There is actually only one query ID associated with each prepared statement, and it is written as a short_string. That is, it's a short length followed by a string. This was misinterpreted as a short ID and a 16 byte md5 id.