Difference between revisions of "Outlook Express Database (DBX)"

From Forensics Wiki
Jump to: navigation, search
(Created page with "Outlook Express uses the '''Outlook Express Database (DBX)''' database to store emails, folders, etc. == MIME types == == File signature == DBX files of Outlook Express 5.0...")
 
 
(3 intermediate revisions by one user not shown)
Line 1: Line 1:
[[Outlook Express]] uses the '''Outlook Express Database (DBX)''' database to store emails, folders, etc.
+
{{expand}}
 +
 
 +
[[Outlook Express]] (OE) uses the '''Outlook Express Database (DBX)''' database to store emails, folders, etc. The DBX was introduced in version 5. Earlier versions of OE use different file formats.
  
 
== MIME types ==
 
== MIME types ==
  
 
== File signature ==
 
== File signature ==
DBX files of Outlook Express 5.0 (OE5) and later start with hexadecimal: 0xcf 0xad 0x12 0xfe.
+
OE5 DBX files start with hexadecimal: 0xcf 0xad 0x12 0xfe.
 
For now it is assumed that this is the file signature.
 
For now it is assumed that this is the file signature.
 
+
It is followed by a content class identifier (CLSID), which is unique for the type of DBX file.
According to libdbx OE4 uses a different signature: 4A4D4636 03001000. For now this is unconfirmed.
+
  
 
== File types ==
 
== File types ==
In OE the DBX files are used to store email per top folder (e.g. Inbox, Outbox) and the folder-hierarchy.
+
Although DBX probably contains a minor/major version (offset: 20 and 24) until now it is unknown how it affects the file type.
  
 
== Contents ==
 
== Contents ==
 +
The contents of a DBX file is dependent on the content CLSID.
 +
* Message Database (CLSID: 6F74FDC5-E366-11d1-9A4E-00C04FA309D4)
 +
* Folder Database (CLSID: 6F74FDC6-E366-11d1-9A4E-00C04FA309D4)
  
 
== Encryption ==
 
== Encryption ==
  
== See also==
+
== External Links ==
  
 +
* [http://en.wikipedia.org/wiki/Outlook_Express Outlook Express Wikipedia]
 
* [http://oedbx.aroh.de/ Outlook Express dbx file format by Arne Schloh]
 
* [http://oedbx.aroh.de/ Outlook Express dbx file format by Arne Schloh]
 
* [http://www.fpns.net/willy/DBX-FMT.HTM Outlook Express Version 5.0 file format]
 
* [http://www.fpns.net/willy/DBX-FMT.HTM Outlook Express Version 5.0 file format]

Latest revision as of 01:42, 13 September 2012

Information icon.png

Please help to improve this article by expanding it.
Further information might be found on the discussion page.

Outlook Express (OE) uses the Outlook Express Database (DBX) database to store emails, folders, etc. The DBX was introduced in version 5. Earlier versions of OE use different file formats.

Contents

MIME types

File signature

OE5 DBX files start with hexadecimal: 0xcf 0xad 0x12 0xfe. For now it is assumed that this is the file signature. It is followed by a content class identifier (CLSID), which is unique for the type of DBX file.

File types

Although DBX probably contains a minor/major version (offset: 20 and 24) until now it is unknown how it affects the file type.

Contents

The contents of a DBX file is dependent on the content CLSID.

  • Message Database (CLSID: 6F74FDC5-E366-11d1-9A4E-00C04FA309D4)
  • Folder Database (CLSID: 6F74FDC6-E366-11d1-9A4E-00C04FA309D4)

Encryption

External Links