https://forensicitguy.github.io/timelining-malware-vhd-intelligence/