search

ironfede / openmcdf

Microsoft Compound File .net component - pure C# - netstandard 2.0
Mozilla Public License 2.0
295 stars 72 forks source link

Any other Office apps that use Compound file format? #130

Open alanccw opened 1 month ago

alanccw commented 1 month ago

I see https://forensics.wiki/ole_compound_file/ said Office 97-2002 files are using Compound file format.

I check .doc, xls, ppt, and .vsd and find them are in compound format.

Are there any other Office apps that also use this format? I check OneNote and it does not use that format.

aunverdorben-dap commented 1 month ago

Outlook .msg files are compound files as well.

alanccw commented 1 month ago

@aunverdorben-dap

Thank you. Any more? Or is there a document on this?

Numpsy commented 1 month ago

Office 97-2002 files are using Compound file format.

I believe that files from newer Office versions can actually be stored as compound documents (rather than the usual zip file) if they are encrypted or protected with RMS (they're still the same office apps though)

alanccw commented 1 month ago

@Numpsy

What is RMS?

I just find Microsoft Project and Publisher are also use this format. But no more.

Numpsy commented 1 month ago

What is RMS?

https://en.wikipedia.org/wiki/Active_Directory_Rights_Management_Services (or maybe the newer Azure / AIP equivalent)

alanccw commented 1 month ago

@Numpsy

After searching online, it seems the RMS does use compound file as it needs some special protection on some streams of the file. I will check that further. Thank you.