Encase Image File/Expert Witness Compression File

Unknown

other

Expert Witness was the original name for EnCase, as such this format can be referred to as either Expert Witness Compression Format or Encase Image File Format. The format is used to store media images for forensic purposes. They are a type of disk image containing the contents and structure of an entire data storage device, disk volume or even a computer's physical memory. This format creates segments which have different file extensions, the first will have the extension '.e01'. this increases first numerically upto '.e99' the next extension will be '.eaa' increasing to an estimated limit of '.zzz'.

Identify it

Extensions.e01
MIME typesapplication/encase
Signatures
455646090d0aff00 at byte 0 (EO1)
PRONOMfmt/803

Not sure your file is this? Identify it from its first bytes, in your browser.

Open it

No software is recorded for this format.

Convert it

No conversion recorded. One of the tools above may export it; search for a chain.

Sources

From PRONOM. Updated 2023-05-09.

Improve this record JSON