Doesn't antivirus software do static analysis?