ATTENTION: The new home of the Digital Forensics Wiki is at Yeah, it's a silly name, but it was cheap.
This wiki will be going offline permanently in the near future. An exact date will be announced soon. Thank you for being a part of this community.
If you wish to work on the new forensicswiki, please join the Google Group forensicswiki-reborn

Nickfile (NK2)

From ForensicsWiki
Revision as of 07:11, 26 August 2012 by Joachim Metz (Talk | contribs) (See also)

Jump to: navigation, search

Microsoft Outlook uses the Nickfile (NK2) to store e-mail address aliases.

The file type is also known as the Outlook AutoComplete File or the Nickname file.

MIME types

The actual mime type of the NK2 format is unspecified

File signature

The NK2 has the following file signature: hexadecimal: 0D F0 AD BA

Note that other sources claim that the file signature is hexadecimal: 0D F0 AD BA 0A 00 00 00


The NK2 basically contains a list of items. The attributes of these items are defined by the Microsoft Outlook Message API (MAPI).

External Links