I'm working a fraud case and I'm hoping that someone can give me some quick insight as to the type of artifacts I may find regarding the Versacheck program by MIPS or a program called CheckDesigner.
Is there a location where information is stored regarding checks that have been made and hopefully what was typed on them.
Any help would be appreciated.
Thanks !
One of the most important things to look for is the MICR print cartridges.
You will also want to look for a printer that is setup to use that special ink and in particular that font (also called MICR E13 B Match™ fonts).
I have some other notes I can post when I get back to the office.
Unfortunately this was the result of a car stop and a laptop was recovered so we dont have any print cartridges.
I will have to look back on a previous case, but search for *.VDF files. There is also a BACKUP file (I believe) *.VDB.
I was unable to view any of the data in FTK or HEX, but if you can get a copy of the VersaCheck program you can install it and point it to the VDF you recovered. You will get all the payee, payor information along with the records of written checks - from what I can recall. If you are LE, Versacheck will give you a temporary install code for your investigation.
Last resort - clone the drive - insert it into the laptop and boot and see if you run the software from there and take screenshots of the windows.
Good luck!
-=ART=-
Well, I'll take the risk of posting at an older thread. I'm chasing a now uninstalled version of Versacheck Presto…does anyone have file signature information about the .vdf file? I have a call into the company but no response as of yet.
Thanks,
Paul