diff --git a/modules/signatures/windows/antisandbox_sleep.py b/modules/signatures/windows/antisandbox_sleep.py index f7a8d402e..d2ddbde03 100644 --- a/modules/signatures/windows/antisandbox_sleep.py +++ b/modules/signatures/windows/antisandbox_sleep.py @@ -32,6 +32,8 @@ class AntiSandboxSleep(Signature): "acrord32.exe", "winword.exe", "excel.exe", + "powerpnt.exe", + "mspub.exe", ] def init(self):