Forensic tool for examining Thumbs.db files