1. An electronic device configured to perform forensic analysis on a target device, the electronic device comprising a non-transitory computer readable storage medium that stores program instructions which, when executed by a processor, function as: a data extractor configured to obtain, from the target device, a source file of at least one of applications that are installed on the target device, and obtain, from the target device, user data that is generated according to the least one of the applications being executed on the target device; an emulator configured to emulate an execution of a target application that is installed based on the obtained source file; and a user data converter configured to convert the obtained user data into converted user data, the obtained user data having a data structure according to a database scheme of the target device, the converted user data having a data structure according to a database scheme of the emulator, obtain a list of first fields constituting a database scheme of the target device and a list of second fields constituting the database scheme of the emulator, and generate the converted user data such that the converted user data includes an item corresponding to a field, among the list of first fields of the database scheme of the target device, that is identical to one of the list of second fields of the database scheme of the emulator, wherein the emulator is configured to emulate the execution of the target application such that the target application operates using the converted user data.