AVSignSeek: determine where the AV signature is located in a binary/payload