Analysis Date2015-07-17 18:23:47
MD5bda7e101d4acf0341178bf4a0d58e88c
SHA1138b24ec79c06262d32f09770234de7e90cbe711

Static Details:

File typePE32 executable for MS Windows (GUI) Intel 80386 32-bit
Section.text md5: e80992014f71a8d74a073aae70d08af5 sha1: aae7a06dabaaea701fd3ee7e60caca9231586191 size: 24064
Section.rdata md5: c9f64a3006462e830a22bdd4740678e5 sha1: f826180bec15822759dbe35685cab921f2dfda70 size: 5120
Section.data md5: a81e24eb26c207ab205634c089d49bbd sha1: ea171d3fd65bfe4a3f7323478f4eece0e2fb874f size: 1024
Section.ndata md5: d41d8cd98f00b204e9800998ecf8427e sha1: da39a3ee5e6b4b0d3255bfef95601890afd80709 size: 0
Section.rsrc md5: a2df82a45f0c5cf2f74b715486489aa7 sha1: 8fdcfc3e1e4388e87f2f3af36ce915c4cfe9ecc0 size: 6656
Timestamp2009-12-05 22:50:58
PackerNullsoft PiMP Stub -> SFX
PEhash9e90f697d2944539f3db7e043be38d1fe37308a1
IMPhash099c0646ea7282d232219f8807883be0
AVRisingno_virus
AVMcafeeGeneric-FAUZ!9CA7C7E484F9
AVAvira (antivir)no_virus
AVTwisterno_virus
AVAd-AwareGen:Heur.Androm.1
AVAlwil (avast)Rootkit-gen [Rtk]:Evo-gen [Susp]
AVEset (nod32)Win32/Glupteba.M:Win32/Injector.BLCC
AVGrisoft (avg)Inject2.ATYS
AVSymantecno_virus
AVFortinetW32/Injector.BKXK!tr
AVBitDefenderGen:Heur.Androm.1
AVK7no_virus
AVMicrosoft Security EssentialsTrojan:Win32/Carberp.I
AVMicroWorld (escan)Gen:Heur.Androm.1[ZP]
AVMalwareBytesTrojan.Agent
AVAuthentiumW32/A-d4a29ab5!Eldorado
AVFrisk (f-prot)no_virus
AVIkarusBackdoor.Win32.Symmi
AVEmsisoftGen:Heur.Androm.1
AVZillya!no_virus
AVKasperskyTrojan.Win32.Generic
AVTrend MicroTROJ_MALKRYP.SM4
AVCAT (quickheal)no_virus
AVVirusBlokAda (vba32)no_virus
AVPadvishno_virus
AVBullGuardGen:Heur.Androm.1
AVArcabit (arcavir)Gen:Heur.Androm.1
AVCA (E-Trust Ino)no_virus
AVClamAVno_virus
AVDr. WebTrojan.DownLoader4.56756
AVF-Secureno_virus

Runtime Details:

Screenshot

Process
↳ C:\malware.exe

Creates FileC:\Documents and Settings\Administrator\Local Settings\Temp\nsz3.tmp
Creates FileC:\Program Files\NVIDIA Corporation\Update Center\nvdupdate.exe
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temp\nsu4.tmp\System.dll
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temp\nsu4.tmp
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temp\nsz2.tmp
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temp\nsu4.tmp\System.dll
Creates ServiceNVIDIA Update Server - C:\Program Files\NVIDIA Corporation\Update Center\nvdupdate.exe /svc

Process
↳ C:\Program Files\NVIDIA Corporation\Update Center\nvdupdate.exe

Creates ProcessC:\Program Files\NVIDIA Corporation\Update Center\nvdupdate.exe

Process
↳ C:\Program Files\NVIDIA Corporation\Update Center\nvdupdate.exe

RegistryHKEY_CURRENT_USER\SOFTWARE\NVIDIA Corporation\Global\nvUpdSrv\value ➝
20140830\\x00
Creates File\Device\Afd\Endpoint
Creates MutexGlobal\MD7H82HHF7EH2D73

Process
↳ Pid 804

Process
↳ Pid 852

Process
↳ C:\WINDOWS\System32\svchost.exe

Creates FileC:\WINDOWS\Prefetch\RUNDLL32.EXE-1BC69D2D.pf
Creates FileC:\WINDOWS\Prefetch\NVDUPDATE.EXE-387D9E29.pf
Creates FileC:\WINDOWS\Prefetch\EXPLORER.EXE-082F38A9.pf
Creates FileC:\WINDOWS\Prefetch\USERINIT.EXE-30B18140.pf
Creates FileC:\WINDOWS\Prefetch\READER_SL.EXE-3614FA6E.pf
Creates FileC:\WINDOWS\Prefetch\monitor.exe-1949D260.pf
Creates FileC:\WINDOWS\system32\WBEM\Logs\wbemess.log
Creates FileC:\WINDOWS\Prefetch\svchost.EXE-0C867EC1.pf

Process
↳ Pid 1112

Process
↳ Pid 1208

Process
↳ Pid 1308

Process
↳ Pid 1860

Process
↳ Pid 944

Network Details:

HTTP GEThttp://195.62.29.94:49891/stat?uid=100&downlink=1111&uplink=1111&id=001521CA&statpass=bpass&version=20140830&features=30&guid=4996edb7-424a-4dc7-9d5c-b15d20cad11f&comment=20140830&p=0&s=
User-Agent:
HTTP GEThttp://199.173.225.5:35979/stat?uid=100&downlink=1111&uplink=1111&id=0015364C&statpass=bpass&version=20140830&features=30&guid=4996edb7-424a-4dc7-9d5c-b15d20cad11f&comment=20140830&p=0&s=
User-Agent:
HTTP GEThttp://159.253.4.167:13737/stat?uid=100&downlink=1111&uplink=1111&id=00154A03&statpass=bpass&version=20140830&features=30&guid=4996edb7-424a-4dc7-9d5c-b15d20cad11f&comment=20140830&p=0&s=
User-Agent:
HTTP GEThttp://195.12.48.190:61307/stat?uid=100&downlink=1111&uplink=1111&id=00155DBA&statpass=bpass&version=20140830&features=30&guid=4996edb7-424a-4dc7-9d5c-b15d20cad11f&comment=20140830&p=0&s=
User-Agent:
HTTP GEThttp://109.169.28.30:33816/stat?uid=100&downlink=1111&uplink=1111&id=00157190&statpass=bpass&version=20140830&features=30&guid=4996edb7-424a-4dc7-9d5c-b15d20cad11f&comment=20140830&p=0&s=
User-Agent:
HTTP GEThttp://208.80.56.11:19141/stat?uid=100&downlink=1111&uplink=1111&id=00158585&statpass=bpass&version=20140830&features=30&guid=4996edb7-424a-4dc7-9d5c-b15d20cad11f&comment=20140830&p=0&s=
User-Agent:
HTTP GEThttp://82.102.11.115:15396/stat?uid=100&downlink=1111&uplink=1111&id=0015996B&statpass=bpass&version=20140830&features=30&guid=4996edb7-424a-4dc7-9d5c-b15d20cad11f&comment=20140830&p=0&s=
User-Agent:
HTTP GEThttp://188.165.233.189:36427/stat?uid=100&downlink=1111&uplink=1111&id=0015AD22&statpass=bpass&version=20140830&features=30&guid=4996edb7-424a-4dc7-9d5c-b15d20cad11f&comment=20140830&p=0&s=
User-Agent:
HTTP GEThttp://208.80.56.11:19141/stat?uid=100&downlink=1111&uplink=1111&id=0015C0D9&statpass=bpass&version=20140830&features=30&guid=4996edb7-424a-4dc7-9d5c-b15d20cad11f&comment=20140830&p=0&s=
User-Agent:
HTTP GEThttp://109.104.94.2:11754/stat?uid=100&downlink=1111&uplink=1111&id=0015D4BE&statpass=bpass&version=20140830&features=30&guid=4996edb7-424a-4dc7-9d5c-b15d20cad11f&comment=20140830&p=0&s=
User-Agent:
HTTP GEThttp://195.62.29.94:49891/stat?uid=100&downlink=1111&uplink=1111&id=0015E894&statpass=bpass&version=20140830&features=30&guid=4996edb7-424a-4dc7-9d5c-b15d20cad11f&comment=20140830&p=0&s=
User-Agent:
HTTP GEThttp://108.178.62.114:28654/stat?uid=100&downlink=1111&uplink=1111&id=0015FC4B&statpass=bpass&version=20140830&features=30&guid=4996edb7-424a-4dc7-9d5c-b15d20cad11f&comment=20140830&p=0&s=
User-Agent:
HTTP GEThttp://149.210.152.141:10238/stat?uid=100&downlink=1111&uplink=1111&id=00161021&statpass=bpass&version=20140830&features=30&guid=4996edb7-424a-4dc7-9d5c-b15d20cad11f&comment=20140830&p=0&s=
User-Agent:
HTTP GEThttp://192.71.151.14:60541/stat?uid=100&downlink=1111&uplink=1111&id=001623D8&statpass=bpass&version=20140830&features=30&guid=4996edb7-424a-4dc7-9d5c-b15d20cad11f&comment=20140830&p=0&s=
User-Agent:
HTTP GEThttp://195.175.227.173:19592/stat?uid=100&downlink=1111&uplink=1111&id=0016378F&statpass=bpass&version=20140830&features=30&guid=4996edb7-424a-4dc7-9d5c-b15d20cad11f&comment=20140830&p=0&s=
User-Agent:
HTTP GEThttp://178.79.165.113:30007/stat?uid=100&downlink=1111&uplink=1111&id=00164B46&statpass=bpass&version=20140830&features=30&guid=4996edb7-424a-4dc7-9d5c-b15d20cad11f&comment=20140830&p=0&s=
User-Agent:
HTTP GEThttp://192.71.151.14:60541/stat?uid=100&downlink=1111&uplink=1111&id=00165EFD&statpass=bpass&version=20140830&features=30&guid=4996edb7-424a-4dc7-9d5c-b15d20cad11f&comment=20140830&p=0&s=
User-Agent:
HTTP GEThttp://213.192.92.3:53109/stat?uid=100&downlink=1111&uplink=1111&id=001672E3&statpass=bpass&version=20140830&features=30&guid=4996edb7-424a-4dc7-9d5c-b15d20cad11f&comment=20140830&p=0&s=
User-Agent:
HTTP GEThttp://128.199.198.182:32136/stat?uid=100&downlink=1111&uplink=1111&id=0016868A&statpass=bpass&version=20140830&features=30&guid=4996edb7-424a-4dc7-9d5c-b15d20cad11f&comment=20140830&p=0&s=
User-Agent:
HTTP GEThttp://159.253.4.167:13737/stat?uid=100&downlink=1111&uplink=1111&id=00169A41&statpass=bpass&version=20140830&features=30&guid=4996edb7-424a-4dc7-9d5c-b15d20cad11f&comment=20140830&p=0&s=
User-Agent:
HTTP GEThttp://94.242.250.32:32048/stat?uid=100&downlink=1111&uplink=1111&id=0016AE17&statpass=bpass&version=20140830&features=30&guid=4996edb7-424a-4dc7-9d5c-b15d20cad11f&comment=20140830&p=0&s=
User-Agent:
HTTP GEThttp://5.77.49.215:49878/stat?uid=100&downlink=1111&uplink=1111&id=0016C2A9&statpass=bpass&version=20140830&features=30&guid=4996edb7-424a-4dc7-9d5c-b15d20cad11f&comment=20140830&p=0&s=
User-Agent:
HTTP GEThttp://178.151.195.163:44937/stat?uid=100&downlink=1111&uplink=1111&id=0016D67F&statpass=bpass&version=20140830&features=30&guid=4996edb7-424a-4dc7-9d5c-b15d20cad11f&comment=20140830&p=0&s=
User-Agent:
HTTP GEThttp://62.108.136.74:30170/stat?uid=100&downlink=1111&uplink=1111&id=0016EA55&statpass=bpass&version=20140830&features=30&guid=4996edb7-424a-4dc7-9d5c-b15d20cad11f&comment=20140830&p=0&s=
User-Agent:
HTTP GEThttp://78.46.54.252:21580/stat?uid=100&downlink=1111&uplink=1111&id=0016FE2B&statpass=bpass&version=20140830&features=30&guid=4996edb7-424a-4dc7-9d5c-b15d20cad11f&comment=20140830&p=0&s=
User-Agent:
HTTP GEThttp://46.22.146.9:26084/stat?uid=100&downlink=1111&uplink=1111&id=00171211&statpass=bpass&version=20140830&features=30&guid=4996edb7-424a-4dc7-9d5c-b15d20cad11f&comment=20140830&p=0&s=
User-Agent:
HTTP GEThttp://165.254.11.50:47646/stat?uid=100&downlink=1111&uplink=1111&id=001725E7&statpass=bpass&version=20140830&features=30&guid=4996edb7-424a-4dc7-9d5c-b15d20cad11f&comment=20140830&p=0&s=
User-Agent:
HTTP GEThttp://46.165.233.149:35173/stat?uid=100&downlink=1111&uplink=1111&id=0017399E&statpass=bpass&version=20140830&features=30&guid=4996edb7-424a-4dc7-9d5c-b15d20cad11f&comment=20140830&p=0&s=
User-Agent:
HTTP GEThttp://75.101.129.31:33391/stat?uid=100&downlink=1111&uplink=1111&id=00174D74&statpass=bpass&version=20140830&features=30&guid=4996edb7-424a-4dc7-9d5c-b15d20cad11f&comment=20140830&p=0&s=
User-Agent:
HTTP GEThttp://178.151.195.163:44937/stat?uid=100&downlink=1111&uplink=1111&id=0017613A&statpass=bpass&version=20140830&features=30&guid=4996edb7-424a-4dc7-9d5c-b15d20cad11f&comment=20140830&p=0&s=
User-Agent:
HTTP GEThttp://144.76.97.176:12448/stat?uid=100&downlink=1111&uplink=1111&id=00177501&statpass=bpass&version=20140830&features=30&guid=4996edb7-424a-4dc7-9d5c-b15d20cad11f&comment=20140830&p=0&s=
User-Agent:
HTTP GEThttp://128.199.198.182:32136/stat?uid=100&downlink=1111&uplink=1111&id=001788C7&statpass=bpass&version=20140830&features=30&guid=4996edb7-424a-4dc7-9d5c-b15d20cad11f&comment=20140830&p=0&s=
User-Agent:
HTTP GEThttp://107.170.145.233:54275/stat?uid=100&downlink=1111&uplink=1111&id=00179C9D&statpass=bpass&version=20140830&features=30&guid=4996edb7-424a-4dc7-9d5c-b15d20cad11f&comment=20140830&p=0&s=
User-Agent:
HTTP GEThttp://79.136.118.230:49649/stat?uid=100&downlink=1111&uplink=1111&id=0017B14E&statpass=bpass&version=20140830&features=30&guid=4996edb7-424a-4dc7-9d5c-b15d20cad11f&comment=20140830&p=0&s=
User-Agent:
HTTP GEThttp://212.83.149.150:62059/stat?uid=100&downlink=1111&uplink=1111&id=0017C505&statpass=bpass&version=20140830&features=30&guid=4996edb7-424a-4dc7-9d5c-b15d20cad11f&comment=20140830&p=0&s=
User-Agent:
HTTP GEThttp://103.248.82.41:21999/stat?uid=100&downlink=1111&uplink=1111&id=0017D8DB&statpass=bpass&version=20140830&features=30&guid=4996edb7-424a-4dc7-9d5c-b15d20cad11f&comment=20140830&p=0&s=
User-Agent:
HTTP GEThttp://50.17.185.81:32353/stat?uid=100&downlink=1111&uplink=1111&id=0017EC92&statpass=bpass&version=20140830&features=30&guid=4996edb7-424a-4dc7-9d5c-b15d20cad11f&comment=20140830&p=0&s=
User-Agent:
HTTP GEThttp://109.104.94.2:11754/stat?uid=100&downlink=1111&uplink=1111&id=00180078&statpass=bpass&version=20140830&features=30&guid=4996edb7-424a-4dc7-9d5c-b15d20cad11f&comment=20140830&p=0&s=
User-Agent:
HTTP GEThttp://5.77.49.215:49878/stat?uid=100&downlink=1111&uplink=1111&id=0018141F&statpass=bpass&version=20140830&features=30&guid=4996edb7-424a-4dc7-9d5c-b15d20cad11f&comment=20140830&p=0&s=
User-Agent:
HTTP GEThttp://98.173.250.108:19004/stat?uid=100&downlink=1111&uplink=1111&id=001827C6&statpass=bpass&version=20140830&features=30&guid=4996edb7-424a-4dc7-9d5c-b15d20cad11f&comment=20140830&p=0&s=
User-Agent:
HTTP GEThttp://216.146.46.11:38597/stat?uid=100&downlink=1111&uplink=1111&id=00183B6E&statpass=bpass&version=20140830&features=30&guid=4996edb7-424a-4dc7-9d5c-b15d20cad11f&comment=20140830&p=0&s=
User-Agent:
Flows TCP192.168.1.1:1031 ➝ 195.62.29.94:49891
Flows TCP192.168.1.1:1031 ➝ 195.62.29.94:49891
Flows TCP192.168.1.1:1032 ➝ 199.173.225.5:35979
Flows TCP192.168.1.1:1033 ➝ 159.253.4.167:13737
Flows TCP192.168.1.1:1034 ➝ 195.12.48.190:61307
Flows TCP192.168.1.1:1035 ➝ 109.169.28.30:33816
Flows TCP192.168.1.1:1036 ➝ 208.80.56.11:19141
Flows TCP192.168.1.1:1037 ➝ 82.102.11.115:15396
Flows TCP192.168.1.1:1038 ➝ 188.165.233.189:36427
Flows TCP192.168.1.1:1039 ➝ 208.80.56.11:19141
Flows TCP192.168.1.1:1040 ➝ 109.104.94.2:11754
Flows TCP192.168.1.1:1041 ➝ 195.62.29.94:49891
Flows TCP192.168.1.1:1042 ➝ 108.178.62.114:28654
Flows TCP192.168.1.1:1043 ➝ 149.210.152.141:10238
Flows TCP192.168.1.1:1044 ➝ 192.71.151.14:60541
Flows TCP192.168.1.1:1045 ➝ 195.175.227.173:19592
Flows TCP192.168.1.1:1046 ➝ 178.79.165.113:30007
Flows TCP192.168.1.1:1047 ➝ 192.71.151.14:60541
Flows TCP192.168.1.1:1048 ➝ 213.192.92.3:53109
Flows TCP192.168.1.1:1049 ➝ 128.199.198.182:32136
Flows TCP192.168.1.1:1050 ➝ 159.253.4.167:13737
Flows TCP192.168.1.1:1051 ➝ 94.242.250.32:32048
Flows TCP192.168.1.1:1052 ➝ 5.77.49.215:49878
Flows TCP192.168.1.1:1053 ➝ 178.151.195.163:44937
Flows TCP192.168.1.1:1054 ➝ 62.108.136.74:30170
Flows TCP192.168.1.1:1055 ➝ 78.46.54.252:21580
Flows TCP192.168.1.1:1056 ➝ 46.22.146.9:26084
Flows TCP192.168.1.1:1057 ➝ 165.254.11.50:47646
Flows TCP192.168.1.1:1058 ➝ 46.165.233.149:35173
Flows TCP192.168.1.1:1059 ➝ 75.101.129.31:33391
Flows TCP192.168.1.1:1060 ➝ 178.151.195.163:44937
Flows TCP192.168.1.1:1061 ➝ 144.76.97.176:12448
Flows TCP192.168.1.1:1062 ➝ 128.199.198.182:32136
Flows TCP192.168.1.1:1063 ➝ 107.170.145.233:54275
Flows TCP192.168.1.1:1064 ➝ 79.136.118.230:49649
Flows TCP192.168.1.1:1065 ➝ 212.83.149.150:62059
Flows TCP192.168.1.1:1066 ➝ 103.248.82.41:21999
Flows TCP192.168.1.1:1067 ➝ 50.17.185.81:32353
Flows TCP192.168.1.1:1068 ➝ 109.104.94.2:11754
Flows TCP192.168.1.1:1069 ➝ 5.77.49.215:49878
Flows TCP192.168.1.1:1070 ➝ 98.173.250.108:19004
Flows TCP192.168.1.1:1071 ➝ 216.146.46.11:38597

Raw Pcap
0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30313532 31434126 73746174 70617373   01521CA&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38333026 66656174 75726573   0140830&features
0x00000060 (00096)   3d333026 67756964 3d343939 36656462   =30&guid=4996edb
0x00000070 (00112)   372d3432 34612d34 6463372d 39643563   7-424a-4dc7-9d5c
0x00000080 (00128)   2d623135 64323063 61643131 6626636f   -b15d20cad11f&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 33302670   mment=20140830&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30313533 36344326 73746174 70617373   015364C&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38333026 66656174 75726573   0140830&features
0x00000060 (00096)   3d333026 67756964 3d343939 36656462   =30&guid=4996edb
0x00000070 (00112)   372d3432 34612d34 6463372d 39643563   7-424a-4dc7-9d5c
0x00000080 (00128)   2d623135 64323063 61643131 6626636f   -b15d20cad11f&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 33302670   mment=20140830&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30313534 41303326 73746174 70617373   0154A03&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38333026 66656174 75726573   0140830&features
0x00000060 (00096)   3d333026 67756964 3d343939 36656462   =30&guid=4996edb
0x00000070 (00112)   372d3432 34612d34 6463372d 39643563   7-424a-4dc7-9d5c
0x00000080 (00128)   2d623135 64323063 61643131 6626636f   -b15d20cad11f&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 33302670   mment=20140830&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30313535 44424126 73746174 70617373   0155DBA&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38333026 66656174 75726573   0140830&features
0x00000060 (00096)   3d333026 67756964 3d343939 36656462   =30&guid=4996edb
0x00000070 (00112)   372d3432 34612d34 6463372d 39643563   7-424a-4dc7-9d5c
0x00000080 (00128)   2d623135 64323063 61643131 6626636f   -b15d20cad11f&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 33302670   mment=20140830&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30313537 31393026 73746174 70617373   0157190&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38333026 66656174 75726573   0140830&features
0x00000060 (00096)   3d333026 67756964 3d343939 36656462   =30&guid=4996edb
0x00000070 (00112)   372d3432 34612d34 6463372d 39643563   7-424a-4dc7-9d5c
0x00000080 (00128)   2d623135 64323063 61643131 6626636f   -b15d20cad11f&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 33302670   mment=20140830&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30313538 35383526 73746174 70617373   0158585&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38333026 66656174 75726573   0140830&features
0x00000060 (00096)   3d333026 67756964 3d343939 36656462   =30&guid=4996edb
0x00000070 (00112)   372d3432 34612d34 6463372d 39643563   7-424a-4dc7-9d5c
0x00000080 (00128)   2d623135 64323063 61643131 6626636f   -b15d20cad11f&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 33302670   mment=20140830&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30313539 39364226 73746174 70617373   015996B&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38333026 66656174 75726573   0140830&features
0x00000060 (00096)   3d333026 67756964 3d343939 36656462   =30&guid=4996edb
0x00000070 (00112)   372d3432 34612d34 6463372d 39643563   7-424a-4dc7-9d5c
0x00000080 (00128)   2d623135 64323063 61643131 6626636f   -b15d20cad11f&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 33302670   mment=20140830&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30313541 44323226 73746174 70617373   015AD22&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38333026 66656174 75726573   0140830&features
0x00000060 (00096)   3d333026 67756964 3d343939 36656462   =30&guid=4996edb
0x00000070 (00112)   372d3432 34612d34 6463372d 39643563   7-424a-4dc7-9d5c
0x00000080 (00128)   2d623135 64323063 61643131 6626636f   -b15d20cad11f&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 33302670   mment=20140830&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30313543 30443926 73746174 70617373   015C0D9&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38333026 66656174 75726573   0140830&features
0x00000060 (00096)   3d333026 67756964 3d343939 36656462   =30&guid=4996edb
0x00000070 (00112)   372d3432 34612d34 6463372d 39643563   7-424a-4dc7-9d5c
0x00000080 (00128)   2d623135 64323063 61643131 6626636f   -b15d20cad11f&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 33302670   mment=20140830&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30313544 34424526 73746174 70617373   015D4BE&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38333026 66656174 75726573   0140830&features
0x00000060 (00096)   3d333026 67756964 3d343939 36656462   =30&guid=4996edb
0x00000070 (00112)   372d3432 34612d34 6463372d 39643563   7-424a-4dc7-9d5c
0x00000080 (00128)   2d623135 64323063 61643131 6626636f   -b15d20cad11f&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 33302670   mment=20140830&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30313545 38393426 73746174 70617373   015E894&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38333026 66656174 75726573   0140830&features
0x00000060 (00096)   3d333026 67756964 3d343939 36656462   =30&guid=4996edb
0x00000070 (00112)   372d3432 34612d34 6463372d 39643563   7-424a-4dc7-9d5c
0x00000080 (00128)   2d623135 64323063 61643131 6626636f   -b15d20cad11f&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 33302670   mment=20140830&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30313546 43344226 73746174 70617373   015FC4B&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38333026 66656174 75726573   0140830&features
0x00000060 (00096)   3d333026 67756964 3d343939 36656462   =30&guid=4996edb
0x00000070 (00112)   372d3432 34612d34 6463372d 39643563   7-424a-4dc7-9d5c
0x00000080 (00128)   2d623135 64323063 61643131 6626636f   -b15d20cad11f&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 33302670   mment=20140830&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30313631 30323126 73746174 70617373   0161021&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38333026 66656174 75726573   0140830&features
0x00000060 (00096)   3d333026 67756964 3d343939 36656462   =30&guid=4996edb
0x00000070 (00112)   372d3432 34612d34 6463372d 39643563   7-424a-4dc7-9d5c
0x00000080 (00128)   2d623135 64323063 61643131 6626636f   -b15d20cad11f&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 33302670   mment=20140830&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30313632 33443826 73746174 70617373   01623D8&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38333026 66656174 75726573   0140830&features
0x00000060 (00096)   3d333026 67756964 3d343939 36656462   =30&guid=4996edb
0x00000070 (00112)   372d3432 34612d34 6463372d 39643563   7-424a-4dc7-9d5c
0x00000080 (00128)   2d623135 64323063 61643131 6626636f   -b15d20cad11f&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 33302670   mment=20140830&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30313633 37384626 73746174 70617373   016378F&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38333026 66656174 75726573   0140830&features
0x00000060 (00096)   3d333026 67756964 3d343939 36656462   =30&guid=4996edb
0x00000070 (00112)   372d3432 34612d34 6463372d 39643563   7-424a-4dc7-9d5c
0x00000080 (00128)   2d623135 64323063 61643131 6626636f   -b15d20cad11f&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 33302670   mment=20140830&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30313634 42343626 73746174 70617373   0164B46&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38333026 66656174 75726573   0140830&features
0x00000060 (00096)   3d333026 67756964 3d343939 36656462   =30&guid=4996edb
0x00000070 (00112)   372d3432 34612d34 6463372d 39643563   7-424a-4dc7-9d5c
0x00000080 (00128)   2d623135 64323063 61643131 6626636f   -b15d20cad11f&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 33302670   mment=20140830&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30313635 45464426 73746174 70617373   0165EFD&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38333026 66656174 75726573   0140830&features
0x00000060 (00096)   3d333026 67756964 3d343939 36656462   =30&guid=4996edb
0x00000070 (00112)   372d3432 34612d34 6463372d 39643563   7-424a-4dc7-9d5c
0x00000080 (00128)   2d623135 64323063 61643131 6626636f   -b15d20cad11f&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 33302670   mment=20140830&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30313637 32453326 73746174 70617373   01672E3&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38333026 66656174 75726573   0140830&features
0x00000060 (00096)   3d333026 67756964 3d343939 36656462   =30&guid=4996edb
0x00000070 (00112)   372d3432 34612d34 6463372d 39643563   7-424a-4dc7-9d5c
0x00000080 (00128)   2d623135 64323063 61643131 6626636f   -b15d20cad11f&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 33302670   mment=20140830&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30313638 36384126 73746174 70617373   016868A&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38333026 66656174 75726573   0140830&features
0x00000060 (00096)   3d333026 67756964 3d343939 36656462   =30&guid=4996edb
0x00000070 (00112)   372d3432 34612d34 6463372d 39643563   7-424a-4dc7-9d5c
0x00000080 (00128)   2d623135 64323063 61643131 6626636f   -b15d20cad11f&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 33302670   mment=20140830&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30313639 41343126 73746174 70617373   0169A41&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38333026 66656174 75726573   0140830&features
0x00000060 (00096)   3d333026 67756964 3d343939 36656462   =30&guid=4996edb
0x00000070 (00112)   372d3432 34612d34 6463372d 39643563   7-424a-4dc7-9d5c
0x00000080 (00128)   2d623135 64323063 61643131 6626636f   -b15d20cad11f&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 33302670   mment=20140830&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30313641 45313726 73746174 70617373   016AE17&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38333026 66656174 75726573   0140830&features
0x00000060 (00096)   3d333026 67756964 3d343939 36656462   =30&guid=4996edb
0x00000070 (00112)   372d3432 34612d34 6463372d 39643563   7-424a-4dc7-9d5c
0x00000080 (00128)   2d623135 64323063 61643131 6626636f   -b15d20cad11f&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 33302670   mment=20140830&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30313643 32413926 73746174 70617373   016C2A9&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38333026 66656174 75726573   0140830&features
0x00000060 (00096)   3d333026 67756964 3d343939 36656462   =30&guid=4996edb
0x00000070 (00112)   372d3432 34612d34 6463372d 39643563   7-424a-4dc7-9d5c
0x00000080 (00128)   2d623135 64323063 61643131 6626636f   -b15d20cad11f&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 33302670   mment=20140830&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30313644 36374626 73746174 70617373   016D67F&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38333026 66656174 75726573   0140830&features
0x00000060 (00096)   3d333026 67756964 3d343939 36656462   =30&guid=4996edb
0x00000070 (00112)   372d3432 34612d34 6463372d 39643563   7-424a-4dc7-9d5c
0x00000080 (00128)   2d623135 64323063 61643131 6626636f   -b15d20cad11f&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 33302670   mment=20140830&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30313645 41353526 73746174 70617373   016EA55&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38333026 66656174 75726573   0140830&features
0x00000060 (00096)   3d333026 67756964 3d343939 36656462   =30&guid=4996edb
0x00000070 (00112)   372d3432 34612d34 6463372d 39643563   7-424a-4dc7-9d5c
0x00000080 (00128)   2d623135 64323063 61643131 6626636f   -b15d20cad11f&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 33302670   mment=20140830&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30313646 45324226 73746174 70617373   016FE2B&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38333026 66656174 75726573   0140830&features
0x00000060 (00096)   3d333026 67756964 3d343939 36656462   =30&guid=4996edb
0x00000070 (00112)   372d3432 34612d34 6463372d 39643563   7-424a-4dc7-9d5c
0x00000080 (00128)   2d623135 64323063 61643131 6626636f   -b15d20cad11f&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 33302670   mment=20140830&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30313731 32313126 73746174 70617373   0171211&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38333026 66656174 75726573   0140830&features
0x00000060 (00096)   3d333026 67756964 3d343939 36656462   =30&guid=4996edb
0x00000070 (00112)   372d3432 34612d34 6463372d 39643563   7-424a-4dc7-9d5c
0x00000080 (00128)   2d623135 64323063 61643131 6626636f   -b15d20cad11f&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 33302670   mment=20140830&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30313732 35453726 73746174 70617373   01725E7&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38333026 66656174 75726573   0140830&features
0x00000060 (00096)   3d333026 67756964 3d343939 36656462   =30&guid=4996edb
0x00000070 (00112)   372d3432 34612d34 6463372d 39643563   7-424a-4dc7-9d5c
0x00000080 (00128)   2d623135 64323063 61643131 6626636f   -b15d20cad11f&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 33302670   mment=20140830&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30313733 39394526 73746174 70617373   017399E&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38333026 66656174 75726573   0140830&features
0x00000060 (00096)   3d333026 67756964 3d343939 36656462   =30&guid=4996edb
0x00000070 (00112)   372d3432 34612d34 6463372d 39643563   7-424a-4dc7-9d5c
0x00000080 (00128)   2d623135 64323063 61643131 6626636f   -b15d20cad11f&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 33302670   mment=20140830&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30313734 44373426 73746174 70617373   0174D74&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38333026 66656174 75726573   0140830&features
0x00000060 (00096)   3d333026 67756964 3d343939 36656462   =30&guid=4996edb
0x00000070 (00112)   372d3432 34612d34 6463372d 39643563   7-424a-4dc7-9d5c
0x00000080 (00128)   2d623135 64323063 61643131 6626636f   -b15d20cad11f&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 33302670   mment=20140830&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30313736 31334126 73746174 70617373   017613A&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38333026 66656174 75726573   0140830&features
0x00000060 (00096)   3d333026 67756964 3d343939 36656462   =30&guid=4996edb
0x00000070 (00112)   372d3432 34612d34 6463372d 39643563   7-424a-4dc7-9d5c
0x00000080 (00128)   2d623135 64323063 61643131 6626636f   -b15d20cad11f&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 33302670   mment=20140830&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30313737 35303126 73746174 70617373   0177501&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38333026 66656174 75726573   0140830&features
0x00000060 (00096)   3d333026 67756964 3d343939 36656462   =30&guid=4996edb
0x00000070 (00112)   372d3432 34612d34 6463372d 39643563   7-424a-4dc7-9d5c
0x00000080 (00128)   2d623135 64323063 61643131 6626636f   -b15d20cad11f&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 33302670   mment=20140830&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30313738 38433726 73746174 70617373   01788C7&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38333026 66656174 75726573   0140830&features
0x00000060 (00096)   3d333026 67756964 3d343939 36656462   =30&guid=4996edb
0x00000070 (00112)   372d3432 34612d34 6463372d 39643563   7-424a-4dc7-9d5c
0x00000080 (00128)   2d623135 64323063 61643131 6626636f   -b15d20cad11f&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 33302670   mment=20140830&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30313739 43394426 73746174 70617373   0179C9D&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38333026 66656174 75726573   0140830&features
0x00000060 (00096)   3d333026 67756964 3d343939 36656462   =30&guid=4996edb
0x00000070 (00112)   372d3432 34612d34 6463372d 39643563   7-424a-4dc7-9d5c
0x00000080 (00128)   2d623135 64323063 61643131 6626636f   -b15d20cad11f&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 33302670   mment=20140830&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30313742 31344526 73746174 70617373   017B14E&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38333026 66656174 75726573   0140830&features
0x00000060 (00096)   3d333026 67756964 3d343939 36656462   =30&guid=4996edb
0x00000070 (00112)   372d3432 34612d34 6463372d 39643563   7-424a-4dc7-9d5c
0x00000080 (00128)   2d623135 64323063 61643131 6626636f   -b15d20cad11f&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 33302670   mment=20140830&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30313743 35303526 73746174 70617373   017C505&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38333026 66656174 75726573   0140830&features
0x00000060 (00096)   3d333026 67756964 3d343939 36656462   =30&guid=4996edb
0x00000070 (00112)   372d3432 34612d34 6463372d 39643563   7-424a-4dc7-9d5c
0x00000080 (00128)   2d623135 64323063 61643131 6626636f   -b15d20cad11f&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 33302670   mment=20140830&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30313744 38444226 73746174 70617373   017D8DB&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38333026 66656174 75726573   0140830&features
0x00000060 (00096)   3d333026 67756964 3d343939 36656462   =30&guid=4996edb
0x00000070 (00112)   372d3432 34612d34 6463372d 39643563   7-424a-4dc7-9d5c
0x00000080 (00128)   2d623135 64323063 61643131 6626636f   -b15d20cad11f&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 33302670   mment=20140830&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30313745 43393226 73746174 70617373   017EC92&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38333026 66656174 75726573   0140830&features
0x00000060 (00096)   3d333026 67756964 3d343939 36656462   =30&guid=4996edb
0x00000070 (00112)   372d3432 34612d34 6463372d 39643563   7-424a-4dc7-9d5c
0x00000080 (00128)   2d623135 64323063 61643131 6626636f   -b15d20cad11f&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 33302670   mment=20140830&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30313830 30373826 73746174 70617373   0180078&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38333026 66656174 75726573   0140830&features
0x00000060 (00096)   3d333026 67756964 3d343939 36656462   =30&guid=4996edb
0x00000070 (00112)   372d3432 34612d34 6463372d 39643563   7-424a-4dc7-9d5c
0x00000080 (00128)   2d623135 64323063 61643131 6626636f   -b15d20cad11f&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 33302670   mment=20140830&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30313831 34314626 73746174 70617373   018141F&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38333026 66656174 75726573   0140830&features
0x00000060 (00096)   3d333026 67756964 3d343939 36656462   =30&guid=4996edb
0x00000070 (00112)   372d3432 34612d34 6463372d 39643563   7-424a-4dc7-9d5c
0x00000080 (00128)   2d623135 64323063 61643131 6626636f   -b15d20cad11f&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 33302670   mment=20140830&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30313832 37433626 73746174 70617373   01827C6&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38333026 66656174 75726573   0140830&features
0x00000060 (00096)   3d333026 67756964 3d343939 36656462   =30&guid=4996edb
0x00000070 (00112)   372d3432 34612d34 6463372d 39643563   7-424a-4dc7-9d5c
0x00000080 (00128)   2d623135 64323063 61643131 6626636f   -b15d20cad11f&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 33302670   mment=20140830&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30313833 42364526 73746174 70617373   0183B6E&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38333026 66656174 75726573   0140830&features
0x00000060 (00096)   3d333026 67756964 3d343939 36656462   =30&guid=4996edb
0x00000070 (00112)   372d3432 34612d34 6463372d 39643563   7-424a-4dc7-9d5c
0x00000080 (00128)   2d623135 64323063 61643131 6626636f   -b15d20cad11f&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 33302670   mment=20140830&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..


Strings