Source: /data/temp/gb1/img/3.A_reserved_on_user.img
Copied image: /data/temp/gb1/img/A_RESERVED_ON_USER/3.A_reserved_on_user.img
Source apparent size: 33161216 bytes
Source SHA-256: ea79047d9f963bc585d4dcda5eb103827bf4a17db494e278d9c182bf07817e97
Initial file type: data
Wrote signature scan with 94 hit(s) to recovery/signature_hits.txt.
Captured first 5000 strings to recovery/strings.first5000.txt.
No mountable/known container was recovered with available local tools; kept signature and strings reports.

Second-pass findings:
The non-zero content is one contiguous span from offset 0 through 9,182,325.
That span was carved to recovery/carved/nonzero_payload.bin.
SHA-256 of nonzero_payload.bin: 8aeb99c7037dca481f108605a9eb4f283e46cb3136bf71e0796250ab75fcf0a1
Entropy of the non-zero span is 7.973384 bits/byte.
Validated carving found no internally consistent PE, ELF, DTB, Android boot, gzip, or ext filesystem payloads.
The remaining bytes after offset 9,182,325 are zero-filled. The recovered nonzero payload appears opaque, likely encrypted or compressed data without an available container header/key.