Merge pull request #1156 from shyper-ideler/master

Added paths for Office 2016
cuckoosandbox · Nov 3, 2016 · 510f8cb · 510f8cb
2 parents 9c1c490 + f99c195
commit 510f8cb
Show file tree

Hide file tree

Showing 4 changed files with 4 additions and 0 deletions.
diff --git a/analyzer/windows/modules/packages/doc.py b/analyzer/windows/modules/packages/doc.py
@@ -16,6 +16,7 @@ class DOC(Package):
  ("ProgramFiles", "Microsoft Office", "Office12", "WINWORD.EXE"),
  ("ProgramFiles", "Microsoft Office", "Office14", "WINWORD.EXE"),
  ("ProgramFiles", "Microsoft Office", "Office15", "WINWORD.EXE"),
+ ("ProgramFiles", "Microsoft Office", "Office16", "WINWORD.EXE"),
  ("ProgramFiles", "Microsoft Office 15", "root", "office15", "WINWORD.EXE"),
  ("ProgramFiles", "Microsoft Office", "root", "Office16", "WINWORD.EXE"),
  ("ProgramFiles", "Microsoft Office", "WORDVIEW.EXE"),

diff --git a/analyzer/windows/modules/packages/ppt.py b/analyzer/windows/modules/packages/ppt.py
@@ -16,6 +16,7 @@ class PPT(Package):
  ("ProgramFiles", "Microsoft Office", "Office12", "POWERPNT.EXE"),
  ("ProgramFiles", "Microsoft Office", "Office14", "POWERPNT.EXE"),
  ("ProgramFiles", "Microsoft Office", "Office15", "POWERPNT.EXE"),
+ ("ProgramFiles", "Microsoft Office", "Office16", "POWERPNT.EXE"),
  ("ProgramFiles", "Microsoft Office 15", "root", "office15", "POWERPNT.EXE"),
  ]
 

diff --git a/analyzer/windows/modules/packages/pub.py b/analyzer/windows/modules/packages/pub.py
@@ -16,6 +16,7 @@ class PUB(Package):
  ("ProgramFiles", "Microsoft Office", "Office12", "MSPUB.EXE"),
  ("ProgramFiles", "Microsoft Office", "Office14", "MSPUB.EXE"),
  ("ProgramFiles", "Microsoft Office", "Office15", "MSPUB.EXE"),
+ ("ProgramFiles", "Microsoft Office", "Office16", "MSPUB.EXE"),
  ("ProgramFiles", "Microsoft Office 15", "root", "office15", "MSPUB.EXE"),
  ("ProgramFiles", "Microsoft Office", "root", "Office16", "MSPUB.EXE"),
  ]

diff --git a/analyzer/windows/modules/packages/xls.py b/analyzer/windows/modules/packages/xls.py
@@ -16,6 +16,7 @@ class XLS(Package):
  ("ProgramFiles", "Microsoft Office", "Office12", "EXCEL.EXE"),
  ("ProgramFiles", "Microsoft Office", "Office14", "EXCEL.EXE"),
  ("ProgramFiles", "Microsoft Office", "Office15", "EXCEL.EXE"),
+ ("ProgramFiles", "Microsoft Office", "Office16", "EXCEL.EXE"),
  ("ProgramFiles", "Microsoft Office 15", "root", "office15", "EXCEL.EXE"),
  ]