> For the complete documentation index, see [llms.txt](https://crypt0nite.gitbook.io/writeups/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://crypt0nite.gitbook.io/writeups/ctfs/nahamcon/forensics/microsooft.md).

# Microsooft

As it's a `docx` file we can extract all the individual parts using `binwalk`.

```
binwalk -e microsooft.docx
```

Then we navigate to `/root/Desktop/_microsooft.docx.extracted/src/`, open up `oof.txt` and `Ctrl + F` for `flag`.

**flag{oof\_is\_right\_why\_gfxdata\_though}**

Alternatively, if you don't want to use the command line, change the extension to `.zip` and unzip

Navigate into the correct folder and open `oof.txt`. `ctrl + F` to search for the flag.