Skip to main content
Service phase: Beta

This service is still in development. Give us your feedback or view this page on the current PRONOM service.

Format

AccessData Custom Content Image (Encrypted)

Download XML

Summary

Name
AccessData Custom Content Image (Encrypted)
Identifiers
PUID: fmt/843
Format type
Aggregate
Description
The AccessData Custom Content Image (AD1) file format is a file-level disk image format created by AccessData's proprietary forensic software, such as FTK Imager. AD1 images may be encrypted or unencrypted. Encrypted images have only a small unencrypted chunk at the beginning of the file, beginning with the magic bytes "ADCRYPT" at byte 0.
File extensions
ad1, ad2, ad3, ad4, ad5
Source
Artefactual Systems Inc / Artefactual Systems Inc

Internal signatures

AD1 (encrypted)

Note
BOF: ADCRYPT

Byte sequences

Min Frag Length
Absolute from BOF
Offset
0
Max offset
0
Byte Sequence
41444352595054
Endianness
None

Changelog

  • Added in V84

    Release date
    21 January 2016

    AccessData Custom Content Image (Encrypted): Signature submitted by Artefactual Systems Inc.

    AccessData Custom Content Image (Encrypted): Full entry added. Submitted by Artefactual Systems Inc.