is it possible to get the encrypted seed phrase from metamask?

hey guys, a friend of mine got hacked, he says that he just entered the password (and not the seed phrase, he has the seed phrase under a tree [literally]).

anyways , he entered the password on a phishing website and not the seed phrase, 20 mins later his wallet was empty, he lost a lot of money.

so is it possible to get the encrypted file just with js?