Opening an E01 File

The E01 file type is primarily associated with EnCase Forensic.

E01	File extension: E01
	File type:	forensic image

What is an E01 file?

E01 files mostly belong to EnCase Forensic by Open Text. An E01 file is a disk image containing compressed forensic data recovered from a digital device and saved in Expert Witness Format. An E01 image saved in this format also contains the hash values of the acquired data and checksums for blocks of data. Forensic experts can access arbitrary offsets in an E01 file without having to decompress the entire file. Such E01 images can be mounted using Encase Forensic or OSForensics. Another type of E01 file is a self-extracting archive created by ARJ archiver.

How to open an E01 file

You need a suitable software like EnCase Forensic from Open Text to open an E01 file. Without proper software you will receive a Windows message "How do you want to open this file?" or "Windows cannot open this file" or a similar Mac/iPhone/Android alert. If you cannot open your E01 file correctly, try to right-click or long-press the file. Then click "Open with" and choose an application. You can also display a E01 file directly in the browser:. Just drag the file onto this browser window and drop it.

Online E01 Text Viewer

Choose your .e01 file to analyze

or drag and drop it here

Online File Viewer

✈

Read our privacy guarantee in Filext’s terms and privacy policy

Please allow ads on our site

This helps us keep our servers running. Then re-upload your file to view it.

Click here to see how to disable the ad blocker for filext.com

E01 file format:

A file format defines how the data in the file is structured. A file format is determined by the file extension and signature, so JPEG images have the extension .jpg and the first bytes in the file are ÿØÿ. Nonetheless, different programs can utilize the same file extension to represent distinct file formats. Double-clicking on the file often results in an error when opening. So you need a detailed analysis of a file to find out the format and the associated program. Our analysis of the E01 files produces the following result:

E01 is a very commonly used file extension and is mainly used by one program with a specific format. However, the following two file formats are common:

• 80% of all E01 files are Expert Witness compression Format disk image files. These are binary files, so they do not contain words or text. The files are often between 240 KB and 640 MB in size. It is a modern file type. The following keywords are characteristic: header. A common filename is image_forensic.e01 or Image.E01. Such E01 files store data about forensic, disk, evidence, drive, data, work, carimage and laptop.
• 1% of all E01 files start with the magic bytes 5C 00 41 45 01 01, which are always the first bytes of this file format. They consist of unreadable binary data. E01 files can be up to 24 KB in size, but are often around 3 KB - 24 KB.

All other E01 files (19%) have different formats, often, for example, AccessData Encrypted disk image. Sometimes used for deleted, cfreds, leakage, challenge, flash or hacked. If you want to find out what your E01 file contains, drag and drop it onto this page.