/usr/local/maldetect.bk925935/tmp/.runtime.hexsigs.1549