BlackBerry appends the file extension .REM to files that it encrypts. When MPE+ extracts these files, even though the files have been decrypted, they will retain this .REM extension. This can cause them to render incorrectly in the Natural Preview pane. To get around this, you can either use file carving in MPE+ to carve out those files and assign them correct file extensions, or process the image with FTK which will identify the files by header rather than file extension.
MPE+ does not properly display the natural previews of files from an encrypted BlackBerry? Print
Modified on: Sun, Sep 26, 2021 at 10:16 AM
Did you find it helpful? Yes NoSend feedback
Sorry we couldn't be helpful. Help us improve this article with your feedback.