MSN Messenger Conta...
 
Notifications
Clear all

MSN Messenger Contact Identification

5 Posts
5 Users
0 Reactions
681 Views
(@mrich)
Active Member
Joined: 20 years ago
Posts: 6
Topic starter  

Hello,

I have several xml files here
C\Documents and Settings\<windows login>\My Documents\My Received
Files\<IM handle>\History

I can view the files using IE. Now I have to identify the chat
contact…

For example if the suspect chats with RoyBlack@…
There is a chat log file name like RoyBlack6293124252423.xml
Inside the file you would get such content

Date Time From To Message
1.1.2005 010104 Suspect1 SecretName "Hello guy"
1.1.2005 010154 SecretName Suspect1 "How are you"

If RoyBlack@hotmail uses a nickname like "SecretName" I am not able
to see his passport id. But I am sure ms messenger must be able to
assign RoyBlack6293124252423.xml to his passport id.
So I have to know the way MSN M converting @hotmail.com to a number
like 6293124252423. Perhaps the number 6293124252423 is a
timestamp?!

The Nick and File names are created by my own fantasy…

Who can help me?


   
Quote
(@pfenwick)
Active Member
Joined: 20 years ago
Posts: 13
 

To view the xml files there should be a .xsl file a style sheet make sure this is in the same location as your .xml files they should be then viewable by IE.


   
ReplyQuote
(@belkasoft)
Estimable Member
Joined: 17 years ago
Posts: 169
 

Hello,

I have several xml files here
C\Documents and Settings\&lt;windows login&gt;\My Documents\My Received
Files\&lt;IM handle&gt;\History

Who can help me?

Belkasoft has a tool for that.


   
ReplyQuote
(@r3verse)
Active Member
Joined: 18 years ago
Posts: 7
 

The passportID number is simply a "not unique" calculation based on the email address. Sort of hash with the email address as input. But the resulting number isn't very unique. That is why it is not possible to brute force reverse it. You will get multiple results on the same number. For details on the calculation see this thread

MSN Passport ID

Best approach is to extract the contacts.edb contact lists with a tool like woanware's esedbviewer and compare the calculated contacts passportID number with the passportID number that is found in the chat history folder.


   
ReplyQuote
(@dan0841)
Trusted Member
Joined: 17 years ago
Posts: 91
 

This is an excellent tool for batch converting XML chat log names to the e-mail address of the contact. It will dump the list to a CSV file and works for a large number of e-mail domains. I have only had a few chat logs which don't reveal an e-mail address. These are usually from personal domains. E.g dan@danspersonaldomain.com

http//www.mikesforensictools.co.uk/MFTMSN.html

edit and it's free!!


   
ReplyQuote
Share: