22-4133-a639-f02cb4b6cede
13/04/2018 10:10:03 [4172,88]     cadata: "2hqi32JS7FcpJRE0wq3bxlH9/5DqUjcsOKleRXok+8gtm1XxzTOpnOH/8Q03MClvG14Z2agqNemnz+9tNnxUXzD/HZEY4ASdBrDf8ra1lQs0="
13/04/2018 10:10:03 [4172,88]     UserContext: TKwsBQg9PUOYZIkEcZYyJeuIVV-VptUIFyx8lqZ5E3Hn4UqiUoPwBORdE0TK29OuBDVjXUJEx8Y.
13/04/2018 10:10:03 [4172,88]     tzid: Romance Standard Time
13/04/2018 10:10:03 [4172,88] Form: 
13/04/2018 10:10:03 [4172,88] OWA Session details
13/04/2018 10:10:03 [4172,88]     User agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko
13/04/2018 10:10:03 [4172,88]     Authentication type: Basic
13/04/2018 10:10:03 [4172,88]     Authenticated user: DomainPRI\user
13/04/2018 10:10:03 [4172,88]     Client IP Address: x.x.x.x
13/04/2018 10:10:03 [4172,88]     Server IP Address: y.y.y.y
13/04/2018 10:10:03 [4172,88]     Host: mail.domainb.com
13/04/2018 10:10:03 [4172,88] Primary SMTP Address: user@domainb.com
13/04/2018 10:10:03 [4172,88] Explicit Logon: False
13/04/2018 10:10:03 [4172,88] Explicit Logon Address: owa
13/04/2018 10:10:03 [4172,88] EV Extensions DLL version: 10.0.4.0
13/04/2018 10:10:03 [4172,88] [ImpersonationManager::StartImpersonation] Entry: Current user: AUTORITE NT\Système
13/04/2018 10:10:03 [4172,88] [ImpersonationManager::StartImpersonation] Entry: Impersonation Level: None
13/04/2018 10:10:03 [4172,88] [ImpersonationManager::StartImpersonation] Impersonating logged on user
13/04/2018 10:10:03 [4172,88] [ImpersonationManager::StartImpersonation] Exit: Current user: DomainPRI\user
13/04/2018 10:10:03 [4172,88] [ImpersonationManager::StartImpersonation] Exit: Impersonation Level: Impersonation
13/04/2018 10:10:03 [4172,88] [EVContext::Initialise] EVContext intialised at 13/04/2018 10:04:42
13/04/2018 10:10:03 [4172,88] [EVContext::Initialise] Hidden settings loaded at 13/04/2018 10:04:42
13/04/2018 10:10:03 [4172,88] [EVContext::IsValidBrowser] Returning: False
13/04/2018 10:10:03 [4172,88] [ImpersonationManager:StopImpersonation] Stopped impersonation
13/04/2018 10:10:03 [4172,88] Request processing finished
13/04/2018 10:15:23 [4172,22] #############################################################
13/04/2018 10:15:23 [4172,22] Request processing started
13/04/2018 10:15:23 [4172,22] Url: https://mail.domainb.com/owa/ev.owa?oeh=1&ns=PendingRequest&ev=FinishNotificationRequest&UA=0&cpc=787521;C0:1;C1:25581;C2:5;C3:1;C4:4;C5:0;C6:0;C7:0;C8:0;C9:0;C10:0
13/04/2018 10:15:23 [4172,22] RawUrl: /owa/ev.owa?oeh=1&ns=PendingRequest&ev=FinishNotificationRequest&UA=0&cpc=787521;C0:1;C1:25581;C2:5;C3:1;C4:4;C5:0;C6:0;C7:0;C8:0;C9:0;C10:0
13/04/2018 10:15:23 [4172,22] Query String parameters:
13/04/2018 10:15:23 [4172,22]     oeh: 1
13/04/2018 10:15:23 [4172,22]     ns: PendingRequest
13/04/2018 10:15:23 [4172,22]     ev: FinishNotificationRequest
13/04/2018 10:15:23 [4172,22]     UA: 0
13/04/2018 10:15:23 [4172,22]     cpc: 787521;C0:1;C1:25581;C2:5;C3:1;C4:4;C5:0;C6:0;C7:0;C8:0;C9:0;C10:0
13/04/2018 10:15:23 [4172,22] Cookies
13/04/2018 10:15:23 [4172,22]     MstrPgLd1: 1
13/04/2018 10:15:23 [4172,22]     MstrPgLd2: 1
13/04/2018 10:15:23 [4172,22]     OutlookSession: 0c3904e053cb4107810b3b2b671352aa
13/04/2018 10:15:23 [4172,22]     PBack: 0
13/04/2018 10:15:23 [4172,22]     sessionid: 3f0f3d75-7f22-4133-a639-f02cb4b6cede
13/04/2018 10:15:23 [4172,22]     cadata: "2hqi32JS7FcpJRE0wq3bxlH9/5DqUjcsOKleRXok+8gtm1XxzTOpnOH/8Q03MClvG14Z2agqNemnz+9tNnxUXzD/HZEY4ASdBrDf8ra1lQs0="
13/04/2018 10:15:23 [4172,22]     UserContext: TKwsBQg9PUOYZIkEcZYyJeuIVV-VptUIFyx8lqZ5E3Hn4UqiUoPwBORdE0TK29OuBDVjXUJEx8Y.
13/04/2018 10:15:23 [4172,22]     tzid: Romance Standard Time
13/04/2018 10:15:23 [4172,22] Form: 
13/04/2018 10:15:23 [4172,22] OWA Session details
13/04/2018 10:15:23 [4172,22]     User agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko
13/04/2018 10:15:23 [4172,22]     Authentication type: Basic
13/04/2018 10:15:23 [4172,22]     Authenticated user: DomainPRI\user
13/04/2018 10:15:23 [4172,22]     Client IP Address: x.x.x.x
13/04/2018 10:15:23 [4172,22]     Server IP Address: y.y.y.y
13/04/2018 10:15:23 [4172,22]     Host: mail.domainb.com
13/04/2018 10:15:23 [4172,22] Primary SMTP Address: user@domainb.com
13/04/2018 10:15:23 [4172,22] Explicit Logon: False
13/04/2018 10:15:23 [4172,22] Explicit Logon Address: owa
13/04/2018 10:15:23 [4172,22] EV Extensions DLL version: 10.0.4.0
13/04/2018 10:15:23 [4172,22] [ImpersonationManager::StartImpersonation] Entry: Current user: AUTORITE NT\Système
13/04/2018 10:15:23 [4172,22] [ImpersonationManager::StartImpersonation] Entry: Impersonation Level: None
13/04/2018 10:15:23 [4172,22] [ImpersonationManager::StartImpersonation] Impersonating logged on user
13/04/2018 10:15:23 [4172,22] [ImpersonationManager::StartImpersonation] Exit: Current user: DomainPRI\user
13/04/2018 10:15:23 [4172,22] [ImpersonationManager::StartImpersonation] Exit: Impersonation Level: Impersonation
13/04/2018 10:15:23 [4172,22] [EVContext::Initialise] EVContext intialised at 13/04/2018 10:04:42
13/04/2018 10:15:23 [4172,22] [EVContext::Initialise] Hidden settings loaded at 13/04/2018 10:04:42
13/04/2018 10:15:23 [4172,22] [EVContext::IsValidBrowser] Returning: False
13/04/2018 10:15:23 [4172,22] [ImpersonationManager:StopImpersonation] Stopped impersonation
13/04/2018 10:15:23 [4172,22] Request processing finished
13/04/2018 10:15:23 [4172,22] #############################################################
13/04/2018 10:15:23 [4172,22] Request processing started
13/04/2018 10:15:23 [4172,22] Url: https://mail.domainb.com/owa/ev.owa?oeh=1&ns=PendingRequest&ev=FinishNotificationRequest&UA=0&cpc=787521;C0:1;C1:25581;C2:5;C3:1;C4:4;C5:0;C6:0;C7:0;C8:0;C9:0;C10:0
13/04/2018 10:15:23 [4172,22] RawUrl: /owa/ev.owa?oeh=1&ns=PendingRequest&ev=FinishNotificationRequest&UA=0&cpc=787521;C0:1;C1:25581;C2:5;C3:1;C4:4;C5:0;C6:0;C7:0;C8:0;C9:0;C10:0
13/04/2018 10:15:23 [4172,22] Query String parameters:
13/04/2018 10:15:23 [4172,22]     oeh: 1
13/04/2018 10:15:23 [4172,22]     ns: PendingRequest
13/04/2018 10:15:23 [4172,22]     ev: FinishNotificationRequest
13/04/2018 10:15:23 [4172,22]     UA: 0
13/04/2018 10:15:23 [4172,22]     cpc: 787521;C0:1;C1:25581;C2:5;C3:1;C4:4;C5:0;C6:0;C7:0;C8:0;C9:0;C10:0
13/04/2018 10:15:23 [4172,22] Cookies
13/04/2018 10:15:23 [4172,22]     MstrPgLd1: 1
13/04/2018 10:15:23 [4172,22]     MstrPgLd2: 1
13/04/2018 10:15:23 [4172,22]     OutlookSession: 0c3904e053cb4107810b3b2b671352aa
13/04/2018 10:15:23 [4172,22]     PBack: 0
13/04/2018 10:15:23 [4172,22]     sessionid: 3f0f3d75-7f22-4133-a639-f02cb4b6cede
13/04/2018 10:15:23 [4172,22]     cadata: "2hqi32JS7FcpJRE0wq3bxlH9/5DqUjcsOKleRXok+8gtm1XxzTOpnOH/8Q03MClvG14Z2agqNemnz+9tNnxUXzD/HZEY4ASdBrDf8ra1lQs0="
13/04/2018 10:15:23 [4172,22]     UserContext: TKwsBQg9PUOYZIkEcZYyJeuIVV-VptUIFyx8lqZ5E3Hn4UqiUoPwBORdE0TK29OuBDVjXUJEx8Y.
13/04/2018 10:15:23 [4172,22]     tzid: Romance Standard Time
13/04/2018 10:15:23 [4172,22] Form: 
13/04/2018 10:15:23 [4172,22] OWA Session details
13/04/2018 10:15:23 [4172,22]     User agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko
13/04/2018 10:15:23 [4172,22]     Authentication type: Basic
13/04/2018 10:15:23 [4172,22]     Authenticated user: DomainPRI\user
13/04/2018 10:15:23 [4172,22]     Client IP Address: x.x.x.x
13/04/2018 10:15:23 [4172,22]     Server IP Address: y.y.y.y
13/04/2018 10:15:23 [4172,22]     Host: mail.domainb.com
13/04/2018 10:15:23 [4172,22] Primary SMTP Address: user@domainb.com
13/04/2018 10:15:23 [4172,22] Explicit Logon: False
13/04/2018 10:15:23 [4172,22] Explicit Logon Address: owa
13/04/2018 10:15:23 [4172,22] EV Extensions DLL version: 10.0.4.0
13/04/2018 10:15:23 [4172,22] [ImpersonationManager::StartImpersonation] Entry: Current user: AUTORITE NT\Système
13/04/2018 10:15:23 [4172,22] [ImpersonationManager::StartImpersonation] Entry: Impersonation Level: None
13/04/2018 10:15:23 [4172,22] [ImpersonationManager::StartImpersonation] Impersonating logged on user
13/04/2018 10:15:23 [4172,22] [ImpersonationManager::StartImpersonation] Exit: Current user: DomainPRI\user
13/04/2018 10:15:23 [4172,22] [ImpersonationManager::StartImpersonation] Exit: Impersonation Level: Impersonation
13/04/2018 10:15:23 [4172,22] [EVContext::Initialise] EVContext intialised at 13/04/2018 10:04:42
13/04/2018 10:15:23 [4172,22] [EVContext::Initialise] Hidden settings loaded at 13/04/2018 10:04:42
13/04/2018 10:15:23 [4172,22] [EVContext::IsValidBrowser] Returning: False
13/04/2018 10:15:23 [4172,22] [ImpersonationManager:StopImpersonation] Stopped impersonation
13/04/2018 10:15:23 [4172,22] Request processing finished
13/04/2018 10:15:23 [4172,23] #############################################################
13/04/2018 10:15:23 [4172,23] Request processing started
13/04/2018 10:15:23 [4172,23] Url: https://mail.domainb.com/owa/ev.owa?UA=0&oeh=1&ns=PendingRequest&ev=PendingNotificationRequest&canary=TKwsBQg9PUOYZIkEcZYyJeuIVV-VptUIFyx8lqZ5E3Hn4UqiUoPwBORdE0TK29OuBDVjXUJEx8Y.
13/04/2018 10:15:23 [4172,23] RawUrl: /owa/ev.owa?UA=0&oeh=1&ns=PendingRequest&ev=PendingNotificationRequest&canary=TKwsBQg9PUOYZIkEcZYyJeuIVV-VptUIFyx8lqZ5E3Hn4UqiUoPwBORdE0TK29OuBDVjXUJEx8Y.
13/04/2018 10:15:23 [4172,23] Query String parameters:
13/04/2018 10:15:23 [4172,23]     UA: 0
13/04/2018 10:15:23 [4172,23]     oeh: 1
13/04/2018 10:15:23 [4172,23]     ns: PendingRequest
13/04/2018 10:15:23 [4172,23]     ev: PendingNotificationRequest
13/04/2018 10:15:23 [4172,23]     canary: TKwsBQg9PUOYZIkEcZYyJeuIVV-VptUIFyx8lqZ5E3Hn4UqiUoPwBORdE0TK29OuBDVjXUJEx8Y.
13/04/2018 10:15:23 [4172,23] Cookies
13/04/2018 10:15:23 [4172,23]     MstrPgLd1: 1
13/04/2018 10:15:23 [4172,23]     MstrPgLd2: 1
13/04/2018 10:15:23 [4172,23]     OutlookSession: 0c3904e053cb4107810b3b2b671352aa
13/04/2018 10:15:23 [4172,23]     PBack: 0
13/04/2018 10:15:23 [4172,23]     sessionid: 3f0f3d75-7f22-4133-a639-f02cb4b6cede
13/04/2018 10:15:23 [4172,23]     cadata: "2hqi32JS7FcpJRE0wq3bxlH9/5DqUjcsOKleRXok+8gtm1XxzTOpnOH/8Q03MClvG14Z2agqNemnz+9tNnxUXzD/HZEY4ASdBrDf8ra1lQs0="
13/04/2018 10:15:23 [4172,23]     UserContext: TKwsBQg9PUOYZIkEcZYyJeuIVV-VptUIFyx8lqZ5E3Hn4UqiUoPwBORdE0TK29OuBDVjXUJEx8Y.
13/04/2018 10:15:23 [4172,23]     tzid: Romance Standard Time
13/04/2018 10:15:23 [4172,23] Form: 
13/04/2018 10:15:23 [4172,23] OWA Session details
13/04/2018 10:15:23 [4172,23]     User agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko
13/04/2018 10:15:23 [4172,23]     Authentication type: Basic
13/04/2018 10:15:23 [4172,23]     Authenticated user: DomainPRI\user
13/04/2018 10:15:23 [4172,23]     Client IP Address: x.x.x.x
13/04/2018 10:15:23 [4172,23]     Server IP Address: y.y.y.y
13/04/2018 10:15:23 [4172,23]     Host: mail.domainb.com
13/04/2018 10:15:23 [4172,23] Primary SMTP Address: user@domainb.com
13/04/2018 10:15:23 [4172,23] Explicit Logon: False
13/04/2018 10:15:23 [4172,23] Explicit Logon Address: owa
13/04/2018 10:15:23 [4172,23] EV Extensions DLL version: 10.0.4.0
13/04/2018 10:15:23 [4172,23] [ImpersonationManager::StartImpersonation] Entry: Current user: AUTORITE NT\Système
13/04/2018 10:15:23 [4172,23] [ImpersonationManager::StartImpersonation] Entry: Impersonation Level: None
13/04/2018 10:15:23 [4172,23] [ImpersonationManager::StartImpersonation] Impersonating logged on user
13/04/2018 10:15:23 [4172,23] [ImpersonationManager::StartImpersonation] Exit: Current user: DomainPRI\user
13/04/2018 10:15:23 [4172,23] [ImpersonationManager::StartImpersonation] Exit: Impersonation Level: Impersonation
13/04/2018 10:15:23 [4172,23] [EVContext::Initialise] EVContext intialised at 13/04/2018 10:04:42
13/04/2018 10:15:23 [4172,23] [EVContext::Initialise] Hidden settings loaded at 13/04/2018 10:04:42
13/04/2018 10:15:23 [4172,23] [EVContext::IsValidBrowser] Returning: False
13/04/2018 10:15:23 [4172,23] [ImpersonationManager:StopImpersonation] Stopped impersonation
13/04/2018 10:15:23 [4172,23] Request processing finished
13/04/2018 10:15:41 [4172,12] #############################################################
13/04/2018 10:15:41 [4172,12] Request processing started
13/04/2018 10:15:41 [4172,12] Url: https://mail.domainb.com/owa/ev.owa?UA=0&oeh=1&ns=PendingRequest&ev=PendingNotificationRequest&canary=TKwsBQg9PUOYZIkEcZYyJeuIVV-VptUIFyx8lqZ5E3Hn4UqiUoPwBORdE0TK29OuBDVjXUJEx8Y.
13/04/2018 10:15:41 [4172,12] RawUrl: /owa/ev.owa?UA=0&oeh=1&ns=PendingRequest&ev=PendingNotificationRequest&canary=TKwsBQg9PUOYZIkEcZYyJeuIVV-VptUIFyx8lqZ5E3Hn4UqiUoPwBORdE0TK29OuBDVjXUJEx8Y.
13/04/2018 10:15:41 [4172,12] Query String parameters:
13/04/2018 10:15:41 [4172,12]     UA: 0
13/04/2018 10:15:41 [4172,12]     oeh: 1
13/04/2018 10:15:41 [4172,12]     ns: PendingRequest
13/04/2018 10:15:41 [4172,12]     ev: PendingNotificationRequest
13/04/2018 10:15:41 [4172,12]     canary: TKwsBQg9PUOYZIkEcZYyJeuIVV-VptUIFyx8lqZ5E3Hn4UqiUoPwBORdE0TK29OuBDVjXUJEx8Y.
13/04/2018 10:15:41 [4172,12] Cookies
13/04/2018 10:15:41 [4172,12]     MstrPgLd1: 1
13/04/2018 10:15:41 [4172,12]     MstrPgLd2: 1
13/04/2018 10:15:41 [4172,12]     OutlookSession: 0c3904e053cb4107810b3b2b671352aa
13/04/2018 10:15:41 [4172,12]     PBack: 0
13/04/2018 10:15:41 [4172,12]     sessionid: 3f0f3d75-7f22-4133-a639-f02cb4b6cede
13/04/2018 10:15:41 [4172,12]     cadata: "2hqi32JS7FcpJRE0wq3bxlH9/5DqUjcsOKleRXok+8gtm1XxzTOpnOH/8Q03MClvG14Z2agqNemnz+9tNnxUXzD/HZEY4ASdBrDf8ra1lQs0="
13/04/2018 10:15:41 [4172,12]     UserContext: TKwsBQg9PUOYZIkEcZYyJeuIVV-VptUIFyx8lqZ5E3Hn4UqiUoPwBORdE0TK29OuBDVjXUJEx8Y.
13/04/2018 10:15:41 [4172,12]     tzid: Romance Standard Time
13/04/2018 10:15:41 [4172,12] Form: 
13/04/2018 10:15:41 [4172,12] OWA Session details
13/04/2018 10:15:41 [4172,12]     User agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko
13/04/2018 10:15:41 [4172,12]     Authentication type: Basic
13/04/2018 10:15:41 [4172,12]     Authenticated user: DomainPRI\user
13/04/2018 10:15:41 [4172,12]     Client IP Address: x.x.x.x
13/04/2018 10:15:41 [4172,12]     Server IP Address: y.y.y.y
13/04/2018 10:15:41 [4172,12]     Host: mail.domainb.com
13/04/2018 10:15:41 [4172,12] Primary SMTP Address: user@domainb.com
13/04/2018 10:15:41 [4172,12] Explicit Logon: False
13/04/2018 10:15:41 [4172,12] Explicit Logon Address: owa
13/04/2018 10:15:41 [4172,12] EV Extensions DLL version: 10.0.4.0
13/04/2018 10:15:41 [4172,12] [ImpersonationManager::StartImpersonation] Entry: Current user: AUTORITE NT\Système
13/04/2018 10:15:41 [4172,12] [ImpersonationManager::StartImpersonation] Entry: Impersonation Level: None
13/04/2018 10:15:41 [4172,12] [ImpersonationManager::StartImpersonation] Impersonating logged on user
13/04/2018 10:15:41 [4172,12] [ImpersonationManager::StartImpersonation] Exit: Current user: DomainPRI\user
13/04/2018 10:15:41 [4172,12] [ImpersonationManager::StartImpersonation] Exit: Impersonation Level: Impersonation
13/04/2018 10:15:41 [4172,12] [EVContext::Initialise] EVContext intialised at 13/04/2018 10:04:42
13/04/2018 10:15:41 [4172,12] [EVContext::Initialise] Hidden settings loaded at 13/04/2018 10:04:42
13/04/2018 10:15:41 [4172,12] [EVContext::IsValidBrowser] Returning: False
13/04/2018 10:15:41 [4172,12] [ImpersonationManager:StopImpersonation] Stopped impersonation
13/04/2018 10:15:41 [4172,12] Request processing finished
13/04/2018 10:15:41 [4172,154] #############################################################
13/04/2018 10:15:41 [4172,154] Request processing started
13/04/2018 10:15:41 [4172,154] Url: https://mail.domainb.com/owa/ev.owa?oeh=1&ns=PendingRequest&ev=FinishNotificationRequest&UA=0
13/04/2018 10:15:41 [4172,154] RawUrl: /owa/ev.owa?oeh=1&ns=PendingRequest&ev=FinishNotificationRequest&UA=0
13/04/2018 10:15:41 [4172,154] Query String parameters:
13/04/2018 10:15:41 [4172,154]     oeh: 1
13/04/2018 10:15:41 [4172,154]     ns: PendingRequest
13/04/2018 10:15:41 [4172,154]     ev: FinishNotificationRequest
13/04/2018 10:15:41 [4172,154]     UA: 0
13/04/2018 10:15:41 [4172,154] Cookies
13/04/2018 10:15:41 [4172,154]     MstrPgLd1: 1
13/04/2018 10:15:41 [4172,154]     MstrPgLd2: 1
13/04/2018 10:15:41 [4172,154]     OutlookSession: 0c3904e053cb4107810b3b2b671352aa
13/04/2018 10:15:41 [4172,154]     PBack: 0
13/04/2018 10:15:41 [4172,154]     sessionid: 3f0f3d75-7f22-4133-a639-f02cb4b6cede
13/04/2018 10:15:41 [4172,154]     cadata: "2hqi32JS7FcpJRE0wq3bxlH9/5DqUjcsOKleRXok+8gtm1XxzTOpnOH/8Q03MClvG14Z2agqNemnz+9tNnxUXzD/HZEY4ASdBrDf8ra1lQs0="
13/04/2018 10:15:41 [4172,154]     UserContext: TKwsBQg9PUOYZIkEcZYyJeuIVV-VptUIFyx8lqZ5E3Hn4UqiUoPwBORdE0TK29OuBDVjXUJEx8Y.
13/04/2018 10:15:41 [4172,154]     tzid: Romance Standard Time
13/04/2018 10:15:41 [4172,154] Form: 
13/04/2018 10:15:41 [4172,154] OWA Session details
13/04/2018 10:15:41 [4172,154]     User agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko
13/04/2018 10:15:41 [4172,154]     Authentication type: Basic
13/04/2018 10:15:41 [4172,154]     Authenticated user: DomainPRI\user
13/04/2018 10:15:41 [4172,154]     Client IP Address: x.x.x.x
13/04/2018 10:15:41 [4172,154]     Server IP Address: y.y.y.y
13/04/2018 10:15:41 [4172,154]     Host: mail.domainb.com
13/04/2018 10:15:41 [4172,154] Primary SMTP Address: user@domainb.com
13/04/2018 10:15:41 [4172,154] Explicit Logon: False
13/04/2018 10:15:41 [4172,154] Explicit Logon Address: owa
13/04/2018 10:15:41 [4172,154] EV Extensions DLL version: 10.0.4.0
13/04/2018 10:15:41 [4172,154] [ImpersonationManager::StartImpersonation] Entry: Current user: AUTORITE NT\Système
13/04/2018 10:15:41 [4172,154] [ImpersonationManager::StartImpersonation] Entry: Impersonation Level: None
13/04/2018 10:15:41 [4172,154] [ImpersonationManager::StartImpersonation] Impersonating logged on user
13/04/2018 10:15:41 [4172,154] [ImpersonationManager::StartImpersonation] Exit: Current user: DomainPRI\user
13/04/2018 10:15:41 [4172,154] [ImpersonationManager::StartImpersonation] Exit: Impersonation Level: Impersonation
13/04/2018 10:15:41 [4172,154] [EVContext::Initialise] EVContext intialised at 13/04/2018 10:04:42
13/04/2018 10:15:41 [4172,154] [EVContext::Initialise] Hidden settings loaded at 13/04/2018 10:04:42
13/04/2018 10:15:41 [4172,154] [EVContext::IsValidBrowser] Returning: False
13/04/2018 10:15:41 [4172,154] [ImpersonationManager:StopImpersonation] Stopped impersonation
13/04/2018 10:15:41 [4172,154] Request processing finished
13/04/2018 10:15:41 [4172,154] #############################################################
13/04/2018 10:15:41 [4172,154] Request processing started
13/04/2018 10:15:41 [4172,154] Url: https://mail.domainb.com/owa/ev.owa?oeh=1&ns=PendingRequest&ev=FinishNotificationRequest&UA=0
13/04/2018 10:15:41 [4172,154] RawUrl: /owa/ev.owa?oeh=1&ns=PendingRequest&ev=FinishNotificationRequest&UA=0
13/04/2018 10:15:41 [4172,154] Query String parameters:
13/04/2018 10:15:41 [4172,154]     oeh: 1
13/04/2018 10:15:41 [4172,154]     ns: PendingRequest
13/04/2018 10:15:41 [4172,154]     ev: FinishNotificationRequest
13/04/2018 10:15:41 [4172,154]     UA: 0
13/04/2018 10:15:41 [4172,154] Cookies
13/04/2018 10:15:41 [4172,154]     MstrPgLd1: 1
13/04/2018 10:15:41 [4172,154]     MstrPgLd2: 1
13/04/2018 10:15:41 [4172,154]     OutlookSession: 0c3904e053cb4107810b3b2b671352aa
13/04/2018 10:15:41 [4172,154]     PBack: 0
13/04/2018 10:15:41 [4172,154]     sessionid: 3f0f3d75-7f22-4133-a639-f02cb4b6cede
13/04/2018 10:15:41 [4172,154]     cadata: "2hqi32JS7FcpJRE0wq3bxlH9/5DqUjcsOKleRXok+8gtm1XxzTOpnOH/8Q03MClvG14Z2agqNemnz+9tNnxUXzD/HZEY4ASdBrDf8ra1lQs0="
13/04/2018 10:15:41 [4172,154]     UserContext: TKwsBQg9PUOYZIkEcZYyJeuIVV-VptUIFyx8lqZ5E3Hn4UqiUoPwBORdE0TK29OuBDVjXUJEx8Y.
13/04/2018 10:15:41 [4172,154]     tzid: Romance Standard Time
13/04/2018 10:15:41 [4172,154] Form: 
13/04/2018 10:15:41 [4172,154] OWA Session details
13/04/2018 10:15:41 [4172,154]     User agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko
13/04/2018 10:15:41 [4172,154]     Authentication type: Basic
13/04/2018 10:15:41 [4172,154]     Authenticated user: DomainPRI\user
13/04/2018 10:15:41 [4172,154]     Client IP Address: x.x.x.x
13/04/2018 10:15:41 [4172,154]     Server IP Address: y.y.y.y
13/04/2018 10:15:41 [4172,154]     Host: mail.domainb.com
13/04/2018 10:15:41 [4172,154] Primary SMTP Address: user@domainb.com
13/04/2018 10:15:41 [4172,154] Explicit Logon: False
13/04/2018 10:15:41 [4172,154] Explicit Logon Address: owa
13/04/2018 10:15:41 [4172,154] EV Extensions DLL version: 10.0.4.0
13/04/2018 10:15:41 [4172,154] [ImpersonationManager::StartImpersonation] Entry: Current user: AUTORITE NT\Système
13/04/2018 10:15:41 [4172,154] [ImpersonationManager::StartImpersonation] Entry: Impersonation Level: None
13/04/2018 10:15:41 [4172,154] [ImpersonationManager::StartImpersonation] Impersonating logged on user
13/04/2018 10:15:41 [4172,154] [ImpersonationManager::StartImpersonation] Exit: Current user: DomainPRI\user
13/04/2018 10:15:41 [4172,154] [ImpersonationManager::StartImpersonation] Exit: Impersonation Level: Impersonation
13/04/2018 10:15:41 [4172,154] [EVContext::Initialise] EVContext intialised at 13/04/2018 10:04:42
13/04/2018 10:15:41 [4172,154] [EVContext::Initialise] Hidden settings loaded at 13/04/2018 10:04:42
13/04/2018 10:15:41 [4172,154] [EVContext::IsValidBrowser] Returning: False
13/04/2018 10:15:41 [4172,154] [ImpersonationManager:StopImpersonation] Stopped impersonation
13/04/2018 10:15:41 [4172,154] Request processing finished
13/04/2018 10:15:41 [4172,88] #############################################################
13/04/2018 10:15:41 [4172,88] Request processing started
13/04/2018 10:15:41 [4172,88] Url: https://mail.domainb.com/owa/ev.owa?UA=0&oeh=1&ns=PendingRequest&ev=PendingNotificationRequest&canary=TKwsBQg9PUOYZIkEcZYyJeuIVV-VptUIFyx8lqZ5E3Hn4UqiUoPwBORdE0TK29OuBDVjXUJEx8Y.
13/04/2018 10:15:41 [4172,88] RawUrl: /owa/ev.owa?UA=0&oeh=1&ns=PendingRequest&ev=PendingNotificationRequest&canary=TKwsBQg9PUOYZIkEcZYyJeuIVV-VptUIFyx8lqZ5E3Hn4UqiUoPwBORdE0TK29OuBDVjXUJEx8Y.
13/04/2018 10:15:41 [4172,88] Query String parameters:
13/04/2018 10:15:41 [4172,88]     UA: 0
13/04/2018 10:15:41 [4172,88]     oeh: 1
13/04/2018 10:15:41 [4172,88]     ns: PendingRequest
13/04/2018 10:15:41 [4172,88]     ev: PendingNotificationRequest
13/04/2018 10:15:41 [4172,88]     canary: TKwsBQg9PUOYZIkEcZYyJeuIVV-VptUIFyx8lqZ5E3Hn4UqiUoPwBORdE0TK29OuBDVjXUJEx8Y.
13/04/2018 10:15:41 [4172,88] Cookies
13/04/2018 10:15:41 [4172,88]     MstrPgLd1: 1
13/04/2018 10:15:41 [4172,88]     MstrPgLd2: 1
13/04/2018 10:15:41 [4172,88]     OutlookSession: 0c3904e053cb4107810b3b2b671352aa
13/04/2018 10:15:41 [4172,88]     PBack: 0
13/04/2018 10:15:41 [4172,88]     sessionid: 3f0f3d75-7f22-4133-a639-f02cb4b6cede
13/04/2018 10:15:41 [4172,88]     cadata: "2hqi32JS7FcpJRE0wq3bxlH9/5DqUjcsOKleRXok+8gtm1XxzTOpnOH/8Q03MClvG14Z2agqNemnz+9tNnxUXzD/HZEY4ASdBrDf8ra1lQs0="
13/04/2018 10:15:41 [4172,88]     UserContext: TKwsBQg9PUOYZIkEcZYyJeuIVV-VptUIFyx8lqZ5E3Hn4UqiUoPwBORdE0TK29OuBDVjXUJEx8Y.
13/04/2018 10:15:41 [4172,88]     tzid: Romance Standard Time
13/04/2018 10:15:41 [4172,88] Form: 
13/04/2018 10:15:41 [4172,88] OWA Session details
13/04/2018 10:15:41 [4172,88]     User agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko
13/04/2018 10:15:41 [4172,88]     Authentication type: Basic
13/04/2018 10:15:41 [4172,88]     Authenticated user: DomainPRI\user
13/04/2018 10:15:41 [4172,88]     Client IP Address: x.x.x.x
13/04/2018 10:15:41 [4172,88]     Server IP Address: y.y.y.y
13/04/2018 10:15:41 [4172,88]     Host: mail.domainb.com
13/04/2018 10:15:41 [4172,88] Primary SMTP Address: user@domainb.com
13/04/2018 10:15:41 [4172,88] Explicit Logon: False
13/04/2018 10:15:41 [4172,88] Explicit Logon Address: owa
13/04/2018 10:15:41 [4172,88] EV Extensions DLL version: 10.0.4.0
13/04/2018 10:15:41 [4172,88] [ImpersonationManager::StartImpersonation] Entry: Current user: AUTORITE NT\Système
13/04/2018 10:15:41 [4172,88] [ImpersonationManager::StartImpersonation] Entry: Impersonation Level: None
13/04/2018 10:15:41 [4172,88] [ImpersonationManager::StartImpersonation] Impersonating logged on user
13/04/2018 10:15:41 [4172,88] [ImpersonationManager::StartImpersonation] Exit: Current user: DomainPRI\user
13/04/2018 10:15:41 [4172,88] [ImpersonationManager::StartImpersonation] Exit: Impersonation Level: Impersonation
13/04/2018 10:15:41 [4172,88] [EVContext::Initialise] EVContext intialised at 13/04/2018 10:04:42
13/04/2018 10:15:41 [4172,88] [EVContext::Initialise] Hidden settings loaded at 13/04/2018 10:04:42
13/04/2018 10:15:41 [4172,88] [EVContext::IsValidBrowser] Returning: False
13/04/2018 10:15:41 [4172,88] [ImpersonationManager:StopImpersonation] Stopped impersonation
13/04/2018 10:15:41 [4172,88] Request processing finished
13/04/2018 10:20:43 [4172,27] #############################################################
13/04/2018 10:20:43 [4172,27] Request processing started
13/04/2018 10:20:43 [4172,27] Url: https://mail.domainb.com/owa/ev.owa?oeh=1&ns=PendingRequest&ev=FinishNotificationRequest&UA=0&cpc=787521;C0:1;C1:25581;C2:5;C3:1;C4:4;C5:0;C6:0;C7:0;C8:0;C9:0;C10:0
13/04/2018 10:20:43 [4172,27] RawUrl: /owa/ev.owa?oeh=1&ns=PendingRequest&ev=FinishNotificationRequest&UA=0&cpc=787521;C0:1;C1:25581;C2:5;C3:1;C4:4;C5:0;C6:0;C7:0;C8:0;C9:0;C10:0
13/04/2018 10:20:43 [4172,27] Query String parameters:
13/04/2018 10:20:43 [4172,27]     oeh: 1
13/04/2018 10:20:43 [4172,27]     ns: PendingRequest
13/04/2018 10:20:43 [4172,27]     ev: FinishNotificationRequest
13/04/2018 10:20:43 [4172,27]     UA: 0
13/04/2018 10:20:43 [4172,27]     cpc: 787521;C0:1;C1:25581;C2:5;C3:1;C4:4;C5:0;C6:0;C7:0;C8:0;C9:0;C10:0
13/04/2018 10:20:43 [4172,27] Cookies
13/04/2018 10:20:43 [4172,27]     MstrPgLd1: 1
13/04/2018 10:20:43 [4172,27]     MstrPgLd2: 1
13/04/2018 10:20:43 [4172,27]     OutlookSession: 0c3904e053cb4107810b3b2b671352aa
13/04/2018 10:20:43 [4172,27]     PBack: 0
13/04/2018 10:20:43 [4172,27]     sessionid: 3f0f3d75-7f22-4133-a639-f02cb4b6cede
13/04/2018 10:20:43 [4172,27]     cadata: "2hqi32JS7FcpJRE0wq3bxlH9/5DqUjcsOKleRXok+8gtm1XxzTOpnOH/8Q03MClvG14Z2agqNemnz+9tNnxUXzD/HZEY4ASdBrDf8ra1lQs0="
13/04/2018 10:20:43 [4172,27]     UserContext: TKwsBQg9PUOYZIkEcZYyJeuIVV-VptUIFyx8lqZ5E3Hn4UqiUoPwBORdE0TK29OuBDVjXUJEx8Y.
13/04/2018 10:20:43 [4172,27]     tzid: Romance Standard Time
13/04/2018 10:20:43 [4172,27] Form: 
13/04/2018 10:20:43 [4172,27] OWA Session details
13/04/2018 10:20:43 [4172,27]     User agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko
13/04/2018 10:20:43 [4172,27]     Authentication type: Basic
13/04/2018 10:20:43 [4172,27]     Authenticated user: DomainPRI\user
13/04/2018 10:20:43 [4172,27]     Client IP Address: x.x.x.x
13/04/2018 10:20:43 [4172,27]     Server IP Address: y.y.y.y
13/04/2018 10:20:43 [4172,27]     Host: mail.domainb.com
13/04/2018 10:20:43 [4172,27] Primary SMTP Address: user@domainb.com
13/04/2018 10:20:43 [4172,27] Explicit Logon: False
13/04/2018 10:20:43 [4172,27] Explicit Logon Address: owa
13/04/2018 10:20:43 [4172,27] EV Extensions DLL version: 10.0.4.0
13/04/2018 10:20:43 [4172,27] [ImpersonationManager::StartImpersonation] Entry: Current user: AUTORITE NT\Système
13/04/2018 10:20:43 [4172,27] [ImpersonationManager::StartImpersonation] Entry: Impersonation Level: None
13/04/2018 10:20:43 [4172,27] [ImpersonationManager::StartImpersonation] Impersonating logged on user
13/04/2018 10:20:43 [4172,27] [ImpersonationManager::StartImpersonation] Exit: Current user: DomainPRI\user
13/04/2018 10:20:43 [4172,27] [ImpersonationManager::StartImpersonation] Exit: Impersonation Level: Impersonation
13/04/2018 10:20:43 [4172,27] [EVContext::Initialise] EVContext intialised at 13/04/2018 10:04:42
13/04/2018 10:20:43 [4172,27] [EVContext::Initialise] Hidden settings loaded at 13/04/2018 10:04:42
13/04/2018 10:20:43 [4172,27] [EVContext::IsValidBrowser] Returning: False
13/04/2018 10:20:43 [4172,27] [ImpersonationManager:StopImpersonation] Stopped impersonation
13/04/2018 10:20:43 [4172,27] Request processing finished
13/04/2018 10:20:43 [4172,27] #############################################################
13/04/2018 10:20:43 [4172,27] Request processing started
13/04/2018 10:20:43 [4172,27] Url: https://mail.domainb.com/owa/ev.owa?oeh=1&ns=PendingRequest&ev=FinishNotificationRequest&UA=0&cpc=787521;C0:1;C1:25581;C2:5;C3:1;C4:4;C5:0;C6:0;C7:0;C8:0;C9:0;C10:0
13/04/2018 10:20:43 [4172,27] RawUrl: /owa/ev.owa?oeh=1&ns=PendingRequest&ev=FinishNotificationRequest&UA=0&cpc=787521;C0:1;C1:25581;C2:5;C3:1;C4:4;C5:0;C6:0;C7:0;C8:0;C9:0;C10:0
13/04/2018 10:20:43 [4172,27] Query String parameters:
13/04/2018 10:20:43 [4172,27]     oeh: 1
13/04/2018 10:20:43 [4172,27]     ns: PendingRequest
13/04/2018 10:20:43 [4172,27]     ev: FinishNotificationRequest
13/04/2018 10:20:43 [4172,27]     UA: 0
13/04/2018 10:20:43 [4172,27]     cpc: 787521;C0:1;C1:25581;C2:5;C3:1;C4:4;C5:0;C6:0;C7:0;C8:0;C9:0;C10:0
13/04/2018 10:20:43 [4172,27] Cookies
13/04/2018 10:20:43 [4172,27]     MstrPgLd1: 1
13/04/2018 10:20:43 [4172,27]     MstrPgLd2: 1
13/04/2018 10:20:43 [4172,27]     OutlookSession: 0c3904e053cb4107810b3b2b671352aa
13/04/2018 10:20:43 [4172,27]     PBack: 0
13/04/2018 10:20:43 [4172,27]     sessionid: 3f0f3d75-7f22-4133-a639-f02cb4b6cede
13/04/2018 10:20:43 [4172,27]     cadata: "2hqi32JS7FcpJRE0wq3bxlH9/5DqUjcsOKleRXok+8gtm1XxzTOpnOH/8Q03MClvG14Z2agqNemnz+9tNnxUXzD/HZEY4ASdBrDf8ra1lQs0="
13/04/2018 10:20:43 [4172,27]     UserContext: TKwsBQg9PUOYZIkEcZYyJeuIVV-VptUIFyx8lqZ5E3Hn4UqiUoPwBORdE0TK29OuBDVjXUJEx8Y.
13/04/2018 10:20:43 [4172,27]     tzid: Romance Standard Time
13/04/2018 10:20:43 [4172,27] Form: 
13/04/2018 10:20:43 [4172,27] OWA Session details
13/04/2018 10:20:43 [4172,27]     User agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko
13/04/2018 10:20:43 [4172,27]     Authentication type: Basic
13/04/2018 10:20:43 [4172,27]     Authenticated user: DomainPRI\user
13/04/2018 10:20:43 [4172,27]     Client IP Address: x.x.x.x
13/04/2018 10:20:43 [4172,27]     Server IP Address: y.y.y.y
13/04/2018 10:20:43 [4172,27]     Host: mail.domainb.com
13/04/2018 10:20:43 [4172,27] Primary SMTP Address: user@domainb.com
13/04/2018 10:20:43 [4172,27] Explicit Logon: False
13/04/2018 10:20:43 [4172,27] Explicit Logon Address: owa
13/04/2018 10:20:43 [4172,27] EV Extensions DLL version: 10.0.4.0
13/04/2018 10:20:43 [4172,27] [ImpersonationManager::StartImpersonation] Entry: Current user: AUTORITE NT\Système
13/04/2018 10:20:43 [4172,27] [ImpersonationManager::StartImpersonation] Entry: Impersonation Level: None
13/04/2018 10:20:43 [4172,27] [ImpersonationManager::StartImpersonation] Impersonating logged on user
13/04/2018 10:20:43 [4172,27] [ImpersonationManager::StartImpersonation] Exit: Current user: DomainPRI\user
13/04/2018 10:20:43 [4172,27] [ImpersonationManager::StartImpersonation] Exit: Impersonation Level: Impersonation
13/04/2018 10:20:43 [4172,27] [EVContext::Initialise] EVContext intialised at 13/04/2018 10:04:42
13/04/2018 10:20:43 [4172,27] [EVContext::Initialise] Hidden settings loaded at 13/04/2018 10:04:42
13/04/2018 10:20:43 [4172,27] [EVContext::IsValidBrowser] Returning: False
13/04/2018 10:20:43 [4172,27] [ImpersonationManager:StopImpersonation] Stopped impersonation
13/04/2018 10:20:43 [4172,27] Request processing finished
13/04/2018 10:20:43 [4172,88] #############################################################
13/04/2018 10:20:43 [4172,88] Request processing started
13/04/2018 10:20:43 [4172,88] Url: https://mail.domainb.com/owa/ev.owa?UA=0&oeh=1&ns=PendingRequest&ev=PendingNotificationRequest&canary=TKwsBQg9PUOYZIkEcZYyJeuIVV-VptUIFyx8lqZ5E3Hn4UqiUoPwBORdE0TK29OuBDVjXUJEx8Y.
13/04/2018 10:20:43 [4172,88] RawUrl: /owa/ev.owa?UA=0&oeh=1&ns=PendingRequest&ev=PendingNotificationRequest&canary=TKwsBQg9PUOYZIkEcZYyJeuIVV-VptUIFyx8lqZ5E3Hn4UqiUoPwBORdE0TK29OuBDVjXUJEx8Y.
13/04/2018 10:20:43 [4172,88] Query String parameters:
13/04/2018 10:20:43 [4172,88]     UA: 0
13/04/2018 10:20:43 [4172,88]     oeh: 1
13/04/2018 10:20:43 [4172,88]     ns: PendingRequest
13/04/2018 10:20:43 [4172,88]     ev: PendingNotificationRequest
13/04/2018 10:20:43 [4172,88]     canary: TKwsBQg9PUOYZIkEcZYyJeuIVV-VptUIFyx8lqZ5E3Hn4UqiUoPwBORdE0TK29OuBDVjXUJEx8Y.
13/04/2018 10:20:43 [4172,88] Cookies
13/04/2018 10:20:43 [4172,88]     MstrPgLd1: 1
13/04/2018 10:20:43 [4172,88]     MstrPgLd2: 1
13/04/2018 10:20:43 [4172,88]     OutlookSession: 0c3904e053cb4107810b3b2b671352aa
13/04/2018 10:20:43 [4172,88]     PBack: 0
13/04/2018 10:20:43 [4172,88]     sessionid: 3f0f3d75-7f22-4133-a639-f02cb4b6cede
13/04/2018 10:20:43 [4172,88]     cadata: "2hqi32JS7FcpJRE0wq3bxlH9/5DqUjcsOKleRXok+8gtm1XxzTOpnOH/8Q03MClvG14Z2agqNemnz+9tNnxUXzD/HZEY4ASdBrDf8ra1lQs0="
13/04/2018 10:20:43 [4172,88]     UserContext: TKwsBQg9PUOYZIkEcZYyJeuIVV-VptUIFyx8lqZ5E3Hn4UqiUoPwBORdE0TK29OuBDVjXUJEx8Y.
13/04/2018 10:20:43 [4172,88]     tzid: Romance Standard Time
13/04/2018 10:20:43 [4172,88] Form: 
13/04/2018 10:20:43 [4172,88] OWA Session details
13/04/2018 10:20:43 [4172,88]     User agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko
13/04/2018 10:20:43 [4172,88]     Authentication type: Basic
13/04/2018 10:20:43 [4172,88]     Authenticated user: DomainPRI\user
13/04/2018 10:20:43 [4172,88]     Client IP Address: x.x.x.x
13/04/2018 10:20:43 [4172,88]     Server IP Address: y.y.y.y
13/04/2018 10:20:43 [4172,88]     Host: mail.domainb.com
13/04/2018 10:20:43 [4172,88] Primary SMTP Address: user@domainb.com
13/04/2018 10:20:43 [4172,88] Explicit Logon: False
13/04/2018 10:20:43 [4172,88] Explicit Logon Address: owa
13/04/2018 10:20:43 [4172,88] EV Extensions DLL version: 10.0.4.0
13/04/2018 10:20:43 [4172,88] [ImpersonationManager::StartImpersonation] Entry: Current user: AUTORITE NT\Système
13/04/2018 10:20:43 [4172,88] [ImpersonationManager::StartImpersonation] Entry: Impersonation Level: None
13/04/2018 10:20:43 [4172,88] [ImpersonationManager::StartImpersonation] Impersonating logged on user
13/04/2018 10:20:43 [4172,88] [ImpersonationManager::StartImpersonation] Exit: Current user: DomainPRI\user
13/04/2018 10:20:43 [4172,88] [ImpersonationManager::StartImpersonation] Exit: Impersonation Level: Impersonation
13/04/2018 10:20:43 [4172,88] [EVContext::Initialise] EVContext intialised at 13/04/2018 10:04:42
13/04/2018 10:20:43 [4172,88] [EVContext::Initialise] Hidden settings loaded at 13/04/2018 10:04:42
13/04/2018 10:20:43 [4172,88] [EVContext::IsValidBrowser] Returning: False
13/04/2018 10:20:43 [4172,88] [ImpersonationManager:StopImpersonation] Stopped impersonation
13/04/2018 10:20:43 [4172,88] Request processing finished