Difference between revisions of "Nickfile (NK2)"
From Forensics Wiki
Joachim Metz (Talk | contribs) |
Joachim Metz (Talk | contribs) m (Nickfile format (NK2) moved to Nickfile (NK2)) |
Revision as of 06:29, 31 January 2009
Microsoft Outlook uses the Nickfile (NK2) to store e-mail address aliases.
The file type is also known as the Outlook AutoComplete File or the Nickname file.
Contents |
MIME types
The actual mime type of the NK2 format is unspecified
File signature
The NK2 has the following file signature: hexadecimal: 0D F0 AD BA
Note that other sources claim that the file signature is hexadecimal: 0D F0 AD BA 0A 00 00 00
Contents
The NK2 basically contains a list of items. The attributes of these items are defined by the Microsoft Outlook Message API (MAPI).
See also
- A great deal of information about the format has been documented by the libnk2 project, including some of the Nickfile format specifications and MAPI definitions.