MSN contact identif...
 
Notifications
Clear all

MSN contact identification

6 Posts
4 Users
0 Reactions
807 Views
(@nommack)
New Member
Joined: 13 years ago
Posts: 1
Topic starter  

Hello, everybody.
Please I need some advice.
I need to identificate the contacts' emails from the Mesenger's History folder.
For example
test1234567890.xml –> test@example.com

Is there any tool to make it?

Thank you very much.
Regards


   
Quote
 tg92
(@tg92)
Active Member
Joined: 15 years ago
Posts: 13
 

Hi,

http//www.mikesforensictools.co.uk/MFTMSN.html

Good luck )

Thierry


   
ReplyQuote
harryparsonage
(@harryparsonage)
Estimable Member
Joined: 20 years ago
Posts: 184
 

Just to follow up on the reply, that tool and no tool can give you the email address from the number as the algorithm for creating the number is one-way. What that tool does is take a list of well known email providers and appends those to the bit before the @ and checks to see if the number corresponds to what you have. If the email provider is not in the list then you will not get the email address.

H


   
ReplyQuote
Chris_Ed
(@chris_ed)
Reputable Member
Joined: 16 years ago
Posts: 314
 

Harry,

Do you happen to have a copy of that list? Or the algorithm? I've read your (excellent) paper on the subject of MSN, but can't find a link to it in the references.

Thanks,

Chris

Edit; the reason I ask is because I thought I would write an EnScript to do this sort of operation. )


   
ReplyQuote
harryparsonage
(@harryparsonage)
Estimable Member
Joined: 20 years ago
Posts: 184
 

Chris

Yes I imagine you could do that with an Enscript, I couldn't 😉

You could have my code for a VB program that I wrote to check the numbers but I can't find the code. The note I have is as follows -

The folder numbers are called PassportID numbers and are calculated by multiplying each decimal ASCII character value of the complete email address with 101. The address is always converted to complete lowercase first. The result of the calculation is always an unsigned long integer value ranging from 0 to 4294967295 (2^32).

Example

Email address a@a.com

Decimal ASCII values 97(a) ,64(@) ,97(a) ,46(.) ,99© ,111(o) ,109(m)

Calculation

a(0 * 101) + 97 = 97
@(97 * 101) + 64 = 9861
a(9861 * 101) + 97 = 996058
.(996058 * 101) + 46 = 100601904
c(100601904* 101) + 99 = 10160792403

(unsigned long overflow here - subtract x times 4294967296 from the result until we have an unsigned long value)

subtract 2 times 2^32 = 1570857811

o(1570857811 * 101) + 111 = 158656639022

(unsigned long overflow here - subtract x times 4294967296 from the result until we have an unsigned long value)

subtract 32 times 2^32 = 4037816366

m(4037816366 * 101) + 109 = 407819453075

(unsigned long overflow here - subtract x times 4294967296 from the result until we have an unsigned long value)

subtract 94 times 2^32 = 4092527251 and this is our magical PassportID.

The list of email addresses is in Mike's program in Settings, it is simply a list of well used free email addresses these could obviously be expanded further. His list -

@hotmail.co.uk
@hotmail.com

- - - Snip - - - -

@fastmail.com
@fastmail.co.uk
@madasafish.com
@ymail.com
@rocketmail.com


   
ReplyQuote
Chris_Ed
(@chris_ed)
Reputable Member
Joined: 16 years ago
Posts: 314
 

Fantastic! Thanks for the reply.

Once it's done I'll post it up here for future reference.


   
ReplyQuote
Share: