CommandLine:copy\ * CommandLine:\\\\?\\GLOBALROOT\\Device\\HarddiskVolumeShadowCopy*