Difference between revisions of "Outlook Express Database (DBX)"
From Forensics Wiki
Joachim Metz (Talk | contribs) |
Joachim Metz (Talk | contribs) |
||
| Line 1: | Line 1: | ||
| + | {{expand}} | ||
| + | |||
[[Outlook Express]] (OE) uses the '''Outlook Express Database (DBX)''' database to store emails, folders, etc. The DBX was introduced in version 5. Earlier versions of OE use different file formats. | [[Outlook Express]] (OE) uses the '''Outlook Express Database (DBX)''' database to store emails, folders, etc. The DBX was introduced in version 5. Earlier versions of OE use different file formats. | ||
| Line 18: | Line 20: | ||
== Encryption == | == Encryption == | ||
| − | == | + | == External Links == |
* [http://en.wikipedia.org/wiki/Outlook_Express Outlook Express Wikipedia] | * [http://en.wikipedia.org/wiki/Outlook_Express Outlook Express Wikipedia] | ||
Latest revision as of 01:42, 13 September 2012
|
|
Please help to improve this article by expanding it.
|
Contents |
[edit] MIME types
[edit] File signature
OE5 DBX files start with hexadecimal: 0xcf 0xad 0x12 0xfe. For now it is assumed that this is the file signature. It is followed by a content class identifier (CLSID), which is unique for the type of DBX file.
[edit] File types
Although DBX probably contains a minor/major version (offset: 20 and 24) until now it is unknown how it affects the file type.
[edit] Contents
The contents of a DBX file is dependent on the content CLSID.
- Message Database (CLSID: 6F74FDC5-E366-11d1-9A4E-00C04FA309D4)
- Folder Database (CLSID: 6F74FDC6-E366-11d1-9A4E-00C04FA309D4)
[edit] Encryption
[edit] External Links
- Outlook Express Wikipedia
- Outlook Express dbx file format by Arne Schloh
- Outlook Express Version 5.0 file format
- libdbx, see FILE-FORMAT in the package.
