https://mamchenkov.net/wordpress/2019/07/16/interpretation-of-ntfs-timestamps/