Software by Forensic Metadata Analysis