on log CookieAuth.dll?GetLogon?