Outlook Express Database
From Just Solve the File Format Problem
(Difference between revisions)
m |
m |
||
| Line 8: | Line 8: | ||
== File identification == | == File identification == | ||
| − | Files begin with hex bytes | + | Files begin with hex bytes {{magic|CF AD 12 FE}}. |
| − | This is followed by a class ID (CLSID) depending on whether the file contains messages or folders: | + | This is followed by a class ID ([[CLSID]]) depending on whether the file contains messages or folders: |
* Message Database: 6F74FDC5-E366-11d1-9A4E-00C04FA309D4 | * Message Database: 6F74FDC5-E366-11d1-9A4E-00C04FA309D4 | ||
Revision as of 15:49, 2 October 2017
An Outlook Express Database (DBX) is used by Microsoft Outlook Express (distinct from Outlook) to store e-mail messages and folders.
File identification
Files begin with hex bytes CF AD 12 FE.
This is followed by a class ID (CLSID) depending on whether the file contains messages or folders:
- Message Database: 6F74FDC5-E366-11d1-9A4E-00C04FA309D4
- Folder Database: 6F74FDC6-E366-11d1-9A4E-00C04FA309D4
Links
- Forensic Wiki page
- Downloadable file format info
- Outlook to Unix mail converter (supports DBX among other Microsoft mail-related formats)
- DBX to PST converter
