06/02/2015 09:06:19 [3460,16] #############################################################
06/02/2015 09:06:19 [3460,16] Request processing started
06/02/2015 09:06:19 [3460,16] Url: https://outlook.mycompany.local/owa/forms/premium/StartPage.aspx
06/02/2015 09:06:19 [3460,16] RawUrl: /owa/
06/02/2015 09:06:19 [3460,16] Query String parameters:
06/02/2015 09:06:19 [3460,16] Form: 
06/02/2015 09:06:19 [3460,16] OWA Session details
06/02/2015 09:06:19 [3460,16]     User agent: Mozilla/5.0 (Windows NT 6.3; WOW64; rv:35.0) Gecko/20100101 Firefox/35.0
06/02/2015 09:06:19 [3460,16]     Authentication type: Basic
06/02/2015 09:06:19 [3460,16]     Authenticated user: MYCOMPANY\test.user
06/02/2015 09:06:19 [3460,16]     Client IP Address: 10.0.126.38
06/02/2015 09:06:19 [3460,16]     Server IP Address: 10.0.126.71
06/02/2015 09:06:19 [3460,16]     Host: outlook.mycompany.local
06/02/2015 09:06:19 [3460,16] Primary SMTP Address: test.user@MyCompany.com
06/02/2015 09:06:19 [3460,16] EV Extensions DLL version: 9.0.2.0
06/02/2015 09:06:19 [3460,16] [ImpersonationManager::StartImpersonation] Entry: Current user: NT AUTHORITY\SYSTEM
06/02/2015 09:06:19 [3460,16] [ImpersonationManager::StartImpersonation] Entry: Impersonation Level: None
06/02/2015 09:06:19 [3460,16] [ImpersonationManager::StartImpersonation] Impersonating logged on user
06/02/2015 09:06:19 [3460,16] [ImpersonationManager::StartImpersonation] Exit: Current user: MYCOMPANY\test.user
06/02/2015 09:06:19 [3460,16] [ImpersonationManager::StartImpersonation] Exit: Impersonation Level: Impersonation
06/02/2015 09:06:19 [3460,16] [EVContext::Initialise] Loading EVContext
06/02/2015 09:06:19 [3460,16] [Resources::LoadLanguageFile] Trying to opening language file: C:\Program Files\Microsoft\Exchange Server\V14\ClientAccess\owa\EnterpriseVault\Exch2010\v9.0.2.1061\Languages\en-gb.lan
06/02/2015 09:06:19 [3460,16] [Resources::LoadLanguageFile] Language file not found
06/02/2015 09:06:19 [3460,16] [Resources::LoadLanguageFile] Trying to opening language file: C:\Program Files\Microsoft\Exchange Server\V14\ClientAccess\owa\EnterpriseVault\Exch2010\v9.0.2.1061\Languages\en.lan
06/02/2015 09:06:19 [3460,16] [Resources::LoadLanguageFile] Loaded language: en
06/02/2015 09:06:19 [3460,16] [EVContext::ResetHiddenSettings] Resetting hidden settings to defaults
06/02/2015 09:06:19 [3460,16] [EVContext::LoadHiddenSettings] Loading hidden settings
06/02/2015 09:06:19 [3460,16] [EWSBase::Init] Connecting to Exchange Web Services using: https://MYCOMPANY-CA-1/ews/exchange.asmx
06/02/2015 09:06:19 [3460,16] [EWSBase::GetEVHiddenMessageId] Retrieving hidden settings
06/02/2015 09:06:19 [3460,16] EwsRequest:
<Trace Tag="EwsRequest" Tid="16" Time="2015-02-06 09:06:19Z" Version="14.01.0218.002">
  <?xml version="1.0" encoding="utf-8"?>
  <soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:m="http://schemas.microsoft.com/exchange/services/2006/messages" xmlns:t="http://schemas.microsoft.com/exchange/services/2006/types" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/">
    <soap:Header>
      <t:RequestServerVersion Version="Exchange2010_SP1" />
    </soap:Header>
    <soap:Body>
      <m:FindItem Traversal="Associated">
        <m:ItemShape>
          <t:BaseShape>IdOnly</t:BaseShape>
          <t:AdditionalProperties>
            <t:FieldURI FieldURI="item:HasAttachments" />
          </t:AdditionalProperties>
        </m:ItemShape>
        <m:IndexedPageItemView MaxEntriesReturned="2" Offset="0" BasePoint="Beginning" />
        <m:Restriction>
          <t:IsEqualTo>
            <t:FieldURI FieldURI="item:ItemClass" />
            <t:FieldURIOrConstant>
              <t:Constant Value="IPM.Note.EnterpriseVault.Settings" />
            </t:FieldURIOrConstant>
          </t:IsEqualTo>
        </m:Restriction>
        <m:ParentFolderIds>
          <t:DistinguishedFolderId Id="inbox" />
        </m:ParentFolderIds>
      </m:FindItem>
    </soap:Body>
  </soap:Envelope>
</Trace>

06/02/2015 09:06:19 [3460,16] EwsResponse:
<Trace Tag="EwsResponse" Tid="16" Time="2015-02-06 09:06:19Z" Version="14.01.0218.002">
  <?xml version="1.0" encoding="utf-8"?>
  <s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/">
    <s:Header>
      <h:ServerVersionInfo MajorVersion="14" MinorVersion="3" MajorBuildNumber="224" MinorBuildNumber="2" Version="Exchange2010_SP2" xmlns:h="http://schemas.microsoft.com/exchange/services/2006/types" xmlns="http://schemas.microsoft.com/exchange/services/2006/types" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" />
    </s:Header>
    <s:Body xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema">
      <m:FindItemResponse xmlns:m="http://schemas.microsoft.com/exchange/services/2006/messages" xmlns:t="http://schemas.microsoft.com/exchange/services/2006/types">
        <m:ResponseMessages>
          <m:FindItemResponseMessage ResponseClass="Success">
            <m:ResponseCode>NoError</m:ResponseCode>
            <m:RootFolder IndexedPagingOffset="1" TotalItemsInView="1" IncludesLastItemInRange="true">
              <t:Items>
                <t:Message>
                  <t:ItemId Id="AAMkAGI2YjdhYzdhLTgwMTgtNGZmNy1iYjkxLWNlYTA4OWY2ZjdhMwBGAAAAAAAMa4q9vI8fRYRlurzFwP/eBwDazVmJkuzpQ5rm+12FtoRhAAAA+mxnAADazVmJkuzpQ5rm+12FtoRhAACaUHnzAAA=" ChangeKey="CQAAABYAAADazVmJkuzpQ5rm+12FtoRhAACaU+lx" />
                  <t:HasAttachments>true</t:HasAttachments>
                </t:Message>
              </t:Items>
            </m:RootFolder>
          </m:FindItemResponseMessage>
        </m:ResponseMessages>
      </m:FindItemResponse>
    </s:Body>
  </s:Envelope>
</Trace>

06/02/2015 09:06:19 [3460,16] [EWSBase::GetEVHiddenMessageId] Item count: 1
06/02/2015 09:06:19 [3460,16] [EWSBase::GetEVHiddenMessageId] Has Attachment: True
06/02/2015 09:06:19 [3460,16] EwsRequest:
<Trace Tag="EwsRequest" Tid="16" Time="2015-02-06 09:06:19Z" Version="14.01.0218.002">
  <?xml version="1.0" encoding="utf-8"?>
  <soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:m="http://schemas.microsoft.com/exchange/services/2006/messages" xmlns:t="http://schemas.microsoft.com/exchange/services/2006/types" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/">
    <soap:Header>
      <t:RequestServerVersion Version="Exchange2010_SP1" />
    </soap:Header>
    <soap:Body>
      <m:GetItem>
        <m:ItemShape>
          <t:BaseShape>IdOnly</t:BaseShape>
          <t:AdditionalProperties>
            <t:FieldURI FieldURI="item:Attachments" />
          </t:AdditionalProperties>
        </m:ItemShape>
        <m:ItemIds>
          <t:ItemId Id="AAMkAGI2YjdhYzdhLTgwMTgtNGZmNy1iYjkxLWNlYTA4OWY2ZjdhMwBGAAAAAAAMa4q9vI8fRYRlurzFwP/eBwDazVmJkuzpQ5rm+12FtoRhAAAA+mxnAADazVmJkuzpQ5rm+12FtoRhAACaUHnzAAA=" ChangeKey="CQAAABYAAADazVmJkuzpQ5rm+12FtoRhAACaU+lx" />
        </m:ItemIds>
      </m:GetItem>
    </soap:Body>
  </soap:Envelope>
</Trace>

06/02/2015 09:06:19 [3460,16] EwsResponse:
<Trace Tag="EwsResponse" Tid="16" Time="2015-02-06 09:06:19Z" Version="14.01.0218.002">
  <?xml version="1.0" encoding="utf-8"?>
  <s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/">
    <s:Header>
      <h:ServerVersionInfo MajorVersion="14" MinorVersion="3" MajorBuildNumber="224" MinorBuildNumber="2" Version="Exchange2010_SP2" xmlns:h="http://schemas.microsoft.com/exchange/services/2006/types" xmlns="http://schemas.microsoft.com/exchange/services/2006/types" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" />
    </s:Header>
    <s:Body xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema">
      <m:GetItemResponse xmlns:m="http://schemas.microsoft.com/exchange/services/2006/messages" xmlns:t="http://schemas.microsoft.com/exchange/services/2006/types">
        <m:ResponseMessages>
          <m:GetItemResponseMessage ResponseClass="Success">
            <m:ResponseCode>NoError</m:ResponseCode>
            <m:Items>
              <t:Message>
                <t:ItemId Id="AAMkAGI2YjdhYzdhLTgwMTgtNGZmNy1iYjkxLWNlYTA4OWY2ZjdhMwBGAAAAAAAMa4q9vI8fRYRlurzFwP/eBwDazVmJkuzpQ5rm+12FtoRhAAAA+mxnAADazVmJkuzpQ5rm+12FtoRhAACaUHnzAAA=" ChangeKey="CQAAABYAAADazVmJkuzpQ5rm+12FtoRhAACaU+lx" />
                <t:Attachments>
                  <t:FileAttachment>
                    <t:AttachmentId Id="AAMkAGI2YjdhYzdhLTgwMTgtNGZmNy1iYjkxLWNlYTA4OWY2ZjdhMwBGAAAAAAAMa4q9vI8fRYRlurzFwP/eBwDazVmJkuzpQ5rm+12FtoRhAAAA+mxnAADazVmJkuzpQ5rm+12FtoRhAACaUHnzAAABEgAQACcj5gQABLJNqyJHxrxqYPg=" />
                    <t:Name>EnterpriseVaultSettings.txt</t:Name>
                    <t:Size>4422</t:Size>
                    <t:LastModifiedTime>2015-02-06T00:01:16</t:LastModifiedTime>
                    <t:IsInline>false</t:IsInline>
                    <t:IsContactPhoto>false</t:IsContactPhoto>
                  </t:FileAttachment>
                </t:Attachments>
              </t:Message>
            </m:Items>
          </m:GetItemResponseMessage>
        </m:ResponseMessages>
      </m:GetItemResponse>
    </s:Body>
  </s:Envelope>
</Trace>

06/02/2015 09:06:19 [3460,16] [EWSBase::GetEVHiddenMessageId] Attachment count: 1
06/02/2015 09:06:19 [3460,16] EwsRequest:
<Trace Tag="EwsRequest" Tid="16" Time="2015-02-06 09:06:19Z" Version="14.01.0218.002">
  <?xml version="1.0" encoding="utf-8"?>
  <soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:m="http://schemas.microsoft.com/exchange/services/2006/messages" xmlns:t="http://schemas.microsoft.com/exchange/services/2006/types" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/">
    <soap:Header>
      <t:RequestServerVersion Version="Exchange2010_SP1" />
    </soap:Header>
    <soap:Body>
      <m:GetAttachment>
        <m:AttachmentIds>
          <t:AttachmentId Id="AAMkAGI2YjdhYzdhLTgwMTgtNGZmNy1iYjkxLWNlYTA4OWY2ZjdhMwBGAAAAAAAMa4q9vI8fRYRlurzFwP/eBwDazVmJkuzpQ5rm+12FtoRhAAAA+mxnAADazVmJkuzpQ5rm+12FtoRhAACaUHnzAAABEgAQACcj5gQABLJNqyJHxrxqYPg=" />
        </m:AttachmentIds>
      </m:GetAttachment>
    </soap:Body>
  </soap:Envelope>
</Trace>

06/02/2015 09:06:19 [3460,16] EwsResponse:
<Trace Tag="EwsResponse" Tid="16" Time="2015-02-06 09:06:19Z" Version="14.01.0218.002">
  <?xml version="1.0" encoding="utf-8"?>
  <s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/">
    <s:Header>
      <h:ServerVersionInfo MajorVersion="14" MinorVersion="3" MajorBuildNumber="224" MinorBuildNumber="2" Version="Exchange2010_SP2" xmlns:h="http://schemas.microsoft.com/exchange/services/2006/types" xmlns="http://schemas.microsoft.com/exchange/services/2006/types" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" />
    </s:Header>
    <s:Body xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema">
      <m:GetAttachmentResponse xmlns:m="http://schemas.microsoft.com/exchange/services/2006/messages" xmlns:t="http://schemas.microsoft.com/exchange/services/2006/types">
        <m:ResponseMessages>
          <m:GetAttachmentResponseMessage ResponseClass="Success">
            <m:ResponseCode>NoError</m:ResponseCode>
            <m:Attachments>
              <t:FileAttachment>
                <t:AttachmentId Id="AAMkAGI2YjdhYzdhLTgwMTgtNGZmNy1iYjkxLWNlYTA4OWY2ZjdhMwBGAAAAAAAMa4q9vI8fRYRlurzFwP/eBwDazVmJkuzpQ5rm+12FtoRhAAAA+mxnAADazVmJkuzpQ5rm+12FtoRhAACaUHnzAAABEgAQACcj5gQABLJNqyJHxrxqYPg=" />
                <t:Name>EnterpriseVaultSettings.txt</t:Name>
                <t:Content>UwBpAHQAZQBFAG4AdAByAHkASQBkAD0AMQA1ADQAOQA2AEIAMwA0ADcAMgA3ADkAQQBBAEUANAAwAEIAQQA1AEIANgBGAEUANQAzADIAQwBGAEEARgA0ADAAMQBkADEAMAAwADAAMABlAHYAcwBlAHIAdgBlAHIAMQANAAoARABlAGYAYQB1AGwAdABEAG8AdQBiAGwAZQBDAGwAaQBjAGsAVgBpAGUAdwA9ADAADQAKAEQAZQBmAGEAdQBsAHQAVwBlAGIAQQBwAHAAVQBSAEwAPQBoAHQAdABwADoALwAvAGUAdgBzAGUAcgB2AGUAcgAxAC4AUwB0AHIAdQB0AHQAQQBuAGQAUABhAHIAawBlAHIALgBMAG8AYwBhAGwALwBFAG4AdABlAHIAcAByAGkAcwBlAFYAYQB1AGwAdAANAAoATwBXAEEAVwBlAGIAQQBwAHAAVQBSAEwAPQBoAHQAdABwADoALwAvAGUAdgBzAGUAcgB2AGUAcgAxAC4AUwB0AHIAdQB0AHQAQQBuAGQAUABhAHIAawBlAHIALgBMAG8AYwBhAGwALwBFAFYAQQBuAG8AbgANAAoATQBhAGkAbABiAG8AeABTAGUAcgB2AGUAcgA9AFMAQQBOAEQAUAAtAEUAWAAtADIADQAKAFMAeQBzAHQAZQBtAE0AYQBpAGwAYgBvAHgAPQBTAE0AVABQADoAZQB4ADIAbQBiADAAMQBAAFMAdAByAHUAdAB0AEEAbgBkAFAAYQByAGsAZQByAC4AYwBvAG0ADQAKAFUAcwBlAHIAcwBDAGEAbgBEAGUAbABlAHQAZQBJAHQAZQBtAHMAPQAwAA0ACgBTAGUAcgB2AGUAcgBWAGUAcgBzAGkAbwBuAD0AOQAuADAAMgANAAoATQBhAGkAbABiAG8AeABTAHQAYQB0AGUAPQAxAA0ACgBNAGEAaQBsAGIAbwB4AEQATgA9AC8AbwA9AHMAYQBuAGQAcABvAHIAZwAvAG8AdQA9AGUAeABjAGgAYQBuAGcAZQAgAGEAZABtAGkAbgBpAHMAdAByAGEAdABpAHYAZQAgAGcAcgBvAHUAcAAgACgAZgB5AGQAaQBiAG8AaABmADIAMwBzAHAAZABsAHQAKQAvAGMAbgA9AHIAZQBjAGkAcABpAGUAbgB0AHMALwBjAG4APQBkAC0AYQBuAGQAcgBlAHcAIAB0AGgAbwBtAGEAcwANAAoARABlAGYAYQB1AGwAdABBAHIAYwBoAGkAdgBlAEkAZAA9ADEARgBEAEIANwA2ADAAMgBBAEYAOQAyADYAQQA4ADQARgBCAEMANQAyADYAQQBCADUAQQA0ADkAOABEAEEAMABDADEAMQAxADAAMAAwADAAZQB2AHMAZQByAHYAZQByADEADQAKAFUAcwBlAEkAbgBhAGMAdABpAHYAaQB0AHkAUABlAHIAaQBvAGQAPQAxAA0ACgBVAHMAZQBRAHUAbwB0AGEATABpAG0AaQB0AD0AMAANAAoASQBuAGEAYwB0AGkAdgBpAHQAeQBQAGUAcgBpAG8AZABVAG4AaQB0AHMAPQAyAA0ACgBJAG4AYQBjAHQAaQB2AGkAdAB5AFAAZQByAGkAbwBkAD0ANgANAAoATQBpAG4AQQBnAGUAUABlAHIAaQBvAGQAVQBuAGkAdABzAD0AMQANAAoATQBpAG4AQQBnAGUAUABlAHIAaQBvAGQAPQAwAA0ACgBVAHMAZQBMAGEAcgBnAGUASQB0AGUAbQBzAFMAaQB6AGUAPQAwAA0ACgBMAGEAcgBnAGUASQB0AGUAbQBzAFMAaQB6AGUASwBCAD0AMQAwADIANAAwAA0ACgBBAHIAYwBoAGkAdgBlAE8AbgBsAHkAVwBpAHQAaABBAHQAdABhAGMAaAA9ADAADQAKAEEAcgBjAGgAaQB2AGUARABlAGwASQB0AGUAbQBzAEYAbwBsAGQAZQByAD0AMAANAAoAUABGAEkAbgBhAGMAdABpAHYAaQB0AHkAUABlAHIAaQBvAGQAVQBuAGkAdABzAD0AMgANAAoAUABGAEkAbgBhAGMAdABpAHYAaQB0AHkAUABlAHIAaQBvAGQAPQA2AA0ACgBQAEYATQBpAG4AQQBnAGUAUABlAHIAaQBvAGQAVQBuAGkAdABzAD0AMQANAAoAUABGAE0AaQBuAEEAZwBlAFAAZQByAGkAbwBkAD0AMgANAAoAUABGAFUAcwBlAEwAYQByAGcAZQBJAHQAZQBtAHMAUwBpAHoAZQA9ADAADQAKAFAARgBMAGEAcgBnAGUASQB0AGUAbQBzAFMAaQB6AGUASwBCAD0AMQAwADIANAAwAA0ACgBQAG8AbABpAGMAeQBFAG4AdAByAHkASQBkAD0AMQA4AEEAOAAzADgANABCAEYANwA1ADIAMgAxADQANABCADgAOQA4AEIAQQBGADIAMgBCADQAMQBBAEQANAA4AEYAMQBzADEAMAAwADAAMABlAHYAcwBlAHIAdgBlAHIAMQANAAoAUABTAFQAUABvAGwAaQBjAHkARQBuAHQAcgB5AEkAZAA9ADEAOAA5ADYARgBEAEIAQwBGAEQAOQAxADMAMQBCADQAMABCADQARABGADgAMQBCADgAMAAwADUARAAzADMARgBDADEAMAAxADIANwAwADAAZQB2AHMAZQByAHYAZQByADEADQAKAEQAZQBmAGEAdQBsAHQAUgBlAHQAZQBuAHQAaQBvAG4AQwBhAHQAZQBnAG8AcgB5AEkAZAA9ADEARABCADUAMwAwAEEANQA3ADQANgA5ADYAOQBDADQAMwA4ADYAMwBDAEYAOQAwADgAMQBGADIARQAwADUAMAAzADEAYgAxADAAMAAwADAAZQB2AHMAZQByAHYAZQByADEADQAKAFAAUwBUAEkAbQBwAG8AcgB0AEUAbgBhAGIAbABlAGQAPQAwAA0ACgBBAHIAYwBoAGkAdgBlAE0AYQBuAGEAZwBlAGQARgBvAGwAZABlAHIAcwA9ADAADQAKAE0AYQBuAGEAZwBlAGQARgBvAGwAZABlAHIASABhAG4AZABsAGkAbgBnAD0AMgANAAoAQQByAGMAaABpAHYAZQBTAGUAdAB0AGkAbgBnAHMATABvAGMAawBlAGQAPQAxAA0ACgBBAGQAZABTAGUAcgB2AGUAcgBUAG8ASQBuAHQAcgBhAE4AZQB0AFoAbwBuAGUAPQBlAHYAcwBlAHIAdgBlAHIAMQA7AGUAdgBzAGUAcgB2AGUAcgAxAC4AcwB0AHIAdQB0AHQAYQBuAGQAcABhAHIAawBlAHIALgBsAG8AYwBhAGwADQAKAEEAbABsAG8AdwBTAGMAcgBpAHAAdABQAHUAYgBsAGkAYwBGAG8AbABkAGUAcgBzAD0AMQANAAoAQQBsAGwAbwB3AFMAYwByAGkAcAB0AFMAaABhAHIAZQBkAEYAbwBsAGQAZQByAHMAPQAxAA0ACgBBAHIAYwBoAGkAdgBlAEIAdABuAFYAaQBzAGkAYgBsAGUAPQAwAA0ACgBBAHIAYwBoAGkAdgBlAEUAeABwAGwAbwByAGUAcgBCAHQAbgBWAGkAcwBpAGIAbABlAD0AMAANAAoAQwBhAG4AYwBlAGwAQgB0AG4AVgBpAHMAaQBiAGwAZQA9ADAADQAKAEQAZQBsAGUAdABlAEIAdABuAFYAaQBzAGkAYgBsAGUAPQAwAA0ACgBEAGUAcABsAG8AeQBGAG8AcgBtAHMATABvAGMAYQBsAGwAeQA9ADIADQAKAE0AYQByAGsAUABTAFQAcwA9ADEADQAKAE8AVgBFAG4AYQBiAGwAZQBkAD0AMAANAAoATwBWAFMAZQB0AHUAcABXAGkAegBhAHIAZAA9ADAADQAKAE8AVgBTAHQAYQByAHQARABvAHcAbgBsAG8AYQBkAEIAdABuAFYAaQBzAGkAYgBsAGUAPQAyAA0ACgBPAFYAUwB0AG8AcgBlAFMAaQB6AGUAPQAxADAAMgA0AA0ACgBPAFYAUwB0AG8AcgBlAFMAaQB6AGUAUABlAHIAYwBlAG4AdAA9ADAADQAKAFIAUABDAE8AdgBlAHIASABUAFQAUABQAHIAbwB4AHkAVQBSAEwAPQBoAHQAdABwADoALwAvAG8AdwBhAC4AcwB0AHIAdQB0AHQAYQBuAGQAcABhAHIAawBlAHIALgBjAG8AbQAvAEUAbgB0AGUAcgBwAHIAaQBzAGUAVgBhAHUAbAB0AA0ACgBSAFAAQwBPAHYAZQByAEgAVABUAFAAUgBlAHMAdAByAGkAYwB0AGkAbwBuAHMAPQAwAA0ACgBTAGUAYQByAGMAaABCAHQAbgBWAGkAcwBpAGIAbABlAD0AMAANAAoAVQBzAGUAUwBlAGwAZgBJAG4AcwB0AGEAbABsAEYAdQBuAGMAdAA9ADEADQAKAFYAVgBFAG4AYQBiAGwAZQBkAD0AMQANAAoATwBXAEEAMgAwADAAMwBBAHIAYwBoAGkAdgBlAEUAeABwAGwAbwByAGUAcgBGAHIAbwBtAEIAYQBzAGkAYwBOAGEAdgBiAGEAcgA9ADAADQAKAE8AVwBBADIAMAAwADMAQQByAGMAaABpAHYAZQBFAHgAcABsAG8AcgBlAHIARgByAG8AbQBQAHIAZQBtAGkAdQBtAE4AYQB2AGIAYQByAD0AMAANAAoATwBXAEEAMgAwADAAMwBBAHIAYwBoAGkAdgBlAEYAcgBvAG0AQwBvAG4AdABlAHgAdABNAGUAbgB1AD0AMAANAAoATwBXAEEAMgAwADAAMwBBAHIAYwBoAGkAdgBlAEYAcgBvAG0AVABvAG8AbABiAGEAcgA9ADAADQAKAE8AVwBBADIAMAAwADMAQwBhAG4AYwBlAGwARgByAG8AbQBDAG8AbgB0AGUAeAB0AE0AZQBuAHUAPQAwAA0ACgBPAFcAQQAyADAAMAAzAEMAYQBuAGMAZQBsAEYAcgBvAG0AVABvAG8AbABiAGEAcgA9ADAADQAKAE8AVwBBADIAMAAwADMARABlAGwAZQB0AGUARgByAG8AbQBDAG8AbgB0AGUAeAB0AE0AZQBuAHUAPQAwAA0ACgBPAFcAQQAyADAAMAAzAEQAZQBsAGUAdABlAEYAcgBvAG0AVABvAG8AbABiAGEAcgA9ADAADQAKAE8AVwBBADIAMAAwADMARABlAGwAZQB0AGUATQBvAGQAZQA9ADAADQAKAE8AVwBBADIAMAAwADMASABlAGwAcABGAHIAbwBtAFQAbwBvAGwAYgBhAHIAPQAwAA0ACgBPAFcAQQAyADAAMAAzAFMAZQBhAHIAYwBoAEYAcgBvAG0AQgBhAHMAaQBjAE4AYQB2AGIAYQByAD0AMAANAAoATwBXAEEAMgAwADAAMwBTAGUAYQByAGMAaABGAHIAbwBtAFAAcgBlAG0AaQB1AG0ATgBhAHYAYgBhAHIAPQAwAA0ACgBFAFYAUwBFAFIAVgBFAFIAUwA9AGUAdgBzAGUAcgB2AGUAcgAxAC4AUwB0AHIAdQB0AHQAQQBuAGQAUABhAHIAawBlAHIALgBMAG8AYwBhAGwAOwBTAEEATgBEAFAALQBFAFYALQAxADsADQAKAE8AVgBNAGUAcwBzAGEAZwBlAEMAbABhAHMAcwBJAG4AYwBsAHUAZABlAD0ASQBQAE0ALgBQAG8AcwB0ACoAOwBJAFAATQAuAE4AbwB0AGUAKgA7AEkAUABNAC4ARABvAGMAdQBtAGUAbgB0ACoAOwA=</t:Content>
              </t:FileAttachment>
            </m:Attachments>
          </m:GetAttachmentResponseMessage>
        </m:ResponseMessages>
      </m:GetAttachmentResponse>
    </s:Body>
  </s:Envelope>
</Trace>

06/02/2015 09:06:19 [3460,16] [EWSBase::GetEVHiddenMessageId] Retrieved settings
06/02/2015 09:06:19 [3460,16] [EVContext::LoadHiddenSettings] Retrieved hidden message from web services
06/02/2015 09:06:19 [3460,16] [EVContext::LoadHiddenSettings] Settings from hidden message:
06/02/2015 09:06:19 [3460,16] [EVContext::LoadHiddenSettings]     SiteEntryId=15496B347279AAE40BA5B6FE532CFAF401d10000evserver1
06/02/2015 09:06:19 [3460,16] [EVContext::LoadHiddenSettings]     DefaultDoubleClickView=0
06/02/2015 09:06:19 [3460,16] [EVContext::LoadHiddenSettings]     DefaultWebAppURL=http://evserver1.MyCompany.Local/EnterpriseVault
06/02/2015 09:06:19 [3460,16] [EVContext::LoadHiddenSettings]     OWAWebAppURL=http://evserver1.MyCompany.Local/EVAnon
06/02/2015 09:06:19 [3460,16] [EVContext::LoadHiddenSettings]     MailboxServer=MYCOMPANY-EX-2
06/02/2015 09:06:19 [3460,16] [EVContext::LoadHiddenSettings]     SystemMailbox=SMTP:ex2mb01@MyCompany.com
06/02/2015 09:06:19 [3460,16] [EVContext::LoadHiddenSettings]     UsersCanDeleteItems=0
06/02/2015 09:06:19 [3460,16] [EVContext::LoadHiddenSettings]     ServerVersion=9.02
06/02/2015 09:06:19 [3460,16] [EVContext::LoadHiddenSettings]     MailboxState=1
06/02/2015 09:06:19 [3460,16] [EVContext::LoadHiddenSettings]     MailboxDN=/o=mycompanyorg/ou=exchange administrative group (fydibohf23spdlt)/cn=recipients/cn=d-test user
06/02/2015 09:06:19 [3460,16] [EVContext::LoadHiddenSettings]     DefaultArchiveId=1FDB7602AF926A84FBC526AB5A498DA0C1110000evserver1
06/02/2015 09:06:19 [3460,16] [EVContext::LoadHiddenSettings]     UseInactivityPeriod=1
06/02/2015 09:06:19 [3460,16] [EVContext::LoadHiddenSettings]     UseQuotaLimit=0
06/02/2015 09:06:19 [3460,16] [EVContext::LoadHiddenSettings]     InactivityPeriodUnits=2
06/02/2015 09:06:19 [3460,16] [EVContext::LoadHiddenSettings]     InactivityPeriod=6
06/02/2015 09:06:19 [3460,16] [EVContext::LoadHiddenSettings]     MinAgePeriodUnits=1
06/02/2015 09:06:19 [3460,16] [EVContext::LoadHiddenSettings]     MinAgePeriod=0
06/02/2015 09:06:19 [3460,16] [EVContext::LoadHiddenSettings]     UseLargeItemsSize=0
06/02/2015 09:06:19 [3460,16] [EVContext::LoadHiddenSettings]     LargeItemsSizeKB=10240
06/02/2015 09:06:19 [3460,16] [EVContext::LoadHiddenSettings]     ArchiveOnlyWithAttach=0
06/02/2015 09:06:19 [3460,16] [EVContext::LoadHiddenSettings]     ArchiveDelItemsFolder=0
06/02/2015 09:06:19 [3460,16] [EVContext::LoadHiddenSettings]     PFInactivityPeriodUnits=2
06/02/2015 09:06:19 [3460,16] [EVContext::LoadHiddenSettings]     PFInactivityPeriod=6
06/02/2015 09:06:19 [3460,16] [EVContext::LoadHiddenSettings]     PFMinAgePeriodUnits=1
06/02/2015 09:06:19 [3460,16] [EVContext::LoadHiddenSettings]     PFMinAgePeriod=2
06/02/2015 09:06:19 [3460,16] [EVContext::LoadHiddenSettings]     PFUseLargeItemsSize=0
06/02/2015 09:06:19 [3460,16] [EVContext::LoadHiddenSettings]     PFLargeItemsSizeKB=10240
06/02/2015 09:06:19 [3460,16] [EVContext::LoadHiddenSettings]     PolicyEntryId=18A8384BF7522144B898BAF22B41AD48F1s10000evserver1
06/02/2015 09:06:19 [3460,16] [EVContext::LoadHiddenSettings]     PSTPolicyEntryId=1896FDBCFD9131B40B4DF81B8005D33FC1012700evserver1
06/02/2015 09:06:19 [3460,16] [EVContext::LoadHiddenSettings]     DefaultRetentionCategoryId=1DB530A5746969C43863CF9081F2E05031b10000evserver1
06/02/2015 09:06:19 [3460,16] [EVContext::LoadHiddenSettings]     PSTImportEnabled=0
06/02/2015 09:06:19 [3460,16] [EVContext::LoadHiddenSettings]     ArchiveManagedFolders=0
06/02/2015 09:06:19 [3460,16] [EVContext::LoadHiddenSettings]     ManagedFolderHandling=2
06/02/2015 09:06:19 [3460,16] [EVContext::LoadHiddenSettings]     ArchiveSettingsLocked=1
06/02/2015 09:06:19 [3460,16] [EVContext::LoadHiddenSettings]     AddServerToIntraNetZone=evserver1;evserver1.mycompany.local
06/02/2015 09:06:19 [3460,16] [EVContext::LoadHiddenSettings]     AllowScriptPublicFolders=1
06/02/2015 09:06:19 [3460,16] [EVContext::LoadHiddenSettings]     AllowScriptSharedFolders=1
06/02/2015 09:06:19 [3460,16] [EVContext::LoadHiddenSettings]     ArchiveBtnVisible=0
06/02/2015 09:06:19 [3460,16] [EVContext::LoadHiddenSettings]     ArchiveExplorerBtnVisible=0
06/02/2015 09:06:19 [3460,16] [EVContext::LoadHiddenSettings]     CancelBtnVisible=0
06/02/2015 09:06:19 [3460,16] [EVContext::LoadHiddenSettings]     DeleteBtnVisible=0
06/02/2015 09:06:19 [3460,16] [EVContext::LoadHiddenSettings]     DeployFormsLocally=2
06/02/2015 09:06:19 [3460,16] [EVContext::LoadHiddenSettings]     MarkPSTs=1
06/02/2015 09:06:19 [3460,16] [EVContext::LoadHiddenSettings]     OVEnabled=0
06/02/2015 09:06:19 [3460,16] [EVContext::LoadHiddenSettings]     OVSetupWizard=0
06/02/2015 09:06:19 [3460,16] [EVContext::LoadHiddenSettings]     OVStartDownloadBtnVisible=2
06/02/2015 09:06:19 [3460,16] [EVContext::LoadHiddenSettings]     OVStoreSize=1024
06/02/2015 09:06:19 [3460,16] [EVContext::LoadHiddenSettings]     OVStoreSizePercent=0
06/02/2015 09:06:19 [3460,16] [EVContext::LoadHiddenSettings]     RPCOverHTTPProxyURL=http://owa.mycompany.com/EnterpriseVault
06/02/2015 09:06:19 [3460,16] [EVContext::LoadHiddenSettings]     RPCOverHTTPRestrictions=0
06/02/2015 09:06:19 [3460,16] [EVContext::LoadHiddenSettings]     SearchBtnVisible=0
06/02/2015 09:06:19 [3460,16] [EVContext::LoadHiddenSettings]     UseSelfInstallFunct=1
06/02/2015 09:06:19 [3460,16] [EVContext::LoadHiddenSettings]     VVEnabled=1
06/02/2015 09:06:19 [3460,16] [EVContext::LoadHiddenSettings]     OWA2003ArchiveExplorerFromBasicNavbar=0
06/02/2015 09:06:19 [3460,16] [EVContext::LoadHiddenSettings]     OWA2003ArchiveExplorerFromPremiumNavbar=0
06/02/2015 09:06:19 [3460,16] [EVContext::LoadHiddenSettings]     OWA2003ArchiveFromContextMenu=0
06/02/2015 09:06:19 [3460,16] [EVContext::LoadHiddenSettings]     OWA2003ArchiveFromToolbar=0
06/02/2015 09:06:19 [3460,16] [EVContext::LoadHiddenSettings]     OWA2003CancelFromContextMenu=0
06/02/2015 09:06:19 [3460,16] [EVContext::LoadHiddenSettings]     OWA2003CancelFromToolbar=0
06/02/2015 09:06:19 [3460,16] [EVContext::LoadHiddenSettings]     OWA2003DeleteFromContextMenu=0
06/02/2015 09:06:19 [3460,16] [EVContext::LoadHiddenSettings]     OWA2003DeleteFromToolbar=0
06/02/2015 09:06:19 [3460,16] [EVContext::LoadHiddenSettings]     OWA2003DeleteMode=0
06/02/2015 09:06:19 [3460,16] [EVContext::LoadHiddenSettings]     OWA2003HelpFromToolbar=0
06/02/2015 09:06:19 [3460,16] [EVContext::LoadHiddenSettings]     OWA2003SearchFromBasicNavbar=0
06/02/2015 09:06:19 [3460,16] [EVContext::LoadHiddenSettings]     OWA2003SearchFromPremiumNavbar=0
06/02/2015 09:06:19 [3460,16] [EVContext::LoadHiddenSettings]     EVSERVERS=evserver1.MyCompany.Local;MYCOMPANY-EV-1;
06/02/2015 09:06:19 [3460,16] [EVContext::LoadHiddenSettings]     OVMessageClassInclude=IPM.Post*;IPM.Note*;IPM.Document*;
06/02/2015 09:06:19 [3460,16] [EVContext::LoadHiddenSettings] Finished loading hidden settings
06/02/2015 09:06:19 [3460,16] [EVContext::LogHiddenSettings] Mailbox Settings loaded at: 06 February 2015, 09:06:19
06/02/2015 09:06:19 [3460,16] [EVContext::LogHiddenSettings]     Enabled for archiving: Enabled
06/02/2015 09:06:19 [3460,16] [EVContext::LogHiddenSettings]     Web App Url: http://evserver1.MyCompany.Local/EVAnon
06/02/2015 09:06:19 [3460,16] [EVContext::LogHiddenSettings]     Default Web App Url: http://evserver1.MyCompany.Local/EnterpriseVault
06/02/2015 09:06:19 [3460,16] [EVContext::LogHiddenSettings]     External Web App Url: <https>/enterprisevault
06/02/2015 09:06:19 [3460,16] [EVContext::LogHiddenSettings]     Mailbox DN: /o=mycompanyorg/ou=exchange administrative group (fydibohf23spdlt)/cn=recipients/cn=d-test user
06/02/2015 09:06:19 [3460,16] [EVContext::LogHiddenSettings]     Default Archive Id: 1FDB7602AF926A84FBC526AB5A498DA0C1110000evserver1
06/02/2015 09:06:19 [3460,16] [EVContext::LogHiddenSettings]     Default Ret Cat Id: 1DB530A5746969C43863CF9081F2E05031b10000evserver1
06/02/2015 09:06:19 [3460,16] [EVContext::LogHiddenSettings]     Site Entry Id: 15496B347279AAE40BA5B6FE532CFAF401d10000evserver1
06/02/2015 09:06:19 [3460,16] [EVContext::LogHiddenSettings]     Users Can Delete Items: False
06/02/2015 09:06:19 [3460,16] [EVContext::LogHiddenSettings]     EV Server Version: 9.02
06/02/2015 09:06:19 [3460,16] [EVContext::LogHiddenSettings]     View Mode: OWA
06/02/2015 09:06:19 [3460,16] [EVContext::LogHiddenSettings]     Open Mode: ArchivedItem
06/02/2015 09:06:19 [3460,16] [EVContext::LogHiddenSettings]     Reply Mode: ArchivedItem
06/02/2015 09:06:19 [3460,16] [EVContext::LogHiddenSettings]     Reply to All Mode: ArchivedItem
06/02/2015 09:06:19 [3460,16] [EVContext::LogHiddenSettings]     Forward Mode: ArchivedItem
06/02/2015 09:06:19 [3460,16] [EVContext::LogHiddenSettings]     Delete Mode: ShortcutOnly
06/02/2015 09:06:19 [3460,16] [EVContext::LogHiddenSettings]     Archive on Toolbar: False
06/02/2015 09:06:19 [3460,16] [EVContext::LogHiddenSettings]     Restore on Toolbar: True
06/02/2015 09:06:19 [3460,16] [EVContext::LogHiddenSettings]     Cancel on Toolbar: False
06/02/2015 09:06:19 [3460,16] [EVContext::LogHiddenSettings]     Delete on Toolbar: False
06/02/2015 09:06:19 [3460,16] [EVContext::LogHiddenSettings]     Help on Toolbar: False
06/02/2015 09:06:19 [3460,16] [EVContext::LogHiddenSettings]     Archive on Context Menu: False
06/02/2015 09:06:19 [3460,16] [EVContext::LogHiddenSettings]     Restore on Context Menu: True
06/02/2015 09:06:19 [3460,16] [EVContext::LogHiddenSettings]     Cancel on Context Menu: False
06/02/2015 09:06:19 [3460,16] [EVContext::LogHiddenSettings]     Delete on Context Menu: False
06/02/2015 09:06:19 [3460,16] [EVContext::LogHiddenSettings]     Archive Explorer in Light Client: False
06/02/2015 09:06:19 [3460,16] [EVContext::LogHiddenSettings]     Archive Explorer in Premium Client: False
06/02/2015 09:06:19 [3460,16] [EVContext::LogHiddenSettings]     Search in Light Client: False
06/02/2015 09:06:19 [3460,16] [EVContext::LogHiddenSettings]     Search in Premium Client: False
06/02/2015 09:06:19 [3460,16] [EVContext::LogHiddenSettings]     Browser Search Link: True
06/02/2015 09:06:19 [3460,16] [EVContext::LogHiddenSettings]     Archive Managed Folders: False
06/02/2015 09:06:19 [3460,16] [EVContext::LogHiddenSettings]     Managed Folder Handling: Managed
06/02/2015 09:06:19 [3460,16] [EVContext::LogHiddenSettings]     Archive function in Light Client: Basic
06/02/2015 09:06:19 [3460,16] [EVContext::LogHiddenSettings]     Archive function in Premium Client: Enhanced
06/02/2015 09:06:19 [3460,16] [EVContext::LogHiddenSettings]     Archive Confirmation (basic function): True
06/02/2015 09:06:19 [3460,16] [EVContext::LogHiddenSettings]     Archive Sub Folders (basic function): False
06/02/2015 09:06:19 [3460,16] [EVContext::LogHiddenSettings]     Restore function in Light Client: Basic
06/02/2015 09:06:19 [3460,16] [EVContext::LogHiddenSettings]     Restore function in Premium Client: Enhanced
06/02/2015 09:06:19 [3460,16] [EVContext::LogHiddenSettings]     Delete Shortcut on restore (basic function): True
06/02/2015 09:06:19 [3460,16] [EVContext::LogHiddenSettings]     Restore confirmation (basic function): True
06/02/2015 09:06:19 [3460,16] [EVContext::LogHiddenSettings]     Restore to restored items folder (basic function): False
06/02/2015 09:06:19 [3460,16] [EVContext::LogHiddenSettings]     Hide OWA Archive Policy: False
06/02/2015 09:06:19 [3460,16] [EVContext::Initialise] EVContext intialised at 06/02/2015 09:06:19
06/02/2015 09:06:19 [3460,16] [EVContext::Initialise] Hidden settings loaded at 06/02/2015 09:06:19
06/02/2015 09:06:19 [3460,16] [EVContext::IsValidBrowser] Checking browser...
06/02/2015 09:06:19 [3460,16] [EVContext::IsValidBrowser] User agent: Mozilla/5.0 (Windows NT 6.3; WOW64; rv:35.0) Gecko/20100101 Firefox/35.0
06/02/2015 09:06:19 [3460,16] [EVContext::IsValidBrowser] Checking for MSIE in user agent
06/02/2015 09:06:19 [3460,16] [EVContext::IsValidBrowser] Returning: False
06/02/2015 09:06:19 [3460,16] [ImpersonationManager:StopImpersonation] Stopped impersonation
06/02/2015 09:06:19 [3460,16] Request processing finished
06/02/2015 09:06:22 [3460,16] #############################################################
06/02/2015 09:06:22 [3460,16] Request processing started
06/02/2015 09:06:22 [3460,16] Url: https://outlook.mycompany.local/owa/forms/premium/StartPage.aspx
06/02/2015 09:06:22 [3460,16] RawUrl: /owa/
06/02/2015 09:06:22 [3460,16] Query String parameters:
06/02/2015 09:06:22 [3460,16] Form: 
06/02/2015 09:06:22 [3460,16] OWA Session details
06/02/2015 09:06:22 [3460,16]     User agent: Mozilla/5.0 (Windows NT 6.3; WOW64; rv:35.0) Gecko/20100101 Firefox/35.0
06/02/2015 09:06:22 [3460,16]     Authentication type: Basic
06/02/2015 09:06:22 [3460,16]     Authenticated user: MYCOMPANY\test.user
06/02/2015 09:06:22 [3460,16]     Client IP Address: 10.0.126.38
06/02/2015 09:06:22 [3460,16]     Server IP Address: 10.0.126.71
06/02/2015 09:06:22 [3460,16]     Host: outlook.mycompany.local
06/02/2015 09:06:22 [3460,16] Primary SMTP Address: Test.User@MyCompany.com
06/02/2015 09:06:22 [3460,16] EV Extensions DLL version: 9.0.2.0
06/02/2015 09:06:22 [3460,16] [ImpersonationManager::StartImpersonation] Entry: Current user: NT AUTHORITY\SYSTEM
06/02/2015 09:06:22 [3460,16] [ImpersonationManager::StartImpersonation] Entry: Impersonation Level: None
06/02/2015 09:06:22 [3460,16] [ImpersonationManager::StartImpersonation] Impersonating logged on user
06/02/2015 09:06:22 [3460,16] [ImpersonationManager::StartImpersonation] Exit: Current user: MYCOMPANY\test.user
06/02/2015 09:06:22 [3460,16] [ImpersonationManager::StartImpersonation] Exit: Impersonation Level: Impersonation
06/02/2015 09:06:22 [3460,16] [EVContext::Initialise] EVContext intialised at 06/02/2015 09:06:19
06/02/2015 09:06:22 [3460,16] [EVContext::Initialise] Hidden settings loaded at 06/02/2015 09:06:19
06/02/2015 09:06:22 [3460,16] [EVContext::IsValidBrowser] Returning: False
06/02/2015 09:06:22 [3460,16] [ImpersonationManager:StopImpersonation] Stopped impersonation
06/02/2015 09:06:22 [3460,16] Request processing finished
2015-02-06 09:06:23 [3460,16] #############################################################
2015-02-06 09:06:23 [3460,16] Request processing started
2015-02-06 09:06:23 [3460,16] Url: https://outlook.mycompany.local/owa/ev.owa?oeh=1&ns=PendingRequest&ev=FinishNotificationRequest&Fn=1&UA=0&cpc=61195;C0:0;C1:0;C2:0;C3:0;C4:0;C5:0;C6:0;C7:0;C8:0;C9:0;C10:0&pfmk=M35:1423213738621;M6:1423213738698;M2:1423213738699;M3:1423213738708;M39:1423213738080;M4:1423213738736
2015-02-06 09:06:23 [3460,16] RawUrl: /owa/ev.owa?oeh=1&ns=PendingRequest&ev=FinishNotificationRequest&Fn=1&UA=0&cpc=61195;C0:0;C1:0;C2:0;C3:0;C4:0;C5:0;C6:0;C7:0;C8:0;C9:0;C10:0&pfmk=M35:1423213738621;M6:1423213738698;M2:1423213738699;M3:1423213738708;M39:1423213738080;M4:1423213738736
2015-02-06 09:06:23 [3460,16] Query String parameters:
2015-02-06 09:06:23 [3460,16]     oeh: 1
2015-02-06 09:06:23 [3460,16]     ns: PendingRequest
2015-02-06 09:06:23 [3460,16]     ev: FinishNotificationRequest
2015-02-06 09:06:23 [3460,16]     Fn: 1
2015-02-06 09:06:23 [3460,16]     UA: 0
2015-02-06 09:06:23 [3460,16]     cpc: 61195;C0:0;C1:0;C2:0;C3:0;C4:0;C5:0;C6:0;C7:0;C8:0;C9:0;C10:0
2015-02-06 09:06:23 [3460,16]     pfmk: M35:1423213738621;M6:1423213738698;M2:1423213738699;M3:1423213738708;M39:1423213738080;M4:1423213738736
2015-02-06 09:06:23 [3460,16] Form: 
2015-02-06 09:06:23 [3460,16] OWA Session details
2015-02-06 09:06:23 [3460,16]     User agent: Mozilla/5.0 (Windows NT 6.3; WOW64; rv:35.0) Gecko/20100101 Firefox/35.0
2015-02-06 09:06:23 [3460,16]     Authentication type: Basic
2015-02-06 09:06:23 [3460,16]     Authenticated user: MYCOMPANY\test.user
2015-02-06 09:06:23 [3460,16]     Client IP Address: 10.0.126.38
2015-02-06 09:06:23 [3460,16]     Server IP Address: 10.0.126.71
2015-02-06 09:06:23 [3460,16]     Host: outlook.mycompany.local
2015-02-06 09:06:23 [3460,16] Primary SMTP Address: Test.User@MyCompany.com
2015-02-06 09:06:23 [3460,16] EV Extensions DLL version: 9.0.2.0
2015-02-06 09:06:23 [3460,16] [ImpersonationManager::StartImpersonation] Entry: Current user: NT AUTHORITY\SYSTEM
2015-02-06 09:06:23 [3460,16] [ImpersonationManager::StartImpersonation] Entry: Impersonation Level: None
2015-02-06 09:06:23 [3460,16] [ImpersonationManager::StartImpersonation] Impersonating logged on user
2015-02-06 09:06:23 [3460,16] [ImpersonationManager::StartImpersonation] Exit: Current user: MYCOMPANY\test.user
2015-02-06 09:06:23 [3460,16] [ImpersonationManager::StartImpersonation] Exit: Impersonation Level: Impersonation
2015-02-06 09:06:23 [3460,16] [EVContext::Initialise] EVContext intialised at 2015-02-06 09:06:19
2015-02-06 09:06:23 [3460,16] [EVContext::Initialise] Hidden settings loaded at 2015-02-06 09:06:19
2015-02-06 09:06:23 [3460,16] [EVContext::IsValidBrowser] Returning: False
2015-02-06 09:06:23 [3460,16] [ImpersonationManager:StopImpersonation] Stopped impersonation
2015-02-06 09:06:23 [3460,16] Request processing finished
2015-02-06 09:06:23 [3460,16] #############################################################
2015-02-06 09:06:23 [3460,16] Request processing started
2015-02-06 09:06:23 [3460,16] Url: https://outlook.mycompany.local/owa/ev.owa?oeh=1&ns=PendingRequest&ev=FinishNotificationRequest&Fn=1&UA=0&cpc=61195;C0:0;C1:0;C2:0;C3:0;C4:0;C5:0;C6:0;C7:0;C8:0;C9:0;C10:0&pfmk=M35:1423213738621;M6:1423213738698;M2:1423213738699;M3:1423213738708;M39:1423213738080;M4:1423213738736
2015-02-06 09:06:23 [3460,16] RawUrl: /owa/ev.owa?oeh=1&ns=PendingRequest&ev=FinishNotificationRequest&Fn=1&UA=0&cpc=61195;C0:0;C1:0;C2:0;C3:0;C4:0;C5:0;C6:0;C7:0;C8:0;C9:0;C10:0&pfmk=M35:1423213738621;M6:1423213738698;M2:1423213738699;M3:1423213738708;M39:1423213738080;M4:1423213738736
2015-02-06 09:06:23 [3460,16] Query String parameters:
2015-02-06 09:06:23 [3460,16]     oeh: 1
2015-02-06 09:06:23 [3460,16]     ns: PendingRequest
2015-02-06 09:06:23 [3460,16]     ev: FinishNotificationRequest
2015-02-06 09:06:23 [3460,16]     Fn: 1
2015-02-06 09:06:23 [3460,16]     UA: 0
2015-02-06 09:06:23 [3460,16]     cpc: 61195;C0:0;C1:0;C2:0;C3:0;C4:0;C5:0;C6:0;C7:0;C8:0;C9:0;C10:0
2015-02-06 09:06:23 [3460,16]     pfmk: M35:1423213738621;M6:1423213738698;M2:1423213738699;M3:1423213738708;M39:1423213738080;M4:1423213738736
2015-02-06 09:06:23 [3460,16] Form: 
2015-02-06 09:06:23 [3460,16] OWA Session details
2015-02-06 09:06:23 [3460,16]     User agent: Mozilla/5.0 (Windows NT 6.3; WOW64; rv:35.0) Gecko/20100101 Firefox/35.0
2015-02-06 09:06:23 [3460,16]     Authentication type: Basic
2015-02-06 09:06:23 [3460,16]     Authenticated user: MYCOMPANY\test.user
2015-02-06 09:06:23 [3460,16]     Client IP Address: 10.0.126.38
2015-02-06 09:06:23 [3460,16]     Server IP Address: 10.0.126.71
2015-02-06 09:06:23 [3460,16]     Host: outlook.mycompany.local
2015-02-06 09:06:23 [3460,16] Primary SMTP Address: Test.User@MyCompany.com
2015-02-06 09:06:23 [3460,16] EV Extensions DLL version: 9.0.2.0
2015-02-06 09:06:23 [3460,16] [ImpersonationManager::StartImpersonation] Entry: Current user: NT AUTHORITY\SYSTEM
2015-02-06 09:06:23 [3460,16] [ImpersonationManager::StartImpersonation] Entry: Impersonation Level: None
2015-02-06 09:06:23 [3460,16] [ImpersonationManager::StartImpersonation] Impersonating logged on user
2015-02-06 09:06:23 [3460,16] [ImpersonationManager::StartImpersonation] Exit: Current user: MYCOMPANY\test.user
2015-02-06 09:06:23 [3460,16] [ImpersonationManager::StartImpersonation] Exit: Impersonation Level: Impersonation
2015-02-06 09:06:23 [3460,16] [EVContext::Initialise] EVContext intialised at 2015-02-06 09:06:19
2015-02-06 09:06:23 [3460,16] [EVContext::Initialise] Hidden settings loaded at 2015-02-06 09:06:19
2015-02-06 09:06:23 [3460,16] [EVContext::IsValidBrowser] Returning: False
2015-02-06 09:06:23 [3460,16] [ImpersonationManager:StopImpersonation] Stopped impersonation
2015-02-06 09:06:23 [3460,16] Request processing finished
2015-02-06 09:06:23 [3460,15] #############################################################
2015-02-06 09:06:23 [3460,15] Request processing started
2015-02-06 09:06:23 [3460,15] Url: https://outlook.mycompany.local/owa/ev.owa?UA=0&oeh=1&ns=PendingRequest&ev=PendingNotificationRequest&canary=uIKX4SAqs0i6y8dUSp7EmtnBz3aDFdIIiKxDLWhCoVHKbA4rhjOXo_SAIHkYELYjELcSSsBj3eU.n=i5tcpp3q
2015-02-06 09:06:23 [3460,15] RawUrl: /owa/ev.owa?UA=0&oeh=1&ns=PendingRequest&ev=PendingNotificationRequest&canary=uIKX4SAqs0i6y8dUSp7EmtnBz3aDFdIIiKxDLWhCoVHKbA4rhjOXo_SAIHkYELYjELcSSsBj3eU.n=i5tcpp3q
2015-02-06 09:06:23 [3460,15] Query String parameters:
2015-02-06 09:06:23 [3460,15]     UA: 0
2015-02-06 09:06:23 [3460,15]     oeh: 1
2015-02-06 09:06:23 [3460,15]     ns: PendingRequest
2015-02-06 09:06:23 [3460,15]     ev: PendingNotificationRequest
2015-02-06 09:06:23 [3460,15]     canary: uIKX4SAqs0i6y8dUSp7EmtnBz3aDFdIIiKxDLWhCoVHKbA4rhjOXo_SAIHkYELYjELcSSsBj3eU.n=i5tcpp3q
2015-02-06 09:06:23 [3460,15] Form: 
2015-02-06 09:06:23 [3460,15] OWA Session details
2015-02-06 09:06:23 [3460,15]     User agent: Mozilla/5.0 (Windows NT 6.3; WOW64; rv:35.0) Gecko/20100101 Firefox/35.0
2015-02-06 09:06:23 [3460,15]     Authentication type: Basic
2015-02-06 09:06:23 [3460,15]     Authenticated user: MYCOMPANY\test.user
2015-02-06 09:06:23 [3460,15]     Client IP Address: 10.0.126.38
2015-02-06 09:06:23 [3460,15]     Server IP Address: 10.0.126.71
2015-02-06 09:06:23 [3460,15]     Host: outlook.mycompany.local
2015-02-06 09:06:23 [3460,15] Primary SMTP Address: Test.User@MyCompany.com
2015-02-06 09:06:23 [3460,15] EV Extensions DLL version: 9.0.2.0
2015-02-06 09:06:23 [3460,15] [ImpersonationManager::StartImpersonation] Entry: Current user: NT AUTHORITY\SYSTEM
2015-02-06 09:06:23 [3460,15] [ImpersonationManager::StartImpersonation] Entry: Impersonation Level: None
2015-02-06 09:06:23 [3460,15] [ImpersonationManager::StartImpersonation] Impersonating logged on user
2015-02-06 09:06:23 [3460,15] [ImpersonationManager::StartImpersonation] Exit: Current user: MYCOMPANY\test.user
2015-02-06 09:06:23 [3460,15] [ImpersonationManager::StartImpersonation] Exit: Impersonation Level: Impersonation
2015-02-06 09:06:23 [3460,15] [EVContext::Initialise] EVContext intialised at 2015-02-06 09:06:19
2015-02-06 09:06:23 [3460,15] [EVContext::Initialise] Hidden settings loaded at 2015-02-06 09:06:19
2015-02-06 09:06:23 [3460,15] [EVContext::IsValidBrowser] Returning: False
2015-02-06 09:06:23 [3460,15] [ImpersonationManager:StopImpersonation] Stopped impersonation
2015-02-06 09:06:23 [3460,15] Request processing finished
2015-02-06 09:06:23 [3460,15] #############################################################
2015-02-06 09:06:23 [3460,15] Request processing started
2015-02-06 09:06:23 [3460,15] Url: https://outlook.mycompany.local/owa/ev.owa?oeh=1&ns=ClientCache&ev=Get
2015-02-06 09:06:23 [3460,15] RawUrl: /owa/ev.owa?oeh=1&ns=ClientCache&ev=Get
2015-02-06 09:06:23 [3460,15] Query String parameters:
2015-02-06 09:06:23 [3460,15]     oeh: 1
2015-02-06 09:06:23 [3460,15]     ns: ClientCache
2015-02-06 09:06:23 [3460,15]     ev: Get
2015-02-06 09:06:23 [3460,15] Form: 
2015-02-06 09:06:23 [3460,15] OWA Session details
2015-02-06 09:06:23 [3460,15]     User agent: Mozilla/5.0 (Windows NT 6.3; WOW64; rv:35.0) Gecko/20100101 Firefox/35.0
2015-02-06 09:06:23 [3460,15]     Authentication type: Basic
2015-02-06 09:06:23 [3460,15]     Authenticated user: MYCOMPANY\test.user
2015-02-06 09:06:23 [3460,15]     Client IP Address: 10.0.126.38
2015-02-06 09:06:23 [3460,15]     Server IP Address: 10.0.126.71
2015-02-06 09:06:23 [3460,15]     Host: outlook.mycompany.local
2015-02-06 09:06:23 [3460,15] Primary SMTP Address: Test.user@MyCompany.com
2015-02-06 09:06:23 [3460,15] EV Extensions DLL version: 9.0.2.0
2015-02-06 09:06:23 [3460,15] [ImpersonationManager::StartImpersonation] Entry: Current user: NT AUTHORITY\SYSTEM
2015-02-06 09:06:23 [3460,15] [ImpersonationManager::StartImpersonation] Entry: Impersonation Level: None
2015-02-06 09:06:23 [3460,15] [ImpersonationManager::StartImpersonation] Impersonating logged on user
2015-02-06 09:06:23 [3460,15] [ImpersonationManager::StartImpersonation] Exit: Current user: MYCOMPANY\test.user
2015-02-06 09:06:23 [3460,15] [ImpersonationManager::StartImpersonation] Exit: Impersonation Level: Impersonation
2015-02-06 09:06:23 [3460,15] [EVContext::Initialise] EVContext intialised at 2015-02-06 09:06:19
2015-02-06 09:06:23 [3460,15] [EVContext::Initialise] Hidden settings loaded at 2015-02-06 09:06:19
2015-02-06 09:06:23 [3460,15] [EVContext::IsValidBrowser] Returning: False
2015-02-06 09:06:23 [3460,15] [ImpersonationManager:StopImpersonation] Stopped impersonation
2015-02-06 09:06:23 [3460,15] Request processing finished
2015-02-06 09:06:23 [3460,15] #############################################################
2015-02-06 09:06:23 [3460,15] Request processing started
2015-02-06 09:06:23 [3460,15] Url: https://outlook.mycompany.local/owa/ev.owa?oeh=1&ns=ClientCache&ev=Get
2015-02-06 09:06:23 [3460,15] RawUrl: /owa/ev.owa?oeh=1&ns=ClientCache&ev=Get
2015-02-06 09:06:23 [3460,15] Query String parameters:
2015-02-06 09:06:23 [3460,15]     oeh: 1
2015-02-06 09:06:23 [3460,15]     ns: ClientCache
2015-02-06 09:06:23 [3460,15]     ev: Get
2015-02-06 09:06:23 [3460,15] Form: 
2015-02-06 09:06:23 [3460,15] OWA Session details
2015-02-06 09:06:23 [3460,15]     User agent: Mozilla/5.0 (Windows NT 6.3; WOW64; rv:35.0) Gecko/20100101 Firefox/35.0
2015-02-06 09:06:23 [3460,15]     Authentication type: Basic
2015-02-06 09:06:23 [3460,15]     Authenticated user: MYCOMPANY\test.user
2015-02-06 09:06:23 [3460,15]     Client IP Address: 10.0.126.38
2015-02-06 09:06:23 [3460,15]     Server IP Address: 10.0.126.71
2015-02-06 09:06:23 [3460,15]     Host: outlook.mycompany.local
2015-02-06 09:06:23 [3460,15] Primary SMTP Address: Test.User@MyCompany.com
2015-02-06 09:06:23 [3460,15] EV Extensions DLL version: 9.0.2.0
2015-02-06 09:06:23 [3460,15] [ImpersonationManager::StartImpersonation] Entry: Current user: NT AUTHORITY\SYSTEM
2015-02-06 09:06:23 [3460,15] [ImpersonationManager::StartImpersonation] Entry: Impersonation Level: None
2015-02-06 09:06:23 [3460,15] [ImpersonationManager::StartImpersonation] Impersonating logged on user
2015-02-06 09:06:23 [3460,15] [ImpersonationManager::StartImpersonation] Exit: Current user: MYCOMPANY\test.user
2015-02-06 09:06:23 [3460,15] [ImpersonationManager::StartImpersonation] Exit: Impersonation Level: Impersonation
2015-02-06 09:06:23 [3460,15] [EVContext::Initialise] EVContext intialised at 2015-02-06 09:06:19
2015-02-06 09:06:23 [3460,15] [EVContext::Initialise] Hidden settings loaded at 2015-02-06 09:06:19
2015-02-06 09:06:23 [3460,15] [EVContext::IsValidBrowser] Returning: False
2015-02-06 09:06:23 [3460,15] [ImpersonationManager:StopImpersonation] Stopped impersonation
2015-02-06 09:06:23 [3460,15] Request processing finished
2015-02-06 09:06:24 [3460,15] #############################################################
2015-02-06 09:06:24 [3460,15] Request processing started
2015-02-06 09:06:24 [3460,15] Url: https://outlook.mycompany.local/owa/ev.owa?oeh=1&ns=MsgVLV2&ev=Preread
2015-02-06 09:06:24 [3460,15] RawUrl: /owa/ev.owa?oeh=1&ns=MsgVLV2&ev=Preread
2015-02-06 09:06:24 [3460,15] Query String parameters:
2015-02-06 09:06:24 [3460,15]     oeh: 1
2015-02-06 09:06:24 [3460,15]     ns: MsgVLV2
2015-02-06 09:06:24 [3460,15]     ev: Preread
2015-02-06 09:06:24 [3460,15] Form: 
2015-02-06 09:06:24 [3460,15] OWA Session details
2015-02-06 09:06:24 [3460,15]     User agent: Mozilla/5.0 (Windows NT 6.3; WOW64; rv:35.0) Gecko/20100101 Firefox/35.0
2015-02-06 09:06:24 [3460,15]     Authentication type: Basic
2015-02-06 09:06:24 [3460,15]     Authenticated user: MYCOMPANY\test.user
2015-02-06 09:06:24 [3460,15]     Client IP Address: 10.0.126.38
2015-02-06 09:06:24 [3460,15]     Server IP Address: 10.0.126.71
2015-02-06 09:06:24 [3460,15]     Host: outlook.mycompany.local
2015-02-06 09:06:24 [3460,15] Primary SMTP Address: Test.User@MyCompany.com
2015-02-06 09:06:24 [3460,15] EV Extensions DLL version: 9.0.2.0
2015-02-06 09:06:24 [3460,15] [ImpersonationManager::StartImpersonation] Entry: Current user: NT AUTHORITY\SYSTEM
2015-02-06 09:06:24 [3460,15] [ImpersonationManager::StartImpersonation] Entry: Impersonation Level: None
2015-02-06 09:06:24 [3460,15] [ImpersonationManager::StartImpersonation] Impersonating logged on user
2015-02-06 09:06:24 [3460,15] [ImpersonationManager::StartImpersonation] Exit: Current user: MYCOMPANY\test.user
2015-02-06 09:06:24 [3460,15] [ImpersonationManager::StartImpersonation] Exit: Impersonation Level: Impersonation
2015-02-06 09:06:24 [3460,15] [EVContext::Initialise] EVContext intialised at 2015-02-06 09:06:19
2015-02-06 09:06:24 [3460,15] [EVContext::Initialise] Hidden settings loaded at 2015-02-06 09:06:19
2015-02-06 09:06:24 [3460,15] [EVContext::IsValidBrowser] Returning: False
2015-02-06 09:06:24 [3460,15] [ImpersonationManager:StopImpersonation] Stopped impersonation
2015-02-06 09:06:24 [3460,15] Request processing finished
2015-02-06 09:06:24 [3460,15] #############################################################
2015-02-06 09:06:24 [3460,15] Request processing started
2015-02-06 09:06:24 [3460,15] Url: https://outlook.mycompany.local/owa/ev.owa?oeh=1&ns=MsgVLV2&ev=Preread
2015-02-06 09:06:24 [3460,15] RawUrl: /owa/ev.owa?oeh=1&ns=MsgVLV2&ev=Preread
2015-02-06 09:06:24 [3460,15] Query String parameters:
2015-02-06 09:06:24 [3460,15]     oeh: 1
2015-02-06 09:06:24 [3460,15]     ns: MsgVLV2
2015-02-06 09:06:24 [3460,15]     ev: Preread
2015-02-06 09:06:24 [3460,15] Form: 
2015-02-06 09:06:24 [3460,15] OWA Session details
2015-02-06 09:06:24 [3460,15]     User agent: Mozilla/5.0 (Windows NT 6.3; WOW64; rv:35.0) Gecko/20100101 Firefox/35.0
2015-02-06 09:06:24 [3460,15]     Authentication type: Basic
2015-02-06 09:06:24 [3460,15]     Authenticated user: MYCOMPANY\test.user
2015-02-06 09:06:24 [3460,15]     Client IP Address: 10.0.126.38
2015-02-06 09:06:24 [3460,15]     Server IP Address: 10.0.126.71
2015-02-06 09:06:24 [3460,15]     Host: outlook.mycompany.local
2015-02-06 09:06:24 [3460,15] Primary SMTP Address: Test.User@MyCompany.com
2015-02-06 09:06:24 [3460,15] EV Extensions DLL version: 9.0.2.0
2015-02-06 09:06:24 [3460,15] [ImpersonationManager::StartImpersonation] Entry: Current user: NT AUTHORITY\SYSTEM
2015-02-06 09:06:24 [3460,15] [ImpersonationManager::StartImpersonation] Entry: Impersonation Level: None
2015-02-06 09:06:24 [3460,15] [ImpersonationManager::StartImpersonation] Impersonating logged on user
2015-02-06 09:06:24 [3460,15] [ImpersonationManager::StartImpersonation] Exit: Current user: MYCOMPANY\test.user
2015-02-06 09:06:24 [3460,15] [ImpersonationManager::StartImpersonation] Exit: Impersonation Level: Impersonation
2015-02-06 09:06:24 [3460,15] [EVContext::Initialise] EVContext intialised at 2015-02-06 09:06:19
2015-02-06 09:06:24 [3460,15] [EVContext::Initialise] Hidden settings loaded at 2015-02-06 09:06:19
2015-02-06 09:06:24 [3460,15] [EVContext::IsValidBrowser] Returning: False
2015-02-06 09:06:24 [3460,15] [ImpersonationManager:StopImpersonation] Stopped impersonation
2015-02-06 09:06:24 [3460,15] Request processing finished
2015-02-06 09:06:25 [3460,16] #############################################################
2015-02-06 09:06:25 [3460,16] Request processing started
2015-02-06 09:06:25 [3460,16] Url: https://outlook.mycompany.local/owa/forms/premium/SubPageEventHandler.aspx?ae=Item&a=Preview&t=IPM.Note&id=RgAAAAAMa4q9vI8fRYRlurzFwP/eBwDazVmJkuzpQ5rm+12FtoRhAAAA+mxnAADazVmJkuzpQ5rm+12FtoRhAACaUHn4AAAJ&pf=1&UA=0&canary=uIKX4SAqs0i6y8dUSp7EmtnBz3aDFdIIiKxDLWhCoVHKbA4rhjOXo_SAIHkYELYjELcSSsBj3eU.&SP=1&subpage=ReadMessage.ascx
2015-02-06 09:06:25 [3460,16] RawUrl: /owa/?ae=Item&a=Preview&t=IPM.Note&id=RgAAAAAMa4q9vI8fRYRlurzFwP%2feBwDazVmJkuzpQ5rm%2b12FtoRhAAAA%2bmxnAADazVmJkuzpQ5rm%2b12FtoRhAACaUHn4AAAJ&pf=1&UA=0&canary=uIKX4SAqs0i6y8dUSp7EmtnBz3aDFdIIiKxDLWhCoVHKbA4rhjOXo_SAIHkYELYjELcSSsBj3eU.&SP=1
2015-02-06 09:06:25 [3460,16] Query String parameters:
2015-02-06 09:06:25 [3460,16]     ae: Item
2015-02-06 09:06:25 [3460,16]     a: Preview
2015-02-06 09:06:25 [3460,16]     t: IPM.Note
2015-02-06 09:06:25 [3460,16]     id: RgAAAAAMa4q9vI8fRYRlurzFwP/eBwDazVmJkuzpQ5rm+12FtoRhAAAA+mxnAADazVmJkuzpQ5rm+12FtoRhAACaUHn4AAAJ
2015-02-06 09:06:25 [3460,16]     pf: 1
2015-02-06 09:06:25 [3460,16]     UA: 0
2015-02-06 09:06:25 [3460,16]     canary: uIKX4SAqs0i6y8dUSp7EmtnBz3aDFdIIiKxDLWhCoVHKbA4rhjOXo_SAIHkYELYjELcSSsBj3eU.
2015-02-06 09:06:25 [3460,16]     SP: 1
2015-02-06 09:06:25 [3460,16]     subpage: ReadMessage.ascx
2015-02-06 09:06:25 [3460,16] Form: 
2015-02-06 09:06:25 [3460,16] OWA Session details
2015-02-06 09:06:25 [3460,16]     User agent: Mozilla/5.0 (Windows NT 6.3; WOW64; rv:35.0) Gecko/20100101 Firefox/35.0
2015-02-06 09:06:25 [3460,16]     Authentication type: Basic
2015-02-06 09:06:25 [3460,16]     Authenticated user: MYCOMPANY\test.user
2015-02-06 09:06:25 [3460,16]     Client IP Address: 10.0.126.38
2015-02-06 09:06:25 [3460,16]     Server IP Address: 10.0.126.71
2015-02-06 09:06:25 [3460,16]     Host: outlook.mycompany.local
2015-02-06 09:06:25 [3460,16] Primary SMTP Address: Test.User@MyCompany.com
2015-02-06 09:06:25 [3460,16] EV Extensions DLL version: 9.0.2.0
2015-02-06 09:06:25 [3460,16] [ImpersonationManager::StartImpersonation] Entry: Current user: NT AUTHORITY\SYSTEM
2015-02-06 09:06:25 [3460,16] [ImpersonationManager::StartImpersonation] Entry: Impersonation Level: None
2015-02-06 09:06:25 [3460,16] [ImpersonationManager::StartImpersonation] Impersonating logged on user
2015-02-06 09:06:25 [3460,16] [ImpersonationManager::StartImpersonation] Exit: Current user: MYCOMPANY\test.user
2015-02-06 09:06:25 [3460,16] [ImpersonationManager::StartImpersonation] Exit: Impersonation Level: Impersonation
2015-02-06 09:06:25 [3460,16] [EVContext::Initialise] EVContext intialised at 2015-02-06 09:06:19
2015-02-06 09:06:25 [3460,16] [EVContext::Initialise] Hidden settings loaded at 2015-02-06 09:06:19
2015-02-06 09:06:25 [3460,16] [EVContext::IsValidBrowser] Returning: False
2015-02-06 09:06:25 [3460,16] [ImpersonationManager:StopImpersonation] Stopped impersonation
2015-02-06 09:06:25 [3460,16] Request processing finished
2015-02-06 09:06:25 [3460,16] #############################################################
2015-02-06 09:06:25 [3460,16] Request processing started
2015-02-06 09:06:25 [3460,16] Url: https://outlook.mycompany.local/owa/forms/premium/SubPageEventHandler.aspx?ae=Item&a=Preview&t=IPM.Note&id=RgAAAAAMa4q9vI8fRYRlurzFwP/eBwDazVmJkuzpQ5rm+12FtoRhAAAA+mxnAADazVmJkuzpQ5rm+12FtoRhAACaUHn4AAAJ&pf=1&UA=0&canary=uIKX4SAqs0i6y8dUSp7EmtnBz3aDFdIIiKxDLWhCoVHKbA4rhjOXo_SAIHkYELYjELcSSsBj3eU.&SP=1&subpage=ReadMessage.ascx
2015-02-06 09:06:25 [3460,16] RawUrl: /owa/?ae=Item&a=Preview&t=IPM.Note&id=RgAAAAAMa4q9vI8fRYRlurzFwP%2feBwDazVmJkuzpQ5rm%2b12FtoRhAAAA%2bmxnAADazVmJkuzpQ5rm%2b12FtoRhAACaUHn4AAAJ&pf=1&UA=0&canary=uIKX4SAqs0i6y8dUSp7EmtnBz3aDFdIIiKxDLWhCoVHKbA4rhjOXo_SAIHkYELYjELcSSsBj3eU.&SP=1
2015-02-06 09:06:25 [3460,16] Query String parameters:
2015-02-06 09:06:25 [3460,16]     ae: Item
2015-02-06 09:06:25 [3460,16]     a: Preview
2015-02-06 09:06:25 [3460,16]     t: IPM.Note
2015-02-06 09:06:25 [3460,16]     id: RgAAAAAMa4q9vI8fRYRlurzFwP/eBwDazVmJkuzpQ5rm+12FtoRhAAAA+mxnAADazVmJkuzpQ5rm+12FtoRhAACaUHn4AAAJ
2015-02-06 09:06:25 [3460,16]     pf: 1
2015-02-06 09:06:25 [3460,16]     UA: 0
2015-02-06 09:06:25 [3460,16]     canary: uIKX4SAqs0i6y8dUSp7EmtnBz3aDFdIIiKxDLWhCoVHKbA4rhjOXo_SAIHkYELYjELcSSsBj3eU.
2015-02-06 09:06:25 [3460,16]     SP: 1
2015-02-06 09:06:25 [3460,16]     subpage: ReadMessage.ascx
2015-02-06 09:06:25 [3460,16] Form: 
2015-02-06 09:06:25 [3460,16] OWA Session details
2015-02-06 09:06:25 [3460,16]     User agent: Mozilla/5.0 (Windows NT 6.3; WOW64; rv:35.0) Gecko/20100101 Firefox/35.0
2015-02-06 09:06:25 [3460,16]     Authentication type: Basic
2015-02-06 09:06:25 [3460,16]     Authenticated user: MYCOMPANY\test.user
2015-02-06 09:06:25 [3460,16]     Client IP Address: 10.0.126.38
2015-02-06 09:06:25 [3460,16]     Server IP Address: 10.0.126.71
2015-02-06 09:06:25 [3460,16]     Host: outlook.mycompany.local
2015-02-06 09:06:25 [3460,16] Primary SMTP Address: Test.User@MyCompany.com
2015-02-06 09:06:25 [3460,16] EV Extensions DLL version: 9.0.2.0
2015-02-06 09:06:25 [3460,16] [ImpersonationManager::StartImpersonation] Entry: Current user: NT AUTHORITY\SYSTEM
2015-02-06 09:06:25 [3460,16] [ImpersonationManager::StartImpersonation] Entry: Impersonation Level: None
2015-02-06 09:06:25 [3460,16] [ImpersonationManager::StartImpersonation] Impersonating logged on user
2015-02-06 09:06:25 [3460,16] [ImpersonationManager::StartImpersonation] Exit: Current user: MYCOMPANY\test.user
2015-02-06 09:06:25 [3460,16] [ImpersonationManager::StartImpersonation] Exit: Impersonation Level: Impersonation
2015-02-06 09:06:25 [3460,16] [EVContext::Initialise] EVContext intialised at 2015-02-06 09:06:19
2015-02-06 09:06:25 [3460,16] [EVContext::Initialise] Hidden settings loaded at 2015-02-06 09:06:19
2015-02-06 09:06:25 [3460,16] [EVContext::IsValidBrowser] Returning: False
2015-02-06 09:06:25 [3460,16] [ImpersonationManager:StopImpersonation] Stopped impersonation
2015-02-06 09:06:25 [3460,16] Request processing finished
2015-02-06 09:06:25 [3460,16] #############################################################
2015-02-06 09:06:25 [3460,16] Request processing started
2015-02-06 09:06:25 [3460,16] Url: https://outlook.mycompany.local/owa/forms/premium/SubPageEventHandler.aspx?ae=Item&a=Preview&t=IPM.Note&id=RgAAAAAMa4q9vI8fRYRlurzFwP/eBwDazVmJkuzpQ5rm+12FtoRhAAAA+mxnAADazVmJkuzpQ5rm+12FtoRhAACaUHn3AAAJ&pf=1&UA=0&canary=uIKX4SAqs0i6y8dUSp7EmtnBz3aDFdIIiKxDLWhCoVHKbA4rhjOXo_SAIHkYELYjELcSSsBj3eU.&SP=1&subpage=ReadMessage.ascx
2015-02-06 09:06:25 [3460,16] RawUrl: /owa/?ae=Item&a=Preview&t=IPM.Note&id=RgAAAAAMa4q9vI8fRYRlurzFwP%2feBwDazVmJkuzpQ5rm%2b12FtoRhAAAA%2bmxnAADazVmJkuzpQ5rm%2b12FtoRhAACaUHn3AAAJ&pf=1&UA=0&canary=uIKX4SAqs0i6y8dUSp7EmtnBz3aDFdIIiKxDLWhCoVHKbA4rhjOXo_SAIHkYELYjELcSSsBj3eU.&SP=1
2015-02-06 09:06:25 [3460,16] Query String parameters:
2015-02-06 09:06:25 [3460,16]     ae: Item
2015-02-06 09:06:25 [3460,16]     a: Preview
2015-02-06 09:06:25 [3460,16]     t: IPM.Note
2015-02-06 09:06:25 [3460,16]     id: RgAAAAAMa4q9vI8fRYRlurzFwP/eBwDazVmJkuzpQ5rm+12FtoRhAAAA+mxnAADazVmJkuzpQ5rm+12FtoRhAACaUHn3AAAJ
2015-02-06 09:06:25 [3460,16]     pf: 1
2015-02-06 09:06:25 [3460,16]     UA: 0
2015-02-06 09:06:25 [3460,16]     canary: uIKX4SAqs0i6y8dUSp7EmtnBz3aDFdIIiKxDLWhCoVHKbA4rhjOXo_SAIHkYELYjELcSSsBj3eU.
2015-02-06 09:06:25 [3460,16]     SP: 1
2015-02-06 09:06:25 [3460,16]     subpage: ReadMessage.ascx
2015-02-06 09:06:25 [3460,16] Form: 
2015-02-06 09:06:25 [3460,16] OWA Session details
2015-02-06 09:06:25 [3460,16]     User agent: Mozilla/5.0 (Windows NT 6.3; WOW64; rv:35.0) Gecko/20100101 Firefox/35.0
2015-02-06 09:06:25 [3460,16]     Authentication type: Basic
2015-02-06 09:06:25 [3460,16]     Authenticated user: MYCOMPANY\test.user
2015-02-06 09:06:25 [3460,16]     Client IP Address: 10.0.126.38
2015-02-06 09:06:25 [3460,16]     Server IP Address: 10.0.126.71
2015-02-06 09:06:25 [3460,16]     Host: outlook.mycompany.local
2015-02-06 09:06:25 [3460,16] Primary SMTP Address: Test.User@MyCompany.com
2015-02-06 09:06:25 [3460,16] EV Extensions DLL version: 9.0.2.0
2015-02-06 09:06:25 [3460,16] [ImpersonationManager::StartImpersonation] Entry: Current user: NT AUTHORITY\SYSTEM
2015-02-06 09:06:25 [3460,16] [ImpersonationManager::StartImpersonation] Entry: Impersonation Level: None
2015-02-06 09:06:25 [3460,16] [ImpersonationManager::StartImpersonation] Impersonating logged on user
2015-02-06 09:06:25 [3460,16] [ImpersonationManager::StartImpersonation] Exit: Current user: MYCOMPANY\test.user
2015-02-06 09:06:25 [3460,16] [ImpersonationManager::StartImpersonation] Exit: Impersonation Level: Impersonation
2015-02-06 09:06:25 [3460,16] [EVContext::Initialise] EVContext intialised at 2015-02-06 09:06:19
2015-02-06 09:06:25 [3460,16] [EVContext::Initialise] Hidden settings loaded at 2015-02-06 09:06:19
2015-02-06 09:06:25 [3460,16] [EVContext::IsValidBrowser] Returning: False
2015-02-06 09:06:25 [3460,16] [ImpersonationManager:StopImpersonation] Stopped impersonation
2015-02-06 09:06:25 [3460,16] Request processing finished
2015-02-06 09:06:25 [3460,16] #############################################################
2015-02-06 09:06:25 [3460,16] Request processing started
2015-02-06 09:06:25 [3460,16] Url: https://outlook.mycompany.local/owa/forms/premium/SubPageEventHandler.aspx?ae=Item&a=Preview&t=IPM.Note&id=RgAAAAAMa4q9vI8fRYRlurzFwP/eBwDazVmJkuzpQ5rm+12FtoRhAAAA+mxnAADazVmJkuzpQ5rm+12FtoRhAACaUHn3AAAJ&pf=1&UA=0&canary=uIKX4SAqs0i6y8dUSp7EmtnBz3aDFdIIiKxDLWhCoVHKbA4rhjOXo_SAIHkYELYjELcSSsBj3eU.&SP=1&subpage=ReadMessage.ascx
2015-02-06 09:06:25 [3460,16] RawUrl: /owa/?ae=Item&a=Preview&t=IPM.Note&id=RgAAAAAMa4q9vI8fRYRlurzFwP%2feBwDazVmJkuzpQ5rm%2b12FtoRhAAAA%2bmxnAADazVmJkuzpQ5rm%2b12FtoRhAACaUHn3AAAJ&pf=1&UA=0&canary=uIKX4SAqs0i6y8dUSp7EmtnBz3aDFdIIiKxDLWhCoVHKbA4rhjOXo_SAIHkYELYjELcSSsBj3eU.&SP=1
2015-02-06 09:06:25 [3460,16] Query String parameters:
2015-02-06 09:06:25 [3460,16]     ae: Item
2015-02-06 09:06:25 [3460,16]     a: Preview
2015-02-06 09:06:25 [3460,16]     t: IPM.Note
2015-02-06 09:06:25 [3460,16]     id: RgAAAAAMa4q9vI8fRYRlurzFwP/eBwDazVmJkuzpQ5rm+12FtoRhAAAA+mxnAADazVmJkuzpQ5rm+12FtoRhAACaUHn3AAAJ
2015-02-06 09:06:25 [3460,16]     pf: 1
2015-02-06 09:06:25 [3460,16]     UA: 0
2015-02-06 09:06:25 [3460,16]     canary: uIKX4SAqs0i6y8dUSp7EmtnBz3aDFdIIiKxDLWhCoVHKbA4rhjOXo_SAIHkYELYjELcSSsBj3eU.
2015-02-06 09:06:25 [3460,16]     SP: 1
2015-02-06 09:06:25 [3460,16]     subpage: ReadMessage.ascx
2015-02-06 09:06:25 [3460,16] Form: 
2015-02-06 09:06:25 [3460,16] OWA Session details
2015-02-06 09:06:25 [3460,16]     User agent: Mozilla/5.0 (Windows NT 6.3; WOW64; rv:35.0) Gecko/20100101 Firefox/35.0
2015-02-06 09:06:25 [3460,16]     Authentication type: Basic
2015-02-06 09:06:25 [3460,16]     Authenticated user: MYCOMPANY\test.user
2015-02-06 09:06:25 [3460,16]     Client IP Address: 10.0.126.38
2015-02-06 09:06:25 [3460,16]     Server IP Address: 10.0.126.71
2015-02-06 09:06:25 [3460,16]     Host: outlook.mycompany.local
2015-02-06 09:06:25 [3460,16] Primary SMTP Address: Test.User@MyCompany.com
2015-02-06 09:06:25 [3460,16] EV Extensions DLL version: 9.0.2.0
2015-02-06 09:06:25 [3460,16] [ImpersonationManager::StartImpersonation] Entry: Current user: NT AUTHORITY\SYSTEM
2015-02-06 09:06:25 [3460,16] [ImpersonationManager::StartImpersonation] Entry: Impersonation Level: None
2015-02-06 09:06:25 [3460,16] [ImpersonationManager::StartImpersonation] Impersonating logged on user
2015-02-06 09:06:25 [3460,16] [ImpersonationManager::StartImpersonation] Exit: Current user: MYCOMPANY\test.user
2015-02-06 09:06:25 [3460,16] [ImpersonationManager::StartImpersonation] Exit: Impersonation Level: Impersonation
2015-02-06 09:06:25 [3460,16] [EVContext::Initialise] EVContext intialised at 2015-02-06 09:06:19
2015-02-06 09:06:25 [3460,16] [EVContext::Initialise] Hidden settings loaded at 2015-02-06 09:06:19
2015-02-06 09:06:25 [3460,16] [EVContext::IsValidBrowser] Returning: False
2015-02-06 09:06:25 [3460,16] [ImpersonationManager:StopImpersonation] Stopped impersonation
2015-02-06 09:06:25 [3460,16] Request processing finished
2015-02-06 09:06:25 [3460,16] #############################################################
2015-02-06 09:06:25 [3460,16] Request processing started
2015-02-06 09:06:25 [3460,16] Url: https://outlook.mycompany.local/owa/forms/premium/SubPageEventHandler.aspx?ae=Item&a=Preview&t=IPM.Note&id=RgAAAAAMa4q9vI8fRYRlurzFwP/eBwDazVmJkuzpQ5rm+12FtoRhAAAA+mxnAADazVmJkuzpQ5rm+12FtoRhAACaUHn2AAAJ&pf=1&UA=0&canary=uIKX4SAqs0i6y8dUSp7EmtnBz3aDFdIIiKxDLWhCoVHKbA4rhjOXo_SAIHkYELYjELcSSsBj3eU.&SP=1&subpage=ReadMessage.ascx
2015-02-06 09:06:25 [3460,16] RawUrl: /owa/?ae=Item&a=Preview&t=IPM.Note&id=RgAAAAAMa4q9vI8fRYRlurzFwP%2feBwDazVmJkuzpQ5rm%2b12FtoRhAAAA%2bmxnAADazVmJkuzpQ5rm%2b12FtoRhAACaUHn2AAAJ&pf=1&UA=0&canary=uIKX4SAqs0i6y8dUSp7EmtnBz3aDFdIIiKxDLWhCoVHKbA4rhjOXo_SAIHkYELYjELcSSsBj3eU.&SP=1
2015-02-06 09:06:25 [3460,16] Query String parameters:
2015-02-06 09:06:25 [3460,16]     ae: Item
2015-02-06 09:06:25 [3460,16]     a: Preview
2015-02-06 09:06:25 [3460,16]     t: IPM.Note
2015-02-06 09:06:25 [3460,16]     id: RgAAAAAMa4q9vI8fRYRlurzFwP/eBwDazVmJkuzpQ5rm+12FtoRhAAAA+mxnAADazVmJkuzpQ5rm+12FtoRhAACaUHn2AAAJ
2015-02-06 09:06:25 [3460,16]     pf: 1
2015-02-06 09:06:25 [3460,16]     UA: 0
2015-02-06 09:06:25 [3460,16]     canary: uIKX4SAqs0i6y8dUSp7EmtnBz3aDFdIIiKxDLWhCoVHKbA4rhjOXo_SAIHkYELYjELcSSsBj3eU.
2015-02-06 09:06:25 [3460,16]     SP: 1
2015-02-06 09:06:25 [3460,16]     subpage: ReadMessage.ascx
2015-02-06 09:06:25 [3460,16] Form: 
2015-02-06 09:06:25 [3460,16] OWA Session details
2015-02-06 09:06:25 [3460,16]     User agent: Mozilla/5.0 (Windows NT 6.3; WOW64; rv:35.0) Gecko/20100101 Firefox/35.0
2015-02-06 09:06:25 [3460,16]     Authentication type: Basic
2015-02-06 09:06:25 [3460,16]     Authenticated user: MYCOMPANY\test.user
2015-02-06 09:06:25 [3460,16]     Client IP Address: 10.0.126.38
2015-02-06 09:06:25 [3460,16]     Server IP Address: 10.0.126.71
2015-02-06 09:06:25 [3460,16]     Host: outlook.mycompany.local
2015-02-06 09:06:25 [3460,16] Primary SMTP Address: Test.User@MyCompany.com
2015-02-06 09:06:25 [3460,16] EV Extensions DLL version: 9.0.2.0
2015-02-06 09:06:25 [3460,16] [ImpersonationManager::StartImpersonation] Entry: Current user: NT AUTHORITY\SYSTEM
2015-02-06 09:06:25 [3460,16] [ImpersonationManager::StartImpersonation] Entry: Impersonation Level: None
2015-02-06 09:06:25 [3460,16] [ImpersonationManager::StartImpersonation] Impersonating logged on user
2015-02-06 09:06:25 [3460,16] [ImpersonationManager::StartImpersonation] Exit: Current user: MYCOMPANY\test.user
2015-02-06 09:06:25 [3460,16] [ImpersonationManager::StartImpersonation] Exit: Impersonation Level: Impersonation
2015-02-06 09:06:25 [3460,16] [EVContext::Initialise] EVContext intialised at 2015-02-06 09:06:19
2015-02-06 09:06:25 [3460,16] [EVContext::Initialise] Hidden settings loaded at 2015-02-06 09:06:19
2015-02-06 09:06:25 [3460,16] [EVContext::IsValidBrowser] Returning: False
2015-02-06 09:06:25 [3460,16] [ImpersonationManager:StopImpersonation] Stopped impersonation
2015-02-06 09:06:25 [3460,16] Request processing finished
2015-02-06 09:06:25 [3460,16] #############################################################
2015-02-06 09:06:25 [3460,16] Request processing started
2015-02-06 09:06:25 [3460,16] Url: https://outlook.mycompany.local/owa/forms/premium/SubPageEventHandler.aspx?ae=Item&a=Preview&t=IPM.Note&id=RgAAAAAMa4q9vI8fRYRlurzFwP/eBwDazVmJkuzpQ5rm+12FtoRhAAAA+mxnAADazVmJkuzpQ5rm+12FtoRhAACaUHn2AAAJ&pf=1&UA=0&canary=uIKX4SAqs0i6y8dUSp7EmtnBz3aDFdIIiKxDLWhCoVHKbA4rhjOXo_SAIHkYELYjELcSSsBj3eU.&SP=1&subpage=ReadMessage.ascx
2015-02-06 09:06:25 [3460,16] RawUrl: /owa/?ae=Item&a=Preview&t=IPM.Note&id=RgAAAAAMa4q9vI8fRYRlurzFwP%2feBwDazVmJkuzpQ5rm%2b12FtoRhAAAA%2bmxnAADazVmJkuzpQ5rm%2b12FtoRhAACaUHn2AAAJ&pf=1&UA=0&canary=uIKX4SAqs0i6y8dUSp7EmtnBz3aDFdIIiKxDLWhCoVHKbA4rhjOXo_SAIHkYELYjELcSSsBj3eU.&SP=1
2015-02-06 09:06:25 [3460,16] Query String parameters:
2015-02-06 09:06:25 [3460,16]     ae: Item
2015-02-06 09:06:25 [3460,16]     a: Preview
2015-02-06 09:06:25 [3460,16]     t: IPM.Note
2015-02-06 09:06:25 [3460,16]     id: RgAAAAAMa4q9vI8fRYRlurzFwP/eBwDazVmJkuzpQ5rm+12FtoRhAAAA+mxnAADazVmJkuzpQ5rm+12FtoRhAACaUHn2AAAJ
2015-02-06 09:06:25 [3460,16]     pf: 1
2015-02-06 09:06:25 [3460,16]     UA: 0
2015-02-06 09:06:25 [3460,16]     canary: uIKX4SAqs0i6y8dUSp7EmtnBz3aDFdIIiKxDLWhCoVHKbA4rhjOXo_SAIHkYELYjELcSSsBj3eU.
2015-02-06 09:06:25 [3460,16]     SP: 1
2015-02-06 09:06:25 [3460,16]     subpage: ReadMessage.ascx
2015-02-06 09:06:25 [3460,16] Form: 
2015-02-06 09:06:25 [3460,16] OWA Session details
2015-02-06 09:06:25 [3460,16]     User agent: Mozilla/5.0 (Windows NT 6.3; WOW64; rv:35.0) Gecko/20100101 Firefox/35.0
2015-02-06 09:06:25 [3460,16]     Authentication type: Basic
2015-02-06 09:06:25 [3460,16]     Authenticated user: MYCOMPANY\test.user
2015-02-06 09:06:25 [3460,16]     Client IP Address: 10.0.126.38
2015-02-06 09:06:25 [3460,16]     Server IP Address: 10.0.126.71
2015-02-06 09:06:25 [3460,16]     Host: outlook.mycompany.local
2015-02-06 09:06:25 [3460,16] Primary SMTP Address: Test.User@MyCompany.com
2015-02-06 09:06:25 [3460,16] EV Extensions DLL version: 9.0.2.0
2015-02-06 09:06:25 [3460,16] [ImpersonationManager::StartImpersonation] Entry: Current user: NT AUTHORITY\SYSTEM
2015-02-06 09:06:25 [3460,16] [ImpersonationManager::StartImpersonation] Entry: Impersonation Level: None
2015-02-06 09:06:25 [3460,16] [ImpersonationManager::StartImpersonation] Impersonating logged on user
2015-02-06 09:06:25 [3460,16] [ImpersonationManager::StartImpersonation] Exit: Current user: MYCOMPANY\test.user
2015-02-06 09:06:25 [3460,16] [ImpersonationManager::StartImpersonation] Exit: Impersonation Level: Impersonation
2015-02-06 09:06:25 [3460,16] [EVContext::Initialise] EVContext intialised at 2015-02-06 09:06:19
2015-02-06 09:06:25 [3460,16] [EVContext::Initialise] Hidden settings loaded at 2015-02-06 09:06:19
2015-02-06 09:06:25 [3460,16] [EVContext::IsValidBrowser] Returning: False
2015-02-06 09:06:25 [3460,16] [ImpersonationManager:StopImpersonation] Stopped impersonation
2015-02-06 09:06:25 [3460,16] Request processing finished
2015-02-06 09:06:25 [3460,16] #############################################################
2015-02-06 09:06:25 [3460,16] Request processing started
2015-02-06 09:06:25 [3460,16] Url: https://outlook.mycompany.local/owa/forms/premium/SubPageEventHandler.aspx?ae=Item&a=Preview&t=IPM.Note&id=RgAAAAAMa4q9vI8fRYRlurzFwP/eBwDazVmJkuzpQ5rm+12FtoRhAAAA+mxnAADazVmJkuzpQ5rm+12FtoRhAACaUHn1AAAJ&pf=1&UA=0&canary=uIKX4SAqs0i6y8dUSp7EmtnBz3aDFdIIiKxDLWhCoVHKbA4rhjOXo_SAIHkYELYjELcSSsBj3eU.&SP=1&subpage=ReadMessage.ascx
2015-02-06 09:06:25 [3460,16] RawUrl: /owa/?ae=Item&a=Preview&t=IPM.Note&id=RgAAAAAMa4q9vI8fRYRlurzFwP%2feBwDazVmJkuzpQ5rm%2b12FtoRhAAAA%2bmxnAADazVmJkuzpQ5rm%2b12FtoRhAACaUHn1AAAJ&pf=1&UA=0&canary=uIKX4SAqs0i6y8dUSp7EmtnBz3aDFdIIiKxDLWhCoVHKbA4rhjOXo_SAIHkYELYjELcSSsBj3eU.&SP=1
2015-02-06 09:06:25 [3460,16] Query String parameters:
2015-02-06 09:06:25 [3460,16]     ae: Item
2015-02-06 09:06:25 [3460,16]     a: Preview
2015-02-06 09:06:25 [3460,16]     t: IPM.Note
2015-02-06 09:06:25 [3460,16]     id: RgAAAAAMa4q9vI8fRYRlurzFwP/eBwDazVmJkuzpQ5rm+12FtoRhAAAA+mxnAADazVmJkuzpQ5rm+12FtoRhAACaUHn1AAAJ
2015-02-06 09:06:25 [3460,16]     pf: 1
2015-02-06 09:06:25 [3460,16]     UA: 0
2015-02-06 09:06:25 [3460,16]     canary: uIKX4SAqs0i6y8dUSp7EmtnBz3aDFdIIiKxDLWhCoVHKbA4rhjOXo_SAIHkYELYjELcSSsBj3eU.
2015-02-06 09:06:25 [3460,16]     SP: 1
2015-02-06 09:06:25 [3460,16]     subpage: ReadMessage.ascx
2015-02-06 09:06:25 [3460,16] Form: 
2015-02-06 09:06:25 [3460,16] OWA Session details
2015-02-06 09:06:25 [3460,16]     User agent: Mozilla/5.0 (Windows NT 6.3; WOW64; rv:35.0) Gecko/20100101 Firefox/35.0
2015-02-06 09:06:25 [3460,16]     Authentication type: Basic
2015-02-06 09:06:25 [3460,16]     Authenticated user: MYCOMPANY\test.user
2015-02-06 09:06:25 [3460,16]     Client IP Address: 10.0.126.38
2015-02-06 09:06:25 [3460,16]     Server IP Address: 10.0.126.71
2015-02-06 09:06:25 [3460,16]     Host: outlook.mycompany.local
2015-02-06 09:06:25 [3460,16] Primary SMTP Address: Test.User@MyCompany.com
2015-02-06 09:06:25 [3460,16] EV Extensions DLL version: 9.0.2.0
2015-02-06 09:06:25 [3460,16] [ImpersonationManager::StartImpersonation] Entry: Current user: NT AUTHORITY\SYSTEM
2015-02-06 09:06:25 [3460,16] [ImpersonationManager::StartImpersonation] Entry: Impersonation Level: None
2015-02-06 09:06:25 [3460,16] [ImpersonationManager::StartImpersonation] Impersonating logged on user
2015-02-06 09:06:25 [3460,16] [ImpersonationManager::StartImpersonation] Exit: Current user: MYCOMPANY\test.user
2015-02-06 09:06:25 [3460,16] [ImpersonationManager::StartImpersonation] Exit: Impersonation Level: Impersonation
2015-02-06 09:06:25 [3460,16] [EVContext::Initialise] EVContext intialised at 2015-02-06 09:06:19
2015-02-06 09:06:25 [3460,16] [EVContext::Initialise] Hidden settings loaded at 2015-02-06 09:06:19
2015-02-06 09:06:25 [3460,16] [EVContext::IsValidBrowser] Returning: False
2015-02-06 09:06:25 [3460,16] [ImpersonationManager:StopImpersonation] Stopped impersonation
2015-02-06 09:06:25 [3460,16] Request processing finished
2015-02-06 09:06:25 [3460,16] #############################################################
2015-02-06 09:06:25 [3460,16] Request processing started
2015-02-06 09:06:25 [3460,16] Url: https://outlook.mycompany.local/owa/forms/premium/SubPageEventHandler.aspx?ae=Item&a=Preview&t=IPM.Note&id=RgAAAAAMa4q9vI8fRYRlurzFwP/eBwDazVmJkuzpQ5rm+12FtoRhAAAA+mxnAADazVmJkuzpQ5rm+12FtoRhAACaUHn1AAAJ&pf=1&UA=0&canary=uIKX4SAqs0i6y8dUSp7EmtnBz3aDFdIIiKxDLWhCoVHKbA4rhjOXo_SAIHkYELYjELcSSsBj3eU.&SP=1&subpage=ReadMessage.ascx
2015-02-06 09:06:25 [3460,16] RawUrl: /owa/?ae=Item&a=Preview&t=IPM.Note&id=RgAAAAAMa4q9vI8fRYRlurzFwP%2feBwDazVmJkuzpQ5rm%2b12FtoRhAAAA%2bmxnAADazVmJkuzpQ5rm%2b12FtoRhAACaUHn1AAAJ&pf=1&UA=0&canary=uIKX4SAqs0i6y8dUSp7EmtnBz3aDFdIIiKxDLWhCoVHKbA4rhjOXo_SAIHkYELYjELcSSsBj3eU.&SP=1
2015-02-06 09:06:25 [3460,16] Query String parameters:
2015-02-06 09:06:25 [3460,16]     ae: Item
2015-02-06 09:06:25 [3460,16]     a: Preview
2015-02-06 09:06:25 [3460,16]     t: IPM.Note
2015-02-06 09:06:25 [3460,16]     id: RgAAAAAMa4q9vI8fRYRlurzFwP/eBwDazVmJkuzpQ5rm+12FtoRhAAAA+mxnAADazVmJkuzpQ5rm+12FtoRhAACaUHn1AAAJ
2015-02-06 09:06:25 [3460,16]     pf: 1
2015-02-06 09:06:25 [3460,16]     UA: 0
2015-02-06 09:06:25 [3460,16]     canary: uIKX4SAqs0i6y8dUSp7EmtnBz3aDFdIIiKxDLWhCoVHKbA4rhjOXo_SAIHkYELYjELcSSsBj3eU.
2015-02-06 09:06:25 [3460,16]     SP: 1
2015-02-06 09:06:25 [3460,16]     subpage: ReadMessage.ascx
2015-02-06 09:06:25 [3460,16] Form: 
2015-02-06 09:06:25 [3460,16] OWA Session details
2015-02-06 09:06:25 [3460,16]     User agent: Mozilla/5.0 (Windows NT 6.3; WOW64; rv:35.0) Gecko/20100101 Firefox/35.0
2015-02-06 09:06:25 [3460,16]     Authentication type: Basic
2015-02-06 09:06:25 [3460,16]     Authenticated user: MYCOMPANY\test.user
2015-02-06 09:06:25 [3460,16]     Client IP Address: 10.0.126.38
2015-02-06 09:06:25 [3460,16]     Server IP Address: 10.0.126.71
2015-02-06 09:06:25 [3460,16]     Host: outlook.mycompany.local
2015-02-06 09:06:25 [3460,16] Primary SMTP Address: Test.User@MyCompany.com
2015-02-06 09:06:25 [3460,16] EV Extensions DLL version: 9.0.2.0
2015-02-06 09:06:25 [3460,16] [ImpersonationManager::StartImpersonation] Entry: Current user: NT AUTHORITY\SYSTEM
2015-02-06 09:06:25 [3460,16] [ImpersonationManager::StartImpersonation] Entry: Impersonation Level: None
2015-02-06 09:06:25 [3460,16] [ImpersonationManager::StartImpersonation] Impersonating logged on user
2015-02-06 09:06:25 [3460,16] [ImpersonationManager::StartImpersonation] Exit: Current user: MYCOMPANY\test.user
2015-02-06 09:06:25 [3460,16] [ImpersonationManager::StartImpersonation] Exit: Impersonation Level: Impersonation
2015-02-06 09:06:25 [3460,16] [EVContext::Initialise] EVContext intialised at 2015-02-06 09:06:19
2015-02-06 09:06:25 [3460,16] [EVContext::Initialise] Hidden settings loaded at 2015-02-06 09:06:19
2015-02-06 09:06:25 [3460,16] [EVContext::IsValidBrowser] Returning: False
2015-02-06 09:06:25 [3460,16] [ImpersonationManager:StopImpersonation] Stopped impersonation
2015-02-06 09:06:25 [3460,16] Request processing finished
2015-02-06 09:06:25 [3460,16] #############################################################
2015-02-06 09:06:25 [3460,16] Request processing started
2015-02-06 09:06:25 [3460,16] Url: https://outlook.mycompany.local/owa/forms/premium/SubPageEventHandler.aspx?ae=Item&a=Preview&t=IPM.Note&id=RgAAAAAMa4q9vI8fRYRlurzFwP/eBwDazVmJkuzpQ5rm+12FtoRhAAAA+mxnAADazVmJkuzpQ5rm+12FtoRhAACaUHn0AAAJ&pf=1&UA=0&canary=uIKX4SAqs0i6y8dUSp7EmtnBz3aDFdIIiKxDLWhCoVHKbA4rhjOXo_SAIHkYELYjELcSSsBj3eU.&SP=1&subpage=ReadMessage.ascx
2015-02-06 09:06:25 [3460,16] RawUrl: /owa/?ae=Item&a=Preview&t=IPM.Note&id=RgAAAAAMa4q9vI8fRYRlurzFwP%2feBwDazVmJkuzpQ5rm%2b12FtoRhAAAA%2bmxnAADazVmJkuzpQ5rm%2b12FtoRhAACaUHn0AAAJ&pf=1&UA=0&canary=uIKX4SAqs0i6y8dUSp7EmtnBz3aDFdIIiKxDLWhCoVHKbA4rhjOXo_SAIHkYELYjELcSSsBj3eU.&SP=1
2015-02-06 09:06:25 [3460,16] Query String parameters:
2015-02-06 09:06:25 [3460,16]     ae: Item
2015-02-06 09:06:25 [3460,16]     a: Preview
2015-02-06 09:06:25 [3460,16]     t: IPM.Note
2015-02-06 09:06:25 [3460,16]     id: RgAAAAAMa4q9vI8fRYRlurzFwP/eBwDazVmJkuzpQ5rm+12FtoRhAAAA+mxnAADazVmJkuzpQ5rm+12FtoRhAACaUHn0AAAJ
2015-02-06 09:06:25 [3460,16]     pf: 1
2015-02-06 09:06:25 [3460,16]     UA: 0
2015-02-06 09:06:25 [3460,16]     canary: uIKX4SAqs0i6y8dUSp7EmtnBz3aDFdIIiKxDLWhCoVHKbA4rhjOXo_SAIHkYELYjELcSSsBj3eU.
2015-02-06 09:06:25 [3460,16]     SP: 1
2015-02-06 09:06:25 [3460,16]     subpage: ReadMessage.ascx
2015-02-06 09:06:25 [3460,16] Form: 
2015-02-06 09:06:25 [3460,16] OWA Session details
2015-02-06 09:06:25 [3460,16]     User agent: Mozilla/5.0 (Windows NT 6.3; WOW64; rv:35.0) Gecko/20100101 Firefox/35.0
2015-02-06 09:06:25 [3460,16]     Authentication type: Basic
2015-02-06 09:06:25 [3460,16]     Authenticated user: MYCOMPANY\test.user
2015-02-06 09:06:25 [3460,16]     Client IP Address: 10.0.126.38
2015-02-06 09:06:25 [3460,16]     Server IP Address: 10.0.126.71
2015-02-06 09:06:25 [3460,16]     Host: outlook.mycompany.local
2015-02-06 09:06:25 [3460,16] Primary SMTP Address: Test.User@MyCompany.com
2015-02-06 09:06:25 [3460,16] EV Extensions DLL version: 9.0.2.0
2015-02-06 09:06:25 [3460,16] [ImpersonationManager::StartImpersonation] Entry: Current user: NT AUTHORITY\SYSTEM
2015-02-06 09:06:25 [3460,16] [ImpersonationManager::StartImpersonation] Entry: Impersonation Level: None
2015-02-06 09:06:25 [3460,16] [ImpersonationManager::StartImpersonation] Impersonating logged on user
2015-02-06 09:06:25 [3460,16] [ImpersonationManager::StartImpersonation] Exit: Current user: MYCOMPANY\test.user
2015-02-06 09:06:25 [3460,16] [ImpersonationManager::StartImpersonation] Exit: Impersonation Level: Impersonation
2015-02-06 09:06:25 [3460,16] [EVContext::Initialise] EVContext intialised at 2015-02-06 09:06:19
2015-02-06 09:06:25 [3460,16] [EVContext::Initialise] Hidden settings loaded at 2015-02-06 09:06:19
2015-02-06 09:06:25 [3460,16] [EVContext::IsValidBrowser] Returning: False
2015-02-06 09:06:25 [3460,16] [ImpersonationManager:StopImpersonation] Stopped impersonation
2015-02-06 09:06:25 [3460,16] Request processing finished
2015-02-06 09:06:25 [3460,16] #############################################################
2015-02-06 09:06:25 [3460,16] Request processing started
2015-02-06 09:06:25 [3460,16] Url: https://outlook.mycompany.local/owa/forms/premium/SubPageEventHandler.aspx?ae=Item&a=Preview&t=IPM.Note&id=RgAAAAAMa4q9vI8fRYRlurzFwP/eBwDazVmJkuzpQ5rm+12FtoRhAAAA+mxnAADazVmJkuzpQ5rm+12FtoRhAACaUHn0AAAJ&pf=1&UA=0&canary=uIKX4SAqs0i6y8dUSp7EmtnBz3aDFdIIiKxDLWhCoVHKbA4rhjOXo_SAIHkYELYjELcSSsBj3eU.&SP=1&subpage=ReadMessage.ascx
2015-02-06 09:06:25 [3460,16] RawUrl: /owa/?ae=Item&a=Preview&t=IPM.Note&id=RgAAAAAMa4q9vI8fRYRlurzFwP%2feBwDazVmJkuzpQ5rm%2b12FtoRhAAAA%2bmxnAADazVmJkuzpQ5rm%2b12FtoRhAACaUHn0AAAJ&pf=1&UA=0&canary=uIKX4SAqs0i6y8dUSp7EmtnBz3aDFdIIiKxDLWhCoVHKbA4rhjOXo_SAIHkYELYjELcSSsBj3eU.&SP=1
2015-02-06 09:06:25 [3460,16] Query String parameters:
2015-02-06 09:06:25 [3460,16]     ae: Item
2015-02-06 09:06:25 [3460,16]     a: Preview
2015-02-06 09:06:25 [3460,16]     t: IPM.Note
2015-02-06 09:06:25 [3460,16]     id: RgAAAAAMa4q9vI8fRYRlurzFwP/eBwDazVmJkuzpQ5rm+12FtoRhAAAA+mxnAADazVmJkuzpQ5rm+12FtoRhAACaUHn0AAAJ
2015-02-06 09:06:25 [3460,16]     pf: 1
2015-02-06 09:06:25 [3460,16]     UA: 0
2015-02-06 09:06:25 [3460,16]     canary: uIKX4SAqs0i6y8dUSp7EmtnBz3aDFdIIiKxDLWhCoVHKbA4rhjOXo_SAIHkYELYjELcSSsBj3eU.
2015-02-06 09:06:25 [3460,16]     SP: 1
2015-02-06 09:06:25 [3460,16]     subpage: ReadMessage.ascx
2015-02-06 09:06:25 [3460,16] Form: 
2015-02-06 09:06:25 [3460,16] OWA Session details
2015-02-06 09:06:25 [3460,16]     User agent: Mozilla/5.0 (Windows NT 6.3; WOW64; rv:35.0) Gecko/20100101 Firefox/35.0
2015-02-06 09:06:25 [3460,16]     Authentication type: Basic
2015-02-06 09:06:25 [3460,16]     Authenticated user: MYCOMPANY\test.user
2015-02-06 09:06:25 [3460,16]     Client IP Address: 10.0.126.38
2015-02-06 09:06:25 [3460,16]     Server IP Address: 10.0.126.71
2015-02-06 09:06:25 [3460,16]     Host: outlook.mycompany.local
2015-02-06 09:06:25 [3460,16] Primary SMTP Address: Test.User@MyCompany.com
2015-02-06 09:06:25 [3460,16] EV Extensions DLL version: 9.0.2.0
2015-02-06 09:06:25 [3460,16] [ImpersonationManager::StartImpersonation] Entry: Current user: NT AUTHORITY\SYSTEM
2015-02-06 09:06:25 [3460,16] [ImpersonationManager::StartImpersonation] Entry: Impersonation Level: None
2015-02-06 09:06:25 [3460,16] [ImpersonationManager::StartImpersonation] Impersonating logged on user
2015-02-06 09:06:25 [3460,16] [ImpersonationManager::StartImpersonation] Exit: Current user: MYCOMPANY\test.user
2015-02-06 09:06:25 [3460,16] [ImpersonationManager::StartImpersonation] Exit: Impersonation Level: Impersonation
2015-02-06 09:06:25 [3460,16] [EVContext::Initialise] EVContext intialised at 2015-02-06 09:06:19
2015-02-06 09:06:25 [3460,16] [EVContext::Initialise] Hidden settings loaded at 2015-02-06 09:06:19
2015-02-06 09:06:25 [3460,16] [EVContext::IsValidBrowser] Returning: False
2015-02-06 09:06:25 [3460,16] [ImpersonationManager:StopImpersonation] Stopped impersonation
2015-02-06 09:06:25 [3460,16] Request processing finished
2015-02-06 09:06:25 [3460,16] #############################################################
2015-02-06 09:06:25 [3460,16] Request processing started
2015-02-06 09:06:25 [3460,16] Url: https://outlook.mycompany.local/owa/forms/premium/SubPageEventHandler.aspx?ae=Item&a=Preview&t=IPM.Note&id=RgAAAAAMa4q9vI8fRYRlurzFwP/eBwDazVmJkuzpQ5rm+12FtoRhAAAA+mxnAADazVmJkuzpQ5rm+12FtoRhAACaUHnyAAAJ&pf=1&UA=0&canary=uIKX4SAqs0i6y8dUSp7EmtnBz3aDFdIIiKxDLWhCoVHKbA4rhjOXo_SAIHkYELYjELcSSsBj3eU.&SP=1&subpage=ReadMessage.ascx
2015-02-06 09:06:25 [3460,16] RawUrl: /owa/?ae=Item&a=Preview&t=IPM.Note&id=RgAAAAAMa4q9vI8fRYRlurzFwP%2feBwDazVmJkuzpQ5rm%2b12FtoRhAAAA%2bmxnAADazVmJkuzpQ5rm%2b12FtoRhAACaUHnyAAAJ&pf=1&UA=0&canary=uIKX4SAqs0i6y8dUSp7EmtnBz3aDFdIIiKxDLWhCoVHKbA4rhjOXo_SAIHkYELYjELcSSsBj3eU.&SP=1
2015-02-06 09:06:25 [3460,16] Query String parameters:
2015-02-06 09:06:25 [3460,16]     ae: Item
2015-02-06 09:06:25 [3460,16]     a: Preview
2015-02-06 09:06:25 [3460,16]     t: IPM.Note
2015-02-06 09:06:25 [3460,16]     id: RgAAAAAMa4q9vI8fRYRlurzFwP/eBwDazVmJkuzpQ5rm+12FtoRhAAAA+mxnAADazVmJkuzpQ5rm+12FtoRhAACaUHnyAAAJ
2015-02-06 09:06:25 [3460,16]     pf: 1
2015-02-06 09:06:25 [3460,16]     UA: 0
2015-02-06 09:06:25 [3460,16]     canary: uIKX4SAqs0i6y8dUSp7EmtnBz3aDFdIIiKxDLWhCoVHKbA4rhjOXo_SAIHkYELYjELcSSsBj3eU.
2015-02-06 09:06:25 [3460,16]     SP: 1
2015-02-06 09:06:25 [3460,16]     subpage: ReadMessage.ascx
2015-02-06 09:06:25 [3460,16] Form: 
2015-02-06 09:06:25 [3460,16] OWA Session details
2015-02-06 09:06:25 [3460,16]     User agent: Mozilla/5.0 (Windows NT 6.3; WOW64; rv:35.0) Gecko/20100101 Firefox/35.0
2015-02-06 09:06:25 [3460,16]     Authentication type: Basic
2015-02-06 09:06:25 [3460,16]     Authenticated user: MYCOMPANY\test.user
2015-02-06 09:06:25 [3460,16]     Client IP Address: 10.0.126.38
2015-02-06 09:06:25 [3460,16]     Server IP Address: 10.0.126.71
2015-02-06 09:06:25 [3460,16]     Host: outlook.mycompany.local
2015-02-06 09:06:25 [3460,16] Primary SMTP Address: Test.User@MyCompany.com
2015-02-06 09:06:25 [3460,16] EV Extensions DLL version: 9.0.2.0
2015-02-06 09:06:25 [3460,16] [ImpersonationManager::StartImpersonation] Entry: Current user: NT AUTHORITY\SYSTEM
2015-02-06 09:06:25 [3460,16] [ImpersonationManager::StartImpersonation] Entry: Impersonation Level: None
2015-02-06 09:06:25 [3460,16] [ImpersonationManager::StartImpersonation] Impersonating logged on user
2015-02-06 09:06:25 [3460,16] [ImpersonationManager::StartImpersonation] Exit: Current user: MYCOMPANY\test.user
2015-02-06 09:06:25 [3460,16] [ImpersonationManager::StartImpersonation] Exit: Impersonation Level: Impersonation
2015-02-06 09:06:25 [3460,16] [EVContext::Initialise] EVContext intialised at 2015-02-06 09:06:19
2015-02-06 09:06:25 [3460,16] [EVContext::Initialise] Hidden settings loaded at 2015-02-06 09:06:19
2015-02-06 09:06:25 [3460,16] [EVContext::IsValidBrowser] Returning: False
2015-02-06 09:06:25 [3460,16] [ImpersonationManager:StopImpersonation] Stopped impersonation
2015-02-06 09:06:25 [3460,16] Request processing finished
2015-02-06 09:06:25 [3460,16] #############################################################
2015-02-06 09:06:25 [3460,16] Request processing started
2015-02-06 09:06:25 [3460,16] Url: https://outlook.mycompany.local/owa/forms/premium/SubPageEventHandler.aspx?ae=Item&a=Preview&t=IPM.Note&id=RgAAAAAMa4q9vI8fRYRlurzFwP/eBwDazVmJkuzpQ5rm+12FtoRhAAAA+mxnAADazVmJkuzpQ5rm+12FtoRhAACaUHnyAAAJ&pf=1&UA=0&canary=uIKX4SAqs0i6y8dUSp7EmtnBz3aDFdIIiKxDLWhCoVHKbA4rhjOXo_SAIHkYELYjELcSSsBj3eU.&SP=1&subpage=ReadMessage.ascx
2015-02-06 09:06:25 [3460,16] RawUrl: /owa/?ae=Item&a=Preview&t=IPM.Note&id=RgAAAAAMa4q9vI8fRYRlurzFwP%2feBwDazVmJkuzpQ5rm%2b12FtoRhAAAA%2bmxnAADazVmJkuzpQ5rm%2b12FtoRhAACaUHnyAAAJ&pf=1&UA=0&canary=uIKX4SAqs0i6y8dUSp7EmtnBz3aDFdIIiKxDLWhCoVHKbA4rhjOXo_SAIHkYELYjELcSSsBj3eU.&SP=1
2015-02-06 09:06:25 [3460,16] Query String parameters:
2015-02-06 09:06:25 [3460,16]     ae: Item
2015-02-06 09:06:25 [3460,16]     a: Preview
2015-02-06 09:06:25 [3460,16]     t: IPM.Note
2015-02-06 09:06:25 [3460,16]     id: RgAAAAAMa4q9vI8fRYRlurzFwP/eBwDazVmJkuzpQ5rm+12FtoRhAAAA+mxnAADazVmJkuzpQ5rm+12FtoRhAACaUHnyAAAJ
2015-02-06 09:06:25 [3460,16]     pf: 1
2015-02-06 09:06:25 [3460,16]     UA: 0
2015-02-06 09:06:25 [3460,16]     canary: uIKX4SAqs0i6y8dUSp7EmtnBz3aDFdIIiKxDLWhCoVHKbA4rhjOXo_SAIHkYELYjELcSSsBj3eU.
2015-02-06 09:06:25 [3460,16]     SP: 1
2015-02-06 09:06:25 [3460,16]     subpage: ReadMessage.ascx
2015-02-06 09:06:25 [3460,16] Form: 
2015-02-06 09:06:25 [3460,16] OWA Session details
2015-02-06 09:06:25 [3460,16]     User agent: Mozilla/5.0 (Windows NT 6.3; WOW64; rv:35.0) Gecko/20100101 Firefox/35.0
2015-02-06 09:06:25 [3460,16]     Authentication type: Basic
2015-02-06 09:06:25 [3460,16]     Authenticated user: MYCOMPANY\test.user
2015-02-06 09:06:25 [3460,16]     Client IP Address: 10.0.126.38
2015-02-06 09:06:25 [3460,16]     Server IP Address: 10.0.126.71
2015-02-06 09:06:25 [3460,16]     Host: outlook.mycompany.local
2015-02-06 09:06:25 [3460,16] Primary SMTP Address: Test.User@MyCompany.com
2015-02-06 09:06:25 [3460,16] EV Extensions DLL version: 9.0.2.0
2015-02-06 09:06:25 [3460,16] [ImpersonationManager::StartImpersonation] Entry: Current user: NT AUTHORITY\SYSTEM
2015-02-06 09:06:25 [3460,16] [ImpersonationManager::StartImpersonation] Entry: Impersonation Level: None
2015-02-06 09:06:25 [3460,16] [ImpersonationManager::StartImpersonation] Impersonating logged on user
2015-02-06 09:06:25 [3460,16] [ImpersonationManager::StartImpersonation] Exit: Current user: MYCOMPANY\test.user
2015-02-06 09:06:25 [3460,16] [ImpersonationManager::StartImpersonation] Exit: Impersonation Level: Impersonation
2015-02-06 09:06:25 [3460,16] [EVContext::Initialise] EVContext intialised at 2015-02-06 09:06:19
2015-02-06 09:06:25 [3460,16] [EVContext::Initialise] Hidden settings loaded at 2015-02-06 09:06:19
2015-02-06 09:06:25 [3460,16] [EVContext::IsValidBrowser] Returning: False
2015-02-06 09:06:25 [3460,16] [ImpersonationManager:StopImpersonation] Stopped impersonation
2015-02-06 09:06:25 [3460,16] Request processing finished
2015-02-06 09:06:25 [3460,16] #############################################################
2015-02-06 09:06:25 [3460,16] Request processing started
2015-02-06 09:06:25 [3460,16] Url: https://outlook.mycompany.local/owa/forms/premium/SubPageEventHandler.aspx?ae=Item&a=Preview&t=IPM.Note&id=RgAAAAAMa4q9vI8fRYRlurzFwP/eBwDazVmJkuzpQ5rm+12FtoRhAAAA+mxnAADazVmJkuzpQ5rm+12FtoRhAACaUHnxAAAJ&pf=1&UA=0&canary=uIKX4SAqs0i6y8dUSp7EmtnBz3aDFdIIiKxDLWhCoVHKbA4rhjOXo_SAIHkYELYjELcSSsBj3eU.&SP=1&subpage=ReadMessage.ascx
2015-02-06 09:06:25 [3460,16] RawUrl: /owa/?ae=Item&a=Preview&t=IPM.Note&id=RgAAAAAMa4q9vI8fRYRlurzFwP%2feBwDazVmJkuzpQ5rm%2b12FtoRhAAAA%2bmxnAADazVmJkuzpQ5rm%2b12FtoRhAACaUHnxAAAJ&pf=1&UA=0&canary=uIKX4SAqs0i6y8dUSp7EmtnBz3aDFdIIiKxDLWhCoVHKbA4rhjOXo_SAIHkYELYjELcSSsBj3eU.&SP=1
2015-02-06 09:06:25 [3460,16] Query String parameters:
2015-02-06 09:06:25 [3460,16]     ae: Item
2015-02-06 09:06:25 [3460,16]     a: Preview
2015-02-06 09:06:25 [3460,16]     t: IPM.Note
2015-02-06 09:06:25 [3460,16]     id: RgAAAAAMa4q9vI8fRYRlurzFwP/eBwDazVmJkuzpQ5rm+12FtoRhAAAA+mxnAADazVmJkuzpQ5rm+12FtoRhAACaUHnxAAAJ
2015-02-06 09:06:25 [3460,16]     pf: 1
2015-02-06 09:06:25 [3460,16]     UA: 0
2015-02-06 09:06:25 [3460,16]     canary: uIKX4SAqs0i6y8dUSp7EmtnBz3aDFdIIiKxDLWhCoVHKbA4rhjOXo_SAIHkYELYjELcSSsBj3eU.
2015-02-06 09:06:25 [3460,16]     SP: 1
2015-02-06 09:06:25 [3460,16]     subpage: ReadMessage.ascx
2015-02-06 09:06:25 [3460,16] Form: 
2015-02-06 09:06:25 [3460,16] OWA Session details
2015-02-06 09:06:25 [3460,16]     User agent: Mozilla/5.0 (Windows NT 6.3; WOW64; rv:35.0) Gecko/20100101 Firefox/35.0
2015-02-06 09:06:25 [3460,16]     Authentication type: Basic
2015-02-06 09:06:25 [3460,16]     Authenticated user: MYCOMPANY\test.user
2015-02-06 09:06:25 [3460,16]     Client IP Address: 10.0.126.38
2015-02-06 09:06:25 [3460,16]     Server IP Address: 10.0.126.71
2015-02-06 09:06:25 [3460,16]     Host: outlook.mycompany.local
2015-02-06 09:06:25 [3460,16] Primary SMTP Address: Test.User@MyCompany.com
2015-02-06 09:06:25 [3460,16] EV Extensions DLL version: 9.0.2.0
2015-02-06 09:06:25 [3460,16] [ImpersonationManager::StartImpersonation] Entry: Current user: NT AUTHORITY\SYSTEM
2015-02-06 09:06:25 [3460,16] [ImpersonationManager::StartImpersonation] Entry: Impersonation Level: None
2015-02-06 09:06:25 [3460,16] [ImpersonationManager::StartImpersonation] Impersonating logged on user
2015-02-06 09:06:25 [3460,16] [ImpersonationManager::StartImpersonation] Exit: Current user: MYCOMPANY\test.user
2015-02-06 09:06:25 [3460,16] [ImpersonationManager::StartImpersonation] Exit: Impersonation Level: Impersonation
2015-02-06 09:06:25 [3460,16] [EVContext::Initialise] EVContext intialised at 2015-02-06 09:06:19
2015-02-06 09:06:25 [3460,16] [EVContext::Initialise] Hidden settings loaded at 2015-02-06 09:06:19
2015-02-06 09:06:25 [3460,16] [EVContext::IsValidBrowser] Returning: False
2015-02-06 09:06:25 [3460,16] [ImpersonationManager:StopImpersonation] Stopped impersonation
2015-02-06 09:06:25 [3460,16] Request processing finished
2015-02-06 09:06:25 [3460,16] #############################################################
2015-02-06 09:06:25 [3460,16] Request processing started
2015-02-06 09:06:25 [3460,16] Url: https://outlook.mycompany.local/owa/forms/premium/SubPageEventHandler.aspx?ae=Item&a=Preview&t=IPM.Note&id=RgAAAAAMa4q9vI8fRYRlurzFwP/eBwDazVmJkuzpQ5rm+12FtoRhAAAA+mxnAADazVmJkuzpQ5rm+12FtoRhAACaUHnxAAAJ&pf=1&UA=0&canary=uIKX4SAqs0i6y8dUSp7EmtnBz3aDFdIIiKxDLWhCoVHKbA4rhjOXo_SAIHkYELYjELcSSsBj3eU.&SP=1&subpage=ReadMessage.ascx
2015-02-06 09:06:25 [3460,16] RawUrl: /owa/?ae=Item&a=Preview&t=IPM.Note&id=RgAAAAAMa4q9vI8fRYRlurzFwP%2feBwDazVmJkuzpQ5rm%2b12FtoRhAAAA%2bmxnAADazVmJkuzpQ5rm%2b12FtoRhAACaUHnxAAAJ&pf=1&UA=0&canary=uIKX4SAqs0i6y8dUSp7EmtnBz3aDFdIIiKxDLWhCoVHKbA4rhjOXo_SAIHkYELYjELcSSsBj3eU.&SP=1
2015-02-06 09:06:25 [3460,16] Query String parameters:
2015-02-06 09:06:25 [3460,16]     ae: Item
2015-02-06 09:06:25 [3460,16]     a: Preview
2015-02-06 09:06:25 [3460,16]     t: IPM.Note
2015-02-06 09:06:25 [3460,16]     id: RgAAAAAMa4q9vI8fRYRlurzFwP/eBwDazVmJkuzpQ5rm+12FtoRhAAAA+mxnAADazVmJkuzpQ5rm+12FtoRhAACaUHnxAAAJ
2015-02-06 09:06:25 [3460,16]     pf: 1
2015-02-06 09:06:25 [3460,16]     UA: 0
2015-02-06 09:06:25 [3460,16]     canary: uIKX4SAqs0i6y8dUSp7EmtnBz3aDFdIIiKxDLWhCoVHKbA4rhjOXo_SAIHkYELYjELcSSsBj3eU.
2015-02-06 09:06:25 [3460,16]     SP: 1
2015-02-06 09:06:25 [3460,16]     subpage: ReadMessage.ascx
2015-02-06 09:06:25 [3460,16] Form: 
2015-02-06 09:06:25 [3460,16] OWA Session details
2015-02-06 09:06:25 [3460,16]     User agent: Mozilla/5.0 (Windows NT 6.3; WOW64; rv:35.0) Gecko/20100101 Firefox/35.0
2015-02-06 09:06:25 [3460,16]     Authentication type: Basic
2015-02-06 09:06:25 [3460,16]     Authenticated user: MYCOMPANY\test.user
2015-02-06 09:06:25 [3460,16]     Client IP Address: 10.0.126.38
2015-02-06 09:06:25 [3460,16]     Server IP Address: 10.0.126.71
2015-02-06 09:06:25 [3460,16]     Host: outlook.mycompany.local
2015-02-06 09:06:25 [3460,16] Primary SMTP Address: Test.User@MyCompany.com
2015-02-06 09:06:25 [3460,16] EV Extensions DLL version: 9.0.2.0
2015-02-06 09:06:25 [3460,16] [ImpersonationManager::StartImpersonation] Entry: Current user: NT AUTHORITY\SYSTEM
2015-02-06 09:06:25 [3460,16] [ImpersonationManager::StartImpersonation] Entry: Impersonation Level: None
2015-02-06 09:06:25 [3460,16] [ImpersonationManager::StartImpersonation] Impersonating logged on user
2015-02-06 09:06:25 [3460,16] [ImpersonationManager::StartImpersonation] Exit: Current user: MYCOMPANY\test.user
2015-02-06 09:06:25 [3460,16] [ImpersonationManager::StartImpersonation] Exit: Impersonation Level: Impersonation
2015-02-06 09:06:25 [3460,16] [EVContext::Initialise] EVContext intialised at 2015-02-06 09:06:19
2015-02-06 09:06:25 [3460,16] [EVContext::Initialise] Hidden settings loaded at 2015-02-06 09:06:19
2015-02-06 09:06:25 [3460,16] [EVContext::IsValidBrowser] Returning: False
2015-02-06 09:06:25 [3460,16] [ImpersonationManager:StopImpersonation] Stopped impersonation
2015-02-06 09:06:25 [3460,16] Request processing finished
2015-02-06 09:06:25 [3460,16] #############################################################
2015-02-06 09:06:25 [3460,16] Request processing started
2015-02-06 09:06:25 [3460,16] Url: https://outlook.mycompany.local/owa/forms/premium/SubPageEventHandler.aspx?ae=Item&a=Preview&t=IPM.Note&id=RgAAAAAMa4q9vI8fRYRlurzFwP/eBwDazVmJkuzpQ5rm+12FtoRhAAAA+mxnAADazVmJkuzpQ5rm+12FtoRhAACaUHnwAAAJ&pf=1&UA=0&canary=uIKX4SAqs0i6y8dUSp7EmtnBz3aDFdIIiKxDLWhCoVHKbA4rhjOXo_SAIHkYELYjELcSSsBj3eU.&SP=1&subpage=ReadMessage.ascx
2015-02-06 09:06:25 [3460,16] RawUrl: /owa/?ae=Item&a=Preview&t=IPM.Note&id=RgAAAAAMa4q9vI8fRYRlurzFwP%2feBwDazVmJkuzpQ5rm%2b12FtoRhAAAA%2bmxnAADazVmJkuzpQ5rm%2b12FtoRhAACaUHnwAAAJ&pf=1&UA=0&canary=uIKX4SAqs0i6y8dUSp7EmtnBz3aDFdIIiKxDLWhCoVHKbA4rhjOXo_SAIHkYELYjELcSSsBj3eU.&SP=1
2015-02-06 09:06:25 [3460,16] Query String parameters:
2015-02-06 09:06:25 [3460,16]     ae: Item
2015-02-06 09:06:25 [3460,16]     a: Preview
2015-02-06 09:06:25 [3460,16]     t: IPM.Note
2015-02-06 09:06:25 [3460,16]     id: RgAAAAAMa4q9vI8fRYRlurzFwP/eBwDazVmJkuzpQ5rm+12FtoRhAAAA+mxnAADazVmJkuzpQ5rm+12FtoRhAACaUHnwAAAJ
2015-02-06 09:06:25 [3460,16]     pf: 1
2015-02-06 09:06:25 [3460,16]     UA: 0
2015-02-06 09:06:25 [3460,16]     canary: uIKX4SAqs0i6y8dUSp7EmtnBz3aDFdIIiKxDLWhCoVHKbA4rhjOXo_SAIHkYELYjELcSSsBj3eU.
2015-02-06 09:06:25 [3460,16]     SP: 1
2015-02-06 09:06:25 [3460,16]     subpage: ReadMessage.ascx
2015-02-06 09:06:25 [3460,16] Form: 
2015-02-06 09:06:25 [3460,16] OWA Session details
2015-02-06 09:06:25 [3460,16]     User agent: Mozilla/5.0 (Windows NT 6.3; WOW64; rv:35.0) Gecko/20100101 Firefox/35.0
2015-02-06 09:06:25 [3460,16]     Authentication type: Basic
2015-02-06 09:06:25 [3460,16]     Authenticated user: MYCOMPANY\test.user
2015-02-06 09:06:25 [3460,16]     Client IP Address: 10.0.126.38
2015-02-06 09:06:25 [3460,16]     Server IP Address: 10.0.126.71
2015-02-06 09:06:25 [3460,16]     Host: outlook.mycompany.local
2015-02-06 09:06:25 [3460,16] Primary SMTP Address: Test.User@MyCompany.com
2015-02-06 09:06:25 [3460,16] EV Extensions DLL version: 9.0.2.0
2015-02-06 09:06:25 [3460,16] [ImpersonationManager::StartImpersonation] Entry: Current user: NT AUTHORITY\SYSTEM
2015-02-06 09:06:25 [3460,16] [ImpersonationManager::StartImpersonation] Entry: Impersonation Level: None
2015-02-06 09:06:25 [3460,16] [ImpersonationManager::StartImpersonation] Impersonating logged on user
2015-02-06 09:06:25 [3460,16] [ImpersonationManager::StartImpersonation] Exit: Current user: MYCOMPANY\test.user
2015-02-06 09:06:25 [3460,16] [ImpersonationManager::StartImpersonation] Exit: Impersonation Level: Impersonation
2015-02-06 09:06:25 [3460,16] [EVContext::Initialise] EVContext intialised at 2015-02-06 09:06:19
2015-02-06 09:06:25 [3460,16] [EVContext::Initialise] Hidden settings loaded at 2015-02-06 09:06:19
2015-02-06 09:06:25 [3460,16] [EVContext::IsValidBrowser] Returning: False
2015-02-06 09:06:25 [3460,16] [ImpersonationManager:StopImpersonation] Stopped impersonation
2015-02-06 09:06:25 [3460,16] Request processing finished
2015-02-06 09:06:25 [3460,16] #############################################################
2015-02-06 09:06:25 [3460,16] Request processing started
2015-02-06 09:06:25 [3460,16] Url: https://outlook.mycompany.local/owa/forms/premium/SubPageEventHandler.aspx?ae=Item&a=Preview&t=IPM.Note&id=RgAAAAAMa4q9vI8fRYRlurzFwP/eBwDazVmJkuzpQ5rm+12FtoRhAAAA+mxnAADazVmJkuzpQ5rm+12FtoRhAACaUHnwAAAJ&pf=1&UA=0&canary=uIKX4SAqs0i6y8dUSp7EmtnBz3aDFdIIiKxDLWhCoVHKbA4rhjOXo_SAIHkYELYjELcSSsBj3eU.&SP=1&subpage=ReadMessage.ascx
2015-02-06 09:06:25 [3460,16] RawUrl: /owa/?ae=Item&a=Preview&t=IPM.Note&id=RgAAAAAMa4q9vI8fRYRlurzFwP%2feBwDazVmJkuzpQ5rm%2b12FtoRhAAAA%2bmxnAADazVmJkuzpQ5rm%2b12FtoRhAACaUHnwAAAJ&pf=1&UA=0&canary=uIKX4SAqs0i6y8dUSp7EmtnBz3aDFdIIiKxDLWhCoVHKbA4rhjOXo_SAIHkYELYjELcSSsBj3eU.&SP=1
2015-02-06 09:06:25 [3460,16] Query String parameters:
2015-02-06 09:06:25 [3460,16]     ae: Item
2015-02-06 09:06:25 [3460,16]     a: Preview
2015-02-06 09:06:25 [3460,16]     t: IPM.Note
2015-02-06 09:06:25 [3460,16]     id: RgAAAAAMa4q9vI8fRYRlurzFwP/eBwDazVmJkuzpQ5rm+12FtoRhAAAA+mxnAADazVmJkuzpQ5rm+12FtoRhAACaUHnwAAAJ
2015-02-06 09:06:25 [3460,16]     pf: 1
2015-02-06 09:06:25 [3460,16]     UA: 0
2015-02-06 09:06:25 [3460,16]     canary: uIKX4SAqs0i6y8dUSp7EmtnBz3aDFdIIiKxDLWhCoVHKbA4rhjOXo_SAIHkYELYjELcSSsBj3eU.
2015-02-06 09:06:25 [3460,16]     SP: 1
2015-02-06 09:06:25 [3460,16]     subpage: ReadMessage.ascx
2015-02-06 09:06:25 [3460,16] Form: 
2015-02-06 09:06:25 [3460,16] OWA Session details
2015-02-06 09:06:25 [3460,16]     User agent: Mozilla/5.0 (Windows NT 6.3; WOW64; rv:35.0) Gecko/20100101 Firefox/35.0
2015-02-06 09:06:25 [3460,16]     Authentication type: Basic
2015-02-06 09:06:25 [3460,16]     Authenticated user: MYCOMPANY\test.user
2015-02-06 09:06:25 [3460,16]     Client IP Address: 10.0.126.38
2015-02-06 09:06:25 [3460,16]     Server IP Address: 10.0.126.71
2015-02-06 09:06:25 [3460,16]     Host: outlook.mycompany.local
2015-02-06 09:06:25 [3460,16] Primary SMTP Address: Test.User@MyCompany.com
2015-02-06 09:06:25 [3460,16] EV Extensions DLL version: 9.0.2.0
2015-02-06 09:06:25 [3460,16] [ImpersonationManager::StartImpersonation] Entry: Current user: NT AUTHORITY\SYSTEM
2015-02-06 09:06:25 [3460,16] [ImpersonationManager::StartImpersonation] Entry: Impersonation Level: None
2015-02-06 09:06:25 [3460,16] [ImpersonationManager::StartImpersonation] Impersonating logged on user
2015-02-06 09:06:25 [3460,16] [ImpersonationManager::StartImpersonation] Exit: Current user: MYCOMPANY\test.user
2015-02-06 09:06:25 [3460,16] [ImpersonationManager::StartImpersonation] Exit: Impersonation Level: Impersonation
2015-02-06 09:06:25 [3460,16] [EVContext::Initialise] EVContext intialised at 2015-02-06 09:06:19
2015-02-06 09:06:25 [3460,16] [EVContext::Initialise] Hidden settings loaded at 2015-02-06 09:06:19
2015-02-06 09:06:25 [3460,16] [EVContext::IsValidBrowser] Returning: False
2015-02-06 09:06:25 [3460,16] [ImpersonationManager:StopImpersonation] Stopped impersonation
2015-02-06 09:06:25 [3460,16] Request processing finished
2015-02-06 09:06:25 [3460,16] #############################################################
2015-02-06 09:06:25 [3460,16] Request processing started
2015-02-06 09:06:25 [3460,16] Url: https://outlook.mycompany.local/owa/forms/premium/SubPageEventHandler.aspx?ae=Item&a=Preview&t=IPM.Note&id=RgAAAAAMa4q9vI8fRYRlurzFwP/eBwDazVmJkuzpQ5rm+12FtoRhAAAA+mxnAADazVmJkuzpQ5rm+12FtoRhAACaUHnvAAAJ&pf=1&UA=0&canary=uIKX4SAqs0i6y8dUSp7EmtnBz3aDFdIIiKxDLWhCoVHKbA4rhjOXo_SAIHkYELYjELcSSsBj3eU.&SP=1&subpage=ReadMessage.ascx
2015-02-06 09:06:25 [3460,16] RawUrl: /owa/?ae=Item&a=Preview&t=IPM.Note&id=RgAAAAAMa4q9vI8fRYRlurzFwP%2feBwDazVmJkuzpQ5rm%2b12FtoRhAAAA%2bmxnAADazVmJkuzpQ5rm%2b12FtoRhAACaUHnvAAAJ&pf=1&UA=0&canary=uIKX4SAqs0i6y8dUSp7EmtnBz3aDFdIIiKxDLWhCoVHKbA4rhjOXo_SAIHkYELYjELcSSsBj3eU.&SP=1
2015-02-06 09:06:25 [3460,16] Query String parameters:
2015-02-06 09:06:25 [3460,16]     ae: Item
2015-02-06 09:06:25 [3460,16]     a: Preview
2015-02-06 09:06:25 [3460,16]     t: IPM.Note
2015-02-06 09:06:25 [3460,16]     id: RgAAAAAMa4q9vI8fRYRlurzFwP/eBwDazVmJkuzpQ5rm+12FtoRhAAAA+mxnAADazVmJkuzpQ5rm+12FtoRhAACaUHnvAAAJ
2015-02-06 09:06:25 [3460,16]     pf: 1
2015-02-06 09:06:25 [3460,16]     UA: 0
2015-02-06 09:06:25 [3460,16]     canary: uIKX4SAqs0i6y8dUSp7EmtnBz3aDFdIIiKxDLWhCoVHKbA4rhjOXo_SAIHkYELYjELcSSsBj3eU.
2015-02-06 09:06:25 [3460,16]     SP: 1
2015-02-06 09:06:25 [3460,16]     subpage: ReadMessage.ascx
2015-02-06 09:06:25 [3460,16] Form: 
2015-02-06 09:06:25 [3460,16] OWA Session details
2015-02-06 09:06:25 [3460,16]     User agent: Mozilla/5.0 (Windows NT 6.3; WOW64; rv:35.0) Gecko/20100101 Firefox/35.0
2015-02-06 09:06:25 [3460,16]     Authentication type: Basic
2015-02-06 09:06:25 [3460,16]     Authenticated user: MYCOMPANY\test.user
2015-02-06 09:06:25 [3460,16]     Client IP Address: 10.0.126.38
2015-02-06 09:06:25 [3460,16]     Server IP Address: 10.0.126.71
2015-02-06 09:06:25 [3460,16]     Host: outlook.mycompany.local
2015-02-06 09:06:25 [3460,16] Primary SMTP Address: Test.User@MyCompany.com
2015-02-06 09:06:25 [3460,16] EV Extensions DLL version: 9.0.2.0
2015-02-06 09:06:25 [3460,16] [ImpersonationManager::StartImpersonation] Entry: Current user: NT AUTHORITY\SYSTEM
2015-02-06 09:06:25 [3460,16] [ImpersonationManager::StartImpersonation] Entry: Impersonation Level: None
2015-02-06 09:06:25 [3460,16] [ImpersonationManager::StartImpersonation] Impersonating logged on user
2015-02-06 09:06:25 [3460,16] [ImpersonationManager::StartImpersonation] Exit: Current user: MYCOMPANY\test.user
2015-02-06 09:06:25 [3460,16] [ImpersonationManager::StartImpersonation] Exit: Impersonation Level: Impersonation
2015-02-06 09:06:25 [3460,16] [EVContext::Initialise] EVContext intialised at 2015-02-06 09:06:19
2015-02-06 09:06:25 [3460,16] [EVContext::Initialise] Hidden settings loaded at 2015-02-06 09:06:19
2015-02-06 09:06:25 [3460,16] [EVContext::IsValidBrowser] Returning: False
2015-02-06 09:06:25 [3460,16] [ImpersonationManager:StopImpersonation] Stopped impersonation
2015-02-06 09:06:25 [3460,16] Request processing finished
2015-02-06 09:06:25 [3460,16] #############################################################
2015-02-06 09:06:25 [3460,16] Request processing started
2015-02-06 09:06:25 [3460,16] Url: https://outlook.mycompany.local/owa/forms/premium/SubPageEventHandler.aspx?ae=Item&a=Preview&t=IPM.Note&id=RgAAAAAMa4q9vI8fRYRlurzFwP/eBwDazVmJkuzpQ5rm+12FtoRhAAAA+mxnAADazVmJkuzpQ5rm+12FtoRhAACaUHnvAAAJ&pf=1&UA=0&canary=uIKX4SAqs0i6y8dUSp7EmtnBz3aDFdIIiKxDLWhCoVHKbA4rhjOXo_SAIHkYELYjELcSSsBj3eU.&SP=1&subpage=ReadMessage.ascx
2015-02-06 09:06:25 [3460,16] RawUrl: /owa/?ae=Item&a=Preview&t=IPM.Note&id=RgAAAAAMa4q9vI8fRYRlurzFwP%2feBwDazVmJkuzpQ5rm%2b12FtoRhAAAA%2bmxnAADazVmJkuzpQ5rm%2b12FtoRhAACaUHnvAAAJ&pf=1&UA=0&canary=uIKX4SAqs0i6y8dUSp7EmtnBz3aDFdIIiKxDLWhCoVHKbA4rhjOXo_SAIHkYELYjELcSSsBj3eU.&SP=1
2015-02-06 09:06:25 [3460,16] Query String parameters:
2015-02-06 09:06:25 [3460,16]     ae: Item
2015-02-06 09:06:25 [3460,16]     a: Preview
2015-02-06 09:06:25 [3460,16]     t: IPM.Note
2015-02-06 09:06:25 [3460,16]     id: RgAAAAAMa4q9vI8fRYRlurzFwP/eBwDazVmJkuzpQ5rm+12FtoRhAAAA+mxnAADazVmJkuzpQ5rm+12FtoRhAACaUHnvAAAJ
2015-02-06 09:06:25 [3460,16]     pf: 1
2015-02-06 09:06:25 [3460,16]     UA: 0
2015-02-06 09:06:25 [3460,16]     canary: uIKX4SAqs0i6y8dUSp7EmtnBz3aDFdIIiKxDLWhCoVHKbA4rhjOXo_SAIHkYELYjELcSSsBj3eU.
2015-02-06 09:06:25 [3460,16]     SP: 1
2015-02-06 09:06:25 [3460,16]     subpage: ReadMessage.ascx
2015-02-06 09:06:25 [3460,16] Form: 
2015-02-06 09:06:25 [3460,16] OWA Session details
2015-02-06 09:06:25 [3460,16]     User agent: Mozilla/5.0 (Windows NT 6.3; WOW64; rv:35.0) Gecko/20100101 Firefox/35.0
2015-02-06 09:06:25 [3460,16]     Authentication type: Basic
2015-02-06 09:06:25 [3460,16]     Authenticated user: MYCOMPANY\test.user
2015-02-06 09:06:25 [3460,16]     Client IP Address: 10.0.126.38
2015-02-06 09:06:25 [3460,16]     Server IP Address: 10.0.126.71
2015-02-06 09:06:25 [3460,16]     Host: outlook.mycompany.local
2015-02-06 09:06:25 [3460,16] Primary SMTP Address: Test.User@MyCompany.com
2015-02-06 09:06:25 [3460,16] EV Extensions DLL version: 9.0.2.0
2015-02-06 09:06:25 [3460,16] [ImpersonationManager::StartImpersonation] Entry: Current user: NT AUTHORITY\SYSTEM
2015-02-06 09:06:25 [3460,16] [ImpersonationManager::StartImpersonation] Entry: Impersonation Level: None
2015-02-06 09:06:25 [3460,16] [ImpersonationManager::StartImpersonation] Impersonating logged on user
2015-02-06 09:06:25 [3460,16] [ImpersonationManager::StartImpersonation] Exit: Current user: MYCOMPANY\test.user
2015-02-06 09:06:25 [3460,16] [ImpersonationManager::StartImpersonation] Exit: Impersonation Level: Impersonation
2015-02-06 09:06:25 [3460,16] [EVContext::Initialise] EVContext intialised at 2015-02-06 09:06:19
2015-02-06 09:06:25 [3460,16] [EVContext::Initialise] Hidden settings loaded at 2015-02-06 09:06:19
2015-02-06 09:06:25 [3460,16] [EVContext::IsValidBrowser] Returning: False
2015-02-06 09:06:25 [3460,16] [ImpersonationManager:StopImpersonation] Stopped impersonation
2015-02-06 09:06:25 [3460,16] Request processing finished
2015-02-06 09:06:25 [3460,16] #############################################################
2015-02-06 09:06:25 [3460,16] Request processing started
2015-02-06 09:06:25 [3460,16] Url: https://outlook.mycompany.local/owa/forms/premium/SubPageEventHandler.aspx?ae=Item&a=Preview&t=IPM.Note&id=RgAAAAAMa4q9vI8fRYRlurzFwP/eBwDazVmJkuzpQ5rm+12FtoRhAAAA+mxnAADazVmJkuzpQ5rm+12FtoRhAACaUHnuAAAJ&pf=1&UA=0&canary=uIKX4SAqs0i6y8dUSp7EmtnBz3aDFdIIiKxDLWhCoVHKbA4rhjOXo_SAIHkYELYjELcSSsBj3eU.&SP=1&subpage=ReadMessage.ascx
2015-02-06 09:06:25 [3460,16] RawUrl: /owa/?ae=Item&a=Preview&t=IPM.Note&id=RgAAAAAMa4q9vI8fRYRlurzFwP%2feBwDazVmJkuzpQ5rm%2b12FtoRhAAAA%2bmxnAADazVmJkuzpQ5rm%2b12FtoRhAACaUHnuAAAJ&pf=1&UA=0&canary=uIKX4SAqs0i6y8dUSp7EmtnBz3aDFdIIiKxDLWhCoVHKbA4rhjOXo_SAIHkYELYjELcSSsBj3eU.&SP=1
2015-02-06 09:06:25 [3460,16] Query String parameters:
2015-02-06 09:06:25 [3460,16]     ae: Item
2015-02-06 09:06:25 [3460,16]     a: Preview
2015-02-06 09:06:25 [3460,16]     t: IPM.Note
2015-02-06 09:06:25 [3460,16]     id: RgAAAAAMa4q9vI8fRYRlurzFwP/eBwDazVmJkuzpQ5rm+12FtoRhAAAA+mxnAADazVmJkuzpQ5rm+12FtoRhAACaUHnuAAAJ
2015-02-06 09:06:25 [3460,16]     pf: 1
2015-02-06 09:06:25 [3460,16]     UA: 0
2015-02-06 09:06:25 [3460,16]     canary: uIKX4SAqs0i6y8dUSp7EmtnBz3aDFdIIiKxDLWhCoVHKbA4rhjOXo_SAIHkYELYjELcSSsBj3eU.
2015-02-06 09:06:25 [3460,16]     SP: 1
2015-02-06 09:06:25 [3460,16]     subpage: ReadMessage.ascx
2015-02-06 09:06:25 [3460,16] Form: 
2015-02-06 09:06:25 [3460,16] OWA Session details
2015-02-06 09:06:25 [3460,16]     User agent: Mozilla/5.0 (Windows NT 6.3; WOW64; rv:35.0) Gecko/20100101 Firefox/35.0
2015-02-06 09:06:25 [3460,16]     Authentication type: Basic
2015-02-06 09:06:25 [3460,16]     Authenticated user: MYCOMPANY\test.user
2015-02-06 09:06:25 [3460,16]     Client IP Address: 10.0.126.38
2015-02-06 09:06:25 [3460,16]     Server IP Address: 10.0.126.71
2015-02-06 09:06:25 [3460,16]     Host: outlook.mycompany.local
2015-02-06 09:06:25 [3460,16] Primary SMTP Address: Test.User@MyCompany.com
2015-02-06 09:06:25 [3460,16] EV Extensions DLL version: 9.0.2.0
2015-02-06 09:06:25 [3460,16] [ImpersonationManager::StartImpersonation] Entry: Current user: NT AUTHORITY\SYSTEM
2015-02-06 09:06:25 [3460,16] [ImpersonationManager::StartImpersonation] Entry: Impersonation Level: None
2015-02-06 09:06:25 [3460,16] [ImpersonationManager::StartImpersonation] Impersonating logged on user
2015-02-06 09:06:25 [3460,16] [ImpersonationManager::StartImpersonation] Exit: Current user: MYCOMPANY\test.user
2015-02-06 09:06:25 [3460,16] [ImpersonationManager::StartImpersonation] Exit: Impersonation Level: Impersonation
2015-02-06 09:06:25 [3460,16] [EVContext::Initialise] EVContext intialised at 2015-02-06 09:06:19
2015-02-06 09:06:25 [3460,16] [EVContext::Initialise] Hidden settings loaded at 2015-02-06 09:06:19
2015-02-06 09:06:25 [3460,16] [EVContext::IsValidBrowser] Returning: False
2015-02-06 09:06:25 [3460,16] [ImpersonationManager:StopImpersonation] Stopped impersonation
2015-02-06 09:06:25 [3460,16] Request processing finished
2015-02-06 09:06:25 [3460,16] #############################################################
2015-02-06 09:06:25 [3460,16] Request processing started
2015-02-06 09:06:25 [3460,16] Url: https://outlook.mycompany.local/owa/forms/premium/SubPageEventHandler.aspx?ae=Item&a=Preview&t=IPM.Note&id=RgAAAAAMa4q9vI8fRYRlurzFwP/eBwDazVmJkuzpQ5rm+12FtoRhAAAA+mxnAADazVmJkuzpQ5rm+12FtoRhAACaUHnuAAAJ&pf=1&UA=0&canary=uIKX4SAqs0i6y8dUSp7EmtnBz3aDFdIIiKxDLWhCoVHKbA4rhjOXo_SAIHkYELYjELcSSsBj3eU.&SP=1&subpage=ReadMessage.ascx
2015-02-06 09:06:25 [3460,16] RawUrl: /owa/?ae=Item&a=Preview&t=IPM.Note&id=RgAAAAAMa4q9vI8fRYRlurzFwP%2feBwDazVmJkuzpQ5rm%2b12FtoRhAAAA%2bmxnAADazVmJkuzpQ5rm%2b12FtoRhAACaUHnuAAAJ&pf=1&UA=0&canary=uIKX4SAqs0i6y8dUSp7EmtnBz3aDFdIIiKxDLWhCoVHKbA4rhjOXo_SAIHkYELYjELcSSsBj3eU.&SP=1
2015-02-06 09:06:25 [3460,16] Query String parameters:
2015-02-06 09:06:25 [3460,16]     ae: Item
2015-02-06 09:06:25 [3460,16]     a: Preview
2015-02-06 09:06:25 [3460,16]     t: IPM.Note
2015-02-06 09:06:25 [3460,16]     id: RgAAAAAMa4q9vI8fRYRlurzFwP/eBwDazVmJkuzpQ5rm+12FtoRhAAAA+mxnAADazVmJkuzpQ5rm+12FtoRhAACaUHnuAAAJ
2015-02-06 09:06:25 [3460,16]     pf: 1
2015-02-06 09:06:25 [3460,16]     UA: 0
2015-02-06 09:06:25 [3460,16]     canary: uIKX4SAqs0i6y8dUSp7EmtnBz3aDFdIIiKxDLWhCoVHKbA4rhjOXo_SAIHkYELYjELcSSsBj3eU.
2015-02-06 09:06:25 [3460,16]     SP: 1
2015-02-06 09:06:25 [3460,16]     subpage: ReadMessage.ascx
2015-02-06 09:06:25 [3460,16] Form: 
2015-02-06 09:06:25 [3460,16] OWA Session details
2015-02-06 09:06:25 [3460,16]     User agent: Mozilla/5.0 (Windows NT 6.3; WOW64; rv:35.0) Gecko/20100101 Firefox/35.0
2015-02-06 09:06:25 [3460,16]     Authentication type: Basic
2015-02-06 09:06:25 [3460,16]     Authenticated user: MYCOMPANY\test.user
2015-02-06 09:06:25 [3460,16]     Client IP Address: 10.0.126.38
2015-02-06 09:06:25 [3460,16]     Server IP Address: 10.0.126.71
2015-02-06 09:06:25 [3460,16]     Host: outlook.mycompany.local
2015-02-06 09:06:25 [3460,16] Primary SMTP Address: Test.User@MyCompany.com
2015-02-06 09:06:25 [3460,16] EV Extensions DLL version: 9.0.2.0
2015-02-06 09:06:25 [3460,16] [ImpersonationManager::StartImpersonation] Entry: Current user: NT AUTHORITY\SYSTEM
2015-02-06 09:06:25 [3460,16] [ImpersonationManager::StartImpersonation] Entry: Impersonation Level: None
2015-02-06 09:06:25 [3460,16] [ImpersonationManager::StartImpersonation] Impersonating logged on user
2015-02-06 09:06:25 [3460,16] [ImpersonationManager::StartImpersonation] Exit: Current user: MYCOMPANY\test.user
2015-02-06 09:06:25 [3460,16] [ImpersonationManager::StartImpersonation] Exit: Impersonation Level: Impersonation
2015-02-06 09:06:25 [3460,16] [EVContext::Initialise] EVContext intialised at 2015-02-06 09:06:19
2015-02-06 09:06:25 [3460,16] [EVContext::Initialise] Hidden settings loaded at 2015-02-06 09:06:19
2015-02-06 09:06:25 [3460,16] [EVContext::IsValidBrowser] Returning: False
2015-02-06 09:06:25 [3460,16] [ImpersonationManager:StopImpersonation] Stopped impersonation
2015-02-06 09:06:25 [3460,16] Request processing finished
2015-02-06 09:06:25 [3460,16] #############################################################
2015-02-06 09:06:25 [3460,16] Request processing started
2015-02-06 09:06:25 [3460,16] Url: https://outlook.mycompany.local/owa/forms/premium/SubPageEventHandler.aspx?ae=Item&a=Preview&t=IPM.Note&id=RgAAAAAMa4q9vI8fRYRlurzFwP/eBwDazVmJkuzpQ5rm+12FtoRhAAAA+mxnAADazVmJkuzpQ5rm+12FtoRhAACaUHntAAAJ&pf=1&UA=0&canary=uIKX4SAqs0i6y8dUSp7EmtnBz3aDFdIIiKxDLWhCoVHKbA4rhjOXo_SAIHkYELYjELcSSsBj3eU.&SP=1&subpage=ReadMessage.ascx
2015-02-06 09:06:25 [3460,16] RawUrl: /owa/?ae=Item&a=Preview&t=IPM.Note&id=RgAAAAAMa4q9vI8fRYRlurzFwP%2feBwDazVmJkuzpQ5rm%2b12FtoRhAAAA%2bmxnAADazVmJkuzpQ5rm%2b12FtoRhAACaUHntAAAJ&pf=1&UA=0&canary=uIKX4SAqs0i6y8dUSp7EmtnBz3aDFdIIiKxDLWhCoVHKbA4rhjOXo_SAIHkYELYjELcSSsBj3eU.&SP=1
2015-02-06 09:06:25 [3460,16] Query String parameters:
2015-02-06 09:06:25 [3460,16]     ae: Item
2015-02-06 09:06:25 [3460,16]     a: Preview
2015-02-06 09:06:25 [3460,16]     t: IPM.Note
2015-02-06 09:06:25 [3460,16]     id: RgAAAAAMa4q9vI8fRYRlurzFwP/eBwDazVmJkuzpQ5rm+12FtoRhAAAA+mxnAADazVmJkuzpQ5rm+12FtoRhAACaUHntAAAJ
2015-02-06 09:06:25 [3460,16]     pf: 1
2015-02-06 09:06:25 [3460,16]     UA: 0
2015-02-06 09:06:25 [3460,16]     canary: uIKX4SAqs0i6y8dUSp7EmtnBz3aDFdIIiKxDLWhCoVHKbA4rhjOXo_SAIHkYELYjELcSSsBj3eU.
2015-02-06 09:06:25 [3460,16]     SP: 1
2015-02-06 09:06:25 [3460,16]     subpage: ReadMessage.ascx
2015-02-06 09:06:25 [3460,16] Form: 
2015-02-06 09:06:25 [3460,16] OWA Session details
2015-02-06 09:06:25 [3460,16]     User agent: Mozilla/5.0 (Windows NT 6.3; WOW64; rv:35.0) Gecko/20100101 Firefox/35.0
2015-02-06 09:06:25 [3460,16]     Authentication type: Basic
2015-02-06 09:06:25 [3460,16]     Authenticated user: MYCOMPANY\test.user
2015-02-06 09:06:25 [3460,16]     Client IP Address: 10.0.126.38
2015-02-06 09:06:25 [3460,16]     Server IP Address: 10.0.126.71
2015-02-06 09:06:25 [3460,16]     Host: outlook.mycompany.local
2015-02-06 09:06:25 [3460,16] Primary SMTP Address: Test.User@MyCompany.com
2015-02-06 09:06:25 [3460,16] EV Extensions DLL version: 9.0.2.0
2015-02-06 09:06:25 [3460,16] [ImpersonationManager::StartImpersonation] Entry: Current user: NT AUTHORITY\SYSTEM
2015-02-06 09:06:25 [3460,16] [ImpersonationManager::StartImpersonation] Entry: Impersonation Level: None
2015-02-06 09:06:25 [3460,16] [ImpersonationManager::StartImpersonation] Impersonating logged on user
2015-02-06 09:06:25 [3460,16] [ImpersonationManager::StartImpersonation] Exit: Current user: MYCOMPANY\test.user
2015-02-06 09:06:25 [3460,16] [ImpersonationManager::StartImpersonation] Exit: Impersonation Level: Impersonation
2015-02-06 09:06:25 [3460,16] [EVContext::Initialise] EVContext intialised at 2015-02-06 09:06:19
2015-02-06 09:06:25 [3460,16] [EVContext::Initialise] Hidden settings loaded at 2015-02-06 09:06:19
2015-02-06 09:06:25 [3460,16] [EVContext::IsValidBrowser] Returning: False
2015-02-06 09:06:25 [3460,16] [ImpersonationManager:StopImpersonation] Stopped impersonation
2015-02-06 09:06:25 [3460,16] Request processing finished
2015-02-06 09:06:25 [3460,16] #############################################################
2015-02-06 09:06:25 [3460,16] Request processing started
2015-02-06 09:06:25 [3460,16] Url: https://outlook.mycompany.local/owa/forms/premium/SubPageEventHandler.aspx?ae=Item&a=Preview&t=IPM.Note&id=RgAAAAAMa4q9vI8fRYRlurzFwP/eBwDazVmJkuzpQ5rm+12FtoRhAAAA+mxnAADazVmJkuzpQ5rm+12FtoRhAACaUHntAAAJ&pf=1&UA=0&canary=uIKX4SAqs0i6y8dUSp7EmtnBz3aDFdIIiKxDLWhCoVHKbA4rhjOXo_SAIHkYELYjELcSSsBj3eU.&SP=1&subpage=ReadMessage.ascx
2015-02-06 09:06:25 [3460,16] RawUrl: /owa/?ae=Item&a=Preview&t=IPM.Note&id=RgAAAAAMa4q9vI8fRYRlurzFwP%2feBwDazVmJkuzpQ5rm%2b12FtoRhAAAA%2bmxnAADazVmJkuzpQ5rm%2b12FtoRhAACaUHntAAAJ&pf=1&UA=0&canary=uIKX4SAqs0i6y8dUSp7EmtnBz3aDFdIIiKxDLWhCoVHKbA4rhjOXo_SAIHkYELYjELcSSsBj3eU.&SP=1
2015-02-06 09:06:25 [3460,16] Query String parameters:
2015-02-06 09:06:25 [3460,16]     ae: Item
2015-02-06 09:06:25 [3460,16]     a: Preview
2015-02-06 09:06:25 [3460,16]     t: IPM.Note
2015-02-06 09:06:25 [3460,16]     id: RgAAAAAMa4q9vI8fRYRlurzFwP/eBwDazVmJkuzpQ5rm+12FtoRhAAAA+mxnAADazVmJkuzpQ5rm+12FtoRhAACaUHntAAAJ
2015-02-06 09:06:25 [3460,16]     pf: 1
2015-02-06 09:06:25 [3460,16]     UA: 0
2015-02-06 09:06:25 [3460,16]     canary: uIKX4SAqs0i6y8dUSp7EmtnBz3aDFdIIiKxDLWhCoVHKbA4rhjOXo_SAIHkYELYjELcSSsBj3eU.
2015-02-06 09:06:25 [3460,16]     SP: 1
2015-02-06 09:06:25 [3460,16]     subpage: ReadMessage.ascx
2015-02-06 09:06:25 [3460,16] Form: 
2015-02-06 09:06:25 [3460,16] OWA Session details
2015-02-06 09:06:25 [3460,16]     User agent: Mozilla/5.0 (Windows NT 6.3; WOW64; rv:35.0) Gecko/20100101 Firefox/35.0
2015-02-06 09:06:25 [3460,16]     Authentication type: Basic
2015-02-06 09:06:25 [3460,16]     Authenticated user: MYCOMPANY\test.user
2015-02-06 09:06:25 [3460,16]     Client IP Address: 10.0.126.38
2015-02-06 09:06:25 [3460,16]     Server IP Address: 10.0.126.71
2015-02-06 09:06:25 [3460,16]     Host: outlook.mycompany.local
2015-02-06 09:06:25 [3460,16] Primary SMTP Address: Test.User@MyCompany.com
2015-02-06 09:06:25 [3460,16] EV Extensions DLL version: 9.0.2.0
2015-02-06 09:06:25 [3460,16] [ImpersonationManager::StartImpersonation] Entry: Current user: NT AUTHORITY\SYSTEM
2015-02-06 09:06:25 [3460,16] [ImpersonationManager::StartImpersonation] Entry: Impersonation Level: None
2015-02-06 09:06:25 [3460,16] [ImpersonationManager::StartImpersonation] Impersonating logged on user
2015-02-06 09:06:25 [3460,16] [ImpersonationManager::StartImpersonation] Exit: Current user: MYCOMPANY\test.user
2015-02-06 09:06:25 [3460,16] [ImpersonationManager::StartImpersonation] Exit: Impersonation Level: Impersonation
2015-02-06 09:06:25 [3460,16] [EVContext::Initialise] EVContext intialised at 2015-02-06 09:06:19
2015-02-06 09:06:25 [3460,16] [EVContext::Initialise] Hidden settings loaded at 2015-02-06 09:06:19
2015-02-06 09:06:25 [3460,16] [EVContext::IsValidBrowser] Returning: False
2015-02-06 09:06:25 [3460,16] [ImpersonationManager:StopImpersonation] Stopped impersonation
2015-02-06 09:06:25 [3460,16] Request processing finished
2015-02-06 09:06:25 [3460,16] #############################################################
2015-02-06 09:06:25 [3460,16] Request processing started
2015-02-06 09:06:25 [3460,16] Url: https://outlook.mycompany.local/owa/forms/premium/SubPageEventHandler.aspx?ae=Item&a=Preview&t=IPM.Note&id=RgAAAAAMa4q9vI8fRYRlurzFwP/eBwDazVmJkuzpQ5rm+12FtoRhAAAA+mxnAADazVmJkuzpQ5rm+12FtoRhAACaUHnsAAAJ&pf=1&UA=0&canary=uIKX4SAqs0i6y8dUSp7EmtnBz3aDFdIIiKxDLWhCoVHKbA4rhjOXo_SAIHkYELYjELcSSsBj3eU.&SP=1&subpage=ReadMessage.ascx
2015-02-06 09:06:25 [3460,16] RawUrl: /owa/?ae=Item&a=Preview&t=IPM.Note&id=RgAAAAAMa4q9vI8fRYRlurzFwP%2feBwDazVmJkuzpQ5rm%2b12FtoRhAAAA%2bmxnAADazVmJkuzpQ5rm%2b12FtoRhAACaUHnsAAAJ&pf=1&UA=0&canary=uIKX4SAqs0i6y8dUSp7EmtnBz3aDFdIIiKxDLWhCoVHKbA4rhjOXo_SAIHkYELYjELcSSsBj3eU.&SP=1
2015-02-06 09:06:25 [3460,16] Query String parameters:
2015-02-06 09:06:25 [3460,16]     ae: Item
2015-02-06 09:06:25 [3460,16]     a: Preview
2015-02-06 09:06:25 [3460,16]     t: IPM.Note
2015-02-06 09:06:25 [3460,16]     id: RgAAAAAMa4q9vI8fRYRlurzFwP/eBwDazVmJkuzpQ5rm+12FtoRhAAAA+mxnAADazVmJkuzpQ5rm+12FtoRhAACaUHnsAAAJ
2015-02-06 09:06:25 [3460,16]     pf: 1
2015-02-06 09:06:25 [3460,16]     UA: 0
2015-02-06 09:06:25 [3460,16]     canary: uIKX4SAqs0i6y8dUSp7EmtnBz3aDFdIIiKxDLWhCoVHKbA4rhjOXo_SAIHkYELYjELcSSsBj3eU.
2015-02-06 09:06:25 [3460,16]     SP: 1
2015-02-06 09:06:25 [3460,16]     subpage: ReadMessage.ascx
2015-02-06 09:06:25 [3460,16] Form: 
2015-02-06 09:06:25 [3460,16] OWA Session details
2015-02-06 09:06:25 [3460,16]     User agent: Mozilla/5.0 (Windows NT 6.3; WOW64; rv:35.0) Gecko/20100101 Firefox/35.0
2015-02-06 09:06:25 [3460,16]     Authentication type: Basic
2015-02-06 09:06:25 [3460,16]     Authenticated user: MYCOMPANY\test.user
2015-02-06 09:06:25 [3460,16]     Client IP Address: 10.0.126.38
2015-02-06 09:06:25 [3460,16]     Server IP Address: 10.0.126.71
2015-02-06 09:06:25 [3460,16]     Host: outlook.mycompany.local
2015-02-06 09:06:25 [3460,16] Primary SMTP Address: Test.User@MyCompany.com
2015-02-06 09:06:25 [3460,16] EV Extensions DLL version: 9.0.2.0
2015-02-06 09:06:25 [3460,16] [ImpersonationManager::StartImpersonation] Entry: Current user: NT AUTHORITY\SYSTEM
2015-02-06 09:06:25 [3460,16] [ImpersonationManager::StartImpersonation] Entry: Impersonation Level: None
2015-02-06 09:06:25 [3460,16] [ImpersonationManager::StartImpersonation] Impersonating logged on user
2015-02-06 09:06:25 [3460,16] [ImpersonationManager::StartImpersonation] Exit: Current user: MYCOMPANY\test.user
2015-02-06 09:06:25 [3460,16] [ImpersonationManager::StartImpersonation] Exit: Impersonation Level: Impersonation
2015-02-06 09:06:25 [3460,16] [EVContext::Initialise] EVContext intialised at 2015-02-06 09:06:19
2015-02-06 09:06:25 [3460,16] [EVContext::Initialise] Hidden settings loaded at 2015-02-06 09:06:19
2015-02-06 09:06:25 [3460,16] [EVContext::IsValidBrowser] Returning: False
2015-02-06 09:06:25 [3460,16] [ImpersonationManager:StopImpersonation] Stopped impersonation
2015-02-06 09:06:25 [3460,16] Request processing finished
2015-02-06 09:06:25 [3460,16] #############################################################
2015-02-06 09:06:25 [3460,16] Request processing started
2015-02-06 09:06:25 [3460,16] Url: https://outlook.mycompany.local/owa/forms/premium/SubPageEventHandler.aspx?ae=Item&a=Preview&t=IPM.Note&id=RgAAAAAMa4q9vI8fRYRlurzFwP/eBwDazVmJkuzpQ5rm+12FtoRhAAAA+mxnAADazVmJkuzpQ5rm+12FtoRhAACaUHnsAAAJ&pf=1&UA=0&canary=uIKX4SAqs0i6y8dUSp7EmtnBz3aDFdIIiKxDLWhCoVHKbA4rhjOXo_SAIHkYELYjELcSSsBj3eU.&SP=1&subpage=ReadMessage.ascx
2015-02-06 09:06:25 [3460,16] RawUrl: /owa/?ae=Item&a=Preview&t=IPM.Note&id=RgAAAAAMa4q9vI8fRYRlurzFwP%2feBwDazVmJkuzpQ5rm%2b12FtoRhAAAA%2bmxnAADazVmJkuzpQ5rm%2b12FtoRhAACaUHnsAAAJ&pf=1&UA=0&canary=uIKX4SAqs0i6y8dUSp7EmtnBz3aDFdIIiKxDLWhCoVHKbA4rhjOXo_SAIHkYELYjELcSSsBj3eU.&SP=1
2015-02-06 09:06:25 [3460,16] Query String parameters:
2015-02-06 09:06:25 [3460,16]     ae: Item
2015-02-06 09:06:25 [3460,16]     a: Preview
2015-02-06 09:06:25 [3460,16]     t: IPM.Note
2015-02-06 09:06:25 [3460,16]     id: RgAAAAAMa4q9vI8fRYRlurzFwP/eBwDazVmJkuzpQ5rm+12FtoRhAAAA+mxnAADazVmJkuzpQ5rm+12FtoRhAACaUHnsAAAJ
2015-02-06 09:06:25 [3460,16]     pf: 1
2015-02-06 09:06:25 [3460,16]     UA: 0
2015-02-06 09:06:25 [3460,16]     canary: uIKX4SAqs0i6y8dUSp7EmtnBz3aDFdIIiKxDLWhCoVHKbA4rhjOXo_SAIHkYELYjELcSSsBj3eU.
2015-02-06 09:06:25 [3460,16]     SP: 1
2015-02-06 09:06:25 [3460,16]     subpage: ReadMessage.ascx
2015-02-06 09:06:25 [3460,16] Form: 
2015-02-06 09:06:25 [3460,16] OWA Session details
2015-02-06 09:06:25 [3460,16]     User agent: Mozilla/5.0 (Windows NT 6.3; WOW64; rv:35.0) Gecko/20100101 Firefox/35.0
2015-02-06 09:06:25 [3460,16]     Authentication type: Basic
2015-02-06 09:06:25 [3460,16]     Authenticated user: MYCOMPANY\test.user
2015-02-06 09:06:25 [3460,16]     Client IP Address: 10.0.126.38
2015-02-06 09:06:25 [3460,16]     Server IP Address: 10.0.126.71
2015-02-06 09:06:25 [3460,16]     Host: outlook.mycompany.local
2015-02-06 09:06:25 [3460,16] Primary SMTP Address: Test.User@MyCompany.com
2015-02-06 09:06:25 [3460,16] EV Extensions DLL version: 9.0.2.0
2015-02-06 09:06:25 [3460,16] [ImpersonationManager::StartImpersonation] Entry: Current user: NT AUTHORITY\SYSTEM
2015-02-06 09:06:25 [3460,16] [ImpersonationManager::StartImpersonation] Entry: Impersonation Level: None
2015-02-06 09:06:25 [3460,16] [ImpersonationManager::StartImpersonation] Impersonating logged on user
2015-02-06 09:06:25 [3460,16] [ImpersonationManager::StartImpersonation] Exit: Current user: MYCOMPANY\test.user
2015-02-06 09:06:25 [3460,16] [ImpersonationManager::StartImpersonation] Exit: Impersonation Level: Impersonation
2015-02-06 09:06:25 [3460,16] [EVContext::Initialise] EVContext intialised at 2015-02-06 09:06:19
2015-02-06 09:06:25 [3460,16] [EVContext::Initialise] Hidden settings loaded at 2015-02-06 09:06:19
2015-02-06 09:06:25 [3460,16] [EVContext::IsValidBrowser] Returning: False
2015-02-06 09:06:25 [3460,16] [ImpersonationManager:StopImpersonation] Stopped impersonation
2015-02-06 09:06:25 [3460,16] Request processing finished
2015-02-06 09:06:25 [3460,16] #############################################################
2015-02-06 09:06:25 [3460,16] Request processing started
2015-02-06 09:06:25 [3460,16] Url: https://outlook.mycompany.local/owa/forms/premium/SubPageEventHandler.aspx?ae=Item&a=Preview&t=IPM.Note&id=RgAAAAAMa4q9vI8fRYRlurzFwP/eBwDazVmJkuzpQ5rm+12FtoRhAAAA+mxnAADazVmJkuzpQ5rm+12FtoRhAACaUHnrAAAJ&pf=1&UA=0&canary=uIKX4SAqs0i6y8dUSp7EmtnBz3aDFdIIiKxDLWhCoVHKbA4rhjOXo_SAIHkYELYjELcSSsBj3eU.&SP=1&subpage=ReadMessage.ascx
2015-02-06 09:06:25 [3460,16] RawUrl: /owa/?ae=Item&a=Preview&t=IPM.Note&id=RgAAAAAMa4q9vI8fRYRlurzFwP%2feBwDazVmJkuzpQ5rm%2b12FtoRhAAAA%2bmxnAADazVmJkuzpQ5rm%2b12FtoRhAACaUHnrAAAJ&pf=1&UA=0&canary=uIKX4SAqs0i6y8dUSp7EmtnBz3aDFdIIiKxDLWhCoVHKbA4rhjOXo_SAIHkYELYjELcSSsBj3eU.&SP=1
2015-02-06 09:06:25 [3460,16] Query String parameters:
2015-02-06 09:06:25 [3460,16]     ae: Item
2015-02-06 09:06:25 [3460,16]     a: Preview
2015-02-06 09:06:25 [3460,16]     t: IPM.Note
2015-02-06 09:06:25 [3460,16]     id: RgAAAAAMa4q9vI8fRYRlurzFwP/eBwDazVmJkuzpQ5rm+12FtoRhAAAA+mxnAADazVmJkuzpQ5rm+12FtoRhAACaUHnrAAAJ
2015-02-06 09:06:25 [3460,16]     pf: 1
2015-02-06 09:06:25 [3460,16]     UA: 0
2015-02-06 09:06:25 [3460,16]     canary: uIKX4SAqs0i6y8dUSp7EmtnBz3aDFdIIiKxDLWhCoVHKbA4rhjOXo_SAIHkYELYjELcSSsBj3eU.
2015-02-06 09:06:25 [3460,16]     SP: 1
2015-02-06 09:06:25 [3460,16]     subpage: ReadMessage.ascx
2015-02-06 09:06:25 [3460,16] Form: 
2015-02-06 09:06:25 [3460,16] OWA Session details
2015-02-06 09:06:25 [3460,16]     User agent: Mozilla/5.0 (Windows NT 6.3; WOW64; rv:35.0) Gecko/20100101 Firefox/35.0
2015-02-06 09:06:25 [3460,16]     Authentication type: Basic
2015-02-06 09:06:25 [3460,16]     Authenticated user: MYCOMPANY\test.user
2015-02-06 09:06:25 [3460,16]     Client IP Address: 10.0.126.38
2015-02-06 09:06:25 [3460,16]     Server IP Address: 10.0.126.71
2015-02-06 09:06:25 [3460,16]     Host: outlook.mycompany.local
2015-02-06 09:06:25 [3460,16] Primary SMTP Address: Test.User@MyCompany.com
2015-02-06 09:06:25 [3460,16] EV Extensions DLL version: 9.0.2.0
2015-02-06 09:06:25 [3460,16] [ImpersonationManager::StartImpersonation] Entry: Current user: NT AUTHORITY\SYSTEM
2015-02-06 09:06:25 [3460,16] [ImpersonationManager::StartImpersonation] Entry: Impersonation Level: None
2015-02-06 09:06:25 [3460,16] [ImpersonationManager::StartImpersonation] Impersonating logged on user
2015-02-06 09:06:25 [3460,16] [ImpersonationManager::StartImpersonation] Exit: Current user: MYCOMPANY\test.user
2015-02-06 09:06:25 [3460,16] [ImpersonationManager::StartImpersonation] Exit: Impersonation Level: Impersonation
2015-02-06 09:06:25 [3460,16] [EVContext::Initialise] EVContext intialised at 2015-02-06 09:06:19
2015-02-06 09:06:25 [3460,16] [EVContext::Initialise] Hidden settings loaded at 2015-02-06 09:06:19
2015-02-06 09:06:25 [3460,16] [EVContext::IsValidBrowser] Returning: False
2015-02-06 09:06:25 [3460,16] [ImpersonationManager:StopImpersonation] Stopped impersonation
2015-02-06 09:06:25 [3460,16] Request processing finished
2015-02-06 09:06:25 [3460,16] #############################################################
2015-02-06 09:06:25 [3460,16] Request processing started
2015-02-06 09:06:25 [3460,16] Url: https://outlook.mycompany.local/owa/forms/premium/SubPageEventHandler.aspx?ae=Item&a=Preview&t=IPM.Note&id=RgAAAAAMa4q9vI8fRYRlurzFwP/eBwDazVmJkuzpQ5rm+12FtoRhAAAA+mxnAADazVmJkuzpQ5rm+12FtoRhAACaUHnrAAAJ&pf=1&UA=0&canary=uIKX4SAqs0i6y8dUSp7EmtnBz3aDFdIIiKxDLWhCoVHKbA4rhjOXo_SAIHkYELYjELcSSsBj3eU.&SP=1&subpage=ReadMessage.ascx
2015-02-06 09:06:25 [3460,16] RawUrl: /owa/?ae=Item&a=Preview&t=IPM.Note&id=RgAAAAAMa4q9vI8fRYRlurzFwP%2feBwDazVmJkuzpQ5rm%2b12FtoRhAAAA%2bmxnAADazVmJkuzpQ5rm%2b12FtoRhAACaUHnrAAAJ&pf=1&UA=0&canary=uIKX4SAqs0i6y8dUSp7EmtnBz3aDFdIIiKxDLWhCoVHKbA4rhjOXo_SAIHkYELYjELcSSsBj3eU.&SP=1
2015-02-06 09:06:25 [3460,16] Query String parameters:
2015-02-06 09:06:25 [3460,16]     ae: Item
2015-02-06 09:06:25 [3460,16]     a: Preview
2015-02-06 09:06:25 [3460,16]     t: IPM.Note
2015-02-06 09:06:25 [3460,16]     id: RgAAAAAMa4q9vI8fRYRlurzFwP/eBwDazVmJkuzpQ5rm+12FtoRhAAAA+mxnAADazVmJkuzpQ5rm+12FtoRhAACaUHnrAAAJ
2015-02-06 09:06:25 [3460,16]     pf: 1
2015-02-06 09:06:25 [3460,16]     UA: 0
2015-02-06 09:06:25 [3460,16]     canary: uIKX4SAqs0i6y8dUSp7EmtnBz3aDFdIIiKxDLWhCoVHKbA4rhjOXo_SAIHkYELYjELcSSsBj3eU.
2015-02-06 09:06:25 [3460,16]     SP: 1
2015-02-06 09:06:25 [3460,16]     subpage: ReadMessage.ascx
2015-02-06 09:06:25 [3460,16] Form: 
2015-02-06 09:06:25 [3460,16] OWA Session details
2015-02-06 09:06:25 [3460,16]     User agent: Mozilla/5.0 (Windows NT 6.3; WOW64; rv:35.0) Gecko/20100101 Firefox/35.0
2015-02-06 09:06:25 [3460,16]     Authentication type: Basic
2015-02-06 09:06:25 [3460,16]     Authenticated user: MYCOMPANY\test.user
2015-02-06 09:06:25 [3460,16]     Client IP Address: 10.0.126.38
2015-02-06 09:06:25 [3460,16]     Server IP Address: 10.0.126.71
2015-02-06 09:06:25 [3460,16]     Host: outlook.mycompany.local
2015-02-06 09:06:25 [3460,16] Primary SMTP Address: Test.User@MyCompany.com
2015-02-06 09:06:25 [3460,16] EV Extensions DLL version: 9.0.2.0
2015-02-06 09:06:25 [3460,16] [ImpersonationManager::StartImpersonation] Entry: Current user: NT AUTHORITY\SYSTEM
2015-02-06 09:06:25 [3460,16] [ImpersonationManager::StartImpersonation] Entry: Impersonation Level: None
2015-02-06 09:06:25 [3460,16] [ImpersonationManager::StartImpersonation] Impersonating logged on user
2015-02-06 09:06:25 [3460,16] [ImpersonationManager::StartImpersonation] Exit: Current user: MYCOMPANY\test.user
2015-02-06 09:06:25 [3460,16] [ImpersonationManager::StartImpersonation] Exit: Impersonation Level: Impersonation
2015-02-06 09:06:25 [3460,16] [EVContext::Initialise] EVContext intialised at 2015-02-06 09:06:19
2015-02-06 09:06:25 [3460,16] [EVContext::Initialise] Hidden settings loaded at 2015-02-06 09:06:19
2015-02-06 09:06:25 [3460,16] [EVContext::IsValidBrowser] Returning: False
2015-02-06 09:06:25 [3460,16] [ImpersonationManager:StopImpersonation] Stopped impersonation
2015-02-06 09:06:25 [3460,16] Request processing finished
2015-02-06 09:06:26 [3460,16] #############################################################
2015-02-06 09:06:26 [3460,16] Request processing started
2015-02-06 09:06:26 [3460,16] Url: https://outlook.mycompany.local/owa/forms/premium/SubPageEventHandler.aspx?ae=Item&a=Preview&t=IPM.Note&id=RgAAAAAMa4q9vI8fRYRlurzFwP/eBwDazVmJkuzpQ5rm+12FtoRhAAAA+mxnAADazVmJkuzpQ5rm+12FtoRhAACaUHnqAAAJ&pf=1&UA=0&canary=uIKX4SAqs0i6y8dUSp7EmtnBz3aDFdIIiKxDLWhCoVHKbA4rhjOXo_SAIHkYELYjELcSSsBj3eU.&SP=1&subpage=ReadMessage.ascx
2015-02-06 09:06:26 [3460,16] RawUrl: /owa/?ae=Item&a=Preview&t=IPM.Note&id=RgAAAAAMa4q9vI8fRYRlurzFwP%2feBwDazVmJkuzpQ5rm%2b12FtoRhAAAA%2bmxnAADazVmJkuzpQ5rm%2b12FtoRhAACaUHnqAAAJ&pf=1&UA=0&canary=uIKX4SAqs0i6y8dUSp7EmtnBz3aDFdIIiKxDLWhCoVHKbA4rhjOXo_SAIHkYELYjELcSSsBj3eU.&SP=1
2015-02-06 09:06:26 [3460,16] Query String parameters:
2015-02-06 09:06:26 [3460,16]     ae: Item
2015-02-06 09:06:26 [3460,16]     a: Preview
2015-02-06 09:06:26 [3460,16]     t: IPM.Note
2015-02-06 09:06:26 [3460,16]     id: RgAAAAAMa4q9vI8fRYRlurzFwP/eBwDazVmJkuzpQ5rm+12FtoRhAAAA+mxnAADazVmJkuzpQ5rm+12FtoRhAACaUHnqAAAJ
2015-02-06 09:06:26 [3460,16]     pf: 1
2015-02-06 09:06:26 [3460,16]     UA: 0
2015-02-06 09:06:26 [3460,16]     canary: uIKX4SAqs0i6y8dUSp7EmtnBz3aDFdIIiKxDLWhCoVHKbA4rhjOXo_SAIHkYELYjELcSSsBj3eU.
2015-02-06 09:06:26 [3460,16]     SP: 1
2015-02-06 09:06:26 [3460,16]     subpage: ReadMessage.ascx
2015-02-06 09:06:26 [3460,16] Form: 
2015-02-06 09:06:26 [3460,16] OWA Session details
2015-02-06 09:06:26 [3460,16]     User agent: Mozilla/5.0 (Windows NT 6.3; WOW64; rv:35.0) Gecko/20100101 Firefox/35.0
2015-02-06 09:06:26 [3460,16]     Authentication type: Basic
2015-02-06 09:06:26 [3460,16]     Authenticated user: MYCOMPANY\test.user
2015-02-06 09:06:26 [3460,16]     Client IP Address: 10.0.126.38
2015-02-06 09:06:26 [3460,16]     Server IP Address: 10.0.126.71
2015-02-06 09:06:26 [3460,16]     Host: outlook.mycompany.local
2015-02-06 09:06:26 [3460,16] Primary SMTP Address: Test.User@MyCompany.com
2015-02-06 09:06:26 [3460,16] EV Extensions DLL version: 9.0.2.0
2015-02-06 09:06:26 [3460,16] [ImpersonationManager::StartImpersonation] Entry: Current user: NT AUTHORITY\SYSTEM
2015-02-06 09:06:26 [3460,16] [ImpersonationManager::StartImpersonation] Entry: Impersonation Level: None
2015-02-06 09:06:26 [3460,16] [ImpersonationManager::StartImpersonation] Impersonating logged on user
2015-02-06 09:06:26 [3460,16] [ImpersonationManager::StartImpersonation] Exit: Current user: MYCOMPANY\test.user
2015-02-06 09:06:26 [3460,16] [ImpersonationManager::StartImpersonation] Exit: Impersonation Level: Impersonation
2015-02-06 09:06:26 [3460,16] [EVContext::Initialise] EVContext intialised at 2015-02-06 09:06:19
2015-02-06 09:06:26 [3460,16] [EVContext::Initialise] Hidden settings loaded at 2015-02-06 09:06:19
2015-02-06 09:06:26 [3460,16] [EVContext::IsValidBrowser] Returning: False
2015-02-06 09:06:26 [3460,16] [ImpersonationManager:StopImpersonation] Stopped impersonation
2015-02-06 09:06:26 [3460,16] Request processing finished
2015-02-06 09:06:26 [3460,16] #############################################################
2015-02-06 09:06:26 [3460,16] Request processing started
2015-02-06 09:06:26 [3460,16] Url: https://outlook.mycompany.local/owa/forms/premium/SubPageEventHandler.aspx?ae=Item&a=Preview&t=IPM.Note&id=RgAAAAAMa4q9vI8fRYRlurzFwP/eBwDazVmJkuzpQ5rm+12FtoRhAAAA+mxnAADazVmJkuzpQ5rm+12FtoRhAACaUHnqAAAJ&pf=1&UA=0&canary=uIKX4SAqs0i6y8dUSp7EmtnBz3aDFdIIiKxDLWhCoVHKbA4rhjOXo_SAIHkYELYjELcSSsBj3eU.&SP=1&subpage=ReadMessage.ascx
2015-02-06 09:06:26 [3460,16] RawUrl: /owa/?ae=Item&a=Preview&t=IPM.Note&id=RgAAAAAMa4q9vI8fRYRlurzFwP%2feBwDazVmJkuzpQ5rm%2b12FtoRhAAAA%2bmxnAADazVmJkuzpQ5rm%2b12FtoRhAACaUHnqAAAJ&pf=1&UA=0&canary=uIKX4SAqs0i6y8dUSp7EmtnBz3aDFdIIiKxDLWhCoVHKbA4rhjOXo_SAIHkYELYjELcSSsBj3eU.&SP=1
2015-02-06 09:06:26 [3460,16] Query String parameters:
2015-02-06 09:06:26 [3460,16]     ae: Item
2015-02-06 09:06:26 [3460,16]     a: Preview
2015-02-06 09:06:26 [3460,16]     t: IPM.Note
2015-02-06 09:06:26 [3460,16]     id: RgAAAAAMa4q9vI8fRYRlurzFwP/eBwDazVmJkuzpQ5rm+12FtoRhAAAA+mxnAADazVmJkuzpQ5rm+12FtoRhAACaUHnqAAAJ
2015-02-06 09:06:26 [3460,16]     pf: 1
2015-02-06 09:06:26 [3460,16]     UA: 0
2015-02-06 09:06:26 [3460,16]     canary: uIKX4SAqs0i6y8dUSp7EmtnBz3aDFdIIiKxDLWhCoVHKbA4rhjOXo_SAIHkYELYjELcSSsBj3eU.
2015-02-06 09:06:26 [3460,16]     SP: 1
2015-02-06 09:06:26 [3460,16]     subpage: ReadMessage.ascx
2015-02-06 09:06:26 [3460,16] Form: 
2015-02-06 09:06:26 [3460,16] OWA Session details
2015-02-06 09:06:26 [3460,16]     User agent: Mozilla/5.0 (Windows NT 6.3; WOW64; rv:35.0) Gecko/20100101 Firefox/35.0
2015-02-06 09:06:26 [3460,16]     Authentication type: Basic
2015-02-06 09:06:26 [3460,16]     Authenticated user: MYCOMPANY\test.user
2015-02-06 09:06:26 [3460,16]     Client IP Address: 10.0.126.38
2015-02-06 09:06:26 [3460,16]     Server IP Address: 10.0.126.71
2015-02-06 09:06:26 [3460,16]     Host: outlook.mycompany.local
2015-02-06 09:06:26 [3460,16] Primary SMTP Address: Test.User@MyCompany.com
2015-02-06 09:06:26 [3460,16] EV Extensions DLL version: 9.0.2.0
2015-02-06 09:06:26 [3460,16] [ImpersonationManager::StartImpersonation] Entry: Current user: NT AUTHORITY\SYSTEM
2015-02-06 09:06:26 [3460,16] [ImpersonationManager::StartImpersonation] Entry: Impersonation Level: None
2015-02-06 09:06:26 [3460,16] [ImpersonationManager::StartImpersonation] Impersonating logged on user
2015-02-06 09:06:26 [3460,16] [ImpersonationManager::StartImpersonation] Exit: Current user: MYCOMPANY\test.user
2015-02-06 09:06:26 [3460,16] [ImpersonationManager::StartImpersonation] Exit: Impersonation Level: Impersonation
2015-02-06 09:06:26 [3460,16] [EVContext::Initialise] EVContext intialised at 2015-02-06 09:06:19
2015-02-06 09:06:26 [3460,16] [EVContext::Initialise] Hidden settings loaded at 2015-02-06 09:06:19
2015-02-06 09:06:26 [3460,16] [EVContext::IsValidBrowser] Returning: False
2015-02-06 09:06:26 [3460,16] [ImpersonationManager:StopImpersonation] Stopped impersonation
2015-02-06 09:06:26 [3460,16] Request processing finished
2015-02-06 09:06:26 [3460,16] #############################################################
2015-02-06 09:06:26 [3460,16] Request processing started
2015-02-06 09:06:26 [3460,16] Url: https://outlook.mycompany.local/owa/forms/premium/SubPageEventHandler.aspx?ae=Item&a=Preview&t=IPM.Note.EnterpriseVault.Shortcut&id=RgAAAAAMa4q9vI8fRYRlurzFwP/eBwDazVmJkuzpQ5rm+12FtoRhAAAA+mxnAADazVmJkuzpQ5rm+12FtoRhAABhHX8EAAAJ&mrd=RgAAAAAMa4q9vI8fRYRlurzFwP/eBwDazVmJkuzpQ5rm+12FtoRhAAAA+mxnAADazVmJkuzpQ5rm+12FtoRhAACaUHn6AAAJ&js=0&calist=101016&canary=uIKX4SAqs0i6y8dUSp7EmtnBz3aDFdIIiKxDLWhCoVHKbA4rhjOXo_SAIHkYELYjELcSSsBj3eU.&SP=1&pfmk=M33:1423213741845;M46:1423213741874&subpage=ReadMessage.ascx
2015-02-06 09:06:26 [3460,16] RawUrl: /owa/?ae=Item&a=Preview&t=IPM.Note.EnterpriseVault.Shortcut&id=RgAAAAAMa4q9vI8fRYRlurzFwP%2feBwDazVmJkuzpQ5rm%2b12FtoRhAAAA%2bmxnAADazVmJkuzpQ5rm%2b12FtoRhAABhHX8EAAAJ&mrd=RgAAAAAMa4q9vI8fRYRlurzFwP%2feBwDazVmJkuzpQ5rm%2b12FtoRhAAAA%2bmxnAADazVmJkuzpQ5rm%2b12FtoRhAACaUHn6AAAJ&js=0&calist=101016&canary=uIKX4SAqs0i6y8dUSp7EmtnBz3aDFdIIiKxDLWhCoVHKbA4rhjOXo_SAIHkYELYjELcSSsBj3eU.&SP=1&pfmk=M33:1423213741845;M46:1423213741874
2015-02-06 09:06:26 [3460,16] Query String parameters:
2015-02-06 09:06:26 [3460,16]     ae: Item
2015-02-06 09:06:26 [3460,16]     a: Preview
2015-02-06 09:06:26 [3460,16]     t: IPM.Note.EnterpriseVault.Shortcut
2015-02-06 09:06:26 [3460,16]     id: RgAAAAAMa4q9vI8fRYRlurzFwP/eBwDazVmJkuzpQ5rm+12FtoRhAAAA+mxnAADazVmJkuzpQ5rm+12FtoRhAABhHX8EAAAJ
2015-02-06 09:06:26 [3460,16]     mrd: RgAAAAAMa4q9vI8fRYRlurzFwP/eBwDazVmJkuzpQ5rm+12FtoRhAAAA+mxnAADazVmJkuzpQ5rm+12FtoRhAACaUHn6AAAJ
2015-02-06 09:06:26 [3460,16]     js: 0
2015-02-06 09:06:26 [3460,16]     calist: 101016
2015-02-06 09:06:26 [3460,16]     canary: uIKX4SAqs0i6y8dUSp7EmtnBz3aDFdIIiKxDLWhCoVHKbA4rhjOXo_SAIHkYELYjELcSSsBj3eU.
2015-02-06 09:06:26 [3460,16]     SP: 1
2015-02-06 09:06:26 [3460,16]     pfmk: M33:1423213741845;M46:1423213741874
2015-02-06 09:06:26 [3460,16]     subpage: ReadMessage.ascx
2015-02-06 09:06:26 [3460,16] Form: 
2015-02-06 09:06:26 [3460,16] OWA Session details
2015-02-06 09:06:26 [3460,16]     User agent: Mozilla/5.0 (Windows NT 6.3; WOW64; rv:35.0) Gecko/20100101 Firefox/35.0
2015-02-06 09:06:26 [3460,16]     Authentication type: Basic
2015-02-06 09:06:26 [3460,16]     Authenticated user: MYCOMPANY\test.user
2015-02-06 09:06:26 [3460,16]     Client IP Address: 10.0.126.38
2015-02-06 09:06:26 [3460,16]     Server IP Address: 10.0.126.71
2015-02-06 09:06:26 [3460,16]     Host: outlook.mycompany.local
2015-02-06 09:06:26 [3460,16] Primary SMTP Address: Test.User@MyCompany.com
2015-02-06 09:06:26 [3460,16] EV Extensions DLL version: 9.0.2.0
2015-02-06 09:06:26 [3460,16] [ImpersonationManager::StartImpersonation] Entry: Current user: NT AUTHORITY\SYSTEM
2015-02-06 09:06:26 [3460,16] [ImpersonationManager::StartImpersonation] Entry: Impersonation Level: None
2015-02-06 09:06:26 [3460,16] [ImpersonationManager::StartImpersonation] Impersonating logged on user
2015-02-06 09:06:26 [3460,16] [ImpersonationManager::StartImpersonation] Exit: Current user: MYCOMPANY\test.user
2015-02-06 09:06:26 [3460,16] [ImpersonationManager::StartImpersonation] Exit: Impersonation Level: Impersonation
2015-02-06 09:06:26 [3460,16] [EVContext::Initialise] EVContext intialised at 2015-02-06 09:06:19
2015-02-06 09:06:26 [3460,16] [EVContext::Initialise] Hidden settings loaded at 2015-02-06 09:06:19
2015-02-06 09:06:26 [3460,16] [EVContext::IsValidBrowser] Returning: False
2015-02-06 09:06:26 [3460,16] [ImpersonationManager:StopImpersonation] Stopped impersonation
2015-02-06 09:06:26 [3460,16] Request processing finished
2015-02-06 09:06:26 [3460,16] #############################################################
2015-02-06 09:06:26 [3460,16] Request processing started
2015-02-06 09:06:26 [3460,16] Url: https://outlook.mycompany.local/owa/forms/premium/SubPageEventHandler.aspx?ae=Item&a=Preview&t=IPM.Note.EnterpriseVault.Shortcut&id=RgAAAAAMa4q9vI8fRYRlurzFwP/eBwDazVmJkuzpQ5rm+12FtoRhAAAA+mxnAADazVmJkuzpQ5rm+12FtoRhAABhHX8EAAAJ&mrd=RgAAAAAMa4q9vI8fRYRlurzFwP/eBwDazVmJkuzpQ5rm+12FtoRhAAAA+mxnAADazVmJkuzpQ5rm+12FtoRhAACaUHn6AAAJ&js=0&calist=101016&canary=uIKX4SAqs0i6y8dUSp7EmtnBz3aDFdIIiKxDLWhCoVHKbA4rhjOXo_SAIHkYELYjELcSSsBj3eU.&SP=1&pfmk=M33:1423213741845;M46:1423213741874&subpage=ReadMessage.ascx
2015-02-06 09:06:26 [3460,16] RawUrl: /owa/?ae=Item&a=Preview&t=IPM.Note.EnterpriseVault.Shortcut&id=RgAAAAAMa4q9vI8fRYRlurzFwP%2feBwDazVmJkuzpQ5rm%2b12FtoRhAAAA%2bmxnAADazVmJkuzpQ5rm%2b12FtoRhAABhHX8EAAAJ&mrd=RgAAAAAMa4q9vI8fRYRlurzFwP%2feBwDazVmJkuzpQ5rm%2b12FtoRhAAAA%2bmxnAADazVmJkuzpQ5rm%2b12FtoRhAACaUHn6AAAJ&js=0&calist=101016&canary=uIKX4SAqs0i6y8dUSp7EmtnBz3aDFdIIiKxDLWhCoVHKbA4rhjOXo_SAIHkYELYjELcSSsBj3eU.&SP=1&pfmk=M33:1423213741845;M46:1423213741874
2015-02-06 09:06:26 [3460,16] Query String parameters:
2015-02-06 09:06:26 [3460,16]     ae: Item
2015-02-06 09:06:26 [3460,16]     a: Preview
2015-02-06 09:06:26 [3460,16]     t: IPM.Note.EnterpriseVault.Shortcut
2015-02-06 09:06:26 [3460,16]     id: RgAAAAAMa4q9vI8fRYRlurzFwP/eBwDazVmJkuzpQ5rm+12FtoRhAAAA+mxnAADazVmJkuzpQ5rm+12FtoRhAABhHX8EAAAJ
2015-02-06 09:06:26 [3460,16]     mrd: RgAAAAAMa4q9vI8fRYRlurzFwP/eBwDazVmJkuzpQ5rm+12FtoRhAAAA+mxnAADazVmJkuzpQ5rm+12FtoRhAACaUHn6AAAJ
2015-02-06 09:06:26 [3460,16]     js: 0
2015-02-06 09:06:26 [3460,16]     calist: 101016
2015-02-06 09:06:26 [3460,16]     canary: uIKX4SAqs0i6y8dUSp7EmtnBz3aDFdIIiKxDLWhCoVHKbA4rhjOXo_SAIHkYELYjELcSSsBj3eU.
2015-02-06 09:06:26 [3460,16]     SP: 1
2015-02-06 09:06:26 [3460,16]     pfmk: M33:1423213741845;M46:1423213741874
2015-02-06 09:06:26 [3460,16]     subpage: ReadMessage.ascx
2015-02-06 09:06:26 [3460,16] Form: 
2015-02-06 09:06:26 [3460,16] OWA Session details
2015-02-06 09:06:26 [3460,16]     User agent: Mozilla/5.0 (Windows NT 6.3; WOW64; rv:35.0) Gecko/20100101 Firefox/35.0
2015-02-06 09:06:26 [3460,16]     Authentication type: Basic
2015-02-06 09:06:26 [3460,16]     Authenticated user: MYCOMPANY\test.user
2015-02-06 09:06:26 [3460,16]     Client IP Address: 10.0.126.38
2015-02-06 09:06:26 [3460,16]     Server IP Address: 10.0.126.71
2015-02-06 09:06:26 [3460,16]     Host: outlook.mycompany.local
2015-02-06 09:06:26 [3460,16] Primary SMTP Address: Test.User@MyCompany.com
2015-02-06 09:06:26 [3460,16] EV Extensions DLL version: 9.0.2.0
2015-02-06 09:06:26 [3460,16] [ImpersonationManager::StartImpersonation] Entry: Current user: NT AUTHORITY\SYSTEM
2015-02-06 09:06:26 [3460,16] [ImpersonationManager::StartImpersonation] Entry: Impersonation Level: None
2015-02-06 09:06:26 [3460,16] [ImpersonationManager::StartImpersonation] Impersonating logged on user
2015-02-06 09:06:26 [3460,16] [ImpersonationManager::StartImpersonation] Exit: Current user: MYCOMPANY\test.user
2015-02-06 09:06:26 [3460,16] [ImpersonationManager::StartImpersonation] Exit: Impersonation Level: Impersonation
2015-02-06 09:06:26 [3460,16] [EVContext::Initialise] EVContext intialised at 2015-02-06 09:06:19
2015-02-06 09:06:26 [3460,16] [EVContext::Initialise] Hidden settings loaded at 2015-02-06 09:06:19
2015-02-06 09:06:26 [3460,16] [EVContext::IsValidBrowser] Returning: False
2015-02-06 09:06:26 [3460,16] [ImpersonationManager:StopImpersonation] Stopped impersonation
2015-02-06 09:06:26 [3460,16] Request processing finished
2015-02-06 09:06:28 [3460,16] #############################################################
2015-02-06 09:06:28 [3460,16] Request processing started
2015-02-06 09:06:28 [3460,16] Url: https://outlook.mycompany.local/owa/forms/premium/AboutOptions.aspx?ae=Options&t=About&pspid=_1423213738562_858221838
2015-02-06 09:06:28 [3460,16] RawUrl: /owa/?ae=Options&t=About&pspid=_1423213738562_858221838
2015-02-06 09:06:28 [3460,16] Query String parameters:
2015-02-06 09:06:28 [3460,16]     ae: Options
2015-02-06 09:06:28 [3460,16]     t: About
2015-02-06 09:06:28 [3460,16]     pspid: _1423213738562_858221838
2015-02-06 09:06:28 [3460,16] Form: 
2015-02-06 09:06:28 [3460,16] OWA Session details
2015-02-06 09:06:28 [3460,16]     User agent: Mozilla/5.0 (Windows NT 6.3; WOW64; rv:35.0) Gecko/20100101 Firefox/35.0
2015-02-06 09:06:28 [3460,16]     Authentication type: Basic
2015-02-06 09:06:28 [3460,16]     Authenticated user: MYCOMPANY\test.user
2015-02-06 09:06:28 [3460,16]     Client IP Address: 10.0.126.38
2015-02-06 09:06:28 [3460,16]     Server IP Address: 10.0.126.71
2015-02-06 09:06:28 [3460,16]     Host: outlook.mycompany.local
2015-02-06 09:06:28 [3460,16] Primary SMTP Address: Test.User@MyCompany.com
2015-02-06 09:06:28 [3460,16] EV Extensions DLL version: 9.0.2.0
2015-02-06 09:06:28 [3460,16] [ImpersonationManager::StartImpersonation] Entry: Current user: NT AUTHORITY\SYSTEM
2015-02-06 09:06:28 [3460,16] [ImpersonationManager::StartImpersonation] Entry: Impersonation Level: None
2015-02-06 09:06:28 [3460,16] [ImpersonationManager::StartImpersonation] Impersonating logged on user
2015-02-06 09:06:28 [3460,16] [ImpersonationManager::StartImpersonation] Exit: Current user: MYCOMPANY\test.user
2015-02-06 09:06:28 [3460,16] [ImpersonationManager::StartImpersonation] Exit: Impersonation Level: Impersonation
2015-02-06 09:06:28 [3460,16] [EVContext::Initialise] EVContext intialised at 2015-02-06 09:06:19
2015-02-06 09:06:28 [3460,16] [EVContext::Initialise] Hidden settings loaded at 2015-02-06 09:06:19
2015-02-06 09:06:28 [3460,16] [EVContext::IsValidBrowser] Returning: False
2015-02-06 09:06:28 [3460,16] [ImpersonationManager:StopImpersonation] Stopped impersonation
2015-02-06 09:06:28 [3460,16] Request processing finished
2015-02-06 09:06:28 [3460,16] #############################################################
2015-02-06 09:06:28 [3460,16] Request processing started
2015-02-06 09:06:28 [3460,16] Url: https://outlook.mycompany.local/owa/forms/premium/AboutOptions.aspx?ae=Options&t=About&pspid=_1423213738562_858221838
2015-02-06 09:06:28 [3460,16] RawUrl: /owa/?ae=Options&t=About&pspid=_1423213738562_858221838
2015-02-06 09:06:28 [3460,16] Query String parameters:
2015-02-06 09:06:28 [3460,16]     ae: Options
2015-02-06 09:06:28 [3460,16]     t: About
2015-02-06 09:06:28 [3460,16]     pspid: _1423213738562_858221838
2015-02-06 09:06:28 [3460,16] Form: 
2015-02-06 09:06:28 [3460,16] OWA Session details
2015-02-06 09:06:28 [3460,16]     User agent: Mozilla/5.0 (Windows NT 6.3; WOW64; rv:35.0) Gecko/20100101 Firefox/35.0
2015-02-06 09:06:28 [3460,16]     Authentication type: Basic
2015-02-06 09:06:28 [3460,16]     Authenticated user: MYCOMPANY\test.user
2015-02-06 09:06:28 [3460,16]     Client IP Address: 10.0.126.38
2015-02-06 09:06:28 [3460,16]     Server IP Address: 10.0.126.71
2015-02-06 09:06:28 [3460,16]     Host: outlook.mycompany.local
2015-02-06 09:06:28 [3460,16] Primary SMTP Address: Test.User@MyCompany.com
2015-02-06 09:06:28 [3460,16] EV Extensions DLL version: 9.0.2.0
2015-02-06 09:06:28 [3460,16] [ImpersonationManager::StartImpersonation] Entry: Current user: NT AUTHORITY\SYSTEM
2015-02-06 09:06:28 [3460,16] [ImpersonationManager::StartImpersonation] Entry: Impersonation Level: None
2015-02-06 09:06:28 [3460,16] [ImpersonationManager::StartImpersonation] Impersonating logged on user
2015-02-06 09:06:28 [3460,16] [ImpersonationManager::StartImpersonation] Exit: Current user: MYCOMPANY\test.user
2015-02-06 09:06:28 [3460,16] [ImpersonationManager::StartImpersonation] Exit: Impersonation Level: Impersonation
2015-02-06 09:06:28 [3460,16] [EVContext::Initialise] EVContext intialised at 2015-02-06 09:06:19
2015-02-06 09:06:28 [3460,16] [EVContext::Initialise] Hidden settings loaded at 2015-02-06 09:06:19
2015-02-06 09:06:28 [3460,16] [EVContext::IsValidBrowser] Returning: False
2015-02-06 09:06:28 [3460,16] [ImpersonationManager:StopImpersonation] Stopped impersonation
2015-02-06 09:06:28 [3460,16] Request processing finished