/usr/local/maldetect/tmp/.runtime.hexsigs.1323