https://blog.it-kb.ru/2016/09/01/windows-vss-volume-shadow-copy-service-and-vshadow-cli-tool-from-adk-as-protection-from-crypto-ransomware/