Office RecentFiles

Another way to detect if the malware is running in a real user machine is to check if some recent Office files was opened.

Additional Resources

Subscribe to our Newsletter and don't miss important updates