/usr/local/maldetect.bk925935/tmp/.runtime.user.1355.ndb