/usr/local/maldetect/tmp/.runtime.user.1326.ndb