Understand FileCoAuth.exe which is a apart of Microsoft Office & OneDrive Sync -- 2
Budget: £36 – £0 GBP
We need to understand how the FileCoAuth.exe file works and operates and specifically the interaction between Microsoft Office (Word/Excel) and the FileCoAuth.exe file.
This file is specifically related to how when you open an office document on a windows machine it will open in CoAuth mode (this essentially allows more than one Microsoft365 user to modify the file at the same byt opening up the file in the remote location rather than locally).
What we know so far:
1. We know this is a COM server, it is registered in the registry during the installation of OneDrive sync Client (for business)
2. We know that when office opens a document on the Shell Namespace Extension it is calling this FileCoAuth.exe and it seems that MS Office is talking with the FileCoAuth.exe to establish criteria.
3. We know that the FileCoAuth.exe is somehow informing office when opening a file that the file is actually online and therefore it opens the remote file not the local file.
4. We know FileCoAuth is doing much more than that but this is our primary focus.
We specifically want to understand how Office (Word/Excel/Powerpoint) is interacting with FileCoAuth.exe during the opening of a document on disk. We know it is not yet getting to the open handle and we know it is using the COM interface as FileCoAuth is a local server. It appears that during Office app opening a file locally it is calling out to FileCoAuth over COM, we would like to understand those COM interactions.
This file is specifically related to how when you open an office document on a windows machine it will open in CoAuth mode (this essentially allows more than one Microsoft365 user to modify the file at the same byt opening up the file in the remote location rather than locally).
What we know so far:
1. We know this is a COM server, it is registered in the registry during the installation of OneDrive sync Client (for business)
2. We know that when office opens a document on the Shell Namespace Extension it is calling this FileCoAuth.exe and it seems that MS Office is talking with the FileCoAuth.exe to establish criteria.
3. We know that the FileCoAuth.exe is somehow informing office when opening a file that the file is actually online and therefore it opens the remote file not the local file.
4. We know FileCoAuth is doing much more than that but this is our primary focus.
We specifically want to understand how Office (Word/Excel/Powerpoint) is interacting with FileCoAuth.exe during the opening of a document on disk. We know it is not yet getting to the open handle and we know it is using the COM interface as FileCoAuth is a local server. It appears that during Office app opening a file locally it is calling out to FileCoAuth over COM, we would like to understand those COM interactions.