VMDK Forensic Artifact Extractor (VFAE) Icon

VMDK Forensic Artifact Extractor (VFAE)


C++ application that triages, searches, and extracts files from VMDKs.

Add a Review
3 Downloads (This Week)
Last Update:
Download vfae1.2.rar
Browse All Files


VFAE is windows based tool written in C++ that extracts files from VMDK images running the Windows operating system. The tool utilizes the VDDK (Virtual Disk Development Kit) API for the heavy lifting such as mounting, opening, and reading the VMDK selected. When vfae.exe is executed, it copies out files from the off-line VMDK file. The application allows the user to conduct a quick triage of the Windows
directory structure by outputting the results to a specific output file. Additionally, it conducts a pre and post MD5 hash value of the VMDK itself if needed. For specific file searching purposes, it searches for any file type within the off-line VMDK based on a passed in argument via the command-line. Furthermore, you can extract those files that were found in a hard-coded "Extracted Files" directory as well as
provide the MD5 hash of each file that was extracted.

VMDK Forensic Artifact Extractor (VFAE) Web Site


  • Can perform pre and post MD5 hashing for your VMDK's.
  • Triage directory structure of windows based operating systems (virtual).
  • Search for specific file types after triage has taken place.
  • Extract files from off-line VMDK files to local disk with MD5 hash values of each file.


Other Useful Business Software

Searching for Affordable Business Phone Service? Icon

If you're on the hunt for business phone service that is reliable and budget-friendly, Voice over Internet Protocol (VoIP) is your answer.

Searching for Affordable Business Phone Service? Icon
Today's small-to-medium-sized (SMB) businesses and large enterprises are saving on their monthly communications costs by making one simple decision: to switch to a VoIP service solution from their old, outdated Plain Old Telephone Service (POTS). By choosing a new VoIP service, these companies enjoy the flexibility, reliability, call features, and audio quality that only a VoIP service can provide. Plus, they cut their phone bill by up to 70%!
Write a Review

User Reviews

Be the first to post a review of VMDK Forensic Artifact Extractor (VFAE)!

Additional Project Details

Intended Audience

Advanced End Users

User Interface


Programming Language




Thanks for helping keep SourceForge clean.

Screenshot instructions:
Red Hat Linux   Ubuntu

Click URL instructions:
Right-click on ad, choose "Copy Link", then paste here →
(This may not be possible with some types of ads)

More information about our ad policies

Briefly describe the problem (required):

Upload screenshot of ad (required):
Select a file, or drag & drop file here.

Please provide the ad click URL, if possible:

Get latest updates about Open Source Projects, Conferences and News.

Sign up for the SourceForge newsletter:

JavaScript is required for this form.

No, thanks