ReAgentc.exe

File Path: C:\Windows\system32\ReAgentc.exe
Description: Microsoft Windows Recovery Agent

Hashes

Type	Hash
MD5	`07EA23DB96222D373E81CD2E4EFDE528`
SHA1	`D4F578498FAC519D4070883EC512BF450328097C`
SHA256	`F0EA6BAAF9DB83115D4CE8A4F9D3BBC8A1BC495D60C2A98D9846A963864E1261`
SHA384	`47A49ACBE5FD99325AB436F5FCBEA4D027A5FB7B732BD5353EB125D3010E37DBE3564048BDB85E209569932FF997BC9D`
SHA512	`780659BB28C00300F1C40EDA7278B17E4A1FFB887CAB4E523A5A70E46F99D62EED55383A50CB8E9C0B00E65DB7F7104E45A0C1C8DD6D1C729C1BA6C4B9564BC7`
SSDEEP	`384:m61HSFYeyi8UsOks9TG2FTcxTNpXHOI/qw5HCRxCx+BFFvvPsosWt67KFFT+HCHP:mMOYJ5rO95KN7697FvvPL67GFmCQ1Q`

Runtime Data

Usage (stdout):

Configures the Windows Recovery Environment (Windows RE) and system reset.

REAGENTC.EXE <command> <arguments>

The following commands can be specified:

  /info             - Displays Windows RE and system reset configuration
                      information.
  /setreimage       - Sets the location of the custom Windows RE image.
  /enable           - Enables Windows RE.
  /disable          - Disables Windows RE.
  /boottore         - Configures the system to start Windows RE next time the
                      system starts up.
  /setbootshelllink - Adds an entry to the Reset and Restore page in the boot
                      menu.

For more information about these commands and their arguments, type
REAGENTC.EXE <command> /?.

  Examples:
    REAGENTC.EXE /setreimage /?
    REAGENTC.EXE /disable /?

Usage (stderr):

Configures the Windows Recovery Environment (Windows RE) and system reset.

REAGENTC.EXE <command> <arguments>

The following commands can be specified:

  /info             - Displays Windows RE and system reset configuration
                      information.
  /setreimage       - Sets the location of the custom Windows RE image.
  /enable           - Enables Windows RE.
  /disable          - Disables Windows RE.
  /boottore         - Configures the system to start Windows RE next time the
                      system starts up.
  /setbootshelllink - Adds an entry to the Reset and Restore page in the boot
                      menu.

For more information about these commands and their arguments, type
REAGENTC.EXE <command> /?.

  Examples:
    REAGENTC.EXE /setreimage /?
    REAGENTC.EXE /disable /?

Signature

Status: Signature verified.
Serial: 33000001733031072665B8B9B3000000000173
Thumbprint: 14590DC5C3AAF238FCFD7785B4B93F4071402C34
Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

Original Filename: reagentc.exe.mui
Product Name: Microsoft Windows Operating System
Company Name: Microsoft Corporation
File Version: 10.0.14393.0 (rs1_release.160715-1616)
Product Version: 10.0.14393.0
Language: English (United States)