Play interactive tour

Edit tour

Windows Analysis Report 7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe

Overview

General Information

Sample Name:	7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe
Analysis ID:	458960
MD5:	2e18a08987838bbc3c26ffdbbcec1e62
SHA1:	2dd67d0c7191ab3380bc4a1b9ca3a09c684a2291
SHA256:	7c3beb3d9b0a8e0bdc6344a24b3b527b96cb9c845aa6847d8ac9d192f68ff912
Tags:	exeRedLineStealer
Infos:
Most interesting Screenshot:

Detection

RedLine

Score:	68
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Found malware configuration

Multi AV Scanner detection for submitted file

Yara detected RedLine Stealer

Uses known network protocols on non-standard ports

Contains long sleeps (>= 3 min)

Creates a process in suspended mode (likely to inject code)

Detected TCP or UDP traffic on non-standard ports

Detected potential crypto function

Enables debug privileges

HTTP GET or POST without a user agent

Internet Provider seen in connection with other malware

May sleep (evasive loops) to hinder dynamic analysis

PE / OLE file has an invalid certificate

PE file contains strange resources

Queries the volume information (name, serial number etc) of a device

Sample execution stops while process was sleeping (likely an evasion)

Sample file is different than original file name gathered from version info

Uses 32bit PE files

Uses code obfuscation techniques (call, push, ret)

Classification

Process Tree

System is w10x64

7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe (PID: 968 cmdline: 'C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe' MD5: 2E18A08987838BBC3C26FFDBBCEC1E62)

7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe (PID: 992 cmdline: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe MD5: 2E18A08987838BBC3C26FFDBBCEC1E62)

cleanup

Malware Configuration

Threatname: RedLine

{"C2 url": ["45.137.155.31:11556"], "Bot Id": "1"}

Yara Overview

Memory Dumps

Source	Rule	Description	Author
00000002.00000002.465623603.0000000000402000.00000040.00000001.sdmp	JoeSecurity_RedLine	Yara detected RedLine Stealer	Joe Security
00000001.00000002.223233962.000000000393A000.00000004.00000001.sdmp	JoeSecurity_RedLine	Yara detected RedLine Stealer	Joe Security
Process Memory Space: 7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe PID: 968	JoeSecurity_RedLine	Yara detected RedLine Stealer	Joe Security
Process Memory Space: 7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe PID: 992	JoeSecurity_RedLine	Yara detected RedLine Stealer	Joe Security

Unpacked PEs

Source	Rule	Description	Author
1.2.7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe.393a170.4.raw.unpack	JoeSecurity_RedLine	Yara detected RedLine Stealer	Joe Security
1.2.7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe.393a170.4.unpack	JoeSecurity_RedLine	Yara detected RedLine Stealer	Joe Security
2.2.7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe.400000.0.unpack	JoeSecurity_RedLine	Yara detected RedLine Stealer	Joe Security

Sigma Overview

No Sigma rule has matched

Jbx Signature Overview

Click to jump to signature section

Show All Signature Results

AV Detection:

Found malware configuration

Show sources

Source: 1.2.7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe.393a170.4.raw.unpack

Malware Configuration Extractor: RedLine {"C2 url": ["45.137.155.31:11556"], "Bot Id": "1"}

Multi AV Scanner detection for submitted file

Show sources

Source: 7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe	Virustotal: Detection: 38%			Perma Link
Source: 7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe	ReversingLabs: Detection: 67%

Source: 7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe

Static PE information: LOCAL_SYMS_STRIPPED, 32BIT_MACHINE, EXECUTABLE_IMAGE, LINE_NUMS_STRIPPED

Source: 7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe

Static PE information: NO_SEH, TERMINAL_SERVER_AWARE, DYNAMIC_BASE, NX_COMPAT

Source:	Binary string: System.ServiceModel.pdbl6 source: 7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe, 00000002.00000002.468518828.000000000112E000.00000004.00000001.sdmp
Source:	Binary string: \??\C:\Windows\dll\System.ServiceModel.pdbj source: 7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe, 00000002.00000002.468229225.00000000010A2000.00000004.00000020.sdmp
Source:	Binary string: jHC:\Windows\System.ServiceModel.pdb source: 7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe, 00000002.00000002.466476163.0000000000CF8000.00000004.00000001.sdmp

Networking:

Uses known network protocols on non-standard ports

Show sources

Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725

Source: global traffic

TCP traffic: 192.168.2.3:49725 -> 45.137.155.31:11556

Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Content-Type: text/xml; charset=utf-8SOAPAction: "http://tempuri.org/Endpoint/GetArguments"Host: 45.137.155.31:11556Content-Length: 137Expect: 100-continueAccept-Encoding: gzip, deflateConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Content-Type: text/xml; charset=utf-8SOAPAction: "http://tempuri.org/Endpoint/GetArguments"Host: 45.137.155.31:11556Content-Length: 137Expect: 100-continueAccept-Encoding: gzip, deflate
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Content-Type: text/xml; charset=utf-8SOAPAction: "http://tempuri.org/Endpoint/GetArguments"Host: 45.137.155.31:11556Content-Length: 137Expect: 100-continueAccept-Encoding: gzip, deflate
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Content-Type: text/xml; charset=utf-8SOAPAction: "http://tempuri.org/Endpoint/GetArguments"Host: 45.137.155.31:11556Content-Length: 137Expect: 100-continueAccept-Encoding: gzip, deflate
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Content-Type: text/xml; charset=utf-8SOAPAction: "http://tempuri.org/Endpoint/GetArguments"Host: 45.137.155.31:11556Content-Length: 137Expect: 100-continueAccept-Encoding: gzip, deflate
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Content-Type: text/xml; charset=utf-8SOAPAction: "http://tempuri.org/Endpoint/GetArguments"Host: 45.137.155.31:11556Content-Length: 137Expect: 100-continueAccept-Encoding: gzip, deflate
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Content-Type: text/xml; charset=utf-8SOAPAction: "http://tempuri.org/Endpoint/GetArguments"Host: 45.137.155.31:11556Content-Length: 137Expect: 100-continueAccept-Encoding: gzip, deflate
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Content-Type: text/xml; charset=utf-8SOAPAction: "http://tempuri.org/Endpoint/GetArguments"Host: 45.137.155.31:11556Content-Length: 137Expect: 100-continueAccept-Encoding: gzip, deflate
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Content-Type: text/xml; charset=utf-8SOAPAction: "http://tempuri.org/Endpoint/GetArguments"Host: 45.137.155.31:11556Content-Length: 137Expect: 100-continueAccept-Encoding: gzip, deflate
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Content-Type: text/xml; charset=utf-8SOAPAction: "http://tempuri.org/Endpoint/GetArguments"Host: 45.137.155.31:11556Content-Length: 137Expect: 100-continueAccept-Encoding: gzip, deflate
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Content-Type: text/xml; charset=utf-8SOAPAction: "http://tempuri.org/Endpoint/GetArguments"Host: 45.137.155.31:11556Content-Length: 137Expect: 100-continueAccept-Encoding: gzip, deflate
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Content-Type: text/xml; charset=utf-8SOAPAction: "http://tempuri.org/Endpoint/GetArguments"Host: 45.137.155.31:11556Content-Length: 137Expect: 100-continueAccept-Encoding: gzip, deflate
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Content-Type: text/xml; charset=utf-8SOAPAction: "http://tempuri.org/Endpoint/GetArguments"Host: 45.137.155.31:11556Content-Length: 137Expect: 100-continueAccept-Encoding: gzip, deflate
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Content-Type: text/xml; charset=utf-8SOAPAction: "http://tempuri.org/Endpoint/GetArguments"Host: 45.137.155.31:11556Content-Length: 137Expect: 100-continueAccept-Encoding: gzip, deflate
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Content-Type: text/xml; charset=utf-8SOAPAction: "http://tempuri.org/Endpoint/GetArguments"Host: 45.137.155.31:11556Content-Length: 137Expect: 100-continueAccept-Encoding: gzip, deflate
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Content-Type: text/xml; charset=utf-8SOAPAction: "http://tempuri.org/Endpoint/GetArguments"Host: 45.137.155.31:11556Content-Length: 137Expect: 100-continueAccept-Encoding: gzip, deflate
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Content-Type: text/xml; charset=utf-8SOAPAction: "http://tempuri.org/Endpoint/GetArguments"Host: 45.137.155.31:11556Content-Length: 137Expect: 100-continueAccept-Encoding: gzip, deflate
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Content-Type: text/xml; charset=utf-8SOAPAction: "http://tempuri.org/Endpoint/GetArguments"Host: 45.137.155.31:11556Content-Length: 137Expect: 100-continueAccept-Encoding: gzip, deflate
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Content-Type: text/xml; charset=utf-8SOAPAction: "http://tempuri.org/Endpoint/GetArguments"Host: 45.137.155.31:11556Content-Length: 137Expect: 100-continueAccept-Encoding: gzip, deflate
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Content-Type: text/xml; charset=utf-8SOAPAction: "http://tempuri.org/Endpoint/GetArguments"Host: 45.137.155.31:11556Content-Length: 137Expect: 100-continueAccept-Encoding: gzip, deflate
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Content-Type: text/xml; charset=utf-8SOAPAction: "http://tempuri.org/Endpoint/GetArguments"Host: 45.137.155.31:11556Content-Length: 137Expect: 100-continueAccept-Encoding: gzip, deflate
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Content-Type: text/xml; charset=utf-8SOAPAction: "http://tempuri.org/Endpoint/GetArguments"Host: 45.137.155.31:11556Content-Length: 137Expect: 100-continueAccept-Encoding: gzip, deflate
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Content-Type: text/xml; charset=utf-8SOAPAction: "http://tempuri.org/Endpoint/GetArguments"Host: 45.137.155.31:11556Content-Length: 137Expect: 100-continueAccept-Encoding: gzip, deflate
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Content-Type: text/xml; charset=utf-8SOAPAction: "http://tempuri.org/Endpoint/GetArguments"Host: 45.137.155.31:11556Content-Length: 137Expect: 100-continueAccept-Encoding: gzip, deflate
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Content-Type: text/xml; charset=utf-8SOAPAction: "http://tempuri.org/Endpoint/GetArguments"Host: 45.137.155.31:11556Content-Length: 137Expect: 100-continueAccept-Encoding: gzip, deflate
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Content-Type: text/xml; charset=utf-8SOAPAction: "http://tempuri.org/Endpoint/GetArguments"Host: 45.137.155.31:11556Content-Length: 137Expect: 100-continueAccept-Encoding: gzip, deflate
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Content-Type: text/xml; charset=utf-8SOAPAction: "http://tempuri.org/Endpoint/GetArguments"Host: 45.137.155.31:11556Content-Length: 137Expect: 100-continueAccept-Encoding: gzip, deflate
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Content-Type: text/xml; charset=utf-8SOAPAction: "http://tempuri.org/Endpoint/GetArguments"Host: 45.137.155.31:11556Content-Length: 137Expect: 100-continueAccept-Encoding: gzip, deflate
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Content-Type: text/xml; charset=utf-8SOAPAction: "http://tempuri.org/Endpoint/GetArguments"Host: 45.137.155.31:11556Content-Length: 137Expect: 100-continueAccept-Encoding: gzip, deflate
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Content-Type: text/xml; charset=utf-8SOAPAction: "http://tempuri.org/Endpoint/GetArguments"Host: 45.137.155.31:11556Content-Length: 137Expect: 100-continueAccept-Encoding: gzip, deflate
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Content-Type: text/xml; charset=utf-8SOAPAction: "http://tempuri.org/Endpoint/GetArguments"Host: 45.137.155.31:11556Content-Length: 137Expect: 100-continueAccept-Encoding: gzip, deflate
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Content-Type: text/xml; charset=utf-8SOAPAction: "http://tempuri.org/Endpoint/GetArguments"Host: 45.137.155.31:11556Content-Length: 137Expect: 100-continueAccept-Encoding: gzip, deflate
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Content-Type: text/xml; charset=utf-8SOAPAction: "http://tempuri.org/Endpoint/GetArguments"Host: 45.137.155.31:11556Content-Length: 137Expect: 100-continueAccept-Encoding: gzip, deflate
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Content-Type: text/xml; charset=utf-8SOAPAction: "http://tempuri.org/Endpoint/GetArguments"Host: 45.137.155.31:11556Content-Length: 137Expect: 100-continueAccept-Encoding: gzip, deflate
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Content-Type: text/xml; charset=utf-8SOAPAction: "http://tempuri.org/Endpoint/GetArguments"Host: 45.137.155.31:11556Content-Length: 137Expect: 100-continueAccept-Encoding: gzip, deflate
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Content-Type: text/xml; charset=utf-8SOAPAction: "http://tempuri.org/Endpoint/GetArguments"Host: 45.137.155.31:11556Content-Length: 137Expect: 100-continueAccept-Encoding: gzip, deflate
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Content-Type: text/xml; charset=utf-8SOAPAction: "http://tempuri.org/Endpoint/GetArguments"Host: 45.137.155.31:11556Content-Length: 137Expect: 100-continueAccept-Encoding: gzip, deflate
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Content-Type: text/xml; charset=utf-8SOAPAction: "http://tempuri.org/Endpoint/GetArguments"Host: 45.137.155.31:11556Content-Length: 137Expect: 100-continueAccept-Encoding: gzip, deflate
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Content-Type: text/xml; charset=utf-8SOAPAction: "http://tempuri.org/Endpoint/GetArguments"Host: 45.137.155.31:11556Content-Length: 137Expect: 100-continueAccept-Encoding: gzip, deflate
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Content-Type: text/xml; charset=utf-8SOAPAction: "http://tempuri.org/Endpoint/GetArguments"Host: 45.137.155.31:11556Content-Length: 137Expect: 100-continueAccept-Encoding: gzip, deflate
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Content-Type: text/xml; charset=utf-8SOAPAction: "http://tempuri.org/Endpoint/GetArguments"Host: 45.137.155.31:11556Content-Length: 137Expect: 100-continueAccept-Encoding: gzip, deflate
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Content-Type: text/xml; charset=utf-8SOAPAction: "http://tempuri.org/Endpoint/GetArguments"Host: 45.137.155.31:11556Content-Length: 137Expect: 100-continueAccept-Encoding: gzip, deflate
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Content-Type: text/xml; charset=utf-8SOAPAction: "http://tempuri.org/Endpoint/GetArguments"Host: 45.137.155.31:11556Content-Length: 137Expect: 100-continueAccept-Encoding: gzip, deflate
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Content-Type: text/xml; charset=utf-8SOAPAction: "http://tempuri.org/Endpoint/GetArguments"Host: 45.137.155.31:11556Content-Length: 137Expect: 100-continueAccept-Encoding: gzip, deflate
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Content-Type: text/xml; charset=utf-8SOAPAction: "http://tempuri.org/Endpoint/GetArguments"Host: 45.137.155.31:11556Content-Length: 137Expect: 100-continueAccept-Encoding: gzip, deflate
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Content-Type: text/xml; charset=utf-8SOAPAction: "http://tempuri.org/Endpoint/GetArguments"Host: 45.137.155.31:11556Content-Length: 137Expect: 100-continueAccept-Encoding: gzip, deflate
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Content-Type: text/xml; charset=utf-8SOAPAction: "http://tempuri.org/Endpoint/GetArguments"Host: 45.137.155.31:11556Content-Length: 137Expect: 100-continueAccept-Encoding: gzip, deflate
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Content-Type: text/xml; charset=utf-8SOAPAction: "http://tempuri.org/Endpoint/GetArguments"Host: 45.137.155.31:11556Content-Length: 137Expect: 100-continueAccept-Encoding: gzip, deflate
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Content-Type: text/xml; charset=utf-8SOAPAction: "http://tempuri.org/Endpoint/GetArguments"Host: 45.137.155.31:11556Content-Length: 137Expect: 100-continueAccept-Encoding: gzip, deflate
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Content-Type: text/xml; charset=utf-8SOAPAction: "http://tempuri.org/Endpoint/GetArguments"Host: 45.137.155.31:11556Content-Length: 137Expect: 100-continueAccept-Encoding: gzip, deflate
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Content-Type: text/xml; charset=utf-8SOAPAction: "http://tempuri.org/Endpoint/GetArguments"Host: 45.137.155.31:11556Content-Length: 137Expect: 100-continueAccept-Encoding: gzip, deflate
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Content-Type: text/xml; charset=utf-8SOAPAction: "http://tempuri.org/Endpoint/GetArguments"Host: 45.137.155.31:11556Content-Length: 137Expect: 100-continueAccept-Encoding: gzip, deflate
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Content-Type: text/xml; charset=utf-8SOAPAction: "http://tempuri.org/Endpoint/GetArguments"Host: 45.137.155.31:11556Content-Length: 137Expect: 100-continueAccept-Encoding: gzip, deflate
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Content-Type: text/xml; charset=utf-8SOAPAction: "http://tempuri.org/Endpoint/GetArguments"Host: 45.137.155.31:11556Content-Length: 137Expect: 100-continueAccept-Encoding: gzip, deflate
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Content-Type: text/xml; charset=utf-8SOAPAction: "http://tempuri.org/Endpoint/GetArguments"Host: 45.137.155.31:11556Content-Length: 137Expect: 100-continueAccept-Encoding: gzip, deflate
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Content-Type: text/xml; charset=utf-8SOAPAction: "http://tempuri.org/Endpoint/GetArguments"Host: 45.137.155.31:11556Content-Length: 137Expect: 100-continueAccept-Encoding: gzip, deflate
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Content-Type: text/xml; charset=utf-8SOAPAction: "http://tempuri.org/Endpoint/GetArguments"Host: 45.137.155.31:11556Content-Length: 137Expect: 100-continueAccept-Encoding: gzip, deflate
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Content-Type: text/xml; charset=utf-8SOAPAction: "http://tempuri.org/Endpoint/GetArguments"Host: 45.137.155.31:11556Content-Length: 137Expect: 100-continueAccept-Encoding: gzip, deflate
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Content-Type: text/xml; charset=utf-8SOAPAction: "http://tempuri.org/Endpoint/GetArguments"Host: 45.137.155.31:11556Content-Length: 137Expect: 100-continueAccept-Encoding: gzip, deflate
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Content-Type: text/xml; charset=utf-8SOAPAction: "http://tempuri.org/Endpoint/GetArguments"Host: 45.137.155.31:11556Content-Length: 137Expect: 100-continueAccept-Encoding: gzip, deflate
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Content-Type: text/xml; charset=utf-8SOAPAction: "http://tempuri.org/Endpoint/GetArguments"Host: 45.137.155.31:11556Content-Length: 137Expect: 100-continueAccept-Encoding: gzip, deflate
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Content-Type: text/xml; charset=utf-8SOAPAction: "http://tempuri.org/Endpoint/GetArguments"Host: 45.137.155.31:11556Content-Length: 137Expect: 100-continueAccept-Encoding: gzip, deflate
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Content-Type: text/xml; charset=utf-8SOAPAction: "http://tempuri.org/Endpoint/GetArguments"Host: 45.137.155.31:11556Content-Length: 137Expect: 100-continueAccept-Encoding: gzip, deflate
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Content-Type: text/xml; charset=utf-8SOAPAction: "http://tempuri.org/Endpoint/GetArguments"Host: 45.137.155.31:11556Content-Length: 137Expect: 100-continueAccept-Encoding: gzip, deflate
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Content-Type: text/xml; charset=utf-8SOAPAction: "http://tempuri.org/Endpoint/GetArguments"Host: 45.137.155.31:11556Content-Length: 137Expect: 100-continueAccept-Encoding: gzip, deflate
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Content-Type: text/xml; charset=utf-8SOAPAction: "http://tempuri.org/Endpoint/GetArguments"Host: 45.137.155.31:11556Content-Length: 137Expect: 100-continueAccept-Encoding: gzip, deflate
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Content-Type: text/xml; charset=utf-8SOAPAction: "http://tempuri.org/Endpoint/GetArguments"Host: 45.137.155.31:11556Content-Length: 137Expect: 100-continueAccept-Encoding: gzip, deflate
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Content-Type: text/xml; charset=utf-8SOAPAction: "http://tempuri.org/Endpoint/GetArguments"Host: 45.137.155.31:11556Content-Length: 137Expect: 100-continueAccept-Encoding: gzip, deflate
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Content-Type: text/xml; charset=utf-8SOAPAction: "http://tempuri.org/Endpoint/GetArguments"Host: 45.137.155.31:11556Content-Length: 137Expect: 100-continueAccept-Encoding: gzip, deflate
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Content-Type: text/xml; charset=utf-8SOAPAction: "http://tempuri.org/Endpoint/GetArguments"Host: 45.137.155.31:11556Content-Length: 137Expect: 100-continueAccept-Encoding: gzip, deflate
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Content-Type: text/xml; charset=utf-8SOAPAction: "http://tempuri.org/Endpoint/GetArguments"Host: 45.137.155.31:11556Content-Length: 137Expect: 100-continueAccept-Encoding: gzip, deflate
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Content-Type: text/xml; charset=utf-8SOAPAction: "http://tempuri.org/Endpoint/GetArguments"Host: 45.137.155.31:11556Content-Length: 137Expect: 100-continueAccept-Encoding: gzip, deflate
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Content-Type: text/xml; charset=utf-8SOAPAction: "http://tempuri.org/Endpoint/GetArguments"Host: 45.137.155.31:11556Content-Length: 137Expect: 100-continueAccept-Encoding: gzip, deflate
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Content-Type: text/xml; charset=utf-8SOAPAction: "http://tempuri.org/Endpoint/GetArguments"Host: 45.137.155.31:11556Content-Length: 137Expect: 100-continueAccept-Encoding: gzip, deflate
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Content-Type: text/xml; charset=utf-8SOAPAction: "http://tempuri.org/Endpoint/GetArguments"Host: 45.137.155.31:11556Content-Length: 137Expect: 100-continueAccept-Encoding: gzip, deflate
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Content-Type: text/xml; charset=utf-8SOAPAction: "http://tempuri.org/Endpoint/GetArguments"Host: 45.137.155.31:11556Content-Length: 137Expect: 100-continueAccept-Encoding: gzip, deflate
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Content-Type: text/xml; charset=utf-8SOAPAction: "http://tempuri.org/Endpoint/GetArguments"Host: 45.137.155.31:11556Content-Length: 137Expect: 100-continueAccept-Encoding: gzip, deflate
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Content-Type: text/xml; charset=utf-8SOAPAction: "http://tempuri.org/Endpoint/GetArguments"Host: 45.137.155.31:11556Content-Length: 137Expect: 100-continueAccept-Encoding: gzip, deflate
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Content-Type: text/xml; charset=utf-8SOAPAction: "http://tempuri.org/Endpoint/GetArguments"Host: 45.137.155.31:11556Content-Length: 137Expect: 100-continueAccept-Encoding: gzip, deflate
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Content-Type: text/xml; charset=utf-8SOAPAction: "http://tempuri.org/Endpoint/GetArguments"Host: 45.137.155.31:11556Content-Length: 137Expect: 100-continueAccept-Encoding: gzip, deflate
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Content-Type: text/xml; charset=utf-8SOAPAction: "http://tempuri.org/Endpoint/GetArguments"Host: 45.137.155.31:11556Content-Length: 137Expect: 100-continueAccept-Encoding: gzip, deflate
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Content-Type: text/xml; charset=utf-8SOAPAction: "http://tempuri.org/Endpoint/GetArguments"Host: 45.137.155.31:11556Content-Length: 137Expect: 100-continueAccept-Encoding: gzip, deflate
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Content-Type: text/xml; charset=utf-8SOAPAction: "http://tempuri.org/Endpoint/GetArguments"Host: 45.137.155.31:11556Content-Length: 137Expect: 100-continueAccept-Encoding: gzip, deflate
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Content-Type: text/xml; charset=utf-8SOAPAction: "http://tempuri.org/Endpoint/GetArguments"Host: 45.137.155.31:11556Content-Length: 137Expect: 100-continueAccept-Encoding: gzip, deflate
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Content-Type: text/xml; charset=utf-8SOAPAction: "http://tempuri.org/Endpoint/GetArguments"Host: 45.137.155.31:11556Content-Length: 137Expect: 100-continueAccept-Encoding: gzip, deflate
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Content-Type: text/xml; charset=utf-8SOAPAction: "http://tempuri.org/Endpoint/GetArguments"Host: 45.137.155.31:11556Content-Length: 137Expect: 100-continueAccept-Encoding: gzip, deflate
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Content-Type: text/xml; charset=utf-8SOAPAction: "http://tempuri.org/Endpoint/GetArguments"Host: 45.137.155.31:11556Content-Length: 137Expect: 100-continueAccept-Encoding: gzip, deflate
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Content-Type: text/xml; charset=utf-8SOAPAction: "http://tempuri.org/Endpoint/GetArguments"Host: 45.137.155.31:11556Content-Length: 137Expect: 100-continueAccept-Encoding: gzip, deflate
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Content-Type: text/xml; charset=utf-8SOAPAction: "http://tempuri.org/Endpoint/GetArguments"Host: 45.137.155.31:11556Content-Length: 137Expect: 100-continueAccept-Encoding: gzip, deflate
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Content-Type: text/xml; charset=utf-8SOAPAction: "http://tempuri.org/Endpoint/GetArguments"Host: 45.137.155.31:11556Content-Length: 137Expect: 100-continueAccept-Encoding: gzip, deflate

Source: Joe Sandbox View

ASN Name: VOLIA-ASUA VOLIA-ASUA

Source: unknown	TCP traffic detected without corresponding DNS query: 45.137.155.31
Source: unknown	TCP traffic detected without corresponding DNS query: 45.137.155.31
Source: unknown	TCP traffic detected without corresponding DNS query: 45.137.155.31
Source: unknown	TCP traffic detected without corresponding DNS query: 45.137.155.31
Source: unknown	TCP traffic detected without corresponding DNS query: 45.137.155.31
Source: unknown	TCP traffic detected without corresponding DNS query: 45.137.155.31
Source: unknown	TCP traffic detected without corresponding DNS query: 45.137.155.31
Source: unknown	TCP traffic detected without corresponding DNS query: 45.137.155.31
Source: unknown	TCP traffic detected without corresponding DNS query: 45.137.155.31
Source: unknown	TCP traffic detected without corresponding DNS query: 45.137.155.31
Source: unknown	TCP traffic detected without corresponding DNS query: 45.137.155.31
Source: unknown	TCP traffic detected without corresponding DNS query: 45.137.155.31
Source: unknown	TCP traffic detected without corresponding DNS query: 45.137.155.31
Source: unknown	TCP traffic detected without corresponding DNS query: 45.137.155.31
Source: unknown	TCP traffic detected without corresponding DNS query: 45.137.155.31
Source: unknown	TCP traffic detected without corresponding DNS query: 45.137.155.31
Source: unknown	TCP traffic detected without corresponding DNS query: 45.137.155.31
Source: unknown	TCP traffic detected without corresponding DNS query: 45.137.155.31
Source: unknown	TCP traffic detected without corresponding DNS query: 45.137.155.31
Source: unknown	TCP traffic detected without corresponding DNS query: 45.137.155.31
Source: unknown	TCP traffic detected without corresponding DNS query: 45.137.155.31
Source: unknown	TCP traffic detected without corresponding DNS query: 45.137.155.31
Source: unknown	TCP traffic detected without corresponding DNS query: 45.137.155.31
Source: unknown	TCP traffic detected without corresponding DNS query: 45.137.155.31
Source: unknown	TCP traffic detected without corresponding DNS query: 45.137.155.31
Source: unknown	TCP traffic detected without corresponding DNS query: 45.137.155.31
Source: unknown	TCP traffic detected without corresponding DNS query: 45.137.155.31
Source: unknown	TCP traffic detected without corresponding DNS query: 45.137.155.31
Source: unknown	TCP traffic detected without corresponding DNS query: 45.137.155.31
Source: unknown	TCP traffic detected without corresponding DNS query: 45.137.155.31
Source: unknown	TCP traffic detected without corresponding DNS query: 45.137.155.31
Source: unknown	TCP traffic detected without corresponding DNS query: 45.137.155.31
Source: unknown	TCP traffic detected without corresponding DNS query: 45.137.155.31
Source: unknown	TCP traffic detected without corresponding DNS query: 45.137.155.31
Source: unknown	TCP traffic detected without corresponding DNS query: 45.137.155.31
Source: unknown	TCP traffic detected without corresponding DNS query: 45.137.155.31
Source: unknown	TCP traffic detected without corresponding DNS query: 45.137.155.31
Source: unknown	TCP traffic detected without corresponding DNS query: 45.137.155.31
Source: unknown	TCP traffic detected without corresponding DNS query: 45.137.155.31
Source: unknown	TCP traffic detected without corresponding DNS query: 45.137.155.31
Source: unknown	TCP traffic detected without corresponding DNS query: 45.137.155.31
Source: unknown	TCP traffic detected without corresponding DNS query: 45.137.155.31
Source: unknown	TCP traffic detected without corresponding DNS query: 45.137.155.31
Source: unknown	TCP traffic detected without corresponding DNS query: 45.137.155.31
Source: unknown	TCP traffic detected without corresponding DNS query: 45.137.155.31
Source: unknown	TCP traffic detected without corresponding DNS query: 45.137.155.31
Source: unknown	TCP traffic detected without corresponding DNS query: 45.137.155.31
Source: unknown	TCP traffic detected without corresponding DNS query: 45.137.155.31
Source: unknown	TCP traffic detected without corresponding DNS query: 45.137.155.31
Source: unknown	TCP traffic detected without corresponding DNS query: 45.137.155.31

Source: unknown

HTTP traffic detected: POST / HTTP/1.1Content-Type: text/xml; charset=utf-8SOAPAction: "http://tempuri.org/Endpoint/GetArguments"Host: 45.137.155.31:11556Content-Length: 137Expect: 100-continueAccept-Encoding: gzip, deflateConnection: Keep-Alive

Source: 7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe, 00000002.00000002.468860488.0000000002BC8000.00000004.00000001.sdmp, 7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe, 00000002.00000002.469171035.0000000002C62000.00000004.00000001.sdmp	String found in binary or memory: http://45.137.155.31:11556
Source: 7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe, 00000002.00000002.468860488.0000000002BC8000.00000004.00000001.sdmp	String found in binary or memory: http://45.137.155.31:11556/
Source: 7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe, 00000002.00000002.468860488.0000000002BC8000.00000004.00000001.sdmp	String found in binary or memory: http://45.137.155.31:115564
Source: 7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe	String found in binary or memory: http://crl.sectigo.com/SectigoRSATimeStampingCA.crl0t
Source: 7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe	String found in binary or memory: http://crt.sectigo.com/SectigoRSATimeStampingCA.crt0#
Source: 7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe	String found in binary or memory: http://ocsp.sectigo.com0
Source: 7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe, 00000002.00000002.468837509.0000000002BC1000.00000004.00000001.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/soap/actor/next
Source: 7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe, 00000002.00000002.469171035.0000000002C62000.00000004.00000001.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/soap/envelope/
Source: 7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe, 00000002.00000002.469171035.0000000002C62000.00000004.00000001.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/soap/envelope/D
Source: 7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe, 00000002.00000002.468837509.0000000002BC1000.00000004.00000001.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2004/08/addressing
Source: 7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe, 00000002.00000002.468837509.0000000002BC1000.00000004.00000001.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2004/08/addressing/fault
Source: 7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe, 00000002.00000002.468837509.0000000002BC1000.00000004.00000001.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2004/08/addressing/role/anonymous
Source: 7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe, 00000002.00000002.468860488.0000000002BC8000.00000004.00000001.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name
Source: 7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe, 00000002.00000002.469143603.0000000002C5A000.00000004.00000001.sdmp, 7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe, 00000002.00000002.469171035.0000000002C62000.00000004.00000001.sdmp	String found in binary or memory: http://tempuri.org/
Source: 7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe, 00000002.00000002.469143603.0000000002C5A000.00000004.00000001.sdmp	String found in binary or memory: http://tempuri.org/0
Source: 7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe, 00000002.00000002.468860488.0000000002BC8000.00000004.00000001.sdmp	String found in binary or memory: http://tempuri.org/Endpoint/
Source: 7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe, 00000002.00000002.469171035.0000000002C62000.00000004.00000001.sdmp	String found in binary or memory: http://tempuri.org/Endpoint/GetArguments
Source: 7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe, 00000002.00000002.468860488.0000000002BC8000.00000004.00000001.sdmp	String found in binary or memory: http://tempuri.org/Endpoint/GetArgumentsResponse$
Source: 7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe, 00000002.00000002.468860488.0000000002BC8000.00000004.00000001.sdmp	String found in binary or memory: http://tempuri.org/Endpoint/GetUpdates
Source: 7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe, 00000002.00000002.468860488.0000000002BC8000.00000004.00000001.sdmp	String found in binary or memory: http://tempuri.org/Endpoint/GetUpdatesResponse$
Source: 7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe, 00000002.00000002.468860488.0000000002BC8000.00000004.00000001.sdmp	String found in binary or memory: http://tempuri.org/Endpoint/VerifyScanRequest
Source: 7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe, 00000002.00000002.468860488.0000000002BC8000.00000004.00000001.sdmp	String found in binary or memory: http://tempuri.org/Endpoint/VerifyScanRequestResponse$
Source: 7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe, 00000002.00000002.468860488.0000000002BC8000.00000004.00000001.sdmp	String found in binary or memory: http://tempuri.org/Endpoint/VerifyUpdate
Source: 7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe, 00000002.00000002.468860488.0000000002BC8000.00000004.00000001.sdmp	String found in binary or memory: http://tempuri.org/Endpoint/VerifyUpdateResponse$
Source: 7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe, 00000001.00000002.223233962.000000000393A000.00000004.00000001.sdmp, 7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe, 00000002.00000002.465623603.0000000000402000.00000040.00000001.sdmp	String found in binary or memory: https://api.ip.sb/geoip%USERPEnvironmentROFILE%
Source: 7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe, 00000001.00000002.223233962.000000000393A000.00000004.00000001.sdmp, 7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe, 00000002.00000002.465623603.0000000000402000.00000040.00000001.sdmp	String found in binary or memory: https://api.ipify.org
Source: 7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe, 00000001.00000002.223233962.000000000393A000.00000004.00000001.sdmp, 7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe, 00000002.00000002.465623603.0000000000402000.00000040.00000001.sdmp	String found in binary or memory: https://icanhazip.com5https://wtfismyip.com/textChttp://bot.whatismyipaddress.com/3http://checkip.dy
Source: 7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe, 00000001.00000002.223233962.000000000393A000.00000004.00000001.sdmp, 7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe, 00000002.00000002.465623603.0000000000402000.00000040.00000001.sdmp	String found in binary or memory: https://ipinfo.io/ip%appdata%
Source: 7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe	String found in binary or memory: https://sectigo.com/CPS0D

Source: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe	Code function: 1_2_0279C25C
Source: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe	Code function: 1_2_0279E1D0
Source: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe	Code function: 1_2_0279E1C0
Source: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe	Code function: 1_2_04E44088
Source: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe	Code function: 1_2_04E451C0
Source: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe	Code function: 1_2_04E4E860
Source: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe	Code function: 2_2_01067248
Source: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe	Code function: 2_2_01067258
Source: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe	Code function: 2_2_050FB448
Source: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe	Code function: 2_2_050FBAB0
Source: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe	Code function: 2_2_050FC571
Source: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe	Code function: 2_2_050F2F60
Source: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe	Code function: 2_2_050FDF78
Source: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe	Code function: 2_2_050FDF88
Source: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe	Code function: 2_2_05160040
Source: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe	Code function: 2_2_05163AC0

Source: 7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe

Static PE information: invalid certificate

Source: 7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe

Static PE information: Resource name: RT_ICON type: GLS_BINARY_LSB_FIRST

Source: 7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe, 00000001.00000002.221997766.0000000002911000.00000004.00000001.sdmp	Binary or memory string: OriginalFilenameIsaacCore.dll4 vs 7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe
Source: 7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe, 00000001.00000002.223233962.000000000393A000.00000004.00000001.sdmp	Binary or memory string: OriginalFilenameSwells.exe4 vs 7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe
Source: 7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe, 00000001.00000002.220976731.00000000005CE000.00000002.00020000.sdmp	Binary or memory string: OriginalFilenameMethodAttributes.exe\ vs 7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe
Source: 7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe, 00000002.00000002.466285029.00000000008DE000.00000002.00020000.sdmp	Binary or memory string: OriginalFilenameMethodAttributes.exe\ vs 7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe
Source: 7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe, 00000002.00000002.468118490.000000000107A000.00000004.00000020.sdmp	Binary or memory string: OriginalFilenameclr.dllT vs 7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe
Source: 7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe, 00000002.00000002.465827946.000000000041A000.00000040.00000001.sdmp	Binary or memory string: OriginalFilenameSwells.exe4 vs 7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe
Source: 7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe	Binary or memory string: OriginalFilenameMethodAttributes.exe\ vs 7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe

Source: 7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe

Static PE information: LOCAL_SYMS_STRIPPED, 32BIT_MACHINE, EXECUTABLE_IMAGE, LINE_NUMS_STRIPPED

Source: 7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe

Static PE information: Section: .text IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_READ

Source: classification engine

Classification label: mal68.troj.winEXE@3/1@0/1

Source: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe

File created: C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe.log

Jump to behavior

Source: 7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe

Static PE information: Section: .text IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_READ

Source: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe	Section loaded: C:\Windows\assembly\NativeImages_v4.0.30319_32\mscorlib\a152fe02a317a77aeee36903305e8ba6\mscorlib.ni.dll
Source: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe	Section loaded: C:\Windows\assembly\NativeImages_v4.0.30319_32\mscorlib\a152fe02a317a77aeee36903305e8ba6\mscorlib.ni.dll

Source: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Source: 7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe	Virustotal: Detection: 38%
Source: 7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe	ReversingLabs: Detection: 67%

Source: unknown	Process created: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe 'C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe'
Source: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe	Process created: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe
Source: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe	Process created: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe

Source: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{0A29FF9E-7F9C-4437-8B11-F424491E3931}\InprocServer32

Source: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe

File opened: C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorrc.dll

Source: 7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe

Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR

Source: 7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe

Static PE information: NO_SEH, TERMINAL_SERVER_AWARE, DYNAMIC_BASE, NX_COMPAT

Source: 7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe

Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_DEBUG

Source:	Binary string: System.ServiceModel.pdbl6 source: 7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe, 00000002.00000002.468518828.000000000112E000.00000004.00000001.sdmp
Source:	Binary string: \??\C:\Windows\dll\System.ServiceModel.pdbj source: 7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe, 00000002.00000002.468229225.00000000010A2000.00000004.00000020.sdmp
Source:	Binary string: jHC:\Windows\System.ServiceModel.pdb source: 7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe, 00000002.00000002.466476163.0000000000CF8000.00000004.00000001.sdmp

Source: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe	Code function: 1_2_0279F990 pushfd ; iretd
Source: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe	Code function: 2_2_050FA1F7 push E801005Eh; retf
Source: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe	Code function: 2_2_050F98A0 push 38050ACBh; retf

Source: initial sample

Static PE information: section name: .text entropy: 7.50941268753

Hooking and other Techniques for Hiding and Protection:

Uses known network protocols on non-standard ports

Show sources

Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 11556
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 11556 -> 49725

Source: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe	Process information set: NOOPENFILEERRORBOX

Source: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe

Thread delayed: delay time: 922337203685477

Source: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe TID: 2120	Thread sleep time: -922337203685477s >= -30000s
Source: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe TID: 3216	Thread sleep count: 77 > 30
Source: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe TID: 3216	Thread sleep time: -77000s >= -30000s

Source: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe	Last function: Thread delayed
Source: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe	Last function: Thread delayed

Source: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe

Thread delayed: delay time: 922337203685477

Source: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe	Process token adjusted: Debug
Source: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe	Process token adjusted: Debug

Source: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe

Memory allocated: page read and write | page guard

Source: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe

Process created: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe

Source: 7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe, 00000002.00000002.468601055.0000000001600000.00000002.00000001.sdmp	Binary or memory string: Program Manager
Source: 7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe, 00000002.00000002.468601055.0000000001600000.00000002.00000001.sdmp	Binary or memory string: Shell_TrayWnd
Source: 7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe, 00000002.00000002.468601055.0000000001600000.00000002.00000001.sdmp	Binary or memory string: Progman
Source: 7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe, 00000002.00000002.468601055.0000000001600000.00000002.00000001.sdmp	Binary or memory string: Progmanlock

Source: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe	Queries volume information: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe VolumeInformation
Source: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Forms\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Forms.dll VolumeInformation
Source: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Drawing\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll VolumeInformation
Source: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Accessibility\v4.0_4.0.0.0__b03f5f7f11d50a3a\Accessibility.dll VolumeInformation
Source: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.CSharp\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.CSharp.dll VolumeInformation
Source: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Dynamic\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Dynamic.dll VolumeInformation
Source: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe	Queries volume information: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe VolumeInformation
Source: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Forms\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Forms.dll VolumeInformation
Source: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel\v4.0_4.0.0.0__b77a5c561934e089\System.ServiceModel.dll VolumeInformation
Source: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Drawing\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll VolumeInformation
Source: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\SMDiagnostics\v4.0_4.0.0.0__b77a5c561934e089\SMDiagnostics.dll VolumeInformation
Source: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Internals\v4.0_4.0.0.0__31bf3856ad364e35\System.ServiceModel.Internals.dll VolumeInformation
Source: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_32\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll VolumeInformation
Source: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_32\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll VolumeInformation
Source: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_32\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll VolumeInformation
Source: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.IdentityModel\v4.0_4.0.0.0__b77a5c561934e089\System.IdentityModel.dll VolumeInformation

Source: C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography MachineGuid

Stealing of Sensitive Information:

Yara detected RedLine Stealer

Show sources

Source: Yara match	File source: 1.2.7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe.393a170.4.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 1.2.7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe.393a170.4.unpack, type: UNPACKEDPE
Source: Yara match	File source: 2.2.7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe.400000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000002.00000002.465623603.0000000000402000.00000040.00000001.sdmp, type: MEMORY
Source: Yara match	File source: 00000001.00000002.223233962.000000000393A000.00000004.00000001.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: 7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe PID: 968, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe PID: 992, type: MEMORYSTR

Remote Access Functionality:

Yara detected RedLine Stealer

Show sources

Source: Yara match	File source: 1.2.7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe.393a170.4.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 1.2.7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe.393a170.4.unpack, type: UNPACKEDPE
Source: Yara match	File source: 2.2.7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe.400000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000002.00000002.465623603.0000000000402000.00000040.00000001.sdmp, type: MEMORY
Source: Yara match	File source: 00000001.00000002.223233962.000000000393A000.00000004.00000001.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: 7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe PID: 968, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe PID: 992, type: MEMORYSTR

Mitre Att&ck Matrix

Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Exfiltration	Command and Control	Network Effects	Remote Service Effects	Impact
Valid Accounts	Windows Management Instrumentation	Path Interception	Process Injection12	Masquerading1	OS Credential Dumping	Process Discovery1	Remote Services	Archive Collected Data1	Exfiltration Over Other Network Medium	Encrypted Channel1	Eavesdrop on Insecure Network Communication	Remotely Track Device Without Authorization	Modify System Partition
Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Disable or Modify Tools1	LSASS Memory	Virtualization/Sandbox Evasion21	Remote Desktop Protocol	Data from Removable Media	Exfiltration Over Bluetooth	Non-Standard Port11	Exploit SS7 to Redirect Phone Calls/SMS	Remotely Wipe Data Without Authorization	Device Lockout
Domain Accounts	At (Linux)	Logon Script (Windows)	Logon Script (Windows)	Virtualization/Sandbox Evasion21	Security Account Manager	System Information Discovery12	SMB/Windows Admin Shares	Data from Network Shared Drive	Automated Exfiltration	Non-Application Layer Protocol1	Exploit SS7 to Track Device Location	Obtain Device Cloud Backups	Delete Device Data
Local Accounts	At (Windows)	Logon Script (Mac)	Logon Script (Mac)	Process Injection12	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	Scheduled Transfer	Application Layer Protocol1	SIM Card Swap		Carrier Billing Fraud
Cloud Accounts	Cron	Network Logon Script	Network Logon Script	Obfuscated Files or Information2	LSA Secrets	Remote System Discovery	SSH	Keylogging	Data Transfer Size Limits	Fallback Channels	Manipulate Device Communication		Manipulate App Store Rankings or Ratings
Replication Through Removable Media	Launchd	Rc.common	Rc.common	Software Packing2	Cached Domain Credentials	System Owner/User Discovery	VNC	GUI Input Capture	Exfiltration Over C2 Channel	Multiband Communication	Jamming or Denial of Service		Abuse Accessibility Features

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe	39%	Virustotal		Browse
7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe	68%	ReversingLabs	ByteCode-MSIL.Trojan.AgentTesla

Dropped Files

No Antivirus matches

Unpacked PE Files

Source	Detection	Scanner	Label	Link	Download
2.2.7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe.400000.0.unpack	100%	Avira	HEUR/AGEN.1142322		Download File

Domains

No Antivirus matches

URLs

Source	Detection	Scanner	Label	Link
https://icanhazip.com5https://wtfismyip.com/textChttp://bot.whatismyipaddress.com/3http://checkip.dy	0%	Avira URL Cloud	safe
http://ocsp.sectigo.com0	0%	URL Reputation	safe
http://tempuri.org/Endpoint/GetArguments	0%	Virustotal		Browse
http://tempuri.org/Endpoint/GetArguments	0%	Avira URL Cloud	safe
https://api.ip.sb/geoip%USERPEnvironmentROFILE%	0%	URL Reputation	safe
http://tempuri.org/	2%	Virustotal		Browse
http://tempuri.org/	0%	Avira URL Cloud	safe
http://45.137.155.31:11556	0%	Virustotal		Browse
http://45.137.155.31:11556	0%	Avira URL Cloud	safe
http://tempuri.org/Endpoint/VerifyUpdateResponse$	0%	Avira URL Cloud	safe
http://tempuri.org/Endpoint/GetUpdates	0%	Avira URL Cloud	safe
http://crl.sectigo.com/SectigoRSATimeStampingCA.crl0t	0%	URL Reputation	safe
http://tempuri.org/Endpoint/VerifyScanRequest	0%	Avira URL Cloud	safe
http://tempuri.org/Endpoint/GetUpdatesResponse$	0%	Avira URL Cloud	safe
http://crt.sectigo.com/SectigoRSATimeStampingCA.crt0#	0%	URL Reputation	safe
http://tempuri.org/Endpoint/GetArgumentsResponse$	0%	Avira URL Cloud	safe
https://sectigo.com/CPS0D	0%	URL Reputation	safe
http://tempuri.org/Endpoint/	0%	Avira URL Cloud	safe
http://tempuri.org/Endpoint/VerifyUpdate	0%	Avira URL Cloud	safe
http://45.137.155.31:115564	0%	Avira URL Cloud	safe
http://tempuri.org/0	0%	Avira URL Cloud	safe
http://45.137.155.31:11556/	0%	Avira URL Cloud	safe
http://tempuri.org/Endpoint/VerifyScanRequestResponse$	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

No contacted domains info

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
http://45.137.155.31:11556/	true	Avira URL Cloud: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://ipinfo.io/ip%appdata%	7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe, 00000001.00000002.223233962.000000000393A000.00000004.00000001.sdmp, 7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe, 00000002.00000002.465623603.0000000000402000.00000040.00000001.sdmp	false		high
https://icanhazip.com5https://wtfismyip.com/textChttp://bot.whatismyipaddress.com/3http://checkip.dy	7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe, 00000001.00000002.223233962.000000000393A000.00000004.00000001.sdmp, 7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe, 00000002.00000002.465623603.0000000000402000.00000040.00000001.sdmp	false	Avira URL Cloud: safe	unknown
http://ocsp.sectigo.com0	7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe	false	URL Reputation: safe	unknown
http://tempuri.org/Endpoint/GetArguments	7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe, 00000002.00000002.469171035.0000000002C62000.00000004.00000001.sdmp	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
http://schemas.xmlsoap.org/ws/2004/08/addressing/role/anonymous	7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe, 00000002.00000002.468837509.0000000002BC1000.00000004.00000001.sdmp	false		high
https://api.ip.sb/geoip%USERPEnvironmentROFILE%	7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe, 00000001.00000002.223233962.000000000393A000.00000004.00000001.sdmp, 7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe, 00000002.00000002.465623603.0000000000402000.00000040.00000001.sdmp	false	URL Reputation: safe	unknown
http://schemas.xmlsoap.org/soap/envelope/	7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe, 00000002.00000002.469171035.0000000002C62000.00000004.00000001.sdmp	false		high
http://schemas.xmlsoap.org/soap/envelope/D	7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe, 00000002.00000002.469171035.0000000002C62000.00000004.00000001.sdmp	false		high
http://tempuri.org/	7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe, 00000002.00000002.469143603.0000000002C5A000.00000004.00000001.sdmp, 7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe, 00000002.00000002.469171035.0000000002C62000.00000004.00000001.sdmp	false	2%, Virustotal, Browse Avira URL Cloud: safe	unknown
http://45.137.155.31:11556	7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe, 00000002.00000002.468860488.0000000002BC8000.00000004.00000001.sdmp, 7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe, 00000002.00000002.469171035.0000000002C62000.00000004.00000001.sdmp	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
http://tempuri.org/Endpoint/VerifyUpdateResponse$	7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe, 00000002.00000002.468860488.0000000002BC8000.00000004.00000001.sdmp	false	Avira URL Cloud: safe	unknown
http://tempuri.org/Endpoint/GetUpdates	7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe, 00000002.00000002.468860488.0000000002BC8000.00000004.00000001.sdmp	false	Avira URL Cloud: safe	unknown
http://crl.sectigo.com/SectigoRSATimeStampingCA.crl0t	7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe	false	URL Reputation: safe	unknown
https://api.ipify.org	7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe, 00000001.00000002.223233962.000000000393A000.00000004.00000001.sdmp, 7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe, 00000002.00000002.465623603.0000000000402000.00000040.00000001.sdmp	false		high
http://schemas.xmlsoap.org/ws/2004/08/addressing	7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe, 00000002.00000002.468837509.0000000002BC1000.00000004.00000001.sdmp	false		high
http://schemas.xmlsoap.org/ws/2004/08/addressing/fault	7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe, 00000002.00000002.468837509.0000000002BC1000.00000004.00000001.sdmp	false		high
http://tempuri.org/Endpoint/VerifyScanRequest	7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe, 00000002.00000002.468860488.0000000002BC8000.00000004.00000001.sdmp	false	Avira URL Cloud: safe	unknown
http://tempuri.org/Endpoint/GetUpdatesResponse$	7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe, 00000002.00000002.468860488.0000000002BC8000.00000004.00000001.sdmp	false	Avira URL Cloud: safe	unknown
http://crt.sectigo.com/SectigoRSATimeStampingCA.crt0#	7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe	false	URL Reputation: safe	unknown
http://tempuri.org/Endpoint/GetArgumentsResponse$	7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe, 00000002.00000002.468860488.0000000002BC8000.00000004.00000001.sdmp	false	Avira URL Cloud: safe	unknown
https://sectigo.com/CPS0D	7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe	false	URL Reputation: safe	unknown
http://tempuri.org/Endpoint/	7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe, 00000002.00000002.468860488.0000000002BC8000.00000004.00000001.sdmp	false	Avira URL Cloud: safe	unknown
http://tempuri.org/Endpoint/VerifyUpdate	7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe, 00000002.00000002.468860488.0000000002BC8000.00000004.00000001.sdmp	false	Avira URL Cloud: safe	unknown
http://45.137.155.31:115564	7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe, 00000002.00000002.468860488.0000000002BC8000.00000004.00000001.sdmp	false	Avira URL Cloud: safe	unknown
http://tempuri.org/0	7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe, 00000002.00000002.469143603.0000000002C5A000.00000004.00000001.sdmp	false	Avira URL Cloud: safe	unknown
http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name	7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe, 00000002.00000002.468860488.0000000002BC8000.00000004.00000001.sdmp	false		high
http://schemas.xmlsoap.org/soap/actor/next	7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe, 00000002.00000002.468837509.0000000002BC1000.00000004.00000001.sdmp	false		high
http://tempuri.org/Endpoint/VerifyScanRequestResponse$	7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe, 00000002.00000002.468860488.0000000002BC8000.00000004.00000001.sdmp	false	Avira URL Cloud: safe	unknown

Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public

IP	Domain	Country	Flag	ASN	ASN Name	Malicious
45.137.155.31	unknown	Russian Federation		25229	VOLIA-ASUA	true

General Information

Joe Sandbox Version:	33.0.0 White Diamond
Analysis ID:	458960
Start date:	03.08.2021
Start time:	23:07:20
Joe Sandbox Product:	CloudBasic
Overall analysis duration:	0h 7m 39s
Hypervisor based Inspection enabled:	false
Report type:	light
Sample file name:	7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 64 bit v1803 with Office Professional Plus 2016, Chrome 85, IE 11, Adobe Reader DC 19, Java 8 Update 211
Number of analysed new started processes analysed:	26
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled HDC enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal68.troj.winEXE@3/1@0/1
EGA Information:	Failed
HDC Information:	Successful, ratio: 0% (good quality ratio 0%) Quality average: 17% Quality standard deviation: 34%
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Adjust boot time Enable AMSI Found application associated with file extension: .exe
Warnings:	Show All Exclude process from analysis (whitelisted): MpCmdRun.exe, audiodg.exe, BackgroundTransferHost.exe, HxTsr.exe, RuntimeBroker.exe, backgroundTaskHost.exe, SgrmBroker.exe, conhost.exe, svchost.exe, UsoClient.exe HTTP Packets have been reduced TCP Packets have been reduced to 100 Not all processes where analyzed, report is missing behavior information Report size getting too big, too many NtAllocateVirtualMemory calls found.

Simulations

Behavior and APIs

Time	Type	Description
23:08:05	API Interceptor	1x Sleep call for process: 7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe modified

Joe Sandbox View / Context

IPs

No context

Domains

No context

ASN

Match	Associated Sample Name / URL	SHA 256	Detection	Link	Context
VOLIA-ASUA	TpZ10Hfjov.exe	Get hash	malicious	Browse	77.123.139.190
	o12nY1xwUl.exe	Get hash	malicious	Browse	77.123.139.190
	R4qgfTvaiK.exe	Get hash	malicious	Browse	77.123.139.190
	AR2rPMLtaN.exe	Get hash	malicious	Browse	77.123.139.190
	gji54VjOlP	Get hash	malicious	Browse	93.75.73.91
	flJrVwWebP.exe	Get hash	malicious	Browse	77.123.139.190
	bHC6bZhkMz.exe	Get hash	malicious	Browse	77.123.139.190
	4Dm89IWqe9.exe	Get hash	malicious	Browse	77.123.139.190
	5mr8riiH5q.exe	Get hash	malicious	Browse	77.123.139.190
	YoKh9rD5xR.exe	Get hash	malicious	Browse	77.123.139.190
	Oyu6AMjXZH.exe	Get hash	malicious	Browse	77.123.139.190
	vhTZ5hgW6j	Get hash	malicious	Browse	93.74.47.236
	gNt5Z08t0Y.exe	Get hash	malicious	Browse	77.123.139.190
	EpLr3m6ArC.exe	Get hash	malicious	Browse	77.123.139.190
	Ace_Stream_Media_3.1.32.exe	Get hash	malicious	Browse	77.120.105.71
	120mAT7jpA	Get hash	malicious	Browse	93.77.37.56
	Lkm548STLf	Get hash	malicious	Browse	93.75.8.58
	TCMKnazFHf	Get hash	malicious	Browse	77.121.115.127
	U9ZCIleOAC	Get hash	malicious	Browse	93.72.90.114
	C2XcSV0eL7	Get hash	malicious	Browse	93.74.243.200

JA3 Fingerprints

No context

Dropped Files

No context

Created / dropped Files

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe.log Download File
Process:	C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	1299
Entropy (8bit):	5.353835388147306
Encrypted:	false
SSDEEP:	24:MLUE4K5E4Ks2E1qE4qXKDE4KhK3VZ9pKhPKIE4oKFKHKoZAE4Kzr7FE4xLE4qE4j:MIHK5HKXE1qHiYHKhQnoPtHoxHhAHKzg
MD5:	D7428B0428DC5FA72A41122D265CFA0E
SHA1:	F485E2EC6F980F218063AF527724C088617B3B94
SHA-256:	C49B31FB28F5EC1B5A82D45DF4A0A88DBC26E468BA007D8E63C800BA69CC5FFC
SHA-512:	FD5BC965FD28DC219F2703726A34A7156D1B71B9199617136F936DD5DDBB2CA65175FBB4B761243635493D6CABE3069406B4D4473DEEB93FDCDA1F392345683B
Malicious:	true
Reputation:	moderate, very likely benign file
Preview:	1,"fusion","GAC",0..1,"WinRT","NotApp",1..2,"System.Windows.Forms, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089",0..3,"System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089","C:\Windows\assembly\NativeImages_v4.0.30319_32\System\4f0a7eefa3cd3e0ba98b5ebddbbc72e6\System.ni.dll",0..2,"System.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a",0..3,"System.Core, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089","C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Core\f1d8480152e0da9a60ad49c6d16a3b6d\System.Core.ni.dll",0..3,"System.Configuration, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a","C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Configuration\8d67d92724ba494b6c7fd089d6f25b48\System.Configuration.ni.dll",0..3,"System.Xml, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089","C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Xml\b219d4630d26b88041b59c21

Static File Info

General
File type:	PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
Entropy (8bit):	6.58992019616862
TrID:	Win32 Executable (generic) Net Framework (10011505/4) 49.98% Win32 Executable (generic) a (10002005/4) 49.93% Windows Screen Saver (13104/52) 0.07% Generic Win/DOS Executable (2004/3) 0.01% DOS Executable Generic (2002/1) 0.01%
File name:	7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe
File size:	364240
MD5:	2e18a08987838bbc3c26ffdbbcec1e62
SHA1:	2dd67d0c7191ab3380bc4a1b9ca3a09c684a2291
SHA256:	7c3beb3d9b0a8e0bdc6344a24b3b527b96cb9c845aa6847d8ac9d192f68ff912
SHA512:	bab4ef07f12fa241c3390550f75e2beeea344b44c6216c74d8ddca1de97a02c27f77d2d38238bc708590aa45e3fea4ede744fb26010e0deb6eb35169d8212944
SSDEEP:	6144:5bchiOsbOe04ety4saEH8heP9UBcemgMrXsTM:RTaepetyras8hM9UB8cTM
File Content Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L....G.`..............0......^......R.... ........@.. ...............................`....@................................

File Icon


Icon Hash:	e8e6eae6b292c26e

Static PE Info

General
Entrypoint:	0x42bb52
Entrypoint Section:	.text
Digitally signed:	true
Imagebase:	0x400000
Subsystem:	windows gui
Image File Characteristics:	LOCAL_SYMS_STRIPPED, 32BIT_MACHINE, EXECUTABLE_IMAGE, LINE_NUMS_STRIPPED
DLL Characteristics:	NO_SEH, TERMINAL_SERVER_AWARE, DYNAMIC_BASE, NX_COMPAT
Time Stamp:	0x60D847E7 [Sun Jun 27 09:41:59 2021 UTC]
TLS Callbacks:
CLR (.Net) Version:	v4.0.30319
OS Version Major:	4
OS Version Minor:	0
File Version Major:	4
File Version Minor:	0
Subsystem Version Major:	4
Subsystem Version Minor:	0
Import Hash:	f34d5f2d4577ed6d9ceec516c1f5a744

Authenticode Signature

Signature Valid:	false
Signature Issuer:	CN=ColumnHeaderCollection
Signature Validation Error:	A certificate chain processed, but terminated in a root certificate which is not trusted by the trust provider
Error Number:	-2146762487
Not Before, Not After	6/26/2021 11:00:00 AM 6/27/2024 12:00:00 AM
Subject Chain	CN=ColumnHeaderCollection
Version:	3
Thumbprint MD5:	CF93BA345DF2747B2CF53ABC293CB913
Thumbprint SHA-1:	C4BE4F3585EF8282812D7BDAB5E5A1F5AA6BD7F8
Thumbprint SHA-256:	D3467EDC946463A56CCACC44EFB99073D816EAEB249D14968A79417E4253F66B
Serial:	723CD9354EC38F03

Entrypoint Preview

Instruction
jmp dword ptr [00402000h]
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al

Data Directories

Name	Virtual Address	Virtual Size	Is in Section
IMAGE_DIRECTORY_ENTRY_EXPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IMPORT	0x2baf8	0x57	.text
IMAGE_DIRECTORY_ENTRY_RESOURCE	0x2e000	0x2c030	.rsrc
IMAGE_DIRECTORY_ENTRY_EXCEPTION	0x0	0x0
IMAGE_DIRECTORY_ENTRY_SECURITY	0x56200	0x2cd0	.rsrc
IMAGE_DIRECTORY_ENTRY_BASERELOC	0x2c000	0xc	.reloc
IMAGE_DIRECTORY_ENTRY_DEBUG	0x24a4c	0x1c	.text
IMAGE_DIRECTORY_ENTRY_COPYRIGHT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_GLOBALPTR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_TLS	0x0	0x0
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IAT	0x2000	0x8	.text
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR	0x2008	0x48	.text
IMAGE_DIRECTORY_ENTRY_RESERVED	0x0	0x0

Sections

Name	Virtual Address	Virtual Size	Raw Size	Xored PE	ZLIB Complexity	File Type	Entropy	Characteristics
.text	0x2000	0x29b58	0x29c00	False	0.775870134731	data	7.50941268753	IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_READ
.reloc	0x2c000	0xc	0x200	False	0.044921875	data	0.101910425663	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_DISCARDABLE, IMAGE_SCN_MEM_READ
.rsrc	0x2e000	0x2c030	0x2c200	False	0.220221759915	data	4.87437214898	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ

Resources

Name	RVA	Size	Type
RT_ICON	0x2e268	0x417f	PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced
RT_ICON	0x323e8	0x10828	dBase IV DBT, blocks size 0, block length 2048, next free block index 40, next free block 0, next used block 0
RT_ICON	0x42c10	0x94a8	data
RT_ICON	0x4c0b8	0x5488	data
RT_ICON	0x51540	0x4228	dBase IV DBT of \200.DBF, blocks size 0, block length 16896, next free block index 40, next free block 192, next used block 4282318872
RT_ICON	0x55768	0x25a8	data
RT_ICON	0x57d10	0x10a8	data
RT_ICON	0x58db8	0x988	data
RT_ICON	0x59740	0x468	GLS_BINARY_LSB_FIRST
RT_GROUP_ICON	0x59ba8	0x84	data
RT_VERSION	0x59c2c	0x404	data

Imports

DLL	Import
mscoree.dll	_CorExeMain

Version Infos

Description	Data
Translation	0x0000 0x04b0
LegalCopyright	Copyright (c) CRFML Corporation. All rights reserved.
Assembly Version	434.356.138.555
InternalName	MethodAttributes.exe
FileVersion	248.995.351.388
CompanyName	CRFML Corporation.
Comments	Licensed Delegated
ProductName	CRFML The Real Fish Delegate.
ProductVersion	248.995.351.388
FileDescription	Fish Delegates
OriginalFilename	MethodAttributes.exe

Network Behavior

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Aug 3, 2021 23:08:34.539272070 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:08:34.608829975 CEST	11556	49725	45.137.155.31	192.168.2.3
Aug 3, 2021 23:08:34.608943939 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:08:34.775641918 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:08:34.844460011 CEST	11556	49725	45.137.155.31	192.168.2.3
Aug 3, 2021 23:08:34.844919920 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:08:34.935828924 CEST	11556	49725	45.137.155.31	192.168.2.3
Aug 3, 2021 23:08:35.116533041 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:08:37.872083902 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:08:37.942097902 CEST	11556	49725	45.137.155.31	192.168.2.3
Aug 3, 2021 23:08:37.945636034 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:08:38.016057968 CEST	11556	49725	45.137.155.31	192.168.2.3
Aug 3, 2021 23:08:38.226187944 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:08:39.024693966 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:08:39.095200062 CEST	11556	49725	45.137.155.31	192.168.2.3
Aug 3, 2021 23:08:39.226295948 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:08:39.496062994 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:08:39.572225094 CEST	11556	49725	45.137.155.31	192.168.2.3
Aug 3, 2021 23:08:39.616928101 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:08:41.002532959 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:08:41.071475029 CEST	11556	49725	45.137.155.31	192.168.2.3
Aug 3, 2021 23:08:41.071873903 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:08:41.141886950 CEST	11556	49725	45.137.155.31	192.168.2.3
Aug 3, 2021 23:08:41.226475954 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:08:42.211414099 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:08:42.282383919 CEST	11556	49725	45.137.155.31	192.168.2.3
Aug 3, 2021 23:08:42.286588907 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:08:42.371978998 CEST	11556	49725	45.137.155.31	192.168.2.3
Aug 3, 2021 23:08:42.523458004 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:08:43.383331060 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:08:43.454222918 CEST	11556	49725	45.137.155.31	192.168.2.3
Aug 3, 2021 23:08:43.454910040 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:08:43.525957108 CEST	11556	49725	45.137.155.31	192.168.2.3
Aug 3, 2021 23:08:43.570585966 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:08:44.539746046 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:08:44.608695984 CEST	11556	49725	45.137.155.31	192.168.2.3
Aug 3, 2021 23:08:44.609221935 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:08:44.682656050 CEST	11556	49725	45.137.155.31	192.168.2.3
Aug 3, 2021 23:08:44.726794958 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:08:45.696274042 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:08:45.774158001 CEST	11556	49725	45.137.155.31	192.168.2.3
Aug 3, 2021 23:08:45.774604082 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:08:45.843389034 CEST	11556	49725	45.137.155.31	192.168.2.3
Aug 3, 2021 23:08:45.883111954 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:08:46.852746964 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:08:46.924748898 CEST	11556	49725	45.137.155.31	192.168.2.3
Aug 3, 2021 23:08:46.925151110 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:08:46.996185064 CEST	11556	49725	45.137.155.31	192.168.2.3
Aug 3, 2021 23:08:47.039469957 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:08:48.008903027 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:08:48.078175068 CEST	11556	49725	45.137.155.31	192.168.2.3
Aug 3, 2021 23:08:48.078557014 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:08:48.147993088 CEST	11556	49725	45.137.155.31	192.168.2.3
Aug 3, 2021 23:08:48.195836067 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:08:49.165903091 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:08:49.234884024 CEST	11556	49725	45.137.155.31	192.168.2.3
Aug 3, 2021 23:08:49.235312939 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:08:49.304136038 CEST	11556	49725	45.137.155.31	192.168.2.3
Aug 3, 2021 23:08:49.352307081 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:08:50.322942019 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:08:50.392438889 CEST	11556	49725	45.137.155.31	192.168.2.3
Aug 3, 2021 23:08:50.392863035 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:08:50.462193012 CEST	11556	49725	45.137.155.31	192.168.2.3
Aug 3, 2021 23:08:50.508629084 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:08:51.477946997 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:08:51.549185991 CEST	11556	49725	45.137.155.31	192.168.2.3
Aug 3, 2021 23:08:51.549530029 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:08:51.622066975 CEST	11556	49725	45.137.155.31	192.168.2.3
Aug 3, 2021 23:08:51.664973974 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:08:52.634804010 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:08:52.703515053 CEST	11556	49725	45.137.155.31	192.168.2.3
Aug 3, 2021 23:08:52.706039906 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:08:52.777390957 CEST	11556	49725	45.137.155.31	192.168.2.3
Aug 3, 2021 23:08:52.821343899 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:08:53.791714907 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:08:53.861747026 CEST	11556	49725	45.137.155.31	192.168.2.3
Aug 3, 2021 23:08:53.862258911 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:08:53.933701992 CEST	11556	49725	45.137.155.31	192.168.2.3
Aug 3, 2021 23:08:53.977737904 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:08:54.947076082 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:08:55.031856060 CEST	11556	49725	45.137.155.31	192.168.2.3
Aug 3, 2021 23:08:55.032232046 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:08:55.106903076 CEST	11556	49725	45.137.155.31	192.168.2.3
Aug 3, 2021 23:08:55.149503946 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:08:56.118983030 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:08:56.187716007 CEST	11556	49725	45.137.155.31	192.168.2.3
Aug 3, 2021 23:08:56.190704107 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:08:56.261271954 CEST	11556	49725	45.137.155.31	192.168.2.3
Aug 3, 2021 23:08:56.305851936 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:08:57.275489092 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:08:57.345042944 CEST	11556	49725	45.137.155.31	192.168.2.3
Aug 3, 2021 23:08:57.345726967 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:08:57.427540064 CEST	11556	49725	45.137.155.31	192.168.2.3
Aug 3, 2021 23:08:57.477873087 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:08:58.431857109 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:08:58.501523018 CEST	11556	49725	45.137.155.31	192.168.2.3
Aug 3, 2021 23:08:58.502108097 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:08:58.572072029 CEST	11556	49725	45.137.155.31	192.168.2.3
Aug 3, 2021 23:08:58.618643045 CEST	49725	11556	192.168.2.3	45.137.155.31
Aug 3, 2021 23:08:59.715187073 CEST	49725	11556	192.168.2.3	45.137.155.31

HTTP Request Dependency Graph

45.137.155.31:11556

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
0	192.168.2.3	49725	45.137.155.31	11556	C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe

Timestamp	kBytes transferred	Direction	Data
Aug 3, 2021 23:08:34.775641918 CEST	981	OUT	POST / HTTP/1.1 Content-Type: text/xml; charset=utf-8 SOAPAction: "http://tempuri.org/Endpoint/GetArguments" Host: 45.137.155.31:11556 Content-Length: 137 Expect: 100-continue Accept-Encoding: gzip, deflate Connection: Keep-Alive
Aug 3, 2021 23:08:34.844460011 CEST	981	IN	HTTP/1.1 100 Continue
Aug 3, 2021 23:08:34.935828924 CEST	983	IN	HTTP/1.1 500 Internal Server Error Content-Length: 738 Content-Type: text/xml; charset=utf-8 Server: Microsoft-HTTPAPI/2.0 Date: Tue, 03 Aug 2021 21:08:34 GMT Data Raw: 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 73 3a 46 61 75 6c 74 3e 3c 66 61 75 6c 74 63 6f 64 65 20 78 6d 6c 6e 73 3a 61 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 77 73 2f 32 30 30 35 2f 30 35 2f 61 64 64 72 65 73 73 69 6e 67 2f 6e 6f 6e 65 22 3e 61 3a 41 63 74 69 6f 6e 4e 6f 74 53 75 70 70 6f 72 74 65 64 3c 2f 66 61 75 6c 74 63 6f 64 65 3e 3c 66 61 75 6c 74 73 74 72 69 6e 67 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 54 68 65 20 6d 65 73 73 61 67 65 20 77 69 74 68 20 41 63 74 69 6f 6e 20 27 68 74 74 70 3a 2f 2f 74 65 6d 70 75 72 69 2e 6f 72 67 2f 45 6e 64 70 6f 69 6e 74 2f 47 65 74 41 72 67 75 6d 65 6e 74 73 27 20 63 61 6e 6e 6f 74 20 62 65 20 70 72 6f 63 65 73 73 65 64 20 61 74 20 74 68 65 20 72 65 63 65 69 76 65 72 2c 20 64 75 65 20 74 6f 20 61 20 43 6f 6e 74 72 61 63 74 46 69 6c 74 65 72 20 6d 69 73 6d 61 74 63 68 20 61 74 20 74 68 65 20 45 6e 64 70 6f 69 6e 74 44 69 73 70 61 74 63 68 65 72 2e 20 54 68 69 73 20 6d 61 79 20 62 65 20 62 65 63 61 75 73 65 20 6f 66 20 65 69 74 68 65 72 20 61 20 63 6f 6e 74 72 61 63 74 20 6d 69 73 6d 61 74 63 68 20 28 6d 69 73 6d 61 74 63 68 65 64 20 41 63 74 69 6f 6e 73 20 62 65 74 77 65 65 6e 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 29 20 6f 72 20 61 20 62 69 6e 64 69 6e 67 2f 73 65 63 75 72 69 74 79 20 6d 69 73 6d 61 74 63 68 20 62 65 74 77 65 65 6e 20 74 68 65 20 73 65 6e 64 65 72 20 61 6e 64 20 74 68 65 20 72 65 63 65 69 76 65 72 2e 20 20 43 68 65 63 6b 20 74 68 61 74 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 20 68 61 76 65 20 74 68 65 20 73 61 6d 65 20 63 6f 6e 74 72 61 63 74 20 61 6e 64 20 74 68 65 20 73 61 6d 65 20 62 69 6e 64 69 6e 67 20 28 69 6e 63 6c 75 64 69 6e 67 20 73 65 63 75 72 69 74 79 20 72 65 71 75 69 72 65 6d 65 6e 74 73 2c 20 65 2e 67 2e 20 4d 65 73 73 61 67 65 2c 20 54 72 61 6e 73 70 6f 72 74 2c 20 4e 6f 6e 65 29 2e 3c 2f 66 61 75 6c 74 73 74 72 69 6e 67 3e 3c 2f 73 3a 46 61 75 6c 74 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/"><s:Body><s:Fault><faultcode xmlns:a="http://schemas.microsoft.com/ws/2005/05/addressing/none">a:ActionNotSupported</faultcode><faultstring xml:lang="en-US">The message with Action 'http://tempuri.org/Endpoint/GetArguments' cannot be processed at the receiver, due to a ContractFilter mismatch at the EndpointDispatcher. This may be because of either a contract mismatch (mismatched Actions between sender and receiver) or a binding/security mismatch between the sender and the receiver. Check that sender and receiver have the same contract and the same binding (including security requirements, e.g. Message, Transport, None).</faultstring></s:Fault></s:Body></s:Envelope>
Aug 3, 2021 23:08:37.872083902 CEST	1033	OUT	POST / HTTP/1.1 Content-Type: text/xml; charset=utf-8 SOAPAction: "http://tempuri.org/Endpoint/GetArguments" Host: 45.137.155.31:11556 Content-Length: 137 Expect: 100-continue Accept-Encoding: gzip, deflate
Aug 3, 2021 23:08:37.942097902 CEST	1033	IN	HTTP/1.1 100 Continue
Aug 3, 2021 23:08:38.016057968 CEST	1039	IN	HTTP/1.1 500 Internal Server Error Content-Length: 738 Content-Type: text/xml; charset=utf-8 Server: Microsoft-HTTPAPI/2.0 Date: Tue, 03 Aug 2021 21:08:37 GMT Data Raw: 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 73 3a 46 61 75 6c 74 3e 3c 66 61 75 6c 74 63 6f 64 65 20 78 6d 6c 6e 73 3a 61 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 77 73 2f 32 30 30 35 2f 30 35 2f 61 64 64 72 65 73 73 69 6e 67 2f 6e 6f 6e 65 22 3e 61 3a 41 63 74 69 6f 6e 4e 6f 74 53 75 70 70 6f 72 74 65 64 3c 2f 66 61 75 6c 74 63 6f 64 65 3e 3c 66 61 75 6c 74 73 74 72 69 6e 67 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 54 68 65 20 6d 65 73 73 61 67 65 20 77 69 74 68 20 41 63 74 69 6f 6e 20 27 68 74 74 70 3a 2f 2f 74 65 6d 70 75 72 69 2e 6f 72 67 2f 45 6e 64 70 6f 69 6e 74 2f 47 65 74 41 72 67 75 6d 65 6e 74 73 27 20 63 61 6e 6e 6f 74 20 62 65 20 70 72 6f 63 65 73 73 65 64 20 61 74 20 74 68 65 20 72 65 63 65 69 76 65 72 2c 20 64 75 65 20 74 6f 20 61 20 43 6f 6e 74 72 61 63 74 46 69 6c 74 65 72 20 6d 69 73 6d 61 74 63 68 20 61 74 20 74 68 65 20 45 6e 64 70 6f 69 6e 74 44 69 73 70 61 74 63 68 65 72 2e 20 54 68 69 73 20 6d 61 79 20 62 65 20 62 65 63 61 75 73 65 20 6f 66 20 65 69 74 68 65 72 20 61 20 63 6f 6e 74 72 61 63 74 20 6d 69 73 6d 61 74 63 68 20 28 6d 69 73 6d 61 74 63 68 65 64 20 41 63 74 69 6f 6e 73 20 62 65 74 77 65 65 6e 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 29 20 6f 72 20 61 20 62 69 6e 64 69 6e 67 2f 73 65 63 75 72 69 74 79 20 6d 69 73 6d 61 74 63 68 20 62 65 74 77 65 65 6e 20 74 68 65 20 73 65 6e 64 65 72 20 61 6e 64 20 74 68 65 20 72 65 63 65 69 76 65 72 2e 20 20 43 68 65 63 6b 20 74 68 61 74 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 20 68 61 76 65 20 74 68 65 20 73 61 6d 65 20 63 6f 6e 74 72 61 63 74 20 61 6e 64 20 74 68 65 20 73 61 6d 65 20 62 69 6e 64 69 6e 67 20 28 69 6e 63 6c 75 64 69 6e 67 20 73 65 63 75 72 69 74 79 20 72 65 71 75 69 72 65 6d 65 6e 74 73 2c 20 65 2e 67 2e 20 4d 65 73 73 61 67 65 2c 20 54 72 61 6e 73 70 6f 72 74 2c 20 4e 6f 6e 65 29 2e 3c 2f 66 61 75 6c 74 73 74 72 69 6e 67 3e 3c 2f 73 3a 46 61 75 6c 74 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/"><s:Body><s:Fault><faultcode xmlns:a="http://schemas.microsoft.com/ws/2005/05/addressing/none">a:ActionNotSupported</faultcode><faultstring xml:lang="en-US">The message with Action 'http://tempuri.org/Endpoint/GetArguments' cannot be processed at the receiver, due to a ContractFilter mismatch at the EndpointDispatcher. This may be because of either a contract mismatch (mismatched Actions between sender and receiver) or a binding/security mismatch between the sender and the receiver. Check that sender and receiver have the same contract and the same binding (including security requirements, e.g. Message, Transport, None).</faultstring></s:Fault></s:Body></s:Envelope>
Aug 3, 2021 23:08:39.024693966 CEST	1048	OUT	POST / HTTP/1.1 Content-Type: text/xml; charset=utf-8 SOAPAction: "http://tempuri.org/Endpoint/GetArguments" Host: 45.137.155.31:11556 Content-Length: 137 Expect: 100-continue Accept-Encoding: gzip, deflate
Aug 3, 2021 23:08:39.095200062 CEST	1053	IN	HTTP/1.1 100 Continue
Aug 3, 2021 23:08:39.572225094 CEST	1056	IN	HTTP/1.1 500 Internal Server Error Content-Length: 738 Content-Type: text/xml; charset=utf-8 Server: Microsoft-HTTPAPI/2.0 Date: Tue, 03 Aug 2021 21:08:39 GMT Data Raw: 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 73 3a 46 61 75 6c 74 3e 3c 66 61 75 6c 74 63 6f 64 65 20 78 6d 6c 6e 73 3a 61 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 77 73 2f 32 30 30 35 2f 30 35 2f 61 64 64 72 65 73 73 69 6e 67 2f 6e 6f 6e 65 22 3e 61 3a 41 63 74 69 6f 6e 4e 6f 74 53 75 70 70 6f 72 74 65 64 3c 2f 66 61 75 6c 74 63 6f 64 65 3e 3c 66 61 75 6c 74 73 74 72 69 6e 67 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 54 68 65 20 6d 65 73 73 61 67 65 20 77 69 74 68 20 41 63 74 69 6f 6e 20 27 68 74 74 70 3a 2f 2f 74 65 6d 70 75 72 69 2e 6f 72 67 2f 45 6e 64 70 6f 69 6e 74 2f 47 65 74 41 72 67 75 6d 65 6e 74 73 27 20 63 61 6e 6e 6f 74 20 62 65 20 70 72 6f 63 65 73 73 65 64 20 61 74 20 74 68 65 20 72 65 63 65 69 76 65 72 2c 20 64 75 65 20 74 6f 20 61 20 43 6f 6e 74 72 61 63 74 46 69 6c 74 65 72 20 6d 69 73 6d 61 74 63 68 20 61 74 20 74 68 65 20 45 6e 64 70 6f 69 6e 74 44 69 73 70 61 74 63 68 65 72 2e 20 54 68 69 73 20 6d 61 79 20 62 65 20 62 65 63 61 75 73 65 20 6f 66 20 65 69 74 68 65 72 20 61 20 63 6f 6e 74 72 61 63 74 20 6d 69 73 6d 61 74 63 68 20 28 6d 69 73 6d 61 74 63 68 65 64 20 41 63 74 69 6f 6e 73 20 62 65 74 77 65 65 6e 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 29 20 6f 72 20 61 20 62 69 6e 64 69 6e 67 2f 73 65 63 75 72 69 74 79 20 6d 69 73 6d 61 74 63 68 20 62 65 74 77 65 65 6e 20 74 68 65 20 73 65 6e 64 65 72 20 61 6e 64 20 74 68 65 20 72 65 63 65 69 76 65 72 2e 20 20 43 68 65 63 6b 20 74 68 61 74 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 20 68 61 76 65 20 74 68 65 20 73 61 6d 65 20 63 6f 6e 74 72 61 63 74 20 61 6e 64 20 74 68 65 20 73 61 6d 65 20 62 69 6e 64 69 6e 67 20 28 69 6e 63 6c 75 64 69 6e 67 20 73 65 63 75 72 69 74 79 20 72 65 71 75 69 72 65 6d 65 6e 74 73 2c 20 65 2e 67 2e 20 4d 65 73 73 61 67 65 2c 20 54 72 61 6e 73 70 6f 72 74 2c 20 4e 6f 6e 65 29 2e 3c 2f 66 61 75 6c 74 73 74 72 69 6e 67 3e 3c 2f 73 3a 46 61 75 6c 74 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/"><s:Body><s:Fault><faultcode xmlns:a="http://schemas.microsoft.com/ws/2005/05/addressing/none">a:ActionNotSupported</faultcode><faultstring xml:lang="en-US">The message with Action 'http://tempuri.org/Endpoint/GetArguments' cannot be processed at the receiver, due to a ContractFilter mismatch at the EndpointDispatcher. This may be because of either a contract mismatch (mismatched Actions between sender and receiver) or a binding/security mismatch between the sender and the receiver. Check that sender and receiver have the same contract and the same binding (including security requirements, e.g. Message, Transport, None).</faultstring></s:Fault></s:Body></s:Envelope>
Aug 3, 2021 23:08:41.002532959 CEST	1067	OUT	POST / HTTP/1.1 Content-Type: text/xml; charset=utf-8 SOAPAction: "http://tempuri.org/Endpoint/GetArguments" Host: 45.137.155.31:11556 Content-Length: 137 Expect: 100-continue Accept-Encoding: gzip, deflate
Aug 3, 2021 23:08:41.071475029 CEST	1067	IN	HTTP/1.1 100 Continue
Aug 3, 2021 23:08:41.141886950 CEST	1068	IN	HTTP/1.1 500 Internal Server Error Content-Length: 738 Content-Type: text/xml; charset=utf-8 Server: Microsoft-HTTPAPI/2.0 Date: Tue, 03 Aug 2021 21:08:40 GMT Data Raw: 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 73 3a 46 61 75 6c 74 3e 3c 66 61 75 6c 74 63 6f 64 65 20 78 6d 6c 6e 73 3a 61 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 77 73 2f 32 30 30 35 2f 30 35 2f 61 64 64 72 65 73 73 69 6e 67 2f 6e 6f 6e 65 22 3e 61 3a 41 63 74 69 6f 6e 4e 6f 74 53 75 70 70 6f 72 74 65 64 3c 2f 66 61 75 6c 74 63 6f 64 65 3e 3c 66 61 75 6c 74 73 74 72 69 6e 67 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 54 68 65 20 6d 65 73 73 61 67 65 20 77 69 74 68 20 41 63 74 69 6f 6e 20 27 68 74 74 70 3a 2f 2f 74 65 6d 70 75 72 69 2e 6f 72 67 2f 45 6e 64 70 6f 69 6e 74 2f 47 65 74 41 72 67 75 6d 65 6e 74 73 27 20 63 61 6e 6e 6f 74 20 62 65 20 70 72 6f 63 65 73 73 65 64 20 61 74 20 74 68 65 20 72 65 63 65 69 76 65 72 2c 20 64 75 65 20 74 6f 20 61 20 43 6f 6e 74 72 61 63 74 46 69 6c 74 65 72 20 6d 69 73 6d 61 74 63 68 20 61 74 20 74 68 65 20 45 6e 64 70 6f 69 6e 74 44 69 73 70 61 74 63 68 65 72 2e 20 54 68 69 73 20 6d 61 79 20 62 65 20 62 65 63 61 75 73 65 20 6f 66 20 65 69 74 68 65 72 20 61 20 63 6f 6e 74 72 61 63 74 20 6d 69 73 6d 61 74 63 68 20 28 6d 69 73 6d 61 74 63 68 65 64 20 41 63 74 69 6f 6e 73 20 62 65 74 77 65 65 6e 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 29 20 6f 72 20 61 20 62 69 6e 64 69 6e 67 2f 73 65 63 75 72 69 74 79 20 6d 69 73 6d 61 74 63 68 20 62 65 74 77 65 65 6e 20 74 68 65 20 73 65 6e 64 65 72 20 61 6e 64 20 74 68 65 20 72 65 63 65 69 76 65 72 2e 20 20 43 68 65 63 6b 20 74 68 61 74 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 20 68 61 76 65 20 74 68 65 20 73 61 6d 65 20 63 6f 6e 74 72 61 63 74 20 61 6e 64 20 74 68 65 20 73 61 6d 65 20 62 69 6e 64 69 6e 67 20 28 69 6e 63 6c 75 64 69 6e 67 20 73 65 63 75 72 69 74 79 20 72 65 71 75 69 72 65 6d 65 6e 74 73 2c 20 65 2e 67 2e 20 4d 65 73 73 61 67 65 2c 20 54 72 61 6e 73 70 6f 72 74 2c 20 4e 6f 6e 65 29 2e 3c 2f 66 61 75 6c 74 73 74 72 69 6e 67 3e 3c 2f 73 3a 46 61 75 6c 74 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/"><s:Body><s:Fault><faultcode xmlns:a="http://schemas.microsoft.com/ws/2005/05/addressing/none">a:ActionNotSupported</faultcode><faultstring xml:lang="en-US">The message with Action 'http://tempuri.org/Endpoint/GetArguments' cannot be processed at the receiver, due to a ContractFilter mismatch at the EndpointDispatcher. This may be because of either a contract mismatch (mismatched Actions between sender and receiver) or a binding/security mismatch between the sender and the receiver. Check that sender and receiver have the same contract and the same binding (including security requirements, e.g. Message, Transport, None).</faultstring></s:Fault></s:Body></s:Envelope>
Aug 3, 2021 23:08:42.211414099 CEST	1088	OUT	POST / HTTP/1.1 Content-Type: text/xml; charset=utf-8 SOAPAction: "http://tempuri.org/Endpoint/GetArguments" Host: 45.137.155.31:11556 Content-Length: 137 Expect: 100-continue Accept-Encoding: gzip, deflate
Aug 3, 2021 23:08:42.282383919 CEST	1089	IN	HTTP/1.1 100 Continue
Aug 3, 2021 23:08:42.371978998 CEST	1091	IN	HTTP/1.1 500 Internal Server Error Content-Length: 738 Content-Type: text/xml; charset=utf-8 Server: Microsoft-HTTPAPI/2.0 Date: Tue, 03 Aug 2021 21:08:42 GMT Data Raw: 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 73 3a 46 61 75 6c 74 3e 3c 66 61 75 6c 74 63 6f 64 65 20 78 6d 6c 6e 73 3a 61 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 77 73 2f 32 30 30 35 2f 30 35 2f 61 64 64 72 65 73 73 69 6e 67 2f 6e 6f 6e 65 22 3e 61 3a 41 63 74 69 6f 6e 4e 6f 74 53 75 70 70 6f 72 74 65 64 3c 2f 66 61 75 6c 74 63 6f 64 65 3e 3c 66 61 75 6c 74 73 74 72 69 6e 67 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 54 68 65 20 6d 65 73 73 61 67 65 20 77 69 74 68 20 41 63 74 69 6f 6e 20 27 68 74 74 70 3a 2f 2f 74 65 6d 70 75 72 69 2e 6f 72 67 2f 45 6e 64 70 6f 69 6e 74 2f 47 65 74 41 72 67 75 6d 65 6e 74 73 27 20 63 61 6e 6e 6f 74 20 62 65 20 70 72 6f 63 65 73 73 65 64 20 61 74 20 74 68 65 20 72 65 63 65 69 76 65 72 2c 20 64 75 65 20 74 6f 20 61 20 43 6f 6e 74 72 61 63 74 46 69 6c 74 65 72 20 6d 69 73 6d 61 74 63 68 20 61 74 20 74 68 65 20 45 6e 64 70 6f 69 6e 74 44 69 73 70 61 74 63 68 65 72 2e 20 54 68 69 73 20 6d 61 79 20 62 65 20 62 65 63 61 75 73 65 20 6f 66 20 65 69 74 68 65 72 20 61 20 63 6f 6e 74 72 61 63 74 20 6d 69 73 6d 61 74 63 68 20 28 6d 69 73 6d 61 74 63 68 65 64 20 41 63 74 69 6f 6e 73 20 62 65 74 77 65 65 6e 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 29 20 6f 72 20 61 20 62 69 6e 64 69 6e 67 2f 73 65 63 75 72 69 74 79 20 6d 69 73 6d 61 74 63 68 20 62 65 74 77 65 65 6e 20 74 68 65 20 73 65 6e 64 65 72 20 61 6e 64 20 74 68 65 20 72 65 63 65 69 76 65 72 2e 20 20 43 68 65 63 6b 20 74 68 61 74 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 20 68 61 76 65 20 74 68 65 20 73 61 6d 65 20 63 6f 6e 74 72 61 63 74 20 61 6e 64 20 74 68 65 20 73 61 6d 65 20 62 69 6e 64 69 6e 67 20 28 69 6e 63 6c 75 64 69 6e 67 20 73 65 63 75 72 69 74 79 20 72 65 71 75 69 72 65 6d 65 6e 74 73 2c 20 65 2e 67 2e 20 4d 65 73 73 61 67 65 2c 20 54 72 61 6e 73 70 6f 72 74 2c 20 4e 6f 6e 65 29 2e 3c 2f 66 61 75 6c 74 73 74 72 69 6e 67 3e 3c 2f 73 3a 46 61 75 6c 74 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/"><s:Body><s:Fault><faultcode xmlns:a="http://schemas.microsoft.com/ws/2005/05/addressing/none">a:ActionNotSupported</faultcode><faultstring xml:lang="en-US">The message with Action 'http://tempuri.org/Endpoint/GetArguments' cannot be processed at the receiver, due to a ContractFilter mismatch at the EndpointDispatcher. This may be because of either a contract mismatch (mismatched Actions between sender and receiver) or a binding/security mismatch between the sender and the receiver. Check that sender and receiver have the same contract and the same binding (including security requirements, e.g. Message, Transport, None).</faultstring></s:Fault></s:Body></s:Envelope>
Aug 3, 2021 23:08:43.383331060 CEST	1105	OUT	POST / HTTP/1.1 Content-Type: text/xml; charset=utf-8 SOAPAction: "http://tempuri.org/Endpoint/GetArguments" Host: 45.137.155.31:11556 Content-Length: 137 Expect: 100-continue Accept-Encoding: gzip, deflate
Aug 3, 2021 23:08:43.454222918 CEST	1105	IN	HTTP/1.1 100 Continue
Aug 3, 2021 23:08:43.525957108 CEST	1111	IN	HTTP/1.1 500 Internal Server Error Content-Length: 738 Content-Type: text/xml; charset=utf-8 Server: Microsoft-HTTPAPI/2.0 Date: Tue, 03 Aug 2021 21:08:43 GMT Data Raw: 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 73 3a 46 61 75 6c 74 3e 3c 66 61 75 6c 74 63 6f 64 65 20 78 6d 6c 6e 73 3a 61 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 77 73 2f 32 30 30 35 2f 30 35 2f 61 64 64 72 65 73 73 69 6e 67 2f 6e 6f 6e 65 22 3e 61 3a 41 63 74 69 6f 6e 4e 6f 74 53 75 70 70 6f 72 74 65 64 3c 2f 66 61 75 6c 74 63 6f 64 65 3e 3c 66 61 75 6c 74 73 74 72 69 6e 67 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 54 68 65 20 6d 65 73 73 61 67 65 20 77 69 74 68 20 41 63 74 69 6f 6e 20 27 68 74 74 70 3a 2f 2f 74 65 6d 70 75 72 69 2e 6f 72 67 2f 45 6e 64 70 6f 69 6e 74 2f 47 65 74 41 72 67 75 6d 65 6e 74 73 27 20 63 61 6e 6e 6f 74 20 62 65 20 70 72 6f 63 65 73 73 65 64 20 61 74 20 74 68 65 20 72 65 63 65 69 76 65 72 2c 20 64 75 65 20 74 6f 20 61 20 43 6f 6e 74 72 61 63 74 46 69 6c 74 65 72 20 6d 69 73 6d 61 74 63 68 20 61 74 20 74 68 65 20 45 6e 64 70 6f 69 6e 74 44 69 73 70 61 74 63 68 65 72 2e 20 54 68 69 73 20 6d 61 79 20 62 65 20 62 65 63 61 75 73 65 20 6f 66 20 65 69 74 68 65 72 20 61 20 63 6f 6e 74 72 61 63 74 20 6d 69 73 6d 61 74 63 68 20 28 6d 69 73 6d 61 74 63 68 65 64 20 41 63 74 69 6f 6e 73 20 62 65 74 77 65 65 6e 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 29 20 6f 72 20 61 20 62 69 6e 64 69 6e 67 2f 73 65 63 75 72 69 74 79 20 6d 69 73 6d 61 74 63 68 20 62 65 74 77 65 65 6e 20 74 68 65 20 73 65 6e 64 65 72 20 61 6e 64 20 74 68 65 20 72 65 63 65 69 76 65 72 2e 20 20 43 68 65 63 6b 20 74 68 61 74 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 20 68 61 76 65 20 74 68 65 20 73 61 6d 65 20 63 6f 6e 74 72 61 63 74 20 61 6e 64 20 74 68 65 20 73 61 6d 65 20 62 69 6e 64 69 6e 67 20 28 69 6e 63 6c 75 64 69 6e 67 20 73 65 63 75 72 69 74 79 20 72 65 71 75 69 72 65 6d 65 6e 74 73 2c 20 65 2e 67 2e 20 4d 65 73 73 61 67 65 2c 20 54 72 61 6e 73 70 6f 72 74 2c 20 4e 6f 6e 65 29 2e 3c 2f 66 61 75 6c 74 73 74 72 69 6e 67 3e 3c 2f 73 3a 46 61 75 6c 74 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/"><s:Body><s:Fault><faultcode xmlns:a="http://schemas.microsoft.com/ws/2005/05/addressing/none">a:ActionNotSupported</faultcode><faultstring xml:lang="en-US">The message with Action 'http://tempuri.org/Endpoint/GetArguments' cannot be processed at the receiver, due to a ContractFilter mismatch at the EndpointDispatcher. This may be because of either a contract mismatch (mismatched Actions between sender and receiver) or a binding/security mismatch between the sender and the receiver. Check that sender and receiver have the same contract and the same binding (including security requirements, e.g. Message, Transport, None).</faultstring></s:Fault></s:Body></s:Envelope>
Aug 3, 2021 23:08:44.539746046 CEST	1127	OUT	POST / HTTP/1.1 Content-Type: text/xml; charset=utf-8 SOAPAction: "http://tempuri.org/Endpoint/GetArguments" Host: 45.137.155.31:11556 Content-Length: 137 Expect: 100-continue Accept-Encoding: gzip, deflate
Aug 3, 2021 23:08:44.608695984 CEST	1131	IN	HTTP/1.1 100 Continue
Aug 3, 2021 23:08:44.682656050 CEST	1132	IN	HTTP/1.1 500 Internal Server Error Content-Length: 738 Content-Type: text/xml; charset=utf-8 Server: Microsoft-HTTPAPI/2.0 Date: Tue, 03 Aug 2021 21:08:44 GMT Data Raw: 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 73 3a 46 61 75 6c 74 3e 3c 66 61 75 6c 74 63 6f 64 65 20 78 6d 6c 6e 73 3a 61 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 77 73 2f 32 30 30 35 2f 30 35 2f 61 64 64 72 65 73 73 69 6e 67 2f 6e 6f 6e 65 22 3e 61 3a 41 63 74 69 6f 6e 4e 6f 74 53 75 70 70 6f 72 74 65 64 3c 2f 66 61 75 6c 74 63 6f 64 65 3e 3c 66 61 75 6c 74 73 74 72 69 6e 67 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 54 68 65 20 6d 65 73 73 61 67 65 20 77 69 74 68 20 41 63 74 69 6f 6e 20 27 68 74 74 70 3a 2f 2f 74 65 6d 70 75 72 69 2e 6f 72 67 2f 45 6e 64 70 6f 69 6e 74 2f 47 65 74 41 72 67 75 6d 65 6e 74 73 27 20 63 61 6e 6e 6f 74 20 62 65 20 70 72 6f 63 65 73 73 65 64 20 61 74 20 74 68 65 20 72 65 63 65 69 76 65 72 2c 20 64 75 65 20 74 6f 20 61 20 43 6f 6e 74 72 61 63 74 46 69 6c 74 65 72 20 6d 69 73 6d 61 74 63 68 20 61 74 20 74 68 65 20 45 6e 64 70 6f 69 6e 74 44 69 73 70 61 74 63 68 65 72 2e 20 54 68 69 73 20 6d 61 79 20 62 65 20 62 65 63 61 75 73 65 20 6f 66 20 65 69 74 68 65 72 20 61 20 63 6f 6e 74 72 61 63 74 20 6d 69 73 6d 61 74 63 68 20 28 6d 69 73 6d 61 74 63 68 65 64 20 41 63 74 69 6f 6e 73 20 62 65 74 77 65 65 6e 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 29 20 6f 72 20 61 20 62 69 6e 64 69 6e 67 2f 73 65 63 75 72 69 74 79 20 6d 69 73 6d 61 74 63 68 20 62 65 74 77 65 65 6e 20 74 68 65 20 73 65 6e 64 65 72 20 61 6e 64 20 74 68 65 20 72 65 63 65 69 76 65 72 2e 20 20 43 68 65 63 6b 20 74 68 61 74 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 20 68 61 76 65 20 74 68 65 20 73 61 6d 65 20 63 6f 6e 74 72 61 63 74 20 61 6e 64 20 74 68 65 20 73 61 6d 65 20 62 69 6e 64 69 6e 67 20 28 69 6e 63 6c 75 64 69 6e 67 20 73 65 63 75 72 69 74 79 20 72 65 71 75 69 72 65 6d 65 6e 74 73 2c 20 65 2e 67 2e 20 4d 65 73 73 61 67 65 2c 20 54 72 61 6e 73 70 6f 72 74 2c 20 4e 6f 6e 65 29 2e 3c 2f 66 61 75 6c 74 73 74 72 69 6e 67 3e 3c 2f 73 3a 46 61 75 6c 74 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/"><s:Body><s:Fault><faultcode xmlns:a="http://schemas.microsoft.com/ws/2005/05/addressing/none">a:ActionNotSupported</faultcode><faultstring xml:lang="en-US">The message with Action 'http://tempuri.org/Endpoint/GetArguments' cannot be processed at the receiver, due to a ContractFilter mismatch at the EndpointDispatcher. This may be because of either a contract mismatch (mismatched Actions between sender and receiver) or a binding/security mismatch between the sender and the receiver. Check that sender and receiver have the same contract and the same binding (including security requirements, e.g. Message, Transport, None).</faultstring></s:Fault></s:Body></s:Envelope>
Aug 3, 2021 23:08:45.696274042 CEST	1145	OUT	POST / HTTP/1.1 Content-Type: text/xml; charset=utf-8 SOAPAction: "http://tempuri.org/Endpoint/GetArguments" Host: 45.137.155.31:11556 Content-Length: 137 Expect: 100-continue Accept-Encoding: gzip, deflate
Aug 3, 2021 23:08:45.774158001 CEST	1147	IN	HTTP/1.1 100 Continue
Aug 3, 2021 23:08:45.843389034 CEST	1148	IN	HTTP/1.1 500 Internal Server Error Content-Length: 738 Content-Type: text/xml; charset=utf-8 Server: Microsoft-HTTPAPI/2.0 Date: Tue, 03 Aug 2021 21:08:45 GMT Data Raw: 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 73 3a 46 61 75 6c 74 3e 3c 66 61 75 6c 74 63 6f 64 65 20 78 6d 6c 6e 73 3a 61 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 77 73 2f 32 30 30 35 2f 30 35 2f 61 64 64 72 65 73 73 69 6e 67 2f 6e 6f 6e 65 22 3e 61 3a 41 63 74 69 6f 6e 4e 6f 74 53 75 70 70 6f 72 74 65 64 3c 2f 66 61 75 6c 74 63 6f 64 65 3e 3c 66 61 75 6c 74 73 74 72 69 6e 67 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 54 68 65 20 6d 65 73 73 61 67 65 20 77 69 74 68 20 41 63 74 69 6f 6e 20 27 68 74 74 70 3a 2f 2f 74 65 6d 70 75 72 69 2e 6f 72 67 2f 45 6e 64 70 6f 69 6e 74 2f 47 65 74 41 72 67 75 6d 65 6e 74 73 27 20 63 61 6e 6e 6f 74 20 62 65 20 70 72 6f 63 65 73 73 65 64 20 61 74 20 74 68 65 20 72 65 63 65 69 76 65 72 2c 20 64 75 65 20 74 6f 20 61 20 43 6f 6e 74 72 61 63 74 46 69 6c 74 65 72 20 6d 69 73 6d 61 74 63 68 20 61 74 20 74 68 65 20 45 6e 64 70 6f 69 6e 74 44 69 73 70 61 74 63 68 65 72 2e 20 54 68 69 73 20 6d 61 79 20 62 65 20 62 65 63 61 75 73 65 20 6f 66 20 65 69 74 68 65 72 20 61 20 63 6f 6e 74 72 61 63 74 20 6d 69 73 6d 61 74 63 68 20 28 6d 69 73 6d 61 74 63 68 65 64 20 41 63 74 69 6f 6e 73 20 62 65 74 77 65 65 6e 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 29 20 6f 72 20 61 20 62 69 6e 64 69 6e 67 2f 73 65 63 75 72 69 74 79 20 6d 69 73 6d 61 74 63 68 20 62 65 74 77 65 65 6e 20 74 68 65 20 73 65 6e 64 65 72 20 61 6e 64 20 74 68 65 20 72 65 63 65 69 76 65 72 2e 20 20 43 68 65 63 6b 20 74 68 61 74 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 20 68 61 76 65 20 74 68 65 20 73 61 6d 65 20 63 6f 6e 74 72 61 63 74 20 61 6e 64 20 74 68 65 20 73 61 6d 65 20 62 69 6e 64 69 6e 67 20 28 69 6e 63 6c 75 64 69 6e 67 20 73 65 63 75 72 69 74 79 20 72 65 71 75 69 72 65 6d 65 6e 74 73 2c 20 65 2e 67 2e 20 4d 65 73 73 61 67 65 2c 20 54 72 61 6e 73 70 6f 72 74 2c 20 4e 6f 6e 65 29 2e 3c 2f 66 61 75 6c 74 73 74 72 69 6e 67 3e 3c 2f 73 3a 46 61 75 6c 74 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/"><s:Body><s:Fault><faultcode xmlns:a="http://schemas.microsoft.com/ws/2005/05/addressing/none">a:ActionNotSupported</faultcode><faultstring xml:lang="en-US">The message with Action 'http://tempuri.org/Endpoint/GetArguments' cannot be processed at the receiver, due to a ContractFilter mismatch at the EndpointDispatcher. This may be because of either a contract mismatch (mismatched Actions between sender and receiver) or a binding/security mismatch between the sender and the receiver. Check that sender and receiver have the same contract and the same binding (including security requirements, e.g. Message, Transport, None).</faultstring></s:Fault></s:Body></s:Envelope>
Aug 3, 2021 23:08:46.852746964 CEST	1161	OUT	POST / HTTP/1.1 Content-Type: text/xml; charset=utf-8 SOAPAction: "http://tempuri.org/Endpoint/GetArguments" Host: 45.137.155.31:11556 Content-Length: 137 Expect: 100-continue Accept-Encoding: gzip, deflate
Aug 3, 2021 23:08:46.924748898 CEST	1162	IN	HTTP/1.1 100 Continue
Aug 3, 2021 23:08:46.996185064 CEST	1163	IN	HTTP/1.1 500 Internal Server Error Content-Length: 738 Content-Type: text/xml; charset=utf-8 Server: Microsoft-HTTPAPI/2.0 Date: Tue, 03 Aug 2021 21:08:46 GMT Data Raw: 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 73 3a 46 61 75 6c 74 3e 3c 66 61 75 6c 74 63 6f 64 65 20 78 6d 6c 6e 73 3a 61 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 77 73 2f 32 30 30 35 2f 30 35 2f 61 64 64 72 65 73 73 69 6e 67 2f 6e 6f 6e 65 22 3e 61 3a 41 63 74 69 6f 6e 4e 6f 74 53 75 70 70 6f 72 74 65 64 3c 2f 66 61 75 6c 74 63 6f 64 65 3e 3c 66 61 75 6c 74 73 74 72 69 6e 67 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 54 68 65 20 6d 65 73 73 61 67 65 20 77 69 74 68 20 41 63 74 69 6f 6e 20 27 68 74 74 70 3a 2f 2f 74 65 6d 70 75 72 69 2e 6f 72 67 2f 45 6e 64 70 6f 69 6e 74 2f 47 65 74 41 72 67 75 6d 65 6e 74 73 27 20 63 61 6e 6e 6f 74 20 62 65 20 70 72 6f 63 65 73 73 65 64 20 61 74 20 74 68 65 20 72 65 63 65 69 76 65 72 2c 20 64 75 65 20 74 6f 20 61 20 43 6f 6e 74 72 61 63 74 46 69 6c 74 65 72 20 6d 69 73 6d 61 74 63 68 20 61 74 20 74 68 65 20 45 6e 64 70 6f 69 6e 74 44 69 73 70 61 74 63 68 65 72 2e 20 54 68 69 73 20 6d 61 79 20 62 65 20 62 65 63 61 75 73 65 20 6f 66 20 65 69 74 68 65 72 20 61 20 63 6f 6e 74 72 61 63 74 20 6d 69 73 6d 61 74 63 68 20 28 6d 69 73 6d 61 74 63 68 65 64 20 41 63 74 69 6f 6e 73 20 62 65 74 77 65 65 6e 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 29 20 6f 72 20 61 20 62 69 6e 64 69 6e 67 2f 73 65 63 75 72 69 74 79 20 6d 69 73 6d 61 74 63 68 20 62 65 74 77 65 65 6e 20 74 68 65 20 73 65 6e 64 65 72 20 61 6e 64 20 74 68 65 20 72 65 63 65 69 76 65 72 2e 20 20 43 68 65 63 6b 20 74 68 61 74 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 20 68 61 76 65 20 74 68 65 20 73 61 6d 65 20 63 6f 6e 74 72 61 63 74 20 61 6e 64 20 74 68 65 20 73 61 6d 65 20 62 69 6e 64 69 6e 67 20 28 69 6e 63 6c 75 64 69 6e 67 20 73 65 63 75 72 69 74 79 20 72 65 71 75 69 72 65 6d 65 6e 74 73 2c 20 65 2e 67 2e 20 4d 65 73 73 61 67 65 2c 20 54 72 61 6e 73 70 6f 72 74 2c 20 4e 6f 6e 65 29 2e 3c 2f 66 61 75 6c 74 73 74 72 69 6e 67 3e 3c 2f 73 3a 46 61 75 6c 74 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/"><s:Body><s:Fault><faultcode xmlns:a="http://schemas.microsoft.com/ws/2005/05/addressing/none">a:ActionNotSupported</faultcode><faultstring xml:lang="en-US">The message with Action 'http://tempuri.org/Endpoint/GetArguments' cannot be processed at the receiver, due to a ContractFilter mismatch at the EndpointDispatcher. This may be because of either a contract mismatch (mismatched Actions between sender and receiver) or a binding/security mismatch between the sender and the receiver. Check that sender and receiver have the same contract and the same binding (including security requirements, e.g. Message, Transport, None).</faultstring></s:Fault></s:Body></s:Envelope>
Aug 3, 2021 23:08:48.008903027 CEST	1163	OUT	POST / HTTP/1.1 Content-Type: text/xml; charset=utf-8 SOAPAction: "http://tempuri.org/Endpoint/GetArguments" Host: 45.137.155.31:11556 Content-Length: 137 Expect: 100-continue Accept-Encoding: gzip, deflate
Aug 3, 2021 23:08:48.078175068 CEST	1164	IN	HTTP/1.1 100 Continue
Aug 3, 2021 23:08:48.147993088 CEST	1165	IN	HTTP/1.1 500 Internal Server Error Content-Length: 738 Content-Type: text/xml; charset=utf-8 Server: Microsoft-HTTPAPI/2.0 Date: Tue, 03 Aug 2021 21:08:48 GMT Data Raw: 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 73 3a 46 61 75 6c 74 3e 3c 66 61 75 6c 74 63 6f 64 65 20 78 6d 6c 6e 73 3a 61 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 77 73 2f 32 30 30 35 2f 30 35 2f 61 64 64 72 65 73 73 69 6e 67 2f 6e 6f 6e 65 22 3e 61 3a 41 63 74 69 6f 6e 4e 6f 74 53 75 70 70 6f 72 74 65 64 3c 2f 66 61 75 6c 74 63 6f 64 65 3e 3c 66 61 75 6c 74 73 74 72 69 6e 67 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 54 68 65 20 6d 65 73 73 61 67 65 20 77 69 74 68 20 41 63 74 69 6f 6e 20 27 68 74 74 70 3a 2f 2f 74 65 6d 70 75 72 69 2e 6f 72 67 2f 45 6e 64 70 6f 69 6e 74 2f 47 65 74 41 72 67 75 6d 65 6e 74 73 27 20 63 61 6e 6e 6f 74 20 62 65 20 70 72 6f 63 65 73 73 65 64 20 61 74 20 74 68 65 20 72 65 63 65 69 76 65 72 2c 20 64 75 65 20 74 6f 20 61 20 43 6f 6e 74 72 61 63 74 46 69 6c 74 65 72 20 6d 69 73 6d 61 74 63 68 20 61 74 20 74 68 65 20 45 6e 64 70 6f 69 6e 74 44 69 73 70 61 74 63 68 65 72 2e 20 54 68 69 73 20 6d 61 79 20 62 65 20 62 65 63 61 75 73 65 20 6f 66 20 65 69 74 68 65 72 20 61 20 63 6f 6e 74 72 61 63 74 20 6d 69 73 6d 61 74 63 68 20 28 6d 69 73 6d 61 74 63 68 65 64 20 41 63 74 69 6f 6e 73 20 62 65 74 77 65 65 6e 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 29 20 6f 72 20 61 20 62 69 6e 64 69 6e 67 2f 73 65 63 75 72 69 74 79 20 6d 69 73 6d 61 74 63 68 20 62 65 74 77 65 65 6e 20 74 68 65 20 73 65 6e 64 65 72 20 61 6e 64 20 74 68 65 20 72 65 63 65 69 76 65 72 2e 20 20 43 68 65 63 6b 20 74 68 61 74 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 20 68 61 76 65 20 74 68 65 20 73 61 6d 65 20 63 6f 6e 74 72 61 63 74 20 61 6e 64 20 74 68 65 20 73 61 6d 65 20 62 69 6e 64 69 6e 67 20 28 69 6e 63 6c 75 64 69 6e 67 20 73 65 63 75 72 69 74 79 20 72 65 71 75 69 72 65 6d 65 6e 74 73 2c 20 65 2e 67 2e 20 4d 65 73 73 61 67 65 2c 20 54 72 61 6e 73 70 6f 72 74 2c 20 4e 6f 6e 65 29 2e 3c 2f 66 61 75 6c 74 73 74 72 69 6e 67 3e 3c 2f 73 3a 46 61 75 6c 74 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/"><s:Body><s:Fault><faultcode xmlns:a="http://schemas.microsoft.com/ws/2005/05/addressing/none">a:ActionNotSupported</faultcode><faultstring xml:lang="en-US">The message with Action 'http://tempuri.org/Endpoint/GetArguments' cannot be processed at the receiver, due to a ContractFilter mismatch at the EndpointDispatcher. This may be because of either a contract mismatch (mismatched Actions between sender and receiver) or a binding/security mismatch between the sender and the receiver. Check that sender and receiver have the same contract and the same binding (including security requirements, e.g. Message, Transport, None).</faultstring></s:Fault></s:Body></s:Envelope>
Aug 3, 2021 23:08:49.165903091 CEST	1170	OUT	POST / HTTP/1.1 Content-Type: text/xml; charset=utf-8 SOAPAction: "http://tempuri.org/Endpoint/GetArguments" Host: 45.137.155.31:11556 Content-Length: 137 Expect: 100-continue Accept-Encoding: gzip, deflate
Aug 3, 2021 23:08:49.234884024 CEST	1174	IN	HTTP/1.1 100 Continue
Aug 3, 2021 23:08:49.304136038 CEST	1177	IN	HTTP/1.1 500 Internal Server Error Content-Length: 738 Content-Type: text/xml; charset=utf-8 Server: Microsoft-HTTPAPI/2.0 Date: Tue, 03 Aug 2021 21:08:49 GMT Data Raw: 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 73 3a 46 61 75 6c 74 3e 3c 66 61 75 6c 74 63 6f 64 65 20 78 6d 6c 6e 73 3a 61 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 77 73 2f 32 30 30 35 2f 30 35 2f 61 64 64 72 65 73 73 69 6e 67 2f 6e 6f 6e 65 22 3e 61 3a 41 63 74 69 6f 6e 4e 6f 74 53 75 70 70 6f 72 74 65 64 3c 2f 66 61 75 6c 74 63 6f 64 65 3e 3c 66 61 75 6c 74 73 74 72 69 6e 67 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 54 68 65 20 6d 65 73 73 61 67 65 20 77 69 74 68 20 41 63 74 69 6f 6e 20 27 68 74 74 70 3a 2f 2f 74 65 6d 70 75 72 69 2e 6f 72 67 2f 45 6e 64 70 6f 69 6e 74 2f 47 65 74 41 72 67 75 6d 65 6e 74 73 27 20 63 61 6e 6e 6f 74 20 62 65 20 70 72 6f 63 65 73 73 65 64 20 61 74 20 74 68 65 20 72 65 63 65 69 76 65 72 2c 20 64 75 65 20 74 6f 20 61 20 43 6f 6e 74 72 61 63 74 46 69 6c 74 65 72 20 6d 69 73 6d 61 74 63 68 20 61 74 20 74 68 65 20 45 6e 64 70 6f 69 6e 74 44 69 73 70 61 74 63 68 65 72 2e 20 54 68 69 73 20 6d 61 79 20 62 65 20 62 65 63 61 75 73 65 20 6f 66 20 65 69 74 68 65 72 20 61 20 63 6f 6e 74 72 61 63 74 20 6d 69 73 6d 61 74 63 68 20 28 6d 69 73 6d 61 74 63 68 65 64 20 41 63 74 69 6f 6e 73 20 62 65 74 77 65 65 6e 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 29 20 6f 72 20 61 20 62 69 6e 64 69 6e 67 2f 73 65 63 75 72 69 74 79 20 6d 69 73 6d 61 74 63 68 20 62 65 74 77 65 65 6e 20 74 68 65 20 73 65 6e 64 65 72 20 61 6e 64 20 74 68 65 20 72 65 63 65 69 76 65 72 2e 20 20 43 68 65 63 6b 20 74 68 61 74 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 20 68 61 76 65 20 74 68 65 20 73 61 6d 65 20 63 6f 6e 74 72 61 63 74 20 61 6e 64 20 74 68 65 20 73 61 6d 65 20 62 69 6e 64 69 6e 67 20 28 69 6e 63 6c 75 64 69 6e 67 20 73 65 63 75 72 69 74 79 20 72 65 71 75 69 72 65 6d 65 6e 74 73 2c 20 65 2e 67 2e 20 4d 65 73 73 61 67 65 2c 20 54 72 61 6e 73 70 6f 72 74 2c 20 4e 6f 6e 65 29 2e 3c 2f 66 61 75 6c 74 73 74 72 69 6e 67 3e 3c 2f 73 3a 46 61 75 6c 74 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/"><s:Body><s:Fault><faultcode xmlns:a="http://schemas.microsoft.com/ws/2005/05/addressing/none">a:ActionNotSupported</faultcode><faultstring xml:lang="en-US">The message with Action 'http://tempuri.org/Endpoint/GetArguments' cannot be processed at the receiver, due to a ContractFilter mismatch at the EndpointDispatcher. This may be because of either a contract mismatch (mismatched Actions between sender and receiver) or a binding/security mismatch between the sender and the receiver. Check that sender and receiver have the same contract and the same binding (including security requirements, e.g. Message, Transport, None).</faultstring></s:Fault></s:Body></s:Envelope>
Aug 3, 2021 23:08:50.322942019 CEST	1184	OUT	POST / HTTP/1.1 Content-Type: text/xml; charset=utf-8 SOAPAction: "http://tempuri.org/Endpoint/GetArguments" Host: 45.137.155.31:11556 Content-Length: 137 Expect: 100-continue Accept-Encoding: gzip, deflate
Aug 3, 2021 23:08:50.392438889 CEST	1185	IN	HTTP/1.1 100 Continue
Aug 3, 2021 23:08:50.462193012 CEST	1187	IN	HTTP/1.1 500 Internal Server Error Content-Length: 738 Content-Type: text/xml; charset=utf-8 Server: Microsoft-HTTPAPI/2.0 Date: Tue, 03 Aug 2021 21:08:50 GMT Data Raw: 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 73 3a 46 61 75 6c 74 3e 3c 66 61 75 6c 74 63 6f 64 65 20 78 6d 6c 6e 73 3a 61 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 77 73 2f 32 30 30 35 2f 30 35 2f 61 64 64 72 65 73 73 69 6e 67 2f 6e 6f 6e 65 22 3e 61 3a 41 63 74 69 6f 6e 4e 6f 74 53 75 70 70 6f 72 74 65 64 3c 2f 66 61 75 6c 74 63 6f 64 65 3e 3c 66 61 75 6c 74 73 74 72 69 6e 67 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 54 68 65 20 6d 65 73 73 61 67 65 20 77 69 74 68 20 41 63 74 69 6f 6e 20 27 68 74 74 70 3a 2f 2f 74 65 6d 70 75 72 69 2e 6f 72 67 2f 45 6e 64 70 6f 69 6e 74 2f 47 65 74 41 72 67 75 6d 65 6e 74 73 27 20 63 61 6e 6e 6f 74 20 62 65 20 70 72 6f 63 65 73 73 65 64 20 61 74 20 74 68 65 20 72 65 63 65 69 76 65 72 2c 20 64 75 65 20 74 6f 20 61 20 43 6f 6e 74 72 61 63 74 46 69 6c 74 65 72 20 6d 69 73 6d 61 74 63 68 20 61 74 20 74 68 65 20 45 6e 64 70 6f 69 6e 74 44 69 73 70 61 74 63 68 65 72 2e 20 54 68 69 73 20 6d 61 79 20 62 65 20 62 65 63 61 75 73 65 20 6f 66 20 65 69 74 68 65 72 20 61 20 63 6f 6e 74 72 61 63 74 20 6d 69 73 6d 61 74 63 68 20 28 6d 69 73 6d 61 74 63 68 65 64 20 41 63 74 69 6f 6e 73 20 62 65 74 77 65 65 6e 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 29 20 6f 72 20 61 20 62 69 6e 64 69 6e 67 2f 73 65 63 75 72 69 74 79 20 6d 69 73 6d 61 74 63 68 20 62 65 74 77 65 65 6e 20 74 68 65 20 73 65 6e 64 65 72 20 61 6e 64 20 74 68 65 20 72 65 63 65 69 76 65 72 2e 20 20 43 68 65 63 6b 20 74 68 61 74 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 20 68 61 76 65 20 74 68 65 20 73 61 6d 65 20 63 6f 6e 74 72 61 63 74 20 61 6e 64 20 74 68 65 20 73 61 6d 65 20 62 69 6e 64 69 6e 67 20 28 69 6e 63 6c 75 64 69 6e 67 20 73 65 63 75 72 69 74 79 20 72 65 71 75 69 72 65 6d 65 6e 74 73 2c 20 65 2e 67 2e 20 4d 65 73 73 61 67 65 2c 20 54 72 61 6e 73 70 6f 72 74 2c 20 4e 6f 6e 65 29 2e 3c 2f 66 61 75 6c 74 73 74 72 69 6e 67 3e 3c 2f 73 3a 46 61 75 6c 74 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/"><s:Body><s:Fault><faultcode xmlns:a="http://schemas.microsoft.com/ws/2005/05/addressing/none">a:ActionNotSupported</faultcode><faultstring xml:lang="en-US">The message with Action 'http://tempuri.org/Endpoint/GetArguments' cannot be processed at the receiver, due to a ContractFilter mismatch at the EndpointDispatcher. This may be because of either a contract mismatch (mismatched Actions between sender and receiver) or a binding/security mismatch between the sender and the receiver. Check that sender and receiver have the same contract and the same binding (including security requirements, e.g. Message, Transport, None).</faultstring></s:Fault></s:Body></s:Envelope>
Aug 3, 2021 23:08:51.477946997 CEST	1193	OUT	POST / HTTP/1.1 Content-Type: text/xml; charset=utf-8 SOAPAction: "http://tempuri.org/Endpoint/GetArguments" Host: 45.137.155.31:11556 Content-Length: 137 Expect: 100-continue Accept-Encoding: gzip, deflate
Aug 3, 2021 23:08:51.549185991 CEST	1193	IN	HTTP/1.1 100 Continue
Aug 3, 2021 23:08:51.622066975 CEST	1194	IN	HTTP/1.1 500 Internal Server Error Content-Length: 738 Content-Type: text/xml; charset=utf-8 Server: Microsoft-HTTPAPI/2.0 Date: Tue, 03 Aug 2021 21:08:51 GMT Data Raw: 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 73 3a 46 61 75 6c 74 3e 3c 66 61 75 6c 74 63 6f 64 65 20 78 6d 6c 6e 73 3a 61 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 77 73 2f 32 30 30 35 2f 30 35 2f 61 64 64 72 65 73 73 69 6e 67 2f 6e 6f 6e 65 22 3e 61 3a 41 63 74 69 6f 6e 4e 6f 74 53 75 70 70 6f 72 74 65 64 3c 2f 66 61 75 6c 74 63 6f 64 65 3e 3c 66 61 75 6c 74 73 74 72 69 6e 67 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 54 68 65 20 6d 65 73 73 61 67 65 20 77 69 74 68 20 41 63 74 69 6f 6e 20 27 68 74 74 70 3a 2f 2f 74 65 6d 70 75 72 69 2e 6f 72 67 2f 45 6e 64 70 6f 69 6e 74 2f 47 65 74 41 72 67 75 6d 65 6e 74 73 27 20 63 61 6e 6e 6f 74 20 62 65 20 70 72 6f 63 65 73 73 65 64 20 61 74 20 74 68 65 20 72 65 63 65 69 76 65 72 2c 20 64 75 65 20 74 6f 20 61 20 43 6f 6e 74 72 61 63 74 46 69 6c 74 65 72 20 6d 69 73 6d 61 74 63 68 20 61 74 20 74 68 65 20 45 6e 64 70 6f 69 6e 74 44 69 73 70 61 74 63 68 65 72 2e 20 54 68 69 73 20 6d 61 79 20 62 65 20 62 65 63 61 75 73 65 20 6f 66 20 65 69 74 68 65 72 20 61 20 63 6f 6e 74 72 61 63 74 20 6d 69 73 6d 61 74 63 68 20 28 6d 69 73 6d 61 74 63 68 65 64 20 41 63 74 69 6f 6e 73 20 62 65 74 77 65 65 6e 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 29 20 6f 72 20 61 20 62 69 6e 64 69 6e 67 2f 73 65 63 75 72 69 74 79 20 6d 69 73 6d 61 74 63 68 20 62 65 74 77 65 65 6e 20 74 68 65 20 73 65 6e 64 65 72 20 61 6e 64 20 74 68 65 20 72 65 63 65 69 76 65 72 2e 20 20 43 68 65 63 6b 20 74 68 61 74 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 20 68 61 76 65 20 74 68 65 20 73 61 6d 65 20 63 6f 6e 74 72 61 63 74 20 61 6e 64 20 74 68 65 20 73 61 6d 65 20 62 69 6e 64 69 6e 67 20 28 69 6e 63 6c 75 64 69 6e 67 20 73 65 63 75 72 69 74 79 20 72 65 71 75 69 72 65 6d 65 6e 74 73 2c 20 65 2e 67 2e 20 4d 65 73 73 61 67 65 2c 20 54 72 61 6e 73 70 6f 72 74 2c 20 4e 6f 6e 65 29 2e 3c 2f 66 61 75 6c 74 73 74 72 69 6e 67 3e 3c 2f 73 3a 46 61 75 6c 74 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/"><s:Body><s:Fault><faultcode xmlns:a="http://schemas.microsoft.com/ws/2005/05/addressing/none">a:ActionNotSupported</faultcode><faultstring xml:lang="en-US">The message with Action 'http://tempuri.org/Endpoint/GetArguments' cannot be processed at the receiver, due to a ContractFilter mismatch at the EndpointDispatcher. This may be because of either a contract mismatch (mismatched Actions between sender and receiver) or a binding/security mismatch between the sender and the receiver. Check that sender and receiver have the same contract and the same binding (including security requirements, e.g. Message, Transport, None).</faultstring></s:Fault></s:Body></s:Envelope>
Aug 3, 2021 23:08:52.634804010 CEST	1195	OUT	POST / HTTP/1.1 Content-Type: text/xml; charset=utf-8 SOAPAction: "http://tempuri.org/Endpoint/GetArguments" Host: 45.137.155.31:11556 Content-Length: 137 Expect: 100-continue Accept-Encoding: gzip, deflate
Aug 3, 2021 23:08:52.703515053 CEST	1195	IN	HTTP/1.1 100 Continue
Aug 3, 2021 23:08:52.777390957 CEST	1196	IN	HTTP/1.1 500 Internal Server Error Content-Length: 738 Content-Type: text/xml; charset=utf-8 Server: Microsoft-HTTPAPI/2.0 Date: Tue, 03 Aug 2021 21:08:52 GMT Data Raw: 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 73 3a 46 61 75 6c 74 3e 3c 66 61 75 6c 74 63 6f 64 65 20 78 6d 6c 6e 73 3a 61 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 77 73 2f 32 30 30 35 2f 30 35 2f 61 64 64 72 65 73 73 69 6e 67 2f 6e 6f 6e 65 22 3e 61 3a 41 63 74 69 6f 6e 4e 6f 74 53 75 70 70 6f 72 74 65 64 3c 2f 66 61 75 6c 74 63 6f 64 65 3e 3c 66 61 75 6c 74 73 74 72 69 6e 67 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 54 68 65 20 6d 65 73 73 61 67 65 20 77 69 74 68 20 41 63 74 69 6f 6e 20 27 68 74 74 70 3a 2f 2f 74 65 6d 70 75 72 69 2e 6f 72 67 2f 45 6e 64 70 6f 69 6e 74 2f 47 65 74 41 72 67 75 6d 65 6e 74 73 27 20 63 61 6e 6e 6f 74 20 62 65 20 70 72 6f 63 65 73 73 65 64 20 61 74 20 74 68 65 20 72 65 63 65 69 76 65 72 2c 20 64 75 65 20 74 6f 20 61 20 43 6f 6e 74 72 61 63 74 46 69 6c 74 65 72 20 6d 69 73 6d 61 74 63 68 20 61 74 20 74 68 65 20 45 6e 64 70 6f 69 6e 74 44 69 73 70 61 74 63 68 65 72 2e 20 54 68 69 73 20 6d 61 79 20 62 65 20 62 65 63 61 75 73 65 20 6f 66 20 65 69 74 68 65 72 20 61 20 63 6f 6e 74 72 61 63 74 20 6d 69 73 6d 61 74 63 68 20 28 6d 69 73 6d 61 74 63 68 65 64 20 41 63 74 69 6f 6e 73 20 62 65 74 77 65 65 6e 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 29 20 6f 72 20 61 20 62 69 6e 64 69 6e 67 2f 73 65 63 75 72 69 74 79 20 6d 69 73 6d 61 74 63 68 20 62 65 74 77 65 65 6e 20 74 68 65 20 73 65 6e 64 65 72 20 61 6e 64 20 74 68 65 20 72 65 63 65 69 76 65 72 2e 20 20 43 68 65 63 6b 20 74 68 61 74 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 20 68 61 76 65 20 74 68 65 20 73 61 6d 65 20 63 6f 6e 74 72 61 63 74 20 61 6e 64 20 74 68 65 20 73 61 6d 65 20 62 69 6e 64 69 6e 67 20 28 69 6e 63 6c 75 64 69 6e 67 20 73 65 63 75 72 69 74 79 20 72 65 71 75 69 72 65 6d 65 6e 74 73 2c 20 65 2e 67 2e 20 4d 65 73 73 61 67 65 2c 20 54 72 61 6e 73 70 6f 72 74 2c 20 4e 6f 6e 65 29 2e 3c 2f 66 61 75 6c 74 73 74 72 69 6e 67 3e 3c 2f 73 3a 46 61 75 6c 74 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/"><s:Body><s:Fault><faultcode xmlns:a="http://schemas.microsoft.com/ws/2005/05/addressing/none">a:ActionNotSupported</faultcode><faultstring xml:lang="en-US">The message with Action 'http://tempuri.org/Endpoint/GetArguments' cannot be processed at the receiver, due to a ContractFilter mismatch at the EndpointDispatcher. This may be because of either a contract mismatch (mismatched Actions between sender and receiver) or a binding/security mismatch between the sender and the receiver. Check that sender and receiver have the same contract and the same binding (including security requirements, e.g. Message, Transport, None).</faultstring></s:Fault></s:Body></s:Envelope>
Aug 3, 2021 23:08:53.791714907 CEST	1197	OUT	POST / HTTP/1.1 Content-Type: text/xml; charset=utf-8 SOAPAction: "http://tempuri.org/Endpoint/GetArguments" Host: 45.137.155.31:11556 Content-Length: 137 Expect: 100-continue Accept-Encoding: gzip, deflate
Aug 3, 2021 23:08:53.861747026 CEST	1197	IN	HTTP/1.1 100 Continue
Aug 3, 2021 23:08:53.933701992 CEST	1198	IN	HTTP/1.1 500 Internal Server Error Content-Length: 738 Content-Type: text/xml; charset=utf-8 Server: Microsoft-HTTPAPI/2.0 Date: Tue, 03 Aug 2021 21:08:53 GMT Data Raw: 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 73 3a 46 61 75 6c 74 3e 3c 66 61 75 6c 74 63 6f 64 65 20 78 6d 6c 6e 73 3a 61 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 77 73 2f 32 30 30 35 2f 30 35 2f 61 64 64 72 65 73 73 69 6e 67 2f 6e 6f 6e 65 22 3e 61 3a 41 63 74 69 6f 6e 4e 6f 74 53 75 70 70 6f 72 74 65 64 3c 2f 66 61 75 6c 74 63 6f 64 65 3e 3c 66 61 75 6c 74 73 74 72 69 6e 67 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 54 68 65 20 6d 65 73 73 61 67 65 20 77 69 74 68 20 41 63 74 69 6f 6e 20 27 68 74 74 70 3a 2f 2f 74 65 6d 70 75 72 69 2e 6f 72 67 2f 45 6e 64 70 6f 69 6e 74 2f 47 65 74 41 72 67 75 6d 65 6e 74 73 27 20 63 61 6e 6e 6f 74 20 62 65 20 70 72 6f 63 65 73 73 65 64 20 61 74 20 74 68 65 20 72 65 63 65 69 76 65 72 2c 20 64 75 65 20 74 6f 20 61 20 43 6f 6e 74 72 61 63 74 46 69 6c 74 65 72 20 6d 69 73 6d 61 74 63 68 20 61 74 20 74 68 65 20 45 6e 64 70 6f 69 6e 74 44 69 73 70 61 74 63 68 65 72 2e 20 54 68 69 73 20 6d 61 79 20 62 65 20 62 65 63 61 75 73 65 20 6f 66 20 65 69 74 68 65 72 20 61 20 63 6f 6e 74 72 61 63 74 20 6d 69 73 6d 61 74 63 68 20 28 6d 69 73 6d 61 74 63 68 65 64 20 41 63 74 69 6f 6e 73 20 62 65 74 77 65 65 6e 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 29 20 6f 72 20 61 20 62 69 6e 64 69 6e 67 2f 73 65 63 75 72 69 74 79 20 6d 69 73 6d 61 74 63 68 20 62 65 74 77 65 65 6e 20 74 68 65 20 73 65 6e 64 65 72 20 61 6e 64 20 74 68 65 20 72 65 63 65 69 76 65 72 2e 20 20 43 68 65 63 6b 20 74 68 61 74 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 20 68 61 76 65 20 74 68 65 20 73 61 6d 65 20 63 6f 6e 74 72 61 63 74 20 61 6e 64 20 74 68 65 20 73 61 6d 65 20 62 69 6e 64 69 6e 67 20 28 69 6e 63 6c 75 64 69 6e 67 20 73 65 63 75 72 69 74 79 20 72 65 71 75 69 72 65 6d 65 6e 74 73 2c 20 65 2e 67 2e 20 4d 65 73 73 61 67 65 2c 20 54 72 61 6e 73 70 6f 72 74 2c 20 4e 6f 6e 65 29 2e 3c 2f 66 61 75 6c 74 73 74 72 69 6e 67 3e 3c 2f 73 3a 46 61 75 6c 74 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/"><s:Body><s:Fault><faultcode xmlns:a="http://schemas.microsoft.com/ws/2005/05/addressing/none">a:ActionNotSupported</faultcode><faultstring xml:lang="en-US">The message with Action 'http://tempuri.org/Endpoint/GetArguments' cannot be processed at the receiver, due to a ContractFilter mismatch at the EndpointDispatcher. This may be because of either a contract mismatch (mismatched Actions between sender and receiver) or a binding/security mismatch between the sender and the receiver. Check that sender and receiver have the same contract and the same binding (including security requirements, e.g. Message, Transport, None).</faultstring></s:Fault></s:Body></s:Envelope>
Aug 3, 2021 23:08:54.947076082 CEST	1207	OUT	POST / HTTP/1.1 Content-Type: text/xml; charset=utf-8 SOAPAction: "http://tempuri.org/Endpoint/GetArguments" Host: 45.137.155.31:11556 Content-Length: 137 Expect: 100-continue Accept-Encoding: gzip, deflate
Aug 3, 2021 23:08:55.031856060 CEST	1207	IN	HTTP/1.1 100 Continue
Aug 3, 2021 23:08:55.106903076 CEST	1208	IN	HTTP/1.1 500 Internal Server Error Content-Length: 738 Content-Type: text/xml; charset=utf-8 Server: Microsoft-HTTPAPI/2.0 Date: Tue, 03 Aug 2021 21:08:55 GMT Data Raw: 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 73 3a 46 61 75 6c 74 3e 3c 66 61 75 6c 74 63 6f 64 65 20 78 6d 6c 6e 73 3a 61 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 77 73 2f 32 30 30 35 2f 30 35 2f 61 64 64 72 65 73 73 69 6e 67 2f 6e 6f 6e 65 22 3e 61 3a 41 63 74 69 6f 6e 4e 6f 74 53 75 70 70 6f 72 74 65 64 3c 2f 66 61 75 6c 74 63 6f 64 65 3e 3c 66 61 75 6c 74 73 74 72 69 6e 67 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 54 68 65 20 6d 65 73 73 61 67 65 20 77 69 74 68 20 41 63 74 69 6f 6e 20 27 68 74 74 70 3a 2f 2f 74 65 6d 70 75 72 69 2e 6f 72 67 2f 45 6e 64 70 6f 69 6e 74 2f 47 65 74 41 72 67 75 6d 65 6e 74 73 27 20 63 61 6e 6e 6f 74 20 62 65 20 70 72 6f 63 65 73 73 65 64 20 61 74 20 74 68 65 20 72 65 63 65 69 76 65 72 2c 20 64 75 65 20 74 6f 20 61 20 43 6f 6e 74 72 61 63 74 46 69 6c 74 65 72 20 6d 69 73 6d 61 74 63 68 20 61 74 20 74 68 65 20 45 6e 64 70 6f 69 6e 74 44 69 73 70 61 74 63 68 65 72 2e 20 54 68 69 73 20 6d 61 79 20 62 65 20 62 65 63 61 75 73 65 20 6f 66 20 65 69 74 68 65 72 20 61 20 63 6f 6e 74 72 61 63 74 20 6d 69 73 6d 61 74 63 68 20 28 6d 69 73 6d 61 74 63 68 65 64 20 41 63 74 69 6f 6e 73 20 62 65 74 77 65 65 6e 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 29 20 6f 72 20 61 20 62 69 6e 64 69 6e 67 2f 73 65 63 75 72 69 74 79 20 6d 69 73 6d 61 74 63 68 20 62 65 74 77 65 65 6e 20 74 68 65 20 73 65 6e 64 65 72 20 61 6e 64 20 74 68 65 20 72 65 63 65 69 76 65 72 2e 20 20 43 68 65 63 6b 20 74 68 61 74 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 20 68 61 76 65 20 74 68 65 20 73 61 6d 65 20 63 6f 6e 74 72 61 63 74 20 61 6e 64 20 74 68 65 20 73 61 6d 65 20 62 69 6e 64 69 6e 67 20 28 69 6e 63 6c 75 64 69 6e 67 20 73 65 63 75 72 69 74 79 20 72 65 71 75 69 72 65 6d 65 6e 74 73 2c 20 65 2e 67 2e 20 4d 65 73 73 61 67 65 2c 20 54 72 61 6e 73 70 6f 72 74 2c 20 4e 6f 6e 65 29 2e 3c 2f 66 61 75 6c 74 73 74 72 69 6e 67 3e 3c 2f 73 3a 46 61 75 6c 74 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/"><s:Body><s:Fault><faultcode xmlns:a="http://schemas.microsoft.com/ws/2005/05/addressing/none">a:ActionNotSupported</faultcode><faultstring xml:lang="en-US">The message with Action 'http://tempuri.org/Endpoint/GetArguments' cannot be processed at the receiver, due to a ContractFilter mismatch at the EndpointDispatcher. This may be because of either a contract mismatch (mismatched Actions between sender and receiver) or a binding/security mismatch between the sender and the receiver. Check that sender and receiver have the same contract and the same binding (including security requirements, e.g. Message, Transport, None).</faultstring></s:Fault></s:Body></s:Envelope>
Aug 3, 2021 23:08:56.118983030 CEST	1223	OUT	POST / HTTP/1.1 Content-Type: text/xml; charset=utf-8 SOAPAction: "http://tempuri.org/Endpoint/GetArguments" Host: 45.137.155.31:11556 Content-Length: 137 Expect: 100-continue Accept-Encoding: gzip, deflate
Aug 3, 2021 23:08:56.187716007 CEST	1225	IN	HTTP/1.1 100 Continue
Aug 3, 2021 23:08:56.261271954 CEST	1239	IN	HTTP/1.1 500 Internal Server Error Content-Length: 738 Content-Type: text/xml; charset=utf-8 Server: Microsoft-HTTPAPI/2.0 Date: Tue, 03 Aug 2021 21:08:56 GMT Data Raw: 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 73 3a 46 61 75 6c 74 3e 3c 66 61 75 6c 74 63 6f 64 65 20 78 6d 6c 6e 73 3a 61 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 77 73 2f 32 30 30 35 2f 30 35 2f 61 64 64 72 65 73 73 69 6e 67 2f 6e 6f 6e 65 22 3e 61 3a 41 63 74 69 6f 6e 4e 6f 74 53 75 70 70 6f 72 74 65 64 3c 2f 66 61 75 6c 74 63 6f 64 65 3e 3c 66 61 75 6c 74 73 74 72 69 6e 67 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 54 68 65 20 6d 65 73 73 61 67 65 20 77 69 74 68 20 41 63 74 69 6f 6e 20 27 68 74 74 70 3a 2f 2f 74 65 6d 70 75 72 69 2e 6f 72 67 2f 45 6e 64 70 6f 69 6e 74 2f 47 65 74 41 72 67 75 6d 65 6e 74 73 27 20 63 61 6e 6e 6f 74 20 62 65 20 70 72 6f 63 65 73 73 65 64 20 61 74 20 74 68 65 20 72 65 63 65 69 76 65 72 2c 20 64 75 65 20 74 6f 20 61 20 43 6f 6e 74 72 61 63 74 46 69 6c 74 65 72 20 6d 69 73 6d 61 74 63 68 20 61 74 20 74 68 65 20 45 6e 64 70 6f 69 6e 74 44 69 73 70 61 74 63 68 65 72 2e 20 54 68 69 73 20 6d 61 79 20 62 65 20 62 65 63 61 75 73 65 20 6f 66 20 65 69 74 68 65 72 20 61 20 63 6f 6e 74 72 61 63 74 20 6d 69 73 6d 61 74 63 68 20 28 6d 69 73 6d 61 74 63 68 65 64 20 41 63 74 69 6f 6e 73 20 62 65 74 77 65 65 6e 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 29 20 6f 72 20 61 20 62 69 6e 64 69 6e 67 2f 73 65 63 75 72 69 74 79 20 6d 69 73 6d 61 74 63 68 20 62 65 74 77 65 65 6e 20 74 68 65 20 73 65 6e 64 65 72 20 61 6e 64 20 74 68 65 20 72 65 63 65 69 76 65 72 2e 20 20 43 68 65 63 6b 20 74 68 61 74 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 20 68 61 76 65 20 74 68 65 20 73 61 6d 65 20 63 6f 6e 74 72 61 63 74 20 61 6e 64 20 74 68 65 20 73 61 6d 65 20 62 69 6e 64 69 6e 67 20 28 69 6e 63 6c 75 64 69 6e 67 20 73 65 63 75 72 69 74 79 20 72 65 71 75 69 72 65 6d 65 6e 74 73 2c 20 65 2e 67 2e 20 4d 65 73 73 61 67 65 2c 20 54 72 61 6e 73 70 6f 72 74 2c 20 4e 6f 6e 65 29 2e 3c 2f 66 61 75 6c 74 73 74 72 69 6e 67 3e 3c 2f 73 3a 46 61 75 6c 74 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/"><s:Body><s:Fault><faultcode xmlns:a="http://schemas.microsoft.com/ws/2005/05/addressing/none">a:ActionNotSupported</faultcode><faultstring xml:lang="en-US">The message with Action 'http://tempuri.org/Endpoint/GetArguments' cannot be processed at the receiver, due to a ContractFilter mismatch at the EndpointDispatcher. This may be because of either a contract mismatch (mismatched Actions between sender and receiver) or a binding/security mismatch between the sender and the receiver. Check that sender and receiver have the same contract and the same binding (including security requirements, e.g. Message, Transport, None).</faultstring></s:Fault></s:Body></s:Envelope>
Aug 3, 2021 23:08:57.275489092 CEST	1266	OUT	POST / HTTP/1.1 Content-Type: text/xml; charset=utf-8 SOAPAction: "http://tempuri.org/Endpoint/GetArguments" Host: 45.137.155.31:11556 Content-Length: 137 Expect: 100-continue Accept-Encoding: gzip, deflate
Aug 3, 2021 23:08:57.345042944 CEST	1266	IN	HTTP/1.1 100 Continue
Aug 3, 2021 23:08:57.427540064 CEST	1267	IN	HTTP/1.1 500 Internal Server Error Content-Length: 738 Content-Type: text/xml; charset=utf-8 Server: Microsoft-HTTPAPI/2.0 Date: Tue, 03 Aug 2021 21:08:57 GMT Data Raw: 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 73 3a 46 61 75 6c 74 3e 3c 66 61 75 6c 74 63 6f 64 65 20 78 6d 6c 6e 73 3a 61 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 77 73 2f 32 30 30 35 2f 30 35 2f 61 64 64 72 65 73 73 69 6e 67 2f 6e 6f 6e 65 22 3e 61 3a 41 63 74 69 6f 6e 4e 6f 74 53 75 70 70 6f 72 74 65 64 3c 2f 66 61 75 6c 74 63 6f 64 65 3e 3c 66 61 75 6c 74 73 74 72 69 6e 67 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 54 68 65 20 6d 65 73 73 61 67 65 20 77 69 74 68 20 41 63 74 69 6f 6e 20 27 68 74 74 70 3a 2f 2f 74 65 6d 70 75 72 69 2e 6f 72 67 2f 45 6e 64 70 6f 69 6e 74 2f 47 65 74 41 72 67 75 6d 65 6e 74 73 27 20 63 61 6e 6e 6f 74 20 62 65 20 70 72 6f 63 65 73 73 65 64 20 61 74 20 74 68 65 20 72 65 63 65 69 76 65 72 2c 20 64 75 65 20 74 6f 20 61 20 43 6f 6e 74 72 61 63 74 46 69 6c 74 65 72 20 6d 69 73 6d 61 74 63 68 20 61 74 20 74 68 65 20 45 6e 64 70 6f 69 6e 74 44 69 73 70 61 74 63 68 65 72 2e 20 54 68 69 73 20 6d 61 79 20 62 65 20 62 65 63 61 75 73 65 20 6f 66 20 65 69 74 68 65 72 20 61 20 63 6f 6e 74 72 61 63 74 20 6d 69 73 6d 61 74 63 68 20 28 6d 69 73 6d 61 74 63 68 65 64 20 41 63 74 69 6f 6e 73 20 62 65 74 77 65 65 6e 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 29 20 6f 72 20 61 20 62 69 6e 64 69 6e 67 2f 73 65 63 75 72 69 74 79 20 6d 69 73 6d 61 74 63 68 20 62 65 74 77 65 65 6e 20 74 68 65 20 73 65 6e 64 65 72 20 61 6e 64 20 74 68 65 20 72 65 63 65 69 76 65 72 2e 20 20 43 68 65 63 6b 20 74 68 61 74 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 20 68 61 76 65 20 74 68 65 20 73 61 6d 65 20 63 6f 6e 74 72 61 63 74 20 61 6e 64 20 74 68 65 20 73 61 6d 65 20 62 69 6e 64 69 6e 67 20 28 69 6e 63 6c 75 64 69 6e 67 20 73 65 63 75 72 69 74 79 20 72 65 71 75 69 72 65 6d 65 6e 74 73 2c 20 65 2e 67 2e 20 4d 65 73 73 61 67 65 2c 20 54 72 61 6e 73 70 6f 72 74 2c 20 4e 6f 6e 65 29 2e 3c 2f 66 61 75 6c 74 73 74 72 69 6e 67 3e 3c 2f 73 3a 46 61 75 6c 74 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/"><s:Body><s:Fault><faultcode xmlns:a="http://schemas.microsoft.com/ws/2005/05/addressing/none">a:ActionNotSupported</faultcode><faultstring xml:lang="en-US">The message with Action 'http://tempuri.org/Endpoint/GetArguments' cannot be processed at the receiver, due to a ContractFilter mismatch at the EndpointDispatcher. This may be because of either a contract mismatch (mismatched Actions between sender and receiver) or a binding/security mismatch between the sender and the receiver. Check that sender and receiver have the same contract and the same binding (including security requirements, e.g. Message, Transport, None).</faultstring></s:Fault></s:Body></s:Envelope>
Aug 3, 2021 23:08:58.431857109 CEST	1268	OUT	POST / HTTP/1.1 Content-Type: text/xml; charset=utf-8 SOAPAction: "http://tempuri.org/Endpoint/GetArguments" Host: 45.137.155.31:11556 Content-Length: 137 Expect: 100-continue Accept-Encoding: gzip, deflate
Aug 3, 2021 23:08:58.501523018 CEST	1268	IN	HTTP/1.1 100 Continue
Aug 3, 2021 23:08:58.572072029 CEST	1269	IN	HTTP/1.1 500 Internal Server Error Content-Length: 738 Content-Type: text/xml; charset=utf-8 Server: Microsoft-HTTPAPI/2.0 Date: Tue, 03 Aug 2021 21:08:58 GMT Data Raw: 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 73 3a 46 61 75 6c 74 3e 3c 66 61 75 6c 74 63 6f 64 65 20 78 6d 6c 6e 73 3a 61 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 77 73 2f 32 30 30 35 2f 30 35 2f 61 64 64 72 65 73 73 69 6e 67 2f 6e 6f 6e 65 22 3e 61 3a 41 63 74 69 6f 6e 4e 6f 74 53 75 70 70 6f 72 74 65 64 3c 2f 66 61 75 6c 74 63 6f 64 65 3e 3c 66 61 75 6c 74 73 74 72 69 6e 67 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 54 68 65 20 6d 65 73 73 61 67 65 20 77 69 74 68 20 41 63 74 69 6f 6e 20 27 68 74 74 70 3a 2f 2f 74 65 6d 70 75 72 69 2e 6f 72 67 2f 45 6e 64 70 6f 69 6e 74 2f 47 65 74 41 72 67 75 6d 65 6e 74 73 27 20 63 61 6e 6e 6f 74 20 62 65 20 70 72 6f 63 65 73 73 65 64 20 61 74 20 74 68 65 20 72 65 63 65 69 76 65 72 2c 20 64 75 65 20 74 6f 20 61 20 43 6f 6e 74 72 61 63 74 46 69 6c 74 65 72 20 6d 69 73 6d 61 74 63 68 20 61 74 20 74 68 65 20 45 6e 64 70 6f 69 6e 74 44 69 73 70 61 74 63 68 65 72 2e 20 54 68 69 73 20 6d 61 79 20 62 65 20 62 65 63 61 75 73 65 20 6f 66 20 65 69 74 68 65 72 20 61 20 63 6f 6e 74 72 61 63 74 20 6d 69 73 6d 61 74 63 68 20 28 6d 69 73 6d 61 74 63 68 65 64 20 41 63 74 69 6f 6e 73 20 62 65 74 77 65 65 6e 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 29 20 6f 72 20 61 20 62 69 6e 64 69 6e 67 2f 73 65 63 75 72 69 74 79 20 6d 69 73 6d 61 74 63 68 20 62 65 74 77 65 65 6e 20 74 68 65 20 73 65 6e 64 65 72 20 61 6e 64 20 74 68 65 20 72 65 63 65 69 76 65 72 2e 20 20 43 68 65 63 6b 20 74 68 61 74 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 20 68 61 76 65 20 74 68 65 20 73 61 6d 65 20 63 6f 6e 74 72 61 63 74 20 61 6e 64 20 74 68 65 20 73 61 6d 65 20 62 69 6e 64 69 6e 67 20 28 69 6e 63 6c 75 64 69 6e 67 20 73 65 63 75 72 69 74 79 20 72 65 71 75 69 72 65 6d 65 6e 74 73 2c 20 65 2e 67 2e 20 4d 65 73 73 61 67 65 2c 20 54 72 61 6e 73 70 6f 72 74 2c 20 4e 6f 6e 65 29 2e 3c 2f 66 61 75 6c 74 73 74 72 69 6e 67 3e 3c 2f 73 3a 46 61 75 6c 74 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/"><s:Body><s:Fault><faultcode xmlns:a="http://schemas.microsoft.com/ws/2005/05/addressing/none">a:ActionNotSupported</faultcode><faultstring xml:lang="en-US">The message with Action 'http://tempuri.org/Endpoint/GetArguments' cannot be processed at the receiver, due to a ContractFilter mismatch at the EndpointDispatcher. This may be because of either a contract mismatch (mismatched Actions between sender and receiver) or a binding/security mismatch between the sender and the receiver. Check that sender and receiver have the same contract and the same binding (including security requirements, e.g. Message, Transport, None).</faultstring></s:Fault></s:Body></s:Envelope>
Aug 3, 2021 23:08:59.715187073 CEST	1269	OUT	POST / HTTP/1.1 Content-Type: text/xml; charset=utf-8 SOAPAction: "http://tempuri.org/Endpoint/GetArguments" Host: 45.137.155.31:11556 Content-Length: 137 Expect: 100-continue Accept-Encoding: gzip, deflate
Aug 3, 2021 23:08:59.785922050 CEST	1269	IN	HTTP/1.1 100 Continue
Aug 3, 2021 23:08:59.884717941 CEST	1271	IN	HTTP/1.1 500 Internal Server Error Content-Length: 738 Content-Type: text/xml; charset=utf-8 Server: Microsoft-HTTPAPI/2.0 Date: Tue, 03 Aug 2021 21:08:59 GMT Data Raw: 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 73 3a 46 61 75 6c 74 3e 3c 66 61 75 6c 74 63 6f 64 65 20 78 6d 6c 6e 73 3a 61 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 77 73 2f 32 30 30 35 2f 30 35 2f 61 64 64 72 65 73 73 69 6e 67 2f 6e 6f 6e 65 22 3e 61 3a 41 63 74 69 6f 6e 4e 6f 74 53 75 70 70 6f 72 74 65 64 3c 2f 66 61 75 6c 74 63 6f 64 65 3e 3c 66 61 75 6c 74 73 74 72 69 6e 67 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 54 68 65 20 6d 65 73 73 61 67 65 20 77 69 74 68 20 41 63 74 69 6f 6e 20 27 68 74 74 70 3a 2f 2f 74 65 6d 70 75 72 69 2e 6f 72 67 2f 45 6e 64 70 6f 69 6e 74 2f 47 65 74 41 72 67 75 6d 65 6e 74 73 27 20 63 61 6e 6e 6f 74 20 62 65 20 70 72 6f 63 65 73 73 65 64 20 61 74 20 74 68 65 20 72 65 63 65 69 76 65 72 2c 20 64 75 65 20 74 6f 20 61 20 43 6f 6e 74 72 61 63 74 46 69 6c 74 65 72 20 6d 69 73 6d 61 74 63 68 20 61 74 20 74 68 65 20 45 6e 64 70 6f 69 6e 74 44 69 73 70 61 74 63 68 65 72 2e 20 54 68 69 73 20 6d 61 79 20 62 65 20 62 65 63 61 75 73 65 20 6f 66 20 65 69 74 68 65 72 20 61 20 63 6f 6e 74 72 61 63 74 20 6d 69 73 6d 61 74 63 68 20 28 6d 69 73 6d 61 74 63 68 65 64 20 41 63 74 69 6f 6e 73 20 62 65 74 77 65 65 6e 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 29 20 6f 72 20 61 20 62 69 6e 64 69 6e 67 2f 73 65 63 75 72 69 74 79 20 6d 69 73 6d 61 74 63 68 20 62 65 74 77 65 65 6e 20 74 68 65 20 73 65 6e 64 65 72 20 61 6e 64 20 74 68 65 20 72 65 63 65 69 76 65 72 2e 20 20 43 68 65 63 6b 20 74 68 61 74 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 20 68 61 76 65 20 74 68 65 20 73 61 6d 65 20 63 6f 6e 74 72 61 63 74 20 61 6e 64 20 74 68 65 20 73 61 6d 65 20 62 69 6e 64 69 6e 67 20 28 69 6e 63 6c 75 64 69 6e 67 20 73 65 63 75 72 69 74 79 20 72 65 71 75 69 72 65 6d 65 6e 74 73 2c 20 65 2e 67 2e 20 4d 65 73 73 61 67 65 2c 20 54 72 61 6e 73 70 6f 72 74 2c 20 4e 6f 6e 65 29 2e 3c 2f 66 61 75 6c 74 73 74 72 69 6e 67 3e 3c 2f 73 3a 46 61 75 6c 74 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/"><s:Body><s:Fault><faultcode xmlns:a="http://schemas.microsoft.com/ws/2005/05/addressing/none">a:ActionNotSupported</faultcode><faultstring xml:lang="en-US">The message with Action 'http://tempuri.org/Endpoint/GetArguments' cannot be processed at the receiver, due to a ContractFilter mismatch at the EndpointDispatcher. This may be because of either a contract mismatch (mismatched Actions between sender and receiver) or a binding/security mismatch between the sender and the receiver. Check that sender and receiver have the same contract and the same binding (including security requirements, e.g. Message, Transport, None).</faultstring></s:Fault></s:Body></s:Envelope>
Aug 3, 2021 23:09:00.900859118 CEST	1276	OUT	POST / HTTP/1.1 Content-Type: text/xml; charset=utf-8 SOAPAction: "http://tempuri.org/Endpoint/GetArguments" Host: 45.137.155.31:11556 Content-Length: 137 Expect: 100-continue Accept-Encoding: gzip, deflate
Aug 3, 2021 23:09:00.971767902 CEST	1276	IN	HTTP/1.1 100 Continue
Aug 3, 2021 23:09:01.043327093 CEST	1278	IN	HTTP/1.1 500 Internal Server Error Content-Length: 738 Content-Type: text/xml; charset=utf-8 Server: Microsoft-HTTPAPI/2.0 Date: Tue, 03 Aug 2021 21:09:00 GMT Data Raw: 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 73 3a 46 61 75 6c 74 3e 3c 66 61 75 6c 74 63 6f 64 65 20 78 6d 6c 6e 73 3a 61 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 77 73 2f 32 30 30 35 2f 30 35 2f 61 64 64 72 65 73 73 69 6e 67 2f 6e 6f 6e 65 22 3e 61 3a 41 63 74 69 6f 6e 4e 6f 74 53 75 70 70 6f 72 74 65 64 3c 2f 66 61 75 6c 74 63 6f 64 65 3e 3c 66 61 75 6c 74 73 74 72 69 6e 67 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 54 68 65 20 6d 65 73 73 61 67 65 20 77 69 74 68 20 41 63 74 69 6f 6e 20 27 68 74 74 70 3a 2f 2f 74 65 6d 70 75 72 69 2e 6f 72 67 2f 45 6e 64 70 6f 69 6e 74 2f 47 65 74 41 72 67 75 6d 65 6e 74 73 27 20 63 61 6e 6e 6f 74 20 62 65 20 70 72 6f 63 65 73 73 65 64 20 61 74 20 74 68 65 20 72 65 63 65 69 76 65 72 2c 20 64 75 65 20 74 6f 20 61 20 43 6f 6e 74 72 61 63 74 46 69 6c 74 65 72 20 6d 69 73 6d 61 74 63 68 20 61 74 20 74 68 65 20 45 6e 64 70 6f 69 6e 74 44 69 73 70 61 74 63 68 65 72 2e 20 54 68 69 73 20 6d 61 79 20 62 65 20 62 65 63 61 75 73 65 20 6f 66 20 65 69 74 68 65 72 20 61 20 63 6f 6e 74 72 61 63 74 20 6d 69 73 6d 61 74 63 68 20 28 6d 69 73 6d 61 74 63 68 65 64 20 41 63 74 69 6f 6e 73 20 62 65 74 77 65 65 6e 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 29 20 6f 72 20 61 20 62 69 6e 64 69 6e 67 2f 73 65 63 75 72 69 74 79 20 6d 69 73 6d 61 74 63 68 20 62 65 74 77 65 65 6e 20 74 68 65 20 73 65 6e 64 65 72 20 61 6e 64 20 74 68 65 20 72 65 63 65 69 76 65 72 2e 20 20 43 68 65 63 6b 20 74 68 61 74 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 20 68 61 76 65 20 74 68 65 20 73 61 6d 65 20 63 6f 6e 74 72 61 63 74 20 61 6e 64 20 74 68 65 20 73 61 6d 65 20 62 69 6e 64 69 6e 67 20 28 69 6e 63 6c 75 64 69 6e 67 20 73 65 63 75 72 69 74 79 20 72 65 71 75 69 72 65 6d 65 6e 74 73 2c 20 65 2e 67 2e 20 4d 65 73 73 61 67 65 2c 20 54 72 61 6e 73 70 6f 72 74 2c 20 4e 6f 6e 65 29 2e 3c 2f 66 61 75 6c 74 73 74 72 69 6e 67 3e 3c 2f 73 3a 46 61 75 6c 74 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/"><s:Body><s:Fault><faultcode xmlns:a="http://schemas.microsoft.com/ws/2005/05/addressing/none">a:ActionNotSupported</faultcode><faultstring xml:lang="en-US">The message with Action 'http://tempuri.org/Endpoint/GetArguments' cannot be processed at the receiver, due to a ContractFilter mismatch at the EndpointDispatcher. This may be because of either a contract mismatch (mismatched Actions between sender and receiver) or a binding/security mismatch between the sender and the receiver. Check that sender and receiver have the same contract and the same binding (including security requirements, e.g. Message, Transport, None).</faultstring></s:Fault></s:Body></s:Envelope>
Aug 3, 2021 23:09:02.058590889 CEST	1306	OUT	POST / HTTP/1.1 Content-Type: text/xml; charset=utf-8 SOAPAction: "http://tempuri.org/Endpoint/GetArguments" Host: 45.137.155.31:11556 Content-Length: 137 Expect: 100-continue Accept-Encoding: gzip, deflate
Aug 3, 2021 23:09:02.145145893 CEST	2047	IN	HTTP/1.1 100 Continue
Aug 3, 2021 23:09:02.219572067 CEST	2048	IN	HTTP/1.1 500 Internal Server Error Content-Length: 738 Content-Type: text/xml; charset=utf-8 Server: Microsoft-HTTPAPI/2.0 Date: Tue, 03 Aug 2021 21:09:01 GMT Data Raw: 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 73 3a 46 61 75 6c 74 3e 3c 66 61 75 6c 74 63 6f 64 65 20 78 6d 6c 6e 73 3a 61 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 77 73 2f 32 30 30 35 2f 30 35 2f 61 64 64 72 65 73 73 69 6e 67 2f 6e 6f 6e 65 22 3e 61 3a 41 63 74 69 6f 6e 4e 6f 74 53 75 70 70 6f 72 74 65 64 3c 2f 66 61 75 6c 74 63 6f 64 65 3e 3c 66 61 75 6c 74 73 74 72 69 6e 67 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 54 68 65 20 6d 65 73 73 61 67 65 20 77 69 74 68 20 41 63 74 69 6f 6e 20 27 68 74 74 70 3a 2f 2f 74 65 6d 70 75 72 69 2e 6f 72 67 2f 45 6e 64 70 6f 69 6e 74 2f 47 65 74 41 72 67 75 6d 65 6e 74 73 27 20 63 61 6e 6e 6f 74 20 62 65 20 70 72 6f 63 65 73 73 65 64 20 61 74 20 74 68 65 20 72 65 63 65 69 76 65 72 2c 20 64 75 65 20 74 6f 20 61 20 43 6f 6e 74 72 61 63 74 46 69 6c 74 65 72 20 6d 69 73 6d 61 74 63 68 20 61 74 20 74 68 65 20 45 6e 64 70 6f 69 6e 74 44 69 73 70 61 74 63 68 65 72 2e 20 54 68 69 73 20 6d 61 79 20 62 65 20 62 65 63 61 75 73 65 20 6f 66 20 65 69 74 68 65 72 20 61 20 63 6f 6e 74 72 61 63 74 20 6d 69 73 6d 61 74 63 68 20 28 6d 69 73 6d 61 74 63 68 65 64 20 41 63 74 69 6f 6e 73 20 62 65 74 77 65 65 6e 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 29 20 6f 72 20 61 20 62 69 6e 64 69 6e 67 2f 73 65 63 75 72 69 74 79 20 6d 69 73 6d 61 74 63 68 20 62 65 74 77 65 65 6e 20 74 68 65 20 73 65 6e 64 65 72 20 61 6e 64 20 74 68 65 20 72 65 63 65 69 76 65 72 2e 20 20 43 68 65 63 6b 20 74 68 61 74 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 20 68 61 76 65 20 74 68 65 20 73 61 6d 65 20 63 6f 6e 74 72 61 63 74 20 61 6e 64 20 74 68 65 20 73 61 6d 65 20 62 69 6e 64 69 6e 67 20 28 69 6e 63 6c 75 64 69 6e 67 20 73 65 63 75 72 69 74 79 20 72 65 71 75 69 72 65 6d 65 6e 74 73 2c 20 65 2e 67 2e 20 4d 65 73 73 61 67 65 2c 20 54 72 61 6e 73 70 6f 72 74 2c 20 4e 6f 6e 65 29 2e 3c 2f 66 61 75 6c 74 73 74 72 69 6e 67 3e 3c 2f 73 3a 46 61 75 6c 74 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/"><s:Body><s:Fault><faultcode xmlns:a="http://schemas.microsoft.com/ws/2005/05/addressing/none">a:ActionNotSupported</faultcode><faultstring xml:lang="en-US">The message with Action 'http://tempuri.org/Endpoint/GetArguments' cannot be processed at the receiver, due to a ContractFilter mismatch at the EndpointDispatcher. This may be because of either a contract mismatch (mismatched Actions between sender and receiver) or a binding/security mismatch between the sender and the receiver. Check that sender and receiver have the same contract and the same binding (including security requirements, e.g. Message, Transport, None).</faultstring></s:Fault></s:Body></s:Envelope>
Aug 3, 2021 23:09:03.229676962 CEST	4799	OUT	POST / HTTP/1.1 Content-Type: text/xml; charset=utf-8 SOAPAction: "http://tempuri.org/Endpoint/GetArguments" Host: 45.137.155.31:11556 Content-Length: 137 Expect: 100-continue Accept-Encoding: gzip, deflate
Aug 3, 2021 23:09:03.299985886 CEST	4821	IN	HTTP/1.1 100 Continue
Aug 3, 2021 23:09:03.370943069 CEST	4822	IN	HTTP/1.1 500 Internal Server Error Content-Length: 738 Content-Type: text/xml; charset=utf-8 Server: Microsoft-HTTPAPI/2.0 Date: Tue, 03 Aug 2021 21:09:03 GMT Data Raw: 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 73 3a 46 61 75 6c 74 3e 3c 66 61 75 6c 74 63 6f 64 65 20 78 6d 6c 6e 73 3a 61 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 77 73 2f 32 30 30 35 2f 30 35 2f 61 64 64 72 65 73 73 69 6e 67 2f 6e 6f 6e 65 22 3e 61 3a 41 63 74 69 6f 6e 4e 6f 74 53 75 70 70 6f 72 74 65 64 3c 2f 66 61 75 6c 74 63 6f 64 65 3e 3c 66 61 75 6c 74 73 74 72 69 6e 67 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 54 68 65 20 6d 65 73 73 61 67 65 20 77 69 74 68 20 41 63 74 69 6f 6e 20 27 68 74 74 70 3a 2f 2f 74 65 6d 70 75 72 69 2e 6f 72 67 2f 45 6e 64 70 6f 69 6e 74 2f 47 65 74 41 72 67 75 6d 65 6e 74 73 27 20 63 61 6e 6e 6f 74 20 62 65 20 70 72 6f 63 65 73 73 65 64 20 61 74 20 74 68 65 20 72 65 63 65 69 76 65 72 2c 20 64 75 65 20 74 6f 20 61 20 43 6f 6e 74 72 61 63 74 46 69 6c 74 65 72 20 6d 69 73 6d 61 74 63 68 20 61 74 20 74 68 65 20 45 6e 64 70 6f 69 6e 74 44 69 73 70 61 74 63 68 65 72 2e 20 54 68 69 73 20 6d 61 79 20 62 65 20 62 65 63 61 75 73 65 20 6f 66 20 65 69 74 68 65 72 20 61 20 63 6f 6e 74 72 61 63 74 20 6d 69 73 6d 61 74 63 68 20 28 6d 69 73 6d 61 74 63 68 65 64 20 41 63 74 69 6f 6e 73 20 62 65 74 77 65 65 6e 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 29 20 6f 72 20 61 20 62 69 6e 64 69 6e 67 2f 73 65 63 75 72 69 74 79 20 6d 69 73 6d 61 74 63 68 20 62 65 74 77 65 65 6e 20 74 68 65 20 73 65 6e 64 65 72 20 61 6e 64 20 74 68 65 20 72 65 63 65 69 76 65 72 2e 20 20 43 68 65 63 6b 20 74 68 61 74 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 20 68 61 76 65 20 74 68 65 20 73 61 6d 65 20 63 6f 6e 74 72 61 63 74 20 61 6e 64 20 74 68 65 20 73 61 6d 65 20 62 69 6e 64 69 6e 67 20 28 69 6e 63 6c 75 64 69 6e 67 20 73 65 63 75 72 69 74 79 20 72 65 71 75 69 72 65 6d 65 6e 74 73 2c 20 65 2e 67 2e 20 4d 65 73 73 61 67 65 2c 20 54 72 61 6e 73 70 6f 72 74 2c 20 4e 6f 6e 65 29 2e 3c 2f 66 61 75 6c 74 73 74 72 69 6e 67 3e 3c 2f 73 3a 46 61 75 6c 74 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/"><s:Body><s:Fault><faultcode xmlns:a="http://schemas.microsoft.com/ws/2005/05/addressing/none">a:ActionNotSupported</faultcode><faultstring xml:lang="en-US">The message with Action 'http://tempuri.org/Endpoint/GetArguments' cannot be processed at the receiver, due to a ContractFilter mismatch at the EndpointDispatcher. This may be because of either a contract mismatch (mismatched Actions between sender and receiver) or a binding/security mismatch between the sender and the receiver. Check that sender and receiver have the same contract and the same binding (including security requirements, e.g. Message, Transport, None).</faultstring></s:Fault></s:Body></s:Envelope>
Aug 3, 2021 23:09:04.385783911 CEST	4822	OUT	POST / HTTP/1.1 Content-Type: text/xml; charset=utf-8 SOAPAction: "http://tempuri.org/Endpoint/GetArguments" Host: 45.137.155.31:11556 Content-Length: 137 Expect: 100-continue Accept-Encoding: gzip, deflate
Aug 3, 2021 23:09:04.455791950 CEST	4822	IN	HTTP/1.1 100 Continue
Aug 3, 2021 23:09:04.526737928 CEST	4823	IN	HTTP/1.1 500 Internal Server Error Content-Length: 738 Content-Type: text/xml; charset=utf-8 Server: Microsoft-HTTPAPI/2.0 Date: Tue, 03 Aug 2021 21:09:04 GMT Data Raw: 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 73 3a 46 61 75 6c 74 3e 3c 66 61 75 6c 74 63 6f 64 65 20 78 6d 6c 6e 73 3a 61 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 77 73 2f 32 30 30 35 2f 30 35 2f 61 64 64 72 65 73 73 69 6e 67 2f 6e 6f 6e 65 22 3e 61 3a 41 63 74 69 6f 6e 4e 6f 74 53 75 70 70 6f 72 74 65 64 3c 2f 66 61 75 6c 74 63 6f 64 65 3e 3c 66 61 75 6c 74 73 74 72 69 6e 67 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 54 68 65 20 6d 65 73 73 61 67 65 20 77 69 74 68 20 41 63 74 69 6f 6e 20 27 68 74 74 70 3a 2f 2f 74 65 6d 70 75 72 69 2e 6f 72 67 2f 45 6e 64 70 6f 69 6e 74 2f 47 65 74 41 72 67 75 6d 65 6e 74 73 27 20 63 61 6e 6e 6f 74 20 62 65 20 70 72 6f 63 65 73 73 65 64 20 61 74 20 74 68 65 20 72 65 63 65 69 76 65 72 2c 20 64 75 65 20 74 6f 20 61 20 43 6f 6e 74 72 61 63 74 46 69 6c 74 65 72 20 6d 69 73 6d 61 74 63 68 20 61 74 20 74 68 65 20 45 6e 64 70 6f 69 6e 74 44 69 73 70 61 74 63 68 65 72 2e 20 54 68 69 73 20 6d 61 79 20 62 65 20 62 65 63 61 75 73 65 20 6f 66 20 65 69 74 68 65 72 20 61 20 63 6f 6e 74 72 61 63 74 20 6d 69 73 6d 61 74 63 68 20 28 6d 69 73 6d 61 74 63 68 65 64 20 41 63 74 69 6f 6e 73 20 62 65 74 77 65 65 6e 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 29 20 6f 72 20 61 20 62 69 6e 64 69 6e 67 2f 73 65 63 75 72 69 74 79 20 6d 69 73 6d 61 74 63 68 20 62 65 74 77 65 65 6e 20 74 68 65 20 73 65 6e 64 65 72 20 61 6e 64 20 74 68 65 20 72 65 63 65 69 76 65 72 2e 20 20 43 68 65 63 6b 20 74 68 61 74 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 20 68 61 76 65 20 74 68 65 20 73 61 6d 65 20 63 6f 6e 74 72 61 63 74 20 61 6e 64 20 74 68 65 20 73 61 6d 65 20 62 69 6e 64 69 6e 67 20 28 69 6e 63 6c 75 64 69 6e 67 20 73 65 63 75 72 69 74 79 20 72 65 71 75 69 72 65 6d 65 6e 74 73 2c 20 65 2e 67 2e 20 4d 65 73 73 61 67 65 2c 20 54 72 61 6e 73 70 6f 72 74 2c 20 4e 6f 6e 65 29 2e 3c 2f 66 61 75 6c 74 73 74 72 69 6e 67 3e 3c 2f 73 3a 46 61 75 6c 74 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/"><s:Body><s:Fault><faultcode xmlns:a="http://schemas.microsoft.com/ws/2005/05/addressing/none">a:ActionNotSupported</faultcode><faultstring xml:lang="en-US">The message with Action 'http://tempuri.org/Endpoint/GetArguments' cannot be processed at the receiver, due to a ContractFilter mismatch at the EndpointDispatcher. This may be because of either a contract mismatch (mismatched Actions between sender and receiver) or a binding/security mismatch between the sender and the receiver. Check that sender and receiver have the same contract and the same binding (including security requirements, e.g. Message, Transport, None).</faultstring></s:Fault></s:Body></s:Envelope>
Aug 3, 2021 23:09:05.541631937 CEST	5745	OUT	POST / HTTP/1.1 Content-Type: text/xml; charset=utf-8 SOAPAction: "http://tempuri.org/Endpoint/GetArguments" Host: 45.137.155.31:11556 Content-Length: 137 Expect: 100-continue Accept-Encoding: gzip, deflate
Aug 3, 2021 23:09:05.611464024 CEST	5745	IN	HTTP/1.1 100 Continue
Aug 3, 2021 23:09:05.681380987 CEST	5747	IN	HTTP/1.1 500 Internal Server Error Content-Length: 738 Content-Type: text/xml; charset=utf-8 Server: Microsoft-HTTPAPI/2.0 Date: Tue, 03 Aug 2021 21:09:05 GMT Data Raw: 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 73 3a 46 61 75 6c 74 3e 3c 66 61 75 6c 74 63 6f 64 65 20 78 6d 6c 6e 73 3a 61 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 77 73 2f 32 30 30 35 2f 30 35 2f 61 64 64 72 65 73 73 69 6e 67 2f 6e 6f 6e 65 22 3e 61 3a 41 63 74 69 6f 6e 4e 6f 74 53 75 70 70 6f 72 74 65 64 3c 2f 66 61 75 6c 74 63 6f 64 65 3e 3c 66 61 75 6c 74 73 74 72 69 6e 67 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 54 68 65 20 6d 65 73 73 61 67 65 20 77 69 74 68 20 41 63 74 69 6f 6e 20 27 68 74 74 70 3a 2f 2f 74 65 6d 70 75 72 69 2e 6f 72 67 2f 45 6e 64 70 6f 69 6e 74 2f 47 65 74 41 72 67 75 6d 65 6e 74 73 27 20 63 61 6e 6e 6f 74 20 62 65 20 70 72 6f 63 65 73 73 65 64 20 61 74 20 74 68 65 20 72 65 63 65 69 76 65 72 2c 20 64 75 65 20 74 6f 20 61 20 43 6f 6e 74 72 61 63 74 46 69 6c 74 65 72 20 6d 69 73 6d 61 74 63 68 20 61 74 20 74 68 65 20 45 6e 64 70 6f 69 6e 74 44 69 73 70 61 74 63 68 65 72 2e 20 54 68 69 73 20 6d 61 79 20 62 65 20 62 65 63 61 75 73 65 20 6f 66 20 65 69 74 68 65 72 20 61 20 63 6f 6e 74 72 61 63 74 20 6d 69 73 6d 61 74 63 68 20 28 6d 69 73 6d 61 74 63 68 65 64 20 41 63 74 69 6f 6e 73 20 62 65 74 77 65 65 6e 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 29 20 6f 72 20 61 20 62 69 6e 64 69 6e 67 2f 73 65 63 75 72 69 74 79 20 6d 69 73 6d 61 74 63 68 20 62 65 74 77 65 65 6e 20 74 68 65 20 73 65 6e 64 65 72 20 61 6e 64 20 74 68 65 20 72 65 63 65 69 76 65 72 2e 20 20 43 68 65 63 6b 20 74 68 61 74 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 20 68 61 76 65 20 74 68 65 20 73 61 6d 65 20 63 6f 6e 74 72 61 63 74 20 61 6e 64 20 74 68 65 20 73 61 6d 65 20 62 69 6e 64 69 6e 67 20 28 69 6e 63 6c 75 64 69 6e 67 20 73 65 63 75 72 69 74 79 20 72 65 71 75 69 72 65 6d 65 6e 74 73 2c 20 65 2e 67 2e 20 4d 65 73 73 61 67 65 2c 20 54 72 61 6e 73 70 6f 72 74 2c 20 4e 6f 6e 65 29 2e 3c 2f 66 61 75 6c 74 73 74 72 69 6e 67 3e 3c 2f 73 3a 46 61 75 6c 74 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/"><s:Body><s:Fault><faultcode xmlns:a="http://schemas.microsoft.com/ws/2005/05/addressing/none">a:ActionNotSupported</faultcode><faultstring xml:lang="en-US">The message with Action 'http://tempuri.org/Endpoint/GetArguments' cannot be processed at the receiver, due to a ContractFilter mismatch at the EndpointDispatcher. This may be because of either a contract mismatch (mismatched Actions between sender and receiver) or a binding/security mismatch between the sender and the receiver. Check that sender and receiver have the same contract and the same binding (including security requirements, e.g. Message, Transport, None).</faultstring></s:Fault></s:Body></s:Envelope>
Aug 3, 2021 23:09:06.698107004 CEST	5747	OUT	POST / HTTP/1.1 Content-Type: text/xml; charset=utf-8 SOAPAction: "http://tempuri.org/Endpoint/GetArguments" Host: 45.137.155.31:11556 Content-Length: 137 Expect: 100-continue Accept-Encoding: gzip, deflate
Aug 3, 2021 23:09:06.767100096 CEST	5747	IN	HTTP/1.1 100 Continue
Aug 3, 2021 23:09:06.839437008 CEST	5748	IN	HTTP/1.1 500 Internal Server Error Content-Length: 738 Content-Type: text/xml; charset=utf-8 Server: Microsoft-HTTPAPI/2.0 Date: Tue, 03 Aug 2021 21:09:06 GMT Data Raw: 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 73 3a 46 61 75 6c 74 3e 3c 66 61 75 6c 74 63 6f 64 65 20 78 6d 6c 6e 73 3a 61 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 77 73 2f 32 30 30 35 2f 30 35 2f 61 64 64 72 65 73 73 69 6e 67 2f 6e 6f 6e 65 22 3e 61 3a 41 63 74 69 6f 6e 4e 6f 74 53 75 70 70 6f 72 74 65 64 3c 2f 66 61 75 6c 74 63 6f 64 65 3e 3c 66 61 75 6c 74 73 74 72 69 6e 67 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 54 68 65 20 6d 65 73 73 61 67 65 20 77 69 74 68 20 41 63 74 69 6f 6e 20 27 68 74 74 70 3a 2f 2f 74 65 6d 70 75 72 69 2e 6f 72 67 2f 45 6e 64 70 6f 69 6e 74 2f 47 65 74 41 72 67 75 6d 65 6e 74 73 27 20 63 61 6e 6e 6f 74 20 62 65 20 70 72 6f 63 65 73 73 65 64 20 61 74 20 74 68 65 20 72 65 63 65 69 76 65 72 2c 20 64 75 65 20 74 6f 20 61 20 43 6f 6e 74 72 61 63 74 46 69 6c 74 65 72 20 6d 69 73 6d 61 74 63 68 20 61 74 20 74 68 65 20 45 6e 64 70 6f 69 6e 74 44 69 73 70 61 74 63 68 65 72 2e 20 54 68 69 73 20 6d 61 79 20 62 65 20 62 65 63 61 75 73 65 20 6f 66 20 65 69 74 68 65 72 20 61 20 63 6f 6e 74 72 61 63 74 20 6d 69 73 6d 61 74 63 68 20 28 6d 69 73 6d 61 74 63 68 65 64 20 41 63 74 69 6f 6e 73 20 62 65 74 77 65 65 6e 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 29 20 6f 72 20 61 20 62 69 6e 64 69 6e 67 2f 73 65 63 75 72 69 74 79 20 6d 69 73 6d 61 74 63 68 20 62 65 74 77 65 65 6e 20 74 68 65 20 73 65 6e 64 65 72 20 61 6e 64 20 74 68 65 20 72 65 63 65 69 76 65 72 2e 20 20 43 68 65 63 6b 20 74 68 61 74 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 20 68 61 76 65 20 74 68 65 20 73 61 6d 65 20 63 6f 6e 74 72 61 63 74 20 61 6e 64 20 74 68 65 20 73 61 6d 65 20 62 69 6e 64 69 6e 67 20 28 69 6e 63 6c 75 64 69 6e 67 20 73 65 63 75 72 69 74 79 20 72 65 71 75 69 72 65 6d 65 6e 74 73 2c 20 65 2e 67 2e 20 4d 65 73 73 61 67 65 2c 20 54 72 61 6e 73 70 6f 72 74 2c 20 4e 6f 6e 65 29 2e 3c 2f 66 61 75 6c 74 73 74 72 69 6e 67 3e 3c 2f 73 3a 46 61 75 6c 74 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/"><s:Body><s:Fault><faultcode xmlns:a="http://schemas.microsoft.com/ws/2005/05/addressing/none">a:ActionNotSupported</faultcode><faultstring xml:lang="en-US">The message with Action 'http://tempuri.org/Endpoint/GetArguments' cannot be processed at the receiver, due to a ContractFilter mismatch at the EndpointDispatcher. This may be because of either a contract mismatch (mismatched Actions between sender and receiver) or a binding/security mismatch between the sender and the receiver. Check that sender and receiver have the same contract and the same binding (including security requirements, e.g. Message, Transport, None).</faultstring></s:Fault></s:Body></s:Envelope>
Aug 3, 2021 23:09:07.854629040 CEST	8976	OUT	POST / HTTP/1.1 Content-Type: text/xml; charset=utf-8 SOAPAction: "http://tempuri.org/Endpoint/GetArguments" Host: 45.137.155.31:11556 Content-Length: 137 Expect: 100-continue Accept-Encoding: gzip, deflate
Aug 3, 2021 23:09:07.924712896 CEST	8976	IN	HTTP/1.1 100 Continue
Aug 3, 2021 23:09:08.008780003 CEST	9216	IN	HTTP/1.1 500 Internal Server Error Content-Length: 738 Content-Type: text/xml; charset=utf-8 Server: Microsoft-HTTPAPI/2.0 Date: Tue, 03 Aug 2021 21:09:07 GMT Data Raw: 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 73 3a 46 61 75 6c 74 3e 3c 66 61 75 6c 74 63 6f 64 65 20 78 6d 6c 6e 73 3a 61 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 77 73 2f 32 30 30 35 2f 30 35 2f 61 64 64 72 65 73 73 69 6e 67 2f 6e 6f 6e 65 22 3e 61 3a 41 63 74 69 6f 6e 4e 6f 74 53 75 70 70 6f 72 74 65 64 3c 2f 66 61 75 6c 74 63 6f 64 65 3e 3c 66 61 75 6c 74 73 74 72 69 6e 67 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 54 68 65 20 6d 65 73 73 61 67 65 20 77 69 74 68 20 41 63 74 69 6f 6e 20 27 68 74 74 70 3a 2f 2f 74 65 6d 70 75 72 69 2e 6f 72 67 2f 45 6e 64 70 6f 69 6e 74 2f 47 65 74 41 72 67 75 6d 65 6e 74 73 27 20 63 61 6e 6e 6f 74 20 62 65 20 70 72 6f 63 65 73 73 65 64 20 61 74 20 74 68 65 20 72 65 63 65 69 76 65 72 2c 20 64 75 65 20 74 6f 20 61 20 43 6f 6e 74 72 61 63 74 46 69 6c 74 65 72 20 6d 69 73 6d 61 74 63 68 20 61 74 20 74 68 65 20 45 6e 64 70 6f 69 6e 74 44 69 73 70 61 74 63 68 65 72 2e 20 54 68 69 73 20 6d 61 79 20 62 65 20 62 65 63 61 75 73 65 20 6f 66 20 65 69 74 68 65 72 20 61 20 63 6f 6e 74 72 61 63 74 20 6d 69 73 6d 61 74 63 68 20 28 6d 69 73 6d 61 74 63 68 65 64 20 41 63 74 69 6f 6e 73 20 62 65 74 77 65 65 6e 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 29 20 6f 72 20 61 20 62 69 6e 64 69 6e 67 2f 73 65 63 75 72 69 74 79 20 6d 69 73 6d 61 74 63 68 20 62 65 74 77 65 65 6e 20 74 68 65 20 73 65 6e 64 65 72 20 61 6e 64 20 74 68 65 20 72 65 63 65 69 76 65 72 2e 20 20 43 68 65 63 6b 20 74 68 61 74 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 20 68 61 76 65 20 74 68 65 20 73 61 6d 65 20 63 6f 6e 74 72 61 63 74 20 61 6e 64 20 74 68 65 20 73 61 6d 65 20 62 69 6e 64 69 6e 67 20 28 69 6e 63 6c 75 64 69 6e 67 20 73 65 63 75 72 69 74 79 20 72 65 71 75 69 72 65 6d 65 6e 74 73 2c 20 65 2e 67 2e 20 4d 65 73 73 61 67 65 2c 20 54 72 61 6e 73 70 6f 72 74 2c 20 4e 6f 6e 65 29 2e 3c 2f 66 61 75 6c 74 73 74 72 69 6e 67 3e 3c 2f 73 3a 46 61 75 6c 74 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/"><s:Body><s:Fault><faultcode xmlns:a="http://schemas.microsoft.com/ws/2005/05/addressing/none">a:ActionNotSupported</faultcode><faultstring xml:lang="en-US">The message with Action 'http://tempuri.org/Endpoint/GetArguments' cannot be processed at the receiver, due to a ContractFilter mismatch at the EndpointDispatcher. This may be because of either a contract mismatch (mismatched Actions between sender and receiver) or a binding/security mismatch between the sender and the receiver. Check that sender and receiver have the same contract and the same binding (including security requirements, e.g. Message, Transport, None).</faultstring></s:Fault></s:Body></s:Envelope>
Aug 3, 2021 23:09:09.027188063 CEST	10617	OUT	POST / HTTP/1.1 Content-Type: text/xml; charset=utf-8 SOAPAction: "http://tempuri.org/Endpoint/GetArguments" Host: 45.137.155.31:11556 Content-Length: 137 Expect: 100-continue Accept-Encoding: gzip, deflate
Aug 3, 2021 23:09:09.113158941 CEST	10617	IN	HTTP/1.1 100 Continue
Aug 3, 2021 23:09:09.182266951 CEST	10618	IN	HTTP/1.1 500 Internal Server Error Content-Length: 738 Content-Type: text/xml; charset=utf-8 Server: Microsoft-HTTPAPI/2.0 Date: Tue, 03 Aug 2021 21:09:08 GMT Data Raw: 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 73 3a 46 61 75 6c 74 3e 3c 66 61 75 6c 74 63 6f 64 65 20 78 6d 6c 6e 73 3a 61 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 77 73 2f 32 30 30 35 2f 30 35 2f 61 64 64 72 65 73 73 69 6e 67 2f 6e 6f 6e 65 22 3e 61 3a 41 63 74 69 6f 6e 4e 6f 74 53 75 70 70 6f 72 74 65 64 3c 2f 66 61 75 6c 74 63 6f 64 65 3e 3c 66 61 75 6c 74 73 74 72 69 6e 67 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 54 68 65 20 6d 65 73 73 61 67 65 20 77 69 74 68 20 41 63 74 69 6f 6e 20 27 68 74 74 70 3a 2f 2f 74 65 6d 70 75 72 69 2e 6f 72 67 2f 45 6e 64 70 6f 69 6e 74 2f 47 65 74 41 72 67 75 6d 65 6e 74 73 27 20 63 61 6e 6e 6f 74 20 62 65 20 70 72 6f 63 65 73 73 65 64 20 61 74 20 74 68 65 20 72 65 63 65 69 76 65 72 2c 20 64 75 65 20 74 6f 20 61 20 43 6f 6e 74 72 61 63 74 46 69 6c 74 65 72 20 6d 69 73 6d 61 74 63 68 20 61 74 20 74 68 65 20 45 6e 64 70 6f 69 6e 74 44 69 73 70 61 74 63 68 65 72 2e 20 54 68 69 73 20 6d 61 79 20 62 65 20 62 65 63 61 75 73 65 20 6f 66 20 65 69 74 68 65 72 20 61 20 63 6f 6e 74 72 61 63 74 20 6d 69 73 6d 61 74 63 68 20 28 6d 69 73 6d 61 74 63 68 65 64 20 41 63 74 69 6f 6e 73 20 62 65 74 77 65 65 6e 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 29 20 6f 72 20 61 20 62 69 6e 64 69 6e 67 2f 73 65 63 75 72 69 74 79 20 6d 69 73 6d 61 74 63 68 20 62 65 74 77 65 65 6e 20 74 68 65 20 73 65 6e 64 65 72 20 61 6e 64 20 74 68 65 20 72 65 63 65 69 76 65 72 2e 20 20 43 68 65 63 6b 20 74 68 61 74 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 20 68 61 76 65 20 74 68 65 20 73 61 6d 65 20 63 6f 6e 74 72 61 63 74 20 61 6e 64 20 74 68 65 20 73 61 6d 65 20 62 69 6e 64 69 6e 67 20 28 69 6e 63 6c 75 64 69 6e 67 20 73 65 63 75 72 69 74 79 20 72 65 71 75 69 72 65 6d 65 6e 74 73 2c 20 65 2e 67 2e 20 4d 65 73 73 61 67 65 2c 20 54 72 61 6e 73 70 6f 72 74 2c 20 4e 6f 6e 65 29 2e 3c 2f 66 61 75 6c 74 73 74 72 69 6e 67 3e 3c 2f 73 3a 46 61 75 6c 74 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/"><s:Body><s:Fault><faultcode xmlns:a="http://schemas.microsoft.com/ws/2005/05/addressing/none">a:ActionNotSupported</faultcode><faultstring xml:lang="en-US">The message with Action 'http://tempuri.org/Endpoint/GetArguments' cannot be processed at the receiver, due to a ContractFilter mismatch at the EndpointDispatcher. This may be because of either a contract mismatch (mismatched Actions between sender and receiver) or a binding/security mismatch between the sender and the receiver. Check that sender and receiver have the same contract and the same binding (including security requirements, e.g. Message, Transport, None).</faultstring></s:Fault></s:Body></s:Envelope>
Aug 3, 2021 23:09:10.198681116 CEST	10618	OUT	POST / HTTP/1.1 Content-Type: text/xml; charset=utf-8 SOAPAction: "http://tempuri.org/Endpoint/GetArguments" Host: 45.137.155.31:11556 Content-Length: 137 Expect: 100-continue Accept-Encoding: gzip, deflate
Aug 3, 2021 23:09:10.296838999 CEST	10618	IN	HTTP/1.1 100 Continue
Aug 3, 2021 23:09:10.368463039 CEST	10620	IN	HTTP/1.1 500 Internal Server Error Content-Length: 738 Content-Type: text/xml; charset=utf-8 Server: Microsoft-HTTPAPI/2.0 Date: Tue, 03 Aug 2021 21:09:09 GMT Data Raw: 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 73 3a 46 61 75 6c 74 3e 3c 66 61 75 6c 74 63 6f 64 65 20 78 6d 6c 6e 73 3a 61 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 77 73 2f 32 30 30 35 2f 30 35 2f 61 64 64 72 65 73 73 69 6e 67 2f 6e 6f 6e 65 22 3e 61 3a 41 63 74 69 6f 6e 4e 6f 74 53 75 70 70 6f 72 74 65 64 3c 2f 66 61 75 6c 74 63 6f 64 65 3e 3c 66 61 75 6c 74 73 74 72 69 6e 67 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 54 68 65 20 6d 65 73 73 61 67 65 20 77 69 74 68 20 41 63 74 69 6f 6e 20 27 68 74 74 70 3a 2f 2f 74 65 6d 70 75 72 69 2e 6f 72 67 2f 45 6e 64 70 6f 69 6e 74 2f 47 65 74 41 72 67 75 6d 65 6e 74 73 27 20 63 61 6e 6e 6f 74 20 62 65 20 70 72 6f 63 65 73 73 65 64 20 61 74 20 74 68 65 20 72 65 63 65 69 76 65 72 2c 20 64 75 65 20 74 6f 20 61 20 43 6f 6e 74 72 61 63 74 46 69 6c 74 65 72 20 6d 69 73 6d 61 74 63 68 20 61 74 20 74 68 65 20 45 6e 64 70 6f 69 6e 74 44 69 73 70 61 74 63 68 65 72 2e 20 54 68 69 73 20 6d 61 79 20 62 65 20 62 65 63 61 75 73 65 20 6f 66 20 65 69 74 68 65 72 20 61 20 63 6f 6e 74 72 61 63 74 20 6d 69 73 6d 61 74 63 68 20 28 6d 69 73 6d 61 74 63 68 65 64 20 41 63 74 69 6f 6e 73 20 62 65 74 77 65 65 6e 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 29 20 6f 72 20 61 20 62 69 6e 64 69 6e 67 2f 73 65 63 75 72 69 74 79 20 6d 69 73 6d 61 74 63 68 20 62 65 74 77 65 65 6e 20 74 68 65 20 73 65 6e 64 65 72 20 61 6e 64 20 74 68 65 20 72 65 63 65 69 76 65 72 2e 20 20 43 68 65 63 6b 20 74 68 61 74 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 20 68 61 76 65 20 74 68 65 20 73 61 6d 65 20 63 6f 6e 74 72 61 63 74 20 61 6e 64 20 74 68 65 20 73 61 6d 65 20 62 69 6e 64 69 6e 67 20 28 69 6e 63 6c 75 64 69 6e 67 20 73 65 63 75 72 69 74 79 20 72 65 71 75 69 72 65 6d 65 6e 74 73 2c 20 65 2e 67 2e 20 4d 65 73 73 61 67 65 2c 20 54 72 61 6e 73 70 6f 72 74 2c 20 4e 6f 6e 65 29 2e 3c 2f 66 61 75 6c 74 73 74 72 69 6e 67 3e 3c 2f 73 3a 46 61 75 6c 74 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/"><s:Body><s:Fault><faultcode xmlns:a="http://schemas.microsoft.com/ws/2005/05/addressing/none">a:ActionNotSupported</faultcode><faultstring xml:lang="en-US">The message with Action 'http://tempuri.org/Endpoint/GetArguments' cannot be processed at the receiver, due to a ContractFilter mismatch at the EndpointDispatcher. This may be because of either a contract mismatch (mismatched Actions between sender and receiver) or a binding/security mismatch between the sender and the receiver. Check that sender and receiver have the same contract and the same binding (including security requirements, e.g. Message, Transport, None).</faultstring></s:Fault></s:Body></s:Envelope>
Aug 3, 2021 23:09:11.385880947 CEST	10620	OUT	POST / HTTP/1.1 Content-Type: text/xml; charset=utf-8 SOAPAction: "http://tempuri.org/Endpoint/GetArguments" Host: 45.137.155.31:11556 Content-Length: 137 Expect: 100-continue Accept-Encoding: gzip, deflate
Aug 3, 2021 23:09:11.456250906 CEST	10620	IN	HTTP/1.1 100 Continue
Aug 3, 2021 23:09:11.526104927 CEST	10621	IN	HTTP/1.1 500 Internal Server Error Content-Length: 738 Content-Type: text/xml; charset=utf-8 Server: Microsoft-HTTPAPI/2.0 Date: Tue, 03 Aug 2021 21:09:11 GMT Data Raw: 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 73 3a 46 61 75 6c 74 3e 3c 66 61 75 6c 74 63 6f 64 65 20 78 6d 6c 6e 73 3a 61 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 77 73 2f 32 30 30 35 2f 30 35 2f 61 64 64 72 65 73 73 69 6e 67 2f 6e 6f 6e 65 22 3e 61 3a 41 63 74 69 6f 6e 4e 6f 74 53 75 70 70 6f 72 74 65 64 3c 2f 66 61 75 6c 74 63 6f 64 65 3e 3c 66 61 75 6c 74 73 74 72 69 6e 67 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 54 68 65 20 6d 65 73 73 61 67 65 20 77 69 74 68 20 41 63 74 69 6f 6e 20 27 68 74 74 70 3a 2f 2f 74 65 6d 70 75 72 69 2e 6f 72 67 2f 45 6e 64 70 6f 69 6e 74 2f 47 65 74 41 72 67 75 6d 65 6e 74 73 27 20 63 61 6e 6e 6f 74 20 62 65 20 70 72 6f 63 65 73 73 65 64 20 61 74 20 74 68 65 20 72 65 63 65 69 76 65 72 2c 20 64 75 65 20 74 6f 20 61 20 43 6f 6e 74 72 61 63 74 46 69 6c 74 65 72 20 6d 69 73 6d 61 74 63 68 20 61 74 20 74 68 65 20 45 6e 64 70 6f 69 6e 74 44 69 73 70 61 74 63 68 65 72 2e 20 54 68 69 73 20 6d 61 79 20 62 65 20 62 65 63 61 75 73 65 20 6f 66 20 65 69 74 68 65 72 20 61 20 63 6f 6e 74 72 61 63 74 20 6d 69 73 6d 61 74 63 68 20 28 6d 69 73 6d 61 74 63 68 65 64 20 41 63 74 69 6f 6e 73 20 62 65 74 77 65 65 6e 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 29 20 6f 72 20 61 20 62 69 6e 64 69 6e 67 2f 73 65 63 75 72 69 74 79 20 6d 69 73 6d 61 74 63 68 20 62 65 74 77 65 65 6e 20 74 68 65 20 73 65 6e 64 65 72 20 61 6e 64 20 74 68 65 20 72 65 63 65 69 76 65 72 2e 20 20 43 68 65 63 6b 20 74 68 61 74 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 20 68 61 76 65 20 74 68 65 20 73 61 6d 65 20 63 6f 6e 74 72 61 63 74 20 61 6e 64 20 74 68 65 20 73 61 6d 65 20 62 69 6e 64 69 6e 67 20 28 69 6e 63 6c 75 64 69 6e 67 20 73 65 63 75 72 69 74 79 20 72 65 71 75 69 72 65 6d 65 6e 74 73 2c 20 65 2e 67 2e 20 4d 65 73 73 61 67 65 2c 20 54 72 61 6e 73 70 6f 72 74 2c 20 4e 6f 6e 65 29 2e 3c 2f 66 61 75 6c 74 73 74 72 69 6e 67 3e 3c 2f 73 3a 46 61 75 6c 74 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/"><s:Body><s:Fault><faultcode xmlns:a="http://schemas.microsoft.com/ws/2005/05/addressing/none">a:ActionNotSupported</faultcode><faultstring xml:lang="en-US">The message with Action 'http://tempuri.org/Endpoint/GetArguments' cannot be processed at the receiver, due to a ContractFilter mismatch at the EndpointDispatcher. This may be because of either a contract mismatch (mismatched Actions between sender and receiver) or a binding/security mismatch between the sender and the receiver. Check that sender and receiver have the same contract and the same binding (including security requirements, e.g. Message, Transport, None).</faultstring></s:Fault></s:Body></s:Envelope>
Aug 3, 2021 23:09:12.542252064 CEST	10621	OUT	POST / HTTP/1.1 Content-Type: text/xml; charset=utf-8 SOAPAction: "http://tempuri.org/Endpoint/GetArguments" Host: 45.137.155.31:11556 Content-Length: 137 Expect: 100-continue Accept-Encoding: gzip, deflate
Aug 3, 2021 23:09:12.611979008 CEST	10621	IN	HTTP/1.1 100 Continue
Aug 3, 2021 23:09:12.683219910 CEST	10623	IN	HTTP/1.1 500 Internal Server Error Content-Length: 738 Content-Type: text/xml; charset=utf-8 Server: Microsoft-HTTPAPI/2.0 Date: Tue, 03 Aug 2021 21:09:12 GMT Data Raw: 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 73 3a 46 61 75 6c 74 3e 3c 66 61 75 6c 74 63 6f 64 65 20 78 6d 6c 6e 73 3a 61 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 77 73 2f 32 30 30 35 2f 30 35 2f 61 64 64 72 65 73 73 69 6e 67 2f 6e 6f 6e 65 22 3e 61 3a 41 63 74 69 6f 6e 4e 6f 74 53 75 70 70 6f 72 74 65 64 3c 2f 66 61 75 6c 74 63 6f 64 65 3e 3c 66 61 75 6c 74 73 74 72 69 6e 67 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 54 68 65 20 6d 65 73 73 61 67 65 20 77 69 74 68 20 41 63 74 69 6f 6e 20 27 68 74 74 70 3a 2f 2f 74 65 6d 70 75 72 69 2e 6f 72 67 2f 45 6e 64 70 6f 69 6e 74 2f 47 65 74 41 72 67 75 6d 65 6e 74 73 27 20 63 61 6e 6e 6f 74 20 62 65 20 70 72 6f 63 65 73 73 65 64 20 61 74 20 74 68 65 20 72 65 63 65 69 76 65 72 2c 20 64 75 65 20 74 6f 20 61 20 43 6f 6e 74 72 61 63 74 46 69 6c 74 65 72 20 6d 69 73 6d 61 74 63 68 20 61 74 20 74 68 65 20 45 6e 64 70 6f 69 6e 74 44 69 73 70 61 74 63 68 65 72 2e 20 54 68 69 73 20 6d 61 79 20 62 65 20 62 65 63 61 75 73 65 20 6f 66 20 65 69 74 68 65 72 20 61 20 63 6f 6e 74 72 61 63 74 20 6d 69 73 6d 61 74 63 68 20 28 6d 69 73 6d 61 74 63 68 65 64 20 41 63 74 69 6f 6e 73 20 62 65 74 77 65 65 6e 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 29 20 6f 72 20 61 20 62 69 6e 64 69 6e 67 2f 73 65 63 75 72 69 74 79 20 6d 69 73 6d 61 74 63 68 20 62 65 74 77 65 65 6e 20 74 68 65 20 73 65 6e 64 65 72 20 61 6e 64 20 74 68 65 20 72 65 63 65 69 76 65 72 2e 20 20 43 68 65 63 6b 20 74 68 61 74 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 20 68 61 76 65 20 74 68 65 20 73 61 6d 65 20 63 6f 6e 74 72 61 63 74 20 61 6e 64 20 74 68 65 20 73 61 6d 65 20 62 69 6e 64 69 6e 67 20 28 69 6e 63 6c 75 64 69 6e 67 20 73 65 63 75 72 69 74 79 20 72 65 71 75 69 72 65 6d 65 6e 74 73 2c 20 65 2e 67 2e 20 4d 65 73 73 61 67 65 2c 20 54 72 61 6e 73 70 6f 72 74 2c 20 4e 6f 6e 65 29 2e 3c 2f 66 61 75 6c 74 73 74 72 69 6e 67 3e 3c 2f 73 3a 46 61 75 6c 74 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/"><s:Body><s:Fault><faultcode xmlns:a="http://schemas.microsoft.com/ws/2005/05/addressing/none">a:ActionNotSupported</faultcode><faultstring xml:lang="en-US">The message with Action 'http://tempuri.org/Endpoint/GetArguments' cannot be processed at the receiver, due to a ContractFilter mismatch at the EndpointDispatcher. This may be because of either a contract mismatch (mismatched Actions between sender and receiver) or a binding/security mismatch between the sender and the receiver. Check that sender and receiver have the same contract and the same binding (including security requirements, e.g. Message, Transport, None).</faultstring></s:Fault></s:Body></s:Envelope>
Aug 3, 2021 23:09:13.703249931 CEST	10623	OUT	POST / HTTP/1.1 Content-Type: text/xml; charset=utf-8 SOAPAction: "http://tempuri.org/Endpoint/GetArguments" Host: 45.137.155.31:11556 Content-Length: 137 Expect: 100-continue Accept-Encoding: gzip, deflate
Aug 3, 2021 23:09:13.796703100 CEST	10623	IN	HTTP/1.1 100 Continue
Aug 3, 2021 23:09:13.889261961 CEST	10624	IN	HTTP/1.1 500 Internal Server Error Content-Length: 738 Content-Type: text/xml; charset=utf-8 Server: Microsoft-HTTPAPI/2.0 Date: Tue, 03 Aug 2021 21:09:13 GMT Data Raw: 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 73 3a 46 61 75 6c 74 3e 3c 66 61 75 6c 74 63 6f 64 65 20 78 6d 6c 6e 73 3a 61 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 77 73 2f 32 30 30 35 2f 30 35 2f 61 64 64 72 65 73 73 69 6e 67 2f 6e 6f 6e 65 22 3e 61 3a 41 63 74 69 6f 6e 4e 6f 74 53 75 70 70 6f 72 74 65 64 3c 2f 66 61 75 6c 74 63 6f 64 65 3e 3c 66 61 75 6c 74 73 74 72 69 6e 67 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 54 68 65 20 6d 65 73 73 61 67 65 20 77 69 74 68 20 41 63 74 69 6f 6e 20 27 68 74 74 70 3a 2f 2f 74 65 6d 70 75 72 69 2e 6f 72 67 2f 45 6e 64 70 6f 69 6e 74 2f 47 65 74 41 72 67 75 6d 65 6e 74 73 27 20 63 61 6e 6e 6f 74 20 62 65 20 70 72 6f 63 65 73 73 65 64 20 61 74 20 74 68 65 20 72 65 63 65 69 76 65 72 2c 20 64 75 65 20 74 6f 20 61 20 43 6f 6e 74 72 61 63 74 46 69 6c 74 65 72 20 6d 69 73 6d 61 74 63 68 20 61 74 20 74 68 65 20 45 6e 64 70 6f 69 6e 74 44 69 73 70 61 74 63 68 65 72 2e 20 54 68 69 73 20 6d 61 79 20 62 65 20 62 65 63 61 75 73 65 20 6f 66 20 65 69 74 68 65 72 20 61 20 63 6f 6e 74 72 61 63 74 20 6d 69 73 6d 61 74 63 68 20 28 6d 69 73 6d 61 74 63 68 65 64 20 41 63 74 69 6f 6e 73 20 62 65 74 77 65 65 6e 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 29 20 6f 72 20 61 20 62 69 6e 64 69 6e 67 2f 73 65 63 75 72 69 74 79 20 6d 69 73 6d 61 74 63 68 20 62 65 74 77 65 65 6e 20 74 68 65 20 73 65 6e 64 65 72 20 61 6e 64 20 74 68 65 20 72 65 63 65 69 76 65 72 2e 20 20 43 68 65 63 6b 20 74 68 61 74 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 20 68 61 76 65 20 74 68 65 20 73 61 6d 65 20 63 6f 6e 74 72 61 63 74 20 61 6e 64 20 74 68 65 20 73 61 6d 65 20 62 69 6e 64 69 6e 67 20 28 69 6e 63 6c 75 64 69 6e 67 20 73 65 63 75 72 69 74 79 20 72 65 71 75 69 72 65 6d 65 6e 74 73 2c 20 65 2e 67 2e 20 4d 65 73 73 61 67 65 2c 20 54 72 61 6e 73 70 6f 72 74 2c 20 4e 6f 6e 65 29 2e 3c 2f 66 61 75 6c 74 73 74 72 69 6e 67 3e 3c 2f 73 3a 46 61 75 6c 74 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/"><s:Body><s:Fault><faultcode xmlns:a="http://schemas.microsoft.com/ws/2005/05/addressing/none">a:ActionNotSupported</faultcode><faultstring xml:lang="en-US">The message with Action 'http://tempuri.org/Endpoint/GetArguments' cannot be processed at the receiver, due to a ContractFilter mismatch at the EndpointDispatcher. This may be because of either a contract mismatch (mismatched Actions between sender and receiver) or a binding/security mismatch between the sender and the receiver. Check that sender and receiver have the same contract and the same binding (including security requirements, e.g. Message, Transport, None).</faultstring></s:Fault></s:Body></s:Envelope>
Aug 3, 2021 23:09:14.902769089 CEST	10624	OUT	POST / HTTP/1.1 Content-Type: text/xml; charset=utf-8 SOAPAction: "http://tempuri.org/Endpoint/GetArguments" Host: 45.137.155.31:11556 Content-Length: 137 Expect: 100-continue Accept-Encoding: gzip, deflate
Aug 3, 2021 23:09:14.971916914 CEST	10624	IN	HTTP/1.1 100 Continue
Aug 3, 2021 23:09:15.041310072 CEST	10626	IN	HTTP/1.1 500 Internal Server Error Content-Length: 738 Content-Type: text/xml; charset=utf-8 Server: Microsoft-HTTPAPI/2.0 Date: Tue, 03 Aug 2021 21:09:14 GMT Data Raw: 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 73 3a 46 61 75 6c 74 3e 3c 66 61 75 6c 74 63 6f 64 65 20 78 6d 6c 6e 73 3a 61 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 77 73 2f 32 30 30 35 2f 30 35 2f 61 64 64 72 65 73 73 69 6e 67 2f 6e 6f 6e 65 22 3e 61 3a 41 63 74 69 6f 6e 4e 6f 74 53 75 70 70 6f 72 74 65 64 3c 2f 66 61 75 6c 74 63 6f 64 65 3e 3c 66 61 75 6c 74 73 74 72 69 6e 67 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 54 68 65 20 6d 65 73 73 61 67 65 20 77 69 74 68 20 41 63 74 69 6f 6e 20 27 68 74 74 70 3a 2f 2f 74 65 6d 70 75 72 69 2e 6f 72 67 2f 45 6e 64 70 6f 69 6e 74 2f 47 65 74 41 72 67 75 6d 65 6e 74 73 27 20 63 61 6e 6e 6f 74 20 62 65 20 70 72 6f 63 65 73 73 65 64 20 61 74 20 74 68 65 20 72 65 63 65 69 76 65 72 2c 20 64 75 65 20 74 6f 20 61 20 43 6f 6e 74 72 61 63 74 46 69 6c 74 65 72 20 6d 69 73 6d 61 74 63 68 20 61 74 20 74 68 65 20 45 6e 64 70 6f 69 6e 74 44 69 73 70 61 74 63 68 65 72 2e 20 54 68 69 73 20 6d 61 79 20 62 65 20 62 65 63 61 75 73 65 20 6f 66 20 65 69 74 68 65 72 20 61 20 63 6f 6e 74 72 61 63 74 20 6d 69 73 6d 61 74 63 68 20 28 6d 69 73 6d 61 74 63 68 65 64 20 41 63 74 69 6f 6e 73 20 62 65 74 77 65 65 6e 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 29 20 6f 72 20 61 20 62 69 6e 64 69 6e 67 2f 73 65 63 75 72 69 74 79 20 6d 69 73 6d 61 74 63 68 20 62 65 74 77 65 65 6e 20 74 68 65 20 73 65 6e 64 65 72 20 61 6e 64 20 74 68 65 20 72 65 63 65 69 76 65 72 2e 20 20 43 68 65 63 6b 20 74 68 61 74 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 20 68 61 76 65 20 74 68 65 20 73 61 6d 65 20 63 6f 6e 74 72 61 63 74 20 61 6e 64 20 74 68 65 20 73 61 6d 65 20 62 69 6e 64 69 6e 67 20 28 69 6e 63 6c 75 64 69 6e 67 20 73 65 63 75 72 69 74 79 20 72 65 71 75 69 72 65 6d 65 6e 74 73 2c 20 65 2e 67 2e 20 4d 65 73 73 61 67 65 2c 20 54 72 61 6e 73 70 6f 72 74 2c 20 4e 6f 6e 65 29 2e 3c 2f 66 61 75 6c 74 73 74 72 69 6e 67 3e 3c 2f 73 3a 46 61 75 6c 74 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/"><s:Body><s:Fault><faultcode xmlns:a="http://schemas.microsoft.com/ws/2005/05/addressing/none">a:ActionNotSupported</faultcode><faultstring xml:lang="en-US">The message with Action 'http://tempuri.org/Endpoint/GetArguments' cannot be processed at the receiver, due to a ContractFilter mismatch at the EndpointDispatcher. This may be because of either a contract mismatch (mismatched Actions between sender and receiver) or a binding/security mismatch between the sender and the receiver. Check that sender and receiver have the same contract and the same binding (including security requirements, e.g. Message, Transport, None).</faultstring></s:Fault></s:Body></s:Envelope>
Aug 3, 2021 23:09:16.058588982 CEST	10626	OUT	POST / HTTP/1.1 Content-Type: text/xml; charset=utf-8 SOAPAction: "http://tempuri.org/Endpoint/GetArguments" Host: 45.137.155.31:11556 Content-Length: 137 Expect: 100-continue Accept-Encoding: gzip, deflate
Aug 3, 2021 23:09:16.130131960 CEST	10626	IN	HTTP/1.1 100 Continue
Aug 3, 2021 23:09:16.205310106 CEST	10627	IN	HTTP/1.1 500 Internal Server Error Content-Length: 738 Content-Type: text/xml; charset=utf-8 Server: Microsoft-HTTPAPI/2.0 Date: Tue, 03 Aug 2021 21:09:15 GMT Data Raw: 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 73 3a 46 61 75 6c 74 3e 3c 66 61 75 6c 74 63 6f 64 65 20 78 6d 6c 6e 73 3a 61 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 77 73 2f 32 30 30 35 2f 30 35 2f 61 64 64 72 65 73 73 69 6e 67 2f 6e 6f 6e 65 22 3e 61 3a 41 63 74 69 6f 6e 4e 6f 74 53 75 70 70 6f 72 74 65 64 3c 2f 66 61 75 6c 74 63 6f 64 65 3e 3c 66 61 75 6c 74 73 74 72 69 6e 67 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 54 68 65 20 6d 65 73 73 61 67 65 20 77 69 74 68 20 41 63 74 69 6f 6e 20 27 68 74 74 70 3a 2f 2f 74 65 6d 70 75 72 69 2e 6f 72 67 2f 45 6e 64 70 6f 69 6e 74 2f 47 65 74 41 72 67 75 6d 65 6e 74 73 27 20 63 61 6e 6e 6f 74 20 62 65 20 70 72 6f 63 65 73 73 65 64 20 61 74 20 74 68 65 20 72 65 63 65 69 76 65 72 2c 20 64 75 65 20 74 6f 20 61 20 43 6f 6e 74 72 61 63 74 46 69 6c 74 65 72 20 6d 69 73 6d 61 74 63 68 20 61 74 20 74 68 65 20 45 6e 64 70 6f 69 6e 74 44 69 73 70 61 74 63 68 65 72 2e 20 54 68 69 73 20 6d 61 79 20 62 65 20 62 65 63 61 75 73 65 20 6f 66 20 65 69 74 68 65 72 20 61 20 63 6f 6e 74 72 61 63 74 20 6d 69 73 6d 61 74 63 68 20 28 6d 69 73 6d 61 74 63 68 65 64 20 41 63 74 69 6f 6e 73 20 62 65 74 77 65 65 6e 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 29 20 6f 72 20 61 20 62 69 6e 64 69 6e 67 2f 73 65 63 75 72 69 74 79 20 6d 69 73 6d 61 74 63 68 20 62 65 74 77 65 65 6e 20 74 68 65 20 73 65 6e 64 65 72 20 61 6e 64 20 74 68 65 20 72 65 63 65 69 76 65 72 2e 20 20 43 68 65 63 6b 20 74 68 61 74 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 20 68 61 76 65 20 74 68 65 20 73 61 6d 65 20 63 6f 6e 74 72 61 63 74 20 61 6e 64 20 74 68 65 20 73 61 6d 65 20 62 69 6e 64 69 6e 67 20 28 69 6e 63 6c 75 64 69 6e 67 20 73 65 63 75 72 69 74 79 20 72 65 71 75 69 72 65 6d 65 6e 74 73 2c 20 65 2e 67 2e 20 4d 65 73 73 61 67 65 2c 20 54 72 61 6e 73 70 6f 72 74 2c 20 4e 6f 6e 65 29 2e 3c 2f 66 61 75 6c 74 73 74 72 69 6e 67 3e 3c 2f 73 3a 46 61 75 6c 74 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/"><s:Body><s:Fault><faultcode xmlns:a="http://schemas.microsoft.com/ws/2005/05/addressing/none">a:ActionNotSupported</faultcode><faultstring xml:lang="en-US">The message with Action 'http://tempuri.org/Endpoint/GetArguments' cannot be processed at the receiver, due to a ContractFilter mismatch at the EndpointDispatcher. This may be because of either a contract mismatch (mismatched Actions between sender and receiver) or a binding/security mismatch between the sender and the receiver. Check that sender and receiver have the same contract and the same binding (including security requirements, e.g. Message, Transport, None).</faultstring></s:Fault></s:Body></s:Envelope>
Aug 3, 2021 23:09:17.215059996 CEST	10627	OUT	POST / HTTP/1.1 Content-Type: text/xml; charset=utf-8 SOAPAction: "http://tempuri.org/Endpoint/GetArguments" Host: 45.137.155.31:11556 Content-Length: 137 Expect: 100-continue Accept-Encoding: gzip, deflate
Aug 3, 2021 23:09:17.283859015 CEST	10628	IN	HTTP/1.1 100 Continue
Aug 3, 2021 23:09:17.355427027 CEST	10629	IN	HTTP/1.1 500 Internal Server Error Content-Length: 738 Content-Type: text/xml; charset=utf-8 Server: Microsoft-HTTPAPI/2.0 Date: Tue, 03 Aug 2021 21:09:16 GMT Data Raw: 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 73 3a 46 61 75 6c 74 3e 3c 66 61 75 6c 74 63 6f 64 65 20 78 6d 6c 6e 73 3a 61 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 77 73 2f 32 30 30 35 2f 30 35 2f 61 64 64 72 65 73 73 69 6e 67 2f 6e 6f 6e 65 22 3e 61 3a 41 63 74 69 6f 6e 4e 6f 74 53 75 70 70 6f 72 74 65 64 3c 2f 66 61 75 6c 74 63 6f 64 65 3e 3c 66 61 75 6c 74 73 74 72 69 6e 67 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 54 68 65 20 6d 65 73 73 61 67 65 20 77 69 74 68 20 41 63 74 69 6f 6e 20 27 68 74 74 70 3a 2f 2f 74 65 6d 70 75 72 69 2e 6f 72 67 2f 45 6e 64 70 6f 69 6e 74 2f 47 65 74 41 72 67 75 6d 65 6e 74 73 27 20 63 61 6e 6e 6f 74 20 62 65 20 70 72 6f 63 65 73 73 65 64 20 61 74 20 74 68 65 20 72 65 63 65 69 76 65 72 2c 20 64 75 65 20 74 6f 20 61 20 43 6f 6e 74 72 61 63 74 46 69 6c 74 65 72 20 6d 69 73 6d 61 74 63 68 20 61 74 20 74 68 65 20 45 6e 64 70 6f 69 6e 74 44 69 73 70 61 74 63 68 65 72 2e 20 54 68 69 73 20 6d 61 79 20 62 65 20 62 65 63 61 75 73 65 20 6f 66 20 65 69 74 68 65 72 20 61 20 63 6f 6e 74 72 61 63 74 20 6d 69 73 6d 61 74 63 68 20 28 6d 69 73 6d 61 74 63 68 65 64 20 41 63 74 69 6f 6e 73 20 62 65 74 77 65 65 6e 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 29 20 6f 72 20 61 20 62 69 6e 64 69 6e 67 2f 73 65 63 75 72 69 74 79 20 6d 69 73 6d 61 74 63 68 20 62 65 74 77 65 65 6e 20 74 68 65 20 73 65 6e 64 65 72 20 61 6e 64 20 74 68 65 20 72 65 63 65 69 76 65 72 2e 20 20 43 68 65 63 6b 20 74 68 61 74 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 20 68 61 76 65 20 74 68 65 20 73 61 6d 65 20 63 6f 6e 74 72 61 63 74 20 61 6e 64 20 74 68 65 20 73 61 6d 65 20 62 69 6e 64 69 6e 67 20 28 69 6e 63 6c 75 64 69 6e 67 20 73 65 63 75 72 69 74 79 20 72 65 71 75 69 72 65 6d 65 6e 74 73 2c 20 65 2e 67 2e 20 4d 65 73 73 61 67 65 2c 20 54 72 61 6e 73 70 6f 72 74 2c 20 4e 6f 6e 65 29 2e 3c 2f 66 61 75 6c 74 73 74 72 69 6e 67 3e 3c 2f 73 3a 46 61 75 6c 74 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/"><s:Body><s:Fault><faultcode xmlns:a="http://schemas.microsoft.com/ws/2005/05/addressing/none">a:ActionNotSupported</faultcode><faultstring xml:lang="en-US">The message with Action 'http://tempuri.org/Endpoint/GetArguments' cannot be processed at the receiver, due to a ContractFilter mismatch at the EndpointDispatcher. This may be because of either a contract mismatch (mismatched Actions between sender and receiver) or a binding/security mismatch between the sender and the receiver. Check that sender and receiver have the same contract and the same binding (including security requirements, e.g. Message, Transport, None).</faultstring></s:Fault></s:Body></s:Envelope>
Aug 3, 2021 23:09:18.807960987 CEST	10629	OUT	POST / HTTP/1.1 Content-Type: text/xml; charset=utf-8 SOAPAction: "http://tempuri.org/Endpoint/GetArguments" Host: 45.137.155.31:11556 Content-Length: 137 Expect: 100-continue Accept-Encoding: gzip, deflate
Aug 3, 2021 23:09:18.878890991 CEST	10629	IN	HTTP/1.1 100 Continue
Aug 3, 2021 23:09:18.993797064 CEST	10630	IN	HTTP/1.1 500 Internal Server Error Content-Length: 738 Content-Type: text/xml; charset=utf-8 Server: Microsoft-HTTPAPI/2.0 Date: Tue, 03 Aug 2021 21:09:18 GMT Data Raw: 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 73 3a 46 61 75 6c 74 3e 3c 66 61 75 6c 74 63 6f 64 65 20 78 6d 6c 6e 73 3a 61 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 77 73 2f 32 30 30 35 2f 30 35 2f 61 64 64 72 65 73 73 69 6e 67 2f 6e 6f 6e 65 22 3e 61 3a 41 63 74 69 6f 6e 4e 6f 74 53 75 70 70 6f 72 74 65 64 3c 2f 66 61 75 6c 74 63 6f 64 65 3e 3c 66 61 75 6c 74 73 74 72 69 6e 67 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 54 68 65 20 6d 65 73 73 61 67 65 20 77 69 74 68 20 41 63 74 69 6f 6e 20 27 68 74 74 70 3a 2f 2f 74 65 6d 70 75 72 69 2e 6f 72 67 2f 45 6e 64 70 6f 69 6e 74 2f 47 65 74 41 72 67 75 6d 65 6e 74 73 27 20 63 61 6e 6e 6f 74 20 62 65 20 70 72 6f 63 65 73 73 65 64 20 61 74 20 74 68 65 20 72 65 63 65 69 76 65 72 2c 20 64 75 65 20 74 6f 20 61 20 43 6f 6e 74 72 61 63 74 46 69 6c 74 65 72 20 6d 69 73 6d 61 74 63 68 20 61 74 20 74 68 65 20 45 6e 64 70 6f 69 6e 74 44 69 73 70 61 74 63 68 65 72 2e 20 54 68 69 73 20 6d 61 79 20 62 65 20 62 65 63 61 75 73 65 20 6f 66 20 65 69 74 68 65 72 20 61 20 63 6f 6e 74 72 61 63 74 20 6d 69 73 6d 61 74 63 68 20 28 6d 69 73 6d 61 74 63 68 65 64 20 41 63 74 69 6f 6e 73 20 62 65 74 77 65 65 6e 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 29 20 6f 72 20 61 20 62 69 6e 64 69 6e 67 2f 73 65 63 75 72 69 74 79 20 6d 69 73 6d 61 74 63 68 20 62 65 74 77 65 65 6e 20 74 68 65 20 73 65 6e 64 65 72 20 61 6e 64 20 74 68 65 20 72 65 63 65 69 76 65 72 2e 20 20 43 68 65 63 6b 20 74 68 61 74 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 20 68 61 76 65 20 74 68 65 20 73 61 6d 65 20 63 6f 6e 74 72 61 63 74 20 61 6e 64 20 74 68 65 20 73 61 6d 65 20 62 69 6e 64 69 6e 67 20 28 69 6e 63 6c 75 64 69 6e 67 20 73 65 63 75 72 69 74 79 20 72 65 71 75 69 72 65 6d 65 6e 74 73 2c 20 65 2e 67 2e 20 4d 65 73 73 61 67 65 2c 20 54 72 61 6e 73 70 6f 72 74 2c 20 4e 6f 6e 65 29 2e 3c 2f 66 61 75 6c 74 73 74 72 69 6e 67 3e 3c 2f 73 3a 46 61 75 6c 74 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/"><s:Body><s:Fault><faultcode xmlns:a="http://schemas.microsoft.com/ws/2005/05/addressing/none">a:ActionNotSupported</faultcode><faultstring xml:lang="en-US">The message with Action 'http://tempuri.org/Endpoint/GetArguments' cannot be processed at the receiver, due to a ContractFilter mismatch at the EndpointDispatcher. This may be because of either a contract mismatch (mismatched Actions between sender and receiver) or a binding/security mismatch between the sender and the receiver. Check that sender and receiver have the same contract and the same binding (including security requirements, e.g. Message, Transport, None).</faultstring></s:Fault></s:Body></s:Envelope>
Aug 3, 2021 23:09:20.074364901 CEST	10631	OUT	POST / HTTP/1.1 Content-Type: text/xml; charset=utf-8 SOAPAction: "http://tempuri.org/Endpoint/GetArguments" Host: 45.137.155.31:11556 Content-Length: 137 Expect: 100-continue Accept-Encoding: gzip, deflate
Aug 3, 2021 23:09:20.144990921 CEST	10631	IN	HTTP/1.1 100 Continue
Aug 3, 2021 23:09:20.217818022 CEST	10632	IN	HTTP/1.1 500 Internal Server Error Content-Length: 738 Content-Type: text/xml; charset=utf-8 Server: Microsoft-HTTPAPI/2.0 Date: Tue, 03 Aug 2021 21:09:20 GMT Data Raw: 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 73 3a 46 61 75 6c 74 3e 3c 66 61 75 6c 74 63 6f 64 65 20 78 6d 6c 6e 73 3a 61 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 77 73 2f 32 30 30 35 2f 30 35 2f 61 64 64 72 65 73 73 69 6e 67 2f 6e 6f 6e 65 22 3e 61 3a 41 63 74 69 6f 6e 4e 6f 74 53 75 70 70 6f 72 74 65 64 3c 2f 66 61 75 6c 74 63 6f 64 65 3e 3c 66 61 75 6c 74 73 74 72 69 6e 67 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 54 68 65 20 6d 65 73 73 61 67 65 20 77 69 74 68 20 41 63 74 69 6f 6e 20 27 68 74 74 70 3a 2f 2f 74 65 6d 70 75 72 69 2e 6f 72 67 2f 45 6e 64 70 6f 69 6e 74 2f 47 65 74 41 72 67 75 6d 65 6e 74 73 27 20 63 61 6e 6e 6f 74 20 62 65 20 70 72 6f 63 65 73 73 65 64 20 61 74 20 74 68 65 20 72 65 63 65 69 76 65 72 2c 20 64 75 65 20 74 6f 20 61 20 43 6f 6e 74 72 61 63 74 46 69 6c 74 65 72 20 6d 69 73 6d 61 74 63 68 20 61 74 20 74 68 65 20 45 6e 64 70 6f 69 6e 74 44 69 73 70 61 74 63 68 65 72 2e 20 54 68 69 73 20 6d 61 79 20 62 65 20 62 65 63 61 75 73 65 20 6f 66 20 65 69 74 68 65 72 20 61 20 63 6f 6e 74 72 61 63 74 20 6d 69 73 6d 61 74 63 68 20 28 6d 69 73 6d 61 74 63 68 65 64 20 41 63 74 69 6f 6e 73 20 62 65 74 77 65 65 6e 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 29 20 6f 72 20 61 20 62 69 6e 64 69 6e 67 2f 73 65 63 75 72 69 74 79 20 6d 69 73 6d 61 74 63 68 20 62 65 74 77 65 65 6e 20 74 68 65 20 73 65 6e 64 65 72 20 61 6e 64 20 74 68 65 20 72 65 63 65 69 76 65 72 2e 20 20 43 68 65 63 6b 20 74 68 61 74 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 20 68 61 76 65 20 74 68 65 20 73 61 6d 65 20 63 6f 6e 74 72 61 63 74 20 61 6e 64 20 74 68 65 20 73 61 6d 65 20 62 69 6e 64 69 6e 67 20 28 69 6e 63 6c 75 64 69 6e 67 20 73 65 63 75 72 69 74 79 20 72 65 71 75 69 72 65 6d 65 6e 74 73 2c 20 65 2e 67 2e 20 4d 65 73 73 61 67 65 2c 20 54 72 61 6e 73 70 6f 72 74 2c 20 4e 6f 6e 65 29 2e 3c 2f 66 61 75 6c 74 73 74 72 69 6e 67 3e 3c 2f 73 3a 46 61 75 6c 74 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/"><s:Body><s:Fault><faultcode xmlns:a="http://schemas.microsoft.com/ws/2005/05/addressing/none">a:ActionNotSupported</faultcode><faultstring xml:lang="en-US">The message with Action 'http://tempuri.org/Endpoint/GetArguments' cannot be processed at the receiver, due to a ContractFilter mismatch at the EndpointDispatcher. This may be because of either a contract mismatch (mismatched Actions between sender and receiver) or a binding/security mismatch between the sender and the receiver. Check that sender and receiver have the same contract and the same binding (including security requirements, e.g. Message, Transport, None).</faultstring></s:Fault></s:Body></s:Envelope>
Aug 3, 2021 23:09:21.230635881 CEST	10632	OUT	POST / HTTP/1.1 Content-Type: text/xml; charset=utf-8 SOAPAction: "http://tempuri.org/Endpoint/GetArguments" Host: 45.137.155.31:11556 Content-Length: 137 Expect: 100-continue Accept-Encoding: gzip, deflate
Aug 3, 2021 23:09:21.299559116 CEST	10632	IN	HTTP/1.1 100 Continue
Aug 3, 2021 23:09:21.369700909 CEST	10633	IN	HTTP/1.1 500 Internal Server Error Content-Length: 738 Content-Type: text/xml; charset=utf-8 Server: Microsoft-HTTPAPI/2.0 Date: Tue, 03 Aug 2021 21:09:21 GMT Data Raw: 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 73 3a 46 61 75 6c 74 3e 3c 66 61 75 6c 74 63 6f 64 65 20 78 6d 6c 6e 73 3a 61 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 77 73 2f 32 30 30 35 2f 30 35 2f 61 64 64 72 65 73 73 69 6e 67 2f 6e 6f 6e 65 22 3e 61 3a 41 63 74 69 6f 6e 4e 6f 74 53 75 70 70 6f 72 74 65 64 3c 2f 66 61 75 6c 74 63 6f 64 65 3e 3c 66 61 75 6c 74 73 74 72 69 6e 67 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 54 68 65 20 6d 65 73 73 61 67 65 20 77 69 74 68 20 41 63 74 69 6f 6e 20 27 68 74 74 70 3a 2f 2f 74 65 6d 70 75 72 69 2e 6f 72 67 2f 45 6e 64 70 6f 69 6e 74 2f 47 65 74 41 72 67 75 6d 65 6e 74 73 27 20 63 61 6e 6e 6f 74 20 62 65 20 70 72 6f 63 65 73 73 65 64 20 61 74 20 74 68 65 20 72 65 63 65 69 76 65 72 2c 20 64 75 65 20 74 6f 20 61 20 43 6f 6e 74 72 61 63 74 46 69 6c 74 65 72 20 6d 69 73 6d 61 74 63 68 20 61 74 20 74 68 65 20 45 6e 64 70 6f 69 6e 74 44 69 73 70 61 74 63 68 65 72 2e 20 54 68 69 73 20 6d 61 79 20 62 65 20 62 65 63 61 75 73 65 20 6f 66 20 65 69 74 68 65 72 20 61 20 63 6f 6e 74 72 61 63 74 20 6d 69 73 6d 61 74 63 68 20 28 6d 69 73 6d 61 74 63 68 65 64 20 41 63 74 69 6f 6e 73 20 62 65 74 77 65 65 6e 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 29 20 6f 72 20 61 20 62 69 6e 64 69 6e 67 2f 73 65 63 75 72 69 74 79 20 6d 69 73 6d 61 74 63 68 20 62 65 74 77 65 65 6e 20 74 68 65 20 73 65 6e 64 65 72 20 61 6e 64 20 74 68 65 20 72 65 63 65 69 76 65 72 2e 20 20 43 68 65 63 6b 20 74 68 61 74 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 20 68 61 76 65 20 74 68 65 20 73 61 6d 65 20 63 6f 6e 74 72 61 63 74 20 61 6e 64 20 74 68 65 20 73 61 6d 65 20 62 69 6e 64 69 6e 67 20 28 69 6e 63 6c 75 64 69 6e 67 20 73 65 63 75 72 69 74 79 20 72 65 71 75 69 72 65 6d 65 6e 74 73 2c 20 65 2e 67 2e 20 4d 65 73 73 61 67 65 2c 20 54 72 61 6e 73 70 6f 72 74 2c 20 4e 6f 6e 65 29 2e 3c 2f 66 61 75 6c 74 73 74 72 69 6e 67 3e 3c 2f 73 3a 46 61 75 6c 74 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/"><s:Body><s:Fault><faultcode xmlns:a="http://schemas.microsoft.com/ws/2005/05/addressing/none">a:ActionNotSupported</faultcode><faultstring xml:lang="en-US">The message with Action 'http://tempuri.org/Endpoint/GetArguments' cannot be processed at the receiver, due to a ContractFilter mismatch at the EndpointDispatcher. This may be because of either a contract mismatch (mismatched Actions between sender and receiver) or a binding/security mismatch between the sender and the receiver. Check that sender and receiver have the same contract and the same binding (including security requirements, e.g. Message, Transport, None).</faultstring></s:Fault></s:Body></s:Envelope>
Aug 3, 2021 23:09:22.387101889 CEST	10634	OUT	POST / HTTP/1.1 Content-Type: text/xml; charset=utf-8 SOAPAction: "http://tempuri.org/Endpoint/GetArguments" Host: 45.137.155.31:11556 Content-Length: 137 Expect: 100-continue Accept-Encoding: gzip, deflate
Aug 3, 2021 23:09:22.459809065 CEST	10634	IN	HTTP/1.1 100 Continue
Aug 3, 2021 23:09:22.530771971 CEST	10635	IN	HTTP/1.1 500 Internal Server Error Content-Length: 738 Content-Type: text/xml; charset=utf-8 Server: Microsoft-HTTPAPI/2.0 Date: Tue, 03 Aug 2021 21:09:22 GMT Data Raw: 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 73 3a 46 61 75 6c 74 3e 3c 66 61 75 6c 74 63 6f 64 65 20 78 6d 6c 6e 73 3a 61 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 77 73 2f 32 30 30 35 2f 30 35 2f 61 64 64 72 65 73 73 69 6e 67 2f 6e 6f 6e 65 22 3e 61 3a 41 63 74 69 6f 6e 4e 6f 74 53 75 70 70 6f 72 74 65 64 3c 2f 66 61 75 6c 74 63 6f 64 65 3e 3c 66 61 75 6c 74 73 74 72 69 6e 67 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 54 68 65 20 6d 65 73 73 61 67 65 20 77 69 74 68 20 41 63 74 69 6f 6e 20 27 68 74 74 70 3a 2f 2f 74 65 6d 70 75 72 69 2e 6f 72 67 2f 45 6e 64 70 6f 69 6e 74 2f 47 65 74 41 72 67 75 6d 65 6e 74 73 27 20 63 61 6e 6e 6f 74 20 62 65 20 70 72 6f 63 65 73 73 65 64 20 61 74 20 74 68 65 20 72 65 63 65 69 76 65 72 2c 20 64 75 65 20 74 6f 20 61 20 43 6f 6e 74 72 61 63 74 46 69 6c 74 65 72 20 6d 69 73 6d 61 74 63 68 20 61 74 20 74 68 65 20 45 6e 64 70 6f 69 6e 74 44 69 73 70 61 74 63 68 65 72 2e 20 54 68 69 73 20 6d 61 79 20 62 65 20 62 65 63 61 75 73 65 20 6f 66 20 65 69 74 68 65 72 20 61 20 63 6f 6e 74 72 61 63 74 20 6d 69 73 6d 61 74 63 68 20 28 6d 69 73 6d 61 74 63 68 65 64 20 41 63 74 69 6f 6e 73 20 62 65 74 77 65 65 6e 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 29 20 6f 72 20 61 20 62 69 6e 64 69 6e 67 2f 73 65 63 75 72 69 74 79 20 6d 69 73 6d 61 74 63 68 20 62 65 74 77 65 65 6e 20 74 68 65 20 73 65 6e 64 65 72 20 61 6e 64 20 74 68 65 20 72 65 63 65 69 76 65 72 2e 20 20 43 68 65 63 6b 20 74 68 61 74 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 20 68 61 76 65 20 74 68 65 20 73 61 6d 65 20 63 6f 6e 74 72 61 63 74 20 61 6e 64 20 74 68 65 20 73 61 6d 65 20 62 69 6e 64 69 6e 67 20 28 69 6e 63 6c 75 64 69 6e 67 20 73 65 63 75 72 69 74 79 20 72 65 71 75 69 72 65 6d 65 6e 74 73 2c 20 65 2e 67 2e 20 4d 65 73 73 61 67 65 2c 20 54 72 61 6e 73 70 6f 72 74 2c 20 4e 6f 6e 65 29 2e 3c 2f 66 61 75 6c 74 73 74 72 69 6e 67 3e 3c 2f 73 3a 46 61 75 6c 74 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/"><s:Body><s:Fault><faultcode xmlns:a="http://schemas.microsoft.com/ws/2005/05/addressing/none">a:ActionNotSupported</faultcode><faultstring xml:lang="en-US">The message with Action 'http://tempuri.org/Endpoint/GetArguments' cannot be processed at the receiver, due to a ContractFilter mismatch at the EndpointDispatcher. This may be because of either a contract mismatch (mismatched Actions between sender and receiver) or a binding/security mismatch between the sender and the receiver. Check that sender and receiver have the same contract and the same binding (including security requirements, e.g. Message, Transport, None).</faultstring></s:Fault></s:Body></s:Envelope>
Aug 3, 2021 23:09:23.543819904 CEST	10635	OUT	POST / HTTP/1.1 Content-Type: text/xml; charset=utf-8 SOAPAction: "http://tempuri.org/Endpoint/GetArguments" Host: 45.137.155.31:11556 Content-Length: 137 Expect: 100-continue Accept-Encoding: gzip, deflate
Aug 3, 2021 23:09:23.614036083 CEST	10635	IN	HTTP/1.1 100 Continue
Aug 3, 2021 23:09:23.690289021 CEST	10636	IN	HTTP/1.1 500 Internal Server Error Content-Length: 738 Content-Type: text/xml; charset=utf-8 Server: Microsoft-HTTPAPI/2.0 Date: Tue, 03 Aug 2021 21:09:23 GMT Data Raw: 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 73 3a 46 61 75 6c 74 3e 3c 66 61 75 6c 74 63 6f 64 65 20 78 6d 6c 6e 73 3a 61 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 77 73 2f 32 30 30 35 2f 30 35 2f 61 64 64 72 65 73 73 69 6e 67 2f 6e 6f 6e 65 22 3e 61 3a 41 63 74 69 6f 6e 4e 6f 74 53 75 70 70 6f 72 74 65 64 3c 2f 66 61 75 6c 74 63 6f 64 65 3e 3c 66 61 75 6c 74 73 74 72 69 6e 67 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 54 68 65 20 6d 65 73 73 61 67 65 20 77 69 74 68 20 41 63 74 69 6f 6e 20 27 68 74 74 70 3a 2f 2f 74 65 6d 70 75 72 69 2e 6f 72 67 2f 45 6e 64 70 6f 69 6e 74 2f 47 65 74 41 72 67 75 6d 65 6e 74 73 27 20 63 61 6e 6e 6f 74 20 62 65 20 70 72 6f 63 65 73 73 65 64 20 61 74 20 74 68 65 20 72 65 63 65 69 76 65 72 2c 20 64 75 65 20 74 6f 20 61 20 43 6f 6e 74 72 61 63 74 46 69 6c 74 65 72 20 6d 69 73 6d 61 74 63 68 20 61 74 20 74 68 65 20 45 6e 64 70 6f 69 6e 74 44 69 73 70 61 74 63 68 65 72 2e 20 54 68 69 73 20 6d 61 79 20 62 65 20 62 65 63 61 75 73 65 20 6f 66 20 65 69 74 68 65 72 20 61 20 63 6f 6e 74 72 61 63 74 20 6d 69 73 6d 61 74 63 68 20 28 6d 69 73 6d 61 74 63 68 65 64 20 41 63 74 69 6f 6e 73 20 62 65 74 77 65 65 6e 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 29 20 6f 72 20 61 20 62 69 6e 64 69 6e 67 2f 73 65 63 75 72 69 74 79 20 6d 69 73 6d 61 74 63 68 20 62 65 74 77 65 65 6e 20 74 68 65 20 73 65 6e 64 65 72 20 61 6e 64 20 74 68 65 20 72 65 63 65 69 76 65 72 2e 20 20 43 68 65 63 6b 20 74 68 61 74 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 20 68 61 76 65 20 74 68 65 20 73 61 6d 65 20 63 6f 6e 74 72 61 63 74 20 61 6e 64 20 74 68 65 20 73 61 6d 65 20 62 69 6e 64 69 6e 67 20 28 69 6e 63 6c 75 64 69 6e 67 20 73 65 63 75 72 69 74 79 20 72 65 71 75 69 72 65 6d 65 6e 74 73 2c 20 65 2e 67 2e 20 4d 65 73 73 61 67 65 2c 20 54 72 61 6e 73 70 6f 72 74 2c 20 4e 6f 6e 65 29 2e 3c 2f 66 61 75 6c 74 73 74 72 69 6e 67 3e 3c 2f 73 3a 46 61 75 6c 74 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/"><s:Body><s:Fault><faultcode xmlns:a="http://schemas.microsoft.com/ws/2005/05/addressing/none">a:ActionNotSupported</faultcode><faultstring xml:lang="en-US">The message with Action 'http://tempuri.org/Endpoint/GetArguments' cannot be processed at the receiver, due to a ContractFilter mismatch at the EndpointDispatcher. This may be because of either a contract mismatch (mismatched Actions between sender and receiver) or a binding/security mismatch between the sender and the receiver. Check that sender and receiver have the same contract and the same binding (including security requirements, e.g. Message, Transport, None).</faultstring></s:Fault></s:Body></s:Envelope>
Aug 3, 2021 23:09:24.700164080 CEST	10637	OUT	POST / HTTP/1.1 Content-Type: text/xml; charset=utf-8 SOAPAction: "http://tempuri.org/Endpoint/GetArguments" Host: 45.137.155.31:11556 Content-Length: 137 Expect: 100-continue Accept-Encoding: gzip, deflate
Aug 3, 2021 23:09:24.783130884 CEST	10637	IN	HTTP/1.1 100 Continue
Aug 3, 2021 23:09:24.860424042 CEST	10638	IN	HTTP/1.1 500 Internal Server Error Content-Length: 738 Content-Type: text/xml; charset=utf-8 Server: Microsoft-HTTPAPI/2.0 Date: Tue, 03 Aug 2021 21:09:24 GMT Data Raw: 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 73 3a 46 61 75 6c 74 3e 3c 66 61 75 6c 74 63 6f 64 65 20 78 6d 6c 6e 73 3a 61 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 77 73 2f 32 30 30 35 2f 30 35 2f 61 64 64 72 65 73 73 69 6e 67 2f 6e 6f 6e 65 22 3e 61 3a 41 63 74 69 6f 6e 4e 6f 74 53 75 70 70 6f 72 74 65 64 3c 2f 66 61 75 6c 74 63 6f 64 65 3e 3c 66 61 75 6c 74 73 74 72 69 6e 67 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 54 68 65 20 6d 65 73 73 61 67 65 20 77 69 74 68 20 41 63 74 69 6f 6e 20 27 68 74 74 70 3a 2f 2f 74 65 6d 70 75 72 69 2e 6f 72 67 2f 45 6e 64 70 6f 69 6e 74 2f 47 65 74 41 72 67 75 6d 65 6e 74 73 27 20 63 61 6e 6e 6f 74 20 62 65 20 70 72 6f 63 65 73 73 65 64 20 61 74 20 74 68 65 20 72 65 63 65 69 76 65 72 2c 20 64 75 65 20 74 6f 20 61 20 43 6f 6e 74 72 61 63 74 46 69 6c 74 65 72 20 6d 69 73 6d 61 74 63 68 20 61 74 20 74 68 65 20 45 6e 64 70 6f 69 6e 74 44 69 73 70 61 74 63 68 65 72 2e 20 54 68 69 73 20 6d 61 79 20 62 65 20 62 65 63 61 75 73 65 20 6f 66 20 65 69 74 68 65 72 20 61 20 63 6f 6e 74 72 61 63 74 20 6d 69 73 6d 61 74 63 68 20 28 6d 69 73 6d 61 74 63 68 65 64 20 41 63 74 69 6f 6e 73 20 62 65 74 77 65 65 6e 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 29 20 6f 72 20 61 20 62 69 6e 64 69 6e 67 2f 73 65 63 75 72 69 74 79 20 6d 69 73 6d 61 74 63 68 20 62 65 74 77 65 65 6e 20 74 68 65 20 73 65 6e 64 65 72 20 61 6e 64 20 74 68 65 20 72 65 63 65 69 76 65 72 2e 20 20 43 68 65 63 6b 20 74 68 61 74 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 20 68 61 76 65 20 74 68 65 20 73 61 6d 65 20 63 6f 6e 74 72 61 63 74 20 61 6e 64 20 74 68 65 20 73 61 6d 65 20 62 69 6e 64 69 6e 67 20 28 69 6e 63 6c 75 64 69 6e 67 20 73 65 63 75 72 69 74 79 20 72 65 71 75 69 72 65 6d 65 6e 74 73 2c 20 65 2e 67 2e 20 4d 65 73 73 61 67 65 2c 20 54 72 61 6e 73 70 6f 72 74 2c 20 4e 6f 6e 65 29 2e 3c 2f 66 61 75 6c 74 73 74 72 69 6e 67 3e 3c 2f 73 3a 46 61 75 6c 74 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/"><s:Body><s:Fault><faultcode xmlns:a="http://schemas.microsoft.com/ws/2005/05/addressing/none">a:ActionNotSupported</faultcode><faultstring xml:lang="en-US">The message with Action 'http://tempuri.org/Endpoint/GetArguments' cannot be processed at the receiver, due to a ContractFilter mismatch at the EndpointDispatcher. This may be because of either a contract mismatch (mismatched Actions between sender and receiver) or a binding/security mismatch between the sender and the receiver. Check that sender and receiver have the same contract and the same binding (including security requirements, e.g. Message, Transport, None).</faultstring></s:Fault></s:Body></s:Envelope>
Aug 3, 2021 23:09:25.871798992 CEST	10638	OUT	POST / HTTP/1.1 Content-Type: text/xml; charset=utf-8 SOAPAction: "http://tempuri.org/Endpoint/GetArguments" Host: 45.137.155.31:11556 Content-Length: 137 Expect: 100-continue Accept-Encoding: gzip, deflate
Aug 3, 2021 23:09:25.941642046 CEST	10638	IN	HTTP/1.1 100 Continue
Aug 3, 2021 23:09:26.011050940 CEST	10639	IN	HTTP/1.1 500 Internal Server Error Content-Length: 738 Content-Type: text/xml; charset=utf-8 Server: Microsoft-HTTPAPI/2.0 Date: Tue, 03 Aug 2021 21:09:25 GMT Data Raw: 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 73 3a 46 61 75 6c 74 3e 3c 66 61 75 6c 74 63 6f 64 65 20 78 6d 6c 6e 73 3a 61 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 77 73 2f 32 30 30 35 2f 30 35 2f 61 64 64 72 65 73 73 69 6e 67 2f 6e 6f 6e 65 22 3e 61 3a 41 63 74 69 6f 6e 4e 6f 74 53 75 70 70 6f 72 74 65 64 3c 2f 66 61 75 6c 74 63 6f 64 65 3e 3c 66 61 75 6c 74 73 74 72 69 6e 67 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 54 68 65 20 6d 65 73 73 61 67 65 20 77 69 74 68 20 41 63 74 69 6f 6e 20 27 68 74 74 70 3a 2f 2f 74 65 6d 70 75 72 69 2e 6f 72 67 2f 45 6e 64 70 6f 69 6e 74 2f 47 65 74 41 72 67 75 6d 65 6e 74 73 27 20 63 61 6e 6e 6f 74 20 62 65 20 70 72 6f 63 65 73 73 65 64 20 61 74 20 74 68 65 20 72 65 63 65 69 76 65 72 2c 20 64 75 65 20 74 6f 20 61 20 43 6f 6e 74 72 61 63 74 46 69 6c 74 65 72 20 6d 69 73 6d 61 74 63 68 20 61 74 20 74 68 65 20 45 6e 64 70 6f 69 6e 74 44 69 73 70 61 74 63 68 65 72 2e 20 54 68 69 73 20 6d 61 79 20 62 65 20 62 65 63 61 75 73 65 20 6f 66 20 65 69 74 68 65 72 20 61 20 63 6f 6e 74 72 61 63 74 20 6d 69 73 6d 61 74 63 68 20 28 6d 69 73 6d 61 74 63 68 65 64 20 41 63 74 69 6f 6e 73 20 62 65 74 77 65 65 6e 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 29 20 6f 72 20 61 20 62 69 6e 64 69 6e 67 2f 73 65 63 75 72 69 74 79 20 6d 69 73 6d 61 74 63 68 20 62 65 74 77 65 65 6e 20 74 68 65 20 73 65 6e 64 65 72 20 61 6e 64 20 74 68 65 20 72 65 63 65 69 76 65 72 2e 20 20 43 68 65 63 6b 20 74 68 61 74 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 20 68 61 76 65 20 74 68 65 20 73 61 6d 65 20 63 6f 6e 74 72 61 63 74 20 61 6e 64 20 74 68 65 20 73 61 6d 65 20 62 69 6e 64 69 6e 67 20 28 69 6e 63 6c 75 64 69 6e 67 20 73 65 63 75 72 69 74 79 20 72 65 71 75 69 72 65 6d 65 6e 74 73 2c 20 65 2e 67 2e 20 4d 65 73 73 61 67 65 2c 20 54 72 61 6e 73 70 6f 72 74 2c 20 4e 6f 6e 65 29 2e 3c 2f 66 61 75 6c 74 73 74 72 69 6e 67 3e 3c 2f 73 3a 46 61 75 6c 74 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/"><s:Body><s:Fault><faultcode xmlns:a="http://schemas.microsoft.com/ws/2005/05/addressing/none">a:ActionNotSupported</faultcode><faultstring xml:lang="en-US">The message with Action 'http://tempuri.org/Endpoint/GetArguments' cannot be processed at the receiver, due to a ContractFilter mismatch at the EndpointDispatcher. This may be because of either a contract mismatch (mismatched Actions between sender and receiver) or a binding/security mismatch between the sender and the receiver. Check that sender and receiver have the same contract and the same binding (including security requirements, e.g. Message, Transport, None).</faultstring></s:Fault></s:Body></s:Envelope>
Aug 3, 2021 23:09:27.028424025 CEST	10640	OUT	POST / HTTP/1.1 Content-Type: text/xml; charset=utf-8 SOAPAction: "http://tempuri.org/Endpoint/GetArguments" Host: 45.137.155.31:11556 Content-Length: 137 Expect: 100-continue Accept-Encoding: gzip, deflate
Aug 3, 2021 23:09:27.097578049 CEST	10640	IN	HTTP/1.1 100 Continue
Aug 3, 2021 23:09:27.167331934 CEST	10641	IN	HTTP/1.1 500 Internal Server Error Content-Length: 738 Content-Type: text/xml; charset=utf-8 Server: Microsoft-HTTPAPI/2.0 Date: Tue, 03 Aug 2021 21:09:27 GMT Data Raw: 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 73 3a 46 61 75 6c 74 3e 3c 66 61 75 6c 74 63 6f 64 65 20 78 6d 6c 6e 73 3a 61 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 77 73 2f 32 30 30 35 2f 30 35 2f 61 64 64 72 65 73 73 69 6e 67 2f 6e 6f 6e 65 22 3e 61 3a 41 63 74 69 6f 6e 4e 6f 74 53 75 70 70 6f 72 74 65 64 3c 2f 66 61 75 6c 74 63 6f 64 65 3e 3c 66 61 75 6c 74 73 74 72 69 6e 67 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 54 68 65 20 6d 65 73 73 61 67 65 20 77 69 74 68 20 41 63 74 69 6f 6e 20 27 68 74 74 70 3a 2f 2f 74 65 6d 70 75 72 69 2e 6f 72 67 2f 45 6e 64 70 6f 69 6e 74 2f 47 65 74 41 72 67 75 6d 65 6e 74 73 27 20 63 61 6e 6e 6f 74 20 62 65 20 70 72 6f 63 65 73 73 65 64 20 61 74 20 74 68 65 20 72 65 63 65 69 76 65 72 2c 20 64 75 65 20 74 6f 20 61 20 43 6f 6e 74 72 61 63 74 46 69 6c 74 65 72 20 6d 69 73 6d 61 74 63 68 20 61 74 20 74 68 65 20 45 6e 64 70 6f 69 6e 74 44 69 73 70 61 74 63 68 65 72 2e 20 54 68 69 73 20 6d 61 79 20 62 65 20 62 65 63 61 75 73 65 20 6f 66 20 65 69 74 68 65 72 20 61 20 63 6f 6e 74 72 61 63 74 20 6d 69 73 6d 61 74 63 68 20 28 6d 69 73 6d 61 74 63 68 65 64 20 41 63 74 69 6f 6e 73 20 62 65 74 77 65 65 6e 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 29 20 6f 72 20 61 20 62 69 6e 64 69 6e 67 2f 73 65 63 75 72 69 74 79 20 6d 69 73 6d 61 74 63 68 20 62 65 74 77 65 65 6e 20 74 68 65 20 73 65 6e 64 65 72 20 61 6e 64 20 74 68 65 20 72 65 63 65 69 76 65 72 2e 20 20 43 68 65 63 6b 20 74 68 61 74 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 20 68 61 76 65 20 74 68 65 20 73 61 6d 65 20 63 6f 6e 74 72 61 63 74 20 61 6e 64 20 74 68 65 20 73 61 6d 65 20 62 69 6e 64 69 6e 67 20 28 69 6e 63 6c 75 64 69 6e 67 20 73 65 63 75 72 69 74 79 20 72 65 71 75 69 72 65 6d 65 6e 74 73 2c 20 65 2e 67 2e 20 4d 65 73 73 61 67 65 2c 20 54 72 61 6e 73 70 6f 72 74 2c 20 4e 6f 6e 65 29 2e 3c 2f 66 61 75 6c 74 73 74 72 69 6e 67 3e 3c 2f 73 3a 46 61 75 6c 74 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/"><s:Body><s:Fault><faultcode xmlns:a="http://schemas.microsoft.com/ws/2005/05/addressing/none">a:ActionNotSupported</faultcode><faultstring xml:lang="en-US">The message with Action 'http://tempuri.org/Endpoint/GetArguments' cannot be processed at the receiver, due to a ContractFilter mismatch at the EndpointDispatcher. This may be because of either a contract mismatch (mismatched Actions between sender and receiver) or a binding/security mismatch between the sender and the receiver. Check that sender and receiver have the same contract and the same binding (including security requirements, e.g. Message, Transport, None).</faultstring></s:Fault></s:Body></s:Envelope>
Aug 3, 2021 23:09:28.184715986 CEST	10641	OUT	POST / HTTP/1.1 Content-Type: text/xml; charset=utf-8 SOAPAction: "http://tempuri.org/Endpoint/GetArguments" Host: 45.137.155.31:11556 Content-Length: 137 Expect: 100-continue Accept-Encoding: gzip, deflate
Aug 3, 2021 23:09:28.254736900 CEST	10641	IN	HTTP/1.1 100 Continue
Aug 3, 2021 23:09:28.326293945 CEST	10642	IN	HTTP/1.1 500 Internal Server Error Content-Length: 738 Content-Type: text/xml; charset=utf-8 Server: Microsoft-HTTPAPI/2.0 Date: Tue, 03 Aug 2021 21:09:28 GMT Data Raw: 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 73 3a 46 61 75 6c 74 3e 3c 66 61 75 6c 74 63 6f 64 65 20 78 6d 6c 6e 73 3a 61 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 77 73 2f 32 30 30 35 2f 30 35 2f 61 64 64 72 65 73 73 69 6e 67 2f 6e 6f 6e 65 22 3e 61 3a 41 63 74 69 6f 6e 4e 6f 74 53 75 70 70 6f 72 74 65 64 3c 2f 66 61 75 6c 74 63 6f 64 65 3e 3c 66 61 75 6c 74 73 74 72 69 6e 67 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 54 68 65 20 6d 65 73 73 61 67 65 20 77 69 74 68 20 41 63 74 69 6f 6e 20 27 68 74 74 70 3a 2f 2f 74 65 6d 70 75 72 69 2e 6f 72 67 2f 45 6e 64 70 6f 69 6e 74 2f 47 65 74 41 72 67 75 6d 65 6e 74 73 27 20 63 61 6e 6e 6f 74 20 62 65 20 70 72 6f 63 65 73 73 65 64 20 61 74 20 74 68 65 20 72 65 63 65 69 76 65 72 2c 20 64 75 65 20 74 6f 20 61 20 43 6f 6e 74 72 61 63 74 46 69 6c 74 65 72 20 6d 69 73 6d 61 74 63 68 20 61 74 20 74 68 65 20 45 6e 64 70 6f 69 6e 74 44 69 73 70 61 74 63 68 65 72 2e 20 54 68 69 73 20 6d 61 79 20 62 65 20 62 65 63 61 75 73 65 20 6f 66 20 65 69 74 68 65 72 20 61 20 63 6f 6e 74 72 61 63 74 20 6d 69 73 6d 61 74 63 68 20 28 6d 69 73 6d 61 74 63 68 65 64 20 41 63 74 69 6f 6e 73 20 62 65 74 77 65 65 6e 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 29 20 6f 72 20 61 20 62 69 6e 64 69 6e 67 2f 73 65 63 75 72 69 74 79 20 6d 69 73 6d 61 74 63 68 20 62 65 74 77 65 65 6e 20 74 68 65 20 73 65 6e 64 65 72 20 61 6e 64 20 74 68 65 20 72 65 63 65 69 76 65 72 2e 20 20 43 68 65 63 6b 20 74 68 61 74 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 20 68 61 76 65 20 74 68 65 20 73 61 6d 65 20 63 6f 6e 74 72 61 63 74 20 61 6e 64 20 74 68 65 20 73 61 6d 65 20 62 69 6e 64 69 6e 67 20 28 69 6e 63 6c 75 64 69 6e 67 20 73 65 63 75 72 69 74 79 20 72 65 71 75 69 72 65 6d 65 6e 74 73 2c 20 65 2e 67 2e 20 4d 65 73 73 61 67 65 2c 20 54 72 61 6e 73 70 6f 72 74 2c 20 4e 6f 6e 65 29 2e 3c 2f 66 61 75 6c 74 73 74 72 69 6e 67 3e 3c 2f 73 3a 46 61 75 6c 74 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/"><s:Body><s:Fault><faultcode xmlns:a="http://schemas.microsoft.com/ws/2005/05/addressing/none">a:ActionNotSupported</faultcode><faultstring xml:lang="en-US">The message with Action 'http://tempuri.org/Endpoint/GetArguments' cannot be processed at the receiver, due to a ContractFilter mismatch at the EndpointDispatcher. This may be because of either a contract mismatch (mismatched Actions between sender and receiver) or a binding/security mismatch between the sender and the receiver. Check that sender and receiver have the same contract and the same binding (including security requirements, e.g. Message, Transport, None).</faultstring></s:Fault></s:Body></s:Envelope>
Aug 3, 2021 23:09:29.341274023 CEST	10643	OUT	POST / HTTP/1.1 Content-Type: text/xml; charset=utf-8 SOAPAction: "http://tempuri.org/Endpoint/GetArguments" Host: 45.137.155.31:11556 Content-Length: 137 Expect: 100-continue Accept-Encoding: gzip, deflate
Aug 3, 2021 23:09:29.409929991 CEST	10643	IN	HTTP/1.1 100 Continue
Aug 3, 2021 23:09:29.480310917 CEST	10644	IN	HTTP/1.1 500 Internal Server Error Content-Length: 738 Content-Type: text/xml; charset=utf-8 Server: Microsoft-HTTPAPI/2.0 Date: Tue, 03 Aug 2021 21:09:29 GMT Data Raw: 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 73 3a 46 61 75 6c 74 3e 3c 66 61 75 6c 74 63 6f 64 65 20 78 6d 6c 6e 73 3a 61 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 77 73 2f 32 30 30 35 2f 30 35 2f 61 64 64 72 65 73 73 69 6e 67 2f 6e 6f 6e 65 22 3e 61 3a 41 63 74 69 6f 6e 4e 6f 74 53 75 70 70 6f 72 74 65 64 3c 2f 66 61 75 6c 74 63 6f 64 65 3e 3c 66 61 75 6c 74 73 74 72 69 6e 67 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 54 68 65 20 6d 65 73 73 61 67 65 20 77 69 74 68 20 41 63 74 69 6f 6e 20 27 68 74 74 70 3a 2f 2f 74 65 6d 70 75 72 69 2e 6f 72 67 2f 45 6e 64 70 6f 69 6e 74 2f 47 65 74 41 72 67 75 6d 65 6e 74 73 27 20 63 61 6e 6e 6f 74 20 62 65 20 70 72 6f 63 65 73 73 65 64 20 61 74 20 74 68 65 20 72 65 63 65 69 76 65 72 2c 20 64 75 65 20 74 6f 20 61 20 43 6f 6e 74 72 61 63 74 46 69 6c 74 65 72 20 6d 69 73 6d 61 74 63 68 20 61 74 20 74 68 65 20 45 6e 64 70 6f 69 6e 74 44 69 73 70 61 74 63 68 65 72 2e 20 54 68 69 73 20 6d 61 79 20 62 65 20 62 65 63 61 75 73 65 20 6f 66 20 65 69 74 68 65 72 20 61 20 63 6f 6e 74 72 61 63 74 20 6d 69 73 6d 61 74 63 68 20 28 6d 69 73 6d 61 74 63 68 65 64 20 41 63 74 69 6f 6e 73 20 62 65 74 77 65 65 6e 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 29 20 6f 72 20 61 20 62 69 6e 64 69 6e 67 2f 73 65 63 75 72 69 74 79 20 6d 69 73 6d 61 74 63 68 20 62 65 74 77 65 65 6e 20 74 68 65 20 73 65 6e 64 65 72 20 61 6e 64 20 74 68 65 20 72 65 63 65 69 76 65 72 2e 20 20 43 68 65 63 6b 20 74 68 61 74 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 20 68 61 76 65 20 74 68 65 20 73 61 6d 65 20 63 6f 6e 74 72 61 63 74 20 61 6e 64 20 74 68 65 20 73 61 6d 65 20 62 69 6e 64 69 6e 67 20 28 69 6e 63 6c 75 64 69 6e 67 20 73 65 63 75 72 69 74 79 20 72 65 71 75 69 72 65 6d 65 6e 74 73 2c 20 65 2e 67 2e 20 4d 65 73 73 61 67 65 2c 20 54 72 61 6e 73 70 6f 72 74 2c 20 4e 6f 6e 65 29 2e 3c 2f 66 61 75 6c 74 73 74 72 69 6e 67 3e 3c 2f 73 3a 46 61 75 6c 74 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/"><s:Body><s:Fault><faultcode xmlns:a="http://schemas.microsoft.com/ws/2005/05/addressing/none">a:ActionNotSupported</faultcode><faultstring xml:lang="en-US">The message with Action 'http://tempuri.org/Endpoint/GetArguments' cannot be processed at the receiver, due to a ContractFilter mismatch at the EndpointDispatcher. This may be because of either a contract mismatch (mismatched Actions between sender and receiver) or a binding/security mismatch between the sender and the receiver. Check that sender and receiver have the same contract and the same binding (including security requirements, e.g. Message, Transport, None).</faultstring></s:Fault></s:Body></s:Envelope>
Aug 3, 2021 23:09:30.498008013 CEST	10644	OUT	POST / HTTP/1.1 Content-Type: text/xml; charset=utf-8 SOAPAction: "http://tempuri.org/Endpoint/GetArguments" Host: 45.137.155.31:11556 Content-Length: 137 Expect: 100-continue Accept-Encoding: gzip, deflate
Aug 3, 2021 23:09:30.567215919 CEST	10644	IN	HTTP/1.1 100 Continue
Aug 3, 2021 23:09:30.640692949 CEST	10645	IN	HTTP/1.1 500 Internal Server Error Content-Length: 738 Content-Type: text/xml; charset=utf-8 Server: Microsoft-HTTPAPI/2.0 Date: Tue, 03 Aug 2021 21:09:30 GMT Data Raw: 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 73 3a 46 61 75 6c 74 3e 3c 66 61 75 6c 74 63 6f 64 65 20 78 6d 6c 6e 73 3a 61 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 77 73 2f 32 30 30 35 2f 30 35 2f 61 64 64 72 65 73 73 69 6e 67 2f 6e 6f 6e 65 22 3e 61 3a 41 63 74 69 6f 6e 4e 6f 74 53 75 70 70 6f 72 74 65 64 3c 2f 66 61 75 6c 74 63 6f 64 65 3e 3c 66 61 75 6c 74 73 74 72 69 6e 67 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 54 68 65 20 6d 65 73 73 61 67 65 20 77 69 74 68 20 41 63 74 69 6f 6e 20 27 68 74 74 70 3a 2f 2f 74 65 6d 70 75 72 69 2e 6f 72 67 2f 45 6e 64 70 6f 69 6e 74 2f 47 65 74 41 72 67 75 6d 65 6e 74 73 27 20 63 61 6e 6e 6f 74 20 62 65 20 70 72 6f 63 65 73 73 65 64 20 61 74 20 74 68 65 20 72 65 63 65 69 76 65 72 2c 20 64 75 65 20 74 6f 20 61 20 43 6f 6e 74 72 61 63 74 46 69 6c 74 65 72 20 6d 69 73 6d 61 74 63 68 20 61 74 20 74 68 65 20 45 6e 64 70 6f 69 6e 74 44 69 73 70 61 74 63 68 65 72 2e 20 54 68 69 73 20 6d 61 79 20 62 65 20 62 65 63 61 75 73 65 20 6f 66 20 65 69 74 68 65 72 20 61 20 63 6f 6e 74 72 61 63 74 20 6d 69 73 6d 61 74 63 68 20 28 6d 69 73 6d 61 74 63 68 65 64 20 41 63 74 69 6f 6e 73 20 62 65 74 77 65 65 6e 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 29 20 6f 72 20 61 20 62 69 6e 64 69 6e 67 2f 73 65 63 75 72 69 74 79 20 6d 69 73 6d 61 74 63 68 20 62 65 74 77 65 65 6e 20 74 68 65 20 73 65 6e 64 65 72 20 61 6e 64 20 74 68 65 20 72 65 63 65 69 76 65 72 2e 20 20 43 68 65 63 6b 20 74 68 61 74 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 20 68 61 76 65 20 74 68 65 20 73 61 6d 65 20 63 6f 6e 74 72 61 63 74 20 61 6e 64 20 74 68 65 20 73 61 6d 65 20 62 69 6e 64 69 6e 67 20 28 69 6e 63 6c 75 64 69 6e 67 20 73 65 63 75 72 69 74 79 20 72 65 71 75 69 72 65 6d 65 6e 74 73 2c 20 65 2e 67 2e 20 4d 65 73 73 61 67 65 2c 20 54 72 61 6e 73 70 6f 72 74 2c 20 4e 6f 6e 65 29 2e 3c 2f 66 61 75 6c 74 73 74 72 69 6e 67 3e 3c 2f 73 3a 46 61 75 6c 74 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/"><s:Body><s:Fault><faultcode xmlns:a="http://schemas.microsoft.com/ws/2005/05/addressing/none">a:ActionNotSupported</faultcode><faultstring xml:lang="en-US">The message with Action 'http://tempuri.org/Endpoint/GetArguments' cannot be processed at the receiver, due to a ContractFilter mismatch at the EndpointDispatcher. This may be because of either a contract mismatch (mismatched Actions between sender and receiver) or a binding/security mismatch between the sender and the receiver. Check that sender and receiver have the same contract and the same binding (including security requirements, e.g. Message, Transport, None).</faultstring></s:Fault></s:Body></s:Envelope>
Aug 3, 2021 23:09:31.653213024 CEST	10646	OUT	POST / HTTP/1.1 Content-Type: text/xml; charset=utf-8 SOAPAction: "http://tempuri.org/Endpoint/GetArguments" Host: 45.137.155.31:11556 Content-Length: 137 Expect: 100-continue Accept-Encoding: gzip, deflate
Aug 3, 2021 23:09:31.722610950 CEST	10646	IN	HTTP/1.1 100 Continue
Aug 3, 2021 23:09:31.792079926 CEST	10647	IN	HTTP/1.1 500 Internal Server Error Content-Length: 738 Content-Type: text/xml; charset=utf-8 Server: Microsoft-HTTPAPI/2.0 Date: Tue, 03 Aug 2021 21:09:31 GMT Data Raw: 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 73 3a 46 61 75 6c 74 3e 3c 66 61 75 6c 74 63 6f 64 65 20 78 6d 6c 6e 73 3a 61 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 77 73 2f 32 30 30 35 2f 30 35 2f 61 64 64 72 65 73 73 69 6e 67 2f 6e 6f 6e 65 22 3e 61 3a 41 63 74 69 6f 6e 4e 6f 74 53 75 70 70 6f 72 74 65 64 3c 2f 66 61 75 6c 74 63 6f 64 65 3e 3c 66 61 75 6c 74 73 74 72 69 6e 67 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 54 68 65 20 6d 65 73 73 61 67 65 20 77 69 74 68 20 41 63 74 69 6f 6e 20 27 68 74 74 70 3a 2f 2f 74 65 6d 70 75 72 69 2e 6f 72 67 2f 45 6e 64 70 6f 69 6e 74 2f 47 65 74 41 72 67 75 6d 65 6e 74 73 27 20 63 61 6e 6e 6f 74 20 62 65 20 70 72 6f 63 65 73 73 65 64 20 61 74 20 74 68 65 20 72 65 63 65 69 76 65 72 2c 20 64 75 65 20 74 6f 20 61 20 43 6f 6e 74 72 61 63 74 46 69 6c 74 65 72 20 6d 69 73 6d 61 74 63 68 20 61 74 20 74 68 65 20 45 6e 64 70 6f 69 6e 74 44 69 73 70 61 74 63 68 65 72 2e 20 54 68 69 73 20 6d 61 79 20 62 65 20 62 65 63 61 75 73 65 20 6f 66 20 65 69 74 68 65 72 20 61 20 63 6f 6e 74 72 61 63 74 20 6d 69 73 6d 61 74 63 68 20 28 6d 69 73 6d 61 74 63 68 65 64 20 41 63 74 69 6f 6e 73 20 62 65 74 77 65 65 6e 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 29 20 6f 72 20 61 20 62 69 6e 64 69 6e 67 2f 73 65 63 75 72 69 74 79 20 6d 69 73 6d 61 74 63 68 20 62 65 74 77 65 65 6e 20 74 68 65 20 73 65 6e 64 65 72 20 61 6e 64 20 74 68 65 20 72 65 63 65 69 76 65 72 2e 20 20 43 68 65 63 6b 20 74 68 61 74 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 20 68 61 76 65 20 74 68 65 20 73 61 6d 65 20 63 6f 6e 74 72 61 63 74 20 61 6e 64 20 74 68 65 20 73 61 6d 65 20 62 69 6e 64 69 6e 67 20 28 69 6e 63 6c 75 64 69 6e 67 20 73 65 63 75 72 69 74 79 20 72 65 71 75 69 72 65 6d 65 6e 74 73 2c 20 65 2e 67 2e 20 4d 65 73 73 61 67 65 2c 20 54 72 61 6e 73 70 6f 72 74 2c 20 4e 6f 6e 65 29 2e 3c 2f 66 61 75 6c 74 73 74 72 69 6e 67 3e 3c 2f 73 3a 46 61 75 6c 74 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/"><s:Body><s:Fault><faultcode xmlns:a="http://schemas.microsoft.com/ws/2005/05/addressing/none">a:ActionNotSupported</faultcode><faultstring xml:lang="en-US">The message with Action 'http://tempuri.org/Endpoint/GetArguments' cannot be processed at the receiver, due to a ContractFilter mismatch at the EndpointDispatcher. This may be because of either a contract mismatch (mismatched Actions between sender and receiver) or a binding/security mismatch between the sender and the receiver. Check that sender and receiver have the same contract and the same binding (including security requirements, e.g. Message, Transport, None).</faultstring></s:Fault></s:Body></s:Envelope>
Aug 3, 2021 23:09:32.809696913 CEST	10647	OUT	POST / HTTP/1.1 Content-Type: text/xml; charset=utf-8 SOAPAction: "http://tempuri.org/Endpoint/GetArguments" Host: 45.137.155.31:11556 Content-Length: 137 Expect: 100-continue Accept-Encoding: gzip, deflate
Aug 3, 2021 23:09:32.879889011 CEST	10647	IN	HTTP/1.1 100 Continue
Aug 3, 2021 23:09:32.952064037 CEST	10648	IN	HTTP/1.1 500 Internal Server Error Content-Length: 738 Content-Type: text/xml; charset=utf-8 Server: Microsoft-HTTPAPI/2.0 Date: Tue, 03 Aug 2021 21:09:32 GMT Data Raw: 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 73 3a 46 61 75 6c 74 3e 3c 66 61 75 6c 74 63 6f 64 65 20 78 6d 6c 6e 73 3a 61 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 77 73 2f 32 30 30 35 2f 30 35 2f 61 64 64 72 65 73 73 69 6e 67 2f 6e 6f 6e 65 22 3e 61 3a 41 63 74 69 6f 6e 4e 6f 74 53 75 70 70 6f 72 74 65 64 3c 2f 66 61 75 6c 74 63 6f 64 65 3e 3c 66 61 75 6c 74 73 74 72 69 6e 67 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 54 68 65 20 6d 65 73 73 61 67 65 20 77 69 74 68 20 41 63 74 69 6f 6e 20 27 68 74 74 70 3a 2f 2f 74 65 6d 70 75 72 69 2e 6f 72 67 2f 45 6e 64 70 6f 69 6e 74 2f 47 65 74 41 72 67 75 6d 65 6e 74 73 27 20 63 61 6e 6e 6f 74 20 62 65 20 70 72 6f 63 65 73 73 65 64 20 61 74 20 74 68 65 20 72 65 63 65 69 76 65 72 2c 20 64 75 65 20 74 6f 20 61 20 43 6f 6e 74 72 61 63 74 46 69 6c 74 65 72 20 6d 69 73 6d 61 74 63 68 20 61 74 20 74 68 65 20 45 6e 64 70 6f 69 6e 74 44 69 73 70 61 74 63 68 65 72 2e 20 54 68 69 73 20 6d 61 79 20 62 65 20 62 65 63 61 75 73 65 20 6f 66 20 65 69 74 68 65 72 20 61 20 63 6f 6e 74 72 61 63 74 20 6d 69 73 6d 61 74 63 68 20 28 6d 69 73 6d 61 74 63 68 65 64 20 41 63 74 69 6f 6e 73 20 62 65 74 77 65 65 6e 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 29 20 6f 72 20 61 20 62 69 6e 64 69 6e 67 2f 73 65 63 75 72 69 74 79 20 6d 69 73 6d 61 74 63 68 20 62 65 74 77 65 65 6e 20 74 68 65 20 73 65 6e 64 65 72 20 61 6e 64 20 74 68 65 20 72 65 63 65 69 76 65 72 2e 20 20 43 68 65 63 6b 20 74 68 61 74 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 20 68 61 76 65 20 74 68 65 20 73 61 6d 65 20 63 6f 6e 74 72 61 63 74 20 61 6e 64 20 74 68 65 20 73 61 6d 65 20 62 69 6e 64 69 6e 67 20 28 69 6e 63 6c 75 64 69 6e 67 20 73 65 63 75 72 69 74 79 20 72 65 71 75 69 72 65 6d 65 6e 74 73 2c 20 65 2e 67 2e 20 4d 65 73 73 61 67 65 2c 20 54 72 61 6e 73 70 6f 72 74 2c 20 4e 6f 6e 65 29 2e 3c 2f 66 61 75 6c 74 73 74 72 69 6e 67 3e 3c 2f 73 3a 46 61 75 6c 74 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/"><s:Body><s:Fault><faultcode xmlns:a="http://schemas.microsoft.com/ws/2005/05/addressing/none">a:ActionNotSupported</faultcode><faultstring xml:lang="en-US">The message with Action 'http://tempuri.org/Endpoint/GetArguments' cannot be processed at the receiver, due to a ContractFilter mismatch at the EndpointDispatcher. This may be because of either a contract mismatch (mismatched Actions between sender and receiver) or a binding/security mismatch between the sender and the receiver. Check that sender and receiver have the same contract and the same binding (including security requirements, e.g. Message, Transport, None).</faultstring></s:Fault></s:Body></s:Envelope>
Aug 3, 2021 23:09:33.966211081 CEST	10649	OUT	POST / HTTP/1.1 Content-Type: text/xml; charset=utf-8 SOAPAction: "http://tempuri.org/Endpoint/GetArguments" Host: 45.137.155.31:11556 Content-Length: 137 Expect: 100-continue Accept-Encoding: gzip, deflate
Aug 3, 2021 23:09:34.043320894 CEST	10649	IN	HTTP/1.1 100 Continue
Aug 3, 2021 23:09:34.113029003 CEST	10650	IN	HTTP/1.1 500 Internal Server Error Content-Length: 738 Content-Type: text/xml; charset=utf-8 Server: Microsoft-HTTPAPI/2.0 Date: Tue, 03 Aug 2021 21:09:33 GMT Data Raw: 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 73 3a 46 61 75 6c 74 3e 3c 66 61 75 6c 74 63 6f 64 65 20 78 6d 6c 6e 73 3a 61 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 77 73 2f 32 30 30 35 2f 30 35 2f 61 64 64 72 65 73 73 69 6e 67 2f 6e 6f 6e 65 22 3e 61 3a 41 63 74 69 6f 6e 4e 6f 74 53 75 70 70 6f 72 74 65 64 3c 2f 66 61 75 6c 74 63 6f 64 65 3e 3c 66 61 75 6c 74 73 74 72 69 6e 67 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 54 68 65 20 6d 65 73 73 61 67 65 20 77 69 74 68 20 41 63 74 69 6f 6e 20 27 68 74 74 70 3a 2f 2f 74 65 6d 70 75 72 69 2e 6f 72 67 2f 45 6e 64 70 6f 69 6e 74 2f 47 65 74 41 72 67 75 6d 65 6e 74 73 27 20 63 61 6e 6e 6f 74 20 62 65 20 70 72 6f 63 65 73 73 65 64 20 61 74 20 74 68 65 20 72 65 63 65 69 76 65 72 2c 20 64 75 65 20 74 6f 20 61 20 43 6f 6e 74 72 61 63 74 46 69 6c 74 65 72 20 6d 69 73 6d 61 74 63 68 20 61 74 20 74 68 65 20 45 6e 64 70 6f 69 6e 74 44 69 73 70 61 74 63 68 65 72 2e 20 54 68 69 73 20 6d 61 79 20 62 65 20 62 65 63 61 75 73 65 20 6f 66 20 65 69 74 68 65 72 20 61 20 63 6f 6e 74 72 61 63 74 20 6d 69 73 6d 61 74 63 68 20 28 6d 69 73 6d 61 74 63 68 65 64 20 41 63 74 69 6f 6e 73 20 62 65 74 77 65 65 6e 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 29 20 6f 72 20 61 20 62 69 6e 64 69 6e 67 2f 73 65 63 75 72 69 74 79 20 6d 69 73 6d 61 74 63 68 20 62 65 74 77 65 65 6e 20 74 68 65 20 73 65 6e 64 65 72 20 61 6e 64 20 74 68 65 20 72 65 63 65 69 76 65 72 2e 20 20 43 68 65 63 6b 20 74 68 61 74 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 20 68 61 76 65 20 74 68 65 20 73 61 6d 65 20 63 6f 6e 74 72 61 63 74 20 61 6e 64 20 74 68 65 20 73 61 6d 65 20 62 69 6e 64 69 6e 67 20 28 69 6e 63 6c 75 64 69 6e 67 20 73 65 63 75 72 69 74 79 20 72 65 71 75 69 72 65 6d 65 6e 74 73 2c 20 65 2e 67 2e 20 4d 65 73 73 61 67 65 2c 20 54 72 61 6e 73 70 6f 72 74 2c 20 4e 6f 6e 65 29 2e 3c 2f 66 61 75 6c 74 73 74 72 69 6e 67 3e 3c 2f 73 3a 46 61 75 6c 74 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/"><s:Body><s:Fault><faultcode xmlns:a="http://schemas.microsoft.com/ws/2005/05/addressing/none">a:ActionNotSupported</faultcode><faultstring xml:lang="en-US">The message with Action 'http://tempuri.org/Endpoint/GetArguments' cannot be processed at the receiver, due to a ContractFilter mismatch at the EndpointDispatcher. This may be because of either a contract mismatch (mismatched Actions between sender and receiver) or a binding/security mismatch between the sender and the receiver. Check that sender and receiver have the same contract and the same binding (including security requirements, e.g. Message, Transport, None).</faultstring></s:Fault></s:Body></s:Envelope>
Aug 3, 2021 23:09:35.123120070 CEST	10650	OUT	POST / HTTP/1.1 Content-Type: text/xml; charset=utf-8 SOAPAction: "http://tempuri.org/Endpoint/GetArguments" Host: 45.137.155.31:11556 Content-Length: 137 Expect: 100-continue Accept-Encoding: gzip, deflate
Aug 3, 2021 23:09:35.192059994 CEST	10650	IN	HTTP/1.1 100 Continue
Aug 3, 2021 23:09:35.268318892 CEST	10651	IN	HTTP/1.1 500 Internal Server Error Content-Length: 738 Content-Type: text/xml; charset=utf-8 Server: Microsoft-HTTPAPI/2.0 Date: Tue, 03 Aug 2021 21:09:34 GMT Data Raw: 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 73 3a 46 61 75 6c 74 3e 3c 66 61 75 6c 74 63 6f 64 65 20 78 6d 6c 6e 73 3a 61 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 77 73 2f 32 30 30 35 2f 30 35 2f 61 64 64 72 65 73 73 69 6e 67 2f 6e 6f 6e 65 22 3e 61 3a 41 63 74 69 6f 6e 4e 6f 74 53 75 70 70 6f 72 74 65 64 3c 2f 66 61 75 6c 74 63 6f 64 65 3e 3c 66 61 75 6c 74 73 74 72 69 6e 67 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 54 68 65 20 6d 65 73 73 61 67 65 20 77 69 74 68 20 41 63 74 69 6f 6e 20 27 68 74 74 70 3a 2f 2f 74 65 6d 70 75 72 69 2e 6f 72 67 2f 45 6e 64 70 6f 69 6e 74 2f 47 65 74 41 72 67 75 6d 65 6e 74 73 27 20 63 61 6e 6e 6f 74 20 62 65 20 70 72 6f 63 65 73 73 65 64 20 61 74 20 74 68 65 20 72 65 63 65 69 76 65 72 2c 20 64 75 65 20 74 6f 20 61 20 43 6f 6e 74 72 61 63 74 46 69 6c 74 65 72 20 6d 69 73 6d 61 74 63 68 20 61 74 20 74 68 65 20 45 6e 64 70 6f 69 6e 74 44 69 73 70 61 74 63 68 65 72 2e 20 54 68 69 73 20 6d 61 79 20 62 65 20 62 65 63 61 75 73 65 20 6f 66 20 65 69 74 68 65 72 20 61 20 63 6f 6e 74 72 61 63 74 20 6d 69 73 6d 61 74 63 68 20 28 6d 69 73 6d 61 74 63 68 65 64 20 41 63 74 69 6f 6e 73 20 62 65 74 77 65 65 6e 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 29 20 6f 72 20 61 20 62 69 6e 64 69 6e 67 2f 73 65 63 75 72 69 74 79 20 6d 69 73 6d 61 74 63 68 20 62 65 74 77 65 65 6e 20 74 68 65 20 73 65 6e 64 65 72 20 61 6e 64 20 74 68 65 20 72 65 63 65 69 76 65 72 2e 20 20 43 68 65 63 6b 20 74 68 61 74 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 20 68 61 76 65 20 74 68 65 20 73 61 6d 65 20 63 6f 6e 74 72 61 63 74 20 61 6e 64 20 74 68 65 20 73 61 6d 65 20 62 69 6e 64 69 6e 67 20 28 69 6e 63 6c 75 64 69 6e 67 20 73 65 63 75 72 69 74 79 20 72 65 71 75 69 72 65 6d 65 6e 74 73 2c 20 65 2e 67 2e 20 4d 65 73 73 61 67 65 2c 20 54 72 61 6e 73 70 6f 72 74 2c 20 4e 6f 6e 65 29 2e 3c 2f 66 61 75 6c 74 73 74 72 69 6e 67 3e 3c 2f 73 3a 46 61 75 6c 74 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/"><s:Body><s:Fault><faultcode xmlns:a="http://schemas.microsoft.com/ws/2005/05/addressing/none">a:ActionNotSupported</faultcode><faultstring xml:lang="en-US">The message with Action 'http://tempuri.org/Endpoint/GetArguments' cannot be processed at the receiver, due to a ContractFilter mismatch at the EndpointDispatcher. This may be because of either a contract mismatch (mismatched Actions between sender and receiver) or a binding/security mismatch between the sender and the receiver. Check that sender and receiver have the same contract and the same binding (including security requirements, e.g. Message, Transport, None).</faultstring></s:Fault></s:Body></s:Envelope>
Aug 3, 2021 23:09:36.278768063 CEST	10660	OUT	POST / HTTP/1.1 Content-Type: text/xml; charset=utf-8 SOAPAction: "http://tempuri.org/Endpoint/GetArguments" Host: 45.137.155.31:11556 Content-Length: 137 Expect: 100-continue Accept-Encoding: gzip, deflate
Aug 3, 2021 23:09:36.350203991 CEST	10660	IN	HTTP/1.1 100 Continue
Aug 3, 2021 23:09:36.421967983 CEST	10661	IN	HTTP/1.1 500 Internal Server Error Content-Length: 738 Content-Type: text/xml; charset=utf-8 Server: Microsoft-HTTPAPI/2.0 Date: Tue, 03 Aug 2021 21:09:36 GMT Data Raw: 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 73 3a 46 61 75 6c 74 3e 3c 66 61 75 6c 74 63 6f 64 65 20 78 6d 6c 6e 73 3a 61 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 77 73 2f 32 30 30 35 2f 30 35 2f 61 64 64 72 65 73 73 69 6e 67 2f 6e 6f 6e 65 22 3e 61 3a 41 63 74 69 6f 6e 4e 6f 74 53 75 70 70 6f 72 74 65 64 3c 2f 66 61 75 6c 74 63 6f 64 65 3e 3c 66 61 75 6c 74 73 74 72 69 6e 67 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 54 68 65 20 6d 65 73 73 61 67 65 20 77 69 74 68 20 41 63 74 69 6f 6e 20 27 68 74 74 70 3a 2f 2f 74 65 6d 70 75 72 69 2e 6f 72 67 2f 45 6e 64 70 6f 69 6e 74 2f 47 65 74 41 72 67 75 6d 65 6e 74 73 27 20 63 61 6e 6e 6f 74 20 62 65 20 70 72 6f 63 65 73 73 65 64 20 61 74 20 74 68 65 20 72 65 63 65 69 76 65 72 2c 20 64 75 65 20 74 6f 20 61 20 43 6f 6e 74 72 61 63 74 46 69 6c 74 65 72 20 6d 69 73 6d 61 74 63 68 20 61 74 20 74 68 65 20 45 6e 64 70 6f 69 6e 74 44 69 73 70 61 74 63 68 65 72 2e 20 54 68 69 73 20 6d 61 79 20 62 65 20 62 65 63 61 75 73 65 20 6f 66 20 65 69 74 68 65 72 20 61 20 63 6f 6e 74 72 61 63 74 20 6d 69 73 6d 61 74 63 68 20 28 6d 69 73 6d 61 74 63 68 65 64 20 41 63 74 69 6f 6e 73 20 62 65 74 77 65 65 6e 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 29 20 6f 72 20 61 20 62 69 6e 64 69 6e 67 2f 73 65 63 75 72 69 74 79 20 6d 69 73 6d 61 74 63 68 20 62 65 74 77 65 65 6e 20 74 68 65 20 73 65 6e 64 65 72 20 61 6e 64 20 74 68 65 20 72 65 63 65 69 76 65 72 2e 20 20 43 68 65 63 6b 20 74 68 61 74 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 20 68 61 76 65 20 74 68 65 20 73 61 6d 65 20 63 6f 6e 74 72 61 63 74 20 61 6e 64 20 74 68 65 20 73 61 6d 65 20 62 69 6e 64 69 6e 67 20 28 69 6e 63 6c 75 64 69 6e 67 20 73 65 63 75 72 69 74 79 20 72 65 71 75 69 72 65 6d 65 6e 74 73 2c 20 65 2e 67 2e 20 4d 65 73 73 61 67 65 2c 20 54 72 61 6e 73 70 6f 72 74 2c 20 4e 6f 6e 65 29 2e 3c 2f 66 61 75 6c 74 73 74 72 69 6e 67 3e 3c 2f 73 3a 46 61 75 6c 74 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/"><s:Body><s:Fault><faultcode xmlns:a="http://schemas.microsoft.com/ws/2005/05/addressing/none">a:ActionNotSupported</faultcode><faultstring xml:lang="en-US">The message with Action 'http://tempuri.org/Endpoint/GetArguments' cannot be processed at the receiver, due to a ContractFilter mismatch at the EndpointDispatcher. This may be because of either a contract mismatch (mismatched Actions between sender and receiver) or a binding/security mismatch between the sender and the receiver. Check that sender and receiver have the same contract and the same binding (including security requirements, e.g. Message, Transport, None).</faultstring></s:Fault></s:Body></s:Envelope>
Aug 3, 2021 23:09:37.435059071 CEST	10672	OUT	POST / HTTP/1.1 Content-Type: text/xml; charset=utf-8 SOAPAction: "http://tempuri.org/Endpoint/GetArguments" Host: 45.137.155.31:11556 Content-Length: 137 Expect: 100-continue Accept-Encoding: gzip, deflate
Aug 3, 2021 23:09:37.511215925 CEST	10672	IN	HTTP/1.1 100 Continue
Aug 3, 2021 23:09:37.586996078 CEST	10673	IN	HTTP/1.1 500 Internal Server Error Content-Length: 738 Content-Type: text/xml; charset=utf-8 Server: Microsoft-HTTPAPI/2.0 Date: Tue, 03 Aug 2021 21:09:37 GMT Data Raw: 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 73 3a 46 61 75 6c 74 3e 3c 66 61 75 6c 74 63 6f 64 65 20 78 6d 6c 6e 73 3a 61 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 77 73 2f 32 30 30 35 2f 30 35 2f 61 64 64 72 65 73 73 69 6e 67 2f 6e 6f 6e 65 22 3e 61 3a 41 63 74 69 6f 6e 4e 6f 74 53 75 70 70 6f 72 74 65 64 3c 2f 66 61 75 6c 74 63 6f 64 65 3e 3c 66 61 75 6c 74 73 74 72 69 6e 67 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 54 68 65 20 6d 65 73 73 61 67 65 20 77 69 74 68 20 41 63 74 69 6f 6e 20 27 68 74 74 70 3a 2f 2f 74 65 6d 70 75 72 69 2e 6f 72 67 2f 45 6e 64 70 6f 69 6e 74 2f 47 65 74 41 72 67 75 6d 65 6e 74 73 27 20 63 61 6e 6e 6f 74 20 62 65 20 70 72 6f 63 65 73 73 65 64 20 61 74 20 74 68 65 20 72 65 63 65 69 76 65 72 2c 20 64 75 65 20 74 6f 20 61 20 43 6f 6e 74 72 61 63 74 46 69 6c 74 65 72 20 6d 69 73 6d 61 74 63 68 20 61 74 20 74 68 65 20 45 6e 64 70 6f 69 6e 74 44 69 73 70 61 74 63 68 65 72 2e 20 54 68 69 73 20 6d 61 79 20 62 65 20 62 65 63 61 75 73 65 20 6f 66 20 65 69 74 68 65 72 20 61 20 63 6f 6e 74 72 61 63 74 20 6d 69 73 6d 61 74 63 68 20 28 6d 69 73 6d 61 74 63 68 65 64 20 41 63 74 69 6f 6e 73 20 62 65 74 77 65 65 6e 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 29 20 6f 72 20 61 20 62 69 6e 64 69 6e 67 2f 73 65 63 75 72 69 74 79 20 6d 69 73 6d 61 74 63 68 20 62 65 74 77 65 65 6e 20 74 68 65 20 73 65 6e 64 65 72 20 61 6e 64 20 74 68 65 20 72 65 63 65 69 76 65 72 2e 20 20 43 68 65 63 6b 20 74 68 61 74 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 20 68 61 76 65 20 74 68 65 20 73 61 6d 65 20 63 6f 6e 74 72 61 63 74 20 61 6e 64 20 74 68 65 20 73 61 6d 65 20 62 69 6e 64 69 6e 67 20 28 69 6e 63 6c 75 64 69 6e 67 20 73 65 63 75 72 69 74 79 20 72 65 71 75 69 72 65 6d 65 6e 74 73 2c 20 65 2e 67 2e 20 4d 65 73 73 61 67 65 2c 20 54 72 61 6e 73 70 6f 72 74 2c 20 4e 6f 6e 65 29 2e 3c 2f 66 61 75 6c 74 73 74 72 69 6e 67 3e 3c 2f 73 3a 46 61 75 6c 74 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/"><s:Body><s:Fault><faultcode xmlns:a="http://schemas.microsoft.com/ws/2005/05/addressing/none">a:ActionNotSupported</faultcode><faultstring xml:lang="en-US">The message with Action 'http://tempuri.org/Endpoint/GetArguments' cannot be processed at the receiver, due to a ContractFilter mismatch at the EndpointDispatcher. This may be because of either a contract mismatch (mismatched Actions between sender and receiver) or a binding/security mismatch between the sender and the receiver. Check that sender and receiver have the same contract and the same binding (including security requirements, e.g. Message, Transport, None).</faultstring></s:Fault></s:Body></s:Envelope>
Aug 3, 2021 23:09:38.591972113 CEST	10673	OUT	POST / HTTP/1.1 Content-Type: text/xml; charset=utf-8 SOAPAction: "http://tempuri.org/Endpoint/GetArguments" Host: 45.137.155.31:11556 Content-Length: 137 Expect: 100-continue Accept-Encoding: gzip, deflate
Aug 3, 2021 23:09:38.661401987 CEST	10673	IN	HTTP/1.1 100 Continue
Aug 3, 2021 23:09:38.733601093 CEST	10674	IN	HTTP/1.1 500 Internal Server Error Content-Length: 738 Content-Type: text/xml; charset=utf-8 Server: Microsoft-HTTPAPI/2.0 Date: Tue, 03 Aug 2021 21:09:38 GMT Data Raw: 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 73 3a 46 61 75 6c 74 3e 3c 66 61 75 6c 74 63 6f 64 65 20 78 6d 6c 6e 73 3a 61 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 77 73 2f 32 30 30 35 2f 30 35 2f 61 64 64 72 65 73 73 69 6e 67 2f 6e 6f 6e 65 22 3e 61 3a 41 63 74 69 6f 6e 4e 6f 74 53 75 70 70 6f 72 74 65 64 3c 2f 66 61 75 6c 74 63 6f 64 65 3e 3c 66 61 75 6c 74 73 74 72 69 6e 67 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 54 68 65 20 6d 65 73 73 61 67 65 20 77 69 74 68 20 41 63 74 69 6f 6e 20 27 68 74 74 70 3a 2f 2f 74 65 6d 70 75 72 69 2e 6f 72 67 2f 45 6e 64 70 6f 69 6e 74 2f 47 65 74 41 72 67 75 6d 65 6e 74 73 27 20 63 61 6e 6e 6f 74 20 62 65 20 70 72 6f 63 65 73 73 65 64 20 61 74 20 74 68 65 20 72 65 63 65 69 76 65 72 2c 20 64 75 65 20 74 6f 20 61 20 43 6f 6e 74 72 61 63 74 46 69 6c 74 65 72 20 6d 69 73 6d 61 74 63 68 20 61 74 20 74 68 65 20 45 6e 64 70 6f 69 6e 74 44 69 73 70 61 74 63 68 65 72 2e 20 54 68 69 73 20 6d 61 79 20 62 65 20 62 65 63 61 75 73 65 20 6f 66 20 65 69 74 68 65 72 20 61 20 63 6f 6e 74 72 61 63 74 20 6d 69 73 6d 61 74 63 68 20 28 6d 69 73 6d 61 74 63 68 65 64 20 41 63 74 69 6f 6e 73 20 62 65 74 77 65 65 6e 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 29 20 6f 72 20 61 20 62 69 6e 64 69 6e 67 2f 73 65 63 75 72 69 74 79 20 6d 69 73 6d 61 74 63 68 20 62 65 74 77 65 65 6e 20 74 68 65 20 73 65 6e 64 65 72 20 61 6e 64 20 74 68 65 20 72 65 63 65 69 76 65 72 2e 20 20 43 68 65 63 6b 20 74 68 61 74 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 20 68 61 76 65 20 74 68 65 20 73 61 6d 65 20 63 6f 6e 74 72 61 63 74 20 61 6e 64 20 74 68 65 20 73 61 6d 65 20 62 69 6e 64 69 6e 67 20 28 69 6e 63 6c 75 64 69 6e 67 20 73 65 63 75 72 69 74 79 20 72 65 71 75 69 72 65 6d 65 6e 74 73 2c 20 65 2e 67 2e 20 4d 65 73 73 61 67 65 2c 20 54 72 61 6e 73 70 6f 72 74 2c 20 4e 6f 6e 65 29 2e 3c 2f 66 61 75 6c 74 73 74 72 69 6e 67 3e 3c 2f 73 3a 46 61 75 6c 74 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/"><s:Body><s:Fault><faultcode xmlns:a="http://schemas.microsoft.com/ws/2005/05/addressing/none">a:ActionNotSupported</faultcode><faultstring xml:lang="en-US">The message with Action 'http://tempuri.org/Endpoint/GetArguments' cannot be processed at the receiver, due to a ContractFilter mismatch at the EndpointDispatcher. This may be because of either a contract mismatch (mismatched Actions between sender and receiver) or a binding/security mismatch between the sender and the receiver. Check that sender and receiver have the same contract and the same binding (including security requirements, e.g. Message, Transport, None).</faultstring></s:Fault></s:Body></s:Envelope>
Aug 3, 2021 23:09:39.747920990 CEST	10675	OUT	POST / HTTP/1.1 Content-Type: text/xml; charset=utf-8 SOAPAction: "http://tempuri.org/Endpoint/GetArguments" Host: 45.137.155.31:11556 Content-Length: 137 Expect: 100-continue Accept-Encoding: gzip, deflate
Aug 3, 2021 23:09:39.819608927 CEST	10675	IN	HTTP/1.1 100 Continue
Aug 3, 2021 23:09:39.893023014 CEST	10676	IN	HTTP/1.1 500 Internal Server Error Content-Length: 738 Content-Type: text/xml; charset=utf-8 Server: Microsoft-HTTPAPI/2.0 Date: Tue, 03 Aug 2021 21:09:39 GMT Data Raw: 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 73 3a 46 61 75 6c 74 3e 3c 66 61 75 6c 74 63 6f 64 65 20 78 6d 6c 6e 73 3a 61 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 77 73 2f 32 30 30 35 2f 30 35 2f 61 64 64 72 65 73 73 69 6e 67 2f 6e 6f 6e 65 22 3e 61 3a 41 63 74 69 6f 6e 4e 6f 74 53 75 70 70 6f 72 74 65 64 3c 2f 66 61 75 6c 74 63 6f 64 65 3e 3c 66 61 75 6c 74 73 74 72 69 6e 67 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 54 68 65 20 6d 65 73 73 61 67 65 20 77 69 74 68 20 41 63 74 69 6f 6e 20 27 68 74 74 70 3a 2f 2f 74 65 6d 70 75 72 69 2e 6f 72 67 2f 45 6e 64 70 6f 69 6e 74 2f 47 65 74 41 72 67 75 6d 65 6e 74 73 27 20 63 61 6e 6e 6f 74 20 62 65 20 70 72 6f 63 65 73 73 65 64 20 61 74 20 74 68 65 20 72 65 63 65 69 76 65 72 2c 20 64 75 65 20 74 6f 20 61 20 43 6f 6e 74 72 61 63 74 46 69 6c 74 65 72 20 6d 69 73 6d 61 74 63 68 20 61 74 20 74 68 65 20 45 6e 64 70 6f 69 6e 74 44 69 73 70 61 74 63 68 65 72 2e 20 54 68 69 73 20 6d 61 79 20 62 65 20 62 65 63 61 75 73 65 20 6f 66 20 65 69 74 68 65 72 20 61 20 63 6f 6e 74 72 61 63 74 20 6d 69 73 6d 61 74 63 68 20 28 6d 69 73 6d 61 74 63 68 65 64 20 41 63 74 69 6f 6e 73 20 62 65 74 77 65 65 6e 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 29 20 6f 72 20 61 20 62 69 6e 64 69 6e 67 2f 73 65 63 75 72 69 74 79 20 6d 69 73 6d 61 74 63 68 20 62 65 74 77 65 65 6e 20 74 68 65 20 73 65 6e 64 65 72 20 61 6e 64 20 74 68 65 20 72 65 63 65 69 76 65 72 2e 20 20 43 68 65 63 6b 20 74 68 61 74 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 20 68 61 76 65 20 74 68 65 20 73 61 6d 65 20 63 6f 6e 74 72 61 63 74 20 61 6e 64 20 74 68 65 20 73 61 6d 65 20 62 69 6e 64 69 6e 67 20 28 69 6e 63 6c 75 64 69 6e 67 20 73 65 63 75 72 69 74 79 20 72 65 71 75 69 72 65 6d 65 6e 74 73 2c 20 65 2e 67 2e 20 4d 65 73 73 61 67 65 2c 20 54 72 61 6e 73 70 6f 72 74 2c 20 4e 6f 6e 65 29 2e 3c 2f 66 61 75 6c 74 73 74 72 69 6e 67 3e 3c 2f 73 3a 46 61 75 6c 74 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/"><s:Body><s:Fault><faultcode xmlns:a="http://schemas.microsoft.com/ws/2005/05/addressing/none">a:ActionNotSupported</faultcode><faultstring xml:lang="en-US">The message with Action 'http://tempuri.org/Endpoint/GetArguments' cannot be processed at the receiver, due to a ContractFilter mismatch at the EndpointDispatcher. This may be because of either a contract mismatch (mismatched Actions between sender and receiver) or a binding/security mismatch between the sender and the receiver. Check that sender and receiver have the same contract and the same binding (including security requirements, e.g. Message, Transport, None).</faultstring></s:Fault></s:Body></s:Envelope>
Aug 3, 2021 23:09:40.904839039 CEST	10676	OUT	POST / HTTP/1.1 Content-Type: text/xml; charset=utf-8 SOAPAction: "http://tempuri.org/Endpoint/GetArguments" Host: 45.137.155.31:11556 Content-Length: 137 Expect: 100-continue Accept-Encoding: gzip, deflate
Aug 3, 2021 23:09:40.981132030 CEST	10676	IN	HTTP/1.1 100 Continue
Aug 3, 2021 23:09:41.051243067 CEST	10677	IN	HTTP/1.1 500 Internal Server Error Content-Length: 738 Content-Type: text/xml; charset=utf-8 Server: Microsoft-HTTPAPI/2.0 Date: Tue, 03 Aug 2021 21:09:40 GMT Data Raw: 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 73 3a 46 61 75 6c 74 3e 3c 66 61 75 6c 74 63 6f 64 65 20 78 6d 6c 6e 73 3a 61 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 77 73 2f 32 30 30 35 2f 30 35 2f 61 64 64 72 65 73 73 69 6e 67 2f 6e 6f 6e 65 22 3e 61 3a 41 63 74 69 6f 6e 4e 6f 74 53 75 70 70 6f 72 74 65 64 3c 2f 66 61 75 6c 74 63 6f 64 65 3e 3c 66 61 75 6c 74 73 74 72 69 6e 67 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 54 68 65 20 6d 65 73 73 61 67 65 20 77 69 74 68 20 41 63 74 69 6f 6e 20 27 68 74 74 70 3a 2f 2f 74 65 6d 70 75 72 69 2e 6f 72 67 2f 45 6e 64 70 6f 69 6e 74 2f 47 65 74 41 72 67 75 6d 65 6e 74 73 27 20 63 61 6e 6e 6f 74 20 62 65 20 70 72 6f 63 65 73 73 65 64 20 61 74 20 74 68 65 20 72 65 63 65 69 76 65 72 2c 20 64 75 65 20 74 6f 20 61 20 43 6f 6e 74 72 61 63 74 46 69 6c 74 65 72 20 6d 69 73 6d 61 74 63 68 20 61 74 20 74 68 65 20 45 6e 64 70 6f 69 6e 74 44 69 73 70 61 74 63 68 65 72 2e 20 54 68 69 73 20 6d 61 79 20 62 65 20 62 65 63 61 75 73 65 20 6f 66 20 65 69 74 68 65 72 20 61 20 63 6f 6e 74 72 61 63 74 20 6d 69 73 6d 61 74 63 68 20 28 6d 69 73 6d 61 74 63 68 65 64 20 41 63 74 69 6f 6e 73 20 62 65 74 77 65 65 6e 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 29 20 6f 72 20 61 20 62 69 6e 64 69 6e 67 2f 73 65 63 75 72 69 74 79 20 6d 69 73 6d 61 74 63 68 20 62 65 74 77 65 65 6e 20 74 68 65 20 73 65 6e 64 65 72 20 61 6e 64 20 74 68 65 20 72 65 63 65 69 76 65 72 2e 20 20 43 68 65 63 6b 20 74 68 61 74 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 20 68 61 76 65 20 74 68 65 20 73 61 6d 65 20 63 6f 6e 74 72 61 63 74 20 61 6e 64 20 74 68 65 20 73 61 6d 65 20 62 69 6e 64 69 6e 67 20 28 69 6e 63 6c 75 64 69 6e 67 20 73 65 63 75 72 69 74 79 20 72 65 71 75 69 72 65 6d 65 6e 74 73 2c 20 65 2e 67 2e 20 4d 65 73 73 61 67 65 2c 20 54 72 61 6e 73 70 6f 72 74 2c 20 4e 6f 6e 65 29 2e 3c 2f 66 61 75 6c 74 73 74 72 69 6e 67 3e 3c 2f 73 3a 46 61 75 6c 74 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/"><s:Body><s:Fault><faultcode xmlns:a="http://schemas.microsoft.com/ws/2005/05/addressing/none">a:ActionNotSupported</faultcode><faultstring xml:lang="en-US">The message with Action 'http://tempuri.org/Endpoint/GetArguments' cannot be processed at the receiver, due to a ContractFilter mismatch at the EndpointDispatcher. This may be because of either a contract mismatch (mismatched Actions between sender and receiver) or a binding/security mismatch between the sender and the receiver. Check that sender and receiver have the same contract and the same binding (including security requirements, e.g. Message, Transport, None).</faultstring></s:Fault></s:Body></s:Envelope>
Aug 3, 2021 23:09:42.060776949 CEST	10678	OUT	POST / HTTP/1.1 Content-Type: text/xml; charset=utf-8 SOAPAction: "http://tempuri.org/Endpoint/GetArguments" Host: 45.137.155.31:11556 Content-Length: 137 Expect: 100-continue Accept-Encoding: gzip, deflate
Aug 3, 2021 23:09:42.129812002 CEST	10678	IN	HTTP/1.1 100 Continue
Aug 3, 2021 23:09:42.199770927 CEST	10679	IN	HTTP/1.1 500 Internal Server Error Content-Length: 738 Content-Type: text/xml; charset=utf-8 Server: Microsoft-HTTPAPI/2.0 Date: Tue, 03 Aug 2021 21:09:41 GMT Data Raw: 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 73 3a 46 61 75 6c 74 3e 3c 66 61 75 6c 74 63 6f 64 65 20 78 6d 6c 6e 73 3a 61 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 77 73 2f 32 30 30 35 2f 30 35 2f 61 64 64 72 65 73 73 69 6e 67 2f 6e 6f 6e 65 22 3e 61 3a 41 63 74 69 6f 6e 4e 6f 74 53 75 70 70 6f 72 74 65 64 3c 2f 66 61 75 6c 74 63 6f 64 65 3e 3c 66 61 75 6c 74 73 74 72 69 6e 67 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 54 68 65 20 6d 65 73 73 61 67 65 20 77 69 74 68 20 41 63 74 69 6f 6e 20 27 68 74 74 70 3a 2f 2f 74 65 6d 70 75 72 69 2e 6f 72 67 2f 45 6e 64 70 6f 69 6e 74 2f 47 65 74 41 72 67 75 6d 65 6e 74 73 27 20 63 61 6e 6e 6f 74 20 62 65 20 70 72 6f 63 65 73 73 65 64 20 61 74 20 74 68 65 20 72 65 63 65 69 76 65 72 2c 20 64 75 65 20 74 6f 20 61 20 43 6f 6e 74 72 61 63 74 46 69 6c 74 65 72 20 6d 69 73 6d 61 74 63 68 20 61 74 20 74 68 65 20 45 6e 64 70 6f 69 6e 74 44 69 73 70 61 74 63 68 65 72 2e 20 54 68 69 73 20 6d 61 79 20 62 65 20 62 65 63 61 75 73 65 20 6f 66 20 65 69 74 68 65 72 20 61 20 63 6f 6e 74 72 61 63 74 20 6d 69 73 6d 61 74 63 68 20 28 6d 69 73 6d 61 74 63 68 65 64 20 41 63 74 69 6f 6e 73 20 62 65 74 77 65 65 6e 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 29 20 6f 72 20 61 20 62 69 6e 64 69 6e 67 2f 73 65 63 75 72 69 74 79 20 6d 69 73 6d 61 74 63 68 20 62 65 74 77 65 65 6e 20 74 68 65 20 73 65 6e 64 65 72 20 61 6e 64 20 74 68 65 20 72 65 63 65 69 76 65 72 2e 20 20 43 68 65 63 6b 20 74 68 61 74 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 20 68 61 76 65 20 74 68 65 20 73 61 6d 65 20 63 6f 6e 74 72 61 63 74 20 61 6e 64 20 74 68 65 20 73 61 6d 65 20 62 69 6e 64 69 6e 67 20 28 69 6e 63 6c 75 64 69 6e 67 20 73 65 63 75 72 69 74 79 20 72 65 71 75 69 72 65 6d 65 6e 74 73 2c 20 65 2e 67 2e 20 4d 65 73 73 61 67 65 2c 20 54 72 61 6e 73 70 6f 72 74 2c 20 4e 6f 6e 65 29 2e 3c 2f 66 61 75 6c 74 73 74 72 69 6e 67 3e 3c 2f 73 3a 46 61 75 6c 74 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/"><s:Body><s:Fault><faultcode xmlns:a="http://schemas.microsoft.com/ws/2005/05/addressing/none">a:ActionNotSupported</faultcode><faultstring xml:lang="en-US">The message with Action 'http://tempuri.org/Endpoint/GetArguments' cannot be processed at the receiver, due to a ContractFilter mismatch at the EndpointDispatcher. This may be because of either a contract mismatch (mismatched Actions between sender and receiver) or a binding/security mismatch between the sender and the receiver. Check that sender and receiver have the same contract and the same binding (including security requirements, e.g. Message, Transport, None).</faultstring></s:Fault></s:Body></s:Envelope>
Aug 3, 2021 23:09:43.217477083 CEST	10680	OUT	POST / HTTP/1.1 Content-Type: text/xml; charset=utf-8 SOAPAction: "http://tempuri.org/Endpoint/GetArguments" Host: 45.137.155.31:11556 Content-Length: 137 Expect: 100-continue Accept-Encoding: gzip, deflate
Aug 3, 2021 23:09:43.289048910 CEST	10681	IN	HTTP/1.1 100 Continue
Aug 3, 2021 23:09:43.360315084 CEST	10682	IN	HTTP/1.1 500 Internal Server Error Content-Length: 738 Content-Type: text/xml; charset=utf-8 Server: Microsoft-HTTPAPI/2.0 Date: Tue, 03 Aug 2021 21:09:43 GMT Data Raw: 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 73 3a 46 61 75 6c 74 3e 3c 66 61 75 6c 74 63 6f 64 65 20 78 6d 6c 6e 73 3a 61 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 77 73 2f 32 30 30 35 2f 30 35 2f 61 64 64 72 65 73 73 69 6e 67 2f 6e 6f 6e 65 22 3e 61 3a 41 63 74 69 6f 6e 4e 6f 74 53 75 70 70 6f 72 74 65 64 3c 2f 66 61 75 6c 74 63 6f 64 65 3e 3c 66 61 75 6c 74 73 74 72 69 6e 67 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 54 68 65 20 6d 65 73 73 61 67 65 20 77 69 74 68 20 41 63 74 69 6f 6e 20 27 68 74 74 70 3a 2f 2f 74 65 6d 70 75 72 69 2e 6f 72 67 2f 45 6e 64 70 6f 69 6e 74 2f 47 65 74 41 72 67 75 6d 65 6e 74 73 27 20 63 61 6e 6e 6f 74 20 62 65 20 70 72 6f 63 65 73 73 65 64 20 61 74 20 74 68 65 20 72 65 63 65 69 76 65 72 2c 20 64 75 65 20 74 6f 20 61 20 43 6f 6e 74 72 61 63 74 46 69 6c 74 65 72 20 6d 69 73 6d 61 74 63 68 20 61 74 20 74 68 65 20 45 6e 64 70 6f 69 6e 74 44 69 73 70 61 74 63 68 65 72 2e 20 54 68 69 73 20 6d 61 79 20 62 65 20 62 65 63 61 75 73 65 20 6f 66 20 65 69 74 68 65 72 20 61 20 63 6f 6e 74 72 61 63 74 20 6d 69 73 6d 61 74 63 68 20 28 6d 69 73 6d 61 74 63 68 65 64 20 41 63 74 69 6f 6e 73 20 62 65 74 77 65 65 6e 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 29 20 6f 72 20 61 20 62 69 6e 64 69 6e 67 2f 73 65 63 75 72 69 74 79 20 6d 69 73 6d 61 74 63 68 20 62 65 74 77 65 65 6e 20 74 68 65 20 73 65 6e 64 65 72 20 61 6e 64 20 74 68 65 20 72 65 63 65 69 76 65 72 2e 20 20 43 68 65 63 6b 20 74 68 61 74 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 20 68 61 76 65 20 74 68 65 20 73 61 6d 65 20 63 6f 6e 74 72 61 63 74 20 61 6e 64 20 74 68 65 20 73 61 6d 65 20 62 69 6e 64 69 6e 67 20 28 69 6e 63 6c 75 64 69 6e 67 20 73 65 63 75 72 69 74 79 20 72 65 71 75 69 72 65 6d 65 6e 74 73 2c 20 65 2e 67 2e 20 4d 65 73 73 61 67 65 2c 20 54 72 61 6e 73 70 6f 72 74 2c 20 4e 6f 6e 65 29 2e 3c 2f 66 61 75 6c 74 73 74 72 69 6e 67 3e 3c 2f 73 3a 46 61 75 6c 74 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/"><s:Body><s:Fault><faultcode xmlns:a="http://schemas.microsoft.com/ws/2005/05/addressing/none">a:ActionNotSupported</faultcode><faultstring xml:lang="en-US">The message with Action 'http://tempuri.org/Endpoint/GetArguments' cannot be processed at the receiver, due to a ContractFilter mismatch at the EndpointDispatcher. This may be because of either a contract mismatch (mismatched Actions between sender and receiver) or a binding/security mismatch between the sender and the receiver. Check that sender and receiver have the same contract and the same binding (including security requirements, e.g. Message, Transport, None).</faultstring></s:Fault></s:Body></s:Envelope>
Aug 3, 2021 23:09:44.373850107 CEST	10682	OUT	POST / HTTP/1.1 Content-Type: text/xml; charset=utf-8 SOAPAction: "http://tempuri.org/Endpoint/GetArguments" Host: 45.137.155.31:11556 Content-Length: 137 Expect: 100-continue Accept-Encoding: gzip, deflate
Aug 3, 2021 23:09:44.445511103 CEST	10682	IN	HTTP/1.1 100 Continue
Aug 3, 2021 23:09:44.515374899 CEST	10683	IN	HTTP/1.1 500 Internal Server Error Content-Length: 738 Content-Type: text/xml; charset=utf-8 Server: Microsoft-HTTPAPI/2.0 Date: Tue, 03 Aug 2021 21:09:44 GMT Data Raw: 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 73 3a 46 61 75 6c 74 3e 3c 66 61 75 6c 74 63 6f 64 65 20 78 6d 6c 6e 73 3a 61 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 77 73 2f 32 30 30 35 2f 30 35 2f 61 64 64 72 65 73 73 69 6e 67 2f 6e 6f 6e 65 22 3e 61 3a 41 63 74 69 6f 6e 4e 6f 74 53 75 70 70 6f 72 74 65 64 3c 2f 66 61 75 6c 74 63 6f 64 65 3e 3c 66 61 75 6c 74 73 74 72 69 6e 67 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 54 68 65 20 6d 65 73 73 61 67 65 20 77 69 74 68 20 41 63 74 69 6f 6e 20 27 68 74 74 70 3a 2f 2f 74 65 6d 70 75 72 69 2e 6f 72 67 2f 45 6e 64 70 6f 69 6e 74 2f 47 65 74 41 72 67 75 6d 65 6e 74 73 27 20 63 61 6e 6e 6f 74 20 62 65 20 70 72 6f 63 65 73 73 65 64 20 61 74 20 74 68 65 20 72 65 63 65 69 76 65 72 2c 20 64 75 65 20 74 6f 20 61 20 43 6f 6e 74 72 61 63 74 46 69 6c 74 65 72 20 6d 69 73 6d 61 74 63 68 20 61 74 20 74 68 65 20 45 6e 64 70 6f 69 6e 74 44 69 73 70 61 74 63 68 65 72 2e 20 54 68 69 73 20 6d 61 79 20 62 65 20 62 65 63 61 75 73 65 20 6f 66 20 65 69 74 68 65 72 20 61 20 63 6f 6e 74 72 61 63 74 20 6d 69 73 6d 61 74 63 68 20 28 6d 69 73 6d 61 74 63 68 65 64 20 41 63 74 69 6f 6e 73 20 62 65 74 77 65 65 6e 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 29 20 6f 72 20 61 20 62 69 6e 64 69 6e 67 2f 73 65 63 75 72 69 74 79 20 6d 69 73 6d 61 74 63 68 20 62 65 74 77 65 65 6e 20 74 68 65 20 73 65 6e 64 65 72 20 61 6e 64 20 74 68 65 20 72 65 63 65 69 76 65 72 2e 20 20 43 68 65 63 6b 20 74 68 61 74 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 20 68 61 76 65 20 74 68 65 20 73 61 6d 65 20 63 6f 6e 74 72 61 63 74 20 61 6e 64 20 74 68 65 20 73 61 6d 65 20 62 69 6e 64 69 6e 67 20 28 69 6e 63 6c 75 64 69 6e 67 20 73 65 63 75 72 69 74 79 20 72 65 71 75 69 72 65 6d 65 6e 74 73 2c 20 65 2e 67 2e 20 4d 65 73 73 61 67 65 2c 20 54 72 61 6e 73 70 6f 72 74 2c 20 4e 6f 6e 65 29 2e 3c 2f 66 61 75 6c 74 73 74 72 69 6e 67 3e 3c 2f 73 3a 46 61 75 6c 74 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/"><s:Body><s:Fault><faultcode xmlns:a="http://schemas.microsoft.com/ws/2005/05/addressing/none">a:ActionNotSupported</faultcode><faultstring xml:lang="en-US">The message with Action 'http://tempuri.org/Endpoint/GetArguments' cannot be processed at the receiver, due to a ContractFilter mismatch at the EndpointDispatcher. This may be because of either a contract mismatch (mismatched Actions between sender and receiver) or a binding/security mismatch between the sender and the receiver. Check that sender and receiver have the same contract and the same binding (including security requirements, e.g. Message, Transport, None).</faultstring></s:Fault></s:Body></s:Envelope>
Aug 3, 2021 23:09:45.529772997 CEST	10684	OUT	POST / HTTP/1.1 Content-Type: text/xml; charset=utf-8 SOAPAction: "http://tempuri.org/Endpoint/GetArguments" Host: 45.137.155.31:11556 Content-Length: 137 Expect: 100-continue Accept-Encoding: gzip, deflate
Aug 3, 2021 23:09:45.598979950 CEST	10684	IN	HTTP/1.1 100 Continue
Aug 3, 2021 23:09:45.670629025 CEST	10685	IN	HTTP/1.1 500 Internal Server Error Content-Length: 738 Content-Type: text/xml; charset=utf-8 Server: Microsoft-HTTPAPI/2.0 Date: Tue, 03 Aug 2021 21:09:45 GMT Data Raw: 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 73 3a 46 61 75 6c 74 3e 3c 66 61 75 6c 74 63 6f 64 65 20 78 6d 6c 6e 73 3a 61 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 77 73 2f 32 30 30 35 2f 30 35 2f 61 64 64 72 65 73 73 69 6e 67 2f 6e 6f 6e 65 22 3e 61 3a 41 63 74 69 6f 6e 4e 6f 74 53 75 70 70 6f 72 74 65 64 3c 2f 66 61 75 6c 74 63 6f 64 65 3e 3c 66 61 75 6c 74 73 74 72 69 6e 67 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 54 68 65 20 6d 65 73 73 61 67 65 20 77 69 74 68 20 41 63 74 69 6f 6e 20 27 68 74 74 70 3a 2f 2f 74 65 6d 70 75 72 69 2e 6f 72 67 2f 45 6e 64 70 6f 69 6e 74 2f 47 65 74 41 72 67 75 6d 65 6e 74 73 27 20 63 61 6e 6e 6f 74 20 62 65 20 70 72 6f 63 65 73 73 65 64 20 61 74 20 74 68 65 20 72 65 63 65 69 76 65 72 2c 20 64 75 65 20 74 6f 20 61 20 43 6f 6e 74 72 61 63 74 46 69 6c 74 65 72 20 6d 69 73 6d 61 74 63 68 20 61 74 20 74 68 65 20 45 6e 64 70 6f 69 6e 74 44 69 73 70 61 74 63 68 65 72 2e 20 54 68 69 73 20 6d 61 79 20 62 65 20 62 65 63 61 75 73 65 20 6f 66 20 65 69 74 68 65 72 20 61 20 63 6f 6e 74 72 61 63 74 20 6d 69 73 6d 61 74 63 68 20 28 6d 69 73 6d 61 74 63 68 65 64 20 41 63 74 69 6f 6e 73 20 62 65 74 77 65 65 6e 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 29 20 6f 72 20 61 20 62 69 6e 64 69 6e 67 2f 73 65 63 75 72 69 74 79 20 6d 69 73 6d 61 74 63 68 20 62 65 74 77 65 65 6e 20 74 68 65 20 73 65 6e 64 65 72 20 61 6e 64 20 74 68 65 20 72 65 63 65 69 76 65 72 2e 20 20 43 68 65 63 6b 20 74 68 61 74 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 20 68 61 76 65 20 74 68 65 20 73 61 6d 65 20 63 6f 6e 74 72 61 63 74 20 61 6e 64 20 74 68 65 20 73 61 6d 65 20 62 69 6e 64 69 6e 67 20 28 69 6e 63 6c 75 64 69 6e 67 20 73 65 63 75 72 69 74 79 20 72 65 71 75 69 72 65 6d 65 6e 74 73 2c 20 65 2e 67 2e 20 4d 65 73 73 61 67 65 2c 20 54 72 61 6e 73 70 6f 72 74 2c 20 4e 6f 6e 65 29 2e 3c 2f 66 61 75 6c 74 73 74 72 69 6e 67 3e 3c 2f 73 3a 46 61 75 6c 74 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/"><s:Body><s:Fault><faultcode xmlns:a="http://schemas.microsoft.com/ws/2005/05/addressing/none">a:ActionNotSupported</faultcode><faultstring xml:lang="en-US">The message with Action 'http://tempuri.org/Endpoint/GetArguments' cannot be processed at the receiver, due to a ContractFilter mismatch at the EndpointDispatcher. This may be because of either a contract mismatch (mismatched Actions between sender and receiver) or a binding/security mismatch between the sender and the receiver. Check that sender and receiver have the same contract and the same binding (including security requirements, e.g. Message, Transport, None).</faultstring></s:Fault></s:Body></s:Envelope>
Aug 3, 2021 23:09:46.685693026 CEST	10685	OUT	POST / HTTP/1.1 Content-Type: text/xml; charset=utf-8 SOAPAction: "http://tempuri.org/Endpoint/GetArguments" Host: 45.137.155.31:11556 Content-Length: 137 Expect: 100-continue Accept-Encoding: gzip, deflate
Aug 3, 2021 23:09:46.754786015 CEST	10685	IN	HTTP/1.1 100 Continue
Aug 3, 2021 23:09:46.832741976 CEST	10686	IN	HTTP/1.1 500 Internal Server Error Content-Length: 738 Content-Type: text/xml; charset=utf-8 Server: Microsoft-HTTPAPI/2.0 Date: Tue, 03 Aug 2021 21:09:46 GMT Data Raw: 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 73 3a 46 61 75 6c 74 3e 3c 66 61 75 6c 74 63 6f 64 65 20 78 6d 6c 6e 73 3a 61 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 77 73 2f 32 30 30 35 2f 30 35 2f 61 64 64 72 65 73 73 69 6e 67 2f 6e 6f 6e 65 22 3e 61 3a 41 63 74 69 6f 6e 4e 6f 74 53 75 70 70 6f 72 74 65 64 3c 2f 66 61 75 6c 74 63 6f 64 65 3e 3c 66 61 75 6c 74 73 74 72 69 6e 67 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 54 68 65 20 6d 65 73 73 61 67 65 20 77 69 74 68 20 41 63 74 69 6f 6e 20 27 68 74 74 70 3a 2f 2f 74 65 6d 70 75 72 69 2e 6f 72 67 2f 45 6e 64 70 6f 69 6e 74 2f 47 65 74 41 72 67 75 6d 65 6e 74 73 27 20 63 61 6e 6e 6f 74 20 62 65 20 70 72 6f 63 65 73 73 65 64 20 61 74 20 74 68 65 20 72 65 63 65 69 76 65 72 2c 20 64 75 65 20 74 6f 20 61 20 43 6f 6e 74 72 61 63 74 46 69 6c 74 65 72 20 6d 69 73 6d 61 74 63 68 20 61 74 20 74 68 65 20 45 6e 64 70 6f 69 6e 74 44 69 73 70 61 74 63 68 65 72 2e 20 54 68 69 73 20 6d 61 79 20 62 65 20 62 65 63 61 75 73 65 20 6f 66 20 65 69 74 68 65 72 20 61 20 63 6f 6e 74 72 61 63 74 20 6d 69 73 6d 61 74 63 68 20 28 6d 69 73 6d 61 74 63 68 65 64 20 41 63 74 69 6f 6e 73 20 62 65 74 77 65 65 6e 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 29 20 6f 72 20 61 20 62 69 6e 64 69 6e 67 2f 73 65 63 75 72 69 74 79 20 6d 69 73 6d 61 74 63 68 20 62 65 74 77 65 65 6e 20 74 68 65 20 73 65 6e 64 65 72 20 61 6e 64 20 74 68 65 20 72 65 63 65 69 76 65 72 2e 20 20 43 68 65 63 6b 20 74 68 61 74 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 20 68 61 76 65 20 74 68 65 20 73 61 6d 65 20 63 6f 6e 74 72 61 63 74 20 61 6e 64 20 74 68 65 20 73 61 6d 65 20 62 69 6e 64 69 6e 67 20 28 69 6e 63 6c 75 64 69 6e 67 20 73 65 63 75 72 69 74 79 20 72 65 71 75 69 72 65 6d 65 6e 74 73 2c 20 65 2e 67 2e 20 4d 65 73 73 61 67 65 2c 20 54 72 61 6e 73 70 6f 72 74 2c 20 4e 6f 6e 65 29 2e 3c 2f 66 61 75 6c 74 73 74 72 69 6e 67 3e 3c 2f 73 3a 46 61 75 6c 74 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/"><s:Body><s:Fault><faultcode xmlns:a="http://schemas.microsoft.com/ws/2005/05/addressing/none">a:ActionNotSupported</faultcode><faultstring xml:lang="en-US">The message with Action 'http://tempuri.org/Endpoint/GetArguments' cannot be processed at the receiver, due to a ContractFilter mismatch at the EndpointDispatcher. This may be because of either a contract mismatch (mismatched Actions between sender and receiver) or a binding/security mismatch between the sender and the receiver. Check that sender and receiver have the same contract and the same binding (including security requirements, e.g. Message, Transport, None).</faultstring></s:Fault></s:Body></s:Envelope>
Aug 3, 2021 23:09:47.842459917 CEST	10687	OUT	POST / HTTP/1.1 Content-Type: text/xml; charset=utf-8 SOAPAction: "http://tempuri.org/Endpoint/GetArguments" Host: 45.137.155.31:11556 Content-Length: 137 Expect: 100-continue Accept-Encoding: gzip, deflate
Aug 3, 2021 23:09:47.930561066 CEST	10687	IN	HTTP/1.1 100 Continue
Aug 3, 2021 23:09:48.010165930 CEST	10688	IN	HTTP/1.1 500 Internal Server Error Content-Length: 738 Content-Type: text/xml; charset=utf-8 Server: Microsoft-HTTPAPI/2.0 Date: Tue, 03 Aug 2021 21:09:47 GMT Data Raw: 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 73 3a 46 61 75 6c 74 3e 3c 66 61 75 6c 74 63 6f 64 65 20 78 6d 6c 6e 73 3a 61 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 77 73 2f 32 30 30 35 2f 30 35 2f 61 64 64 72 65 73 73 69 6e 67 2f 6e 6f 6e 65 22 3e 61 3a 41 63 74 69 6f 6e 4e 6f 74 53 75 70 70 6f 72 74 65 64 3c 2f 66 61 75 6c 74 63 6f 64 65 3e 3c 66 61 75 6c 74 73 74 72 69 6e 67 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 54 68 65 20 6d 65 73 73 61 67 65 20 77 69 74 68 20 41 63 74 69 6f 6e 20 27 68 74 74 70 3a 2f 2f 74 65 6d 70 75 72 69 2e 6f 72 67 2f 45 6e 64 70 6f 69 6e 74 2f 47 65 74 41 72 67 75 6d 65 6e 74 73 27 20 63 61 6e 6e 6f 74 20 62 65 20 70 72 6f 63 65 73 73 65 64 20 61 74 20 74 68 65 20 72 65 63 65 69 76 65 72 2c 20 64 75 65 20 74 6f 20 61 20 43 6f 6e 74 72 61 63 74 46 69 6c 74 65 72 20 6d 69 73 6d 61 74 63 68 20 61 74 20 74 68 65 20 45 6e 64 70 6f 69 6e 74 44 69 73 70 61 74 63 68 65 72 2e 20 54 68 69 73 20 6d 61 79 20 62 65 20 62 65 63 61 75 73 65 20 6f 66 20 65 69 74 68 65 72 20 61 20 63 6f 6e 74 72 61 63 74 20 6d 69 73 6d 61 74 63 68 20 28 6d 69 73 6d 61 74 63 68 65 64 20 41 63 74 69 6f 6e 73 20 62 65 74 77 65 65 6e 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 29 20 6f 72 20 61 20 62 69 6e 64 69 6e 67 2f 73 65 63 75 72 69 74 79 20 6d 69 73 6d 61 74 63 68 20 62 65 74 77 65 65 6e 20 74 68 65 20 73 65 6e 64 65 72 20 61 6e 64 20 74 68 65 20 72 65 63 65 69 76 65 72 2e 20 20 43 68 65 63 6b 20 74 68 61 74 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 20 68 61 76 65 20 74 68 65 20 73 61 6d 65 20 63 6f 6e 74 72 61 63 74 20 61 6e 64 20 74 68 65 20 73 61 6d 65 20 62 69 6e 64 69 6e 67 20 28 69 6e 63 6c 75 64 69 6e 67 20 73 65 63 75 72 69 74 79 20 72 65 71 75 69 72 65 6d 65 6e 74 73 2c 20 65 2e 67 2e 20 4d 65 73 73 61 67 65 2c 20 54 72 61 6e 73 70 6f 72 74 2c 20 4e 6f 6e 65 29 2e 3c 2f 66 61 75 6c 74 73 74 72 69 6e 67 3e 3c 2f 73 3a 46 61 75 6c 74 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/"><s:Body><s:Fault><faultcode xmlns:a="http://schemas.microsoft.com/ws/2005/05/addressing/none">a:ActionNotSupported</faultcode><faultstring xml:lang="en-US">The message with Action 'http://tempuri.org/Endpoint/GetArguments' cannot be processed at the receiver, due to a ContractFilter mismatch at the EndpointDispatcher. This may be because of either a contract mismatch (mismatched Actions between sender and receiver) or a binding/security mismatch between the sender and the receiver. Check that sender and receiver have the same contract and the same binding (including security requirements, e.g. Message, Transport, None).</faultstring></s:Fault></s:Body></s:Envelope>
Aug 3, 2021 23:09:49.014729977 CEST	10688	OUT	POST / HTTP/1.1 Content-Type: text/xml; charset=utf-8 SOAPAction: "http://tempuri.org/Endpoint/GetArguments" Host: 45.137.155.31:11556 Content-Length: 137 Expect: 100-continue Accept-Encoding: gzip, deflate
Aug 3, 2021 23:09:49.085124016 CEST	10688	IN	HTTP/1.1 100 Continue
Aug 3, 2021 23:09:49.156687975 CEST	10689	IN	HTTP/1.1 500 Internal Server Error Content-Length: 738 Content-Type: text/xml; charset=utf-8 Server: Microsoft-HTTPAPI/2.0 Date: Tue, 03 Aug 2021 21:09:48 GMT Data Raw: 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 73 3a 46 61 75 6c 74 3e 3c 66 61 75 6c 74 63 6f 64 65 20 78 6d 6c 6e 73 3a 61 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 77 73 2f 32 30 30 35 2f 30 35 2f 61 64 64 72 65 73 73 69 6e 67 2f 6e 6f 6e 65 22 3e 61 3a 41 63 74 69 6f 6e 4e 6f 74 53 75 70 70 6f 72 74 65 64 3c 2f 66 61 75 6c 74 63 6f 64 65 3e 3c 66 61 75 6c 74 73 74 72 69 6e 67 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 54 68 65 20 6d 65 73 73 61 67 65 20 77 69 74 68 20 41 63 74 69 6f 6e 20 27 68 74 74 70 3a 2f 2f 74 65 6d 70 75 72 69 2e 6f 72 67 2f 45 6e 64 70 6f 69 6e 74 2f 47 65 74 41 72 67 75 6d 65 6e 74 73 27 20 63 61 6e 6e 6f 74 20 62 65 20 70 72 6f 63 65 73 73 65 64 20 61 74 20 74 68 65 20 72 65 63 65 69 76 65 72 2c 20 64 75 65 20 74 6f 20 61 20 43 6f 6e 74 72 61 63 74 46 69 6c 74 65 72 20 6d 69 73 6d 61 74 63 68 20 61 74 20 74 68 65 20 45 6e 64 70 6f 69 6e 74 44 69 73 70 61 74 63 68 65 72 2e 20 54 68 69 73 20 6d 61 79 20 62 65 20 62 65 63 61 75 73 65 20 6f 66 20 65 69 74 68 65 72 20 61 20 63 6f 6e 74 72 61 63 74 20 6d 69 73 6d 61 74 63 68 20 28 6d 69 73 6d 61 74 63 68 65 64 20 41 63 74 69 6f 6e 73 20 62 65 74 77 65 65 6e 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 29 20 6f 72 20 61 20 62 69 6e 64 69 6e 67 2f 73 65 63 75 72 69 74 79 20 6d 69 73 6d 61 74 63 68 20 62 65 74 77 65 65 6e 20 74 68 65 20 73 65 6e 64 65 72 20 61 6e 64 20 74 68 65 20 72 65 63 65 69 76 65 72 2e 20 20 43 68 65 63 6b 20 74 68 61 74 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 20 68 61 76 65 20 74 68 65 20 73 61 6d 65 20 63 6f 6e 74 72 61 63 74 20 61 6e 64 20 74 68 65 20 73 61 6d 65 20 62 69 6e 64 69 6e 67 20 28 69 6e 63 6c 75 64 69 6e 67 20 73 65 63 75 72 69 74 79 20 72 65 71 75 69 72 65 6d 65 6e 74 73 2c 20 65 2e 67 2e 20 4d 65 73 73 61 67 65 2c 20 54 72 61 6e 73 70 6f 72 74 2c 20 4e 6f 6e 65 29 2e 3c 2f 66 61 75 6c 74 73 74 72 69 6e 67 3e 3c 2f 73 3a 46 61 75 6c 74 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/"><s:Body><s:Fault><faultcode xmlns:a="http://schemas.microsoft.com/ws/2005/05/addressing/none">a:ActionNotSupported</faultcode><faultstring xml:lang="en-US">The message with Action 'http://tempuri.org/Endpoint/GetArguments' cannot be processed at the receiver, due to a ContractFilter mismatch at the EndpointDispatcher. This may be because of either a contract mismatch (mismatched Actions between sender and receiver) or a binding/security mismatch between the sender and the receiver. Check that sender and receiver have the same contract and the same binding (including security requirements, e.g. Message, Transport, None).</faultstring></s:Fault></s:Body></s:Envelope>
Aug 3, 2021 23:09:50.170488119 CEST	10690	OUT	POST / HTTP/1.1 Content-Type: text/xml; charset=utf-8 SOAPAction: "http://tempuri.org/Endpoint/GetArguments" Host: 45.137.155.31:11556 Content-Length: 137 Expect: 100-continue Accept-Encoding: gzip, deflate
Aug 3, 2021 23:09:50.239442110 CEST	10690	IN	HTTP/1.1 100 Continue
Aug 3, 2021 23:09:50.313112974 CEST	10691	IN	HTTP/1.1 500 Internal Server Error Content-Length: 738 Content-Type: text/xml; charset=utf-8 Server: Microsoft-HTTPAPI/2.0 Date: Tue, 03 Aug 2021 21:09:49 GMT Data Raw: 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 73 3a 46 61 75 6c 74 3e 3c 66 61 75 6c 74 63 6f 64 65 20 78 6d 6c 6e 73 3a 61 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 77 73 2f 32 30 30 35 2f 30 35 2f 61 64 64 72 65 73 73 69 6e 67 2f 6e 6f 6e 65 22 3e 61 3a 41 63 74 69 6f 6e 4e 6f 74 53 75 70 70 6f 72 74 65 64 3c 2f 66 61 75 6c 74 63 6f 64 65 3e 3c 66 61 75 6c 74 73 74 72 69 6e 67 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 54 68 65 20 6d 65 73 73 61 67 65 20 77 69 74 68 20 41 63 74 69 6f 6e 20 27 68 74 74 70 3a 2f 2f 74 65 6d 70 75 72 69 2e 6f 72 67 2f 45 6e 64 70 6f 69 6e 74 2f 47 65 74 41 72 67 75 6d 65 6e 74 73 27 20 63 61 6e 6e 6f 74 20 62 65 20 70 72 6f 63 65 73 73 65 64 20 61 74 20 74 68 65 20 72 65 63 65 69 76 65 72 2c 20 64 75 65 20 74 6f 20 61 20 43 6f 6e 74 72 61 63 74 46 69 6c 74 65 72 20 6d 69 73 6d 61 74 63 68 20 61 74 20 74 68 65 20 45 6e 64 70 6f 69 6e 74 44 69 73 70 61 74 63 68 65 72 2e 20 54 68 69 73 20 6d 61 79 20 62 65 20 62 65 63 61 75 73 65 20 6f 66 20 65 69 74 68 65 72 20 61 20 63 6f 6e 74 72 61 63 74 20 6d 69 73 6d 61 74 63 68 20 28 6d 69 73 6d 61 74 63 68 65 64 20 41 63 74 69 6f 6e 73 20 62 65 74 77 65 65 6e 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 29 20 6f 72 20 61 20 62 69 6e 64 69 6e 67 2f 73 65 63 75 72 69 74 79 20 6d 69 73 6d 61 74 63 68 20 62 65 74 77 65 65 6e 20 74 68 65 20 73 65 6e 64 65 72 20 61 6e 64 20 74 68 65 20 72 65 63 65 69 76 65 72 2e 20 20 43 68 65 63 6b 20 74 68 61 74 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 20 68 61 76 65 20 74 68 65 20 73 61 6d 65 20 63 6f 6e 74 72 61 63 74 20 61 6e 64 20 74 68 65 20 73 61 6d 65 20 62 69 6e 64 69 6e 67 20 28 69 6e 63 6c 75 64 69 6e 67 20 73 65 63 75 72 69 74 79 20 72 65 71 75 69 72 65 6d 65 6e 74 73 2c 20 65 2e 67 2e 20 4d 65 73 73 61 67 65 2c 20 54 72 61 6e 73 70 6f 72 74 2c 20 4e 6f 6e 65 29 2e 3c 2f 66 61 75 6c 74 73 74 72 69 6e 67 3e 3c 2f 73 3a 46 61 75 6c 74 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/"><s:Body><s:Fault><faultcode xmlns:a="http://schemas.microsoft.com/ws/2005/05/addressing/none">a:ActionNotSupported</faultcode><faultstring xml:lang="en-US">The message with Action 'http://tempuri.org/Endpoint/GetArguments' cannot be processed at the receiver, due to a ContractFilter mismatch at the EndpointDispatcher. This may be because of either a contract mismatch (mismatched Actions between sender and receiver) or a binding/security mismatch between the sender and the receiver. Check that sender and receiver have the same contract and the same binding (including security requirements, e.g. Message, Transport, None).</faultstring></s:Fault></s:Body></s:Envelope>
Aug 3, 2021 23:09:51.327889919 CEST	10691	OUT	POST / HTTP/1.1 Content-Type: text/xml; charset=utf-8 SOAPAction: "http://tempuri.org/Endpoint/GetArguments" Host: 45.137.155.31:11556 Content-Length: 137 Expect: 100-continue Accept-Encoding: gzip, deflate
Aug 3, 2021 23:09:51.397778034 CEST	10691	IN	HTTP/1.1 100 Continue
Aug 3, 2021 23:09:51.531280994 CEST	10692	IN	HTTP/1.1 500 Internal Server Error Content-Length: 738 Content-Type: text/xml; charset=utf-8 Server: Microsoft-HTTPAPI/2.0 Date: Tue, 03 Aug 2021 21:09:51 GMT Data Raw: 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 73 3a 46 61 75 6c 74 3e 3c 66 61 75 6c 74 63 6f 64 65 20 78 6d 6c 6e 73 3a 61 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 77 73 2f 32 30 30 35 2f 30 35 2f 61 64 64 72 65 73 73 69 6e 67 2f 6e 6f 6e 65 22 3e 61 3a 41 63 74 69 6f 6e 4e 6f 74 53 75 70 70 6f 72 74 65 64 3c 2f 66 61 75 6c 74 63 6f 64 65 3e 3c 66 61 75 6c 74 73 74 72 69 6e 67 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 54 68 65 20 6d 65 73 73 61 67 65 20 77 69 74 68 20 41 63 74 69 6f 6e 20 27 68 74 74 70 3a 2f 2f 74 65 6d 70 75 72 69 2e 6f 72 67 2f 45 6e 64 70 6f 69 6e 74 2f 47 65 74 41 72 67 75 6d 65 6e 74 73 27 20 63 61 6e 6e 6f 74 20 62 65 20 70 72 6f 63 65 73 73 65 64 20 61 74 20 74 68 65 20 72 65 63 65 69 76 65 72 2c 20 64 75 65 20 74 6f 20 61 20 43 6f 6e 74 72 61 63 74 46 69 6c 74 65 72 20 6d 69 73 6d 61 74 63 68 20 61 74 20 74 68 65 20 45 6e 64 70 6f 69 6e 74 44 69 73 70 61 74 63 68 65 72 2e 20 54 68 69 73 20 6d 61 79 20 62 65 20 62 65 63 61 75 73 65 20 6f 66 20 65 69 74 68 65 72 20 61 20 63 6f 6e 74 72 61 63 74 20 6d 69 73 6d 61 74 63 68 20 28 6d 69 73 6d 61 74 63 68 65 64 20 41 63 74 69 6f 6e 73 20 62 65 74 77 65 65 6e 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 29 20 6f 72 20 61 20 62 69 6e 64 69 6e 67 2f 73 65 63 75 72 69 74 79 20 6d 69 73 6d 61 74 63 68 20 62 65 74 77 65 65 6e 20 74 68 65 20 73 65 6e 64 65 72 20 61 6e 64 20 74 68 65 20 72 65 63 65 69 76 65 72 2e 20 20 43 68 65 63 6b 20 74 68 61 74 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 20 68 61 76 65 20 74 68 65 20 73 61 6d 65 20 63 6f 6e 74 72 61 63 74 20 61 6e 64 20 74 68 65 20 73 61 6d 65 20 62 69 6e 64 69 6e 67 20 28 69 6e 63 6c 75 64 69 6e 67 20 73 65 63 75 72 69 74 79 20 72 65 71 75 69 72 65 6d 65 6e 74 73 2c 20 65 2e 67 2e 20 4d 65 73 73 61 67 65 2c 20 54 72 61 6e 73 70 6f 72 74 2c 20 4e 6f 6e 65 29 2e 3c 2f 66 61 75 6c 74 73 74 72 69 6e 67 3e 3c 2f 73 3a 46 61 75 6c 74 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/"><s:Body><s:Fault><faultcode xmlns:a="http://schemas.microsoft.com/ws/2005/05/addressing/none">a:ActionNotSupported</faultcode><faultstring xml:lang="en-US">The message with Action 'http://tempuri.org/Endpoint/GetArguments' cannot be processed at the receiver, due to a ContractFilter mismatch at the EndpointDispatcher. This may be because of either a contract mismatch (mismatched Actions between sender and receiver) or a binding/security mismatch between the sender and the receiver. Check that sender and receiver have the same contract and the same binding (including security requirements, e.g. Message, Transport, None).</faultstring></s:Fault></s:Body></s:Envelope>
Aug 3, 2021 23:09:52.817751884 CEST	10693	OUT	POST / HTTP/1.1 Content-Type: text/xml; charset=utf-8 SOAPAction: "http://tempuri.org/Endpoint/GetArguments" Host: 45.137.155.31:11556 Content-Length: 137 Expect: 100-continue Accept-Encoding: gzip, deflate
Aug 3, 2021 23:09:52.886411905 CEST	10693	IN	HTTP/1.1 100 Continue
Aug 3, 2021 23:09:52.957573891 CEST	10694	IN	HTTP/1.1 500 Internal Server Error Content-Length: 738 Content-Type: text/xml; charset=utf-8 Server: Microsoft-HTTPAPI/2.0 Date: Tue, 03 Aug 2021 21:09:52 GMT Data Raw: 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 73 3a 46 61 75 6c 74 3e 3c 66 61 75 6c 74 63 6f 64 65 20 78 6d 6c 6e 73 3a 61 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 77 73 2f 32 30 30 35 2f 30 35 2f 61 64 64 72 65 73 73 69 6e 67 2f 6e 6f 6e 65 22 3e 61 3a 41 63 74 69 6f 6e 4e 6f 74 53 75 70 70 6f 72 74 65 64 3c 2f 66 61 75 6c 74 63 6f 64 65 3e 3c 66 61 75 6c 74 73 74 72 69 6e 67 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 54 68 65 20 6d 65 73 73 61 67 65 20 77 69 74 68 20 41 63 74 69 6f 6e 20 27 68 74 74 70 3a 2f 2f 74 65 6d 70 75 72 69 2e 6f 72 67 2f 45 6e 64 70 6f 69 6e 74 2f 47 65 74 41 72 67 75 6d 65 6e 74 73 27 20 63 61 6e 6e 6f 74 20 62 65 20 70 72 6f 63 65 73 73 65 64 20 61 74 20 74 68 65 20 72 65 63 65 69 76 65 72 2c 20 64 75 65 20 74 6f 20 61 20 43 6f 6e 74 72 61 63 74 46 69 6c 74 65 72 20 6d 69 73 6d 61 74 63 68 20 61 74 20 74 68 65 20 45 6e 64 70 6f 69 6e 74 44 69 73 70 61 74 63 68 65 72 2e 20 54 68 69 73 20 6d 61 79 20 62 65 20 62 65 63 61 75 73 65 20 6f 66 20 65 69 74 68 65 72 20 61 20 63 6f 6e 74 72 61 63 74 20 6d 69 73 6d 61 74 63 68 20 28 6d 69 73 6d 61 74 63 68 65 64 20 41 63 74 69 6f 6e 73 20 62 65 74 77 65 65 6e 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 29 20 6f 72 20 61 20 62 69 6e 64 69 6e 67 2f 73 65 63 75 72 69 74 79 20 6d 69 73 6d 61 74 63 68 20 62 65 74 77 65 65 6e 20 74 68 65 20 73 65 6e 64 65 72 20 61 6e 64 20 74 68 65 20 72 65 63 65 69 76 65 72 2e 20 20 43 68 65 63 6b 20 74 68 61 74 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 20 68 61 76 65 20 74 68 65 20 73 61 6d 65 20 63 6f 6e 74 72 61 63 74 20 61 6e 64 20 74 68 65 20 73 61 6d 65 20 62 69 6e 64 69 6e 67 20 28 69 6e 63 6c 75 64 69 6e 67 20 73 65 63 75 72 69 74 79 20 72 65 71 75 69 72 65 6d 65 6e 74 73 2c 20 65 2e 67 2e 20 4d 65 73 73 61 67 65 2c 20 54 72 61 6e 73 70 6f 72 74 2c 20 4e 6f 6e 65 29 2e 3c 2f 66 61 75 6c 74 73 74 72 69 6e 67 3e 3c 2f 73 3a 46 61 75 6c 74 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/"><s:Body><s:Fault><faultcode xmlns:a="http://schemas.microsoft.com/ws/2005/05/addressing/none">a:ActionNotSupported</faultcode><faultstring xml:lang="en-US">The message with Action 'http://tempuri.org/Endpoint/GetArguments' cannot be processed at the receiver, due to a ContractFilter mismatch at the EndpointDispatcher. This may be because of either a contract mismatch (mismatched Actions between sender and receiver) or a binding/security mismatch between the sender and the receiver. Check that sender and receiver have the same contract and the same binding (including security requirements, e.g. Message, Transport, None).</faultstring></s:Fault></s:Body></s:Envelope>
Aug 3, 2021 23:09:53.967710972 CEST	10694	OUT	POST / HTTP/1.1 Content-Type: text/xml; charset=utf-8 SOAPAction: "http://tempuri.org/Endpoint/GetArguments" Host: 45.137.155.31:11556 Content-Length: 137 Expect: 100-continue Accept-Encoding: gzip, deflate
Aug 3, 2021 23:09:54.042444944 CEST	10694	IN	HTTP/1.1 100 Continue
Aug 3, 2021 23:09:54.131872892 CEST	10695	IN	HTTP/1.1 500 Internal Server Error Content-Length: 738 Content-Type: text/xml; charset=utf-8 Server: Microsoft-HTTPAPI/2.0 Date: Tue, 03 Aug 2021 21:09:53 GMT Data Raw: 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 73 3a 46 61 75 6c 74 3e 3c 66 61 75 6c 74 63 6f 64 65 20 78 6d 6c 6e 73 3a 61 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 77 73 2f 32 30 30 35 2f 30 35 2f 61 64 64 72 65 73 73 69 6e 67 2f 6e 6f 6e 65 22 3e 61 3a 41 63 74 69 6f 6e 4e 6f 74 53 75 70 70 6f 72 74 65 64 3c 2f 66 61 75 6c 74 63 6f 64 65 3e 3c 66 61 75 6c 74 73 74 72 69 6e 67 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 54 68 65 20 6d 65 73 73 61 67 65 20 77 69 74 68 20 41 63 74 69 6f 6e 20 27 68 74 74 70 3a 2f 2f 74 65 6d 70 75 72 69 2e 6f 72 67 2f 45 6e 64 70 6f 69 6e 74 2f 47 65 74 41 72 67 75 6d 65 6e 74 73 27 20 63 61 6e 6e 6f 74 20 62 65 20 70 72 6f 63 65 73 73 65 64 20 61 74 20 74 68 65 20 72 65 63 65 69 76 65 72 2c 20 64 75 65 20 74 6f 20 61 20 43 6f 6e 74 72 61 63 74 46 69 6c 74 65 72 20 6d 69 73 6d 61 74 63 68 20 61 74 20 74 68 65 20 45 6e 64 70 6f 69 6e 74 44 69 73 70 61 74 63 68 65 72 2e 20 54 68 69 73 20 6d 61 79 20 62 65 20 62 65 63 61 75 73 65 20 6f 66 20 65 69 74 68 65 72 20 61 20 63 6f 6e 74 72 61 63 74 20 6d 69 73 6d 61 74 63 68 20 28 6d 69 73 6d 61 74 63 68 65 64 20 41 63 74 69 6f 6e 73 20 62 65 74 77 65 65 6e 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 29 20 6f 72 20 61 20 62 69 6e 64 69 6e 67 2f 73 65 63 75 72 69 74 79 20 6d 69 73 6d 61 74 63 68 20 62 65 74 77 65 65 6e 20 74 68 65 20 73 65 6e 64 65 72 20 61 6e 64 20 74 68 65 20 72 65 63 65 69 76 65 72 2e 20 20 43 68 65 63 6b 20 74 68 61 74 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 20 68 61 76 65 20 74 68 65 20 73 61 6d 65 20 63 6f 6e 74 72 61 63 74 20 61 6e 64 20 74 68 65 20 73 61 6d 65 20 62 69 6e 64 69 6e 67 20 28 69 6e 63 6c 75 64 69 6e 67 20 73 65 63 75 72 69 74 79 20 72 65 71 75 69 72 65 6d 65 6e 74 73 2c 20 65 2e 67 2e 20 4d 65 73 73 61 67 65 2c 20 54 72 61 6e 73 70 6f 72 74 2c 20 4e 6f 6e 65 29 2e 3c 2f 66 61 75 6c 74 73 74 72 69 6e 67 3e 3c 2f 73 3a 46 61 75 6c 74 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/"><s:Body><s:Fault><faultcode xmlns:a="http://schemas.microsoft.com/ws/2005/05/addressing/none">a:ActionNotSupported</faultcode><faultstring xml:lang="en-US">The message with Action 'http://tempuri.org/Endpoint/GetArguments' cannot be processed at the receiver, due to a ContractFilter mismatch at the EndpointDispatcher. This may be because of either a contract mismatch (mismatched Actions between sender and receiver) or a binding/security mismatch between the sender and the receiver. Check that sender and receiver have the same contract and the same binding (including security requirements, e.g. Message, Transport, None).</faultstring></s:Fault></s:Body></s:Envelope>
Aug 3, 2021 23:09:55.140132904 CEST	10696	OUT	POST / HTTP/1.1 Content-Type: text/xml; charset=utf-8 SOAPAction: "http://tempuri.org/Endpoint/GetArguments" Host: 45.137.155.31:11556 Content-Length: 137 Expect: 100-continue Accept-Encoding: gzip, deflate
Aug 3, 2021 23:09:55.210470915 CEST	10696	IN	HTTP/1.1 100 Continue
Aug 3, 2021 23:09:55.281048059 CEST	10697	IN	HTTP/1.1 500 Internal Server Error Content-Length: 738 Content-Type: text/xml; charset=utf-8 Server: Microsoft-HTTPAPI/2.0 Date: Tue, 03 Aug 2021 21:09:54 GMT Data Raw: 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 73 3a 46 61 75 6c 74 3e 3c 66 61 75 6c 74 63 6f 64 65 20 78 6d 6c 6e 73 3a 61 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 77 73 2f 32 30 30 35 2f 30 35 2f 61 64 64 72 65 73 73 69 6e 67 2f 6e 6f 6e 65 22 3e 61 3a 41 63 74 69 6f 6e 4e 6f 74 53 75 70 70 6f 72 74 65 64 3c 2f 66 61 75 6c 74 63 6f 64 65 3e 3c 66 61 75 6c 74 73 74 72 69 6e 67 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 54 68 65 20 6d 65 73 73 61 67 65 20 77 69 74 68 20 41 63 74 69 6f 6e 20 27 68 74 74 70 3a 2f 2f 74 65 6d 70 75 72 69 2e 6f 72 67 2f 45 6e 64 70 6f 69 6e 74 2f 47 65 74 41 72 67 75 6d 65 6e 74 73 27 20 63 61 6e 6e 6f 74 20 62 65 20 70 72 6f 63 65 73 73 65 64 20 61 74 20 74 68 65 20 72 65 63 65 69 76 65 72 2c 20 64 75 65 20 74 6f 20 61 20 43 6f 6e 74 72 61 63 74 46 69 6c 74 65 72 20 6d 69 73 6d 61 74 63 68 20 61 74 20 74 68 65 20 45 6e 64 70 6f 69 6e 74 44 69 73 70 61 74 63 68 65 72 2e 20 54 68 69 73 20 6d 61 79 20 62 65 20 62 65 63 61 75 73 65 20 6f 66 20 65 69 74 68 65 72 20 61 20 63 6f 6e 74 72 61 63 74 20 6d 69 73 6d 61 74 63 68 20 28 6d 69 73 6d 61 74 63 68 65 64 20 41 63 74 69 6f 6e 73 20 62 65 74 77 65 65 6e 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 29 20 6f 72 20 61 20 62 69 6e 64 69 6e 67 2f 73 65 63 75 72 69 74 79 20 6d 69 73 6d 61 74 63 68 20 62 65 74 77 65 65 6e 20 74 68 65 20 73 65 6e 64 65 72 20 61 6e 64 20 74 68 65 20 72 65 63 65 69 76 65 72 2e 20 20 43 68 65 63 6b 20 74 68 61 74 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 20 68 61 76 65 20 74 68 65 20 73 61 6d 65 20 63 6f 6e 74 72 61 63 74 20 61 6e 64 20 74 68 65 20 73 61 6d 65 20 62 69 6e 64 69 6e 67 20 28 69 6e 63 6c 75 64 69 6e 67 20 73 65 63 75 72 69 74 79 20 72 65 71 75 69 72 65 6d 65 6e 74 73 2c 20 65 2e 67 2e 20 4d 65 73 73 61 67 65 2c 20 54 72 61 6e 73 70 6f 72 74 2c 20 4e 6f 6e 65 29 2e 3c 2f 66 61 75 6c 74 73 74 72 69 6e 67 3e 3c 2f 73 3a 46 61 75 6c 74 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/"><s:Body><s:Fault><faultcode xmlns:a="http://schemas.microsoft.com/ws/2005/05/addressing/none">a:ActionNotSupported</faultcode><faultstring xml:lang="en-US">The message with Action 'http://tempuri.org/Endpoint/GetArguments' cannot be processed at the receiver, due to a ContractFilter mismatch at the EndpointDispatcher. This may be because of either a contract mismatch (mismatched Actions between sender and receiver) or a binding/security mismatch between the sender and the receiver. Check that sender and receiver have the same contract and the same binding (including security requirements, e.g. Message, Transport, None).</faultstring></s:Fault></s:Body></s:Envelope>
Aug 3, 2021 23:09:56.296049118 CEST	10697	OUT	POST / HTTP/1.1 Content-Type: text/xml; charset=utf-8 SOAPAction: "http://tempuri.org/Endpoint/GetArguments" Host: 45.137.155.31:11556 Content-Length: 137 Expect: 100-continue Accept-Encoding: gzip, deflate
Aug 3, 2021 23:09:56.380639076 CEST	10697	IN	HTTP/1.1 100 Continue
Aug 3, 2021 23:09:56.450217962 CEST	10698	IN	HTTP/1.1 500 Internal Server Error Content-Length: 738 Content-Type: text/xml; charset=utf-8 Server: Microsoft-HTTPAPI/2.0 Date: Tue, 03 Aug 2021 21:09:55 GMT Data Raw: 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 73 3a 46 61 75 6c 74 3e 3c 66 61 75 6c 74 63 6f 64 65 20 78 6d 6c 6e 73 3a 61 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 77 73 2f 32 30 30 35 2f 30 35 2f 61 64 64 72 65 73 73 69 6e 67 2f 6e 6f 6e 65 22 3e 61 3a 41 63 74 69 6f 6e 4e 6f 74 53 75 70 70 6f 72 74 65 64 3c 2f 66 61 75 6c 74 63 6f 64 65 3e 3c 66 61 75 6c 74 73 74 72 69 6e 67 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 54 68 65 20 6d 65 73 73 61 67 65 20 77 69 74 68 20 41 63 74 69 6f 6e 20 27 68 74 74 70 3a 2f 2f 74 65 6d 70 75 72 69 2e 6f 72 67 2f 45 6e 64 70 6f 69 6e 74 2f 47 65 74 41 72 67 75 6d 65 6e 74 73 27 20 63 61 6e 6e 6f 74 20 62 65 20 70 72 6f 63 65 73 73 65 64 20 61 74 20 74 68 65 20 72 65 63 65 69 76 65 72 2c 20 64 75 65 20 74 6f 20 61 20 43 6f 6e 74 72 61 63 74 46 69 6c 74 65 72 20 6d 69 73 6d 61 74 63 68 20 61 74 20 74 68 65 20 45 6e 64 70 6f 69 6e 74 44 69 73 70 61 74 63 68 65 72 2e 20 54 68 69 73 20 6d 61 79 20 62 65 20 62 65 63 61 75 73 65 20 6f 66 20 65 69 74 68 65 72 20 61 20 63 6f 6e 74 72 61 63 74 20 6d 69 73 6d 61 74 63 68 20 28 6d 69 73 6d 61 74 63 68 65 64 20 41 63 74 69 6f 6e 73 20 62 65 74 77 65 65 6e 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 29 20 6f 72 20 61 20 62 69 6e 64 69 6e 67 2f 73 65 63 75 72 69 74 79 20 6d 69 73 6d 61 74 63 68 20 62 65 74 77 65 65 6e 20 74 68 65 20 73 65 6e 64 65 72 20 61 6e 64 20 74 68 65 20 72 65 63 65 69 76 65 72 2e 20 20 43 68 65 63 6b 20 74 68 61 74 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 20 68 61 76 65 20 74 68 65 20 73 61 6d 65 20 63 6f 6e 74 72 61 63 74 20 61 6e 64 20 74 68 65 20 73 61 6d 65 20 62 69 6e 64 69 6e 67 20 28 69 6e 63 6c 75 64 69 6e 67 20 73 65 63 75 72 69 74 79 20 72 65 71 75 69 72 65 6d 65 6e 74 73 2c 20 65 2e 67 2e 20 4d 65 73 73 61 67 65 2c 20 54 72 61 6e 73 70 6f 72 74 2c 20 4e 6f 6e 65 29 2e 3c 2f 66 61 75 6c 74 73 74 72 69 6e 67 3e 3c 2f 73 3a 46 61 75 6c 74 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/"><s:Body><s:Fault><faultcode xmlns:a="http://schemas.microsoft.com/ws/2005/05/addressing/none">a:ActionNotSupported</faultcode><faultstring xml:lang="en-US">The message with Action 'http://tempuri.org/Endpoint/GetArguments' cannot be processed at the receiver, due to a ContractFilter mismatch at the EndpointDispatcher. This may be because of either a contract mismatch (mismatched Actions between sender and receiver) or a binding/security mismatch between the sender and the receiver. Check that sender and receiver have the same contract and the same binding (including security requirements, e.g. Message, Transport, None).</faultstring></s:Fault></s:Body></s:Envelope>
Aug 3, 2021 23:09:57.467809916 CEST	10699	OUT	POST / HTTP/1.1 Content-Type: text/xml; charset=utf-8 SOAPAction: "http://tempuri.org/Endpoint/GetArguments" Host: 45.137.155.31:11556 Content-Length: 137 Expect: 100-continue Accept-Encoding: gzip, deflate
Aug 3, 2021 23:09:57.538265944 CEST	10699	IN	HTTP/1.1 100 Continue
Aug 3, 2021 23:09:57.613348961 CEST	10701	IN	HTTP/1.1 500 Internal Server Error Content-Length: 738 Content-Type: text/xml; charset=utf-8 Server: Microsoft-HTTPAPI/2.0 Date: Tue, 03 Aug 2021 21:09:56 GMT Data Raw: 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 73 3a 46 61 75 6c 74 3e 3c 66 61 75 6c 74 63 6f 64 65 20 78 6d 6c 6e 73 3a 61 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 77 73 2f 32 30 30 35 2f 30 35 2f 61 64 64 72 65 73 73 69 6e 67 2f 6e 6f 6e 65 22 3e 61 3a 41 63 74 69 6f 6e 4e 6f 74 53 75 70 70 6f 72 74 65 64 3c 2f 66 61 75 6c 74 63 6f 64 65 3e 3c 66 61 75 6c 74 73 74 72 69 6e 67 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 54 68 65 20 6d 65 73 73 61 67 65 20 77 69 74 68 20 41 63 74 69 6f 6e 20 27 68 74 74 70 3a 2f 2f 74 65 6d 70 75 72 69 2e 6f 72 67 2f 45 6e 64 70 6f 69 6e 74 2f 47 65 74 41 72 67 75 6d 65 6e 74 73 27 20 63 61 6e 6e 6f 74 20 62 65 20 70 72 6f 63 65 73 73 65 64 20 61 74 20 74 68 65 20 72 65 63 65 69 76 65 72 2c 20 64 75 65 20 74 6f 20 61 20 43 6f 6e 74 72 61 63 74 46 69 6c 74 65 72 20 6d 69 73 6d 61 74 63 68 20 61 74 20 74 68 65 20 45 6e 64 70 6f 69 6e 74 44 69 73 70 61 74 63 68 65 72 2e 20 54 68 69 73 20 6d 61 79 20 62 65 20 62 65 63 61 75 73 65 20 6f 66 20 65 69 74 68 65 72 20 61 20 63 6f 6e 74 72 61 63 74 20 6d 69 73 6d 61 74 63 68 20 28 6d 69 73 6d 61 74 63 68 65 64 20 41 63 74 69 6f 6e 73 20 62 65 74 77 65 65 6e 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 29 20 6f 72 20 61 20 62 69 6e 64 69 6e 67 2f 73 65 63 75 72 69 74 79 20 6d 69 73 6d 61 74 63 68 20 62 65 74 77 65 65 6e 20 74 68 65 20 73 65 6e 64 65 72 20 61 6e 64 20 74 68 65 20 72 65 63 65 69 76 65 72 2e 20 20 43 68 65 63 6b 20 74 68 61 74 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 20 68 61 76 65 20 74 68 65 20 73 61 6d 65 20 63 6f 6e 74 72 61 63 74 20 61 6e 64 20 74 68 65 20 73 61 6d 65 20 62 69 6e 64 69 6e 67 20 28 69 6e 63 6c 75 64 69 6e 67 20 73 65 63 75 72 69 74 79 20 72 65 71 75 69 72 65 6d 65 6e 74 73 2c 20 65 2e 67 2e 20 4d 65 73 73 61 67 65 2c 20 54 72 61 6e 73 70 6f 72 74 2c 20 4e 6f 6e 65 29 2e 3c 2f 66 61 75 6c 74 73 74 72 69 6e 67 3e 3c 2f 73 3a 46 61 75 6c 74 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/"><s:Body><s:Fault><faultcode xmlns:a="http://schemas.microsoft.com/ws/2005/05/addressing/none">a:ActionNotSupported</faultcode><faultstring xml:lang="en-US">The message with Action 'http://tempuri.org/Endpoint/GetArguments' cannot be processed at the receiver, due to a ContractFilter mismatch at the EndpointDispatcher. This may be because of either a contract mismatch (mismatched Actions between sender and receiver) or a binding/security mismatch between the sender and the receiver. Check that sender and receiver have the same contract and the same binding (including security requirements, e.g. Message, Transport, None).</faultstring></s:Fault></s:Body></s:Envelope>
Aug 3, 2021 23:09:58.625468016 CEST	10701	OUT	POST / HTTP/1.1 Content-Type: text/xml; charset=utf-8 SOAPAction: "http://tempuri.org/Endpoint/GetArguments" Host: 45.137.155.31:11556 Content-Length: 137 Expect: 100-continue Accept-Encoding: gzip, deflate
Aug 3, 2021 23:09:58.694870949 CEST	10701	IN	HTTP/1.1 100 Continue
Aug 3, 2021 23:09:58.765242100 CEST	10702	IN	HTTP/1.1 500 Internal Server Error Content-Length: 738 Content-Type: text/xml; charset=utf-8 Server: Microsoft-HTTPAPI/2.0 Date: Tue, 03 Aug 2021 21:09:57 GMT Data Raw: 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 73 3a 46 61 75 6c 74 3e 3c 66 61 75 6c 74 63 6f 64 65 20 78 6d 6c 6e 73 3a 61 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 77 73 2f 32 30 30 35 2f 30 35 2f 61 64 64 72 65 73 73 69 6e 67 2f 6e 6f 6e 65 22 3e 61 3a 41 63 74 69 6f 6e 4e 6f 74 53 75 70 70 6f 72 74 65 64 3c 2f 66 61 75 6c 74 63 6f 64 65 3e 3c 66 61 75 6c 74 73 74 72 69 6e 67 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 54 68 65 20 6d 65 73 73 61 67 65 20 77 69 74 68 20 41 63 74 69 6f 6e 20 27 68 74 74 70 3a 2f 2f 74 65 6d 70 75 72 69 2e 6f 72 67 2f 45 6e 64 70 6f 69 6e 74 2f 47 65 74 41 72 67 75 6d 65 6e 74 73 27 20 63 61 6e 6e 6f 74 20 62 65 20 70 72 6f 63 65 73 73 65 64 20 61 74 20 74 68 65 20 72 65 63 65 69 76 65 72 2c 20 64 75 65 20 74 6f 20 61 20 43 6f 6e 74 72 61 63 74 46 69 6c 74 65 72 20 6d 69 73 6d 61 74 63 68 20 61 74 20 74 68 65 20 45 6e 64 70 6f 69 6e 74 44 69 73 70 61 74 63 68 65 72 2e 20 54 68 69 73 20 6d 61 79 20 62 65 20 62 65 63 61 75 73 65 20 6f 66 20 65 69 74 68 65 72 20 61 20 63 6f 6e 74 72 61 63 74 20 6d 69 73 6d 61 74 63 68 20 28 6d 69 73 6d 61 74 63 68 65 64 20 41 63 74 69 6f 6e 73 20 62 65 74 77 65 65 6e 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 29 20 6f 72 20 61 20 62 69 6e 64 69 6e 67 2f 73 65 63 75 72 69 74 79 20 6d 69 73 6d 61 74 63 68 20 62 65 74 77 65 65 6e 20 74 68 65 20 73 65 6e 64 65 72 20 61 6e 64 20 74 68 65 20 72 65 63 65 69 76 65 72 2e 20 20 43 68 65 63 6b 20 74 68 61 74 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 20 68 61 76 65 20 74 68 65 20 73 61 6d 65 20 63 6f 6e 74 72 61 63 74 20 61 6e 64 20 74 68 65 20 73 61 6d 65 20 62 69 6e 64 69 6e 67 20 28 69 6e 63 6c 75 64 69 6e 67 20 73 65 63 75 72 69 74 79 20 72 65 71 75 69 72 65 6d 65 6e 74 73 2c 20 65 2e 67 2e 20 4d 65 73 73 61 67 65 2c 20 54 72 61 6e 73 70 6f 72 74 2c 20 4e 6f 6e 65 29 2e 3c 2f 66 61 75 6c 74 73 74 72 69 6e 67 3e 3c 2f 73 3a 46 61 75 6c 74 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/"><s:Body><s:Fault><faultcode xmlns:a="http://schemas.microsoft.com/ws/2005/05/addressing/none">a:ActionNotSupported</faultcode><faultstring xml:lang="en-US">The message with Action 'http://tempuri.org/Endpoint/GetArguments' cannot be processed at the receiver, due to a ContractFilter mismatch at the EndpointDispatcher. This may be because of either a contract mismatch (mismatched Actions between sender and receiver) or a binding/security mismatch between the sender and the receiver. Check that sender and receiver have the same contract and the same binding (including security requirements, e.g. Message, Transport, None).</faultstring></s:Fault></s:Body></s:Envelope>
Aug 3, 2021 23:09:59.781100035 CEST	10702	OUT	POST / HTTP/1.1 Content-Type: text/xml; charset=utf-8 SOAPAction: "http://tempuri.org/Endpoint/GetArguments" Host: 45.137.155.31:11556 Content-Length: 137 Expect: 100-continue Accept-Encoding: gzip, deflate
Aug 3, 2021 23:09:59.849970102 CEST	10702	IN	HTTP/1.1 100 Continue
Aug 3, 2021 23:09:59.922252893 CEST	10704	IN	HTTP/1.1 500 Internal Server Error Content-Length: 738 Content-Type: text/xml; charset=utf-8 Server: Microsoft-HTTPAPI/2.0 Date: Tue, 03 Aug 2021 21:09:58 GMT Data Raw: 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 73 3a 46 61 75 6c 74 3e 3c 66 61 75 6c 74 63 6f 64 65 20 78 6d 6c 6e 73 3a 61 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 77 73 2f 32 30 30 35 2f 30 35 2f 61 64 64 72 65 73 73 69 6e 67 2f 6e 6f 6e 65 22 3e 61 3a 41 63 74 69 6f 6e 4e 6f 74 53 75 70 70 6f 72 74 65 64 3c 2f 66 61 75 6c 74 63 6f 64 65 3e 3c 66 61 75 6c 74 73 74 72 69 6e 67 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 54 68 65 20 6d 65 73 73 61 67 65 20 77 69 74 68 20 41 63 74 69 6f 6e 20 27 68 74 74 70 3a 2f 2f 74 65 6d 70 75 72 69 2e 6f 72 67 2f 45 6e 64 70 6f 69 6e 74 2f 47 65 74 41 72 67 75 6d 65 6e 74 73 27 20 63 61 6e 6e 6f 74 20 62 65 20 70 72 6f 63 65 73 73 65 64 20 61 74 20 74 68 65 20 72 65 63 65 69 76 65 72 2c 20 64 75 65 20 74 6f 20 61 20 43 6f 6e 74 72 61 63 74 46 69 6c 74 65 72 20 6d 69 73 6d 61 74 63 68 20 61 74 20 74 68 65 20 45 6e 64 70 6f 69 6e 74 44 69 73 70 61 74 63 68 65 72 2e 20 54 68 69 73 20 6d 61 79 20 62 65 20 62 65 63 61 75 73 65 20 6f 66 20 65 69 74 68 65 72 20 61 20 63 6f 6e 74 72 61 63 74 20 6d 69 73 6d 61 74 63 68 20 28 6d 69 73 6d 61 74 63 68 65 64 20 41 63 74 69 6f 6e 73 20 62 65 74 77 65 65 6e 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 29 20 6f 72 20 61 20 62 69 6e 64 69 6e 67 2f 73 65 63 75 72 69 74 79 20 6d 69 73 6d 61 74 63 68 20 62 65 74 77 65 65 6e 20 74 68 65 20 73 65 6e 64 65 72 20 61 6e 64 20 74 68 65 20 72 65 63 65 69 76 65 72 2e 20 20 43 68 65 63 6b 20 74 68 61 74 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 20 68 61 76 65 20 74 68 65 20 73 61 6d 65 20 63 6f 6e 74 72 61 63 74 20 61 6e 64 20 74 68 65 20 73 61 6d 65 20 62 69 6e 64 69 6e 67 20 28 69 6e 63 6c 75 64 69 6e 67 20 73 65 63 75 72 69 74 79 20 72 65 71 75 69 72 65 6d 65 6e 74 73 2c 20 65 2e 67 2e 20 4d 65 73 73 61 67 65 2c 20 54 72 61 6e 73 70 6f 72 74 2c 20 4e 6f 6e 65 29 2e 3c 2f 66 61 75 6c 74 73 74 72 69 6e 67 3e 3c 2f 73 3a 46 61 75 6c 74 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/"><s:Body><s:Fault><faultcode xmlns:a="http://schemas.microsoft.com/ws/2005/05/addressing/none">a:ActionNotSupported</faultcode><faultstring xml:lang="en-US">The message with Action 'http://tempuri.org/Endpoint/GetArguments' cannot be processed at the receiver, due to a ContractFilter mismatch at the EndpointDispatcher. This may be because of either a contract mismatch (mismatched Actions between sender and receiver) or a binding/security mismatch between the sender and the receiver. Check that sender and receiver have the same contract and the same binding (including security requirements, e.g. Message, Transport, None).</faultstring></s:Fault></s:Body></s:Envelope>
Aug 3, 2021 23:10:00.937392950 CEST	10704	OUT	POST / HTTP/1.1 Content-Type: text/xml; charset=utf-8 SOAPAction: "http://tempuri.org/Endpoint/GetArguments" Host: 45.137.155.31:11556 Content-Length: 137 Expect: 100-continue Accept-Encoding: gzip, deflate
Aug 3, 2021 23:10:01.006602049 CEST	10704	IN	HTTP/1.1 100 Continue
Aug 3, 2021 23:10:01.087409019 CEST	10705	IN	HTTP/1.1 500 Internal Server Error Content-Length: 738 Content-Type: text/xml; charset=utf-8 Server: Microsoft-HTTPAPI/2.0 Date: Tue, 03 Aug 2021 21:10:00 GMT Data Raw: 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 73 3a 46 61 75 6c 74 3e 3c 66 61 75 6c 74 63 6f 64 65 20 78 6d 6c 6e 73 3a 61 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 77 73 2f 32 30 30 35 2f 30 35 2f 61 64 64 72 65 73 73 69 6e 67 2f 6e 6f 6e 65 22 3e 61 3a 41 63 74 69 6f 6e 4e 6f 74 53 75 70 70 6f 72 74 65 64 3c 2f 66 61 75 6c 74 63 6f 64 65 3e 3c 66 61 75 6c 74 73 74 72 69 6e 67 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 54 68 65 20 6d 65 73 73 61 67 65 20 77 69 74 68 20 41 63 74 69 6f 6e 20 27 68 74 74 70 3a 2f 2f 74 65 6d 70 75 72 69 2e 6f 72 67 2f 45 6e 64 70 6f 69 6e 74 2f 47 65 74 41 72 67 75 6d 65 6e 74 73 27 20 63 61 6e 6e 6f 74 20 62 65 20 70 72 6f 63 65 73 73 65 64 20 61 74 20 74 68 65 20 72 65 63 65 69 76 65 72 2c 20 64 75 65 20 74 6f 20 61 20 43 6f 6e 74 72 61 63 74 46 69 6c 74 65 72 20 6d 69 73 6d 61 74 63 68 20 61 74 20 74 68 65 20 45 6e 64 70 6f 69 6e 74 44 69 73 70 61 74 63 68 65 72 2e 20 54 68 69 73 20 6d 61 79 20 62 65 20 62 65 63 61 75 73 65 20 6f 66 20 65 69 74 68 65 72 20 61 20 63 6f 6e 74 72 61 63 74 20 6d 69 73 6d 61 74 63 68 20 28 6d 69 73 6d 61 74 63 68 65 64 20 41 63 74 69 6f 6e 73 20 62 65 74 77 65 65 6e 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 29 20 6f 72 20 61 20 62 69 6e 64 69 6e 67 2f 73 65 63 75 72 69 74 79 20 6d 69 73 6d 61 74 63 68 20 62 65 74 77 65 65 6e 20 74 68 65 20 73 65 6e 64 65 72 20 61 6e 64 20 74 68 65 20 72 65 63 65 69 76 65 72 2e 20 20 43 68 65 63 6b 20 74 68 61 74 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 20 68 61 76 65 20 74 68 65 20 73 61 6d 65 20 63 6f 6e 74 72 61 63 74 20 61 6e 64 20 74 68 65 20 73 61 6d 65 20 62 69 6e 64 69 6e 67 20 28 69 6e 63 6c 75 64 69 6e 67 20 73 65 63 75 72 69 74 79 20 72 65 71 75 69 72 65 6d 65 6e 74 73 2c 20 65 2e 67 2e 20 4d 65 73 73 61 67 65 2c 20 54 72 61 6e 73 70 6f 72 74 2c 20 4e 6f 6e 65 29 2e 3c 2f 66 61 75 6c 74 73 74 72 69 6e 67 3e 3c 2f 73 3a 46 61 75 6c 74 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/"><s:Body><s:Fault><faultcode xmlns:a="http://schemas.microsoft.com/ws/2005/05/addressing/none">a:ActionNotSupported</faultcode><faultstring xml:lang="en-US">The message with Action 'http://tempuri.org/Endpoint/GetArguments' cannot be processed at the receiver, due to a ContractFilter mismatch at the EndpointDispatcher. This may be because of either a contract mismatch (mismatched Actions between sender and receiver) or a binding/security mismatch between the sender and the receiver. Check that sender and receiver have the same contract and the same binding (including security requirements, e.g. Message, Transport, None).</faultstring></s:Fault></s:Body></s:Envelope>
Aug 3, 2021 23:10:02.093358040 CEST	10705	OUT	POST / HTTP/1.1 Content-Type: text/xml; charset=utf-8 SOAPAction: "http://tempuri.org/Endpoint/GetArguments" Host: 45.137.155.31:11556 Content-Length: 137 Expect: 100-continue Accept-Encoding: gzip, deflate
Aug 3, 2021 23:10:02.163235903 CEST	10706	IN	HTTP/1.1 100 Continue
Aug 3, 2021 23:10:02.234370947 CEST	10707	IN	HTTP/1.1 500 Internal Server Error Content-Length: 738 Content-Type: text/xml; charset=utf-8 Server: Microsoft-HTTPAPI/2.0 Date: Tue, 03 Aug 2021 21:10:01 GMT Data Raw: 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 73 3a 46 61 75 6c 74 3e 3c 66 61 75 6c 74 63 6f 64 65 20 78 6d 6c 6e 73 3a 61 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 77 73 2f 32 30 30 35 2f 30 35 2f 61 64 64 72 65 73 73 69 6e 67 2f 6e 6f 6e 65 22 3e 61 3a 41 63 74 69 6f 6e 4e 6f 74 53 75 70 70 6f 72 74 65 64 3c 2f 66 61 75 6c 74 63 6f 64 65 3e 3c 66 61 75 6c 74 73 74 72 69 6e 67 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 54 68 65 20 6d 65 73 73 61 67 65 20 77 69 74 68 20 41 63 74 69 6f 6e 20 27 68 74 74 70 3a 2f 2f 74 65 6d 70 75 72 69 2e 6f 72 67 2f 45 6e 64 70 6f 69 6e 74 2f 47 65 74 41 72 67 75 6d 65 6e 74 73 27 20 63 61 6e 6e 6f 74 20 62 65 20 70 72 6f 63 65 73 73 65 64 20 61 74 20 74 68 65 20 72 65 63 65 69 76 65 72 2c 20 64 75 65 20 74 6f 20 61 20 43 6f 6e 74 72 61 63 74 46 69 6c 74 65 72 20 6d 69 73 6d 61 74 63 68 20 61 74 20 74 68 65 20 45 6e 64 70 6f 69 6e 74 44 69 73 70 61 74 63 68 65 72 2e 20 54 68 69 73 20 6d 61 79 20 62 65 20 62 65 63 61 75 73 65 20 6f 66 20 65 69 74 68 65 72 20 61 20 63 6f 6e 74 72 61 63 74 20 6d 69 73 6d 61 74 63 68 20 28 6d 69 73 6d 61 74 63 68 65 64 20 41 63 74 69 6f 6e 73 20 62 65 74 77 65 65 6e 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 29 20 6f 72 20 61 20 62 69 6e 64 69 6e 67 2f 73 65 63 75 72 69 74 79 20 6d 69 73 6d 61 74 63 68 20 62 65 74 77 65 65 6e 20 74 68 65 20 73 65 6e 64 65 72 20 61 6e 64 20 74 68 65 20 72 65 63 65 69 76 65 72 2e 20 20 43 68 65 63 6b 20 74 68 61 74 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 20 68 61 76 65 20 74 68 65 20 73 61 6d 65 20 63 6f 6e 74 72 61 63 74 20 61 6e 64 20 74 68 65 20 73 61 6d 65 20 62 69 6e 64 69 6e 67 20 28 69 6e 63 6c 75 64 69 6e 67 20 73 65 63 75 72 69 74 79 20 72 65 71 75 69 72 65 6d 65 6e 74 73 2c 20 65 2e 67 2e 20 4d 65 73 73 61 67 65 2c 20 54 72 61 6e 73 70 6f 72 74 2c 20 4e 6f 6e 65 29 2e 3c 2f 66 61 75 6c 74 73 74 72 69 6e 67 3e 3c 2f 73 3a 46 61 75 6c 74 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/"><s:Body><s:Fault><faultcode xmlns:a="http://schemas.microsoft.com/ws/2005/05/addressing/none">a:ActionNotSupported</faultcode><faultstring xml:lang="en-US">The message with Action 'http://tempuri.org/Endpoint/GetArguments' cannot be processed at the receiver, due to a ContractFilter mismatch at the EndpointDispatcher. This may be because of either a contract mismatch (mismatched Actions between sender and receiver) or a binding/security mismatch between the sender and the receiver. Check that sender and receiver have the same contract and the same binding (including security requirements, e.g. Message, Transport, None).</faultstring></s:Fault></s:Body></s:Envelope>
Aug 3, 2021 23:10:03.249944925 CEST	10707	OUT	POST / HTTP/1.1 Content-Type: text/xml; charset=utf-8 SOAPAction: "http://tempuri.org/Endpoint/GetArguments" Host: 45.137.155.31:11556 Content-Length: 137 Expect: 100-continue Accept-Encoding: gzip, deflate
Aug 3, 2021 23:10:03.319885969 CEST	10707	IN	HTTP/1.1 100 Continue
Aug 3, 2021 23:10:03.394078970 CEST	10708	IN	HTTP/1.1 500 Internal Server Error Content-Length: 738 Content-Type: text/xml; charset=utf-8 Server: Microsoft-HTTPAPI/2.0 Date: Tue, 03 Aug 2021 21:10:02 GMT Data Raw: 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 73 3a 46 61 75 6c 74 3e 3c 66 61 75 6c 74 63 6f 64 65 20 78 6d 6c 6e 73 3a 61 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 77 73 2f 32 30 30 35 2f 30 35 2f 61 64 64 72 65 73 73 69 6e 67 2f 6e 6f 6e 65 22 3e 61 3a 41 63 74 69 6f 6e 4e 6f 74 53 75 70 70 6f 72 74 65 64 3c 2f 66 61 75 6c 74 63 6f 64 65 3e 3c 66 61 75 6c 74 73 74 72 69 6e 67 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 54 68 65 20 6d 65 73 73 61 67 65 20 77 69 74 68 20 41 63 74 69 6f 6e 20 27 68 74 74 70 3a 2f 2f 74 65 6d 70 75 72 69 2e 6f 72 67 2f 45 6e 64 70 6f 69 6e 74 2f 47 65 74 41 72 67 75 6d 65 6e 74 73 27 20 63 61 6e 6e 6f 74 20 62 65 20 70 72 6f 63 65 73 73 65 64 20 61 74 20 74 68 65 20 72 65 63 65 69 76 65 72 2c 20 64 75 65 20 74 6f 20 61 20 43 6f 6e 74 72 61 63 74 46 69 6c 74 65 72 20 6d 69 73 6d 61 74 63 68 20 61 74 20 74 68 65 20 45 6e 64 70 6f 69 6e 74 44 69 73 70 61 74 63 68 65 72 2e 20 54 68 69 73 20 6d 61 79 20 62 65 20 62 65 63 61 75 73 65 20 6f 66 20 65 69 74 68 65 72 20 61 20 63 6f 6e 74 72 61 63 74 20 6d 69 73 6d 61 74 63 68 20 28 6d 69 73 6d 61 74 63 68 65 64 20 41 63 74 69 6f 6e 73 20 62 65 74 77 65 65 6e 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 29 20 6f 72 20 61 20 62 69 6e 64 69 6e 67 2f 73 65 63 75 72 69 74 79 20 6d 69 73 6d 61 74 63 68 20 62 65 74 77 65 65 6e 20 74 68 65 20 73 65 6e 64 65 72 20 61 6e 64 20 74 68 65 20 72 65 63 65 69 76 65 72 2e 20 20 43 68 65 63 6b 20 74 68 61 74 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 20 68 61 76 65 20 74 68 65 20 73 61 6d 65 20 63 6f 6e 74 72 61 63 74 20 61 6e 64 20 74 68 65 20 73 61 6d 65 20 62 69 6e 64 69 6e 67 20 28 69 6e 63 6c 75 64 69 6e 67 20 73 65 63 75 72 69 74 79 20 72 65 71 75 69 72 65 6d 65 6e 74 73 2c 20 65 2e 67 2e 20 4d 65 73 73 61 67 65 2c 20 54 72 61 6e 73 70 6f 72 74 2c 20 4e 6f 6e 65 29 2e 3c 2f 66 61 75 6c 74 73 74 72 69 6e 67 3e 3c 2f 73 3a 46 61 75 6c 74 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/"><s:Body><s:Fault><faultcode xmlns:a="http://schemas.microsoft.com/ws/2005/05/addressing/none">a:ActionNotSupported</faultcode><faultstring xml:lang="en-US">The message with Action 'http://tempuri.org/Endpoint/GetArguments' cannot be processed at the receiver, due to a ContractFilter mismatch at the EndpointDispatcher. This may be because of either a contract mismatch (mismatched Actions between sender and receiver) or a binding/security mismatch between the sender and the receiver. Check that sender and receiver have the same contract and the same binding (including security requirements, e.g. Message, Transport, None).</faultstring></s:Fault></s:Body></s:Envelope>
Aug 3, 2021 23:10:04.406392097 CEST	10708	OUT	POST / HTTP/1.1 Content-Type: text/xml; charset=utf-8 SOAPAction: "http://tempuri.org/Endpoint/GetArguments" Host: 45.137.155.31:11556 Content-Length: 137 Expect: 100-continue Accept-Encoding: gzip, deflate
Aug 3, 2021 23:10:04.480132103 CEST	10709	IN	HTTP/1.1 100 Continue
Aug 3, 2021 23:10:04.550064087 CEST	10710	IN	HTTP/1.1 500 Internal Server Error Content-Length: 738 Content-Type: text/xml; charset=utf-8 Server: Microsoft-HTTPAPI/2.0 Date: Tue, 03 Aug 2021 21:10:04 GMT Data Raw: 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 73 3a 46 61 75 6c 74 3e 3c 66 61 75 6c 74 63 6f 64 65 20 78 6d 6c 6e 73 3a 61 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 77 73 2f 32 30 30 35 2f 30 35 2f 61 64 64 72 65 73 73 69 6e 67 2f 6e 6f 6e 65 22 3e 61 3a 41 63 74 69 6f 6e 4e 6f 74 53 75 70 70 6f 72 74 65 64 3c 2f 66 61 75 6c 74 63 6f 64 65 3e 3c 66 61 75 6c 74 73 74 72 69 6e 67 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 54 68 65 20 6d 65 73 73 61 67 65 20 77 69 74 68 20 41 63 74 69 6f 6e 20 27 68 74 74 70 3a 2f 2f 74 65 6d 70 75 72 69 2e 6f 72 67 2f 45 6e 64 70 6f 69 6e 74 2f 47 65 74 41 72 67 75 6d 65 6e 74 73 27 20 63 61 6e 6e 6f 74 20 62 65 20 70 72 6f 63 65 73 73 65 64 20 61 74 20 74 68 65 20 72 65 63 65 69 76 65 72 2c 20 64 75 65 20 74 6f 20 61 20 43 6f 6e 74 72 61 63 74 46 69 6c 74 65 72 20 6d 69 73 6d 61 74 63 68 20 61 74 20 74 68 65 20 45 6e 64 70 6f 69 6e 74 44 69 73 70 61 74 63 68 65 72 2e 20 54 68 69 73 20 6d 61 79 20 62 65 20 62 65 63 61 75 73 65 20 6f 66 20 65 69 74 68 65 72 20 61 20 63 6f 6e 74 72 61 63 74 20 6d 69 73 6d 61 74 63 68 20 28 6d 69 73 6d 61 74 63 68 65 64 20 41 63 74 69 6f 6e 73 20 62 65 74 77 65 65 6e 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 29 20 6f 72 20 61 20 62 69 6e 64 69 6e 67 2f 73 65 63 75 72 69 74 79 20 6d 69 73 6d 61 74 63 68 20 62 65 74 77 65 65 6e 20 74 68 65 20 73 65 6e 64 65 72 20 61 6e 64 20 74 68 65 20 72 65 63 65 69 76 65 72 2e 20 20 43 68 65 63 6b 20 74 68 61 74 20 73 65 6e 64 65 72 20 61 6e 64 20 72 65 63 65 69 76 65 72 20 68 61 76 65 20 74 68 65 20 73 61 6d 65 20 63 6f 6e 74 72 61 63 74 20 61 6e 64 20 74 68 65 20 73 61 6d 65 20 62 69 6e 64 69 6e 67 20 28 69 6e 63 6c 75 64 69 6e 67 20 73 65 63 75 72 69 74 79 20 72 65 71 75 69 72 65 6d 65 6e 74 73 2c 20 65 2e 67 2e 20 4d 65 73 73 61 67 65 2c 20 54 72 61 6e 73 70 6f 72 74 2c 20 4e 6f 6e 65 29 2e 3c 2f 66 61 75 6c 74 73 74 72 69 6e 67 3e 3c 2f 73 3a 46 61 75 6c 74 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/"><s:Body><s:Fault><faultcode xmlns:a="http://schemas.microsoft.com/ws/2005/05/addressing/none">a:ActionNotSupported</faultcode><faultstring xml:lang="en-US">The message with Action 'http://tempuri.org/Endpoint/GetArguments' cannot be processed at the receiver, due to a ContractFilter mismatch at the EndpointDispatcher. This may be because of either a contract mismatch (mismatched Actions between sender and receiver) or a binding/security mismatch between the sender and the receiver. Check that sender and receiver have the same contract and the same binding (including security requirements, e.g. Message, Transport, None).</faultstring></s:Fault></s:Body></s:Envelope>

Code Manipulations

Statistics

Behavior

Click to jump to process

System Behavior

Analysis Process: 7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe PID: 968 Parent PID: 5724

General

Start time:	23:08:04
Start date:	03/08/2021
Path:	C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe
Wow64 process (32bit):	true
Commandline:	'C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe'
Imagebase:	0x5a0000
File size:	364240 bytes
MD5 hash:	2E18A08987838BBC3C26FFDBBCEC1E62
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	.Net C# or VB.NET
Yara matches:	Rule: JoeSecurity_RedLine, Description: Yara detected RedLine Stealer, Source: 00000001.00000002.223233962.000000000393A000.00000004.00000001.sdmp, Author: Joe Security
Reputation:	low

Analysis Process: 7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe PID: 992 Parent PID: 968

General

Start time:	23:08:16
Start date:	03/08/2021
Path:	C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user\Desktop\7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe
Imagebase:	0x8b0000
File size:	364240 bytes
MD5 hash:	2E18A08987838BBC3C26FFDBBCEC1E62
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	.Net C# or VB.NET
Yara matches:	Rule: JoeSecurity_RedLine, Description: Yara detected RedLine Stealer, Source: 00000002.00000002.465623603.0000000000402000.00000040.00000001.sdmp, Author: Joe Security
Reputation:	low

Disassembly

Code Analysis

Reset < >

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	API monitoring, DLL monitoring, File monitoring, Named Pipes, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Binary file metadata, File monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may disable security tools to avoid possible detection of their tools and activities. This can take the form of killing security software or event logging processes, deleting Registry keys so that tools do not start at run time, or other methods to interfere with security tools scanning or reporting information.
Tactics:	Defense Evasion
Data Sources:	File monitoring, Process command-line parameters, Services, Windows Registry
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Binary file metadata, Email gateway, Environment variable, File monitoring, Malware reverse engineering, Network intrusion detection system, Network protocol analysis, Process command-line parameters, Process monitoring, Process use of network, SSL/TLS inspection, Windows event logs
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may perform software packing or virtual machine software protection to conceal their code. Software packing is a method of compressing or encrypting an executable. Packing an executable changes the file signature in an attempt to avoid signature-based detection. Most decompression techniques decompress the executable code in memory. Virtual machine software protection translates an executable's original code into a special format that only a special virtual machine can run. A virtual machine is then called to run this code.
Tactics:	Defense Evasion
Data Sources:	Binary file metadata
Platforms:	macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	API monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	AWS CloudTrail logs, Azure activity logs, Process command-line parameters, Process monitoring, Stackdriver logs
Platforms:	AWS, Azure, GCP, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may compress and/or encrypt data that is collected prior to exfiltration. Compressing the data can help to obfuscate the collected data and minimize the amount of data sent over the network. Encryption can be used to hide information that is being exfiltrated from detection or make exfiltration less conspicuous upon inspection by a defender.
Tactics:	Collection
Data Sources:	Binary file metadata, File monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Malware reverse engineering, Netflow/Enclave netflow, Packet capture, Process monitoring, Process use of network, SSL/TLS inspection
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using a protocol and port paring that are typically not associated. For example, HTTPS over port 8088or port 587as opposed to the traditional port 443. Adversaries may make changes to the standard port used by a protocol to bypass filtering or muddle analysis/parsing of network data.
Tactics:	Command and Control
Data Sources:	Netflow/Enclave netflow, Packet capture, Process monitoring, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use a non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Host network interface, Netflow/Enclave netflow, Network intrusion detection system, Network protocol analysis, Packet capture, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	DNS records, Netflow/Enclave netflow, Network protocol analysis, Packet capture, Process monitoring, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading ...

Warning!

Windows Analysis Report 7C3BEB3D9B0A8E0BDC6344A24B3B527B96CB9C845AA68.exe

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Threatname: RedLine

Yara Overview

Memory Dumps

Unpacked PEs

Sigma Overview

Jbx Signature Overview

AV Detection:

Compliance:

Networking:

System Summary:

Data Obfuscation:

Hooking and other Techniques for Hiding and Protection:

Malware Analysis System Evasion:

Anti Debugging:

HIPS / PFW / Operating System Protection Evasion:

Language, Device and Operating System Detection:

Stealing of Sensitive Information:

Remote Access Functionality:

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

Contacted IPs

Public

General Information

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASN

JA3 Fingerprints

Dropped Files

Created / dropped Files

Static File Info

General

File Icon

Static PE Info

General

Authenticode Signature

Entrypoint Preview

Data Directories

Sections

Resources

Imports

Version Infos

Network Behavior

Network Port Distribution

TCP Packets

HTTP Request Dependency Graph

HTTP Packets

Code Manipulations

Statistics

Behavior

System Behavior