msoffice.web

$ target-query <path/to/target> -f msoffice.web

Details

Module	dissect.target.plugins.apps.productivity.msoffice.MSOffice
Output	records

Module documentation

Microsoft Office productivity suite plugin.

Function documentation

Returns all available Web add-ins cached in the WEF (Web Extension Framework) folder.

Office Web Add-ins are web-based applications that extend the functionality of Office applications like Word, Excel, and Outlook. These add-ins can interact with the content in Office documents and provide additional features and capabilities. The WEF folder contains cached data and manifests for Office Web Add-ins. The manifest includes information about the add-ins, such as their source locations, display names, and other metadata.

References:

• https://learn.microsoft.com/en-us/office/dev/add-ins/overview/office-add-ins

Yields a OfficeWebAddinRecord with fields:

manifest (path): The full path to the manifest in the WEF folder.
modification_time (datetime): The modification time of the manifest.
name (string): The display name of the add-in.
version (string): The version of the add-in.
provider_name (string): The provider name of the add-in.
source_locations (string[]): URLs referencing the web assets of the add-in (such as javascript and html files).