Download Virtual Forensic Computing (VFC) 15 day evaluation version:

Current Version: 1.2.3

Download VFC Dongle Driver here

VFC 1.2.3 Changelog

In addition to the 1.2.2.9 changelog below verison 1.2.3 fixes the VMware Player version 2.0.x detection issue.

VFC 1.2.2.9 Changelog

New in 1.2.2.9

Displays Dongle ID on Main Screen and in About... box
Identifies which VM product version is being used and includes this information in Log file and generated vmx
Additional subject system information recovered and logged during initial analysis (Computername / Workgroup / Domain)
Added ToolTip display to Main Screen options (toggle control by user)
Added checks to ensure at least one logical drive is available for temporary mount purposes
Drive geometry calculations modified to cater for changes in physical disk handling for VMware Worksation 6.0.1 and Player 2.0.1 and newer
Better support for dd and partition only images
Improved multi-boot support
Improved notification of impending service & support expiry
Better tools support (time sync issues) for VMware Worksation 6.0.1 and Player 2.0.1 and newer
Attempts to identify and log source of physical vs mounted disk and device number Improved snapshot creation and handling
More accurate detection of last system use
Included detection of specific Vista version (Basic / Premium / Business / Ultimate)
Added disk partition table to log

Download VMware's free Player utility:

Download VMware's free Disk Mount utility:

Download Mount Image Pro (MIP) 30 day evaluation version:

Current Version: 2.6.0.4569

Purchase MIP and/or VFC