Add a new signature module to detect execution of dropped binaries, listing the path of each executed dropped binary