All about E02 Files

The E02 file type is primarily associated with EnCase.

E02	File extension: E02
	File type:	Forensic Disk Image

What is an E02 file?

E02 files mostly belong to EnCase. An .E02 file is a segmented forensic disk image created by EnCase, a software suite by OpenText used in digital forensics. These files store data acquired from various storage devices, preserving the original structure and content for investigation. Each .E02 file represents a portion or segment of a larger image, often used when dealing with large data sets. The segmentation allows for easier management and processing of extensive forensic data. The .E02 format ensures data integrity and authenticity, crucial for legal proceedings and investigations. It's a proprietary format specifically designed for forensic analysis, containing metadata and other information relevant to the investigation.

How to open an E02 file

You need a suitable software like EnCase to open an E02 file. You need a suitable software like EnCase to open an E02 file. Without proper software you will receive a Windows message "How do you want to open this file?" or "Windows cannot open this file" or a similar Mac/iPhone/Android alert. If you cannot open your E02 file correctly, try to right-click or long-press the file. Then click "Open with" and choose an application. You can also display a E02 file directly in the browser:. Just drag the file onto this browser window and drop it.

Online E02 Text Viewer

Choose your .e02 file to analyze

or drag and drop it here

Online File Viewer

✈

Read our privacy guarantee in Filext’s terms and privacy policy

Please allow ads on our site

This helps us keep our servers running. Then re-upload your file to view it.

Click here to see how to disable the ad blocker for filext.com

Unable to Open a .E02 File? Quick Solutions:

Because .E02 files can come from different programs, they aren't universally openable.

Identify the Source: These files typically come from digital forensics investigators or IT security workflows, strongly suggesting a split EnCase Forensic Disk Image.
Check the Header: Open the file in a hex viewer to inspect the first few bytes.
- "EVF" indicates an EnCase Virtual Format image.
- Binary data without a clear text header often means it's a continuation of a split archive (following an .E01 file).
Use the Original Software: The original program is usually required; try OpenText EnCase, AccessData FTK, or Autopsy, but ask the sender if uncertain.
Use this Webpage: Drag and drop the file into our viewer to detect the format, extract readable metadata, and preview it when possible.

Technical Data for E02 File Extension

File classification:

Disk Image

Related files:

e01, evf, e, hash, i01, jpg

The following listing is compiled from the database produced by the 'Associate This!' program, selected data from the main FILExt database and file extension information submitted by users.

ProgramID: EMBIRD.File.e02
EXEFile: %ProgramFiles%\EMBIRD32\EMBIRD.EXE

an e02 Forensic Disk Image is a special file format and should only be edited and saved with the appropriate software.

How to solve problems with E02 files

Associate the E02 file extension with the correct application.
Update your software that should actually open forensic disk images. Because only the current version supports the latest E02 file format. Search, therefore, e.g. on the manufacturer website after an available EnCase update.
To make sure that your E02 file is not corrupted or virus-infected, get the file again and scan it with Google's virustotal.com.
Click here to open your .E02 file online - secure, fast, and no downloads needed.