VMware Workstation
Named by 2 kept items in this workspace.
1 items name it under affected products and 1 under tools.
Search every workspace for VMware Workstation. It matches the name as written, so it can find other things that share it.
The items that name it 2
Installed by the threat actor on the compromised endpoint; purpose within the attack chain not fully clear ('for other purposes')
All technologies in this workspace.