https://www.lifars.com/knowledge-center/amcache-shimcache-forensics/