reagentc
Named by 2 kept items in this workspace.
Search every workspace for reagentc. It matches the name as written, so it can find other things that share it.
The items that name it 2
Run with /disable flag to disable Windows Recovery Environment boot image, in both incidents
Windows Recovery Environment utility referenced in ransomware's recovery-destruction commands
All technologies in this workspace.