diff --git a/modules/signatures/windows/antisandbox_sleep.py b/modules/signatures/windows/antisandbox_sleep.py index 3d999733..c310facc 100644 --- a/modules/signatures/windows/antisandbox_sleep.py +++ b/modules/signatures/windows/antisandbox_sleep.py @@ -32,6 +32,8 @@ class AntiSandboxSleep(Signature): "acrord32.exe", "winword.exe", "excel.exe", + "powerpnt.exe", + "mspub.exe", ] def init(self):