Nickfile (NK2)
From Forensics Wiki
Revision as of 03:42, 31 January 2009 by Joachim Metz (Talk | contribs)
Microsoft Outlook uses the Nickfile (NK2) to store e-mail address aliases. The file is also known as Outlook AutoComplete File and Nickname file.
Contents |
MIME types
The actual mime type of the NK2 format is unspecified
File signature
The NK2 has the following file signature: hexadecimal: 0D F0 AD BA
Note that other sources claim that the file signature is hexadecimal: 0D F0 AD BA 0A 00 00 00
Contents
The NK2 basically contains a list of items. The attributes of these items are defined by the Microsoft Outlook Message API (MAPI).
See also
- A great deal of information about the format has been documented by the libnk2 project, including some of the Nickfile format specifications and MAPI definitions.
