/usr/local/maldetect/sigs/rfxn.hdb