https://www.lifars.com/knowledge-center/windows-shellbags-forensics-investigative-value-of-windows-shellbags/