The version floating around doesn't show characterisitcs of having modification. This is not much of an issue, COFEE is basically a collection of sysinternals tools and OS utilities.  Full analysis:

http://praetorianprefect.com/archives/2009/11/more-cofee-please-on-second-thought/

If it essentially is a collection of digital forensic tools already commonly used around the world. Then why would it be illegal to study this set? And why is it only available for law enforcement? Why not provide security professionals with this tool as well?