1644 AccessData Custom Content Image (Encrypted) Aggregate The AccessData Custom Content Image (AD1) file format is a file-level disk image format created by AccessData's proprietary forensic software, such as FTK Imager. AD1 images may be encrypted or unencrypted. Encrypted images have only a small unencrypted chunk at the beginning of the file, beginning with the magic bytes "ADCRYPT" at byte 0. 195 Artefactual Systems Inc / Artefactual Systems Inc 23 Dec 2015 23 Dec 2015 fmt/843 PUID ad1 File extension ad2 File extension ad3 File extension ad4 File extension ad5 File extension 1202 AD1 (encrypted) BOF: ADCRYPT 1 Absolute from BOF 0 0 41444352595054