ATTENTION: The new home of the Digital Forensics Wiki is at Yeah, it's a silly name, but it was cheap.
This wiki will be going offline permanently in the near future. An exact date will be announced soon. Thank you for being a part of this community.
If you wish to work on the new forensicswiki, please join the Google Group forensicswiki-reborn

Excel Spreadsheet (XLS)

From ForensicsWiki
Revision as of 20:23, 13 January 2014 by Joachim Metz (Talk | contribs) (See Also)

(diff) ← Older revision | Latest revision (diff) | Newer revision → (diff)
Jump to: navigation, search

The Excel Spreadsheet (XLS) file format has the .xls extension. This file type originates from Microsoft Excel. However, other spreadsheet software can be used to display these files as well. These include:

The XLS file format should not be confused with XLSX and XSLB.

MIME types

The following MIME types apply to this file format:

  • application/msexcel
  • application/xls

File signature

Microsoft Excel spreadsheets of version 97-2003 use the OLE Compound File (OLECF). These files therefore have the OLECF file signature

The object stream of the OLECF containing a Excel spreadsheet contains the string "..." with some version.

Excel 97-2003 spreadsheets

The Excel 97-2007 Binary File format is stored in the OLECF using multiple streams:

  • Workbook stream


See Word Document (DOC). Note: perhaps this section should be moved to a separate section about Microsoft Office encryption

See Also

External Links