Antivirus software products detect malware by comparing the characteristics of known instances against which of the following type of file sets?