http://www.forensicswiki.org/w/index.php?title=Outlook_Express_Database_(DBX)&feed=atom&action=history 2013-05-21T16:36:30Z Revision history for this page on the wiki MediaWiki 1.20.3 http://www.forensicswiki.org/w/index.php?title=Outlook_Express_Database_(DBX)&diff=10551&oldid=prev 2012-09-13T06:42:44Z

<p></p> <table class='diff diff-contentalign-left'> <col class='diff-marker' /> <col class='diff-content' /> <col class='diff-marker' /> <col class='diff-content' /> <tr style='vertical-align: top;'> <td colspan='2' style="background-color: white; color:black;">← Older revision</td> <td colspan='2' style="background-color: white; color:black;">Revision as of 06:42, 13 September 2012</td> </tr><tr><td colspan="2" class="diff-lineno">Line 1:</td> <td colspan="2" class="diff-lineno">Line 1:</td></tr> <tr><td colspan="2">&#160;</td><td class='diff-marker'>+</td><td style="background: #cfc; color:black; font-size: smaller;"><div><ins style="color: red; font-weight: bold; text-decoration: none;">{{expand}}</ins></div></td></tr> <tr><td colspan="2">&#160;</td><td class='diff-marker'>+</td><td style="background: #cfc; color:black; font-size: smaller;"><div><ins style="color: red; font-weight: bold; text-decoration: none;"></ins></div></td></tr> <tr><td class='diff-marker'>&#160;</td><td style="background: #eee; color:black; font-size: smaller;"><div>[[Outlook Express]] (OE) uses the '''Outlook Express Database (DBX)''' database to store emails, folders, etc. The DBX was introduced in version 5. Earlier versions of OE use different file formats.</div></td><td class='diff-marker'>&#160;</td><td style="background: #eee; color:black; font-size: smaller;"><div>[[Outlook Express]] (OE) uses the '''Outlook Express Database (DBX)''' database to store emails, folders, etc. The DBX was introduced in version 5. Earlier versions of OE use different file formats.</div></td></tr> <tr><td class='diff-marker'>&#160;</td><td style="background: #eee; color:black; font-size: smaller;"></td><td class='diff-marker'>&#160;</td><td style="background: #eee; color:black; font-size: smaller;"></td></tr> <tr><td colspan="2" class="diff-lineno">Line 18:</td> <td colspan="2" class="diff-lineno">Line 20:</td></tr> <tr><td class='diff-marker'>&#160;</td><td style="background: #eee; color:black; font-size: smaller;"><div>== Encryption ==</div></td><td class='diff-marker'>&#160;</td><td style="background: #eee; color:black; font-size: smaller;"><div>== Encryption ==</div></td></tr> <tr><td class='diff-marker'>&#160;</td><td style="background: #eee; color:black; font-size: smaller;"></td><td class='diff-marker'>&#160;</td><td style="background: #eee; color:black; font-size: smaller;"></td></tr> <tr><td class='diff-marker'>−</td><td style="background: #ffa; color:black; font-size: smaller;"><div>== <del class="diffchange diffchange-inline">See also</del>==</div></td><td class='diff-marker'>+</td><td style="background: #cfc; color:black; font-size: smaller;"><div>== <ins class="diffchange diffchange-inline">External Links </ins>==</div></td></tr> <tr><td class='diff-marker'>&#160;</td><td style="background: #eee; color:black; font-size: smaller;"></td><td class='diff-marker'>&#160;</td><td style="background: #eee; color:black; font-size: smaller;"></td></tr> <tr><td class='diff-marker'>&#160;</td><td style="background: #eee; color:black; font-size: smaller;"><div>* [http://en.wikipedia.org/wiki/Outlook_Express Outlook Express Wikipedia]</div></td><td class='diff-marker'>&#160;</td><td style="background: #eee; color:black; font-size: smaller;"><div>* [http://en.wikipedia.org/wiki/Outlook_Express Outlook Express Wikipedia]</div></td></tr> </table>

Joachim Metz http://www.forensicswiki.org/w/index.php?title=Outlook_Express_Database_(DBX)&diff=10550&oldid=prev 2010-10-13T08:01:52Z

<p></p> <table class='diff diff-contentalign-left'> <col class='diff-marker' /> <col class='diff-content' /> <col class='diff-marker' /> <col class='diff-content' /> <tr style='vertical-align: top;'> <td colspan='2' style="background-color: white; color:black;">← Older revision</td> <td colspan='2' style="background-color: white; color:black;">Revision as of 08:01, 13 October 2010</td> </tr><tr><td colspan="2" class="diff-lineno">Line 1:</td> <td colspan="2" class="diff-lineno">Line 1:</td></tr> <tr><td class='diff-marker'>−</td><td style="background: #ffa; color:black; font-size: smaller;"><div>[[Outlook Express]] (OE) uses the '''Outlook Express Database (DBX)''' database to store emails, folders, etc. The DBX was <del class="diffchange diffchange-inline">introduces </del>in version 5. Earlier versions of OE use different file formats.</div></td><td class='diff-marker'>+</td><td style="background: #cfc; color:black; font-size: smaller;"><div>[[Outlook Express]] (OE) uses the '''Outlook Express Database (DBX)''' database to store emails, folders, etc. The DBX was <ins class="diffchange diffchange-inline">introduced </ins>in version 5. Earlier versions of OE use different file formats.</div></td></tr> <tr><td class='diff-marker'>&#160;</td><td style="background: #eee; color:black; font-size: smaller;"></td><td class='diff-marker'>&#160;</td><td style="background: #eee; color:black; font-size: smaller;"></td></tr> <tr><td class='diff-marker'>&#160;</td><td style="background: #eee; color:black; font-size: smaller;"><div>== MIME types ==</div></td><td class='diff-marker'>&#160;</td><td style="background: #eee; color:black; font-size: smaller;"><div>== MIME types ==</div></td></tr> </table>

Joachim Metz http://www.forensicswiki.org/w/index.php?title=Outlook_Express_Database_(DBX)&diff=10549&oldid=prev 2010-10-13T08:01:18Z

<p></p> <table class='diff diff-contentalign-left'> <col class='diff-marker' /> <col class='diff-content' /> <col class='diff-marker' /> <col class='diff-content' /> <tr style='vertical-align: top;'> <td colspan='2' style="background-color: white; color:black;">← Older revision</td> <td colspan='2' style="background-color: white; color:black;">Revision as of 08:01, 13 October 2010</td> </tr><tr><td colspan="2" class="diff-lineno">Line 1:</td> <td colspan="2" class="diff-lineno">Line 1:</td></tr> <tr><td class='diff-marker'>−</td><td style="background: #ffa; color:black; font-size: smaller;"><div>[[Outlook Express]] uses the '''Outlook Express Database (DBX)''' database to store emails, folders, etc.</div></td><td class='diff-marker'>+</td><td style="background: #cfc; color:black; font-size: smaller;"><div>[[Outlook Express]] <ins class="diffchange diffchange-inline">(OE) </ins>uses the '''Outlook Express Database (DBX)''' database to store emails, folders, etc<ins class="diffchange diffchange-inline">. The DBX was introduces in version 5. Earlier versions of OE use different file formats</ins>.</div></td></tr> <tr><td class='diff-marker'>&#160;</td><td style="background: #eee; color:black; font-size: smaller;"></td><td class='diff-marker'>&#160;</td><td style="background: #eee; color:black; font-size: smaller;"></td></tr> <tr><td class='diff-marker'>&#160;</td><td style="background: #eee; color:black; font-size: smaller;"><div>== MIME types ==</div></td><td class='diff-marker'>&#160;</td><td style="background: #eee; color:black; font-size: smaller;"><div>== MIME types ==</div></td></tr> <tr><td class='diff-marker'>&#160;</td><td style="background: #eee; color:black; font-size: smaller;"></td><td class='diff-marker'>&#160;</td><td style="background: #eee; color:black; font-size: smaller;"></td></tr> <tr><td class='diff-marker'>&#160;</td><td style="background: #eee; color:black; font-size: smaller;"><div>== File signature ==</div></td><td class='diff-marker'>&#160;</td><td style="background: #eee; color:black; font-size: smaller;"><div>== File signature ==</div></td></tr> <tr><td class='diff-marker'>−</td><td style="background: #ffa; color:black; font-size: smaller;"><div>DBX files <del class="diffchange diffchange-inline">of Outlook Express 5.0 (OE5) and later </del>start with hexadecimal: 0xcf 0xad 0x12 0xfe.</div></td><td class='diff-marker'>+</td><td style="background: #cfc; color:black; font-size: smaller;"><div><ins class="diffchange diffchange-inline">OE5 </ins>DBX files start with hexadecimal: 0xcf 0xad 0x12 0xfe.</div></td></tr> <tr><td class='diff-marker'>&#160;</td><td style="background: #eee; color:black; font-size: smaller;"><div>For now it is assumed that this is the file signature.</div></td><td class='diff-marker'>&#160;</td><td style="background: #eee; color:black; font-size: smaller;"><div>For now it is assumed that this is the file signature.</div></td></tr> <tr><td colspan="2">&#160;</td><td class='diff-marker'>+</td><td style="background: #cfc; color:black; font-size: smaller;"><div><ins style="color: red; font-weight: bold; text-decoration: none;">It is followed by a content class identifier (CLSID), which is unique for the type of DBX file.</ins></div></td></tr> <tr><td class='diff-marker'>&#160;</td><td style="background: #eee; color:black; font-size: smaller;"></td><td class='diff-marker'>&#160;</td><td style="background: #eee; color:black; font-size: smaller;"></td></tr> <tr><td class='diff-marker'>&#160;</td><td style="background: #eee; color:black; font-size: smaller;"><div>== File types ==</div></td><td class='diff-marker'>&#160;</td><td style="background: #eee; color:black; font-size: smaller;"><div>== File types ==</div></td></tr> <tr><td class='diff-marker'>−</td><td style="background: #ffa; color:black; font-size: smaller;"><div><del class="diffchange diffchange-inline">In OE the </del>DBX <del class="diffchange diffchange-inline">files are used to store email per top folder </del>(<del class="diffchange diffchange-inline">e.g. Inbox, Outbox</del>) <del class="diffchange diffchange-inline">and </del>the <del class="diffchange diffchange-inline">folder-hierarchy</del>.</div></td><td class='diff-marker'>+</td><td style="background: #cfc; color:black; font-size: smaller;"><div><ins class="diffchange diffchange-inline">Although </ins>DBX <ins class="diffchange diffchange-inline">probably contains a minor/major version </ins>(<ins class="diffchange diffchange-inline">offset: 20 and 24</ins>) <ins class="diffchange diffchange-inline">until now it is unknown how it affects </ins>the <ins class="diffchange diffchange-inline">file type</ins>.</div></td></tr> <tr><td class='diff-marker'>&#160;</td><td style="background: #eee; color:black; font-size: smaller;"></td><td class='diff-marker'>&#160;</td><td style="background: #eee; color:black; font-size: smaller;"></td></tr> <tr><td class='diff-marker'>&#160;</td><td style="background: #eee; color:black; font-size: smaller;"><div>== Contents ==</div></td><td class='diff-marker'>&#160;</td><td style="background: #eee; color:black; font-size: smaller;"><div>== Contents ==</div></td></tr> <tr><td colspan="2">&#160;</td><td class='diff-marker'>+</td><td style="background: #cfc; color:black; font-size: smaller;"><div><ins style="color: red; font-weight: bold; text-decoration: none;">The contents of a DBX file is dependent on the content CLSID.</ins></div></td></tr> <tr><td colspan="2">&#160;</td><td class='diff-marker'>+</td><td style="background: #cfc; color:black; font-size: smaller;"><div><ins style="color: red; font-weight: bold; text-decoration: none;">* Message Database (CLSID: 6F74FDC5-E366-11d1-9A4E-00C04FA309D4)</ins></div></td></tr> <tr><td colspan="2">&#160;</td><td class='diff-marker'>+</td><td style="background: #cfc; color:black; font-size: smaller;"><div><ins style="color: red; font-weight: bold; text-decoration: none;">* Folder Database (CLSID: 6F74FDC6-E366-11d1-9A4E-00C04FA309D4)</ins></div></td></tr> <tr><td class='diff-marker'>&#160;</td><td style="background: #eee; color:black; font-size: smaller;"></td><td class='diff-marker'>&#160;</td><td style="background: #eee; color:black; font-size: smaller;"></td></tr> <tr><td class='diff-marker'>&#160;</td><td style="background: #eee; color:black; font-size: smaller;"><div>== Encryption ==</div></td><td class='diff-marker'>&#160;</td><td style="background: #eee; color:black; font-size: smaller;"><div>== Encryption ==</div></td></tr> <tr><td colspan="2" class="diff-lineno">Line 16:</td> <td colspan="2" class="diff-lineno">Line 20:</td></tr> <tr><td class='diff-marker'>&#160;</td><td style="background: #eee; color:black; font-size: smaller;"><div>== See also==</div></td><td class='diff-marker'>&#160;</td><td style="background: #eee; color:black; font-size: smaller;"><div>== See also==</div></td></tr> <tr><td class='diff-marker'>&#160;</td><td style="background: #eee; color:black; font-size: smaller;"></td><td class='diff-marker'>&#160;</td><td style="background: #eee; color:black; font-size: smaller;"></td></tr> <tr><td colspan="2">&#160;</td><td class='diff-marker'>+</td><td style="background: #cfc; color:black; font-size: smaller;"><div><ins style="color: red; font-weight: bold; text-decoration: none;">* [http://en.wikipedia.org/wiki/Outlook_Express Outlook Express Wikipedia]</ins></div></td></tr> <tr><td class='diff-marker'>&#160;</td><td style="background: #eee; color:black; font-size: smaller;"><div>* [http://oedbx.aroh.de/ Outlook Express dbx file format by Arne Schloh]</div></td><td class='diff-marker'>&#160;</td><td style="background: #eee; color:black; font-size: smaller;"><div>* [http://oedbx.aroh.de/ Outlook Express dbx file format by Arne Schloh]</div></td></tr> <tr><td class='diff-marker'>&#160;</td><td style="background: #eee; color:black; font-size: smaller;"><div>* [http://www.fpns.net/willy/DBX-FMT.HTM Outlook Express Version 5.0 file format]</div></td><td class='diff-marker'>&#160;</td><td style="background: #eee; color:black; font-size: smaller;"><div>* [http://www.fpns.net/willy/DBX-FMT.HTM Outlook Express Version 5.0 file format]</div></td></tr> </table>

Joachim Metz http://www.forensicswiki.org/w/index.php?title=Outlook_Express_Database_(DBX)&diff=10548&oldid=prev 2010-10-13T07:52:15Z

<p>‎<span dir="auto"><span class="autocomment">File signature</span></span></p> <table class='diff diff-contentalign-left'> <col class='diff-marker' /> <col class='diff-content' /> <col class='diff-marker' /> <col class='diff-content' /> <tr style='vertical-align: top;'> <td colspan='2' style="background-color: white; color:black;">← Older revision</td> <td colspan='2' style="background-color: white; color:black;">Revision as of 07:52, 13 October 2010</td> </tr><tr><td colspan="2" class="diff-lineno">Line 6:</td> <td colspan="2" class="diff-lineno">Line 6:</td></tr> <tr><td class='diff-marker'>&#160;</td><td style="background: #eee; color:black; font-size: smaller;"><div>DBX files of Outlook Express 5.0 (OE5) and later start with hexadecimal: 0xcf 0xad 0x12 0xfe.</div></td><td class='diff-marker'>&#160;</td><td style="background: #eee; color:black; font-size: smaller;"><div>DBX files of Outlook Express 5.0 (OE5) and later start with hexadecimal: 0xcf 0xad 0x12 0xfe.</div></td></tr> <tr><td class='diff-marker'>&#160;</td><td style="background: #eee; color:black; font-size: smaller;"><div>For now it is assumed that this is the file signature.</div></td><td class='diff-marker'>&#160;</td><td style="background: #eee; color:black; font-size: smaller;"><div>For now it is assumed that this is the file signature.</div></td></tr> <tr><td class='diff-marker'>−</td><td style="background: #ffa; color:black; font-size: smaller;"><div><del style="color: red; font-weight: bold; text-decoration: none;"></del></div></td><td colspan="2">&#160;</td></tr> <tr><td class='diff-marker'>−</td><td style="background: #ffa; color:black; font-size: smaller;"><div><del style="color: red; font-weight: bold; text-decoration: none;">According to libdbx OE4 uses a different signature: 4A4D4636 03001000. For now this is unconfirmed.</del></div></td><td colspan="2">&#160;</td></tr> <tr><td class='diff-marker'>&#160;</td><td style="background: #eee; color:black; font-size: smaller;"></td><td class='diff-marker'>&#160;</td><td style="background: #eee; color:black; font-size: smaller;"></td></tr> <tr><td class='diff-marker'>&#160;</td><td style="background: #eee; color:black; font-size: smaller;"><div>== File types ==</div></td><td class='diff-marker'>&#160;</td><td style="background: #eee; color:black; font-size: smaller;"><div>== File types ==</div></td></tr> </table>

Joachim Metz http://www.forensicswiki.org/w/index.php?title=Outlook_Express_Database_(DBX)&diff=10547&oldid=prev 2010-10-13T07:48:12Z

<p>Created page with &quot;<a href="/w/index.php?title=Outlook_Express&amp;action=edit&amp;redlink=1" class="new" title="Outlook Express (page does not exist)">Outlook Express</a> uses the &#039;&#039;&#039;Outlook Express Database (DBX)&#039;&#039;&#039; database to store emails, folders, etc. == MIME types == == File signature == DBX files of Outlook Express 5.0...&quot;</p> <p><b>New page</b></p><div>[[Outlook Express]] uses the '''Outlook Express Database (DBX)''' database to store emails, folders, etc.<br /> <br /> == MIME types ==<br /> <br /> == File signature ==<br /> DBX files of Outlook Express 5.0 (OE5) and later start with hexadecimal: 0xcf 0xad 0x12 0xfe.<br /> For now it is assumed that this is the file signature.<br /> <br /> According to libdbx OE4 uses a different signature: 4A4D4636 03001000. For now this is unconfirmed.<br /> <br /> == File types ==<br /> In OE the DBX files are used to store email per top folder (e.g. Inbox, Outbox) and the folder-hierarchy.<br /> <br /> == Contents ==<br /> <br /> == Encryption ==<br /> <br /> == See also==<br /> <br /> * [http://oedbx.aroh.de/ Outlook Express dbx file format by Arne Schloh]<br /> * [http://www.fpns.net/willy/DBX-FMT.HTM Outlook Express Version 5.0 file format]<br /> * [http://sourceforge.net/projects/ol2mbox/ libdbx], see FILE-FORMAT in the package.<br /> <br /> [[Category:File Formats]]</div>

Joachim Metz