Difference between revisions of "Outlook Express Database (DBX)"

From Forensics Wiki
Jump to: navigation, search
(Created page with "Outlook Express uses the '''Outlook Express Database (DBX)''' database to store emails, folders, etc. == MIME types == == File signature == DBX files of Outlook Express 5.0...")
 
(File signature)
Line 6: Line 6:
 
DBX files of Outlook Express 5.0 (OE5) and later start with hexadecimal: 0xcf 0xad 0x12 0xfe.
 
DBX files of Outlook Express 5.0 (OE5) and later start with hexadecimal: 0xcf 0xad 0x12 0xfe.
 
For now it is assumed that this is the file signature.
 
For now it is assumed that this is the file signature.
 
According to libdbx OE4 uses a different signature: 4A4D4636 03001000. For now this is unconfirmed.
 
  
 
== File types ==
 
== File types ==

Revision as of 02:52, 13 October 2010

Outlook Express uses the Outlook Express Database (DBX) database to store emails, folders, etc.

Contents

MIME types

File signature

DBX files of Outlook Express 5.0 (OE5) and later start with hexadecimal: 0xcf 0xad 0x12 0xfe. For now it is assumed that this is the file signature.

File types

In OE the DBX files are used to store email per top folder (e.g. Inbox, Outbox) and the folder-hierarchy.

Contents

Encryption

See also