Skip to main content
Service phase: Beta

This service is still in development. Give us your feedback.

Format

AccessData Custom Content Image (Encrypted)

Download XML Download JSON

Summary

Name
AccessData Custom Content Image (Encrypted)
Identifiers
PUID: fmt/843
Format type
Aggregate
Description
The AccessData Custom Content Image (AD1) file format is a file-level disk image format created by AccessData's proprietary forensic software, such as FTK Imager. AD1 images may be encrypted or unencrypted. Encrypted images have only a small unencrypted chunk at the beginning of the file, beginning with the magic bytes "ADCRYPT" at byte 0.
File extensions
ad1, ad2, ad3, ad4, ad5
Submitted by
Artefactual Systems Inc / Artefactual Systems Inc

Internal signatures

AD1 (encrypted)

Description
BOF: ADCRYPT

Byte sequences

Min Frag Length
Absolute from BOF
Offset
0
Max offset
0
Byte Sequence
41444352595054
Endianness
None

Changelog

  • V84

    Release date
    21 January 2016

    • Added format

      AccessData Custom Content Image (Encrypted): Full entry added. Submitted by Artefactual Systems Inc.

    • Added signature

      AccessData Custom Content Image (Encrypted): Signature submitted by Artefactual Systems Inc.