New
#11
You could use nir sofers shadowcopyview. ShadowCopyView - Shadow copy viewer for Windows 10/8/7/Vista
If you want to do it from winpe, you can borrow this which includes shadowcopyview and other stuff
1904fixed.iso