Base64 Decoder is a Free and Portable Tool created by Tim Rohlfs. It can be used to decode attachments found in email files. For example, I used it as a Windows Live Mail Attachment Extractor to decode Windows Live Mail.eml email files, and save or extract those Base 64 encoded email attachments to another location. Apr 26, 2017 Base64 encoding is used in quite a few places and there are many online web sites that let you encode or decode Base64. I am not very comfortable using such sites for security and privacy reasons so I went looking for alternative solutions. Whether you're using Linux, Windows or macOS you can use built-in tools to both encode or decode Base64 data.
I can think of two options:
• some manual file editing:
open both, the 'partial' and 'emlxpart' files with a text editor - the 'partial' file contains the message text without the attachment, the 'emlxpart' contains one attachment only. You could copy the complete contents of the emlxpart into the partial file (it probably should be towards the end after some lines like
--Boundary (IDtg0wOjYDNtyV9SW9EZ+ozA)
Content-Transfer-Encoding: base64
Content-Type: application/zip;
x-mac-type=5A495020;
name=1995.zip;
x-mac-creator=0
X-Apple-Content-Length: 133488
Content-Disposition: inline;
filename=1995.zip
(make sure to keep a blank line between the last of those lines and the beginning of what you copy) Now you also will have to adjust the number at the very beginning of the emlxpart file (first line) - add the number of characters you just copied to the number which was there before and then save the file as something like 12345.emlx
(I haven't actually tried this but it should work;-)
• Try to create mbox files from your emlx(partial/part) files using emlx to mbox converter. You should then be able to import tose mbox files using Mail's 'Import' feature (this will import all message as unread and lose all flags and things you might have set but should be much easier)
Andreas
This EnScript is designed to convert Microsoft Outlook *.olk14MsgSource and *.olk15MsgSource message-files to *.EML files that can be opened in a suitable application.
Mozilla Thunderbird works well for this purpose, as does the Apple Mail application. Microsoft Outlook can also be used, but it may not format every message properly.
The script will process all or selected message-files in a single blue-checked folder in the current view. Note that the folder should be blue-checked in the right-hand table pane, *not* the folder pane, which could inadvertently blue-check one or more sub-folders.
Each converted file will be written with a *.EML extension appended to its file-name. The structure of the folder(s) containing converted Outlook messages will be preserved. Folders that don't contain converted Outlook messages won't be created.
In addition to writing each converted message to a separate file, the script will write each message to a single MBOX file in a logical evidence file, which can be brought back into EnCase, processed and the resultant e-mail data examined, searched and bookmarked in the usual way.
The bookmark-folder name specified by the examiner will also be used for the name of the logical evidence file and the name of output sub-folder created by the script. It cannot therefore contain characters such as '<>:'/|?*', which aren't permissible Windows file/folder-name characters.
Note that each message in the MBOX file will start with a line having the following format -
From - <date>
The date is taken from when the script was executed. The examiner should be aware of this because the Transport Message Headers field will include it.
The mail data contained within converted Outlook message files will also be bookmarked.
Note that the script will not process deleted Outlook message files.
It's also important to note that the message-content will only be available if the entire message has been downloaded.